Zero-Trust Security on Istio

A deep walkthrough of building an end-to-end zero-trust security system on Istio. Each post focuses on one layer, the attack surface it addresses, the pattern that solves it, and real config from a working Kind cluster. Covers mTLS, signed mesh tokens, Envoy/ExtAuthz, Cerbos, PostgreSQL RLS, and Vault Transit signing.