Adam Moussa e9499e49b8 fix: isolate dev CDK deploys on their own bootstrap qualifier (B-1/OSWE-IAC-01) (#55) ... * fix: isolate dev CDK deploys on their own bootstrap qualifier (B-1) Dev synthesizes against the oswedev qualifier and the dev infra deploy role is scoped to cdk-oswedev-* — it can no longer assume the default hnb659fds bootstrap roles whose admin cfn-exec-role deploys prod, closing the cross-env escalation (OSWE-IAC-01). Prod stays on the default qualifier. * test: assert per-env bootstrap qualifier isolation + document (B-1)		2026-06-29 12:39:23 -04:00
..
ami-cache.ts	feat: stand up dev properly — assets bucket + artifact CD + baked AMI + on-box uv sync (T7+T19+T14) (#18)	2026-06-26 18:49:09 -04:00
app-service.ts	fix: env-scope the EC2 launch template name (unblocks prod deploy) (#51)	2026-06-29 00:51:16 -04:00
assets-bucket.ts	feat: stand up dev properly — assets bucket + artifact CD + baked AMI + on-box uv sync (T7+T19+T14) (#18)	2026-06-26 18:49:09 -04:00
config-store.ts	docs: document RETAIN secret-shell orphan gotcha (#52)	2026-06-29 10:51:49 -04:00
github-deploy-roles.ts	fix: isolate dev CDK deploys on their own bootstrap qualifier (B-1/OSWE-IAC-01) (#55)	2026-06-29 12:39:23 -04:00
instance-role.ts	fix: resolve security-review findings (sandbox isolation, IAM list scope, webhook replay, info-leak) (#54)	2026-06-29 12:21:19 -04:00