What is the Open Policy Agent (OPA)?

Why this is the answer

OPA is a general-purpose engine that evaluates policies to return decisions, letting services offload authorization and configuration rules to one place. It is not a compiled-in admission controller (Gatekeeper adapts OPA for that), not an image scanner, and not a secrets manager.