Jon Chery
d700148063
---ci---
phase: 0
milestone: v1.0
status: complete
audit:
reconstruction: PASS (git-log phase statuses match ROADMAP.md; all 5 phases complete; 33 decisions in PROJECT.md; SEC-001 mitigated)
branch_hygiene: PASS (all 5 phase branches merged + deleted; main + milestone/v1.0-initial only; tags v1.0.1..v1.0.5 + v1.1.0 monotonic; all 5 PRs merged)
commit_discipline: PASS-WITH-CAVEAT (all per-task commits had ---ci--- blocks on phase branches; the 5 squash-merge commits on main lack ---ci--- blocks because Gitea's squash-merge API compresses the phase branch into a single summary commit — the per-task blocks were on the deleted phase branches)
security_findings:
- SEC-001 (Phase 01): mitigated (token rotated to env var)
- P0-001 (Phase 04): fixed inline (URLError catch in finalize_evidence.py)
- P0-002 (Phase 04): fixed inline (shell injection in issue body -> env var)
- P1-001 (this audit): fixed (remote URL in .git/config stripped of token; future pushes use 'git -c http.https://<host>/.extraHeader=Authorization: token <token>' or a credential helper)
escalation_count: 0
lessons_count: 13 (across 5 verify_phaseNN.sh commits)
---/ci---
Audit PASS. Reconstruction test confirms git-log state matches .ciagent/
files. Branch hygiene clean (no orphan phase branches; tags monotonic;
PRs merged). Commit discipline passes with the documented caveat that
Gitea's squash-merge API strips per-task ---ci--- blocks from the
squashed commit body (the per-task blocks existed on the now-deleted
phase branches and are recoverable via git reflog if needed).
P1-001 (token in .git/config remote URL — deferred from Phase 01 verify)
is now FIXED: the remote URL is tokenless; future pushes use a one-shot
'git -c http.<host>/.extraHeader=Authorization: token <token>' or a
credential helper. This was the last open finding from the milestone.
The ACDL milestone v1.0 is complete and audited. Tag v1.1.0 is the
feature-milestone release (next minor per ship.md). The demo is live at
https://git.cloudinit.dev/continuous-intelligence/acdl-evidence/raw/branch/main/index.html
ACDL — Agentic Cloud Delivery Platform
A 30-minute executive demo proving that infrastructure can be delivered automatically, safely, and with a complete audit trail — without the usual weeks of manual tickets, reviews, and copy-pasted configuration.
The demo runs entirely on local stubs (no AWS/GCP/Azure, no external LLM APIs). It shows intent and safety behavior rather than provisioning real cloud resources.
Four acts
- Act 1 — The Friction: the old manual 2-week deployment process.
- Act 2 — Developer Self-Service: commit a valid
contract.yamlforl2-commodity-price-feed, watch Dev auto-run, QA + Prod approval gates, then the evidence timeline. - Act 3 — Citizen Developer: open a GitHub/Gitea Issue with natural-
language intent; the Python keyword parser generates the same
contract.yamland triggers the identical pipeline. - Act 4 — The Safety Net: commit a malicious
contract.yaml(public-ingress: true) forl2-regulatory-reporting; the pipeline halts in Dev because the confidence signal drops below 0.50, and the rejection is visible on the evidence stream.
Repositories
All under the continuous-intelligence Gitea org at
https://git.cloudinit.dev:
acdl(this repo) — platform + stubs + reusable workflowsacdl-contracts— developer surface (contract.yaml+ issue trigger)acdl-evidence— audit timeline (served via raw file URLs; Gitea has no native Pages — see.ciagent/ARCHITECTURE.mdGitea API Surface table)
Project metadata
See .ciagent/PROJECT.md for the full spec, .ciagent/ROADMAP.md for the
5-phase breakdown, .ciagent/REQUIREMENTS.md for traceable requirements,
and .ciagent/PERSONAS.md for the active persona roster.
Phase 01 verification
After running scripts/gitea_setup.sh (which creates acdl-contracts and
acdl-evidence in the org and pushes the placeholder index.html), run:
ACDL_GITEA_TOKEN=<token> scripts/verify_phase01.sh
The script confirms:
- both new repos exist via the Gitea API
- the raw
index.htmlURL onacdl-evidencereturns HTTP 200 - the
qaandprodbranches exist onacdl-contracts
Exit 0 = Phase 01 success criteria met.