Network Segmentation in a Synthetic Healthcare Kubernetes Lab

I tested whether Kubernetes NetworkPolicies could enforce a declared service dependency graph in a synthetic healthcare Kubernetes testbed while preserving every required connection. Using CleanHealth System Lab, a 16 GB MacBook Air running eight benign HTTP services across six namespaces, I completed five paired runs comparing an unrestricted laboratory mesh against dependency-based segmentation, recording 1,680 observations.