Open Policy Agent

OPA is a general-purpose policy engine using Rego for any domain including Kubernetes and microservices. It is extremely flexible yet requires writing low-level policies. AuthZed abstracts common authorization patterns with a higher-level schema language and provides enterprise ReBAC features plus AI retrieval support that OPA does not target natively.