Huzefaaa2/terraform-guardrail

Operates outside the Terraform execution layer using OPA bundles for policy evaluation, enabling platform teams to enforce baseline invariants while product teams retain autonomy above the safety floor. Integrates natively with GitHub Actions, GitLab CI, and AWS CodePipeline, plus provides REST API, CLI, and Streamlit UI for multi-cloud environments (AWS, Azure, GCP, Kubernetes, etc.). Supports progressive enforcement modes—Advisory, Warn, Strict—allowing phased rollout without blocking workflows, while automatically generating audit evidence and human-readable compliance reports at merge-request time.