continuous-intelligence/acdl
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 128 Wiki Activity

128 Releases 190 Tags

RSS Feed
  • v1.9.0 6e41f09c6e
    Compare

    v1.9.0: production-grade progression
    acdl-ci / Lint (push) Successful in 6s
    Details
    acdl-ci / Test (push) Successful in 26s
    Details
    acdl-ci / Platform check-only (offline) (push) Successful in 9s
    Details
    Stable

    cloudinit-bot released this 2026-07-23 11:56:28 +00:00 | 466 commits to main since this release

    ACDL v1.9.0 — Milestone Release

    Production-grade progression: contract interpolation, per-environment promotion, stub implementation, and P1-1 remediation.

    The v1.8 milestone shipped encryption/deletion-protection by default, uptime, decommission, and engineering standards but left four gaps. v1.9 closes all four plus P1-1 (deferred from v1.2).

    What shipped (12 requirements, REQ-100..REQ-111)

    1. Design docs refreshed (REQ-100/101): hitl_matrix_design.md + audit_ledger_design.md up to date; S3 Object Lock/JWS build-out explicitly deferred (D-083).

    2. Contract interpolation (REQ-103/104): ${env.<field>} + ${contract.<field>} expansion in the resolver, sourced from environment onboarding JSON. Sample contracts use naming patterns including region, account id, environment (e.g. acdl-${env.environment}-${contract.module}-${env.account_id}-${env.region}).

    3. Per-environment CI jobs (REQ-105/106): 8 per-env contract files + environment workflow_call input on the reusable deploy workflow. One job per environment; promotion = running the matching job, no environment: field editing. Hybrid model (per-env contracts OR single contract + env input).

    4. Stub implementation (REQ-107..111): route_halt_artifact real (SNS + outbox fallback); HITL qa/prod/dr attestation gates (hitl_gates.py); 8-concern attestation matrix (attestation_matrix.py, offline-testable + signed evidence artifacts); Wiz real GraphQL client; Kyverno translator fleshed out.

    5. P1-1 closed (REQ-102): adapter ECS/ALB/VPC hardcoded defaults moved into L1 interface.json inputs; child_input_map routes wires to the sub-resource that declares the input.

    Phases

    Phase Name Tag
    39 design-doc-refresh-and-p1-1-parameterization v1.8.1
    40 contract-interpolation v1.8.2
    41 per-environment-ci-jobs v1.8.3
    42 stub-implementation v1.8.4
    43 verify-review-audit-complete v1.9.0

    Metrics

    • 494 offline tests (was 350 at v1.8, +144 new), no AWS required for CI.
    • run_ci.sh green; run_platform.sh --check-only green.
    • Review: 1 P0 (approver injection) + 1 P1 (future-dated freshness) auto-fixed; 3 P1 flagged for post-hoc.
    • Audit: PASS (16/16 commits with ---ci--- blocks).
    • Decisions: D-080..D-086 (PROJECT.md) + D-087..D-089 (RESEARCH.md).

    Known issues / post-hoc (P1 flagged)

    • Wiz WizClient._post does not surface GraphQL errors (silent empty-list mask).
    • Wiz _post no SSRF validation on WIZ_API_URL (operator-supplied, low risk).
    • contract_resolver._load_env duplicates environment_check.load (drift risk).

    Out of scope (deferred)

    • S3 Object Lock + JWS + async worker + DLQ + daily checkpoints (audit ledger build-out) — D-083, future milestone.
    • Live k6/Gatling load test execution, live DR drill, live FinOps forecast — operator-supplied evidence artifacts accepted + validated.
    • Self-service environment provisioning — platform-team action.

    Commits

    6e41f09 verify(P43): code review — 1 P0 auto-fixed, 1 P1 auto-fixed, 3 P1 flagged
c4d9663 docs(P43): merge phase 43 — verify + review + audit + complete v1.9
5365bb4 docs(milestone): complete v1.9 — verify + review + audit + tag v1.9.0
80d2a6c docs(P42): merge phase 42 — stub implementation
e74a8c2 feat(P42): stub implementation — SoD, HITL gates, attestation matrix, Wiz, Kyverno
5ebf7a6 docs(P41): merge phase 41 — per-environment CI jobs
cd63780 feat(P41): per-environment CI jobs + environment workflow input
481cfe7 docs(P40): merge phase 40 — contract interpolation
bee9d02 feat(P40): contract interpolation + environment JSON schema
8118d6e docs(P39): merge phase 39 — design doc refresh + P1-1 parameterization
e1be052 feat(P39): refresh design docs + parameterize adapter (P1-1)
58100c4 docs(P00): create 5 phase plans for v1.9 (phases 39-43)
2bea048 docs(P00): research v1.9 — interpolation, per-env jobs, Wiz, attestation matrix
c05ed7a docs(P00): clarify v1.9 — record decisions D-080..D-086
136ec6a docs(init): validate v1.9 specification
    Downloads