1fd37a2843
feat(P23): tagging standard + Wiz adapter + Kyverno adapter
...
Phase 23 (v1.7) — tagging standards and security adapters.
* schemas/tagging-standard.json (D-054): canonical required-tags schema
(acdl:owner, acdl:contract, acdl:environment, acdl:cost-center).
* adapters/terraform/policy/custom_rules/acdl_tagging.py: Checkov custom
rule (ACDL_TAG_NAMING) loaded via --external-checks-dir; closes D-043
(synthetic SKIPPED record replaced by real PASS/FAIL records).
* checkov_adapter.py: removed _emit_tag_naming_skipped(), added
ACDL_TAG_NAMING to RULE_MAP, updated docstring.
* scripts/run_platform.sh: both Checkov invocations pass
--external-checks-dir adapters/terraform/policy/custom_rules/.
* adapters/wiz/ (D-052): Wiz adapter translating issue records to
PolicyCheckResult (engine: "wiz"); graceful degradation emits
WIZ_NOT_CONFIGURED SKIPPED when unconfigured; is_configured() gate.
* adapters/kyverno/ (D-053): Kyverno adapter translating PolicyReport
results to PolicyCheckResult (engine: "kyverno"); ready but inactive
for Terraform-only stacks; 3 sample ClusterPolicies in policies/.
* schemas/policy_check_result.schema.json: engine enum += "wiz".
* tests: fixtures + test_wiz_adapter.py (8 tests) + test_kyverno_adapter.py
(13 tests); updated test_checkov_adapter.py to not expect the removed
synthetic ACDL_TAG_NAMING SKIPPED record.
* scripts/run_ci.sh: lint stage compiles the new adapter modules.
202 tests pass; CI pipeline OK (lint + test + check-only).
Deviations:
- Wiz adapt() had an AttributeError on bare-list top-level input
(data.get() on a list); fixed to dispatch on isinstance(data, list)
before calling .get(). No spec change — bare-list handling is implied
by the original docstring's "data if isinstance(data, list)" branch.
- Kyverno _to_pcr({}) defaults result to "skipped" (entry.get("result",
"skip") -> "skip"), not "error"; test expectation corrected. Added an
explicit unknown-result-string test to cover the "error" fallback.
---ci---
project: acdl
phase: 23
milestone: v1.7
status: execute
---/ci---
2026-07-22 20:00:46 +00:00
dca35c78ec
feat(P22): rename static-asset→static-assets + cloudfront/waf primitives + production stack + @v1.6 bump
...
---ci---
phase: 22
title: rename-and-production-static-assets-stack
status: complete
verification:
- scripts/run_ci.sh: PASS (CI PIPELINE OK)
- python3 -m pytest tests/ -v: 175 passed
- scripts/run_platform.sh --check-only: PASS (PLATFORM CHECK OK)
- grep -R "static-asset[^s]" . (excl .git/): 0 hits
- grep -R "static-asset$" . (excl .git/): 0 hits
- floating git tags v1.6 + v1 point at v1.6.0 (a90a756
2026-07-22 19:56:52 +00:00
2732abb23f
docs(P22-27): research findings + 6 phase plans
...
---ci---
project: acdl
phase: 22-27
milestone: v1.7
status: research
---/ci---
v1.7 RESEARCH addendum: the domain is the existing codebase + the user's
12 explicit scope axes. No external research needed — all decisions
(D-048..D-059) are internal architecture choices already grounded in the
codebase (the Checkov adapter pattern, the contract schema, the Terraform
adapter TYPE_MAP, the environment onboarding scaffold, the deploy workflow).
Key research conclusions (recorded in PERSONAS.md):
- lambda-engineer custom persona added (phase-specific, v1.7 only).
- platform-engineer territory expanded: cloudfront, waf, rds, platform
Terraform (Lambda + DynamoDB + KMS + Secrets Manager + Function URL).
- security-engineer territory expanded: custom_rules/, adapters/wiz/,
adapters/kyverno/, schemas/tagging-standard.json.
- backend-engineer territory expanded: output_publisher, post_stage_comment,
platform-test/primitives-plan/patterns-plan/release workflows.
- Domain priority: coordination -> security -> platform -> backend ->
lambda -> frontend.
PLAN: 6 phases (22-27), 14 requirements (REQ-62..REQ-75), vertical slices
ordered by dependency:
P22 rename + production stack (REQ-62,63,64) — no deps beyond v1.6.
P23 tagging + Wiz + Kyverno (REQ-65,66,67) — depends on P22 (adapter).
P24 Lambda + ingestion (REQ-68) — depends on P23 (schema enum).
P25 outputs + error reporting + stage comments (REQ-69,70,71) — depends
on P24 (Lambda).
P26 3 pipelines + release job (REQ-72,73) — depends on P25 (deploy stages).
P27 remove consumer-repos + examples + RDS (REQ-74,75) — depends on P26
(platform-test schema-validation stage validates examples).
Feature milestone -> ship v1.7.0 (next minor; v1.6 shipped v1.6.0).
2026-07-22 19:47:21 +00:00
b026d5f041
docs(P0): clarify v1.7 — 12 decisions resolved
...
---ci---
project: acdl
phase: 0
milestone: v1.7
status: clarify
decisions:
- id: D-048
decision: rename static-asset -> static-assets everywhere including .ciagent/ historical narrative (overrides v1.6 preservation precedent)
rationale: user chose full rewrite; maximally consistent; reconstruction test updated to expect static-assets
confidence: 0.95
alternatives: [rewrite references only, preserve verbatim phase descriptions]
- id: D-049
decision: production stack = S3 + CloudFront (OAC) + WAF (domain-free)
rationale: self-contained production edge; Route53/ACM are domain-dependent and deferred to documented extension points
confidence: 0.90
alternatives: [S3 + CloudFront only, full edge incl. Route53 + ACM]
- id: D-050
decision: outputs via SSM SecureString (KMS-encrypted) + GitHub PR comment / job summary
rationale: two canonical mechanisms; SSM for runtime-injectable values; PR comment for developers; no raw secrets in logs
confidence: 0.90
alternatives: [SSM only, PR comment only]
- id: D-051
decision: contract ingestion storage = DynamoDB table acdl-contracts (PK consumerRepo, SK contractId#submittedAt, SSE via CMK, PITR)
rationale: enables historical queries, impact analysis, CMDB-style queries, pattern detection; S3 flat-file mirror deferred
confidence: 0.85
alternatives: [S3 flat files only, both S3 source + DynamoDB index]
- id: D-052
decision: Wiz adapter = stub + schema path (no live Wiz tenant in CI)
rationale: matches Checkov adapter pattern; typed interface, offline-testable, degrades gracefully when unconfigured
confidence: 0.90
alternatives: [full live integration]
- id: D-053
decision: Kyverno adapter = K8s-native policy adapter translating PolicyReport -> PolicyCheckResult; inactive for Terraform-only stacks
rationale: platform emits Terraform not K8s manifests; adapter ready for GitOps reconciler roadmap item; sample policies included
confidence: 0.85
alternatives: [Kyverno-as-Terraform-policy]
- id: D-054
decision: tagging standard = required-tag set (acdl:owner, acdl:contract, acdl:environment, acdl:cost-center) enforced by Checkov custom YAML rule
rationale: closes D-043 deferral (SKIPPED placeholder -> real check); naming-convention regex deferred (brittle across AWS resource types)
confidence: 0.90
alternatives: [required + naming convention]
- id: D-055
decision: error reporting = platform Lambda report_error action creates GitHub issue on platform repo; Gitea excluded
rationale: uniform pathway via Lambda; consumer onboarding-granted Lambda-invoke permission is the only grant needed; no separate GitHub issues:write on consumer side; Gitea is CIAgent-only
confidence: 0.85
alternatives: [auto-create issue on platform repo directly, Slack/Teams webhook, email via SES]
- id: D-056
decision: ship v1.7.0; bump uses: from @v1.4 to @v1.6
rationale: consumer-facing version tracks last released MAJOR.MINOR; consumers on @v1.4 stay on v1.4 behavior until they bump
confidence: 0.90
alternatives: [ship v1.7.0 keep uses: at @v1.4]
- id: D-057
decision: uses:/ref: bump + floating v1.6/v1 tag creation in Phase 22 (pointing at v1.6.0); release job (Phase 26) owns ongoing updates
rationale: reference never points at a non-existent tag; sequencing avoids a temporarily broken reference
confidence: 0.90
alternatives: [bump in Phase 26, keep @v1.4 until milestone ship]
- id: D-058
decision: module examples = separate validated files in modules/<name>/examples/ validated against contract schema in platform-test pipeline
rationale: examples cannot drift from schema silently; README references + excerpts them
confidence: 0.85
alternatives: [inline YAML in README only]
- id: D-059
decision: add RDS primitive (modules/l1/rds/) with engine input (enum: postgres, mysql, etc.) + multi-engine example
rationale: concrete demonstration of multi-engine variation the requirement calls out; adds one primitive + examples
confidence: 0.80
alternatives: [illustrative only - document variations on existing modules]
---/ci---
12 ambiguities resolved at the CLARIFY stage (full autonomy — all within
locked constraints or user-directed scope). Decisions D-048..D-059
recorded in PROJECT.md Key Decisions (v1.7) table.
2026-07-22 19:47:16 +00:00
fee59944fd
docs(init): validate v1.7 specification
...
---ci---
project: acdl
phase: 0
milestone: v1.7
status: specify
---/ci---
v1.7 milestone: production platform + contract ingestion + pipeline
maturation. 12 user-directed scope axes (2026-07-22):
1. rename static-asset -> static-assets (D-048)
2. production-ready static-assets stack (cloudfront + waf, D-049)
3. DX-friendly deploy outputs (SSM + PR comment, D-050)
4. central pipeline error reporting via Lambda (D-055)
5. PR comments after every successful stage
6. three platform pipelines (platform-test, primitives-plan, patterns-plan)
7. release job with semver + MAJOR.MINOR/MAJOR tag updates (D-057)
8. platform Lambda + DynamoDB contract ingestion (D-051)
9. tagging standards (Checkov custom rule, D-054, D-043 closure)
10. Wiz adapter (D-052)
11. Kyverno adapter (D-053)
12. remove consumer-repos + validated per-module examples (D-058) + RDS
primitive (D-059)
6 phases (22-27), 14 requirements (REQ-62..REQ-75).
Ship tag: v1.7.0 (feature milestone, next minor; v1.6 shipped v1.6.0).
2026-07-22 19:47:08 +00:00
05372abdfc
audit(v1.6): fix stale acdl_platform refs in ciagent files
...
acdl-ci / Lint (push) Successful in 8s
acdl-ci / Test (push) Successful in 18s
acdl-ci / Platform check-only (offline) (push) Successful in 9s
---ci---
project: acdl
phase: 0
milestone: v1.6
status: audit
verdict: CLEAN (after fixes)
---/ci---
Audit found stale acdl_platform/ references in .ciagent/ files that
described the package by its pre-rename name. Fixed:
- REQUIREMENTS.md REQ-53: updated to reflect the actual core/ rename
(was 'platform/', the original target that shadows stdlib).
- ROADMAP.md overview line 315: acdl_platform/ -> core/ (platform/
shadows stdlib).
- ROADMAP.md phase 21 description + success criteria: platform/ -> core/
(already partially fixed during run; this completes it).
- ARCHITECTURE.md line 345-346: acdl_platform/*.py -> core/*.py.
- PERSONAS.md: all territory globs + typecheck command + co-ownership
references updated from acdl_platform/ to core/.
Historical references preserved (REQUIREMENTS REQ-29/30/32/36/39,
RESEARCH.md) — they record what existed at the time and must not be
rewritten.
Reconstruction: PASS (config.json v1.6, ROADMAP phase 21 complete
v1.6.0, REQUIREMENTS REQ-52..61 complete v1.6.0 — all match git log).
File discipline: PASS (config.json valid, PROJECT.md sections present,
ROADMAP phases match branches, ARCHITECTURE.md matches code structure).
Branch hygiene: PASS (phase/21 merged to main; no orphans).
Commit discipline: PASS (10/10 v1.6 commits have ---ci--- blocks; 0
escalations).
2026-07-22 19:22:12 +00:00
a90a7562b9
verify(P21): code review — 1 P0 auto-fixed, 3 P1+ flagged
...
acdl-ci / Lint (push) Successful in 8s
acdl-ci / Test (push) Successful in 18s
acdl-ci / Platform check-only (offline) (push) Successful in 9s
---ci---
phase: 21
milestone: v1.6
status: verify
lessons:
- P0 fix: docs/_config.yml had conflicting theme + remote_theme (would
break the GitHub Pages build). Removed the conflicting theme: key,
kept remote_theme: minimal-mistakes.
- P2 fix: removed unused json + os imports from core/environment_check.py.
---/ci---
Multi-persona review of v1.6 phase 21 (docs restructure + core rename +
environments scaffold).
P0 (blocking) — AUTO-FIXED:
- M1: docs/_config.yml declared both and
. Jekyll rejects using
both; the Pages build would fail. Fixed: removed the line,
kept (minimal-mistakes, which provides the
layout the defaults reference).
P2 (nits) — AUTO-FIXED:
- M2: core/environment_check.py imported + but never used
them. Removed.
P1 (important) — FLAGGED FOR POST-HOC REVIEW (do not block ship):
- C1 (pre-existing, from v1.5 review C2): .github/workflows/deploy.yml
checks out the platform repo at , but no floating tag
exists (only v1.4.0 / v1.4.1). Operator must create a floating v1.4
tag or change the ref to v1.4.1 (or v1.6.0 now that it exists). The
consumer guide + sample contract also reference @v1.4.
- C2: docs/_config.yml key is not a standard minimal-mistakes
navigation config (that theme reads _data/navigation.yml). The
key is harmless metadata but won't render a real nav. Recommend adding
docs/_data/navigation.yml for the theme, or switching to a theme that
reads from _config.yml. Non-blocking for the docs content.
- S1 (pre-existing, from v1.5 review S1): the static-key override in
deploy.yml sets ACDL_AWS_ACCESS_KEY_ID/ACDL_AWS_SECRET_ACCESS_KEY as env
vars on the configure-aws-credentials step, but that action reads AWS_*
or its own access-key/secret-key inputs, not ACDL_AWS_*. The override
is not actually wired. Phase 21 did not touch this step.
Verified: byte-identical workflows (CI + deploy); dev.json valid JSON;
all core Python compiles; path-traversal on --env is safe (no file match
-> onboarding prompt, exit 1); all docs internal links resolve; 166
tests pass; run_ci.sh green. The run_platform.sh env-check ordering is
correct (default contract is assigned before the env check runs).
2026-07-22 18:41:41 +00:00
a07a61bf3e
Merge phase/21-docs-restructure — v1.6 consumer-facing docs restructure (v1.6.0)
...
---ci---
project: acdl
phase: 21
milestone: v1.6
status: shipped
release:
tag: v1.6.0
requirements:
covered: [REQ-52, REQ-53, REQ-54, REQ-55, REQ-56, REQ-57, REQ-58, REQ-59, REQ-60, REQ-61]
---/ci---
Merge phase/21 into main. v1.6 milestone: consumer-facing docs restructure
+ terminology normalization + environments concept. 166 tests pass.
2026-07-22 18:27:33 +00:00
edc695592a
docs(milestone): complete v1.6 — consumer-facing docs restructure
...
---ci---
project: acdl
phase: 0
milestone: v1.6
status: complete
requirements:
covered: [REQ-52, REQ-53, REQ-54, REQ-55, REQ-56, REQ-57, REQ-58, REQ-59, REQ-60, REQ-61]
partial: []
---/ci---
v1.6 milestone COMPLETE. Single phase (21) shipped + verified (v1.6.0).
All 10 requirements covered:
- REQ-52: scrub .ciagent/.gitea from consumer docs
- REQ-53: rename acdl_platform -> core (platform/ shadows stdlib)
- REQ-54: docs/ Jekyll Pages restructure
- REQ-55: L2->modules, L1->primitives, composition->pattern prose
- REQ-56: forge->platform runners
- REQ-57: README repository roles restated
- REQ-58: Features + Roadmap
- REQ-59: mermaid fix + security-checks + infrastructure-apply
- REQ-60: credentials minus go-gitea/waivers
- REQ-61: environments concept + onboarding scaffold
Verification: 166 tests pass (154 + 12 new environment-check). run_ci.sh
green. Grep sweeps: 0 .ciagent/.gitea/forge/go-gitea/waiver/D-039/D-047/
acdl_platform in consumer surfaces. Feature milestone -> tag v1.6.0.
2026-07-22 18:27:30 +00:00
df7b40b435
docs(P21): normalize vision.md L1/L2/L3A/L3B labels (VERIFY fix)
...
---ci---
project: acdl
phase: 21
milestone: v1.6
status: verify
---/ci---
VERIFY caught a residual L1/L2/L3A/L3B nomenclature in docs/vision.md
('the four-layer model (L1 Terraform primitives, L2 composed stacks, L3A
developer surface, L3B agentic surface)'). Normalized to (primitives,
modules, developer surface, agentic surface) to match the consumer-facing
terminology.
Verification summary:
- REQ-52: 0 .ciagent/.gitea refs in docs/ README.md modules/ contracts/.
- REQ-53: 0 acdl_platform refs in code (excl .ciagent/demo/.git).
- REQ-54: docs/ Jekyll structure complete; 0 .ciagent links in docs/.
- REQ-55: 0 L1/L2/L3A/L3B labels in consumer docs; composition->pattern
in prose (composition.json files kept); composition roadmap entry kept.
- REQ-56: 0 forge refs in consumer docs.
- REQ-57: README repository roles restated (app code + contracts + CI
definitions).
- REQ-58: Features + Roadmap sections present; no version changelog.
- REQ-59: mermaid has security-checks + infrastructure-plan + policy-
checks + infrastructure-apply; no tool names in diagram.
- REQ-60: 0 go-gitea/waiver/D-039/D-047 in README; daily/out-of-band
rotation retained.
- REQ-61: core/environments/ + dev.json + environment_check.py +
run_platform.sh wire-in + 12 tests.
Tests: 166 pass. run_ci.sh green.
2026-07-22 18:27:01 +00:00
553caf8f1d
docs(P21): rewrite README + normalize modules terminology (REQ-52,55,56,57,58,59,60)
...
---ci---
project: acdl
phase: 21
milestone: v1.6
status: execute
---/ci---
README.md rewrite:
- Remove all .ciagent/ references (links + repository-layout row).
- Remove .gitea/workflows/ row from repository layout.
- Restate repository roles: consumer repo = app code + 1+ contracts +
CI definitions (thin .github/workflows/*.yml uses:-ing the central
workflow); platform repo owns modules/adapters/core/schemas/pipelines/
scripts/workflows.
- Replace Status section with Features list (consumer + platform-engineer
referenceable) + Roadmap (planned only, no version changelog, no
internal CIAgent status). Includes the composition-redesign roadmap
entry (dynamic module creation from a contract).
- Fix the mermaid flowchart: all node text visible (short multi-line
labels via <br/>), add a security-checks stage before policy checks,
do not name specific tools (security checks/policy checks/infrastructure
plan via adapter), add infrastructure-apply stage (dev only, after
evidence event).
- Remove the environments table (dev/qa/prod/dr) completely; point to
docs/environments/ for platform-managed environments.
- Credentials section: remove go-gitea/gitea#36988 blocked mention +
waivers D-039/D-047 language. State OIDC+ABAC default; alternative is a
static AWS key (GitHub Secrets for platform-runner runs, .env.secrets
locally) with daily rotation (platform-managed) or out-of-band rotation
(consumer-managed for local .env.secrets).
- forge -> platform runners / platform-managed throughout.
- Links point to docs/ Pages paths, not .ciagent/.
modules/ terminology:
- modules/README.md: L1 primitives -> primitives, L2 compositions ->
modules, composition -> pattern (prose); add roadmap note for the
composition redesign.
- README-TEMPLATE.md: L1 primitive -> primitive.
- All 7 L1 READMEs: L1 primitive -> primitive.
- L2 static-asset + microservice READMEs: L2 composition -> module
pattern, composition -> pattern, L1 -> primitive; bump stale @v1 ->
@v1.4 in usage examples; fix CONSUMER_GUIDE.md -> consumer-guide.md
link.
Verification: grep sweeps for .ciagent/.gitea/forge/go-gitea/waiver/
D-039/D-047/acdl_platform in docs/ README.md modules/ contracts/ all
return 0 hits. Tests: 166 pass. run_ci.sh green.
2026-07-22 18:26:00 +00:00
4e495e5648
feat(P21): environments concept + onboarding scaffold (REQ-61)
...
---ci---
project: acdl
phase: 21
milestone: v1.6
status: execute
---/ci---
Introduce platform-managed environments: a consumer does not provide an
AWS account, VPC, subnet, S3 state bucket, or runner key. A named
environment is a platform-owned bundle of account + network + state
backend + IAM role (surfaced via ABAC), selected by name in the contract.
Scaffold:
- core/environments/dev.json (sample dev env definition)
- core/environments/README.md (how envs are used + how to add one)
- core/environment_check.py (reads a contract's environment field,
looks up core/environments/<name>.json, prints a friendly onboarding
prompt when none exists, exits non-zero)
- scripts/run_platform.sh: Step 0 calls environment_check.py before
contract validation; a missing env halts the pipeline with the
onboarding prompt
- tests/test_environment_check.py: 12 tests (dev bound, missing env ->
onboarding prompt, onboarding message lists provisions, contract
paths, wire-in, check-only still passes)
Tests: 166 pass (154 + 12 new).
2026-07-22 18:24:02 +00:00
d830357230
docs(P21): restructure docs/ into Jekyll Pages site (REQ-54, REQ-55, REQ-56)
...
---ci---
project: acdl
phase: 21
milestone: v1.6
status: execute
---/ci---
Restructure docs/ into a Jekyll-style GitHub Pages site:
- docs/_config.yml (Pages config + nav, excludes internal/)
- docs/index.md (landing: platform + consumer model, Features, Roadmap)
- docs/modules/index.md (catalog: primitives + modules, normalized terms)
- docs/contracts/index.md (schema, fields, sample, multi-contract)
- docs/pipeline/index.md (CI + deploy pipeline, stages mermaid, streaming)
- docs/pipeline/versioning.md (module + deploy-pipeline versioning)
- docs/environments/index.md (platform-managed envs + onboarding, REQ-61)
- docs/consumer-guide.md (renamed from CONSUMER_GUIDE.md; GitHub-only,
no .gitea, forge->platform runners, L2->modules, composition->pattern,
updated mermaid with security-checks + infrastructure-apply)
- docs/architecture.md (consolidated from architecture.md +
architecture-v1.0.md, current-architecture only, normalized terms:
primitives/modules, platform runners, no L1/L2/forge/gitea in prose)
- Removed docs/architecture-v1.0.md (consolidated) + docs/CONSUMER_GUIDE.md
(renamed).
No .ciagent/ or .gitea/ references in docs/. Consumer-facing terminology
normalized (L2->modules, L1->primitives, composition->pattern, forge->
platform runners).
2026-07-22 18:22:58 +00:00
b758a7c242
refactor(P21): rename acdl_platform/ -> core/ (REQ-53)
...
---ci---
project: acdl
phase: 21
milestone: v1.6
status: execute
---/ci---
Rename the acdl_platform/ package to core/ across the directory, all
imports in tests/scripts/pipelines/workflows, and doc references. The
package is imported as core.confidence_signal / core.contract_resolver /
core.outbox_writer. The deploy workflow's platform-repo checkout dir is
renamed acdl-platform/ -> platform/ (workspace path, not the python
package). Both .gitea + .github workflows stay byte-identical.
Note: the original target name 'platform/' shadows Python's stdlib
platform module (pytest's import uuid -> platform.system() fails when
the repo root is on sys.path, which every test does). 'core/' avoids
the clash while honoring the intent (drop the verbose acdl_platform).
Tests: 154 pass. run_ci.sh green.
2026-07-22 18:21:12 +00:00
c5745de37c
docs(P21): specify phase 21 — consumer-facing docs restructure (v1.6)
...
---ci---
project: acdl
phase: 21
milestone: v1.6
status: specify
---/ci---
Add v1.6 milestone to ROADMAP.md + REQUIREMENTS.md. Phase 21 covers
REQ-52 (scrub .ciagent/.gitea from consumer docs), REQ-53 (rename
acdl_platform -> platform), REQ-54 (docs/ Jekyll Pages restructure),
REQ-55 (L2->modules, L1->primitives, composition->pattern prose),
REQ-56 (forge->platform runners), REQ-57 (README repository roles
restated), REQ-58 (Features + Roadmap), REQ-59 (mermaid fix +
security-checks + infrastructure-apply), REQ-60 (credentials minus
go-gitea/waivers), REQ-61 (environments concept + onboarding scaffold).
Update config.json milestone to v1.6.
2026-07-22 18:17:28 +00:00
8d5c56b88e
ship(v1.5.0): milestone released — consumer happy path + reusable deploy workflow
...
acdl-ci / Lint (push) Successful in 7s
acdl-ci / Test (push) Successful in 16s
acdl-ci / Platform check-only (offline) (push) Successful in 9s
---ci---
project: acdl
phase: 0
milestone: v1.5
status: shipped
release:
tag: v1.5.0
gitea_release_id: 214
url: https://git.cloudinit.dev/continuous-intelligence/acdl/releases/tag/v1.5.0
requirements:
covered: [REQ-46, REQ-47, REQ-48, REQ-49, REQ-50, REQ-51]
partial: []
---/ci---
Milestone v1.5 shipped: tag v1.5.0 (re-tagged at HEAD f68f85c
2026-07-22 17:27:20 +00:00
f68f85c9fd
review(v1.5): READY TO SHIP — multi-persona code review
...
acdl-ci / Lint (push) Successful in 7s
acdl-ci / Test (push) Successful in 15s
acdl-ci / Platform check-only (offline) (push) Successful in 9s
---ci---
project: acdl
phase: 20
milestone: v1.5
status: review
verdict: READY TO SHIP
p0: 1 (fixed — contract path resolution in deploy workflow)
p1: 6 (flagged post-hoc)
---/ci---
Multi-persona review of v1.5 phase 20 (docs + reusable deploy workflow).
P0 (blocking) — AUTO-FIXED:
- C1: scripts/run_platform.sh contract path resolution broken in deploy
workflow. The reusable workflow invokes run_platform.sh from the consumer
workspace root with a relative contract path (.acdl/contract.yaml), but
run_platform.sh does `cd "$ROOT"` (platform repo) early, so the relative
path resolved against the platform repo and the pipeline could never run.
Fix (commit 75c2274
2026-07-22 17:24:28 +00:00
75c227429a
fix(P20): resolve consumer contract path against caller CWD (P0 review fix)
...
The reusable deploy workflow invokes run_platform.sh from the CONSUMER
repo's workspace root with a relative contract path (e.g.
.acdl/contract.yaml). run_platform.sh does `cd "$ROOT"` (the platform
repo) early in its lifecycle, which caused the relative contract path to
resolve against the platform repo (acdl-platform/) instead of the
consumer repo — the `[ -f "$CONTRACT" ]` check then failed with
"contract file missing" and the pipeline could never run.
Fix: capture CALLER_CWD before `cd "$ROOT"` and resolve a caller-supplied
relative contract path against CALLER_CWD. The default contract
(contracts/static-asset.yaml, used only when no contract is supplied)
remains relative to ROOT, preserving platform-local CI behavior.
Reproduced pre-fix: bash acdl-platform/scripts/run_platform.sh --check-only
.acdl/contract.yaml (from a consumer workspace) -> "contract file missing".
Verified post-fix: same invocation reads the consumer contract correctly.
verify(P0): code review — correctness
---ci---
phase: 20
milestone: v1.5
status: verify
lessons:
- P0 fix applied: run_platform.sh now resolves relative contract path
against caller CWD (deploy workflow contract path was broken)
---/ci---
2026-07-22 17:23:00 +00:00
04bf6bc31a
docs(milestone): complete v1.5 — consumer happy path + reusable deploy workflow
...
---ci---
project: acdl
phase: 0
milestone: v1.5
status: complete
requirements:
covered: [REQ-46, REQ-47, REQ-48, REQ-49, REQ-50, REQ-51]
partial: []
---/ci---
v1.5 milestone COMPLETE. Single phase (20) shipped + verified (v1.5.0).
All 6 requirements covered:
- REQ-46: README consumer model + mermaid + L3B/spike scrub
- REQ-47: generic CONSUMER_GUIDE.md + versioned uses: + consumer prereqs
- REQ-48: zero-trust OIDC/ABAC credentials + static-key override + rotation
- REQ-49: reusable byte-identical deploy.yml (Gitea+GitHub)
- REQ-50: contracts/static-asset.yaml @v1.4
- REQ-51: deploy-workflow conformance tests (19 new, 154 total pass)
Audit: CLEAN (reconstruction PASS, file discipline PASS, branch hygiene
PASS, commit discipline PASS). Tag v1.5.0 present.
Operator action: push a v1.4 git tag if not already present, so the
reusable-workflow reference acdl/.gitea/workflows/deploy.yml@v1.4 resolves
at run time for consumer repos.
2026-07-22 17:15:04 +00:00
9a1ea04f93
docs(P20): post-ship traceability — phase 20 complete (v1.5.0)
...
---ci---
project: acdl
phase: 20
milestone: v1.5
status: shipped
release:
tag: v1.5.0
requirements:
covered: [REQ-46, REQ-47, REQ-48, REQ-49, REQ-50, REQ-51]
---/ci---
Post-ship: ROADMAP.md Phase 20 -> complete (v1.5.0); REQUIREMENTS.md
REQ-46..51 -> complete (v1.5.0). v1.5 milestone: all 6 requirements
covered. Feature milestone → tag v1.5.0.
Ship-time note: the git tag v1.4 (referenced by the reusable workflow
checkout `ref: v1.4` and the consumer `uses:` tag) must be pushed for
the reusable-workflow reference `acdl/.gitea/workflows/deploy.yml@v1.4`
to resolve at run time. Tagging v1.5.0 here; a v1.4 tag is a separate
operator action if not already present.
2026-07-22 17:14:53 +00:00
2a84c0047b
feat(P20): consumer happy path + reusable deploy workflow (v1.5.0)
...
---ci---
project: acdl
phase: 20
milestone: v1.5
status: verify
---/ci---
REQ-46: README rewritten — platform-source vs consumer-repo distinction up
front; platform flow converted to mermaid flowchart TD; L3A/L3B + spike
nomenclature scrubbed from prose (code paths kept verbatim); prereqs pointer
to consumer guide added.
REQ-47: docs/CONSUMER_GUIDE.md (generic, all L2 modules) replaces
docs/consumer-guide-static-asset.md — mermaid diagrams (model LR + pipeline
TD), versioned uses: (@v1.4 floating MAJOR+MINOR, bare/@main discouraged),
consumer-scoped prerequisites (no Terraform/Checkov/boto3/runner-key), run-
time platform fetch via reusable workflow (consumers never invoke
scripts/run_platform.sh locally for the happy path), optional local
validation note.
REQ-48: Credentials section rewritten — zero-trust OIDC + ABAC default
(repo-identity + resource-tag scoping, blast-radius containment); static-key
override in GitHub Secrets or .env.secrets with platform-managed daily
rotation; consumer rotates out of band when using .env.secrets locally.
REQ-49: byte-identical .gitea/workflows/deploy.yml + .github/workflows/
deploy.yml — reusable (on: workflow_call), checks out consumer repo + ACDL
platform repo, installs deps, runs run_platform.sh, uploads artifacts; OIDC
default (permissions: id-token: write) + static-key override via secrets.
REQ-50: contracts/static-asset.yaml uses: @v1.4 (MAJOR+MINOR).
REQ-51: tests/test_pipeline_contract.py extended — TestDeployPipelineSchema,
TestDeployPipelineContract, TestDeployWorkflowConformance (byte-identical,
reusable, contract/mode inputs, run_platform invocation, platform-repo
checkout, OIDC permissions), TestSampleContractVersioning. 154 tests pass
(19 new); run_ci.sh green.
Fixes: modules/l2/static-asset/README.md dangling link retargeted to
docs/CONSUMER_GUIDE.md.
2026-07-22 17:14:12 +00:00
895a2f3806
docs(P20): specify phase 20 — consumer happy path + reusable deploy workflow (v1.5)
...
---ci---
project: acdl
phase: 20
milestone: v1.5
status: specify
---/ci---
Add v1.5 milestone to ROADMAP.md + REQUIREMENTS.md. Phase 20 covers
REQ-46 (README consumer model + mermaid + L3B/spike scrub), REQ-47
(generic CONSUMER_GUIDE.md + versioned uses: + consumer-scoped prereqs
+ run-time platform fetch), REQ-48 (zero-trust OIDC/ABAC credentials +
static-key override + daily rotation), REQ-49 (reusable byte-identical
deploy.yml Gitea+GitHub implementing pipelines/deploy.yaml), REQ-50
(contracts/static-asset.yaml @v1.4), REQ-51 (deploy-workflow conformance
tests). Update config.json milestone to v1.5.
2026-07-22 17:09:23 +00:00
e050e65158
feat(P19): central pipeline contract + shell reproducibility + output streaming (v1.4.1)
...
acdl-ci / Lint (push) Successful in 8s
acdl-ci / Test (push) Successful in 14s
acdl-ci / Platform check-only (offline) (push) Successful in 9s
---ci---
project: acdl
phase: 19
milestone: v1.4
status: execute
---
Add declarative pipeline contract (schemas/pipeline.schema.json +
pipelines/ci.yaml) as single source of truth for both Gitea Actions (dev)
and GitHub Actions (production) workflows. Both workflow files are
byte-identical and validated against the contract by 32 new tests.
Add scripts/run_ci.sh for shell reproducibility — mirrors the CI pipeline
locally (lint → test → check-only), exits 0 with 'CI PIPELINE OK'.
Update scripts/run_platform.sh to stream output by default: terraform
init/validate/plan via tee, Checkov compliance results with per-record
severity/rule/pass-fail, and emitted Terraform in --check-only. New
--quiet flag for log-only mode.
Requirements: REQ-43 (central pipeline contract), REQ-44 (shell
reproducibility), REQ-45 (output streaming). 122 tests pass (90 + 32).
2026-07-22 15:10:54 +00:00
6e23c168f1
fix(tests): suppress botocore DeprecationWarning from moto
...
acdl-ci / Lint (push) Successful in 8s
acdl-ci / Test (push) Successful in 12s
acdl-ci / Platform check-only (offline) (push) Successful in 9s
---ci---
project: acdl
phase: 18
milestone: v1.3
status: ship
---/ci---
2026-07-22 14:38:35 +00:00
c816493e7e
audit(v1.3.2): CLEAN - reconstruction, file discipline, branch hygiene, commit discipline
...
acdl-ci / Lint (push) Successful in 1m19s
acdl-ci / Test (push) Successful in 30s
acdl-ci / Platform check-only (offline) (push) Successful in 9s
---ci---
project: acdl
phase: 18
milestone: v1.3
status: complete
requirements:
covered: [REQ-39, REQ-40, REQ-41, REQ-42]
partial: []
---/ci---
2026-07-22 14:26:34 +00:00
1598c54a8b
feat(P18): testing + CI/CD pipelines - pytest suite, check-only mode, Gitea + GitHub workflows (v1.3.2)
...
90 offline tests covering adapter, confidence_signal, checkov_adapter,
outbox_writer, and pipeline integration. Identical CI/CD workflows for
Gitea Actions (dev) and GitHub Actions (production). New --check-only
mode for run_platform.sh (offline, no AWS).
---ci---
project: acdl
phase: 18
milestone: v1.3
status: verify
---/ci---
2026-07-22 14:26:11 +00:00
2c6464afd4
audit(v1.3.1): CLEAN — reconstruction, file discipline, branch hygiene, commit discipline
...
Phase 17 audit PASS on all four layers. No critical issues. P1 (AWS
account ID in l1-ecs-service README usage example) deferred to
post-hoc review.
---ci---
project: acdl
phase: 17
milestone: v1.3
status: complete
requirements:
covered: [REQ-36, REQ-37, REQ-38]
partial: []
---/ci---
2026-07-22 13:59:52 +00:00
431341a0ab
docs(P17): verify phase 17 — VERIFY PASS (v1.3.1)
...
Four-layer verification: structural, behavioral, security, quality all
pass. One P1 (AWS account ID in l1-ecs-service README usage example)
deferred to post-hoc review — same account ID already in
terraform/microservice/main.tf. Fixed: README template missing ## Overview
header.
---ci---
project: acdl
phase: 17
milestone: v1.3
status: verify
---/ci---
2026-07-22 13:58:53 +00:00
ae86a29a5e
docs(P17): specify phase 17 — remove thin-composition + module READMEs (v1.3.1)
...
Add v1.3 milestone to ROADMAP.md and REQUIREMENTS.md. Phase 17 covers
REQ-36 (thin-composition removal), REQ-37 (README template), REQ-38
(per-module READMEs + catalog). Update config.json milestone to v1.3.
---ci---
project: acdl
phase: 17
milestone: v1.3
status: specify
---/ci---
2026-07-22 13:57:25 +00:00
3508671377
refactor(modules): remove thin-composition layer; rewrite all module READMEs
...
The L2 thin-composition layer (composition.json + contract_resolver.py +
contract schema + sample contracts) has been removed completely. The
implementation was unsatisfactory and is deferred for a later redesign.
- Delete: composition.json x2, contract_resolver.py, contracts/ x2,
contract.schema.json
- Patch: run_platform.sh now loads a pre-existing IR instance instead of
resolving a contract (the downstream adapter/checkov/confidence/outbox
pipeline is unchanged)
- Prune: L2 entries removed from registry.json (L1 entries unchanged)
- Rewrite: all 7 L1 module READMEs in plain language (no jargon), each
with Resources/Inputs/Outputs/Usage/Compliance-extension-points/Versioning
sections derived from interface.json
- Add: 2 L2 placeholder READMEs noting the composition is under redesign
- Add: modules-ir/README.md catalog index + README-TEMPLATE.md
---ci---
project: acdl
phase: 17
milestone: v1.3
status: execute
---/ci---
2026-07-22 13:54:40 +00:00
f874879973
fix: compress spike_runner_policy.json to fit AWS 2048-char inline limit
...
---ci---
project: acdl
phase: 0
milestone: v1.2
status: fix
---/ci---
The expanded policy (4727 chars pretty / 3464 compact) exceeded the AWS
2048-char inline policy limit (total across all inline policies on a user).
Compressed to 1667 chars by: (1) removing DenyEverythingElse (redundant —
IAM is default-deny; the user has no other inline policies), (2) using
action-prefix wildcards (ecs:Create*, ecr:Get*, etc.) instead of listing
every action, (3) removing SIDs.
The compressed policy grants the same effective permissions. The repo
file now matches what should be applied in the AWS Console.
2026-07-22 13:42:44 +00:00
0fc69b4d0c
docs(milestone): complete v1.2 — platform hardening + ECS microservice
...
---ci---
project: acdl
phase: 0
milestone: v1.2
status: complete
requirements:
covered: [REQ-29, REQ-30, REQ-31, REQ-32, REQ-34]
partial: [REQ-33, REQ-35]
---/ci---
v1.2 milestone COMPLETE. All 6 phases shipped (v1.2.1..v1.2.6) + verified.
- v1.2.1 research + README (REQ-29)
- v1.2.2 NFR harden + simplify (REQ-30)
- v1.2.3 6 ECS L1s + adapter (REQ-31)
- v1.2.4 l2-microservice + contract schema + resolver (REQ-32)
- v1.2.5 consumer repo + terraform apply PARTIAL (REQ-34 complete, REQ-33 partial IAM-blocked)
- v1.2.6 capstone e2e (REQ-35 partial IAM-blocked)
Review: READY TO SHIP (1 P0 operator action, 1 P1 deferred to v1.3).
Ship: v1.3.0 (feature milestone, next minor — v1.1 shipped v1.2.0).
Audit: CLEAN (0 P0 code issues, 1 P1 post-hoc).
Operator action (P0-IAM): push spike_runner_policy.json to live AWS via
create_iam_user.py, then terraform apply (13 to add) -> live ECS service.
Gitea release v1.3.0: tag pushed; release creation blocked by missing
ACDL_GITEA_TOKEN (documented manual step).
2026-07-21 22:27:27 +00:00
2ec2a87a4e
audit(v1.2): CLEAN — reconstruction, file discipline, branch hygiene, commit discipline
...
---ci---
project: acdl
phase: 0
milestone: v1.2
status: audit
verdict: CLEAN
---/ci---
v1.2 milestone audit. Verdict: CLEAN — 0 P0 code issues (the 1 P0 is an
operator action, not a code defect), 1 P1 post-hoc (adapter hardening,
deferred to v1.3). Reconstruction test PASS; file discipline PASS; branch
hygiene PASS; commit discipline PASS. The v1.3.0 tag is valid; the Gitea
release is not yet created (missing ACDL_GITEA_TOKEN — documented manual
step).
2026-07-21 22:26:52 +00:00
18875cd7c8
review(v1.2): READY TO SHIP — multi-persona code review
...
---ci---
project: acdl
phase: 0
milestone: v1.2
status: review
verdict: READY TO SHIP
p0: 1 (operator action, non-code)
p1: 1 (adapter hardening, v1.3)
---/ci---
v1.2 milestone review: READY TO SHIP. 1 P0 (IAM operator action, not a
code fix), 1 P1 (adapter hardening deferred to v1.3). The milestone's code
is complete + verified up to terraform plan (13 to add); the one remaining
step is the operator's IAM policy push. Ship tag v1.3.0.
2026-07-21 22:25:29 +00:00
faea213a4c
docs(P16): post-ship traceability + roadmap update (v1.2.6)
...
---ci---
project: acdl
phase: 16
milestone: v1.2
status: shipped
---/ci---
Post-ship: ROADMAP.md Phase 16 -> complete (v1.2.6); REQUIREMENTS.md
REQ-35 -> partial (v1.2.6, IAM-blocked). All 6 v1.2 phases shipped.
2026-07-21 22:24:48 +00:00
3bb44d9967
ship: phase-16 v1.2-capstone-e2e (v1.2.6)
...
---ci---
project: acdl
phase: 16
milestone: v1.2
status: shipped
release:
tag: v1.2.6
requirements:
covered: [REQ-35]
partial: [REQ-33]
blocker:
- P0-IAM: terraform apply blocked; operator must push spike_runner_policy.json (carried from Phase 15)
---/ci---
Phase 16 shipped: v1.2 capstone. REQ-35 verified (up to IAM-blocked apply).
All 6 v1.2 phases shipped (v1.2.1-v1.2.6). Full platform verified end-to-end
up to terraform plan (13 to add). The one remaining step (terraform apply
-> live ECS service) is the operator's IAM policy push (P0). Entering
the COMPLETE gate: review -> ship v1.3.0 -> audit.
2026-07-21 22:24:28 +00:00
64d35c78e6
docs(P16): plan-as-execute + verify (v1.2.6, capstone)
...
---ci---
project: acdl
phase: 16
milestone: v1.2
status: verify
verdict: VERIFIED
requirements:
covered: [REQ-35]
partial: []
blocker:
- P0-IAM: terraform apply blocked; operator must push spike_runner_policy.json (carried from Phase 15)
---/ci---
Phase 16 plan-as-execute + verify. scripts/verify_phase16.sh green (11
assertions). Capstone: full v1.2 platform verified end-to-end up to the
IAM-blocked terraform apply. MILESTONE_CAPSTONE_VERIFIED evidence event
written to outbox. v1.1 S3 regression passes. Ready to ship v1.2.6 +
enter the COMPLETE gate.
2026-07-21 22:24:20 +00:00
3cca5bb43f
docs(P15): post-ship traceability + roadmap update (v1.2.5, PARTIAL)
...
---ci---
project: acdl
phase: 15
milestone: v1.2
status: shipped
---/ci---
Post-ship: ROADMAP.md Phase 15 -> complete (v1.2.5, PARTIAL); REQUIREMENTS.md
REQ-33 -> partial (IAM-blocked), REQ-34 -> complete (v1.2.5).
2026-07-21 22:22:03 +00:00
b993c15fae
ship: phase-15 consumer-repo-and-terraform-apply (v1.2.5, PARTIAL)
...
---ci---
project: acdl
phase: 15
milestone: v1.2
status: shipped
release:
tag: v1.2.5
requirements:
covered: [REQ-34]
partial: [REQ-33]
blocker:
- P0-IAM: terraform apply blocked; operator must push spike_runner_policy.json to live AWS
---/ci---
Phase 15 shipped (PARTIAL): consumer repo + adapter fixes + terraform plan.
REQ-34 verified (consumer microservice content). REQ-33 partial (plan
succeeds, apply blocked by IAM P0). Adapter fixed for multi-resource ECS.
Phase 16 will complete the e2e after the operator pushes the IAM policy.
2026-07-21 22:21:43 +00:00
699aa542df
docs(P15): plan-as-execute + verify (v1.2.5, PARTIAL — terraform apply blocked by IAM)
...
---ci---
project: acdl
phase: 15
milestone: v1.2
status: verify
verdict: PARTIAL
requirements:
covered: [REQ-34]
partial: [REQ-33]
blocker:
- id: P0-IAM
description: terraform apply fails with AccessDenied on ECS/ECR/IAM/EC2 — live spike_runner_policy.json not pushed (root key deactivated per D-034)
unblock: operator runs create_iam_user.py with root/admin creds to push the expanded policy, then terraform apply succeeds (plan valid, 13 to add)
---/ci---
Phase 15 plan-as-execute + verify. PARTIAL: terraform apply blocked by IAM.
- Consumer microservice content authored (app.py + Dockerfile + README.md).
- Docker image acdl-microservice:latest built.
- Adapter fixed: ref emission (bare), JSON-string jsonencode, ECS service
network_configuration/load_balancer/desired_count/launch_type/task_definition,
listener default_action/load_balancer_arn, target group target_type/vpc_id/protocol,
VPC tags (not name), IGW + route table association, managed_policy_arns list.
- L1 fixes: l1-ecs-service (removed port from service sub-resource),
l1-vpc (added intra_refs, removed igw_id output).
- Resolver: intra_refs resolution (refs between sub-resources of same L1).
- terraform validate + plan succeed (13 to add).
- terraform apply BLOCKED (AccessDenied — live IAM policy not updated).
- Evidence event TERRAFORM_APPLY_BLOCKED written to DynamoDB outbox.
- v1.1 S3 regression: byte-identical.
Ready to ship v1.2.5 (partial).
2026-07-21 22:21:36 +00:00
d5cc01edbd
docs(P14): post-ship traceability + roadmap update (v1.2.4)
...
---ci---
project: acdl
phase: 14
milestone: v1.2
status: shipped
---/ci---
Post-ship: ROADMAP.md Phase 14 -> complete (v1.2.4); REQUIREMENTS.md
REQ-32 -> complete (v1.2.4).
2026-07-21 21:12:33 +00:00
a3c7330b75
ship: phase-14 l2-microservice-and-contract-schema (v1.2.4)
...
---ci---
project: acdl
phase: 14
milestone: v1.2
status: shipped
release:
tag: v1.2.4
requirements:
covered: [REQ-32]
---/ci---
Phase 14 shipped: l2-microservice + contract schema + resolver wiring. REQ-32 verified.
- l2-microservice composition (6 ECS L1s, depth 1, 2 wire kinds).
- Contract schema extended (inputs allow objects + healthcheck field).
- Resolver: array-form wires, child->child ref: emission, multi-resource L1 expansion.
- Adapter: ref:<id>.<output> -> Terraform interpolation translation.
- v1.2 IR: 11 resources (6 L1s expand: vpc->3, ecs-service->2, alb->3, + 3 single).
- v1.1 S3 regression: byte-identical.
Phase 15 (consumer-repo-and-terraform-apply) next.
2026-07-21 21:12:22 +00:00
d103a37419
docs(P14): plan-as-execute + verify (v1.2.4)
...
---ci---
project: acdl
phase: 14
milestone: v1.2
status: verify
verdict: VERIFIED
requirements:
covered: [REQ-32]
---/ci---
Phase 14 plan-as-execute + verify. scripts/verify_phase14.sh green.
l2-microservice composition (6 L1s, 2 wire kinds); contract schema
extended (inputs allow objects + healthcheck); resolver extended
(array-form wires, child->child refs, multi-resource L1 expansion);
adapter extended (ref: interpolation translation). v1.2 IR: 11 resources.
v1.1 S3 regression byte-identical. Ready to ship v1.2.4.
2026-07-21 21:12:17 +00:00
7c6b8c8c84
docs(P13): post-ship traceability + roadmap update (v1.2.3)
...
---ci---
project: acdl
phase: 13
milestone: v1.2
status: shipped
---/ci---
Post-ship: ROADMAP.md Phase 13 -> complete (v1.2.3); REQUIREMENTS.md
REQ-31 -> complete (v1.2.3).
2026-07-21 21:06:08 +00:00
5a3ab5e86b
ship: phase-13 l1-catalog-for-ecs (v1.2.3)
...
---ci---
project: acdl
phase: 13
milestone: v1.2
status: shipped
release:
tag: v1.2.3
requirements:
covered: [REQ-31]
---/ci---
Phase 13 shipped: 6 ECS L1s + adapter generalization. REQ-31 verified.
- 6 new IR-typed L1s: l1-vpc, l1-ecs-cluster, l1-ecs-service, l1-iam-role, l1-alb, l1-ecr.
- Registry updated (8 entries: 7 L1s + l2-static-asset).
- Adapter generalized: TYPE_MAP (12 IR types) + INPUT_MAP + OUTPUT_MAP (table-driven).
- S3 regression: v1.1 spike l1-s3 produces byte-identical main.tf.
Phase 14 (l2-microservice-and-contract-schema) next.
2026-07-21 21:05:52 +00:00
4ed2542ecf
docs(P13): plan-as-execute + verify (v1.2.3)
...
---ci---
project: acdl
phase: 13
milestone: v1.2
status: verify
verdict: VERIFIED
requirements:
covered: [REQ-31]
---/ci---
Phase 13 plan-as-execute + verify. scripts/verify_phase13.sh green.
6 ECS L1s authored + registered (l1-vpc, l1-ecs-cluster, l1-ecs-service,
l1-iam-role, l1-alb, l1-ecr). Adapter generalized to table-driven
TYPE_MAP (12 IR types) + INPUT_MAP + OUTPUT_MAP. S3 regression: the v1.1
spike l1-s3 produces byte-identical main.tf. Ready to ship v1.2.3.
2026-07-21 21:05:48 +00:00
4c8de8e962
docs(P12): post-ship traceability + roadmap update (v1.2.2)
...
---ci---
project: acdl
phase: 12
milestone: v1.2
status: shipped
---/ci---
Post-ship: ROADMAP.md Phase 12 -> complete (v1.2.2); REQUIREMENTS.md
REQ-30 -> complete (v1.2.2).
2026-07-21 21:02:08 +00:00
599db2e80d
ship: phase-12 nfr-harden-and-simplify (v1.2.2)
...
---ci---
project: acdl
phase: 12
milestone: v1.2
status: shipped
release:
tag: v1.2.2
requirements:
covered: [REQ-30]
---/ci---
Phase 12 shipped: NFR harden + simplify. REQ-30 verified.
- run_spike_*.sh consolidated -> run_platform.sh (D-048, --plan-only flag).
- spike_runner_policy.json expanded for ECS (least-privilege, ready for Phase 15).
- Bootstrap idempotency documented.
- P1-1 closed: no live AWS key IDs in .ciagent/.
- P1-B closed: PERSONAS.md stale platform/ path fixed.
Phase 13 (l1-catalog-for-ecs) next.
2026-07-21 21:01:57 +00:00
0fea29cdbb
docs(P12): plan-as-execute + verify (v1.2.2)
...
---ci---
project: acdl
phase: 12
milestone: v1.2
status: verify
verdict: VERIFIED
requirements:
covered: [REQ-30]
---/ci---
Phase 12 plan-as-execute + verify. scripts/verify_phase12.sh green (22
assertions). All Wave 1 + Wave 2 tasks complete:
- T-12.1: run_spike_*.sh -> run_platform.sh (D-048, --plan-only flag)
- T-12.2: spike_runner_policy.json expanded (ECS + ECR + ELB + IAM + EC2)
- T-12.3: idempotency documented in bootstrap scripts
- T-12.4: P1-1 redacted (no live AWS key IDs in .ciagent/)
- T-12.5: P1-B fixed (PERSONAS.md platform/registry -> modules-ir/registry.json)
Subagent confirmed run_platform.sh --plan-only runs against real AWS, exit 0.
Ready to ship v1.2.2.
2026-07-21 21:01:51 +00:00
7ee57aa6c7
docs(P11): post-ship traceability + roadmap update (v1.2.1)
...
---ci---
project: acdl
phase: 11
milestone: v1.2
status: shipped
---/ci---
Post-ship: ROADMAP.md Phase 11 -> complete (v1.2.1); REQUIREMENTS.md
REQ-29 -> complete (v1.2.1).
2026-07-21 20:58:01 +00:00
Jon Chery