From e6a7f84c622f209fc8e484101740cd955a0894f4 Mon Sep 17 00:00:00 2001
From: Jon Chery <jchery@jccapital.xyz>
Date: Tue, 21 Jul 2026 13:14:45 +0000
Subject: [PATCH] feat(P02): l1-iam-role manifest + mock_apply (T-2.2)

---ci---
phase: 2
milestone: v1.0
status: execute
persona: infra-stub-engineer
task: T-2.2
requirements:
  covered: [REQ-02, REQ-03]
---/ci---

Wave 1, task T-2.2. Creates modules/l1/l1-iam-role/ with manifest.yaml
(flat inputs per D-017) and the uniform mock_apply.sh (D-007 + D-018).
---
 modules/l1/l1-iam-role/manifest.yaml | 10 ++++++++++
 modules/l1/l1-iam-role/mock_apply.sh |  6 ++++++
 2 files changed, 16 insertions(+)
 create mode 100644 modules/l1/l1-iam-role/manifest.yaml
 create mode 100755 modules/l1/l1-iam-role/mock_apply.sh

diff --git a/modules/l1/l1-iam-role/manifest.yaml b/modules/l1/l1-iam-role/manifest.yaml
new file mode 100644
index 0000000..13ea521
--- /dev/null
+++ b/modules/l1/l1-iam-role/manifest.yaml
@@ -0,0 +1,10 @@
+name: l1-iam-role
+kind: l1
+description: Identity and access role primitive
+inputs:
+  role_name:
+    description: Name of the IAM role to create
+    type: string
+  trust_policy:
+    description: JSON trust policy document defining who can assume the role
+    type: string
\ No newline at end of file
diff --git a/modules/l1/l1-iam-role/mock_apply.sh b/modules/l1/l1-iam-role/mock_apply.sh
new file mode 100755
index 0000000..fe48862
--- /dev/null
+++ b/modules/l1/l1-iam-role/mock_apply.sh
@@ -0,0 +1,6 @@
+#!/usr/bin/env bash
+set -euo pipefail
+echo "[L1: l1-iam-role] applying..."
+sleep 1
+echo "[L1: l1-iam-role] OK"
+exit 0
\ No newline at end of file