Jon Chery 843cd17b97 fix(P29): SSM fail-loud without CMK + Terraform-rendered invoke policy (P1-3, P1-6) ...

---ci---
project: acdl
phase: 29
milestone: v1.8
status: execute
---/ci---

P1-3: SSM publisher now raises RuntimeError when ACDL_KMS_KEY_ID is
unset. ACDL_ALLOW_DEFAULT_KMS=1 escape hatch for local testing.
P1-6: consumer_invoke_policy.json now uses ${account_id} and ${region}
placeholders. Terraform renders them via data.aws_caller_identity +
data.aws_region + replace() at apply time. No more hardcoded 000000000000.

Tests: +7 (285 -> 292). All pass.

2026-07-22 22:05:40 +00:00

..

fixtures

feat(P23): tagging standard + Wiz adapter + Kyverno adapter

2026-07-22 20:00:46 +00:00

__init__.py

feat(P18): testing + CI/CD pipelines - pytest suite, check-only mode, Gitea + GitHub workflows (v1.3.2)

2026-07-22 14:26:11 +00:00

conftest.py

review(v1.5): READY TO SHIP — multi-persona code review

2026-07-22 17:24:28 +00:00

test_adapter.py

fix(P28): WAF nested rules + default_action + resolver outputs (P1-4, P1-5, P1-7)

2026-07-22 22:03:54 +00:00

test_checkov_adapter.py

feat(P23): tagging standard + Wiz adapter + Kyverno adapter

2026-07-22 20:00:46 +00:00

test_confidence_signal.py

refactor(P21): rename acdl_platform/ -> core/ (REQ-53)

2026-07-22 18:21:12 +00:00

test_contract_ingestor.py

verify(P22-27): code review — 1 P0 auto-fixed, 2 P1 security fixes, 2 P2 nits

2026-07-22 21:09:52 +00:00

test_contract_resolver.py

fix(P28): WAF nested rules + default_action + resolver outputs (P1-4, P1-5, P1-7)

2026-07-22 22:03:54 +00:00

test_environment_check.py

feat(P22): rename static-asset→static-assets + cloudfront/waf primitives + production stack + @v1.6 bump

2026-07-22 19:56:52 +00:00

test_kyverno_adapter.py

feat(P23): tagging standard + Wiz adapter + Kyverno adapter

2026-07-22 20:00:46 +00:00

test_outbox_writer.py

refactor(P21): rename acdl_platform/ -> core/ (REQ-53)

2026-07-22 18:21:12 +00:00

test_output_publisher.py

fix(P29): SSM fail-loud without CMK + Terraform-rendered invoke policy (P1-3, P1-6)

2026-07-22 22:05:40 +00:00

test_pipeline_contract.py

feat(P27): RDS primitive + adapter expansion (D-059)

2026-07-22 20:21:45 +00:00

test_pipeline.py

refactor(P21): rename acdl_platform/ -> core/ (REQ-53)

2026-07-22 18:21:12 +00:00

test_release_logic.py

feat(P26): 3 platform pipelines + release job with semver/tag updates

2026-07-22 20:13:36 +00:00

test_wiz_adapter.py

feat(P23): tagging standard + Wiz adapter + Kyverno adapter

2026-07-22 20:00:46 +00:00