I think OPA belongs in the top layer but I don't think it fits in any of the existing subcategories.  In fact I feel that way about all three.

---- Nick

On Wednesday, November 15, 2017, Alexis Richardson via cncf-toc <cncf-toc@...> wrote:

All,

Question about the landscape.

https://raw.githubusercontent.com/cncf/landscape/master/landscape/CloudNativeLandscape_latest.jpg

- do we want to put OPA in the top layer, either inside, or next to App Def?

- what about identity - spiffe and spire?

- do we think key management should move to top layer?

a