# Enforce > Use when setting up or reviewing policy-as-code enforcement — writing Kyverno or OPA policies, configuring branch protection, generating SLSA provenance, or planning a phased SDLC hardening rollout. - Skill: `adaptive-enforcement-lab/enforce` (Agent Skill, multi-file: 36 files) - Install (CLI): `npx skillmds@latest add adaptive-enforcement-lab/enforce` - Raw SKILL.md: https://api.skillmd.com/api/skills/adaptive-enforcement-lab/enforce/raw - Safety review: pending (external: skill-scanner PASS, skillspector PASS) - Works with: Claude Code, Claude.ai, OpenAI Codex - Category: Coding & Dev Tools - Author: adaptive-enforcement-lab (https://skillmd.com/u/adaptive-enforcement-lab) - Updated: 2026-09-22 - Page: https://skillmd.com/skills/adaptive-enforcement-lab/enforce --- # Enforce ## Overview Making security mandatory through automation. ## Branch Protection Enforcement Patterns Comprehensive branch protection configuration patterns with… ## Implementation Roadmap Phased rollout plan for SDLC hardening. - [Phase 1: Foundation (Weeks 1-4)](library/implementation-roadmap/hardening-checklist/phase-1/index.md) — Deploy pre-commit hooks for secrets detection… - [Phase 2: Automation (Weeks 5-8)](library/implementation-roadmap/hardening-checklist/phase-2/index.md) — Automation phase SDLC hardening overview. - [Phase 3: Runtime (Weeks 9-12)](library/implementation-roadmap/hardening-checklist/phase-3/index.md) — Runtime enforcement phase overview. - [Phase 4: Advanced (Month 4+)](library/implementation-roadmap/hardening-checklist/phase-4/index.md) — Audit evidence collection and compliance validation. - [SDLC Hardening Implementation Roadmap](library/implementation-roadmap/hardening-checklist/index.md) — Deploy defense-in-depth SDLC hardening across four… ## Incident Readiness - [Incident Response Playbook Templates](library/incident-readiness/playbook-library/index.md) — Incident response playbook templates for Kubernetes. ## Policy-as-Code: End-to-End Enforcement Enforce security and compliance policies across… - [CI Integration: Automated Policy Enforcement](library/policy-as-code/ci-integration/index.md) — Block non-compliant manifests at merge time… - [JMESPath for Kyverno](library/policy-as-code/template-library/jmespath/index.md) — Master JMESPath for Kyverno policies. - [Kyverno Basics](library/policy-as-code/kyverno/index.md) — Install Kyverno, create validation policies, and… - [Kyverno Generation Templates](library/policy-as-code/template-library/kyverno/generation/index.md) — Kyverno generation policy templates that auto-create… - [Kyverno Image Validation Templates](library/policy-as-code/template-library/kyverno/image/index.md) — Kyverno image validation: registry allowlists, digests… - [Kyverno Mutation Templates](library/policy-as-code/template-library/kyverno/mutation/index.md) — Kyverno mutation policies that auto-inject labels… - [Kyverno Network Security Templates](library/policy-as-code/template-library/kyverno/network/index.md) — Kyverno network security policies that enforce… - [Kyverno Pod Security Templates](library/policy-as-code/template-library/kyverno/pod-security/index.md) — Kyverno pod security policies enforcing Pod… - [Kyverno Policy Templates](library/policy-as-code/template-library/kyverno/index.md) — Kyverno policy templates overview. - [Kyverno Resource Governance Templates](library/policy-as-code/template-library/kyverno/resource/index.md) — Kyverno resource governance policies enforcing CPU/memory… - [Local Development with Policy-as-Code](library/policy-as-code/local-development/index.md) — Run Kyverno policy validation locally with… - [Multi-Source Policy Aggregation](library/policy-as-code/multi-source-policies/index.md) — Aggregate Kyverno policies from security, DevOps… - [OPA Image Security Templates](library/policy-as-code/template-library/opa/image/index.md) — OPA image security policies for container… - [OPA Pod Security Templates](library/policy-as-code/template-library/opa/pod-security/index.md) — OPA pod security policies preventing privileged… - [OPA Policy Templates](library/policy-as-code/template-library/opa/index.md) — OPA Gatekeeper policy templates overview. - [OPA RBAC Templates](library/policy-as-code/template-library/opa/rbac/index.md) — OPA RBAC policies preventing cluster-admin privilege… - [OPA Resource Governance Templates](library/policy-as-code/template-library/opa/resource/index.md) — OPA resource governance policies enforcing CPU/memory… - [Policy Packaging](library/policy-as-code/policy-packaging/index.md) — Build policy-platform containers that aggregate Kyverno… - [Policy-as-Code Operations](library/policy-as-code/operations/index.md) — Manage Kyverno policy lifecycle from creation… - [Policy-as-Code Template Library](library/policy-as-code/template-library/index.md) — Production-ready policy template library: 48 battle-tested… - [Runtime Deployment: Admission Control with Kyverno](library/policy-as-code/runtime-deployment/index.md) — Deploy Kyverno admission control as final… ## Required Status Checks CI/CD pipelines as merge gates. ## SLSA Implementation Playbook Complete SLSA implementation playbook: clarify SLSA… - [SLSA Provenance: Toolchain Integration](library/slsa-provenance/toolchains/index.md) — SLSA provenance for Go, Node. ## Full Reference Full text: [reference.md](reference.md). Raw sources: [library/](library/). Live: [docs](https://adaptive-enforcement-lab.com/enforce/).