c99da9a58c
docs(milestone): complete v1.8 — P1 remediation + uptime + standards + encryption + decommission + docs
...
---ci---
project: acdl
phase: 0
milestone: v1.8
status: complete
requirements:
covered: [REQ-76, REQ-77, REQ-78, REQ-79, REQ-80, REQ-81, REQ-82, REQ-83, REQ-84, REQ-85, REQ-86, REQ-87, REQ-88, REQ-89, REQ-90, REQ-91, REQ-92, REQ-93, REQ-94, REQ-95, REQ-96, REQ-97, REQ-98, REQ-99]
partial: []
---/ci---
v1.8 milestone complete. 11 phases (28-38), 24 requirements (REQ-76..99).
Track 1 — P1 Remediation (8 issues, all resolved):
- P1-3: SSM fail-loud without CMK + escape hatch
- P1-4: WAF custom rules emit nested HCL blocks
- P1-5: WAF default_action input honored
- P1-6: Terraform-rendered invoke policy (no placeholder account ID)
- P1-7: L2 composition outputs resolved + adapter output blocks
- P1-8: Per-run temp dir (terraform/spike removed)
- P1-9: Forge-agnostic API URLs (GITHUB_API_BASE)
- S1: Static-key override wired to configure-aws-credentials inputs
Track 2 — Encryption + Deletion Protection by Default:
- Per-stack CMK (kms-key primitive, 90-day rotation, no shared keys)
- All 12 primitives have encryption_enabled NFR + kms_key_arn input
- L2 modules wire per-stack CMK to all children
- All 12 primitives have deletion_protection NFR (default true)
- Adapter emits lifecycle { prevent_destroy = true }
- L2 feature flag propagation (inputs.deletion_protection)
Track 3 — Uptime + Standards + Docs:
- uptime-kuma primitive (ECS Fargate, feature flag, alert channels)
- deploy-uptime pipeline stage (separate state)
- Decommission mode (2-step HITL SRE gates + CMDB validation)
- modules/STANDARDS.md (L1+L2 authoring + review standards)
- schemas/README.md, pipelines/README.md, adapters/README.md
Tests: 275 -> 350 (+75 new). All pass. run_ci.sh + check-only green.
Zero pending P1 issues remaining.
2026-07-22 22:24:15 +00:00
bab2cf363b
docs(init): validate v1.8 specification
...
---ci---
project: acdl
phase: 0
milestone: v1.8
status: specify
---/ci---
v1.8 specification validated. 11 phases (28-38), 24 new requirements
(REQ-76..99). Three tracks: P1 remediation (P1-3..P1-9 + S1), encryption
+ deletion protection by default + decommission alias, uptime monitoring
+ engineering standards + path documentation. Feature milestone, ship
tag v1.8.0.
2026-07-22 21:59:29 +00:00
0bee8f9bc2
docs(milestone): complete v1.7 — production platform + contract ingestion
...
---ci---
project: acdl
phase: 0
milestone: v1.7
status: complete
requirements:
covered: [REQ-62, REQ-63, REQ-64, REQ-65, REQ-66, REQ-67, REQ-68, REQ-69, REQ-70, REQ-71, REQ-72, REQ-73, REQ-74, REQ-75]
partial: []
---/ci---
v1.7 milestone COMPLETE. 6 phases (22-27), 14 requirements (REQ-62..REQ-75),
all shipped + verified. 272 tests pass. CI pipeline green.
Phase summary:
P22: rename static-asset -> static-assets (D-048) + cloudfront/waf
primitives + production stack (D-049) + @v1.6 bump (D-057).
P23: tagging standard (D-054, D-043 closure) + Wiz adapter (D-052) +
Kyverno adapter (D-053).
P24: platform Lambda + DynamoDB acdl-contracts (D-051) + cross-account IAM.
P25: deploy outputs SSM+PR comment (D-050) + error reporting via Lambda
(D-055) + stage comments.
P26: 3 platform pipelines (platform-test, primitives-plan, patterns-plan) +
release job (D-057) + multi-resource L1 ref fix.
P27: remove consumer-repos + validated per-module examples (D-058) +
RDS primitive (D-059).
Ship tag: v1.7.0 (feature milestone, next minor per ship.md;
v1.6 shipped v1.6.0).
2026-07-22 20:28:18 +00:00
49462d5e38
feat(P27): remove consumer-repos + rewrite .ciagent historical refs per D-048
...
Delete the consumer-repos/ directory (v1.2 artifact removed in v1.7).
Rewrite all .ciagent/ historical narrative references per D-048 to
describe the removal rather than referencing the directory as existing.
---ci---
project: acdl
phase: 27
milestone: v1.7
status: execute
---/ci---
2026-07-22 20:20:12 +00:00
dca35c78ec
feat(P22): rename static-asset→static-assets + cloudfront/waf primitives + production stack + @v1.6 bump
...
---ci---
phase: 22
title: rename-and-production-static-assets-stack
status: complete
verification:
- scripts/run_ci.sh: PASS (CI PIPELINE OK)
- python3 -m pytest tests/ -v: 175 passed
- scripts/run_platform.sh --check-only: PASS (PLATFORM CHECK OK)
- grep -R "static-asset[^s]" . (excl .git/): 0 hits
- grep -R "static-asset$" . (excl .git/): 0 hits
- floating git tags v1.6 + v1 point at v1.6.0 (a90a756
2026-07-22 19:56:52 +00:00
fee59944fd
docs(init): validate v1.7 specification
...
---ci---
project: acdl
phase: 0
milestone: v1.7
status: specify
---/ci---
v1.7 milestone: production platform + contract ingestion + pipeline
maturation. 12 user-directed scope axes (2026-07-22):
1. rename static-asset -> static-assets (D-048)
2. production-ready static-assets stack (cloudfront + waf, D-049)
3. DX-friendly deploy outputs (SSM + PR comment, D-050)
4. central pipeline error reporting via Lambda (D-055)
5. PR comments after every successful stage
6. three platform pipelines (platform-test, primitives-plan, patterns-plan)
7. release job with semver + MAJOR.MINOR/MAJOR tag updates (D-057)
8. platform Lambda + DynamoDB contract ingestion (D-051)
9. tagging standards (Checkov custom rule, D-054, D-043 closure)
10. Wiz adapter (D-052)
11. Kyverno adapter (D-053)
12. remove consumer-repos + validated per-module examples (D-058) + RDS
primitive (D-059)
6 phases (22-27), 14 requirements (REQ-62..REQ-75).
Ship tag: v1.7.0 (feature milestone, next minor; v1.6 shipped v1.6.0).
2026-07-22 19:47:08 +00:00
05372abdfc
audit(v1.6): fix stale acdl_platform refs in ciagent files
...
acdl-ci / Lint (push) Successful in 8s
acdl-ci / Test (push) Successful in 18s
acdl-ci / Platform check-only (offline) (push) Successful in 9s
---ci---
project: acdl
phase: 0
milestone: v1.6
status: audit
verdict: CLEAN (after fixes)
---/ci---
Audit found stale acdl_platform/ references in .ciagent/ files that
described the package by its pre-rename name. Fixed:
- REQUIREMENTS.md REQ-53: updated to reflect the actual core/ rename
(was 'platform/', the original target that shadows stdlib).
- ROADMAP.md overview line 315: acdl_platform/ -> core/ (platform/
shadows stdlib).
- ROADMAP.md phase 21 description + success criteria: platform/ -> core/
(already partially fixed during run; this completes it).
- ARCHITECTURE.md line 345-346: acdl_platform/*.py -> core/*.py.
- PERSONAS.md: all territory globs + typecheck command + co-ownership
references updated from acdl_platform/ to core/.
Historical references preserved (REQUIREMENTS REQ-29/30/32/36/39,
RESEARCH.md) — they record what existed at the time and must not be
rewritten.
Reconstruction: PASS (config.json v1.6, ROADMAP phase 21 complete
v1.6.0, REQUIREMENTS REQ-52..61 complete v1.6.0 — all match git log).
File discipline: PASS (config.json valid, PROJECT.md sections present,
ROADMAP phases match branches, ARCHITECTURE.md matches code structure).
Branch hygiene: PASS (phase/21 merged to main; no orphans).
Commit discipline: PASS (10/10 v1.6 commits have ---ci--- blocks; 0
escalations).
2026-07-22 19:22:12 +00:00
edc695592a
docs(milestone): complete v1.6 — consumer-facing docs restructure
...
---ci---
project: acdl
phase: 0
milestone: v1.6
status: complete
requirements:
covered: [REQ-52, REQ-53, REQ-54, REQ-55, REQ-56, REQ-57, REQ-58, REQ-59, REQ-60, REQ-61]
partial: []
---/ci---
v1.6 milestone COMPLETE. Single phase (21) shipped + verified (v1.6.0).
All 10 requirements covered:
- REQ-52: scrub .ciagent/.gitea from consumer docs
- REQ-53: rename acdl_platform -> core (platform/ shadows stdlib)
- REQ-54: docs/ Jekyll Pages restructure
- REQ-55: L2->modules, L1->primitives, composition->pattern prose
- REQ-56: forge->platform runners
- REQ-57: README repository roles restated
- REQ-58: Features + Roadmap
- REQ-59: mermaid fix + security-checks + infrastructure-apply
- REQ-60: credentials minus go-gitea/waivers
- REQ-61: environments concept + onboarding scaffold
Verification: 166 tests pass (154 + 12 new environment-check). run_ci.sh
green. Grep sweeps: 0 .ciagent/.gitea/forge/go-gitea/waiver/D-039/D-047/
acdl_platform in consumer surfaces. Feature milestone -> tag v1.6.0.
2026-07-22 18:27:30 +00:00
c5745de37c
docs(P21): specify phase 21 — consumer-facing docs restructure (v1.6)
...
---ci---
project: acdl
phase: 21
milestone: v1.6
status: specify
---/ci---
Add v1.6 milestone to ROADMAP.md + REQUIREMENTS.md. Phase 21 covers
REQ-52 (scrub .ciagent/.gitea from consumer docs), REQ-53 (rename
acdl_platform -> platform), REQ-54 (docs/ Jekyll Pages restructure),
REQ-55 (L2->modules, L1->primitives, composition->pattern prose),
REQ-56 (forge->platform runners), REQ-57 (README repository roles
restated), REQ-58 (Features + Roadmap), REQ-59 (mermaid fix +
security-checks + infrastructure-apply), REQ-60 (credentials minus
go-gitea/waivers), REQ-61 (environments concept + onboarding scaffold).
Update config.json milestone to v1.6.
2026-07-22 18:17:28 +00:00
8d5c56b88e
ship(v1.5.0): milestone released — consumer happy path + reusable deploy workflow
...
acdl-ci / Lint (push) Successful in 7s
acdl-ci / Test (push) Successful in 16s
acdl-ci / Platform check-only (offline) (push) Successful in 9s
---ci---
project: acdl
phase: 0
milestone: v1.5
status: shipped
release:
tag: v1.5.0
gitea_release_id: 214
url: https://git.cloudinit.dev/continuous-intelligence/acdl/releases/tag/v1.5.0
requirements:
covered: [REQ-46, REQ-47, REQ-48, REQ-49, REQ-50, REQ-51]
partial: []
---/ci---
Milestone v1.5 shipped: tag v1.5.0 (re-tagged at HEAD f68f85c
2026-07-22 17:27:20 +00:00
9a1ea04f93
docs(P20): post-ship traceability — phase 20 complete (v1.5.0)
...
---ci---
project: acdl
phase: 20
milestone: v1.5
status: shipped
release:
tag: v1.5.0
requirements:
covered: [REQ-46, REQ-47, REQ-48, REQ-49, REQ-50, REQ-51]
---/ci---
Post-ship: ROADMAP.md Phase 20 -> complete (v1.5.0); REQUIREMENTS.md
REQ-46..51 -> complete (v1.5.0). v1.5 milestone: all 6 requirements
covered. Feature milestone → tag v1.5.0.
Ship-time note: the git tag v1.4 (referenced by the reusable workflow
checkout `ref: v1.4` and the consumer `uses:` tag) must be pushed for
the reusable-workflow reference `acdl/.gitea/workflows/deploy.yml@v1.4`
to resolve at run time. Tagging v1.5.0 here; a v1.4 tag is a separate
operator action if not already present.
2026-07-22 17:14:53 +00:00
895a2f3806
docs(P20): specify phase 20 — consumer happy path + reusable deploy workflow (v1.5)
...
---ci---
project: acdl
phase: 20
milestone: v1.5
status: specify
---/ci---
Add v1.5 milestone to ROADMAP.md + REQUIREMENTS.md. Phase 20 covers
REQ-46 (README consumer model + mermaid + L3B/spike scrub), REQ-47
(generic CONSUMER_GUIDE.md + versioned uses: + consumer-scoped prereqs
+ run-time platform fetch), REQ-48 (zero-trust OIDC/ABAC credentials +
static-key override + daily rotation), REQ-49 (reusable byte-identical
deploy.yml Gitea+GitHub implementing pipelines/deploy.yaml), REQ-50
(contracts/static-asset.yaml @v1.4), REQ-51 (deploy-workflow conformance
tests). Update config.json milestone to v1.5.
2026-07-22 17:09:23 +00:00
e050e65158
feat(P19): central pipeline contract + shell reproducibility + output streaming (v1.4.1)
...
acdl-ci / Lint (push) Successful in 8s
acdl-ci / Test (push) Successful in 14s
acdl-ci / Platform check-only (offline) (push) Successful in 9s
---ci---
project: acdl
phase: 19
milestone: v1.4
status: execute
---
Add declarative pipeline contract (schemas/pipeline.schema.json +
pipelines/ci.yaml) as single source of truth for both Gitea Actions (dev)
and GitHub Actions (production) workflows. Both workflow files are
byte-identical and validated against the contract by 32 new tests.
Add scripts/run_ci.sh for shell reproducibility — mirrors the CI pipeline
locally (lint → test → check-only), exits 0 with 'CI PIPELINE OK'.
Update scripts/run_platform.sh to stream output by default: terraform
init/validate/plan via tee, Checkov compliance results with per-record
severity/rule/pass-fail, and emitted Terraform in --check-only. New
--quiet flag for log-only mode.
Requirements: REQ-43 (central pipeline contract), REQ-44 (shell
reproducibility), REQ-45 (output streaming). 122 tests pass (90 + 32).
2026-07-22 15:10:54 +00:00
1598c54a8b
feat(P18): testing + CI/CD pipelines - pytest suite, check-only mode, Gitea + GitHub workflows (v1.3.2)
...
90 offline tests covering adapter, confidence_signal, checkov_adapter,
outbox_writer, and pipeline integration. Identical CI/CD workflows for
Gitea Actions (dev) and GitHub Actions (production). New --check-only
mode for run_platform.sh (offline, no AWS).
---ci---
project: acdl
phase: 18
milestone: v1.3
status: verify
---/ci---
2026-07-22 14:26:11 +00:00
ae86a29a5e
docs(P17): specify phase 17 — remove thin-composition + module READMEs (v1.3.1)
...
Add v1.3 milestone to ROADMAP.md and REQUIREMENTS.md. Phase 17 covers
REQ-36 (thin-composition removal), REQ-37 (README template), REQ-38
(per-module READMEs + catalog). Update config.json milestone to v1.3.
---ci---
project: acdl
phase: 17
milestone: v1.3
status: specify
---/ci---
2026-07-22 13:57:25 +00:00
0fc69b4d0c
docs(milestone): complete v1.2 — platform hardening + ECS microservice
...
---ci---
project: acdl
phase: 0
milestone: v1.2
status: complete
requirements:
covered: [REQ-29, REQ-30, REQ-31, REQ-32, REQ-34]
partial: [REQ-33, REQ-35]
---/ci---
v1.2 milestone COMPLETE. All 6 phases shipped (v1.2.1..v1.2.6) + verified.
- v1.2.1 research + README (REQ-29)
- v1.2.2 NFR harden + simplify (REQ-30)
- v1.2.3 6 ECS L1s + adapter (REQ-31)
- v1.2.4 l2-microservice + contract schema + resolver (REQ-32)
- v1.2.5 consumer repo + terraform apply PARTIAL (REQ-34 complete, REQ-33 partial IAM-blocked)
- v1.2.6 capstone e2e (REQ-35 partial IAM-blocked)
Review: READY TO SHIP (1 P0 operator action, 1 P1 deferred to v1.3).
Ship: v1.3.0 (feature milestone, next minor — v1.1 shipped v1.2.0).
Audit: CLEAN (0 P0 code issues, 1 P1 post-hoc).
Operator action (P0-IAM): push spike_runner_policy.json to live AWS via
create_iam_user.py, then terraform apply (13 to add) -> live ECS service.
Gitea release v1.3.0: tag pushed; release creation blocked by missing
ACDL_GITEA_TOKEN (documented manual step).
2026-07-21 22:27:27 +00:00
faea213a4c
docs(P16): post-ship traceability + roadmap update (v1.2.6)
...
---ci---
project: acdl
phase: 16
milestone: v1.2
status: shipped
---/ci---
Post-ship: ROADMAP.md Phase 16 -> complete (v1.2.6); REQUIREMENTS.md
REQ-35 -> partial (v1.2.6, IAM-blocked). All 6 v1.2 phases shipped.
2026-07-21 22:24:48 +00:00
3cca5bb43f
docs(P15): post-ship traceability + roadmap update (v1.2.5, PARTIAL)
...
---ci---
project: acdl
phase: 15
milestone: v1.2
status: shipped
---/ci---
Post-ship: ROADMAP.md Phase 15 -> complete (v1.2.5, PARTIAL); REQUIREMENTS.md
REQ-33 -> partial (IAM-blocked), REQ-34 -> complete (v1.2.5).
2026-07-21 22:22:03 +00:00
d5cc01edbd
docs(P14): post-ship traceability + roadmap update (v1.2.4)
...
---ci---
project: acdl
phase: 14
milestone: v1.2
status: shipped
---/ci---
Post-ship: ROADMAP.md Phase 14 -> complete (v1.2.4); REQUIREMENTS.md
REQ-32 -> complete (v1.2.4).
2026-07-21 21:12:33 +00:00
7c6b8c8c84
docs(P13): post-ship traceability + roadmap update (v1.2.3)
...
---ci---
project: acdl
phase: 13
milestone: v1.2
status: shipped
---/ci---
Post-ship: ROADMAP.md Phase 13 -> complete (v1.2.3); REQUIREMENTS.md
REQ-31 -> complete (v1.2.3).
2026-07-21 21:06:08 +00:00
4c8de8e962
docs(P12): post-ship traceability + roadmap update (v1.2.2)
...
---ci---
project: acdl
phase: 12
milestone: v1.2
status: shipped
---/ci---
Post-ship: ROADMAP.md Phase 12 -> complete (v1.2.2); REQUIREMENTS.md
REQ-30 -> complete (v1.2.2).
2026-07-21 21:02:08 +00:00
7ee57aa6c7
docs(P11): post-ship traceability + roadmap update (v1.2.1)
...
---ci---
project: acdl
phase: 11
milestone: v1.2
status: shipped
---/ci---
Post-ship: ROADMAP.md Phase 11 -> complete (v1.2.1); REQUIREMENTS.md
REQ-29 -> complete (v1.2.1).
2026-07-21 20:58:01 +00:00
9504782a77
docs(specify): open v1.2 milestone — platform hardening + ECS microservice
...
---ci---
project: acdl
phase: 0
milestone: v1.2
status: specify
decisions:
- id: D-047
decision: Extend D-039 per-run-rotated-key waiver for v1.2; real OIDC deferred to v1.3+
rationale: go-gitea/gitea#36988 still open (re-checked 2026-07-21, last updated 2026-05-27, not merged)
confidence: 0.95
alternatives: []
---/ci---
Open the v1.2 milestone: platform hardening + first real consumer deployment.
5 scope axes (user-directed): re-eval #36988 , NFR improvements, simplify
the setup, README rewrite, bootstrap a consumer repo with a basic
microservice deployed to ECS Fargate end-to-end.
Files:
- config.json: milestone v1.1 -> v1.2, status complete -> specify
- PROJECT.md: v1.1 objective -> prior (complete); new v1.2 objective +
6-phase table (11-16) + REQ-29..35 summary + D-047
- REQUIREMENTS.md: v1.1 -> prior (complete); new v1.2 section with
REQ-29..35 + traceability (planned)
- ROADMAP.md: v1.1 -> complete (tag v1.2.0, Gitea release 202); new v1.2
section with 6 phases (status planned, ship v1.3.0)
- ARCHITECTURE.md: new "v1.2 build-out scope" section (5 axes, substrate
extension, terraform apply dev-only, out-of-scope deferrals) + build
order
Ship tag at milestone COMPLETE: v1.3.0 (feature milestone, next minor
per ship.md — v1.1 shipped v1.2.0). Phase patches v1.2.1..v1.2.6.
2026-07-21 20:54:55 +00:00
ab69d1069f
docs(milestone): v1.1 complete - audit hygiene fixes (P1-A/B/D)
...
---ci---
project: acdl
phase: 0
milestone: v1.1
status: complete
audit_hygiene:
- P1-A: config.json status specify -> complete
- P1-B: PERSONAS.md 6 stale platform/ territory paths -> acdl_platform/
- P1-D: ROADMAP.md audit pending -> audit CLEAN
---/ci---
v1.1 milestone COMPLETE + audit CLEAN. Applied 3 audit-hygiene fixes
(P1-A/B/D from AUDIT.md):
- config.json: status specify -> complete (milestone shipped).
- PERSONAS.md: 6 territory paths + 1 verification toolchain command
updated platform/ -> acdl_platform/ (the Phase 08 prep rename).
- ROADMAP.md: audit pending -> audit CLEAN.
Remaining post-hoc P1s (non-blocking, v1.2 cleanup):
- P1-1: redact two AWS access key IDs in .ciagent/VERIFY.md Phase 09
narrative (public identifiers, not secret pairs).
- P1-C: document v1.1.0 tag-placement guidance in run.md (the tag is on
the v1.0 Phase 05 traceability commit, causing 3 pre-specify no-ci
commits to fall in the v1.1.0..HEAD range).
2026-07-21 19:49:39 +00:00
d6b192307a
docs(milestone): complete v1.1-spike (architecture finalization + v1 spike)
...
---ci---
project: acdl
phase: 0
milestone: v1.1
status: complete
requirements:
covered: [REQ-16, REQ-17, REQ-18, REQ-19, REQ-20, REQ-21, REQ-22, REQ-23, REQ-24, REQ-25, REQ-26, REQ-27, REQ-28]
partial: []
---/ci---
v1.1 milestone COMPLETE. All 5 phases (06-10) shipped + verified:
- v1.1.1 archive-demo-and-reorient (Phase 06)
- v1.1.2 architecture-v1-finalization (Phase 07, REQ-16..22)
- v1.1.3 aws-bootstrap (Phase 08, REQ-23)
- v1.1.4 v1-spike-ir-and-l1-and-adapter (Phase 09, REQ-24/26)
- v1.1.5 v1-spike-l2-and-contract-e2e (Phase 10, REQ-25/27/28)
Review: READY TO SHIP (0 P0, 1 P1 carried-forward non-blocking).
Milestone tag: v1.2.0 (feature milestone, next minor per ship.md).
The end-to-end spike pipeline proves the IR commitments hold (REQ-28):
the adapter is the only substrate-specific code; the L1 content, contract
YML, resolver, confidence signal, and outbox writer are substrate-agnostic.
2026-07-21 19:45:50 +00:00
d3aa960eb8
docs(P10): post-ship traceability + roadmap update (v1.1.5)
...
---ci---
project: acdl
phase: 10
milestone: v1.1
status: shipped
requirements:
complete: [REQ-25, REQ-27, REQ-28]
release:
tag: v1.1.5
---/ci---
ROADMAP Phase 10 -> complete (v1.1.5). REQUIREMENTS REQ-25/27/28 -> complete.
The end-to-end spike pipeline succeeds: contract -> IR -> terraform plan
(real AWS) -> Checkov -> confidence (pass) -> outbox. REQ-28 verified: the
adapter is the only substrate-specific code (the IR commitments hold).
2026-07-21 19:39:19 +00:00
4c9314710b
docs(P09): post-ship traceability + roadmap update (v1.1.4)
...
---ci---
project: acdl
phase: 9
milestone: v1.1
status: shipped
requirements:
complete: [REQ-24, REQ-26]
release:
tag: v1.1.4
---/ci---
ROADMAP Phase 09 -> complete (v1.1.4). REQUIREMENTS REQ-24/26 -> complete.
The IR-typed L1 module l1-s3 + the Terraform adapter compile to a real
terraform plan against AWS (plan-only, -lock=false per D-P09-1, rotated
spike key per D-039).
2026-07-21 19:17:30 +00:00
96ab42fde1
docs(P08): post-ship traceability + roadmap update (v1.1.3)
...
---ci---
project: acdl
phase: 8
milestone: v1.1
status: shipped
requirements:
complete: [REQ-23]
release:
tag: v1.1.3
---/ci---
ROADMAP Phase 08 -> complete (v1.1.3). REQUIREMENTS REQ-23 -> complete.
S3 state bucket + DynamoDB outbox table + IAM user acdl-spike-runner
with least-privilege scoped policy + rotated spike key all created and
verified. D-034 closure: user must manually rotate the root key now.
2026-07-21 19:02:26 +00:00
412e1ef62e
phase: 7, status: plan-as-execute, persona: lead-developer, task: T-7.10
...
---ci---
project: acdl
phase: 7
milestone: v1.1
status: plan-as-execute
persona: lead-developer
task: T-7.10
---/ci---
Wave 5: scripts/verify_phase07.sh + traceability.
verify_phase07.sh asserts all 9 deliverable files exist, 3 JSON Schemas
validate as Draft 2020-12 (run from /tmp to avoid the repo platform/
package shadowing stdlib platform which jsonschema's uuid import needs),
3 .py files py_compile, 3 .md files non-empty, all 11 decision IDs +
OpenTofu in PROJECT.md, architecture-v1.0.md status is v1.0, D-040..D-044
present, spike contract validates against contract schema, minimal IR
validates against IR schema. All checks pass: 'VERIFIED - Phase 07:
architecture v1.0 finalized; 6 files authored + 11 decisions resolved'.
Traceability: REQUIREMENTS REQ-16..22 -> complete (v1.1.2); ROADMAP
Phase 07 -> complete (v1.1.2).
2026-07-21 18:47:58 +00:00
4ab15cb7a5
docs(P06): post-ship traceability + roadmap update (v1.1.1)
...
---ci---
project: acdl
phase: 6
milestone: v1.1
status: shipped
requirements:
complete: []
release:
tag: v1.1.1
---/ci---
ROADMAP Phase 06 -> complete (v1.1.1). No new REQ in this phase (repo
hygiene). The archived demo runs end-to-end from demo/ (regression
gate passed); new v1.1 top-level dirs scaffolded.
2026-07-21 18:28:07 +00:00
930c24be6d
docs(research): OIDC blocker found; adopt D-039..D-046; re-scope Phase 08
...
---ci---
project: acdl
phase: 0
milestone: v1.1
status: research
research_targets: 10
top_finding:
- TARGET 1 (conf 0.95): Gitea Actions does NOT support id-token: write / OIDC.
Real OIDC deferred to v1.2 (blocked on go-gitea/gitea#36988).
Spike adopts D-039: per-run-rotated long-lived key waiver.
decisions_adopted: [D-039, D-040, D-041, D-042, D-043, D-044, D-045, D-046]
risks:
- R-1 (highest): OIDC gap -> key-rotation waiver (mitigated by D-039)
- R-2: Checkov terraform_plan edge cases (mitigated by ACDL_TAG_NAMING skipped record)
- R-3: 6 confidence inputs are a recommendation (D-040 adopted in PROJECT.md)
---/ci---
RESEARCH.md (1330 lines) authored by ci-researcher. Key findings:
- TARGET 1: Gitea Actions does NOT support emitting an OIDC id-token
(Gitea docs list id-token as unsupported; go-gitea/gitea#33681 open;
draft PR #36988 unmerged; Gitea's own CI still uses long-lived keys
per #37980 ). Real-AWS OIDC is unachievable in this environment for v1.1.
- TARGETS 2-10: Terraform/Checkov install steps, IR prior art, Checkov
adapter, DynamoDB outbox, 6-input confidence signal, tiered ledger
(Object Lock deferred), HITL/SoD, contract schema, archive strategy
— all resolved with concrete sketches in RESEARCH.md.
Adopted D-039..D-046 in PROJECT.md. Re-scoped Phase 08 (ROADMAP) and
REQ-23 (REQUIREMENTS) to reflect the OIDC blocker: the spike uses a
per-run-rotated long-lived key (D-039) instead of OIDC; real OIDC is a
v1.2 deliverable. ARCHITECTURE.md Gitea API surface table updated with
the OIDC verdict.
2026-07-21 18:03:41 +00:00
288607b3fa
docs(specify): ingest docs/vision+architecture; reframe .ciagent for v1.1
...
---ci---
project: acdl
phase: 0
milestone: v1.1
status: specify
decisions:
- D-034 temporary long-lived AWS key waiver (used once in Phase 08, rotated)
- D-035 milestone v1.1 (feature), ship tag v1.2.0
- D-036 spike picks l1-s3 + l2-static-asset
- D-037 demo archived to demo/
- D-038 open decisions resolved (accept recommendations + decide rest)
---/ci---
Ingest docs/vision.md (6 tenets, anti-goals, signals of success) and
docs/architecture.md v0.2 (4 layers + 6 cross-cutting concerns incl. the
substrate abstraction) as the source of truth for why/how. Reframe the
project from the v1.0 stub demo (tag v1.1.0, archived to demo/ in Phase 06)
to the real Agentic Cloud Delivery Platform.
- config.json: milestone v1.1, status specify
- PROJECT.md: vision + 4-layer/6-concern model + 11 open-decision
resolutions (W1.A/B, W2.A, BA.A accepted; W3.D/E, BA.B-F, OpenTofu
decided) + D-034..D-038
- ARCHITECTURE.md: target architecture (IR, confidence, ledger, HITL, SoD,
substrate abstraction) + v1.1 spike scope (l1-s3 + l2-static-asset)
- REQUIREMENTS.md: add REQ-16..REQ-28 + traceability
- ROADMAP.md: add v1.1 Phases 06-10 (archive, arch-finalize, OIDC, IR+L1,
L2+contract-e2e)
- PERSONAS.md: add platform-engineer + security-engineer (custom),
retire infra-stub-engineer, update territories + verification toolchain
(terraform validate + jsonschema)
- PLAN.md: v1.1 specify plan
2026-07-21 17:55:09 +00:00
80ac975e61
docs(milestone): complete v1.0 (tagged v1.1.0)
...
---ci---
phase: 0
milestone: v1.0
status: complete
requirements:
covered: [REQ-01, REQ-02, REQ-03, REQ-04, REQ-05, REQ-06, REQ-07, REQ-08, REQ-09, REQ-10, REQ-11, REQ-12, REQ-13, REQ-14, REQ-15]
partial: []
release:
tag: v1.1.0
type: feature-milestone (next minor per ship.md)
phases:
- v1.0.1 phase-01 repo-scaffolding
- v1.0.2 phase-02 l1-modules
- v1.0.3 phase-03 l2-modules-and-core-scripts
- v1.0.4 phase-04 pipeline-and-approval-gates
- v1.0.5 phase-05 evidence-ui-and-demo-dry-run
---/ci---
Milestone v1.0 complete. All 15 requirements covered. main branch created
from milestone/v1.0-initial and pushed. Repo default branch set to main.
Tag v1.1.0 (feature milestone -> next minor per ship.md versioning rule).
2026-07-21 13:57:04 +00:00
58adf9e231
docs(P05): post-ship traceability + roadmap update (v1.0.5)
...
---ci---
phase: 5
milestone: v1.0
status: shipped
requirements:
complete: [REQ-13, REQ-14, REQ-15]
release:
tag: v1.0.5
pr: 5
---/ci---
ROADMAP Phase 05 -> complete (v1.0.5). REQUIREMENTS REQ-13/14/15 -> complete.
All 5 phases of milestone v1.0 are now complete. Next: the COMPLETE gate
(review -> ship(milestone v1.1.0) -> audit).
2026-07-21 13:54:41 +00:00
grimacing
0672edfc3f
ship: phase-05 evidence-ui-and-demo-dry-run (v1.0.5)
...
Squash merge of phase/05-evidence-ui-and-demo-dry-run; evidence-ui/index.html + run_demo.sh 4-act simulation + verify_phase05.sh; demo live at acdl-evidence raw URL.
2026-07-21 13:53:54 +00:00
1415c85d35
docs(P04): post-ship traceability + roadmap update (v1.0.4)
...
---ci---
phase: 4
milestone: v1.0
status: shipped
requirements:
complete: [REQ-10, REQ-12]
release:
tag: v1.0.4
pr: 4
---/ci---
ROADMAP Phase 04 -> complete (v1.0.4). REQUIREMENTS REQ-10/12 -> complete.
Phase 04 was the last 'skeleton-filling' phase; Phase 05 builds the
evidence UI and runs the 4 demo acts end-to-end.
2026-07-21 13:43:07 +00:00
grimacing
72b359c9a9
ship: phase-04 pipeline-and-approval-gates (v1.0.4)
...
Squash merge of phase/04-pipeline-and-approval-gates; pipeline.yml + issue-to-contract.yml + finalize_evidence.py; verify_phase04.sh green; 1 P0 fixed (shell injection).
2026-07-21 13:42:25 +00:00
711b61d63e
docs(P03): post-ship traceability + roadmap update (v1.0.3)
...
---ci---
phase: 3
milestone: v1.0
status: shipped
requirements:
complete: [REQ-04, REQ-05, REQ-06, REQ-07, REQ-08, REQ-11]
partial: [REQ-12]
release:
tag: v1.0.3
pr: 3
---/ci---
ROADMAP Phase 03 -> complete (v1.0.3). REQUIREMENTS: REQ-04/05/06/07/08/11
-> complete; REQ-12 -> partial (full issue-trigger wiring in Phase 04).
2026-07-21 13:33:18 +00:00
grimacing
3ea36ef3ab
ship: phase-03 l2-modules-and-core-scripts (v1.0.3)
...
Squash merge of phase/03-l2-modules-and-core-scripts; 4 L2s + 5 core scripts; verify_phase03.sh green.
2026-07-21 13:32:21 +00:00
6e27df7404
docs(P02): post-ship traceability + roadmap update (v1.0.2)
...
---ci---
phase: 2
milestone: v1.0
status: shipped
requirements:
complete: [REQ-02, REQ-03]
release:
tag: v1.0.2
pr: 2
---/ci---
ROADMAP Phase 02 -> complete (v1.0.2). REQUIREMENTS REQ-02/03 -> complete.
2026-07-21 13:18:51 +00:00
grimacing
00d0043866
ship: phase-02 l1-modules (v1.0.2)
...
Squash merge of phase/02-l1-modules into milestone/v1.0-initial; 8 L1 stub modules created; verify_phase02.sh green.
2026-07-21 13:18:12 +00:00
fd423e2df1
docs(P01): post-ship traceability + roadmap update (v1.0.1)
...
---ci---
phase: 1
milestone: v1.0
status: shipped
requirements:
complete: [REQ-01, REQ-09]
partial: [REQ-10, REQ-12]
release:
tag: v1.0.1
url: https://git.cloudinit.dev/continuous-intelligence/acdl/releases/tag/v1.0.1
pr: 1
---/ci---
ROADMAP Phase 01 -> complete (v1.0.1). REQUIREMENTS REQ-01/09 -> complete;
REQ-10/12 -> partial (full impl in Phase 04).
2026-07-21 13:12:01 +00:00
b953fd4a8e
docs(P01): complete repo-scaffolding phase
...
---ci---
phase: 1
milestone: v1.0
status: complete
requirements:
covered: [REQ-01, REQ-09]
partial: [REQ-10, REQ-12]
---/ci---
Squash merge of phase/01-repo-scaffolding into milestone/v1.0-initial.
Phase 01 ships the three-repo scaffold (acdl, acdl-contracts, acdl-evidence),
the placeholder index.html on acdl-evidence (D-012/D-016 raw-URL substitute
for unsupported Gitea Pages), the qa + prod branches on acdl-contracts
(D-013 stand-in for unsupported Gitea environments), the workflow skeletons
(pipeline.yml + issue-to-contract.yml), and the idempotent setup + verify
scripts. REQ-10/12 remain partial pending Phase 04 full implementation.
2026-07-21 13:10:50 +00:00
e3416f8e77
docs(init): initialize Agentic Cloud Delivery Platform (5 phases)
...
---ci---
phase: 0
milestone: v1.0
status: specify
decisions:
- id: D-001
decision: Use Gitea org continuous-intelligence for all ACDL repos
rationale: User-specified target org; already exists at git.cloudinit.dev
confidence: 0.95
alternatives: [new dedicated demo org]
- id: D-002
decision: Map "GitHub Actions" to Gitea Actions (act_runner) using same workflow YAML
rationale: Environment is Gitea; syntax-compatible with act_runner
confidence: 0.85
alternatives: [migrate to GitHub.com, raw shell scripts]
- id: D-003
decision: Collapse acdl-platform into the existing empty acdl repo
rationale: acdl already exists at org root; avoids a 4th repo
confidence: 0.90
alternatives: [create separate acdl-platform repo]
- id: D-004
decision: Use Gitea environment blocks + required reviewers for QA/Prod; fallback to manual workflow_dispatch with approval input
rationale: Spec mandates approval gates; forge supports environment protection
confidence: 0.80
alternatives: [external approval bot, no approval gates]
- id: D-005
decision: Hash-chained ledger (prev_hash + own hash via SHA-256 of canonical JSON) for evidence; declared demonstrative not adversarially secure
rationale: Spec asks for simple JSON; chain gives visible tamper-evidence
confidence: 0.85
alternatives: [signed commits only, full Merkle tree]
- id: D-006
decision: Confidence gate threshold = 0.50 exactly (base 0.90, fail drops to 0.40)
rationale: Explicit in spec
confidence: 0.99
alternatives: []
- id: D-007
decision: Each mock_apply.sh echoes "[L1: <name>] applying..." + "OK", sleeps 1s, exits 0
rationale: Spec literal; uniformity aids timeline parsing
confidence: 0.95
alternatives: [randomized sleep durations]
- id: D-008
decision: L3B keyword->stack mapping: gas/price/ingest/data-lake->commodity-price-feed; invoice/billing->invoice-service; analytics/historical/query->energy-analytics-api; regulatory/compliance/reporting/trading->regulatory-reporting; fallback->invoice-service
rationale: Mirrors the 4 L2 modules + Act 3 example issue text
confidence: 0.85
alternatives: [single default stack, ML classifier (forbidden by no-AI constraint)]
- id: D-009
decision: Init milestone = v1.0, branch milestone/v1.0-initial
rationale: init.md Step 5 mandates milestone/v1.0-initial
confidence: 0.99
alternatives: []
- id: D-010
decision: Single-project mode for the acdl checkout; ---ci--- blocks omit project field
rationale: User chose standalone single-project; no other projects in this checkout
confidence: 0.90
alternatives: [register acdl in /root multi-project config]
---/ci---
Specification: 30-minute executive demo of the Agentic Cloud Delivery Platform proving automatic, safe, audited infra delivery via local stubs on Gitea Actions (no cloud, no AI APIs).
Requirements: [3 repos under continuous-intelligence org, 8 L1 stub modules, 4 L2 composed modules mirroring S&P Global Energy use cases, 5 core scripts (mock_executor.sh, policy_checker.py, confidence_signal.py, evidence_writer.py, l3b_agent_stub.py), reusable Dev->QA->Prod pipeline with approval gates, issue-triggered L3B agent, Pages evidence timeline UI, 4 scripted demo acts]
Constraints: [local Linux OS, Gitea Actions + Environments, no AWS/GCP/Azure, no external LLM APIs, state in flat JSON/artifacts, EKS Fargate + serverless primitives (no VPC module), L1 single-purpose substrate-agnostic max-depth-1, L2 max-depth-5]
Out of scope: [real cloud provisioning, real LLM inference, production-grade infrastructure, adversarial tamper-proofing of evidence]
2026-07-21 12:46:33 +00:00
Jon Chery
grimacing