48b4ad6f04
RESEARCH stage. Verified the technical assumptions behind the 8-phase
v1.11 plan against the live codebase.
Findings:
- spike_runner_policy.json (terraform/bootstrap/) already grants
ECS/ECR/ELB/IAM/EC2/S3-tfstate/DynamoDB-outbox. MISSING for CAP-017..022:
cloudfront, waf, lambda, dynamodb (acdl-contracts + acdl-change-requests),
secretsmanager, sns, ce (Cost Explorer). Phase 56 extends this exact file.
- terraform/platform/main.tf already defines acdl_contracts table, Lambda
contract_ingestor + Function URL, acdl_change_requests table, acdl-sod-halt
SNS topic. CAP-017/018 verification = terraform apply platform stack +
Lambda Function URL probe.
- modules/l2/{microservice,static-assets}/composition.json confirm the L2
wiring; contracts/*.yml use the v1.10.2 contract shape (id/name/
infrastructure map).
- scripts/run_platform.sh implements decommission mode (D-070, REQ-92) with
2-step pipeline + SRE gates + changeRequestId validation. Phase 61 reuses
this exact path for teardown (REQ-122).
- scripts/run_regression.sh + core/regression_verify.py implement the D-091
regression gate. v1.11 milestone COMPLETE re-runs this; CAP-017..022 must
be added to the capability registry so the regression gate covers them.
- Decks (docs/presentations/*-marp.md + source .md) carry the "6 IAM-gated
cloud resources escalated (require an admin principal)" framing in 4
locations. Phase 62 rewrites all 4 to "Verified live-aws on <date>".
PERSONAS.md updated for v1.11:
- lambda-engineer reactivated (Phase 57 live Lambda probe).
- NEW cost-engineer persona (Phase 59 Cost Explorer + COST.md).
- Domain priority: coordination → security → platform → backend → lambda
→ cost → frontend.
- Phase-specific overrides 56-63 added.
- Territory enforcement: warn (co-authoring expected on spike_runner_policy
+ terraform/platform/main.tf).
Env state: ACDL_BOOTSTRAP_AWS_* NOT set in this shell. Phase 56 will
escalate per D-095 (escalate to human for fresh access keys, not silent
fallback).
---ci---
project: acdl
phase: 0
milestone: v1.11
status: research
---/ci---