An experimental Open Policy Agent policy to test ideas around how to verify one or more attestations exist on a Container Image before allowing that Container to run in a Kubernetes environment. Ultimately it could be a policy that executes using the OPA Admission Controller Kubernetes integration.