Tested - but not fully deployed yet. I have to get Jenkins working first to start dogfeeding the cluster new images it can utilize.
That said, just launch into an alpine-golang image (im sure this exists), mount this whole thing in /app/policy, point strfry to run /app/policy/policy_impl and you're good to go!

I can probably implement a sidecar container down the line that watches for changes and recompiles the utility on the fly - it's not a whole lot. :)
Now then... Off to fix Jenkins! I _need_ it.