Delivering modern applications consistently across clouds, data centers, and disconnected networks is one of the hardest problems in the Kubernetes ecosystem. Developers and operators are often forced to choose between speed and security, convenience and control. But what if there were a way to package everything your application needs - from containers and manifests to policies, SBOMs, and configurations - into a single, verifiable artifact that just works anywhere?

In this hands-on tutorial, participants will learn how to use Zarf, an OpenSSF Sandbox Project that enables deterministic, portable software delivery. Together we’ll explore how to build a “batteries-included” application package, sign and verify its contents, and deploy it in both connected and airgapped environments. Along the way, attendees will gain insight into secure software delivery paradigms, provenance, and reproducibility all grounded in real-world, practical workflows.