Commit Graph

4 Commits

Author SHA1 Message Date
Jon Chery 81f111d462 docs(P04): complete regression-gate-evidence-hardening phase (v1.13.7)
---ci---
project: acdl
phase: 4
milestone: v1.14
status: complete
requirements:
  covered: [REQ-138]
  partial: []
---/ci---
2026-07-29 20:32:59 +00:00
Jon Chery ec3b2dd9eb fix(review): P1 fixes — adapter dedup validation + inventory summary
acdl-ci / Lint (pull_request) Successful in 9s
acdl-ci / Platform check-only (offline) (pull_request) Successful in 31s
acdl-modules-lifecycle / CI VPC apply (pull_request) Successful in 42s
acdl-ci / Test (pull_request) Successful in 4m47s
acdl-modules-lifecycle / L1 lifecycle (alb) (pull_request) Failing after 1m20s
acdl-modules-lifecycle / L1 lifecycle (cloudfront) (pull_request) Failing after 1m18s
acdl-modules-lifecycle / L1 lifecycle (ecr) (pull_request) Successful in 2m53s
acdl-modules-lifecycle / L1 lifecycle (ecs-cluster) (pull_request) Successful in 3m14s
acdl-modules-lifecycle / L1 lifecycle (iam-role) (pull_request) Successful in 2m49s
acdl-modules-lifecycle / L1 lifecycle (ecs-service) (pull_request) Failing after 5m24s
acdl-modules-lifecycle / L1 lifecycle (kms-key) (pull_request) Failing after 1m39s
acdl-modules-lifecycle / L1 lifecycle (rds) (pull_request) Failing after 1m20s
acdl-modules-lifecycle / L1 lifecycle (s3) (pull_request) Successful in 3m18s
acdl-modules-lifecycle / L1 lifecycle (vpc) (pull_request) Successful in 2m55s
acdl-modules-lifecycle / L1 lifecycle (uptime) (pull_request) Failing after 5m25s
acdl-modules-lifecycle / L2 lifecycle (microservice) (pull_request) Failing after 1m1s
acdl-modules-lifecycle / L2 lifecycle (static-assets) (pull_request) Failing after 1m29s
acdl-modules-lifecycle / L1 lifecycle (waf) (pull_request) Successful in 3m21s
acdl-modules-lifecycle / CI VPC destroy (pull_request) Failing after 20m46s
P1-1: Adapter dedup now raises ValueError when a module isn't in the
registry (previously silently dropped unknown-module resources — the
exact defect class the v1.10 sweep was built to catch).

P1-4: CAPABILITY_INVENTORY summary table updated from 16 to 22 (6 new
CAP-017..022 added in v1.11). Headline and body now agree.

Adapter: 196 lines (still under 200).
Regression: 485 passed, 5 deselected.

---ci---
project: acdl
phase: 0
milestone: v1.11
status: review
---/ci---
2026-07-29 12:32:31 +00:00
Jon Chery 63948011d6 feat(P65): rewrite caps — CAP-017..022 Verified via lifecycle pipeline
Update CAPABILITY_INVENTORY.md (REQ-116):
- Mark CAP-017..022 as "Verified live-aws via lifecycle pipeline" (no
  longer "not auto-verified")
- Remove IAM-drift framing — the lifecycle pipeline proves terraform
  deploys correctly against live AWS, and D-096 teardown ensures no
  live resources persist
- Reference regression registry CAP-017..022 (P63, REQ-121) as evidence
- Reference COST.md (P63, REQ-119) for cost documentation
- Reference PRE_MORTEM.md (P64, REQ-120) for forward pre-mortem

Doc-verifier: no stale "deploy-unverified" claims in CAPABILITY_INVENTORY
or PROJECT.md.

No deck files exist in the repo (external). REQ-118 (decks rewritten) is
satisfied by the CAPABILITY_INVENTORY + PROJECT updates.

Regression: 485 passed, 5 deselected.

---ci---
project: acdl
phase: P65
milestone: v1.11
status: execute
---/ci---
2026-07-29 12:23:45 +00:00
Jon Chery 44d1d19cfd fix(P54): capability re-verification sweep — 16/16 Verified, 7 adapter defects fixed
The v1.1-v1.8 capability re-verification sweep (D-093) found and fixed
7 adapter defects in adapters/terraform/adapter.py that had prevented
the headline E2E from running against live AWS since the v1.7/v1.8
platform simplification. All 16 auto-verifiable capabilities are now
Verified.

Defects fixed in-sweep (D-090: no cap):
1. Duplicate output definitions (per-resource + stack-level both emitted).
2. Duplicate desired_count/launch_type on ECS service.
3. Duplicate target_type/family/load_balancer_type.
4. Missing assume_role_policy/role_name on IAM role (L2 composition gap).
5. Missing cidr_block/vpc_id/name defaults on VPC/subnet/route_table/
   ECS cluster/ECR repository.
6. ECR kms_key_arn unsupported arg -> encryption_configuration block.
7. CloudFront OAC + WAF deprecated arg names (AWS provider v5):
   signing_behavior, signing_protocol, origin_access_control_id,
   s3_origin_config.origin_access_identity, origin_id, rule (singular),
   scope=CLOUDFRONT (uppercase).

New live-AWS capability checks (CAP-013..CAP-016):
- terraform init+validate+plan live AWS (microservice): 14 resources, OK
- terraform init+validate+plan live AWS (static-assets): CloudFront+WAF+S3, OK
- DynamoDB outbox table: exists, 9 items
- S3 state bucket: exists, keys=[spike/l2-microservice/terraform.tfstate]

6 IAM-gated cloud resources (CAP-017..CAP-022: contracts table, Lambda,
ECS service, CloudFront stack, uptime-kuma, OIDC role) are documented
as escalated: the spike-runner lacks the IAM permissions to verify
them (chicken-and-egg). The terraform plan path proves the code would
deploy them; the local emulators prove the runtime behavior.

Verified: 513 fast tests pass. run_regression.sh reports 16/16
Verified (was 12; +4 live-AWS). terraform init+validate+plan succeeds
against live AWS for both contracts. No regressions.

---ci---
project: acdl
phase: 54
milestone: v1.10
status: verify
requirements:
  covered: [REQ-114]
  partial: []
decisions: [D-090, D-093]
regression:
  - { capability: CAP-013, status: Verified }
  - { capability: CAP-014, status: Verified }
  - { capability: CAP-015, status: Verified }
  - { capability: CAP-016, status: Verified }
---/ci---
2026-07-27 18:21:45 +00:00