Network policy simulator

Answer “can pod A reach pod B?” before you ship a policy. Kubius evaluates the cluster's NetworkPolicies and explains the verdict for each direction.

• Clear reachable / blocked verdict for any source → target pair
• Separate egress and ingress explanations, naming the responsible policies
• Full pod- and namespace-selector matching, ipBlocks and ports
• Catches accidental isolation and over-permissive default-allow