Commit Graph

320 Commits

Author SHA1 Message Date
Jon Chery c029b102a3 verify(P5): regression-verify-dedup — 4-layer verify PASS + ship
VERIFY: structural — 3 shared helpers extracted; behavioral — 611 tests + CI PASS; quality — behavior preserved, ~70 lines saved.

---ci---
project: acdl
phase: 5
milestone: v1.16
status: complete
phase_role: execution
requirements:
  covered: [REQ-169]
  partial: []
---/ci---
v1.15.10
2026-08-01 12:31:08 +00:00
Jon Chery 2806c6c3ed verify(P4): migrate-ssm-except-narrowing — 4-layer verify PASS + ship
VERIFY: structural — narrowed excepts; behavioral — 48 tests + CI PASS; security — non-ParameterNotFound errors surface; quality — 2 new + 2 updated tests.

---ci---
project: acdl
phase: 4
milestone: v1.16
status: complete
phase_role: execution
requirements:
  covered: [REQ-168]
  partial: []
---/ci---
v1.15.9
2026-08-01 12:24:30 +00:00
Jon Chery e048acd4dd verify(P3): dead-code-and-stale-prefix-cleanup — 4-layer verify PASS + ship
VERIFY: structural — dead export + stale comments + prefixes gone; behavioral — 616 tests + CI PASS; quality — env-override test updated.

---ci---
project: acdl
phase: 3
milestone: v1.16
status: complete
phase_role: execution
requirements:
  covered: [REQ-167]
  partial: []
---/ci---
v1.15.8
2026-08-01 12:20:40 +00:00
Jon Chery 9421442afd verify(P2): user-facing ACDL→Nova sweep — 4-layer verify PASS + ship
VERIFY: structural — all user-facing strings Nova; behavioral — 79 tests
+ CI PASS; security — no creds; quality — new onboarding Nova-header test.
REQ-166 complete. Internal ship_phase.sh helper added.

---ci---
project: acdl
phase: 2
milestone: v1.16
status: complete
phase_role: execution
requirements:
  covered: [REQ-166]
  partial: []
---/ci---
v1.15.7
2026-08-01 12:12:45 +00:00
Jon Chery bb43d94563 verify(P1): state-bucket + Kyverno rebrand — 4-layer verify PASS + ship
VERIFY: structural — adapter.py:117 nova-tfstate-*; kyverno policy nova:*
labels; behavioral — 80 tests PASS + run_ci.sh 3-stage PASS; security —
emitted backend no longer points at a non-existent bucket; quality —
new test_adapt_emits_nova_state_bucket regression guard. REQ-165 complete.

---ci---
project: acdl
phase: 1
milestone: v1.16
status: complete
phase_role: execution
requirements:
  covered: [REQ-165]
  partial: []
---/ci---
v1.15.6
2026-07-30 15:17:43 +00:00
Jon Chery ee5c372e65 docs(P00): complete pre-execution phase — v1.16 NFR scope
Phase 0: SPECIFY → CLARIFY → RESEARCH → IDEATE → PLAN → GRILL.
NFR milestone v1.16 (Nova Simplification), 20 execution phases + final.
Tags on v1.15.x line: v1.15.5 (this phase) → v1.15.6..v1.15.25 (P1-P20) →
v1.15.26 (P21 final = release).

Scope (D-113..D-119): Simplify without regressions, Security,
Maintainability, User/Developer Experience, No Humans Onboarding Flow
(request-path only; real AWS provisioning deferred). Regression gate
(D-118, G-111) gates P9 + P21 at 20/22 Verified + 2 Skipped.

Grill: PASS-with-binding (G-111..G-113, E-002 deferred to P21).

---ci---
project: acdl
phase: 0
milestone: v1.16
status: complete
phase_role: pre_execution
requirements:
  covered: [REQ-165, REQ-166, REQ-167, REQ-168, REQ-169, REQ-170, REQ-171, REQ-172, REQ-173, REQ-174, REQ-175, REQ-176, REQ-177, REQ-178, REQ-179, REQ-180, REQ-181, REQ-182, REQ-183, REQ-184]
  partial: []
---/ci---
v1.15.5
2026-07-30 15:12:32 +00:00
Jon Chery 787a6490a5 docs(audit): v1.15 post-milestone audit — PASS (rebrand header fixes + 6 checks)
acdl-ci / Lint (push) Successful in 10s
acdl-ci / Platform check-only (offline) (push) Successful in 23s
acdl-ci / Test (push) Successful in 5m53s
Audit of v1.15-Nova milestone: reconstruction PASS (27 commits, 20 with
ci blocks, 7 merges per convention, state matches checkpoint). File
discipline: 10 auto-fixed rebrand-completeness gaps — 9 .ciagent/*.md
headers still said ACDL (PROJECT/REQUIREMENTS/ROADMAP/RESEARCH/AUDIT/
REVIEW/COST/IAM_POLICY/CAPABILITY_INVENTORY → Nova) + config.json
projects[].name → Nova. Active v1.15 sections already Nova; historical
v1.1-v1.14 narratives left as-is. Branch hygiene PASS (6 phases + 1
milestone all merged, 0 orphans). Commit discipline PASS (0 non-merge
commits without ci blocks, 0 unresolved escalations). 6 audit checks
all PASS. Verdict: PASS.

---ci---
project: acdl
phase: 5
milestone: v1.15
status: complete
phase_role: final
audit: pass
---/ci---
2026-07-30 14:37:58 +00:00
Jon Chery 008adf26b3 docs(ship): v1.15.4 milestone release — Nova Rebrand complete (Gitea release id 302)
acdl-ci / Lint (push) Successful in 16s
acdl-ci / Test (push) Successful in 5m40s
acdl-ci / Platform check-only (offline) (push) Successful in 21s
---ci---
project: acdl
phase: 5
milestone: v1.15
status: complete
phase_role: final
tag: v1.15.4
release_id: 302
---/ci---
2026-07-30 02:26:03 +00:00
Jon Chery a420e3b952 Merge milestone/v1.15-nova — v1.15 complete (Nova Rebrand: full ACDL→Nova rebrand across docs, decks, code, configs, CI, env vars, consumer path, SSM path, tag keys, AWS resource names; 4 execution phases + final; tag v1.15.4)
acdl-ci / Lint (push) Successful in 20s
acdl-ci / Platform check-only (offline) (push) Successful in 29s
acdl-ci / Test (push) Successful in 6m41s
v1.15.4
2026-07-30 02:24:50 +00:00
Jon Chery 3c765c3211 Merge phase/05-final-review-ship — v1.15.4 (Nova P5 final-review-ship complete, milestone release) 2026-07-30 02:24:20 +00:00
Jon Chery e15eea067b docs(milestone): complete v1.15 — Nova Rebrand (tag v1.15.4)
P5 final-review-ship complete: dual-read fallback removed (REQ-164) —
core/env.py NOVA-only, .env.secrets load paths NOVA-only (G-106 retired),
nova_tagging.py hard-fails any acdl:* tag, legacy ACDL_* Gitea secrets
deleted, ACDL_LIFECYCLE_MODE/ACDL_LOCAL_TIER/ACDL_HITL_* exports removed
from scripts, SNS subject → Nova SoD halt (P1-2), bootstrap scripts
NOVA-only. Review: 2 P0 auto-fixed (duplicate delenv), P1-1/P1-2 resolved,
doc-drift fixed. Audit: tags v1.15.0-4 exist; traceability REQ-155..164
all complete; ARCHITECTURE naming table matches codebase. 615 pytest PASS;
run_ci.sh 3-stage PASS. NOVA_MIGRATION.md marked COMPLETE.

---ci---
project: acdl
phase: 5
milestone: v1.15
status: complete
phase_role: final
requirements:
  covered: [REQ-155, REQ-156, REQ-157, REQ-158, REQ-159, REQ-160, REQ-161, REQ-162, REQ-163, REQ-164]
  partial: []
---/ci---
2026-07-30 02:23:55 +00:00
Jon Chery eb7634da28 fix(P5): doc drift — Nova rebrand stale refs in docs/decks/roadmap/arch
v1.15-Nova rebrand doc verification (phase/05-final-review-ship) found
stale ACDL references where the code/terraform already uses Nova names.

Critical drift fixed (doc said old name; code uses new):
- README.md: `.acdl/contract.yml` -> `.nova/contract.yml`;
  `acdl-spike-runner` -> `nova-spike-runner`; ABAC tag keys
  `acdl:owner|contract` -> `nova:owner|contract`.
- docs/environments/index.md: `acdl-contract-ingestor` -> `nova-contract-ingestor`;
  `aws:PrincipalTag/acdl:owner` -> `nova:owner`; `acdl-contracts` -> `nova-contracts`.
- docs/consumer-guide.md: `acdl-change-requests` -> `nova-change-requests`;
  state bucket example `acdl-qa-state` -> `nova-qa-state`.
- docs/presentations/* (4 decks + 2 HTML + talking-points): `acdl:owner|contract|
  environment|cost-center` -> `nova:*`; `ACDL_LIFECYCLE_MODE` -> `NOVA_LIFECYCLE_MODE`.
- pipelines/modules-lifecycle.yml comments: `ACDL_LIFECYCLE_MODE` ->
  `NOVA_LIFECYCLE_MODE` (workflows already use NOVA_; the contract comments were stale).
- docs/NOVA_MIGRATION.md: status banner -> COMPLETE (P5 cutoff passed).
- .ciagent/ARCHITECTURE.md: header `ACDL` -> `Nova`; NOVA_LIFECYCLE_MODE
  rename noted in the live lifecycle-mode section (v1.15 addendum already correct).
- .ciagent/ROADMAP.md: v1.15 phase statuses P1-P4 pending -> complete
  (v1.15.1..v1.15.4); P5 -> in progress (phase/05-final-review-ship).

Verification:
- grep for `acdl:*` tag keys / `.acdl/contract` / `acdl-contract-ingestor` /
  `acdl-contracts` / `ACDL_LIFECYCLE_MODE` in README/docs/pipelines -> 0 hits
  (excluding explicitly-unchanged repo path `acdl/.github/...`,
  `continuous-intelligence/acdl`, and historical narrative).
- core/output_publisher.py uses `/nova`; schemas/tagging-standard.json uses
  `nova:*`; terraform uses `nova-*` (0 `acdl-` in *.tf) — docs now match.
- git tag v1.15.0..v1.15.4 exist.
- pytest tests/test_lifecycle_mode_flag.py tests/test_pipeline_contract.py
  -> 111 passed.

---ci---
project: acdl
2026-07-30 02:11:12 +00:00
Jon Chery 13846d553a fix(P5): review P0 — collapse duplicate NOVA_* delenv in route-halt + adapter tests
Code review (correctness lens) found the same P5 mechanical-edit defect
in two more test files: the ACDL_* fallback delenv was replaced with a
duplicate NOVA_* delenv (leaving a dead duplicate line, a stale 'ACDL_*
fallback until P5' comment, and the ACDL_* var no longer cleaned).

- tests/test_route_halt_artifact.py: two sites (stderr-fallback +
  outbox-fallback) each deleted NOVA_SOD_HALT_TOPIC_ARN twice.
- tests/test_adapter.py::test_default_remote_state_key: deleted
  NOVA_REMOTE_STATE_KEY twice.

With core/env.py NOVA-only as of P5, a single NOVA_* delenv is the
correct precondition. Collapsed to one delenv per var + updated comments.

---ci---
project: acdl
phase: 5
milestone: v1.15
status: verify
lessons:
  - P0 fix applied: duplicate monkeypatch.delenv('NOVA_*') in test_route_halt_artifact.py (2 sites) + test_adapter.py collapsed to a single delenv consistent with the P5 NOVA-only core/env.py.
---/ci---
2026-07-30 02:05:57 +00:00
Jon Chery d14f9289da fix(P5): review P0 — remove duplicate delenv in attestation signature-skip test
Code review (correctness lens) found a P0 in tests/test_attestation_matrix.py
introduced by the P5 fallback-removal pass: the dual-read delenv of
ACDL_ATTESTATION_SIGNING_KEY_ID was replaced with a second (duplicate)
delenv of NOVA_ATTESTATION_SIGNING_KEY_ID, leaving the test misleading
(comment claimed 'both NOVA_* and ACDL_* must be unset' while only NOVA_*
was deleted twice) and the ACDL_* var no longer cleaned. With P5 having
removed the ACDL_* fallback from core/env.py, deleting NOVA_* alone is the
correct and sufficient precondition for the skip; this commit drops the
duplicate line and updates the comment to match the NOVA-only contract.

---ci---
project: acdl
phase: 5
milestone: v1.15
status: verify
lessons:
  - P0 fix applied: duplicate monkeypatch.delenv('NOVA_ATTESTATION_SIGNING_KEY_ID') in test_signature_skip_when_key_unset left the test misleading and the ACDL_* var uncleaned; collapsed to a single NOVA_* delenv consistent with the P5 NOVA-only core/env.py.
---/ci---
2026-07-30 02:03:16 +00:00
Jon Chery d4b8b5e1e9 Merge phase/04-aws-resource-migration — v1.15.4 (Nova P4 AWS resource migration complete) 2026-07-30 01:56:16 +00:00
Jon Chery bf8ac0fe49 verify(P4): Nova rebrand AWS resource migration — 4-layer verify PASS
VERIFY: structural — all acdl-*→nova-* in terraform (DynamoDB, Secrets,
Lambda, SNS, SG, KMS alias, ECS, ECR, IAM, state bucket, ALB, VPC) +
Lambda defaults (D-111) + nova-deploy role ARN; behavioral — terraform
validate PASS + 615 pytest PASS + run_ci.sh 3-stage PASS; security —
ABAC policy ARNs updated, state-bucket -migrate-state documented;
quality — grep-zero on acdl- in terraform (0 hits). New
docs/NOVA_AWS_MIGRATION.md runbook + scripts/migrate_dynamodb_data.py
(+17 tests). REQ-163 complete.

---ci---
project: acdl
phase: 4
milestone: v1.15
status: verify
requirements_covered: [REQ-163]
---/ci---
2026-07-30 01:56:11 +00:00
Jon Chery 0e6ecae26d feat(P4): Nova rebrand — AWS resource migration (REQ-163)
Rename all acdl-* AWS resources → nova-* across terraform (DynamoDB,
Secrets Manager, Lambda, SNS, SG, KMS alias, ECS, ECR, IAM user/policy,
state bucket, ALB, VPC/subnet names). Lambda default table names → nova-*
(D-111). State bucket backend → nova-tfstate (-migrate-state documented).
New docs/NOVA_AWS_MIGRATION.md runbook (staged migration + rollback).
New scripts/migrate_dynamodb_data.py (scan+copy, dry-run default).
acdl-deploy- → nova-deploy- role ARN in deploy workflows. Test fixtures
updated; terraform validate + pytest + run_ci.sh PASS.

---ci---
project: acdl
phase: 4
milestone: v1.15
status: execute
---/ci---
2026-07-30 01:54:26 +00:00
Jon Chery 267df4ad0d Merge phase/03-ssm-tagkeys — v1.15.3 (Nova P3 SSM+tagkeys complete) 2026-07-30 01:40:16 +00:00
Jon Chery da0de6068a verify(P3): Nova rebrand SSM path + tag keys — 4-layer verify PASS
VERIFY: structural — SSM_PREFIX /acdl→/nova, tag keys acdl:*→nova:* in
terraform + tagging-standard.json, nova_tagging hard mode (_WARN_MODE=False);
behavioral — 598 pytest PASS (+32 new) + run_ci.sh 3-stage PASS + regression
gate 22/22 Verified; security — ABAC PrincipalTag/acdl:owner→nova:owner,
migration scripts dry-run-default; quality — grep-zero on acdl: tag keys
(remaining = legacy-detection constant + migration guide). REQ-161/162
complete. New scripts/migrate_ssm_paths.py + untag_acdl_keys.py (+32 tests).

---ci---
project: acdl
phase: 3
milestone: v1.15
status: verify
requirements_covered: [REQ-161, REQ-162]
---/ci---
v1.15.3
2026-07-30 01:40:12 +00:00
Jon Chery 51c3edf458 feat(P3): Nova rebrand — SSM path + tag keys (REQ-161/162)
SSM path /acdl/{env}/{contractId}/{output} → /nova/... across
core/output_publisher + contract resolver + consumer docs. New
scripts/migrate_ssm_paths.py (copy/verify/delete, dry-run default).
AWS tag keys acdl:owner|environment|contract|cost-center|ref → nova:*
across terraform tagging + ABAC session policies (iam:ResourceTag/acdl:*
→ iam:ResourceTag/nova:*). nova_tagging.py hard mode (D-109 warn→hard).
tagging-standard.json tag-key values → nova:*. New
scripts/untag_acdl_keys.py (remove old acdl:* tags, dry-run default).
Test fixtures updated; pytest + run_ci.sh PASS.

---ci---
project: acdl
phase: 3
milestone: v1.15
status: execute
---/ci---
2026-07-30 01:38:30 +00:00
Jon Chery e998d9fa6b Merge phase/02-code-envvars-consumer-path — v1.15.2 (Nova P2 complete) 2026-07-30 01:27:09 +00:00
Jon Chery 7ea58ec1c9 verify(P2): Nova rebrand code/env-vars/consumer-path — 4-layer verify PASS
VERIFY: structural — core/env.py dual-read helper + nova_tagging.py
warn-mode + .acdl/→.nova/ + 21 NOVA_* env vars; behavioral — 566 pytest
PASS + run_ci.sh 3-stage PASS; security — G-106 dual-read in both
.env.secrets load paths (run_platform.sh:294-295 + regression_verify.py
:322-325), G-108 Gitea NOVA_* secrets created (4/5 HTTP 201/204, 1
skip-no-source) + workflow secrets: refs updated; quality — grep-zero
on stray ACDL_ code reads (remaining = intentional dual-read fallback).
REQ-158/159/160 complete.

---ci---
project: acdl
phase: 2
milestone: v1.15
status: verify
requirements_covered: [REQ-158, REQ-159, REQ-160]
---/ci---
v1.15.2
2026-07-30 01:27:06 +00:00
Jon Chery d5bae868a4 feat(P2): Nova rebrand — code/env-vars/consumer-path (REQ-158/159/160)
core/env.py dual-read helper (D-108); 21 ACDL_*→NOVA_* env vars migrated
across core/scripts/adapters/tests/workflows + .env/.env.secrets (key
rename, values stay). G-106 binding: run_platform.sh:288-289 +
regression_verify.py:309-312 dual-read (NOVA first, ACDL fallback).
G-108 binding: Gitea NOVA_* secrets created via API + workflow secrets:
refs updated (deploy.yml + modules-lifecycle.yml, .gitea + .github).
acdl_tagging.py→nova_tagging.py (D-109 warn mode, nova:* enforced).
.acdl/→.nova/ consumer path (resolver + deploy workflow + schema +
tests + docs). Test fixtures updated; pytest + run_ci.sh PASS.

---ci---
project: acdl
phase: 2
milestone: v1.15
status: execute
---/ci---
2026-07-30 01:25:24 +00:00
Jon Chery 0bc70a3d95 Merge phase/01-docs-decks-prose — v1.15.1 (Nova P1 docs/decks/prose complete) 2026-07-30 00:58:22 +00:00
Jon Chery adce478e09 verify(P1): Nova rebrand docs/decks/prose — 4-layer verify PASS
VERIFY (4 layers): structural — 57 files rebranded, JSON schemas valid,
pyproject name=nova; behavioral — run_ci.sh 3-stage PASS (lint+test+
check-only); security — no creds touched, S&P theme untouched (D-107);
quality — grep-zero on prose-identity ACDL (remaining hits are justified
literals for P2/P3/P4: env vars, resource names, tag keys, paths, real
repo uses: refs). Mermaid 5/5 PNGs re-exported. Nova tagline added to
README + decks + vision.md (North Star retained, D-106).
NOVA_MIGRATION.md consumer guide shipped.

---ci---
project: acdl
phase: 1
milestone: v1.15
status: verify
requirements_covered: [REQ-155, REQ-156, REQ-157]
---/ci---
v1.15.1
2026-07-30 00:58:19 +00:00
Jon Chery 63f3a2b66c feat(P1): Nova rebrand — docs/decks/prose/schema-$id/release-titles (REQ-155/156/157)
Rebrand ACDL/Agentic Cloud Delivery Platform → Nova across README, docs/,
decks (markdown + mermaid .mmd + HTML), pyproject.toml name/description,
schema $id URLs (acdl.cloudinit.dev→nova.cloudinit.dev), release.yml
title/workflow-name. Nova tagline added to README header + both deck title
slides + docs/vision.md (alongside existing North Star, D-106). S&P theme
untouched (D-107). New docs/NOVA_MIGRATION.md consumer guide. Data values
(env vars, resource names, tag keys, SSM/consumer paths) left for P2-P4.

---ci---
project: acdl
phase: 1
milestone: v1.15
status: execute
---/ci---
2026-07-30 00:56:19 +00:00
Jon Chery 1ff942684e docs(ship): v1.15.0 complete — Nova Rebrand P0 pre-execution (Gitea release id 297)
---ci---
project: acdl
phase: 0
milestone: v1.15
status: complete
phase_role: pre_execution
tag: v1.15.0
release_id: 297
---/ci---
2026-07-30 00:41:48 +00:00
Jon Chery 6c25ce3900 Merge phase/00-pre-execution — v1.15.0 (Nova Rebrand P0 complete) 2026-07-30 00:40:52 +00:00
Jon Chery d14b55b774 docs(P00): incorporate grill binding mitigations G-104/G-106/G-108
GRILL (ci-griller): 9 axes, 8 findings G-103..G-110, verdict
proceed-with-conditions (conf 0.82). 3 binding mitigations incorporated:
- G-104 (scope/technical, conf 0.90): re-tag Major milestone on its OWN
  minor line (v1.15.x), not the v1.14.x patch line (NFR convention).
  Precedent: v1.10.2→v1.11.0, v1.9.x→v1.10.0. Updated PLAN/ROADMAP/
  PROJECT/REQUIREMENTS/ARCHITECTURE tag refs: v1.15.0(P0)→v1.15.4(P5).
- G-106 (risk/technical, conf 0.88): .env.secrets direct-read paths
  (run_platform.sh:288-289 + regression_verify.py:309-312) bypass the
  core/env.py helper — P2 MUST dual-read these (NOVA_* first, ACDL_*
  fallback) or AWS creds vanish mid-rename. Bound in PLAN.md P2 task 2.
- G-108 (security, conf 0.80): CI workflow secrets: refs (deploy.yml +
  modules-lifecycle.yml, .gitea + .github) reference secrets.ACDL_* —
  P2 MUST update to secrets.NOVA_* in lockstep with Gitea secret
  creation. Bound in PLAN.md P2 task 3 (hard gate). 5 accepted-as-is
  findings (G-103/105/107/109/110), 0 open escalations.

---ci---
project: acdl
phase: 0
milestone: v1.15
status: grill
---/ci---
v1.15.0
2026-07-30 00:40:35 +00:00
Jon Chery 69ba3d728f verify(grill): v1.15-Nova rebrand — 9 axes, 8 findings (G-103..G-110), 3 binding mitigations
---ci---
status: grill
milestone: v1.15
verdict: proceed-with-conditions
confidence: 0.82
binding_decisions:
  - G-103: ACCEPT-AS-IS (feasibility) — 4-phase structure sound; conf 0.85
  - G-104: MITIGATE-BINDING (scope/technical) — re-tag as v1.15.x minor-bumped; conf 0.90
  - G-105: ACCEPT-AS-IS (cost) — no live apply during P0-P4; conf 0.80
  - G-106: MITIGATE-BINDING (risk/technical) — dual-read in BOTH .env.secrets load paths (run_platform.sh + regression_verify.py); conf 0.88
  - G-107: ACCEPT-AS-IS (testability) — per-phase fixture updates keep gate 16/16; mmdc via npx available; conf 0.82
  - G-108: MITIGATE-BINDING (security) — update CI workflow secrets: refs when NOVA_* Gitea secrets created; hard gate + retry; conf 0.80
  - G-109: ACCEPT-AS-IS (maintainability) — P5 mechanical cleanup; conf 0.78
  - G-110: ACCEPT-AS-IS (adversarial) — runbook + staged ordering is rollback; conf 0.75
escalations: []
open_issues:
  - G-104 mitigation must be incorporated into PLAN.md before P0 ship (re-tag v1.14.x -> v1.15.x)
  - G-106 mitigation must be incorporated into PLAN.md P2 (dual-read in run_platform.sh:288-289 + regression_verify.py:309-312)
  - G-108 mitigation must be incorporated into PLAN.md P2 task 3 (update .gitea/.github workflow secrets: refs)
---ci---
2026-07-30 00:39:01 +00:00
Jon Chery 533a9d7bcb docs(P00): create phase plans — v1.15-Nova (4 exec + 1 final)
PLAN.md: vertical-slice task decomposition for P1-P5. Wave ordering:
W1 docs/decks/prose (P1, lead-developer) → W2 code/env-vars/consumer-path
(P2, backend+lead, dual-read core/env.py helper D-108) → W3 ssm/tagkeys
(P3, data+backend, parallel-tag ABAC + nova_tagging hard mode) → W4
aws-resource-migration (P4, data+lead, staged terraform migration +
runbook) → W5 final-review-ship (P5, lead, remove dual-read fallback).
Binding constraint: regression gate stays 16/16 Verified throughout.
9 success criteria incl. grep-zero checks on ACDL_/acdl- remnants.

---ci---
project: acdl
phase: 0
milestone: v1.15
status: plan
---/ci---
2026-07-30 00:03:03 +00:00
Jon Chery 93c7106cd9 docs(P00): research findings — v1.15-Nova rebrand scope
RESEARCH: 8 findings from the exhaustive codebase survey (1,465 ACDL
occurrences / 205 files; 0 nova collisions). Brand string surface area,
code identifiers (21 env var prefixes, no centralized loader → core/env.py
per D-108), AWS resource names (high-risk migration table), consumer/infra
conventions (tag keys/SSM path/consumer path), docs & decks (mechanical,
S&P theme untouched per D-107), CI/release, external URLs, nomenclature.
Persona assessment: roster carries forward (lead/backend/data active,
frontend deactivated); domain priority inverted to lead→backend→data
(docs-first rebrand). ARCHITECTURE.md v1.15 addendum: full naming-
conventions rebrand table + migration ordering + capability gate.

---ci---
project: acdl
phase: 0
milestone: v1.15
status: research
---/ci---
2026-07-30 00:02:31 +00:00
Jon Chery 66d7cb9541 docs(P00): clarify — v1.15-Nova decisions D-102..D-112 locked
Full-autonomy CLARIFY: 11 decisions resolved. D-102..D-107 (high-judgment
scope) locked by user during planning: full rename w/ migration (AWS
resources, env vars, tag keys, SSM path, consumer path); illustrative
URLs updated; Nova tagline added alongside North Star; S&P theme
untouched. D-108..D-112 (CLARIFY): dual-read helper in core/env.py;
Checkov warn-then-hard across P2/P3; schema $id URLs rebranded; Lambda
defaults deferred to P4; flat-branch convention preserved.

---ci---
project: acdl
phase: 0
milestone: v1.15
status: clarify
---/ci---
2026-07-30 00:01:33 +00:00
Jon Chery 59a71d332a docs(init): validate specification — v1.15-Nova rebrand milestone
Establish milestone v1.15 (Nova Rebrand) — Major/breaking milestone.
Ideation output (--ideate): 10 requirements REQ-155..REQ-164 mapping
the full ACDL→Nova rebrand across docs, decks, code, configs, CI, env
var prefixes, consumer contract path, SSM paths, AWS tag keys, and
AWS resource names. Staged 4-phase migration + final review/ship.
Tags run on the v1.14.x patch line: v1.14.0 (P0) → v1.14.5 (P5 final).

---ci---
project: acdl
phase: 0
milestone: v1.15
status: specify
---/ci---
2026-07-30 00:00:52 +00:00
Jon Chery 66a3c6958e docs(audit): v1.14 post-milestone audit — PASS (reconstruction + file discipline + branch hygiene + commit discipline + audit checks)
acdl-ci / Lint (push) Successful in 7s
acdl-ci / Platform check-only (offline) (push) Successful in 23s
acdl-ci / Test (push) Successful in 5m59s
---ci---
project: acdl
phase: 21
milestone: v1.14
status: audit
---/ci---
2026-07-29 22:59:36 +00:00
Jon Chery da533a8c2f docs(ship): v1.13.24 complete — v1.14 milestone released (Gitea release id 285)
acdl-ci / Lint (push) Successful in 8s
acdl-ci / Platform check-only (offline) (push) Successful in 24s
acdl-ci / Test (push) Successful in 6m34s
---ci---
project: acdl
phase: 21
milestone: v1.14
status: complete
---/ci---
2026-07-29 21:37:11 +00:00
Jon Chery 3b1181f39b Merge milestone/v1.14-refinement — v1.14 complete (NFR Refinement: bug fixes, security, stubs, tests, docs; 20 phases + final; tag v1.13.24)
acdl-ci / Lint (push) Successful in 10s
acdl-ci / Platform check-only (offline) (push) Successful in 25s
acdl-ci / Test (push) Successful in 6m34s
v1.14 NFR Refinement milestone complete. 20 execution phases (P1-P20) +
1 final (P21). All P1/P2 backlog from v1.11 review resolved. Security
posture hardened (swallowed errors, account ID externalized, IAM scoped,
schema validation, credential hygiene). Stubs resolved (kyverno --kube-
version removed). 7 untested scripts gained coverage. Documentation
synced (ARCHITECTURE v1.11-v1.14 addenda, stale @v1.6-1.9 -> @v1.13,
GRILL G-005/G-008 resolved, COST.md window extended, D-083 deferral
recorded). Platform VPC parameterized.

561 tests pass (was 528 at v1.13.2; +33). 22/22 capabilities Verified.
6 grill binding decisions (G-101..G-106) applied. 1 escalation (E-001)
auto-resolved at full autonomy (D-101).

---ci---
project: acdl
phase: 21
milestone: v1.14
status: complete
---/ci---
v1.13.24
2026-07-29 21:36:37 +00:00
Jon Chery 139224ff6c docs(P71b): presentation badge cleanup + platform architecture diagram (v1.13.2)
acdl-ci / Lint (push) Successful in 9s
acdl-ci / Platform check-only (offline) (push) Successful in 24s
acdl-ci / Test (push) Successful in 5m51s
Remove all testing/agentic maturity badges from both leadership decks across
all 4 pipeline layers (source .md, Marp -marp.md, rendered .html,
talking-points). Only the planned badges are retained where relevant. Marp
inline CSS dropped the .testing/.agentic rules (kept .planned). README
maturity-framing updated to describe only the Planned badge.

Add a new Slide 3 'The platform at a glance' to both decks with a shared
high-level logical architecture diagram (assets/mmd/platform-architecture.mmd
-> assets/png/platform-architecture.png). The diagram shows the full topology:
consumer surfaces (technical dev + citizen dev) -> contract schema -> central
pipeline (8 fixed stages) -> cross-cutting components (module catalog,
stateless engine adapter, platform-managed environments, HITL gates,
hash-chained evidence stream) -> downstream AWS resources. Subsequent slides
renumbered 4-11; talking points + README directory layout + slide counts
(10->11 main, 19->20 / 18->19 total) synced. Both HTML decks re-rendered.

Docs-only NFR patch (no code changes).

---ci---
project: acdl
phase: 71b
milestone: v1.13
status: complete
---/ci---
v1.13.2
2026-07-29 15:34:57 +00:00
Jon Chery af91965e51 docs(ship): v1.13.1 complete — config.json schema migration
acdl-ci / Lint (push) Successful in 8s
acdl-ci / Test (push) Successful in 5m57s
acdl-ci / Platform check-only (offline) (push) Successful in 21s
---ci---
project: acdl
phase: 0
milestone: v1.13
status: complete
---/ci---
2026-07-29 15:17:28 +00:00
Jon Chery 0e2d213c39 verify(P##): code review — config.json schema migration (0 P0, 2 P1/P2 auto-fixed)
acdl-ci / Lint (push) Successful in 8s
acdl-ci / Test (push) Successful in 5m54s
acdl-ci / Platform check-only (offline) (push) Successful in 21s
Regenerate .ciagent/config.json to the updated CIAgent schema:
- Drop removed fields (mode, projects[].milestone/status/branch/tag)
- Migrate top-level gitea -> release.gitea (forge: gitea)
- Add new sections: secrets, release, ship, backend, ideation,
  personas, logging, telemetry, active_projects, security.bash_allowlist
- Preserve autonomy/parallelization/verification/git/sessions values
- Preserve custom gitea token env var (ACDL_GITEA_TOKEN) via secrets.scopes

Review findings auto-fixed:
- P1: add .ciagent/logs/ to .gitignore (runtime log artifact hygiene)
- P2: restore trailing newline in config.json

---ci---
project: acdl
phase: 0
milestone: v1.13
status: verify
lessons:
  - P1: .ciagent/logs/ default logging.file target was untracked — gitignore it
  - P2: config.json lost trailing newline during regeneration — restored
---/ci---
v1.13.1
2026-07-29 15:06:00 +00:00
Jon Chery de1657394e docs(milestone): complete v1.13 — Presentation Polish (tag v1.13.0)
acdl-ci / Lint (push) Successful in 9s
acdl-ci / Test (push) Successful in 6m15s
acdl-ci / Platform check-only (offline) (push) Successful in 22s
Update config.json (active milestone v1.12 -> v1.13, ship_tag v1.13.0)
and ROADMAP.md (add v1.13 summary line + full v1.13 section documenting
P71, the 6 new diagrams, the story-arc restructure, and the review outcome).

NFR milestone — final patch (v1.13.0) IS the deliverable. No separate
milestone tag.

---ci---
project: acdl
phase: 0
milestone: v1.13
status: complete
---/ci---
v1.13.0
2026-07-29 14:54:53 +00:00
Jon Chery 06dea7a176 docs(review): P1 fixes — sync slide-count metadata + README directory layout
Review of P71 (v1.13) flagged 2 P1 documentation-metadata drift items:
1. Source .md length headers undercounted by 1 (excluded Appendix TOC slide)
2. README.md drifted — missing 12 new asset files + stale slide/section counts

Fixes:
- how-the-platform-works.md: 18 -> 19 slides (10 main + TOC + 8 appendix)
- the-developer-experience.md: 17 -> 18 slides (10 main + TOC + 7 appendix)
- both *-talking-points.md companion headers updated to match
- README.md directory layout: added 6 new .mmd + 6 new .png files
- README.md appendix convention: "10 main + 6 appendix (17 total)" ->
  per-deck counts (A1-A8 platform, A1-A7 developer, both with TOC)
- README.md current-decks table: slide counts updated to 19/18
- README.md talking-points structure: "10 main + 7 appendix" -> TOC-aware

No factual/capability claim changes. 16 docs tests pass.

---ci---
project: acdl
phase: 71
milestone: v1.13
status: verify
lessons:
  - P1 fix: sync slide-count metadata across source .md, talking-points, README
---/ci---
2026-07-29 14:51:27 +00:00
Jon Chery 7ea9a07be8 Merge milestone/v1.13-deck-polish — v1.13 complete (Presentation Polish: action headlines, trimmed bullets, 6 new diagrams, 4-layer pipeline synced, P71) 2026-07-29 14:43:41 +00:00
Jon Chery cf44040009 Merge phase/71-deck-polish — v1.13 complete (deck polish: action headlines, trim, 6 new diagrams, 4-layer pipeline synced for both decks) 2026-07-29 14:43:36 +00:00
Jon Chery 4b8577df2e docs(P71): polish leadership decks — action headlines, trim, 6 new diagrams (v1.13)
Polish both leadership decks (how-the-platform-works + the-developer-experience)
across all 4 pipeline layers (source md, marp, html, talking points).

Story-arc restructure (per storytelling best practices):
- Intro ~10% / Body ~80% / Conclusion ~10%; 3-5 body points per deck
- One idea per slide; action headlines replace category names
- Before/after 2-slide sequence (problem -> north star) on platform deck
- Main 10 slides kept; detail pushed to expanded appendix (8 + 7)

Word reduction + natural flow:
- Remove all <em class="story"> transition lines (flow carried by headlines)
- Bullets <= 12 words, 3-4 per main slide (was 5-6)
- Cut parentheticals, sub-clauses, redundant restatements

Design + visuals:
- Larger fonts: body 22 -> 26px, h1 34 -> 40px, h2 26 -> 32px, blockquote 20 -> 24px
- 6 new mermaid diagrams -> PNGs:
  - platform-works-02-frictions (2x2 quadrant)
  - platform-works-03-north-star (before/after)
  - platform-works-07-zero-trust (OIDC + ABAC flow)
  - developer-experience-05-catalog (primitives -> modules)
  - developer-experience-07-decommission (6-node gate flow)
  - developer-experience-08-semver (floating/pinned/major timeline)
- At most 1 diagram per main slide; no diagrams on title/conclusion
- High contrast preserved, no animations, maturity badges intact

Verify:
- Marp renders both decks clean (HTML re-rendered, committed)
- Talking-points sections == Marp slide count per deck
- No stale "deploy-unverified" claims (only closed-status disclosure)
- 522 tests pass (no code touched; only docs/presentations/ files changed)
- 22/22 Verified framing preserved verbatim from v1.12

---ci---
project: acdl
phase: 71
milestone: v1.13
status: complete
---/ci---
2026-07-29 14:43:29 +00:00
Jon Chery 9aa9ece1df Merge milestone/v1.12-presentation — v1.12 complete (Presentation Refinement: decks synced to 22/22 Verified, CAP-013 adapter fix, lifecycle plan-only default, P66-P70) 2026-07-29 13:48:10 +00:00
Jon Chery 0f6d10a2b6 docs(milestone): complete v1.12 — Presentation Refinement (tag v1.12.0)
---
ci---
project: acdl
phase: 0
milestone: v1.12
status: complete
requirements:
  covered: [REQ-129, REQ-130, REQ-134, REQ-131, REQ-132, REQ-133]
  partial: []
---
/ci---

Milestone v1.12 complete. All 6 requirements satisfied:
- REQ-129: adapter dedup defect fixed (CAP-013 Verified).
- REQ-130: 2 regression-probe bugs fixed (CAP-017/018).
- REQ-134: lifecycle tests plan-only default + ACDL_LIFECYCLE_MODE flag.
- REQ-131: decks match CAPABILITY_INVENTORY.md (22/22 Verified, zero
  stale claims except the honest 'v1.10 status is closed' disclosure).
- REQ-132: decks reflect v1.11 architecture + roadmap (v1.10 no longer
  NEXT); version refs bumped to @v1.12.
- REQ-133: A6 (real cost figures + pre-mortem) + A7 (stateless adapter +
  lifecycle pipeline); HTML re-rendered; PPTX exported for the release.

Verification: 522 tests pass; 22/22 capabilities Verified (D-091);
run_platform.sh --check-only green; run_ci.sh green; ci-doc-verifier
grep clean; multi-persona review clean (P1 remediated).

ROADMAP.md v1.12 section added; v1.11 marked complete; config.json
status -> complete, ship_tag v1.12.0. Version refs @v1.11 -> @v1.12
(decks re-rendered). PPTX in /tmp/v1.12-release/ for the Gitea upload.
2026-07-29 13:48:06 +00:00
Jon Chery 6d8c098205 test(P70): add CAP-013 regression tests — terraform validate + dedup unit assertions (P1 remediation)
---
ci---
project: acdl
phase: 70
milestone: v1.12
status: verify
---
/ci---

Code review (P70) flagged 2 P1 testing gaps:
1. No end-to-end terraform validate test for the microservice (the real
   CAP-013 surface). A future refactor could re-break the dedup and the
   suite would stay green.
2. No unit test for the _child_id helper / id_remap / dedup merge.

Added 6 tests (38 adapter tests total, 522 suite total):
- test_microservice_dedup_names_modules_by_child_id: asserts module 'alb'
  + 'service' appear, expanded sub-ids do NOT.
- test_microservice_dedup_rewrites_stack_outputs: service_arn -> module.service,
  lb_arn -> module.alb.
- test_microservice_dedup_rewrites_cross_module_refs: lb_target_group_arn ->
  module.alb.target_group_arn (not module.alb-targetgroup).
- test_microservice_emits_valid_terraform: end-to-end terraform init +
  validate on the microservice main.tf (locks in CAP-013).
- test_single_resource_returns_id_verbatim / test_multi_resource_returns_common_prefix:
  unit tests for _child_id.

P2 nits (noted, not fixed): the ci-vpc-apply/destroy 'if' uses != 'plan'
rather than == 'full' (stricter but not exploitable); _child_id docstring
could note commonprefix is character-wise. Both are post-hoc.
2026-07-29 13:44:52 +00:00
Jon Chery e33d6c890f docs(P69): re-synthesize Marp decks + talking points + re-render HTML (22/22 Verified)
---
ci---
project: acdl
phase: 69
milestone: v1.12
status: execute
---
/ci---

Re-synthesized both Marp decks from the v1.12-synced source markdown:
- Both decks now 10 main + 7 appendix = 17 slides (was 10 + 6 = 16).
- New A6 'Operating Model & Cost': real COST.md figures table (/usr/bin/bash.001883/
  8d, ~/usr/bin/bash.007/mo, S3-dominated), zero-cost steady state, D-096 teardown,
  + pre-mortem reference (PRE_MORTEM.md 4 failure modes), + plan-only
  default bullet (ACDL_LIFECYCLE_MODE=full override, REQ-134).
- New A7 'Verified by Construction': stateless adapter (918->~80 lines,
  per-module terraform/ dirs, P67 dedup fix) + pipeline-driven lifecycle
  testing (green cell = verification, plan-only default, 22/22 Verified).
- 'Testing vs. Planned' (PW slide 11 + A4): '11 capabilities' -> '22/22
  Verified via lifecycle pipeline + regression gate'; the
  'deploy-unverified (IAM drift)' Verification Coverage line removed
  and replaced with the honest 'v1.10 status is closed' disclosure.
- Version refs @v1.10 -> @v1.11 across both decks.
- YAML frontmatter (S&P Global Energy theme), badge system, image refs,
  story-beat intros preserved verbatim.

Re-distilled both talking-points files to match (added the previously-
missing A6 + A7 sections; updated all content to 22/22 Verified).

Re-rendered both HTML (committed). Exported both PPTX (held in
/tmp/v1.12-release/ for the v1.12.0 Gitea release upload).

Verification: stale claims in HTML = 2 disclosure lines in PW (the 'v1.10
status is closed' framing), 0 in DX. @v1.10 = 0 across all artifacts.
A6/A7 + cost figures present in both HTML decks. README slide counts
updated (10+7=17).
2026-07-29 13:27:34 +00:00
Jon Chery ec74060664 docs(P68): sync decks source .md to v1.11/v1.12 reality (9 drift items + plan-only-default story)
---
ci---
project: acdl
phase: 68
milestone: v1.12
status: execute
---
/ci---

Source-of-truth markdown for both decks synced to verified reality:
- Re-verification headers -> 22/22 Verified (v1.11 lifecycle + v1.12 P67 fix),
  v1.10 '6 deploy-unverified (IAM drift)' disclosed as closed.
- A4 (PW) verification status: '11 capabilities testing' -> '22/22 Verified
  via lifecycle pipeline + regression gate'.
- De-duplicated repeated story-beat intro lines (PW slides 3-10, A1).
- Version refs @v1.10 -> @v1.11 in deck examples.
- road-to-north-star.mmd re-rendered: v1.10 no longer 'NEXT'; v1.11-v1.12
  lifecycle testing + presentation refine (22/22 Verified + torn down to
  zero-cost) is the current phase; v2.0 is NEXT.
- New A6 'Operating Model & Cost' in both decks: real COST.md figures
  (/usr/bin/bash.001883/8d, ~/usr/bin/bash.007/mo, S3-dominated), zero-cost steady state, D-096
  teardown, + pre-mortem reference (PRE_MORTEM.md: 4 failure modes +
  structural mitigations).
- New A7 'Verified by Construction' in both decks: the two v1.11
  architectural pillars (stateless adapter 918->~80 lines; pipeline-driven
  lifecycle testing — the green cell IS verification) + the v1.12
  plan-only default (ACDL_LIFECYCLE_MODE flag, REQ-134).
- Appendix TOCs updated (5 -> 7 sections).

Marp + HTML + talking points re-synthesized in P69 (next).
2026-07-29 13:22:56 +00:00