Observe
Parse what the workload actually declares, without inventing cluster state or implied defaults.
Sidecar dependency intelligence
Turn workload YAML into a local Sidecar BOM, then find mutable images, missing limits, absent probes, and drift-prone dependencies.
Workload scanner
The scanner inventories likely sidecars across one or more Kubernetes YAML documents, then explains its bounded static checks. Your configuration stays in this tab.
We’ll inspect container image hygiene, resource policy, health probes, and common sidecar patterns.
Initial watchlist
A curated starting set of common operational companions. Release and advisory monitoring will deepen as the Factory gathers evidence.
How to read the signal
Parse what the workload actually declares, without inventing cluster state or implied defaults.
Connect each finding to a concrete failure mode and show the smallest useful correction.
Build a dated evidence trail as releases, advisories, and recommended configurations change.