Build declarative, secure, and verifiable Kubernetes abstractions