phase: 10, status: plan-as-execute, persona: backend-engineer+security-engineer+platform-engineer, task: T-10.8
---ci---
project: acdl
phase: 10
milestone: v1.1
status: plan-as-execute
persona: backend-engineer+security-engineer+platform-engineer
task: T-10.8
requirements.covered: [REQ-27]
---/ci---
Wave 3: the end-to-end spike pipeline orchestrator (capstone).
scripts/run_spike_e2e.sh - 8-step pipeline:
1+2. contract_resolver.py validates + resolves contracts/spike.yaml -> IR
3. adapter.py compiles IR -> terraform/spike/*.tf (regenerated)
4. terraform init -reconfigure -lock=false + validate + plan -lock=false
(real AWS; 1 to add, 0 to change, 0 to destroy)
5. checkov on terraform/spike/main.tf (6 failed, 5 passed)
6. checkov_adapter.py -> 12 PolicyCheckResult records (incl ACDL_TAG_NAMING SKIPPED)
7. confidence_signal.py compute -> score 0.8, band pass (dev >= 0.50)
8. outbox_writer.py -> DynamoDB outbox put_item (contractId, hash chain GENESIS)
EXECUTE: ran against real AWS via the rotated spike key (D-039).
SPIKE E2E OK - the full pipeline completes end-to-end. Regenerated
terraform/spike/{main.tf,terraform.tf} committed (backend key now
spike/l2-static-asset/terraform.tfstate per D-P10-1; used -reconfigure
because the backend key changed from the Phase 09 l1-s3 spike).
Jon Chery
7afaa34b60