<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>Rego on Juergen Neulinger</title><link>https://juergen-neulinger.dev/tags/rego/</link><description>Recent content in Rego on Juergen Neulinger</description><image><title>Juergen Neulinger</title><url>https://juergen-neulinger.dev/images/og-give-up.png</url><link>https://juergen-neulinger.dev/images/og-give-up.png</link></image><generator>Hugo</generator><language>en-us</language><lastBuildDate>Tue, 18 Aug 2026 11:12:43 +0200</lastBuildDate><atom:link href="https://juergen-neulinger.dev/tags/rego/index.xml" rel="self" type="application/rss+xml"/><item><title>MCP Gateway 2/3: Three layers of policy</title><link>https://juergen-neulinger.dev/posts/mcp-gateway-02-three-layers-of-policy/</link><pubDate>Tue, 18 Aug 2026 11:12:43 +0200</pubDate><guid>https://juergen-neulinger.dev/posts/mcp-gateway-02-three-layers-of-policy/</guid><description>Splitting MCP authorization across three Rego layers with three owners — platform, domain team, tool owner — so that no team can widen another team&amp;#39;s grant.</description></item></channel></rss>