92 Commits

Author	SHA1	Message	Date
Jon Chery	a7a93d95d1	docs(init): validate specification — v1.24 consumer guide accuracy + env-promotion lifecycle ... ---ci--- project: acdl phase: 0 milestone: v1.24 status: specify ---/ci---	2026-08-12 14:20:34 +00:00
Jon Chery	e63c0cb36e	docs(milestone): complete v1.23 — Nova Deck Cleanup & Python PPTX ... 13 requirements complete (REQ-263..275): - P1: consolidate-docs — single -marp.md source of truth, speaker notes + talking points as HTML comments, delete plain .md (REQ-263,264) - P2: restore-clean-style — theme:default + inline S&P style, retire nova-sp-theme.css from render (keep as reference), benefit .benefit class (REQ-265,266,267) - P3a: inline-images — scripts/inline_images.py, self-contained HTML (REQ-268) - P3b: python-pptx-generator — scripts/render_pptx.py structured editable S&P-themed PPTX, pyproject [slides] dep, dual PPTX (REQ-269,270) - P4: trim-wordcount — ~20-30% trim on 8 verbose slides, remove 'penetrate' repo-wide (G-001) (REQ-271,272) - P5: ci-tests-readme + review + audit + ship — workflows install python-pptx, 43 tests pass, README rewritten (REQ-273,274,275) Tags on v1.22.x line (v1.22.0 P0 -> v1.22.6 P5 final = milestone release). Grill: PROCEED-WITH-REVISIONS (4 binding revisions G-001..G-004 applied: repo-wide penetrate purge, P3->P4 serialized, P3 split P3a+P3b, P5+P6 merged). 43 slide/pptx tests pass. Merged to main. ---ci--- project: acdl phase: 5 milestone: v1.23 status: complete phase_role: final requirements: covered: [REQ-263,REQ-264,REQ-265,REQ-266,REQ-267,REQ-268,REQ-269,REQ-270,REQ-271,REQ-272,REQ-273,REQ-274,REQ-275] partial: [] ---/ci---	2026-08-12 00:36:46 +00:00
Jon Chery	b8fbd995a9	docs(P00): grill — 4 revisions applied (PROCEED-WITH-REVISIONS, 0.78) ... 10 axes reviewed. 6 PASS, 4 REVISE. Overall: PROCEED-WITH-REVISIONS. Empirically cleared (not assumed): image format (plain <img src>, conf 0.95) + Marp <div> passthrough (rendered test, conf 0.95). Versioning clean (no v1.22.* tags, conf 1.0). Test inversion risk fully enumerated (conf 0.9). Revisions (binding): G-001 (0.85): purge 'penetrate' repo-wide (docs/ + .ciagent/), not just docs/presentations/. RESEARCH.md/PLAN.md/GRILL.md exempt as decision- history. P4 verify becomes grep -ri penetrat docs/ .ciagent/PROJECT.md .ciagent/CLARIFY.md -> nothing. G-002 (0.85): serialize P3->P4 (not parallel). P4's parser depends on P3's stable render_slides.sh; P4's trimmed deck is what P3b's parser consumes. C8 parallelization overruled. G-003 (0.80): split P3 into P3a (inline_images.py + render_slides.sh + pyproject — low-risk) + P3b (render_pptx.py + parser + attach_release_asset.py — high-risk, isolated). Both serial in Wave 3. G-004 (0.80): merge P5+P6. NFR docs milestone; dedicated review/ship phase is ceremonial. P5 absorbs review/audit/ship. Net phases 7->6. Revised phase/tag plan: v1.22.0 P0 -> v1.22.1 P1 -> v1.22.2 P2 -> v1.22.3 P3a -> v1.22.4 P3b -> v1.22.5 P4 -> v1.22.6 P5 (final = milestone release). ---ci--- project: acdl phase: 0 milestone: v1.23 status: grill ---/ci---	2026-08-12 00:05:34 +00:00
Jon Chery	75e9e479db	docs(init): validate specification — v1.23 milestone (REQ-263..275) ... Established active_milestone: v1.23 (Nova Deck Cleanup & Python PPTX). NFR milestone (docs/render/test only; no features). Tags on v1.22.x line (v1.22.0 P0 -> v1.22.6 P6 final = milestone release). Branch: milestone/v1.23-deck-cleanup-python-pptx. Added REQ-263..275 to REQUIREMENTS.md covering: - Consolidate docs: single -marp.md source of truth, delete plain .md, speaker notes/talking points as Marp HTML comments, keep talking-points.md as synced standalone aid (REQ-263,264) - Restore clean style: theme:default + inline style block (S&P palette), retire nova-sp-theme.css from render (keep as reference), benefit callout restyle (REQ-265,266,267) - Inline images: scripts/inline_images.py for self-contained redistributable HTML (REQ-268) - Python PPTX generator: scripts/render_pptx.py structured editable S&P-themed PPTX via python-pptx, both PPTX outputs produced + attached (REQ-269,270) - Trim word count: targeted ~20-30% trim on verbose slides, remove 'penetrate' term (REQ-271,272) - CI/tests/README: workflows install python-pptx, tests updated, README rewritten (REQ-273,274,275) Driven by user feedback: deck looked 'out of whack'; wanted to return to the clean style of the old the-developer-experience.html. Investigation revealed the 'clean' reference was itself MARP output (default theme + inline style); the standalone nova-sp-theme.css approach was fragile. ---ci--- project: acdl phase: 0 milestone: v1.23 status: specify ---/ci---	2026-08-11 23:49:45 +00:00
Jon Chery	25ddc894c2	docs(milestone): complete v1.22 — Nova Deck Layout Fix ... 9 requirements complete (REQ-254..262): - P1: theme-css — section padding + overflow + image rules + title chrome + spacing tightening (REQ-254,255,256) - P2: render-scripts — delete render_deck.sh, pin CLI versions, 2x scale + transparent bg (REQ-257,258) - P3: mermaid-relayout — telemetry TB + platform-pipeline 4-node TB, re-rendered 2x transparent (REQ-259,260) - P4: deck-content — split slides 3+8 (18->20 main), trim 8 overflowing slides, remove redundant header (REQ-261) - P5: render-and-test — re-render HTML+PPTX, add 9 layout/aspect- ratio/theme-structural tests (REQ-262) - P6: final review + audit + ship (this commit) Final review fixes: source .md + talking-points re-synced to 20-slide structure; ![h:480 class:tall] directives applied; README stale references updated; CSS trailing newline added. Root cause: nova-sp-theme.css had zero section padding (declared /* @theme nova-sp */ as a comment, not the @theme directive; did not @import Marp default theme). Combined with overflow:hidden, blunt img max-height:320px, header+footer chrome on every slide, and two P5 diagrams with extreme aspect ratios (13.52x and 0.63x), 8 of 19 slides overflowed. NOT a P5 regression — theme CSS byte-identical P3->P5; P5 denser content made pre-existing flaws visible. Tags on v1.21.x line (v1.21.0 P0 -> v1.21.6 P6 final = milestone release). 32 slide tests pass (23 original + 9 new). 94 key-file tests pass. Pipeline check exit 0. ---ci--- project: acdl phase: 6 milestone: v1.22 status: complete phase_role: final requirements: covered: [REQ-254,REQ-255,REQ-256,REQ-257,REQ-258,REQ-259,REQ-260,REQ-261,REQ-262] partial: [] ---/ci---	2026-08-11 20:11:43 +00:00
Jon Chery	ce751313a7	docs(milestone): complete v1.21 — Nova Deck Refinement & Pipeline Hardening ... 9 requirements complete (REQ-245..253): - P1: strategic-docs — thesis rename + NORTH_STAR objectives + RACI restructure (REQ-246,247) - P2: slides source-of-truth — rename + restructure + rewrite (REQ-245, 248,249,252) - P3: marp deck + talking points + README + theme CSS fix (REQ-251,252) - P4: pipeline hardening — Checkov before plan, Wiz-or-Checkov on plan (REQ-250) - P5: render + verify — new diagrams, HTML, PPTX, 686 tests pass (REQ-253) - P6: final review + ship (this commit) Deck renamed nova-no-humans-platform* -> nova-autonomous-cloud-delivery*. Title: 'Nova — The Autonomous Cloud Delivery Platform'. 4-beat arc (Problem -> Solution -> Proof -> Roadmap + Ask). 18 main + 1 appendix slides. All 33 review notes applied. Tags on v1.20.x line (v1.20.0 P0 -> v1.20.6 P6 final = milestone release). ---ci--- project: acdl phase: 6 milestone: v1.21 status: complete phase_role: final requirements: covered: [REQ-245,REQ-246,REQ-247,REQ-248,REQ-249,REQ-250,REQ-251,REQ-252,REQ-253] partial: [] ---/ci---	2026-08-11 14:18:38 +00:00
Jon Chery	aa868c97ef	docs(milestone): complete v1.20 — Consumer Cleanup + Transparent Terraform + Slide Pipeline ... 15 requirements complete (REQ-230..244): - P1: gitea/gitlab removed from all synced files (REQ-230,231,232) - P2: S&P theme CSS + render_slides.sh + CI workflow + tests (REQ-239..243) - P3: 12-month product roadmap slides added to deck (REQ-244) - P4: run_platform.sh split + var.enabled feature flags + stale path fix (REQ-233..238) ---ci--- project: acdl phase: 5 milestone: v1.20 status: complete phase_role: final requirements: covered: [REQ-230,REQ-231,REQ-232,REQ-233,REQ-234,REQ-235,REQ-236,REQ-237,REQ-238,REQ-239,REQ-240,REQ-241,REQ-242,REQ-243,REQ-244] partial: [] ---/ci---	2026-08-07 18:54:19 +00:00
Jon Chery	f0bc3be92c	docs(P00): validate specification — v1.20 milestone (REQ-230..244) ... ---ci--- project: acdl phase: 0 milestone: v1.20 status: specify ---/ci---	2026-08-07 18:02:23 +00:00
Jon Chery	90624be63f	docs(milestone): complete v1.19 — Nova 2nd-Release Sync ... NFR-only chore milestone complete. P1 (nova-sync-script, v1.18.0) + P2 (final-review-ship, v1.18.1 = milestone release). REQ-229 satisfied. Review clean, audit clean, 5 decisions locked (D-143..D-147). ---ci--- project: acdl phase: 2 milestone: v1.19 status: complete phase_role: final requirements: covered: [REQ-229] partial: [] ---/ci---	2026-08-06 15:44:31 +00:00
Jon Chery	a4c5f332f6	feat(P1): sync_to_nova.sh — manual-only 2nd-release pipeline into ~/nova (REQ-229) ... Replaces scripts/sync_to_gl.sh (kitchen-sink mirror sync into ~/gl/acdl) with scripts/sync_to_nova.sh — a manual-only, consumer-subset, domain-committed 2nd-release pipeline into ~/nova (GitLab jonathanchery/nova, separate repo + history, consumer/platform-team audience). - Manual-only gate: refuses without --release / RELEASE_CONFIRMED=1 (exit 2). Never triggerable by CI. - Consumer subset: excludes .ciagent/, .gitea/, .env*, terraform/, demo/, runtime metrics artifacts, and 18 internal-only scripts (EXCLUDE_SCRIPTS). Keeps consumer runbooks + metrics export views (README, powerbi, TRUST_SNAPSHOT). Protects ~/nova/.git via rsync --filter=P .git. - Domain-based commits: 13 fixed-order domains (config, core, adapters, modules, contracts, schemas, pipelines, mcp, skills, scripts, tests, docs, workflows). Each changed domain gets its own conventional commit supplied positionally via repeated -m flags. No kitchen-sink commit. - Conventional-commit validation: regex-enforced (feat|fix|docs|chore|...); bypass via --no-verify-format. - Modes: --list-domains, --dry-run, --no-push, -v, -h. - Tests: TestSyncToNovaScript (8 tests) covers gate, domain order, exclude list, consumer-script inclusion, .git protection filter, conventional regex. Decisions: D-143 (target ~/nova), D-144 (conventional commits per domain, not ---ci--- audit blocks), D-145 (manual-only trigger), D-146 (13 fixed domains, positional-over-changed mapping), D-147 (coreci/Atelier review gate deferred). ---ci--- project: acdl phase: 1 milestone: v1.19 status: execute requirements: covered: [REQ-229] partial: [] ---/ci---	2026-08-06 15:40:11 +00:00
Jon Chery	951ad56576	docs(milestone): complete v1.18 — Citizen Developer & Production-Grade Guidance ... 15 requirements (REQ-214..228) satisfied. 32 tests pass. S&P Global theme restored. PDLC-upstream scope + RACI matrix authored. Submission-readiness schema + validator shipped. 9 Atelier skills + docs/skills.md. MCP server (plugin-registry, stdio, vendored Atelier v0.3.6) with 4 tools + agentic validation. 21-slide deck (3 new: scope/RACI/atelier) with PPTX committed + release-attached. 10 decisions locked (D-133..D-142). ---ci--- project: acdl phase: 7 milestone: v1.18 status: complete requirements: covered: [REQ-214, REQ-215, REQ-216, REQ-217, REQ-218, REQ-219, REQ-220, REQ-221, REQ-222, REQ-223, REQ-224, REQ-225, REQ-226, REQ-227, REQ-228] partial: [] ---/ci---	2026-08-06 15:16:54 +00:00
Jon Chery	d048460abf	docs(init): validate specification — v1.18 Citizen Developer & Production-Grade Guidance ... Establish v1.18 active milestone (was v1.17 complete). Author 15 new requirements (REQ-214..228) across 5 user-directed inputs: S&P Global theme restoration, PDLC-upstream scope, RACI matrix, Nova input contract (submission-readiness schema + validator), Atelier integration (skills + MCP server). Add v1.18 objective to PROJECT.md + ROADMAP.md. Feature milestone; tags run on v1.17.x patch line. ---ci--- project: acdl phase: 0 milestone: v1.18 status: specify ---/ci---	2026-08-06 14:54:22 +00:00
Jon Chery	f83b974c0e	Merge milestone/v1.16-nova-simplification — v1.16 complete (Nova Simplification: 20-phase NFR sweep + final; tag v1.15.26)	2026-08-01 13:37:18 +00:00
Jon Chery	787a6490a5	docs(audit): v1.15 post-milestone audit — PASS (rebrand header fixes + 6 checks) ... Audit of v1.15-Nova milestone: reconstruction PASS (27 commits, 20 with ci blocks, 7 merges per convention, state matches checkpoint). File discipline: 10 auto-fixed rebrand-completeness gaps — 9 .ciagent/*.md headers still said ACDL (PROJECT/REQUIREMENTS/ROADMAP/RESEARCH/AUDIT/ REVIEW/COST/IAM_POLICY/CAPABILITY_INVENTORY → Nova) + config.json projects[].name → Nova. Active v1.15 sections already Nova; historical v1.1-v1.14 narratives left as-is. Branch hygiene PASS (6 phases + 1 milestone all merged, 0 orphans). Commit discipline PASS (0 non-merge commits without ci blocks, 0 unresolved escalations). 6 audit checks all PASS. Verdict: PASS. ---ci--- project: acdl phase: 5 milestone: v1.15 status: complete phase_role: final audit: pass ---/ci---	2026-07-30 14:37:58 +00:00
Jon Chery	e15eea067b	docs(milestone): complete v1.15 — Nova Rebrand (tag v1.15.4) ... P5 final-review-ship complete: dual-read fallback removed (REQ-164) — core/env.py NOVA-only, .env.secrets load paths NOVA-only (G-106 retired), nova_tagging.py hard-fails any acdl:* tag, legacy ACDL_* Gitea secrets deleted, ACDL_LIFECYCLE_MODE/ACDL_LOCAL_TIER/ACDL_HITL_* exports removed from scripts, SNS subject → Nova SoD halt (P1-2), bootstrap scripts NOVA-only. Review: 2 P0 auto-fixed (duplicate delenv), P1-1/P1-2 resolved, doc-drift fixed. Audit: tags v1.15.0-4 exist; traceability REQ-155..164 all complete; ARCHITECTURE naming table matches codebase. 615 pytest PASS; run_ci.sh 3-stage PASS. NOVA_MIGRATION.md marked COMPLETE. ---ci--- project: acdl phase: 5 milestone: v1.15 status: complete phase_role: final requirements: covered: [REQ-155, REQ-156, REQ-157, REQ-158, REQ-159, REQ-160, REQ-161, REQ-162, REQ-163, REQ-164] partial: [] ---/ci---	2026-07-30 02:23:55 +00:00
Jon Chery	eb7634da28	fix(P5): doc drift — Nova rebrand stale refs in docs/decks/roadmap/arch ... v1.15-Nova rebrand doc verification (phase/05-final-review-ship) found stale ACDL references where the code/terraform already uses Nova names. Critical drift fixed (doc said old name; code uses new): - README.md: `.acdl/contract.yml` -> `.nova/contract.yml`; `acdl-spike-runner` -> `nova-spike-runner`; ABAC tag keys `acdl:owner|contract` -> `nova:owner|contract`. - docs/environments/index.md: `acdl-contract-ingestor` -> `nova-contract-ingestor`; `aws:PrincipalTag/acdl:owner` -> `nova:owner`; `acdl-contracts` -> `nova-contracts`. - docs/consumer-guide.md: `acdl-change-requests` -> `nova-change-requests`; state bucket example `acdl-qa-state` -> `nova-qa-state`. - docs/presentations/* (4 decks + 2 HTML + talking-points): `acdl:owner|contract| environment|cost-center` -> `nova:*`; `ACDL_LIFECYCLE_MODE` -> `NOVA_LIFECYCLE_MODE`. - pipelines/modules-lifecycle.yml comments: `ACDL_LIFECYCLE_MODE` -> `NOVA_LIFECYCLE_MODE` (workflows already use NOVA_; the contract comments were stale). - docs/NOVA_MIGRATION.md: status banner -> COMPLETE (P5 cutoff passed). - .ciagent/ARCHITECTURE.md: header `ACDL` -> `Nova`; NOVA_LIFECYCLE_MODE rename noted in the live lifecycle-mode section (v1.15 addendum already correct). - .ciagent/ROADMAP.md: v1.15 phase statuses P1-P4 pending -> complete (v1.15.1..v1.15.4); P5 -> in progress (phase/05-final-review-ship). Verification: - grep for `acdl:*` tag keys / `.acdl/contract` / `acdl-contract-ingestor` / `acdl-contracts` / `ACDL_LIFECYCLE_MODE` in README/docs/pipelines -> 0 hits (excluding explicitly-unchanged repo path `acdl/.github/...`, `continuous-intelligence/acdl`, and historical narrative). - core/output_publisher.py uses `/nova`; schemas/tagging-standard.json uses `nova:*`; terraform uses `nova-*` (0 `acdl-` in *.tf) — docs now match. - git tag v1.15.0..v1.15.4 exist. - pytest tests/test_lifecycle_mode_flag.py tests/test_pipeline_contract.py -> 111 passed. ---ci--- project: acdl	2026-07-30 02:11:12 +00:00
Jon Chery	d14b55b774	docs(P00): incorporate grill binding mitigations G-104/G-106/G-108 ... GRILL (ci-griller): 9 axes, 8 findings G-103..G-110, verdict proceed-with-conditions (conf 0.82). 3 binding mitigations incorporated: - G-104 (scope/technical, conf 0.90): re-tag Major milestone on its OWN minor line (v1.15.x), not the v1.14.x patch line (NFR convention). Precedent: v1.10.2→v1.11.0, v1.9.x→v1.10.0. Updated PLAN/ROADMAP/ PROJECT/REQUIREMENTS/ARCHITECTURE tag refs: v1.15.0(P0)→v1.15.4(P5). - G-106 (risk/technical, conf 0.88): .env.secrets direct-read paths (run_platform.sh:288-289 + regression_verify.py:309-312) bypass the core/env.py helper — P2 MUST dual-read these (NOVA_* first, ACDL_* fallback) or AWS creds vanish mid-rename. Bound in PLAN.md P2 task 2. - G-108 (security, conf 0.80): CI workflow secrets: refs (deploy.yml + modules-lifecycle.yml, .gitea + .github) reference secrets.ACDL_* — P2 MUST update to secrets.NOVA_* in lockstep with Gitea secret creation. Bound in PLAN.md P2 task 3 (hard gate). 5 accepted-as-is findings (G-103/105/107/109/110), 0 open escalations. ---ci--- project: acdl phase: 0 milestone: v1.15 status: grill ---/ci---	2026-07-30 00:40:35 +00:00
Jon Chery	59a71d332a	docs(init): validate specification — v1.15-Nova rebrand milestone ... Establish milestone v1.15 (Nova Rebrand) — Major/breaking milestone. Ideation output (--ideate): 10 requirements REQ-155..REQ-164 mapping the full ACDL→Nova rebrand across docs, decks, code, configs, CI, env var prefixes, consumer contract path, SSM paths, AWS tag keys, and AWS resource names. Staged 4-phase migration + final review/ship. Tags run on the v1.14.x patch line: v1.14.0 (P0) → v1.14.5 (P5 final). ---ci--- project: acdl phase: 0 milestone: v1.15 status: specify ---/ci---	2026-07-30 00:00:52 +00:00
Jon Chery	3b1181f39b	Merge milestone/v1.14-refinement — v1.14 complete (NFR Refinement: bug fixes, security, stubs, tests, docs; 20 phases + final; tag v1.13.24) ... v1.14 NFR Refinement milestone complete. 20 execution phases (P1-P20) + 1 final (P21). All P1/P2 backlog from v1.11 review resolved. Security posture hardened (swallowed errors, account ID externalized, IAM scoped, schema validation, credential hygiene). Stubs resolved (kyverno --kube- version removed). 7 untested scripts gained coverage. Documentation synced (ARCHITECTURE v1.11-v1.14 addenda, stale @v1.6-1.9 -> @v1.13, GRILL G-005/G-008 resolved, COST.md window extended, D-083 deferral recorded). Platform VPC parameterized. 561 tests pass (was 528 at v1.13.2; +33). 22/22 capabilities Verified. 6 grill binding decisions (G-101..G-106) applied. 1 escalation (E-001) auto-resolved at full autonomy (D-101). ---ci--- project: acdl phase: 21 milestone: v1.14 status: complete ---/ci---	2026-07-29 21:36:37 +00:00
Jon Chery	139224ff6c	docs(P71b): presentation badge cleanup + platform architecture diagram (v1.13.2) ... Remove all testing/agentic maturity badges from both leadership decks across all 4 pipeline layers (source .md, Marp -marp.md, rendered .html, talking-points). Only the planned badges are retained where relevant. Marp inline CSS dropped the .testing/.agentic rules (kept .planned). README maturity-framing updated to describe only the Planned badge. Add a new Slide 3 'The platform at a glance' to both decks with a shared high-level logical architecture diagram (assets/mmd/platform-architecture.mmd -> assets/png/platform-architecture.png). The diagram shows the full topology: consumer surfaces (technical dev + citizen dev) -> contract schema -> central pipeline (8 fixed stages) -> cross-cutting components (module catalog, stateless engine adapter, platform-managed environments, HITL gates, hash-chained evidence stream) -> downstream AWS resources. Subsequent slides renumbered 4-11; talking points + README directory layout + slide counts (10->11 main, 19->20 / 18->19 total) synced. Both HTML decks re-rendered. Docs-only NFR patch (no code changes). ---ci--- project: acdl phase: 71b milestone: v1.13 status: complete ---/ci---	2026-07-29 15:34:57 +00:00
Jon Chery	af91965e51	docs(ship): v1.13.1 complete — config.json schema migration ... ---ci--- project: acdl phase: 0 milestone: v1.13 status: complete ---/ci---	2026-07-29 15:17:28 +00:00
Jon Chery	de1657394e	docs(milestone): complete v1.13 — Presentation Polish (tag v1.13.0) ... Update config.json (active milestone v1.12 -> v1.13, ship_tag v1.13.0) and ROADMAP.md (add v1.13 summary line + full v1.13 section documenting P71, the 6 new diagrams, the story-arc restructure, and the review outcome). NFR milestone — final patch (v1.13.0) IS the deliverable. No separate milestone tag. ---ci--- project: acdl phase: 0 milestone: v1.13 status: complete ---/ci---	2026-07-29 14:54:53 +00:00
Jon Chery	0f6d10a2b6	docs(milestone): complete v1.12 — Presentation Refinement (tag v1.12.0) ... --- ci--- project: acdl phase: 0 milestone: v1.12 status: complete requirements: covered: [REQ-129, REQ-130, REQ-134, REQ-131, REQ-132, REQ-133] partial: [] --- /ci--- Milestone v1.12 complete. All 6 requirements satisfied: - REQ-129: adapter dedup defect fixed (CAP-013 Verified). - REQ-130: 2 regression-probe bugs fixed (CAP-017/018). - REQ-134: lifecycle tests plan-only default + ACDL_LIFECYCLE_MODE flag. - REQ-131: decks match CAPABILITY_INVENTORY.md (22/22 Verified, zero stale claims except the honest 'v1.10 status is closed' disclosure). - REQ-132: decks reflect v1.11 architecture + roadmap (v1.10 no longer NEXT); version refs bumped to @v1.12. - REQ-133: A6 (real cost figures + pre-mortem) + A7 (stateless adapter + lifecycle pipeline); HTML re-rendered; PPTX exported for the release. Verification: 522 tests pass; 22/22 capabilities Verified (D-091); run_platform.sh --check-only green; run_ci.sh green; ci-doc-verifier grep clean; multi-persona review clean (P1 remediated). ROADMAP.md v1.12 section added; v1.11 marked complete; config.json status -> complete, ship_tag v1.12.0. Version refs @v1.11 -> @v1.12 (decks re-rendered). PPTX in /tmp/v1.12-release/ for the Gitea upload.	2026-07-29 13:48:06 +00:00
Jon Chery	8c09580c43	docs(milestone): update v1.11 status — all phases complete ... Update REQUIREMENTS.md traceability table: all 12 v1.11 requirements (REQ-116, REQ-118..REQ-128) marked complete. Update ROADMAP.md: v1.11 marked "complete" (was "active"). ---ci--- project: acdl phase: 0 milestone: v1.11 status: complete requirements: covered: [REQ-116, REQ-118, REQ-119, REQ-120, REQ-121, REQ-122, REQ-123, REQ-124, REQ-125, REQ-126, REQ-127, REQ-128] partial: [] ---/ci---	2026-07-29 12:24:23 +00:00
Jon Chery	a6e306a904	docs(init): validate v1.11 RESTART specification ... SPECIFY stage. v1.11 — RESTART: stateless adapter + pipeline-driven module lifecycle testing. Branches off v1.10.2 (clean); abandons the failed first attempt (phase/56-iam-re-bootstrap + phase/57-live-deploy- microservice, which produced 4 drifted VPCs, ran terraform apply from Python, and had no module lifecycle tests). Three corrections: 1. Stateless adapter — adapter.py (918 lines, 3 constant tables, 39 type-specific branches) → ~80-line assembler; each L1 ships a real terraform/ module dir (variables/locals/main/outputs) owning its resource shape, nested blocks, defaults. 2. Terraform owns lifecycle — run_platform.sh gains --apply/--destroy; Python never runs terraform; verify_deploy_microservice.py deleted. 3. Pipeline-driven testing — modules-lifecycle pipeline (Gitea + GitHub, byte-identical) matrix-runs each L1 examples/{simple,complex}.yml through apply→modify→destroy; no per-module Python. Single platform VPC (terraform/platform owns ONE VPC; microservice references it via data source). Deterministic env-aware state keys (spike/{id}/{env}/terraform.tfstate, stable across lifecycle). 13 phases (P56a–P65). 6 new requirements (REQ-123..128) + 6 carried (REQ-116,118,119,120,121,122). Feature milestone → v1.11.0. ---ci--- project: acdl phase: 0 milestone: v1.11 status: specify ---/ci---	2026-07-28 16:07:57 +00:00
Jon Chery	69cb0ca36d	docs(P57): update ROADMAP for v1.10.2 release ... ---ci--- project: acdl phase: 57 milestone: v1.10.2 status: complete ---/ci---	2026-07-28 12:17:35 +00:00
Jon Chery	7f36df5610	docs(P56): update ROADMAP for v1.10.1 patch release ... Mark v1.10 as complete (was "active"); add v1.10.1 entry: post-v1.10 NFR patch (grill + verify + review). Gitea release id 236. ---ci--- project: acdl phase: 0 milestone: v1.10 status: complete ---/ci---	2026-07-27 19:40:07 +00:00
Jon Chery	2697775470	docs(milestone): complete v1.10 — pipeline regression fix + capability re-verification ... v1.10 milestone COMPLETE. 4 phases (52-55) shipped + verified: - P52: regression-class VERIFY (D-091) — catches capability decay - P53: local emulating adapters (D-092) — full local E2E, no AWS - P54: capability re-verification sweep (D-093) — 16/16 Verified, 7 adapter defects fixed - P55: rewrite PROJECT/ROADMAP/decks to verified reality (D-094) Review: READY TO SHIP (0 P0, 0 P1, 1 P2 post-hoc). Audit: PASS (reconstruction, file discipline, branch hygiene, commit discipline). Regression gate: 16/16 capabilities Verified (12 local + 4 live-AWS). Tests: 513 fast + 5 slow, all pass. Tag v1.10.0 (next minor; fix/test/docs, not a breaking schema change). ---ci--- project: acdl phase: 0 milestone: v1.10 status: complete requirements: covered: [REQ-112, REQ-113, REQ-114, REQ-115] partial: [] ---/ci---	2026-07-27 18:29:33 +00:00
Jon Chery	950db56fdc	docs(P55): rewrite PROJECT/ROADMAP/decks to verified reality; unfreeze decks ... PROJECT.md gains a 'Capability Status (Re-Verified 2026-07-27)' section after Domain Boundaries: decay disclosure, the 16 auto-verified capabilities table, the 6 IAM-gated escalated resources, and the regression-gate note. ROADMAP.md v1.9.8 entry annotated 'Last deck-polish phase before the v1.10 deck-freeze'; new v1.10 overview entry noting v1.9.1-v1.9.8 are 'superseded-by-reverification'. Both leadership decks disclose the 2026-07-27 re-verification in their maturity-framing headers, citing .ciagent/CAPABILITY_INVENTORY.md as the source of truth. No 'shipped'/'Available today' claims remain that aren't backed by a Verified capability or an explicit escalation note. The 6 IAM-gated cloud resources (contracts table, Lambda, ECS service, CloudFront stack, uptime-kuma, OIDC role) are explicitly listed as escalated, not silently omitted. Decks unfrozen. v1.10.0 ready to tag. ---ci--- project: acdl phase: 55 milestone: v1.10 status: verify requirements: covered: [REQ-115] partial: [] decisions: [D-094] ---/ci---	2026-07-27 18:26:00 +00:00
Jon Chery	44d1d19cfd	fix(P54): capability re-verification sweep — 16/16 Verified, 7 adapter defects fixed ... The v1.1-v1.8 capability re-verification sweep (D-093) found and fixed 7 adapter defects in adapters/terraform/adapter.py that had prevented the headline E2E from running against live AWS since the v1.7/v1.8 platform simplification. All 16 auto-verifiable capabilities are now Verified. Defects fixed in-sweep (D-090: no cap): 1. Duplicate output definitions (per-resource + stack-level both emitted). 2. Duplicate desired_count/launch_type on ECS service. 3. Duplicate target_type/family/load_balancer_type. 4. Missing assume_role_policy/role_name on IAM role (L2 composition gap). 5. Missing cidr_block/vpc_id/name defaults on VPC/subnet/route_table/ ECS cluster/ECR repository. 6. ECR kms_key_arn unsupported arg -> encryption_configuration block. 7. CloudFront OAC + WAF deprecated arg names (AWS provider v5): signing_behavior, signing_protocol, origin_access_control_id, s3_origin_config.origin_access_identity, origin_id, rule (singular), scope=CLOUDFRONT (uppercase). New live-AWS capability checks (CAP-013..CAP-016): - terraform init+validate+plan live AWS (microservice): 14 resources, OK - terraform init+validate+plan live AWS (static-assets): CloudFront+WAF+S3, OK - DynamoDB outbox table: exists, 9 items - S3 state bucket: exists, keys=[spike/l2-microservice/terraform.tfstate] 6 IAM-gated cloud resources (CAP-017..CAP-022: contracts table, Lambda, ECS service, CloudFront stack, uptime-kuma, OIDC role) are documented as escalated: the spike-runner lacks the IAM permissions to verify them (chicken-and-egg). The terraform plan path proves the code would deploy them; the local emulators prove the runtime behavior. Verified: 513 fast tests pass. run_regression.sh reports 16/16 Verified (was 12; +4 live-AWS). terraform init+validate+plan succeeds against live AWS for both contracts. No regressions. ---ci--- project: acdl phase: 54 milestone: v1.10 status: verify requirements: covered: [REQ-114] partial: [] decisions: [D-090, D-093] regression: - { capability: CAP-013, status: Verified } - { capability: CAP-014, status: Verified } - { capability: CAP-015, status: Verified } - { capability: CAP-016, status: Verified } ---/ci---	2026-07-27 18:21:45 +00:00
Jon Chery	217653d6f4	feat(P53): local emulating adapters (D-092) — full local E2E, no AWS ... The platform is now fully locally testable without cloud credentials. The headline E2E (contract -> resolver -> adapter -> S3 state -> ECS service -> DynamoDB outbox -> contract-ingestor Lambda) runs end-to-end against the local emulating tier (D-092, REQ-113). Four local emulating adapters in core/local_emulators.py: - FlatFileOutbox: flat-file DynamoDB outbox emulator (hash-chained JSONL; resumable across instances; chain verification). - LocalEcsEmulator: local ECS Fargate HTTP 200 emulator (free-port binding on 127.0.0.1; health check; clean destroy). - LocalS3StateBackend: rewrites the terraform S3 backend to a local backend (per-stack tfstate in a temp folder). - LocalLambdaStub: invokes the contract_ingestor handler in-process (patches _get_dynamodb / _get_secrets_client / urllib.urlopen; DynamoDB writes redirected to the FlatFileOutbox). run_platform.sh gains a --local flag that short-circuits to the local emulating tier (no AWS, no Checkov, no DynamoDB). Regression gate (D-091) now covers 12 capabilities (was 10): +CAP-011 (local E2E microservice) + CAP-012 (local E2E static-assets). Verified: 513 fast tests pass (was 502; +11 new). 2 slow local E2E tests pass. run_regression.sh reports 12/12 Verified. run_platform.sh --local exits 0 with LOCAL E2E OK. No AWS credentials required. ---ci--- project: acdl phase: 53 milestone: v1.10 status: verify requirements: covered: [REQ-113] partial: [] decisions: [D-092] regression: - { capability: CAP-011, status: Verified } - { capability: CAP-012, status: Verified } ---/ci---	2026-07-27 17:39:33 +00:00
Jon Chery	9897df04b2	fix(P52): add regression-class VERIFY (D-091) — catches capability decay ... The prior VERIFY stage was diff-scoped: it checked the phase diff only and never re-ran underlying platform capability. This structural defect (D-091) let 8 NFR-patch phases (v1.9.1-v1.9.8, deck rework) pass VERIFY while the platform they described decayed underneath. Phase 52 remediation: - core/regression_verify.py: regression-class VERIFY with 10 seeded local-tier capability checks (CAP-001..CAP-010). Tags each Verified/Decayed/Broken; fails closed on any non-Verified. - scripts/run_regression.sh: shell wrapper; writes .ciagent/REGRESSION_REPORT.{md,json}; exits non-zero on decay. - tests/test_verify_regression_mode.py: 11 tests (8 fast + 3 slow). Confirms the gate catches decay (fails closed) and that regression mode is additive (diff-scoped VERIFY behavior preserved). - pyproject.toml: slow marker registered; run_ci.sh excludes slow tests to avoid recursion. Verified: 502 fast tests pass (was 493 at v1.9; +9 new). 3 slow integration tests pass. run_regression.sh reports all 10 seeded local-tier capabilities Verified against current code. The decay-surfacing test injects a broken cloud-backed check and confirms the run tags it Broken and fails closed. Cloud-backed capability re-verification (live ECS, DynamoDB writes, Lambda invocation) lands in Phase 54 (D-093). ---ci--- project: acdl phase: 52 milestone: v1.10 status: verify requirements: covered: [REQ-112] partial: [] decisions: [D-091] regression: - { capability: CAP-001, status: Verified } - { capability: CAP-002, status: Verified } - { capability: CAP-003, status: Verified } - { capability: CAP-004, status: Verified } - { capability: CAP-005, status: Verified } - { capability: CAP-006, status: Verified } - { capability: CAP-007, status: Verified } - { capability: CAP-008, status: Verified } - { capability: CAP-009, status: Verified } - { capability: CAP-010, status: Verified } ---/ci---	2026-07-27 17:29:52 +00:00
Jon Chery	772ac721b0	docs(P52): create v1.10 milestone plan — pipeline regression fix + capability re-verification ... ---ci--- project: acdl phase: 52 milestone: v1.10 status: plan decisions: [D-090, D-091, D-092, D-093, D-094] requirements: [REQ-112, REQ-113, REQ-114, REQ-115] ---/ci---	2026-07-27 17:10:09 +00:00
Jon Chery	5f69bdea10	docs(P51): update ROADMAP + PROJECT for v1.9.8 patch release ... ---ci--- phase: 51 milestone: v1.9 status: complete requirements: covered: [] partial: [] ---/ci---	2026-07-27 14:48:45 +00:00
Jon Chery	116f49ecb8	docs(P50): update ROADMAP + PROJECT for v1.9.7 patch release ... ---ci--- phase: 50 milestone: v1.9 status: complete requirements: covered: [] partial: [] ---/ci---	2026-07-23 15:59:20 +00:00
Jon Chery	1eeee323c0	docs(P49): update ROADMAP + PROJECT for v1.9.6 patch release ... ---ci--- phase: 49 milestone: v1.9 status: complete requirements: covered: [] partial: [] ---/ci---	2026-07-23 15:44:36 +00:00
Jon Chery	0f250d2bbd	docs(P48): update ROADMAP + PROJECT for v1.9.5 patch release ... ---ci--- phase: 48 milestone: v1.9 status: complete requirements: covered: [] partial: [] ---/ci---	2026-07-23 14:59:19 +00:00
Jon Chery	7585c828f0	docs(P48): vision gaps + badge system + substrate→engine + CR format + agentic tags ... 9 requirements implemented across presentation decks and project docs: 1. DX closing slide: added 'Infrastructure as a utility, not a craft' bullet to convey the full vision (infrastructure consumed, not maintained; platform compounds value over time). 2. PW Problem slide: 'moving a merged change' → 'promoting a change'. 3. PW Problem slide: added 'Red tape' and 'Scalability without increasing headcount' bullets (4 frictions, not 2). 4. PW Roadmap slide: redesigned with side-by-side HTML table layout (Testing | Planned), 16px font, no overflow. 5. PW deck: added new slide 'What This Platform Is — and Isn't' after North Star (sovereign boundary, infrastructure as utility, 4 anti-goals). PW deck now 16 slides (was 15). 6. Maturity nomenclature: 'Available today'/'shipped' → 'Testing' across both decks + source markdown. New .testing badge (blue/teal #DBEAFE). Roadmap title: 'Testing vs. Planned'. The platform has 0 consumer adoption — 'shipped' was inaccurate. 7. Global: 'substrate' → 'engine' across entire project (88 matches, 30+ files including .ciagent/, docs/, modules/, adapters/, schemas/, code). 8. Presentation files only: 'forge' → 'VCS' / 'version control system' (6 occurrences in 4 files). 'forge' retained in all technical docs and code as the industry-standard term. 9. New .agentic badge (purple/violet #EDE9FE) appended to agentic features in both decks: confidence signal, autonomous dev, pattern recognition, dynamic module creation, citizen developer surface, auto-promotion. Also: Change Request ID format changed from 'CR-2026-001' to 'CHG0678912' across presentation files, consumer guide, and test fixtures. HTML re-rendered. PPTX rendered for release upload. ---ci--- phase: 48 milestone: v1.9 status: complete requirements: covered: [] partial: [] ---/ci---	2026-07-23 14:58:29 +00:00
Jon Chery	fc070ccb15	docs(P47): remove HIPAA from ciagent tracking files ... ---ci--- phase: 47 milestone: v1.9 status: complete requirements: covered: [] partial: [] ---/ci---	2026-07-23 14:10:16 +00:00
Jon Chery	be6dc7cff6	docs(P47): update ROADMAP + PROJECT for v1.9.4 patch release ... ---ci--- phase: 47 milestone: v1.9 status: complete requirements: covered: [] partial: [] ---/ci---	2026-07-23 14:09:31 +00:00
Jon Chery	5079d07e64	docs(P46): update ROADMAP + PROJECT for v1.9.3 patch release ... ---ci--- phase: 46 milestone: v1.9 status: complete requirements: covered: [] partial: [] ---/ci---	2026-07-23 13:44:51 +00:00
Jon Chery	2cd9ae150d	docs(P45): update ROADMAP + PROJECT for v1.9.2 patch release ... ---ci--- phase: 45 milestone: v1.9 status: complete requirements: covered: [] partial: [] ---/ci---	2026-07-23 13:28:54 +00:00
Jon Chery	b0a2728f59	docs(P44): update ROADMAP + PROJECT for v1.9.1 patch release ... ---ci--- phase: 44 milestone: v1.9 status: complete requirements: covered: [] partial: [] ---/ci---	2026-07-23 12:51:59 +00:00
Jon Chery	5365bb4e0a	docs(milestone): complete v1.9 — verify + review + audit + tag v1.9.0 ... ---ci--- project: acdl phase: 0 milestone: v1.9 status: complete requirements: covered: [REQ-100, REQ-101, REQ-102, REQ-103, REQ-104, REQ-105, REQ-106, REQ-107, REQ-108, REQ-109, REQ-110, REQ-111] partial: [] ---/ci--- v1.9 milestone COMPLETE. All 12 requirements satisfied. Verify: 4 layers PASS (structural 26/26 files, behavioral 493 tests + run_ci.sh + run_platform.sh --check-only green, security, quality). Review: 0 P0, 0 P1 (READY TO SHIP). REVIEW.md reconstructed (D-086). Audit: PASS (reconstruction, file discipline, branch hygiene, commit discipline — 12/12 commits with ---ci--- blocks). Updated: - .ciagent/REQUIREMENTS.md: v1.9 section marked complete; traceability table REQ-100..111 added. - .ciagent/ROADMAP.md: v1.9 marked complete; Phase 43 added. - .ciagent/PROJECT.md: v1.9 objective marked complete. - .ciagent/config.json: milestone v1.9 status -> complete. - .ciagent/REVIEW.md: reconstructed with v1.9 content (D-086). - .ciagent/VERIFY.md: v1.9 4-layer verify. - .ciagent/AUDIT.md: v1.9 audit (PASS). - uses:/ref: bumped @v1.6 -> @v1.9 in contracts/, deploy workflows, docs/consumer-guide.md (D-071 successor). Tag v1.9.0 created next; floating v1.9 + v1 tags updated.	2026-07-23 04:46:04 +00:00
Jon Chery	e74a8c2f5d	feat(P42): stub implementation — SoD, HITL gates, attestation matrix, Wiz, Kyverno ... ---ci--- project: acdl phase: 42 milestone: v1.9 status: execute ---/ci--- Phase 42 — stub-implementation (REQ-107..111, D-084): route_halt_artifact (REQ-107): - core/separation_of_duties.py: real SNS publish (ACDL_SOD_HALT_TOPIC_ARN) + outbox fallback (SEPARATION_OF_DUTIES_VIOLATION event via outbox_writer) + stderr emission. No silent print-only stub. - terraform/platform/main.tf: aws_sns_topic.acdl-sod-halt + output. HITL attestation gates (REQ-108): - core/hitl_gates.py: attest(contract_id, env, approver, evidence, outbox_client) records approver_qa/approver_prod/approver_dr to outbox, runs SoD check on prod, invokes attestation matrix, returns (ok, reason). Dev skips (autonomous). approver_from_env() reads GITHUB_ACTOR/GITEA_ACTOR. - scripts/run_platform.sh: Step 7b HITL gate before apply for qa/prod/dr. 8-concern attestation matrix (REQ-109, D-084): - core/attestation_matrix.py: check(env, evidence) runs the 8 concerns from hitl_matrix_design.md §10.4. Offline-testable (contract_nfrs, schema_validity, policy_pass) run for real. Operator-supplied accept signed artifacts validated for freshness (FRESHNESS_DAYS table) + schema. Signature skip when ACDL_ATTESTATION_SIGNING_KEY_ID unset (D-089). Fail loud if missing/expired for prod/dr. Wiz real client (REQ-110): - adapters/wiz/wiz_adapter.py: WizClient (GraphQL API, Bearer auth, pagination via pageInfo.hasNextPage + endCursor). fetch_and_adapt translates issues → PolicyCheckResult; graceful degrade when WIZ_API_TOKEN/WIZ_API_URL unset. Kyverno fleshed out (REQ-111): - adapters/kyverno/kyverno_adapter.py: full PolicyReport → PolicyCheckResult mapping (pass/fail/skip/warn + severity + skip-with- reason + resource ref construction from kind/name/namespace). adapt_inactive() emits KYVERNO_INACTIVE_TF_STACK guard. --kube-version stub parsed for future GitOps. Tests: +47 (test_route_halt_artifact.py, test_hitl_gates.py, test_attestation_matrix.py, test_wiz_adapter_real_client.py, expanded test_kyverno_adapter.py). Existing wiz_adapter tests updated for the real client's control.name ruleId. 493 passed; run_ci.sh green; run_platform.sh --check-only green.	2026-07-23 04:40:44 +00:00
Jon Chery	cd637808f5	feat(P41): per-environment CI jobs + environment workflow input ... ---ci--- project: acdl phase: 41 milestone: v1.9 status: execute ---/ci--- Phase 41 — per-environment-ci-jobs (REQ-105, REQ-106, D-082): Per-env contracts (REQ-105): - contracts/static-assets.{dev,qa,prod,dr}.yaml + microservice.{dev,qa,prod,dr}.yaml (8 files, each sets environment: to its own name, uses interpolation). - Default contracts/static-assets.yaml + microservice.yaml preserved (backwards compat). Deploy workflow environment input (REQ-106): - .github/workflows/deploy.yml + .gitea/workflows/deploy.yml (byte-identical): new 'environment' workflow_call input (default empty, override). - scripts/run_platform.sh: --environment <name> flag; exports ACDL_ENVIRONMENT_OVERRIDE; re-runs env check against the override. - core/contract_resolver.py: resolve(environment_override=...) (D-088); CLI honors --environment flag + ACDL_ENVIRONMENT_OVERRIDE env var. Consumer guide (REQ-106): - docs/consumer-guide.md: 'Per-environment deployment' section with 4 caller-workflow examples (dev/qa/prod/dr), HITL gate structure (approve_qa/approve_prod/approve_dr, D-042), interpolation reference table. - Documents promotion-without-editing + hybrid model (per-env contracts OR single contract + env input). Tests: +40 (test_per_env_contracts.py, test_deploy_workflow_env_input.py, test_consumer_guide_per_env_section.py). 446 passed; run_ci.sh green; deploy workflows byte-identical.	2026-07-23 04:34:10 +00:00
Jon Chery	bee9d02f01	feat(P40): contract interpolation + environment JSON schema ... ---ci--- project: acdl phase: 40 milestone: v1.9 status: execute ---/ci--- Phase 40 — contract-interpolation (REQ-103, REQ-104, D-081): Interpolation: - core/contract_resolver.py: _expand_vars(value, context) recursively expands ${env.<field>} + ${contract.<field>} tokens (dotted paths supported, e.g. ${env.state_backend.bucket}). Unknown tokens raise ValueError (fail loud). Expansion is post-schema-validation, pre-IR-resolution. - resolve() accepts environment_override (D-088) — overrides the contract's environment field BEFORE schema validation so interpolation context is consistent. - env context loaded via _load_env (self-contained, works as script + package import); 'environment' alias for env 'name' so ${env.environment} resolves. Environment schema + bindings: - schemas/environment.schema.json (draft 2020-12): name, account_id, region, state_backend, network, runner_role_arn, autonomy, confidence_threshold. - core/environments/qa.json, prod.json, dr.json placeholder bindings (attested, thresholds 0.75/0.90/0.95, placeholder account_id with stderr warning at load). - core/environment_check.py: load(env_name) helper + placeholder warning. Sample contracts: - contracts/static-assets.yaml + microservice.yaml use acdl-${env.environment}-${contract.module}-${env.account_id}-${env.region} naming pattern (region + account id + environment). Tests: +35 (test_environment_schema.py, test_interpolation.py, test_sample_contracts_interpolate.py). 406 passed; run_ci.sh green; run_platform.sh --check-only green. Existing fixture-based tests preserved (instance.json static fixtures unaffected).	2026-07-23 04:30:30 +00:00
Jon Chery	e1be05287b	feat(P39): refresh design docs + parameterize adapter (P1-1) ... ---ci--- project: acdl phase: 39 milestone: v1.9 status: execute ---/ci--- Phase 39 — design-doc-refresh-and-p1-1-parameterization: Design docs (REQ-100, REQ-101): - hitl_matrix_design.md: 'dev-only spike'/'v1.2 wires the gates' framing replaced with v1.9 wired-gates reality; 8-concern matrix marked implemented (offline-testable subset + signed evidence artifacts, D-084); v1.9 wiring section cross-references hitl_gates.py + attestation_matrix.py; approver_dr noted. - audit_ledger_design.md: outbox marked shipped+production since v1.8; S3 Object Lock + JWS + async worker + DLQ + daily checkpoints clearly labeled 'Deferred to a future milestone (D-083)'; RPO/RTO table updated; approver fields note v1.9 hitl_gates.attest. P1-1 adapter parameterization (REQ-102, D-085): - ecs-service interface.json: desired_count (default 1), launch_type (FARGATE), family (app) inputs added. - alb interface.json: load_balancer_type (application), target_type (ip). - adapter.py: hardcoded defaults replaced with inputs.get(<name>, <default>); hardcoded 'acdl-microservice-rt'/'acdl-microservice-igw' Name tags derive from the VPC name input. - contract_resolver.py: child_input_map routes wires to the sub-resource that declares the input (desired_count → aws:ecs:service, family → aws:ecs:task_definition, target_type → targetgroup, etc.). - microservice composition.json: wires added for the new inputs. Tests: +21 (test_p1_1_adapter_parameterization.py, test_design_docs_current.py). 371 passed; run_ci.sh green; run_platform.sh --check-only green; v1.1 S3 regression preserved.	2026-07-23 04:24:25 +00:00
Jon Chery	c99da9a58c	docs(milestone): complete v1.8 — P1 remediation + uptime + standards + encryption + decommission + docs ... ---ci--- project: acdl phase: 0 milestone: v1.8 status: complete requirements: covered: [REQ-76, REQ-77, REQ-78, REQ-79, REQ-80, REQ-81, REQ-82, REQ-83, REQ-84, REQ-85, REQ-86, REQ-87, REQ-88, REQ-89, REQ-90, REQ-91, REQ-92, REQ-93, REQ-94, REQ-95, REQ-96, REQ-97, REQ-98, REQ-99] partial: [] ---/ci--- v1.8 milestone complete. 11 phases (28-38), 24 requirements (REQ-76..99). Track 1 — P1 Remediation (8 issues, all resolved): - P1-3: SSM fail-loud without CMK + escape hatch - P1-4: WAF custom rules emit nested HCL blocks - P1-5: WAF default_action input honored - P1-6: Terraform-rendered invoke policy (no placeholder account ID) - P1-7: L2 composition outputs resolved + adapter output blocks - P1-8: Per-run temp dir (terraform/spike removed) - P1-9: Forge-agnostic API URLs (GITHUB_API_BASE) - S1: Static-key override wired to configure-aws-credentials inputs Track 2 — Encryption + Deletion Protection by Default: - Per-stack CMK (kms-key primitive, 90-day rotation, no shared keys) - All 12 primitives have encryption_enabled NFR + kms_key_arn input - L2 modules wire per-stack CMK to all children - All 12 primitives have deletion_protection NFR (default true) - Adapter emits lifecycle { prevent_destroy = true } - L2 feature flag propagation (inputs.deletion_protection) Track 3 — Uptime + Standards + Docs: - uptime-kuma primitive (ECS Fargate, feature flag, alert channels) - deploy-uptime pipeline stage (separate state) - Decommission mode (2-step HITL SRE gates + CMDB validation) - modules/STANDARDS.md (L1+L2 authoring + review standards) - schemas/README.md, pipelines/README.md, adapters/README.md Tests: 275 -> 350 (+75 new). All pass. run_ci.sh + check-only green. Zero pending P1 issues remaining.	2026-07-22 22:24:15 +00:00
Jon Chery	bab2cf363b	docs(init): validate v1.8 specification ... ---ci--- project: acdl phase: 0 milestone: v1.8 status: specify ---/ci--- v1.8 specification validated. 11 phases (28-38), 24 new requirements (REQ-76..99). Three tracks: P1 remediation (P1-3..P1-9 + S1), encryption + deletion protection by default + decommission alias, uptime monitoring + engineering standards + path documentation. Feature milestone, ship tag v1.8.0.	2026-07-22 21:59:29 +00:00