Proxies (Edge Enforcement)

FaburAI never sits in your request path. Instead, an Envoy + OPA Enforcer in your cluster pulls the policy bundle every 30s and enforces locally.

Onboard a proxy — pick Envoy/NGINX/Istio/Kong/FaburAI-managed, set the namespace and size, copy the generated YAML, kubectl apply.

Bundle refresh — sub-30-second propagation from policy save to enforcement. No restarts, no traffic blips.