Skip to content

9 · Governance loops

Budget, SLO, and eval each close a loop that can stop a tenant. Recovery from the budget one is exclusively human.

9 · Governance loops — Budget, SLO, and eval each close a loop that can stop a tenant. Recovery from the budget one is exclusively human.

Three control loops that can each stop a tenant: budget, SLO, and eval. The budget one is worth reading closely.

EventBridge cannot call a Kubernetes API, so the kill switch changes AWS state and lets the operator's existing reconcile loop find the change as drift. Nothing new is coupled to the cluster; the price is one reconcile interval of lag. Recovery is deliberately human — there is no API path back.

Drawn from its model, and rendered by the atlas project innanohype/.github.