d14b55b774
GRILL (ci-griller): 9 axes, 8 findings G-103..G-110, verdict proceed-with-conditions (conf 0.82). 3 binding mitigations incorporated: - G-104 (scope/technical, conf 0.90): re-tag Major milestone on its OWN minor line (v1.15.x), not the v1.14.x patch line (NFR convention). Precedent: v1.10.2→v1.11.0, v1.9.x→v1.10.0. Updated PLAN/ROADMAP/ PROJECT/REQUIREMENTS/ARCHITECTURE tag refs: v1.15.0(P0)→v1.15.4(P5). - G-106 (risk/technical, conf 0.88): .env.secrets direct-read paths (run_platform.sh:288-289 + regression_verify.py:309-312) bypass the core/env.py helper — P2 MUST dual-read these (NOVA_* first, ACDL_* fallback) or AWS creds vanish mid-rename. Bound in PLAN.md P2 task 2. - G-108 (security, conf 0.80): CI workflow secrets: refs (deploy.yml + modules-lifecycle.yml, .gitea + .github) reference secrets.ACDL_* — P2 MUST update to secrets.NOVA_* in lockstep with Gitea secret creation. Bound in PLAN.md P2 task 3 (hard gate). 5 accepted-as-is findings (G-103/105/107/109/110), 0 open escalations. ---ci--- project: acdl phase: 0 milestone: v1.15 status: grill ---/ci---