Compare commits
2 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
| d1ff6934c6 | |||
| ccbccb02ac |
@@ -1,12 +1,12 @@
|
|||||||
{
|
{
|
||||||
"phase": 1,
|
"phase": 2,
|
||||||
"stage": "complete",
|
"stage": "complete",
|
||||||
"milestone": "v1.22",
|
"milestone": "v1.22",
|
||||||
"phase_role": "execution",
|
"phase_role": "execution",
|
||||||
"attempts": 0,
|
"attempts": 0,
|
||||||
"updated_at": "2026-08-11T14:45:00Z",
|
"updated_at": "2026-08-11T14:50:00Z",
|
||||||
"milestone_complete": false,
|
"milestone_complete": false,
|
||||||
"tag": "v1.21.1",
|
"tag": "v1.21.2",
|
||||||
"requirements": ["REQ-254","REQ-255","REQ-256"],
|
"requirements": ["REQ-257","REQ-258"],
|
||||||
"notes": "v1.22 P1 complete. Tag v1.21.1. Theme CSS fixed (padding, overflow, image, title chrome). 23 slide tests pass. Proceeding to P2 (render scripts)."
|
"notes": "v1.22 P2 complete. Tag v1.21.2. render_deck.sh deleted, CLI versions pinned, 2x scale + transparent bg added. 4 render tests + 1 no-forge test pass. Proceeding to P3 (mermaid re-layout)."
|
||||||
}
|
}
|
||||||
@@ -1,19 +1,11 @@
|
|||||||
%%{init: {"theme": "base", "themeVariables": {"primaryColor": "#1B1B1B", "primaryBorderColor": "#D6002A", "primaryTextColor": "#fff", "secondaryColor": "#fff", "secondaryBorderColor": "#D6002A", "secondaryTextColor": "#1B1B1B", "tertiaryColor": "#F0F0F0", "clusterBkg": "#F0F0F0", "lineColor": "#1B1B1B", "fontFamily": "\"Akkurat Pro\", \"Helvetica Neue\", \"Arial\", sans-serif"}}}%%
|
%%{init: {"theme": "base", "themeVariables": {"primaryColor": "#1B1B1B", "primaryBorderColor": "#D6002A", "primaryTextColor": "#fff", "secondaryColor": "#fff", "secondaryBorderColor": "#D6002A", "secondaryTextColor": "#1B1B1B", "tertiaryColor": "#F0F0F0", "clusterBkg": "#F0F0F0", "lineColor": "#1B1B1B", "fontFamily": "\"Akkurat Pro\", \"Helvetica Neue\", \"Arial\", sans-serif"}}}%%
|
||||||
|
|
||||||
flowchart LR
|
flowchart TB
|
||||||
A["Contract"] --> B["Resolver"]
|
A["Contract → Resolver → Adapter"] --> D["Checkov (static code)"]
|
||||||
B --> C["Adapter"]
|
D --> E["Terraform plan"]
|
||||||
C --> D["Checkov<br/>(static code)"]
|
E --> F["Wiz (on plan) → Confidence signal → Stage gate"]
|
||||||
D --> E["Terraform<br/>plan"]
|
F --> I["Apply → Evidence + Ledger"]
|
||||||
E --> F["Wiz<br/>(on plan)"]
|
|
||||||
F --> G["Confidence<br/>signal"]
|
|
||||||
G --> H{"Stage<br/>gate"}
|
|
||||||
H -->|"dev: autonomous"| I["Apply"]
|
|
||||||
H -->|"qa/prod/dr: attested"| I
|
|
||||||
I --> J["Evidence +<br/>Ledger"]
|
|
||||||
classDef accent fill:#1B1B1B,color:#fff,stroke:#D6002A,stroke-width:2px
|
classDef accent fill:#1B1B1B,color:#fff,stroke:#D6002A,stroke-width:2px
|
||||||
classDef supporting fill:#fff,color:#1B1B1B,stroke:#D6002A,stroke-width:1px
|
classDef supporting fill:#fff,color:#1B1B1B,stroke:#D6002A,stroke-width:1px
|
||||||
classDef decision fill:#D6002A,color:#fff,stroke:#1B1B1B,stroke-width:2px
|
class D,E,F accent
|
||||||
class D,E,F,G,J accent
|
class A,I supporting
|
||||||
class H decision
|
|
||||||
class A,B,C,I supporting
|
|
||||||
Binary file not shown.
|
Before Width: | Height: | Size: 18 KiB After Width: | Height: | Size: 36 KiB |
@@ -102,7 +102,7 @@ Every hour a developer spends writing, deploying, fixing, or remediating infrast
|
|||||||
|
|
||||||
**How intent becomes verified infrastructure — fail-fast policy scanning before the plan, runtime scanning after it.**
|
**How intent becomes verified infrastructure — fail-fast policy scanning before the plan, runtime scanning after it.**
|
||||||
|
|
||||||

|

|
||||||
|
|
||||||
- **Contract → resolver → adapter → Checkov on static code (before plan) → terraform plan → Wiz on the plan → confidence signal → stage gate → apply → evidence + ledger**
|
- **Contract → resolver → adapter → Checkov on static code (before plan) → terraform plan → Wiz on the plan → confidence signal → stage gate → apply → evidence + ledger**
|
||||||
- **Fail-fast, quick feedback** — Checkov runs on the authored Terraform code before `terraform plan` so developers get immediate policy feedback
|
- **Fail-fast, quick feedback** — Checkov runs on the authored Terraform code before `terraform plan` so developers get immediate policy feedback
|
||||||
@@ -152,7 +152,7 @@ Separation-of-duties on prod: the approver cannot be the same person who built t
|
|||||||
|
|
||||||
**Every metric in this deck is traceable to a real emitted signal — the live-ops dashboard makes operations visible in PowerBI.**
|
**Every metric in this deck is traceable to a real emitted signal — the live-ops dashboard makes operations visible in PowerBI.**
|
||||||
|
|
||||||

|

|
||||||
|
|
||||||
- **Platform components → CloudEvents envelope → event log + decision ledger + run records → collector → cold store → PowerBI views → live ops dashboard**
|
- **Platform components → CloudEvents envelope → event log + decision ledger + run records → collector → cold store → PowerBI views → live ops dashboard**
|
||||||
- **The live ops dashboard (PowerBI)** surfaces the four CTO-grade metrics (Lead Time, Vulnerability Count, MTTR, Cloud Spend) alongside trust metrics (Decision Ledger coverage, Attestation coverage) and efficiency metrics (touchless resolution, escalation frequency)
|
- **The live ops dashboard (PowerBI)** surfaces the four CTO-grade metrics (Lead Time, Vulnerability Count, MTTR, Cloud Spend) alongside trust metrics (Decision Ledger coverage, Attestation coverage) and efficiency metrics (touchless resolution, escalation frequency)
|
||||||
|
|||||||
Reference in New Issue
Block a user