Open-source policy engine that blocks bad AWS spending patterns before they ship and remediates what's already burning.