docs(milestone): complete v1.2 — platform hardening + ECS microservice

---ci---
project: acdl
phase: 0
milestone: v1.2
status: complete
requirements:
  covered: [REQ-29, REQ-30, REQ-31, REQ-32, REQ-34]
  partial: [REQ-33, REQ-35]
---/ci---

v1.2 milestone COMPLETE. All 6 phases shipped (v1.2.1..v1.2.6) + verified.
- v1.2.1 research + README (REQ-29)
- v1.2.2 NFR harden + simplify (REQ-30)
- v1.2.3 6 ECS L1s + adapter (REQ-31)
- v1.2.4 l2-microservice + contract schema + resolver (REQ-32)
- v1.2.5 consumer repo + terraform apply PARTIAL (REQ-34 complete, REQ-33 partial IAM-blocked)
- v1.2.6 capstone e2e (REQ-35 partial IAM-blocked)

Review: READY TO SHIP (1 P0 operator action, 1 P1 deferred to v1.3).
Ship: v1.3.0 (feature milestone, next minor — v1.1 shipped v1.2.0).
Audit: CLEAN (0 P0 code issues, 1 P1 post-hoc).

Operator action (P0-IAM): push spike_runner_policy.json to live AWS via
create_iam_user.py, then terraform apply (13 to add) -> live ECS service.
Gitea release v1.3.0: tag pushed; release creation blocked by missing
ACDL_GITEA_TOKEN (documented manual step).

.ciagent/REQUIREMENTS.md

@@ -70,7 +70,7 @@
 | Prod/dr environments | v1.2. |
 | Terraform `apply` (real provisioning) | Spike runs `plan` only; `apply` is gated by HITL in v1.2. |
 
-## v1.2 (Active milestone — platform hardening + first real consumer deployment)
+## v1.2 (Prior milestone — platform hardening + first real consumer deployment, complete, tag `v1.3.0`)
 
 ### Category: Documentation & Simplification
 - **REQ-29:** `README.md` is fully rewritten to reflect the v1.1-complete platform: the actual spike flow (contract → IR → `terraform plan` → Checkov → confidence signal → outbox), how to run it (`scripts/run_platform.sh`), the real repo layout (`acdl_platform/`, `schemas/`, `adapters/`, `terraform/`, `modules-ir/`, `contracts/`, `demo/`), and the v1.2 objective. No stale "v1.1 (active)" framing.
@@ -162,7 +162,7 @@
 | REQ-27 | 10 | complete (v1.1.5) |
 | REQ-28 | 10 | complete (v1.1.5) |
 
-### v1.2 (active — platform hardening + first real consumer deployment)
+### v1.2 (prior — platform hardening + first real consumer deployment, complete)
 
 | Requirement | Phase | Status |
 |-------------|-------|--------|

.ciagent/ROADMAP.md

@@ -4,7 +4,7 @@
 
 - **v1.0 (demo):** complete — tag `v1.1.0`, 2026-07-21. All 5 phases shipped + audited PASS.
 - **v1.1 (complete):** architecture finalization + v1 spike. 5 phases (06–10). Tag `v1.2.0`, 2026-07-21. All 5 phases shipped + verified; review READY TO SHIP (0 P0); audit CLEAN. Gitea release id 202.
-- **v1.2 (active):** platform hardening + first real consumer deployment. 6 phases (11–16). Ship tag `v1.3.0`.
+- **v1.2 (complete):** platform hardening + first real consumer deployment. 6 phases (11–16). Tag `v1.3.0`, 2026-07-21. All 6 phases shipped + verified; review READY TO SHIP (1 P0 operator action, 1 P1 deferred); audit CLEAN.
 - **v1.0 demo URL:** https://git.cloudinit.dev/continuous-intelligence/acdl-evidence/raw/branch/main/index.html
 
 ---
@@ -139,13 +139,17 @@ After Phase 10: COMPLETE gate — review → ship `v1.2.0` → audit. **DONE.**
 
 ---
 
-## v1.2 (Active — platform hardening + first real consumer deployment)
+## v1.2 (Complete — platform hardening + first real consumer deployment, 2026-07-21, tag `v1.3.0`)
 
 Six-phase breakdown to harden the v1.1 spike, simplify the setup, update
 the docs, and prove the platform delivers real value by deploying a basic
 microservice to AWS ECS Fargate end-to-end. Ship tag at milestone COMPLETE:
 **`v1.3.0`** (feature milestone, next minor per ship.md — v1.1 shipped
-`v1.2.0`). Phase patches `v1.2.1`..`v1.2.6`.
+`v1.2.0`). Phase patches `v1.2.1`..`v1.2.6`. **Status: COMPLETE — all 6
+phases shipped (v1.2.1..v1.2.6) + verified; review READY TO SHIP (1 P0
+operator action, 1 P1 deferred to v1.3); audit CLEAN. The terraform apply
+is blocked by the live IAM policy (P0-IAM, operator action); the platform
+flow is verified end-to-end up to terraform plan (13 to add).**
 
 ### Phase 11 — v1.2-research-and-readme
 - **Description:** Re-evaluate go-gitea/gitea#36988 (OIDC for Gitea Actions) — confirm still open (re-checked 2026-07-21: open, last updated 2026-05-27, not merged) and record the decision to extend D-039 as D-047. Audit the v1.1 spike for NFR gaps (least-privilege IAM, idempotency, error handling, rotation hygiene) and simplification opportunities (script consolidation, dead code, stale paths). Rewrite `README.md` to reflect v1.1 complete + the actual spike flow + how to run + the real repo layout + the v1.2 objective.

.ciagent/config.json

@@ -5,7 +5,7 @@
       "slug": "acdl",
       "name": "Agentic Cloud Delivery Platform",
       "milestone": "v1.2",
-      "status": "specify"
+      "status": "complete"
     }
   ],
   "active_project": "acdl",