Author here. Built this solo. With having AI write boilerplate/tests/docs. The parts I'd most want scrutiny on, these claims of mine: 1) mTLS 4-tier architecture over a token-based scheme : instead of copy-pasting a token into every agent's config by hand, each agent requests its own enrollment and gets approval, and what it holds afterward can't be copy-pasted and replayed the way a bearer token can. 2) for policy engine i used OPA/Rego, so it's a well-known language and easier to write complex policies.