3 Commits

Author	SHA1	Message	Date
Jon Chery	3b1181f39b	Merge milestone/v1.14-refinement — v1.14 complete (NFR Refinement: bug fixes, security, stubs, tests, docs; 20 phases + final; tag v1.13.24) ... v1.14 NFR Refinement milestone complete. 20 execution phases (P1-P20) + 1 final (P21). All P1/P2 backlog from v1.11 review resolved. Security posture hardened (swallowed errors, account ID externalized, IAM scoped, schema validation, credential hygiene). Stubs resolved (kyverno --kube- version removed). 7 untested scripts gained coverage. Documentation synced (ARCHITECTURE v1.11-v1.14 addenda, stale @v1.6-1.9 -> @v1.13, GRILL G-005/G-008 resolved, COST.md window extended, D-083 deferral recorded). Platform VPC parameterized. 561 tests pass (was 528 at v1.13.2; +33). 22/22 capabilities Verified. 6 grill binding decisions (G-101..G-106) applied. 1 escalation (E-001) auto-resolved at full autonomy (D-101). ---ci--- project: acdl phase: 21 milestone: v1.14 status: complete ---/ci---	2026-07-29 21:36:37 +00:00
Jon Chery	843cd17b97	fix(P29): SSM fail-loud without CMK + Terraform-rendered invoke policy (P1-3, P1-6) ... ---ci--- project: acdl phase: 29 milestone: v1.8 status: execute ---/ci--- P1-3: SSM publisher now raises RuntimeError when ACDL_KMS_KEY_ID is unset. ACDL_ALLOW_DEFAULT_KMS=1 escape hatch for local testing. P1-6: consumer_invoke_policy.json now uses ${account_id} and ${region} placeholders. Terraform renders them via data.aws_caller_identity + data.aws_region + replace() at apply time. No more hardcoded 000000000000. Tests: +7 (285 -> 292). All pass.	2026-07-22 22:05:40 +00:00
Jon Chery	4fe794c7a4	feat(P25): deploy outputs (SSM + PR comment) + error reporting via Lambda + stage comments ... ---ci--- project: acdl phase: 25 milestone: v1.7 status: execute ---/ci---	2026-07-22 20:08:30 +00:00