Hangar runs the open source agent with no control plane, on purpose. These are the four places where that floor was lower than the docs suggested, and what I built on top of it.
Fair trade
Open core means the paid features are paid. I'd rather know exactly where the line is than guess, so I read the source.
Policy fills the gap
RBAC decides who can edit a Secret, not which Secret a pod may mount. An admission policy closes that, at the one point where the caller is still known.
Reversible
With a control plane connection, per-namespace runs come back and the shared namespace and its policy simply have nothing left to do.