167a92f62186d2883699bff4c8ad0b4b8e71e425
---ci--- project: acdl phase: 7 milestone: v1.1 status: verify verdict: VERIFIED ---/ci--- Phase 07 architecture-v1-finalization verified on main (HEAD8723206, tag v1.1.2). All four layers PASS: - Structural: 9 deliverable files present; architecture-v1.0.md status is v1.0; all 11 decision IDs + Q1.3 in the snapshot; gitea-runner rename (D-046) applied; §15 table lists the 6 REQ-mapped files; 3 JSON Schemas declare Draft 2020-12 with required fields per PLAN; 3 .py files have expected docstrings + public functions; history preserved (T-7.192d4535is creation point); tags v1.1.0/v1.1.1/v1.1.2 all present. - Behavioral: scripts/verify_phase07.sh exits 0 with expected final line; typecheck gate (bash -n + py_compile) passes; schema cross-checks (qa/prod/dr/agentic negative cases, staging rejected, valid PCR passes) all pass; confidence_signal spot-checks (missing input -> block + INPUT_MISSING; critical fail -> 0.0 block + CRITICAL_OVERRIDE; cold-start dev -> 0.95 pass) all pass; SoD spot-checks (None outbox, None item, equal approvers, distinct, empty approver_qa) all pass; Checkov adapter spot-check (CKV_AWS_24 -> medium fail + ACDL_TAG_NAMING skipped appended) passes. - Security: no secrets in v1.1.1..v1.1.2 file set; no boto3 imports (stdlib only); platform/ shadow of stdlib platform documented + worked around in verify_phase07.sh (cd /tmp for jsonschema); LSP diagnostic on confidence_signal.py:148 confirmed false positive (py_compile + AST parse pass; runtime correct). - Quality: README layout table matches reality (platform/ + schemas/ now populated); all 7 Phase 07 commits carry ---ci--- blocks; ROADMAP Phase 07 = complete (v1.1.2); REQUIREMENTS REQ-16..22 = complete (v1.1.2); architecture-v1.0.md §15 files all exist; §13 resolutions match PROJECT.md decisions table. Requirements covered: REQ-16, REQ-17, REQ-18, REQ-19, REQ-20, REQ-21, REQ-22 (all 7 Phase 07 requirements; no partials). P1 flags (post-hoc, out of Phase 07 scope): - P1-1: platform/ package shadows stdlib platform module; v1.2 rename to acdl_platform/ (or src/ layout) would remove the workaround need. - P1-2: LSP false positive on confidence_signal.py:148 (Dict[str, Any] typing confuses pyright); py_compile + runtime correct; a v1.2 TypedDict tightening would silence it.
ACDL — Agentic Cloud Delivery Platform
Consumers declare intent; the platform delivers safe production deployment through an agentic stack — automatically, safely, and with a complete audit trail. A merged change progresses through lower environments end-to-end without a platform engineer joining a thread; a non-technical consumer ships a production deployment by declaring intent, without authoring a workflow, a configuration file, or a Terraform module.
- Vision (the why):
docs/vision.md - Architecture (the how):
docs/architecture.md - Decisions:
.ciagent/PROJECT.md - Target architecture:
.ciagent/ARCHITECTURE.md - Phase plan:
.ciagent/ROADMAP.md
Status
- v1.1 (active): architecture finalization + v1 spike. Finalize the
architecture to v1.0 (resolve the 11 open design decisions) and prove the
locked commitments with one end-to-end implementation spike
(
l1-s3+l2-static-asset+ Terraform adapter → realterraform planagainst AWS). - v1.0 demo (complete, archived): tag
v1.1.0. The 30-minute stub-driven executive demo is preserved underdemo/as the intent reference; it is not the platform.
Repository layout
| Path | Purpose | Populated |
|---|---|---|
platform/ |
Platform code: confidence signal, contract resolver, outbox, HITL/ledger designs | Phase 07+ |
schemas/ |
JSON Schemas: IR, PolicyCheckResult, contract | Phase 07 |
adapters/ |
Substrate adapters (Terraform adapter in v1; the only substrate-specific code per §12) | Phase 09 |
terraform/ |
State backend + provider config (S3 state + DynamoDB lock) | Phase 08+ |
modules-ir/ |
IR-typed L1/L2 modules (l1-s3, l2-static-asset) |
Phase 09–10 |
scripts/ |
v1.1 verify scripts (verify_phaseNN.sh) |
Phase 06+ |
demo/ |
Archived v1.0 executive demo (tag v1.1.0); runs locally via demo/scripts/run_demo.sh --no-upload |
complete |
.ciagent/ |
CIAgent metadata (plans, decisions, personas, roadmap, research) | active |
docs/ |
Upstream vision + architecture sources | active |
Running the archived demo
The v1.0 demo is an archived artifact. To re-run it locally:
bash demo/scripts/run_demo.sh --no-upload
The demo deck is at demo/ACDL_DEMO.md. The demo runs
entirely on local stubs — no AWS, no AI — and shows intent and safety
behavior rather than provisioning real cloud resources. It is the reference
of intent for the real platform; it is not the platform itself.
Description
Nova — The New Dawn of DevSecOps. Autonomous infrastructure delivery: consumers declare intent, the platform ships safely with an immutable audit trail.
agenticaudit-ledgerawscontinuous-deploymentdevsecopsgitea-actionsinfrastructure-as-codekyverno-jsonpolicy-as-codeterraform
Readme
69 MiB
Releases
128
Languages
Python
87.2%
Shell
8.6%
HCL
4.2%