annotate namespace to validate signatures
pass
fail
if necessary
Create Policy instance
Create Pod
policy evaluation
Admitted
Not admitted
Image Pull