Hooking OPA into Coding Agents

We built Cupcake to enforce OPA/Rego policy on Claude Code hooks. Then we tested it with Trail of Bits and learned where it actually stops helping.