Commit Graph

333 Commits

Author SHA1 Message Date
Jon Chery c19a5d66f2 verify(P18): onboarding-schema-and-lambda-action — 4-layer verify PASS + ship
VERIFY: structural — schema + Lambda action; behavioral — 41 tests + CI PASS; quality — pending CMDB row (D-119, no AWS resources).

---ci---
project: acdl
phase: 18
milestone: v1.16
status: complete
phase_role: execution
requirements:
  covered: [REQ-182]
  partial: []
---/ci---
v1.15.23
2026-08-01 13:24:58 +00:00
Jon Chery e8effef415 verify(P17): getting-started-consolidation — 4-layer verify PASS + ship
VERIFY: structural — offline-first restructure; behavioral — CI PASS; quality — single getting-started path.

---ci---
project: acdl
phase: 17
milestone: v1.16
status: complete
phase_role: execution
requirements:
  covered: [REQ-181]
  partial: []
---/ci---
v1.15.22
2026-08-01 13:20:33 +00:00
Jon Chery 4ac68b7270 verify(P16): workflows-readme-catalog — 4-layer verify PASS + ship
VERIFY: structural — README catalogs 7 workflows; behavioral — 7 docs tests + CI PASS; quality — reusable-workflow usage documented.

---ci---
project: acdl
phase: 16
milestone: v1.16
status: complete
phase_role: execution
requirements:
  covered: [REQ-180]
  partial: []
---/ci---
v1.15.21
2026-08-01 13:18:38 +00:00
Jon Chery 518bbe32a7 verify(P15): run-platform-help-and-flags-doc — 4-layer verify PASS + ship
VERIFY: structural — --help + documented flags; behavioral --help exits 0 + CI PASS; quality — README surfaces --local + --help.

---ci---
project: acdl
phase: 15
milestone: v1.16
status: complete
phase_role: execution
requirements:
  covered: [REQ-179]
  partial: []
---/ci---
v1.15.20
2026-08-01 13:16:56 +00:00
Jon Chery ed36519223 verify(P14): schema-driven-outputs-and-cache — 4-layer verify PASS + ship
VERIFY: structural — schema-driven outputs + cache; behavioral — 47 tests + CI PASS; quality — mid-milestone checkpoint clean.

---ci---
project: acdl
phase: 14
milestone: v1.16
status: complete
phase_role: execution
requirements:
  covered: [REQ-178]
  partial: []
---/ci---
v1.15.19
2026-08-01 13:14:31 +00:00
Jon Chery aa3e385606 verify(P13): split-regression-verify — 4-layer verify PASS + ship
VERIFY: structural — CLI extracted (G-113); behavioral — 22-cap import + CI PASS; quality — library/CLI separation.

---ci---
project: acdl
phase: 13
milestone: v1.16
status: complete
phase_role: execution
requirements:
  covered: [REQ-177]
  partial: []
---/ci---
v1.15.18
2026-08-01 13:11:59 +00:00
Jon Chery ab3a9a8548 verify(P12): split-contract-resolver — 4-layer verify PASS + ship
VERIFY: structural — 2 modules extracted + re-export shim (G-113); behavioral — 16 tests + CLI + CI PASS; quality — behavior unchanged.

---ci---
project: acdl
phase: 12
milestone: v1.16
status: complete
phase_role: execution
requirements:
  covered: [REQ-176]
  partial: []
---/ci---
v1.15.17
2026-08-01 13:09:50 +00:00
Jon Chery 5492308140 verify(P11): contract-ingestor-payload-validation — 4-layer verify PASS + ship
VERIFY: structural — size cap + schema validation + aligned caps; behavioral — 51 tests + CI PASS; security — unbounded write blocked.

---ci---
project: acdl
phase: 11
milestone: v1.16
status: complete
phase_role: execution
requirements:
  covered: [REQ-175]
  partial: []
---/ci---
v1.15.16
2026-08-01 13:07:08 +00:00
Jon Chery 76714bebc4 verify(P10): contract-ingestor-defense-in-depth — 4-layer verify PASS + ship
VERIFY: structural — fail-closed + env discovery; behavioral — 49 tests + CI PASS; security — defense-in-depth on IAM identity.

---ci---
project: acdl
phase: 10
milestone: v1.16
status: complete
phase_role: execution
requirements:
  covered: [REQ-174]
  partial: []
---/ci---
v1.15.15
2026-08-01 12:58:23 +00:00
Jon Chery f12f6edd23 verify(P9): run-platform-split — 4-layer verify PASS + ship
VERIFY: structural — 2 helpers extracted (sourced, G-112); behavioral — CI PASS + regression gate 18V+4S PASS (G-111, D-118); quality — run_platform.sh ~80 lines smaller.

---ci---
project: acdl
phase: 9
milestone: v1.16
status: complete
phase_role: execution
requirements:
  covered: [REQ-173]
  partial: []
---/ci---
v1.15.14
2026-08-01 12:52:07 +00:00
Jon Chery 1db5ca8286 verify(P8): workflow-generator-dedup — 4-layer verify PASS + ship
VERIFY: structural — generator + sources; behavioral — 98 tests + CI PASS; quality — ~20KB dedup, single source of truth.

---ci---
project: acdl
phase: 8
milestone: v1.16
status: complete
phase_role: execution
requirements:
  covered: [REQ-172]
  partial: []
---/ci---
v1.15.13
2026-08-01 12:41:10 +00:00
Jon Chery 93ae9e4a39 verify(P7): contract-resolver-envloader-and-kind — 4-layer verify PASS + ship
VERIFY: structural — envloader dedup + kind field; behavioral — 49 tests + CI PASS; quality — fragile is_l2 heuristic replaced.

---ci---
project: acdl
phase: 7
milestone: v1.16
status: complete
phase_role: execution
requirements:
  covered: [REQ-171]
  partial: []
---/ci---
v1.15.12
2026-08-01 12:38:56 +00:00
Jon Chery d3179fff37 verify(P6): run-platform-deadcode-and-hitl-fn — 4-layer verify PASS + ship
VERIFY: structural — HITL fn extracted + deadcode/config; behavioral — syntax clean + CI PASS; quality — ~14 lines saved.

---ci---
project: acdl
phase: 6
milestone: v1.16
status: complete
phase_role: execution
requirements:
  covered: [REQ-170]
  partial: []
---/ci---
v1.15.11
2026-08-01 12:36:40 +00:00
Jon Chery c029b102a3 verify(P5): regression-verify-dedup — 4-layer verify PASS + ship
VERIFY: structural — 3 shared helpers extracted; behavioral — 611 tests + CI PASS; quality — behavior preserved, ~70 lines saved.

---ci---
project: acdl
phase: 5
milestone: v1.16
status: complete
phase_role: execution
requirements:
  covered: [REQ-169]
  partial: []
---/ci---
v1.15.10
2026-08-01 12:31:08 +00:00
Jon Chery 2806c6c3ed verify(P4): migrate-ssm-except-narrowing — 4-layer verify PASS + ship
VERIFY: structural — narrowed excepts; behavioral — 48 tests + CI PASS; security — non-ParameterNotFound errors surface; quality — 2 new + 2 updated tests.

---ci---
project: acdl
phase: 4
milestone: v1.16
status: complete
phase_role: execution
requirements:
  covered: [REQ-168]
  partial: []
---/ci---
v1.15.9
2026-08-01 12:24:30 +00:00
Jon Chery e048acd4dd verify(P3): dead-code-and-stale-prefix-cleanup — 4-layer verify PASS + ship
VERIFY: structural — dead export + stale comments + prefixes gone; behavioral — 616 tests + CI PASS; quality — env-override test updated.

---ci---
project: acdl
phase: 3
milestone: v1.16
status: complete
phase_role: execution
requirements:
  covered: [REQ-167]
  partial: []
---/ci---
v1.15.8
2026-08-01 12:20:40 +00:00
Jon Chery 9421442afd verify(P2): user-facing ACDL→Nova sweep — 4-layer verify PASS + ship
VERIFY: structural — all user-facing strings Nova; behavioral — 79 tests
+ CI PASS; security — no creds; quality — new onboarding Nova-header test.
REQ-166 complete. Internal ship_phase.sh helper added.

---ci---
project: acdl
phase: 2
milestone: v1.16
status: complete
phase_role: execution
requirements:
  covered: [REQ-166]
  partial: []
---/ci---
v1.15.7
2026-08-01 12:12:45 +00:00
Jon Chery bb43d94563 verify(P1): state-bucket + Kyverno rebrand — 4-layer verify PASS + ship
VERIFY: structural — adapter.py:117 nova-tfstate-*; kyverno policy nova:*
labels; behavioral — 80 tests PASS + run_ci.sh 3-stage PASS; security —
emitted backend no longer points at a non-existent bucket; quality —
new test_adapt_emits_nova_state_bucket regression guard. REQ-165 complete.

---ci---
project: acdl
phase: 1
milestone: v1.16
status: complete
phase_role: execution
requirements:
  covered: [REQ-165]
  partial: []
---/ci---
v1.15.6
2026-07-30 15:17:43 +00:00
Jon Chery ee5c372e65 docs(P00): complete pre-execution phase — v1.16 NFR scope
Phase 0: SPECIFY → CLARIFY → RESEARCH → IDEATE → PLAN → GRILL.
NFR milestone v1.16 (Nova Simplification), 20 execution phases + final.
Tags on v1.15.x line: v1.15.5 (this phase) → v1.15.6..v1.15.25 (P1-P20) →
v1.15.26 (P21 final = release).

Scope (D-113..D-119): Simplify without regressions, Security,
Maintainability, User/Developer Experience, No Humans Onboarding Flow
(request-path only; real AWS provisioning deferred). Regression gate
(D-118, G-111) gates P9 + P21 at 20/22 Verified + 2 Skipped.

Grill: PASS-with-binding (G-111..G-113, E-002 deferred to P21).

---ci---
project: acdl
phase: 0
milestone: v1.16
status: complete
phase_role: pre_execution
requirements:
  covered: [REQ-165, REQ-166, REQ-167, REQ-168, REQ-169, REQ-170, REQ-171, REQ-172, REQ-173, REQ-174, REQ-175, REQ-176, REQ-177, REQ-178, REQ-179, REQ-180, REQ-181, REQ-182, REQ-183, REQ-184]
  partial: []
---/ci---
v1.15.5
2026-07-30 15:12:32 +00:00
Jon Chery 787a6490a5 docs(audit): v1.15 post-milestone audit — PASS (rebrand header fixes + 6 checks)
acdl-ci / Lint (push) Successful in 10s
acdl-ci / Platform check-only (offline) (push) Successful in 23s
acdl-ci / Test (push) Successful in 5m53s
Audit of v1.15-Nova milestone: reconstruction PASS (27 commits, 20 with
ci blocks, 7 merges per convention, state matches checkpoint). File
discipline: 10 auto-fixed rebrand-completeness gaps — 9 .ciagent/*.md
headers still said ACDL (PROJECT/REQUIREMENTS/ROADMAP/RESEARCH/AUDIT/
REVIEW/COST/IAM_POLICY/CAPABILITY_INVENTORY → Nova) + config.json
projects[].name → Nova. Active v1.15 sections already Nova; historical
v1.1-v1.14 narratives left as-is. Branch hygiene PASS (6 phases + 1
milestone all merged, 0 orphans). Commit discipline PASS (0 non-merge
commits without ci blocks, 0 unresolved escalations). 6 audit checks
all PASS. Verdict: PASS.

---ci---
project: acdl
phase: 5
milestone: v1.15
status: complete
phase_role: final
audit: pass
---/ci---
2026-07-30 14:37:58 +00:00
Jon Chery 008adf26b3 docs(ship): v1.15.4 milestone release — Nova Rebrand complete (Gitea release id 302)
acdl-ci / Lint (push) Successful in 16s
acdl-ci / Test (push) Successful in 5m40s
acdl-ci / Platform check-only (offline) (push) Successful in 21s
---ci---
project: acdl
phase: 5
milestone: v1.15
status: complete
phase_role: final
tag: v1.15.4
release_id: 302
---/ci---
2026-07-30 02:26:03 +00:00
Jon Chery a420e3b952 Merge milestone/v1.15-nova — v1.15 complete (Nova Rebrand: full ACDL→Nova rebrand across docs, decks, code, configs, CI, env vars, consumer path, SSM path, tag keys, AWS resource names; 4 execution phases + final; tag v1.15.4)
acdl-ci / Lint (push) Successful in 20s
acdl-ci / Platform check-only (offline) (push) Successful in 29s
acdl-ci / Test (push) Successful in 6m41s
v1.15.4
2026-07-30 02:24:50 +00:00
Jon Chery 3c765c3211 Merge phase/05-final-review-ship — v1.15.4 (Nova P5 final-review-ship complete, milestone release) 2026-07-30 02:24:20 +00:00
Jon Chery e15eea067b docs(milestone): complete v1.15 — Nova Rebrand (tag v1.15.4)
P5 final-review-ship complete: dual-read fallback removed (REQ-164) —
core/env.py NOVA-only, .env.secrets load paths NOVA-only (G-106 retired),
nova_tagging.py hard-fails any acdl:* tag, legacy ACDL_* Gitea secrets
deleted, ACDL_LIFECYCLE_MODE/ACDL_LOCAL_TIER/ACDL_HITL_* exports removed
from scripts, SNS subject → Nova SoD halt (P1-2), bootstrap scripts
NOVA-only. Review: 2 P0 auto-fixed (duplicate delenv), P1-1/P1-2 resolved,
doc-drift fixed. Audit: tags v1.15.0-4 exist; traceability REQ-155..164
all complete; ARCHITECTURE naming table matches codebase. 615 pytest PASS;
run_ci.sh 3-stage PASS. NOVA_MIGRATION.md marked COMPLETE.

---ci---
project: acdl
phase: 5
milestone: v1.15
status: complete
phase_role: final
requirements:
  covered: [REQ-155, REQ-156, REQ-157, REQ-158, REQ-159, REQ-160, REQ-161, REQ-162, REQ-163, REQ-164]
  partial: []
---/ci---
2026-07-30 02:23:55 +00:00
Jon Chery eb7634da28 fix(P5): doc drift — Nova rebrand stale refs in docs/decks/roadmap/arch
v1.15-Nova rebrand doc verification (phase/05-final-review-ship) found
stale ACDL references where the code/terraform already uses Nova names.

Critical drift fixed (doc said old name; code uses new):
- README.md: `.acdl/contract.yml` -> `.nova/contract.yml`;
  `acdl-spike-runner` -> `nova-spike-runner`; ABAC tag keys
  `acdl:owner|contract` -> `nova:owner|contract`.
- docs/environments/index.md: `acdl-contract-ingestor` -> `nova-contract-ingestor`;
  `aws:PrincipalTag/acdl:owner` -> `nova:owner`; `acdl-contracts` -> `nova-contracts`.
- docs/consumer-guide.md: `acdl-change-requests` -> `nova-change-requests`;
  state bucket example `acdl-qa-state` -> `nova-qa-state`.
- docs/presentations/* (4 decks + 2 HTML + talking-points): `acdl:owner|contract|
  environment|cost-center` -> `nova:*`; `ACDL_LIFECYCLE_MODE` -> `NOVA_LIFECYCLE_MODE`.
- pipelines/modules-lifecycle.yml comments: `ACDL_LIFECYCLE_MODE` ->
  `NOVA_LIFECYCLE_MODE` (workflows already use NOVA_; the contract comments were stale).
- docs/NOVA_MIGRATION.md: status banner -> COMPLETE (P5 cutoff passed).
- .ciagent/ARCHITECTURE.md: header `ACDL` -> `Nova`; NOVA_LIFECYCLE_MODE
  rename noted in the live lifecycle-mode section (v1.15 addendum already correct).
- .ciagent/ROADMAP.md: v1.15 phase statuses P1-P4 pending -> complete
  (v1.15.1..v1.15.4); P5 -> in progress (phase/05-final-review-ship).

Verification:
- grep for `acdl:*` tag keys / `.acdl/contract` / `acdl-contract-ingestor` /
  `acdl-contracts` / `ACDL_LIFECYCLE_MODE` in README/docs/pipelines -> 0 hits
  (excluding explicitly-unchanged repo path `acdl/.github/...`,
  `continuous-intelligence/acdl`, and historical narrative).
- core/output_publisher.py uses `/nova`; schemas/tagging-standard.json uses
  `nova:*`; terraform uses `nova-*` (0 `acdl-` in *.tf) — docs now match.
- git tag v1.15.0..v1.15.4 exist.
- pytest tests/test_lifecycle_mode_flag.py tests/test_pipeline_contract.py
  -> 111 passed.

---ci---
project: acdl
2026-07-30 02:11:12 +00:00
Jon Chery 13846d553a fix(P5): review P0 — collapse duplicate NOVA_* delenv in route-halt + adapter tests
Code review (correctness lens) found the same P5 mechanical-edit defect
in two more test files: the ACDL_* fallback delenv was replaced with a
duplicate NOVA_* delenv (leaving a dead duplicate line, a stale 'ACDL_*
fallback until P5' comment, and the ACDL_* var no longer cleaned).

- tests/test_route_halt_artifact.py: two sites (stderr-fallback +
  outbox-fallback) each deleted NOVA_SOD_HALT_TOPIC_ARN twice.
- tests/test_adapter.py::test_default_remote_state_key: deleted
  NOVA_REMOTE_STATE_KEY twice.

With core/env.py NOVA-only as of P5, a single NOVA_* delenv is the
correct precondition. Collapsed to one delenv per var + updated comments.

---ci---
project: acdl
phase: 5
milestone: v1.15
status: verify
lessons:
  - P0 fix applied: duplicate monkeypatch.delenv('NOVA_*') in test_route_halt_artifact.py (2 sites) + test_adapter.py collapsed to a single delenv consistent with the P5 NOVA-only core/env.py.
---/ci---
2026-07-30 02:05:57 +00:00
Jon Chery d14f9289da fix(P5): review P0 — remove duplicate delenv in attestation signature-skip test
Code review (correctness lens) found a P0 in tests/test_attestation_matrix.py
introduced by the P5 fallback-removal pass: the dual-read delenv of
ACDL_ATTESTATION_SIGNING_KEY_ID was replaced with a second (duplicate)
delenv of NOVA_ATTESTATION_SIGNING_KEY_ID, leaving the test misleading
(comment claimed 'both NOVA_* and ACDL_* must be unset' while only NOVA_*
was deleted twice) and the ACDL_* var no longer cleaned. With P5 having
removed the ACDL_* fallback from core/env.py, deleting NOVA_* alone is the
correct and sufficient precondition for the skip; this commit drops the
duplicate line and updates the comment to match the NOVA-only contract.

---ci---
project: acdl
phase: 5
milestone: v1.15
status: verify
lessons:
  - P0 fix applied: duplicate monkeypatch.delenv('NOVA_ATTESTATION_SIGNING_KEY_ID') in test_signature_skip_when_key_unset left the test misleading and the ACDL_* var uncleaned; collapsed to a single NOVA_* delenv consistent with the P5 NOVA-only core/env.py.
---/ci---
2026-07-30 02:03:16 +00:00
Jon Chery d4b8b5e1e9 Merge phase/04-aws-resource-migration — v1.15.4 (Nova P4 AWS resource migration complete) 2026-07-30 01:56:16 +00:00
Jon Chery bf8ac0fe49 verify(P4): Nova rebrand AWS resource migration — 4-layer verify PASS
VERIFY: structural — all acdl-*→nova-* in terraform (DynamoDB, Secrets,
Lambda, SNS, SG, KMS alias, ECS, ECR, IAM, state bucket, ALB, VPC) +
Lambda defaults (D-111) + nova-deploy role ARN; behavioral — terraform
validate PASS + 615 pytest PASS + run_ci.sh 3-stage PASS; security —
ABAC policy ARNs updated, state-bucket -migrate-state documented;
quality — grep-zero on acdl- in terraform (0 hits). New
docs/NOVA_AWS_MIGRATION.md runbook + scripts/migrate_dynamodb_data.py
(+17 tests). REQ-163 complete.

---ci---
project: acdl
phase: 4
milestone: v1.15
status: verify
requirements_covered: [REQ-163]
---/ci---
2026-07-30 01:56:11 +00:00
Jon Chery 0e6ecae26d feat(P4): Nova rebrand — AWS resource migration (REQ-163)
Rename all acdl-* AWS resources → nova-* across terraform (DynamoDB,
Secrets Manager, Lambda, SNS, SG, KMS alias, ECS, ECR, IAM user/policy,
state bucket, ALB, VPC/subnet names). Lambda default table names → nova-*
(D-111). State bucket backend → nova-tfstate (-migrate-state documented).
New docs/NOVA_AWS_MIGRATION.md runbook (staged migration + rollback).
New scripts/migrate_dynamodb_data.py (scan+copy, dry-run default).
acdl-deploy- → nova-deploy- role ARN in deploy workflows. Test fixtures
updated; terraform validate + pytest + run_ci.sh PASS.

---ci---
project: acdl
phase: 4
milestone: v1.15
status: execute
---/ci---
2026-07-30 01:54:26 +00:00
Jon Chery 267df4ad0d Merge phase/03-ssm-tagkeys — v1.15.3 (Nova P3 SSM+tagkeys complete) 2026-07-30 01:40:16 +00:00
Jon Chery da0de6068a verify(P3): Nova rebrand SSM path + tag keys — 4-layer verify PASS
VERIFY: structural — SSM_PREFIX /acdl→/nova, tag keys acdl:*→nova:* in
terraform + tagging-standard.json, nova_tagging hard mode (_WARN_MODE=False);
behavioral — 598 pytest PASS (+32 new) + run_ci.sh 3-stage PASS + regression
gate 22/22 Verified; security — ABAC PrincipalTag/acdl:owner→nova:owner,
migration scripts dry-run-default; quality — grep-zero on acdl: tag keys
(remaining = legacy-detection constant + migration guide). REQ-161/162
complete. New scripts/migrate_ssm_paths.py + untag_acdl_keys.py (+32 tests).

---ci---
project: acdl
phase: 3
milestone: v1.15
status: verify
requirements_covered: [REQ-161, REQ-162]
---/ci---
v1.15.3
2026-07-30 01:40:12 +00:00
Jon Chery 51c3edf458 feat(P3): Nova rebrand — SSM path + tag keys (REQ-161/162)
SSM path /acdl/{env}/{contractId}/{output} → /nova/... across
core/output_publisher + contract resolver + consumer docs. New
scripts/migrate_ssm_paths.py (copy/verify/delete, dry-run default).
AWS tag keys acdl:owner|environment|contract|cost-center|ref → nova:*
across terraform tagging + ABAC session policies (iam:ResourceTag/acdl:*
→ iam:ResourceTag/nova:*). nova_tagging.py hard mode (D-109 warn→hard).
tagging-standard.json tag-key values → nova:*. New
scripts/untag_acdl_keys.py (remove old acdl:* tags, dry-run default).
Test fixtures updated; pytest + run_ci.sh PASS.

---ci---
project: acdl
phase: 3
milestone: v1.15
status: execute
---/ci---
2026-07-30 01:38:30 +00:00
Jon Chery e998d9fa6b Merge phase/02-code-envvars-consumer-path — v1.15.2 (Nova P2 complete) 2026-07-30 01:27:09 +00:00
Jon Chery 7ea58ec1c9 verify(P2): Nova rebrand code/env-vars/consumer-path — 4-layer verify PASS
VERIFY: structural — core/env.py dual-read helper + nova_tagging.py
warn-mode + .acdl/→.nova/ + 21 NOVA_* env vars; behavioral — 566 pytest
PASS + run_ci.sh 3-stage PASS; security — G-106 dual-read in both
.env.secrets load paths (run_platform.sh:294-295 + regression_verify.py
:322-325), G-108 Gitea NOVA_* secrets created (4/5 HTTP 201/204, 1
skip-no-source) + workflow secrets: refs updated; quality — grep-zero
on stray ACDL_ code reads (remaining = intentional dual-read fallback).
REQ-158/159/160 complete.

---ci---
project: acdl
phase: 2
milestone: v1.15
status: verify
requirements_covered: [REQ-158, REQ-159, REQ-160]
---/ci---
v1.15.2
2026-07-30 01:27:06 +00:00
Jon Chery d5bae868a4 feat(P2): Nova rebrand — code/env-vars/consumer-path (REQ-158/159/160)
core/env.py dual-read helper (D-108); 21 ACDL_*→NOVA_* env vars migrated
across core/scripts/adapters/tests/workflows + .env/.env.secrets (key
rename, values stay). G-106 binding: run_platform.sh:288-289 +
regression_verify.py:309-312 dual-read (NOVA first, ACDL fallback).
G-108 binding: Gitea NOVA_* secrets created via API + workflow secrets:
refs updated (deploy.yml + modules-lifecycle.yml, .gitea + .github).
acdl_tagging.py→nova_tagging.py (D-109 warn mode, nova:* enforced).
.acdl/→.nova/ consumer path (resolver + deploy workflow + schema +
tests + docs). Test fixtures updated; pytest + run_ci.sh PASS.

---ci---
project: acdl
phase: 2
milestone: v1.15
status: execute
---/ci---
2026-07-30 01:25:24 +00:00
Jon Chery 0bc70a3d95 Merge phase/01-docs-decks-prose — v1.15.1 (Nova P1 docs/decks/prose complete) 2026-07-30 00:58:22 +00:00
Jon Chery adce478e09 verify(P1): Nova rebrand docs/decks/prose — 4-layer verify PASS
VERIFY (4 layers): structural — 57 files rebranded, JSON schemas valid,
pyproject name=nova; behavioral — run_ci.sh 3-stage PASS (lint+test+
check-only); security — no creds touched, S&P theme untouched (D-107);
quality — grep-zero on prose-identity ACDL (remaining hits are justified
literals for P2/P3/P4: env vars, resource names, tag keys, paths, real
repo uses: refs). Mermaid 5/5 PNGs re-exported. Nova tagline added to
README + decks + vision.md (North Star retained, D-106).
NOVA_MIGRATION.md consumer guide shipped.

---ci---
project: acdl
phase: 1
milestone: v1.15
status: verify
requirements_covered: [REQ-155, REQ-156, REQ-157]
---/ci---
v1.15.1
2026-07-30 00:58:19 +00:00
Jon Chery 63f3a2b66c feat(P1): Nova rebrand — docs/decks/prose/schema-$id/release-titles (REQ-155/156/157)
Rebrand ACDL/Agentic Cloud Delivery Platform → Nova across README, docs/,
decks (markdown + mermaid .mmd + HTML), pyproject.toml name/description,
schema $id URLs (acdl.cloudinit.dev→nova.cloudinit.dev), release.yml
title/workflow-name. Nova tagline added to README header + both deck title
slides + docs/vision.md (alongside existing North Star, D-106). S&P theme
untouched (D-107). New docs/NOVA_MIGRATION.md consumer guide. Data values
(env vars, resource names, tag keys, SSM/consumer paths) left for P2-P4.

---ci---
project: acdl
phase: 1
milestone: v1.15
status: execute
---/ci---
2026-07-30 00:56:19 +00:00
Jon Chery 1ff942684e docs(ship): v1.15.0 complete — Nova Rebrand P0 pre-execution (Gitea release id 297)
---ci---
project: acdl
phase: 0
milestone: v1.15
status: complete
phase_role: pre_execution
tag: v1.15.0
release_id: 297
---/ci---
2026-07-30 00:41:48 +00:00
Jon Chery 6c25ce3900 Merge phase/00-pre-execution — v1.15.0 (Nova Rebrand P0 complete) 2026-07-30 00:40:52 +00:00
Jon Chery d14b55b774 docs(P00): incorporate grill binding mitigations G-104/G-106/G-108
GRILL (ci-griller): 9 axes, 8 findings G-103..G-110, verdict
proceed-with-conditions (conf 0.82). 3 binding mitigations incorporated:
- G-104 (scope/technical, conf 0.90): re-tag Major milestone on its OWN
  minor line (v1.15.x), not the v1.14.x patch line (NFR convention).
  Precedent: v1.10.2→v1.11.0, v1.9.x→v1.10.0. Updated PLAN/ROADMAP/
  PROJECT/REQUIREMENTS/ARCHITECTURE tag refs: v1.15.0(P0)→v1.15.4(P5).
- G-106 (risk/technical, conf 0.88): .env.secrets direct-read paths
  (run_platform.sh:288-289 + regression_verify.py:309-312) bypass the
  core/env.py helper — P2 MUST dual-read these (NOVA_* first, ACDL_*
  fallback) or AWS creds vanish mid-rename. Bound in PLAN.md P2 task 2.
- G-108 (security, conf 0.80): CI workflow secrets: refs (deploy.yml +
  modules-lifecycle.yml, .gitea + .github) reference secrets.ACDL_* —
  P2 MUST update to secrets.NOVA_* in lockstep with Gitea secret
  creation. Bound in PLAN.md P2 task 3 (hard gate). 5 accepted-as-is
  findings (G-103/105/107/109/110), 0 open escalations.

---ci---
project: acdl
phase: 0
milestone: v1.15
status: grill
---/ci---
v1.15.0
2026-07-30 00:40:35 +00:00
Jon Chery 69ba3d728f verify(grill): v1.15-Nova rebrand — 9 axes, 8 findings (G-103..G-110), 3 binding mitigations
---ci---
status: grill
milestone: v1.15
verdict: proceed-with-conditions
confidence: 0.82
binding_decisions:
  - G-103: ACCEPT-AS-IS (feasibility) — 4-phase structure sound; conf 0.85
  - G-104: MITIGATE-BINDING (scope/technical) — re-tag as v1.15.x minor-bumped; conf 0.90
  - G-105: ACCEPT-AS-IS (cost) — no live apply during P0-P4; conf 0.80
  - G-106: MITIGATE-BINDING (risk/technical) — dual-read in BOTH .env.secrets load paths (run_platform.sh + regression_verify.py); conf 0.88
  - G-107: ACCEPT-AS-IS (testability) — per-phase fixture updates keep gate 16/16; mmdc via npx available; conf 0.82
  - G-108: MITIGATE-BINDING (security) — update CI workflow secrets: refs when NOVA_* Gitea secrets created; hard gate + retry; conf 0.80
  - G-109: ACCEPT-AS-IS (maintainability) — P5 mechanical cleanup; conf 0.78
  - G-110: ACCEPT-AS-IS (adversarial) — runbook + staged ordering is rollback; conf 0.75
escalations: []
open_issues:
  - G-104 mitigation must be incorporated into PLAN.md before P0 ship (re-tag v1.14.x -> v1.15.x)
  - G-106 mitigation must be incorporated into PLAN.md P2 (dual-read in run_platform.sh:288-289 + regression_verify.py:309-312)
  - G-108 mitigation must be incorporated into PLAN.md P2 task 3 (update .gitea/.github workflow secrets: refs)
---ci---
2026-07-30 00:39:01 +00:00
Jon Chery 533a9d7bcb docs(P00): create phase plans — v1.15-Nova (4 exec + 1 final)
PLAN.md: vertical-slice task decomposition for P1-P5. Wave ordering:
W1 docs/decks/prose (P1, lead-developer) → W2 code/env-vars/consumer-path
(P2, backend+lead, dual-read core/env.py helper D-108) → W3 ssm/tagkeys
(P3, data+backend, parallel-tag ABAC + nova_tagging hard mode) → W4
aws-resource-migration (P4, data+lead, staged terraform migration +
runbook) → W5 final-review-ship (P5, lead, remove dual-read fallback).
Binding constraint: regression gate stays 16/16 Verified throughout.
9 success criteria incl. grep-zero checks on ACDL_/acdl- remnants.

---ci---
project: acdl
phase: 0
milestone: v1.15
status: plan
---/ci---
2026-07-30 00:03:03 +00:00
Jon Chery 93c7106cd9 docs(P00): research findings — v1.15-Nova rebrand scope
RESEARCH: 8 findings from the exhaustive codebase survey (1,465 ACDL
occurrences / 205 files; 0 nova collisions). Brand string surface area,
code identifiers (21 env var prefixes, no centralized loader → core/env.py
per D-108), AWS resource names (high-risk migration table), consumer/infra
conventions (tag keys/SSM path/consumer path), docs & decks (mechanical,
S&P theme untouched per D-107), CI/release, external URLs, nomenclature.
Persona assessment: roster carries forward (lead/backend/data active,
frontend deactivated); domain priority inverted to lead→backend→data
(docs-first rebrand). ARCHITECTURE.md v1.15 addendum: full naming-
conventions rebrand table + migration ordering + capability gate.

---ci---
project: acdl
phase: 0
milestone: v1.15
status: research
---/ci---
2026-07-30 00:02:31 +00:00
Jon Chery 66d7cb9541 docs(P00): clarify — v1.15-Nova decisions D-102..D-112 locked
Full-autonomy CLARIFY: 11 decisions resolved. D-102..D-107 (high-judgment
scope) locked by user during planning: full rename w/ migration (AWS
resources, env vars, tag keys, SSM path, consumer path); illustrative
URLs updated; Nova tagline added alongside North Star; S&P theme
untouched. D-108..D-112 (CLARIFY): dual-read helper in core/env.py;
Checkov warn-then-hard across P2/P3; schema $id URLs rebranded; Lambda
defaults deferred to P4; flat-branch convention preserved.

---ci---
project: acdl
phase: 0
milestone: v1.15
status: clarify
---/ci---
2026-07-30 00:01:33 +00:00
Jon Chery 59a71d332a docs(init): validate specification — v1.15-Nova rebrand milestone
Establish milestone v1.15 (Nova Rebrand) — Major/breaking milestone.
Ideation output (--ideate): 10 requirements REQ-155..REQ-164 mapping
the full ACDL→Nova rebrand across docs, decks, code, configs, CI, env
var prefixes, consumer contract path, SSM paths, AWS tag keys, and
AWS resource names. Staged 4-phase migration + final review/ship.
Tags run on the v1.14.x patch line: v1.14.0 (P0) → v1.14.5 (P5 final).

---ci---
project: acdl
phase: 0
milestone: v1.15
status: specify
---/ci---
2026-07-30 00:00:52 +00:00
Jon Chery 66a3c6958e docs(audit): v1.14 post-milestone audit — PASS (reconstruction + file discipline + branch hygiene + commit discipline + audit checks)
acdl-ci / Lint (push) Successful in 7s
acdl-ci / Platform check-only (offline) (push) Successful in 23s
acdl-ci / Test (push) Successful in 5m59s
---ci---
project: acdl
phase: 21
milestone: v1.14
status: audit
---/ci---
2026-07-29 22:59:36 +00:00
Jon Chery da533a8c2f docs(ship): v1.13.24 complete — v1.14 milestone released (Gitea release id 285)
acdl-ci / Lint (push) Successful in 8s
acdl-ci / Platform check-only (offline) (push) Successful in 24s
acdl-ci / Test (push) Successful in 6m34s
---ci---
project: acdl
phase: 21
milestone: v1.14
status: complete
---/ci---
2026-07-29 21:37:11 +00:00
Jon Chery 3b1181f39b Merge milestone/v1.14-refinement — v1.14 complete (NFR Refinement: bug fixes, security, stubs, tests, docs; 20 phases + final; tag v1.13.24)
acdl-ci / Lint (push) Successful in 10s
acdl-ci / Platform check-only (offline) (push) Successful in 25s
acdl-ci / Test (push) Successful in 6m34s
v1.14 NFR Refinement milestone complete. 20 execution phases (P1-P20) +
1 final (P21). All P1/P2 backlog from v1.11 review resolved. Security
posture hardened (swallowed errors, account ID externalized, IAM scoped,
schema validation, credential hygiene). Stubs resolved (kyverno --kube-
version removed). 7 untested scripts gained coverage. Documentation
synced (ARCHITECTURE v1.11-v1.14 addenda, stale @v1.6-1.9 -> @v1.13,
GRILL G-005/G-008 resolved, COST.md window extended, D-083 deferral
recorded). Platform VPC parameterized.

561 tests pass (was 528 at v1.13.2; +33). 22/22 capabilities Verified.
6 grill binding decisions (G-101..G-106) applied. 1 escalation (E-001)
auto-resolved at full autonomy (D-101).

---ci---
project: acdl
phase: 21
milestone: v1.14
status: complete
---/ci---
v1.13.24
2026-07-29 21:36:37 +00:00