9 · Governance loops
Budget, SLO, and eval each close a loop that can stop a tenant. Recovery from the budget one is exclusively human.
Three control loops that can each stop a tenant: budget, SLO, and eval. The budget one is worth reading closely.
EventBridge cannot call a Kubernetes API, so the kill switch changes AWS state and lets the operator's existing reconcile loop find the change as drift. Nothing new is coupled to the cluster; the price is one reconcile interval of lag. Recovery is deliberately human — there is no API path back.
Drawn from its model, and rendered by the atlas project innanohype/.github.