docs(P00): create phase plans — v1.21 (7 phases)

PLAN.md v1.21 section: 5 execution phases + 1 final. Wave 1 parallelizable
(P1 strategic-docs, P2 slides, P4 pipeline-hardening — zero file overlap),
Wave 2 (P3 marp+README), Wave 3 (P5 render+verify), Wave 4 (P6 ship).
NFR milestone → tags on v1.20.x line (v1.20.0 P0 → v1.20.6 P6 final).

CLARIFY + RESEARCH minimal at full autonomy: domain is known, requirements
confirmed with user (deck title = Autonomous Cloud Delivery Platform;
thesis = AUTONOMY_THESIS.md; slide 1 = Problem→Solution→Proof→Roadmap+Ask;
Atelier split into 2 slides; CTO metrics = Lead Time + Vuln Trend + MTTR +
Spend; files renamed to nova-autonomous-cloud-delivery*).

---ci---
project: acdl
phase: 0
milestone: v1.21
status: plan
---/ci---

.ciagent/CHECKPOINT.json

@@ -1,11 +1,11 @@
 {
   "phase": 0,
-  "stage": "specify",
+  "stage": "plan",
   "milestone": "v1.21",
   "phase_role": "pre_execution",
   "attempts": 0,
-  "updated_at": "2026-08-11T00:00:00Z",
+  "updated_at": "2026-08-11T00:01:00Z",
   "milestone_complete": false,
   "requirements": ["REQ-245","REQ-246","REQ-247","REQ-248","REQ-249","REQ-250","REQ-251","REQ-252","REQ-253"],
-  "notes": "v1.21 milestone — Nova Deck Refinement & Pipeline Hardening. P0 specify stage: added v1.21 requirements (REQ-245..253), set active_milestone=v1.21 in config.json, synced PROJECT.md strategic-direction pillar for integration objective. 9 requirements, 6 execution phases planned (P1 strategic-docs, P2 slides, P3 marp+talking-points+README, P4 pipeline-hardening, P5 render+verify, P6 final-review-ship). Tags on v1.20.x line."
+  "notes": "v1.21 P0 plan stage complete. PLAN.md v1.21 section written. 5 execution phases (P1 strategic-docs, P2 slides, P3 marp+talking-points+README, P4 pipeline-hardening, P5 render+verify) + P6 final-review-ship. Wave 1 (P1/P2/P4 parallelizable), Wave 2 (P3), Wave 3 (P5), Wave 4 (P6). CLARIFY+RESEARCH minimal at full autonomy — domain known, requirements confirmed with user. Proceeding to P0 ship then execution."
 }

.ciagent/PLAN.md

@@ -1,3 +1,157 @@
+# Nova — Phase Plan v1.21 (Nova Deck Refinement & Pipeline Hardening)
+
+> **Milestone:** v1.21 — Nova Deck Refinement & Pipeline Hardening
+> **Branch:** `milestone/v1.21-deck-refinement` (flat workflow: commits on
+> main, tags on the v1.20.x line per branch-strategy)
+> **Tag line:** `v1.20.x` patch line — `v1.20.0` (P0) → `v1.20.1..v1.20.5`
+> (P1–P5) → `v1.20.6` (P6 final = milestone release). v1.21 is an NFR
+> milestone (all phases are docs/test/chore/refactor) → progressive patches.
+> **Phase count:** 7 (P0 pre-execution [DONE] + 5 execution + 1 final).
+> **Source of truth for requirements:** `.ciagent/REQUIREMENTS.md` §v1.21
+> (REQ-245..253, 9 requirements).
+> **Source of truth for decisions:** the 33 review notes in the v1.21
+> run context (encoded as REQ-245..253).
+> **Source of truth for research:** existing deck + pipeline + strategic
+> docs (the domain is known; no new research needed at full autonomy).
+
+## Wave Ordering
+
+All 5 execution phases are **sequenced** (flat workflow). The theoretical
+parallelism is documented for future parallelization-enabled runs.
+
+| Wave | Phases | Rationale |
+|------|--------|-----------|
+| Wave 1 | P1, P2, P4 (**parallelizable**) | P1 (strategic docs: NORTH_STAR, AUTONOMY_THESIS, PROJECT, scope, raci), P2 (slides source-of-truth rewrite + rename), P4 (pipeline hardening: Checkov/Wiz flow). Zero file overlap: P1 touches `.ciagent/` + `docs/scope.md` + `docs/raci.md`; P2 touches `docs/presentations/*.md`; P4 touches `scripts/run_*.sh` + `adapters/wiz/` + `tests/test_pipeline*.py`. In a parallelization-enabled run these three could execute concurrently. |
+| Wave 2 | P3 | Marp deck + talking points + README synthesis. Depends on P2's updated source-of-truth. Re-renders HTML+PPTX via `render_slides.sh`. Also fixes theme CSS A1 table + footer cleanup (REQ-251). |
+| Wave 3 | P5 | Render + verify. Depends on P2 (source), P3 (marp), P4 (pipeline). Re-renders mermaid PNGs (slide 1 new diagram, slide 9 expand, Atelier split), HTML, PPTX. Runs `test_slides_pipeline.py`, `test_no_forge_mentions.py`, full `pytest`, `run_platform.sh --check-only`. |
+| Wave 4 | P6 | Final review + audit + milestone ship. Merge to main, tag `v1.20.6`, create release, attach PPTX. |
+
+## Phase Summaries
+
+### Phase P0 — pre-execution (DONE)
+SPECIFY → CLARIFY → RESEARCH → PLAN. Validated v1.21 requirements
+(REQ-245..253). Established `active_milestone: "v1.21"`. Synced
+PROJECT.md strategic-direction pillar. No new research (domain known).
+
+### Phase P1 — strategic-docs (Wave 1)
+- `NORTH_STAR.md`: vision polish (item 11); obj #2 deterministic-scoring
+  reword (item 13); obj #3 four CTO metrics (item 14); obj #4 replaced
+  with integration objective (item 17); drop anti-goals 1,4,5; add 2 new
+  anti-goals (item 16); anti-goal #3 reworded (item 7).
+- `git mv .ciagent/NO_HUMANS_THESIS.md .ciagent/AUTONOMY_THESIS.md` +
+  reframe content (items 7, 8).
+- `PROJECT.md`: mission/scope sync for item 17 (already partially done
+  in P0; finalize here).
+- `docs/scope.md`: light sync.
+- `docs/raci.md`: rename Release Mgmt → SRE; add Quality Engineering role.
+- **REQs:** REQ-246, REQ-247 (partial).
+
+### Phase P2 — slides source-of-truth (Wave 1)
+- `git mv` all 5 deck files `nova-no-humans-platform*` →
+  `nova-autonomous-cloud-delivery*`.
+- Rewrite `nova-autonomous-cloud-delivery.md` (source of truth):
+  - Slide 1 "The Problem" (items 3,4,5,7,9): broader problem (devs writing
+    terraform, destructive changes, AI-era 0-day pace, bandwidth gaps,
+    tribal knowledge/rockstar operator); no arc; no "18 capabilities
+    verified"; not "humans are the problem".
+  - Slide 2 "Nova's Vision" (item 11): polish for technical audience;
+    "infrastructure operations become visible" as recurring theme.
+  - Slide 3 "Strategic Objectives + Anti-Goals" (items 12,13,14,15,16,17,
+    18): only Obj+Anti-Goals; provable trust = deterministic scripts
+    (functions without AI); ROI = Lead Time + Vuln Trend + MTTR + Spend;
+    drop anti-goals 1,4,5; add "not upstream dev platform", "not PDLC
+    replacement"; replace obj #4 with integration objective; reword benefit.
+  - Slide 4 "Scope" (item 29): refine (moved up).
+  - Slide 5 "RACI" (item 30): add QE column; reassign A from Platform →
+    QA/SRE; rename Release Mgmt → SRE; split release attestation (SRE =
+    Production Readiness); shrink to fit (moved up).
+  - Slide 6 "Pipeline" (item 20): Checkov on static code before plan;
+    Wiz on plan; no Wiz → Checkov on plan; never both.
+  - Slide 7 "Decision Ledger" (items 21,22): drop D-121/122/132; "AI
+    decisions = automated decisions"; focus on value (immutable,
+    queryable, accountable), not sqlite/hash-chain implementation.
+  - Slide 8 "Attestation Matrix" (item 23): drop bullets below table;
+    add Description column per concern; rethink "operator-supplied"
+    label; reword benefit.
+  - Slide 9 "Telemetry & Live Ops" (item 25): expand on value; keep
+    metric flow; drop D-120/125/126; expand on PowerBI live ops
+    dashboard; reword benefit.
+  - Slide 10 "Decision Ledger + Attestation Coverage" (item 27):
+    mandatory by design; no prod change without ledger + human
+    attestation; queryable for auditing; full traceability; improve
+    benefit.
+  - Slide 11 "Cost & ROI": minor polish.
+  - Slide 12 "What's Deferred — and Why" (items 10,19): remove all D-IDs;
+    plain-language blockers.
+  - Slide 13 "Roadmap to the North Star" (items 10,19): drop D-IDs; no
+    status column; roadmap with timelines.
+  - Slide 14 "12-Month Product Roadmap" (item 24): drop `planned` badges.
+  - Slide 15 "Quarter-by-Quarter Outcomes" (item 24): drop badges.
+  - Slide 16 "Production-Grade Guidance via Atelier (1/2)" (item 31):
+    split — Skills + MCP server overview.
+  - Slide 17 "Production-Grade Guidance via Atelier (2/2)" (item 31):
+    split — agentic validation beyond deterministic scanners + vendoring.
+  - Slide 18 "Recap + Ask": refresh recap to match new structure.
+  - Appendix A1 "Metrics Glossary" (item 32): table readability fixed
+    in P3 theme CSS.
+  - Global (items 6,10,24,2): tech-leadership benefits; no D-###/REQ-###/
+    .py paths in audience slides; no badges; no version in footer; final
+    "less is more / no fluff" prose pass.
+- **REQs:** REQ-245, REQ-248, REQ-249, REQ-252 (partial).
+
+### Phase P3 — marp deck + talking points + README (Wave 2)
+- `nova-autonomous-cloud-delivery-marp.md`: synthesize from updated
+  source; frontmatter — title "Nova — The Autonomous Cloud Delivery
+  Platform", footer without version + without "Act N/5", title-slide
+  subtitle "Product Development & Citizen Developer Overview", no badges.
+- `nova-autonomous-cloud-delivery-talking-points.md`: re-distill to
+  18-slide structure.
+- `docs/presentations/README.md`: update deck title, audience, slide
+  count (18 main + 1 appendix), directory layout, remove badge docs,
+  update deck table + render commands + filenames.
+- `docs/presentations/assets/nova-sp-theme.css`: fix Appendix A1 table
+  background (item 32); footer chrome no version.
+- Update `scripts/render_slides.sh`, `scripts/render_deck.sh`,
+  `workflows-src/slides.yml`, `.github/workflows/slides.yml`,
+  `tests/test_slides_pipeline.py` filename refs.
+- **REQs:** REQ-251, REQ-252 (partial).
+
+### Phase P4 — pipeline hardening (Wave 1)
+- `scripts/run_platform.sh` + `scripts/run_postapply.sh`: item 20 flow —
+  1. Checkov on static code (`main.tf`/TF dir) **before** `terraform
+     plan` → fail-fast dev feedback.
+  2. After plan: if `WIZ_API_TOKEN`+`WIZ_API_URL` → **Wiz against plan**;
+     else **Checkov against plan** (drop-in). **Never both.**
+- `adapters/wiz/wiz_adapter.py`: support plan-mode input if needed.
+- Tests: `tests/test_pipeline.py`, `tests/test_pipeline_contract.py`,
+  `tests/test_slides_pipeline.py`, checkov/wiz tests.
+- `docs/scope.md` policy-enforcement line + slide 6 reflect new flow.
+- `docs/METRICS.md` policy-stage description if changed.
+- **REQs:** REQ-250.
+
+### Phase P5 — render + verify (Wave 3)
+- Re-render changed/new mermaid diagrams (slide 1 new diagram, slide 9
+  expand, Atelier split) via `scripts/render_slides.sh`.
+- Render HTML + PPTX.
+- `tests/test_slides_pipeline.py` passes: 18 main + 1 appendix; no badges;
+  no version in footer; no D-###/REQ-###/.py paths in audience slides;
+  filename refs updated.
+- `tests/test_no_forge_mentions.py` passes.
+- Full `pytest` passes (pipeline-hardening tests green).
+- `run_platform.sh --check-only` passes.
+- **REQs:** REQ-253 (partial).
+
+### Phase P6 — final-review-ship (Final Phase, Wave 4)
+- Multi-persona code review across P1–P5.
+- Audit: git log vs `.ciagent/` discipline.
+- Ship: merge to main, tag `v1.20.6` (final patch = milestone release),
+  create release, attach PPTX.
+- Update `REQUIREMENTS.md` (v1.21 REQs complete) + `ROADMAP.md` (v1.21
+  complete). Clear `CHECKPOINT.json`.
+- **REQs:** REQ-253 (complete).
+
+---
+
 # Nova — Phase Plan v1.18 (Citizen Developer & Production-Grade Guidance)
 
 > **Milestone:** v1.18 — Citizen Developer & Production-Grade Guidance