Add four practitioner posts on policy evaluation and admission

[om986]

Summary

• Adds four posts aimed at queries the service-guide catalog does not answer: SCP vs RCP evaluation order, IRSA trust-policy aud mistakes, Azure Blueprint locks (deny assignments removed 31 January 2027), and Kyverno vs ValidatingAdmissionPolicy.
• Links each one from the related post that already ranks, and corrects the RCP page: RCPFullAWSAccess cannot be detached, so an RCP narrows access only with Deny. Notes that MutatingAdmissionPolicy is GA in Kubernetes 1.36.

Test plan

• Open each new post and confirm the title, checklist, and related links render
• From the RCP, IRSA, landing-zone deny, and ValidatingAdmissionPolicy posts, follow the new link
• Confirm FAQ JSON-LD is present (view source, FAQPage)
• Confirm the four posts appear on /blog/

Made with Cursor

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
website	Ready	Preview	Oct 2, 2026 2:42pm UTC

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 21105d37-ebb0-46da-aa8b-dc1098865bdc

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Autopilot is currently an internal CodeRabbit preview.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}