Open Source Summit Korea 2026

Tom and Jerry has run for over 80 years. Every episode follows the same plot: Tom builds an elaborate trap, Jerry walks straight through it, the house is destroyed, and the owner blames Tom. Sound familiar?

This talk is structured exactly like a Tom and Jerry cartoon except Tom is OPA and Jerry is your AI agent. Jerry is not malicious. He just wants the cheese. He will find every gap in every policy, squeeze through every webhook, and retreat to his mouse hole (MCP) the moment Tom gets close. The audience will root for Jerry. Jerry is still the problem.

We walk through three episodes. Episode one: Jerry discovers he can call kubectl delete and Tom's first policy stops him — but not before he's renamed two deployments. Episode two: Jerry finds a namespace Tom forgot to cover and provisions a GPU node at $8/hour. Episode three: Jerry and Tom finally cooperate — the agent runs a legitimate right-sizing workflow, OPA approves every step, and the cluster is actually better for it.


You'll leave with an OPA policy library for agentic tool-call governance, Argo Workflows, and a threat model built from real agent misbehaviour.