Adam Moussa 1e1e5176a3 Fix payroll summary email (SES config-set permission) + isolate failures (#114) ... * Fix payroll email: grant SES config-set permission + isolate failures The weekly pay-summary email to payroll has been failing with SES AccessDenied since 2026-06-08. The sending identity (seahaven.com) gained a default configuration set (seahaven-email-events), and SES authorizes SendEmail against the config-set ARN as well as the identity — but the WeeklyPostFunction role only granted ses:SendEmail on identity/*. - template.yaml: add the configuration-set ARN (scoped to the known set name) to the SES policy so sends are authorized again. - weekly-post/app.py: wrap _send_pay_email in try/except so a delivery failure can never abort the handler before the Slack schedule post. Previously the SES error also blocked the two-week schedule post. - Add a regression test covering the isolation. Cross-family GPT-4.1 IAM review: APPROVE. * Bump to v1.10.1 in CHANGELOG and sync App Home copy		2026-06-15 13:24:32 -04:00
..
conftest.py	Add pytest suite and wire it into CI (#85) (#86)	2026-06-01 19:07:08 -04:00
test_handler.py	Fix payroll summary email (SES config-set permission) + isolate failures (#114)	2026-06-15 13:24:32 -04:00
test_pay_math.py	Add pytest suite and wire it into CI (#85) (#86)	2026-06-01 19:07:08 -04:00