Keeper · fleet policy

Policy that
enforces itself.

Keeper turns security policy into running code — applied across the fleet, verified on every change, and audited without a spreadsheet.

rotate-keys.policy.tsfleet: 214drift: 0audit: clean
// One rule, applied fleet-wide.export const policy = rule("rotate-keys", {  every: "30d",  scope: fleet.filter((s) => s.exposed),  onApply: (s) => s.rotate({ grace: "24h" }),}); await enforce(policy);   // 214 services, 0 drift