RFC: Adding a new keyword for universal quantification: every

[srenatus]

Today, Rego does not include a direct way of expressing universal quantification (FOR ALL). As a result, users have to learn basic logical axioms to express relatively simple policies. We're planning to add a new keyword ("every") for Rego that would provide a direct way to express FOR ALL inside of rules. The new keyword should make it easier to read and write policies that require FOR ALL. Moreover, we hope the new keyword will enable "allowlist" style policies for infrastructure use cases (Kubernetes, Terraform, etc.)

📢 Please have a look at 👉 this document 👈 outlining the every keyword and how it’s going to work. Don’t hesitate to comment on the doc, in this discussion or on slack!