This repository has been archived on 2026-08-04. You can view files and clone it, but cannot push or open issues or pull requests.

Adam Moussa 17ef4de415 feat(security-review): schedule the Plane-1 checker coordinator nightly + role-skip (#36) ... - checker_coordinator.sh: add COORDINATOR_SKIP_ROLES env (comma-separated) to drop roles whose credentials are not provisioned from the registry entirely (never canaried/run/ALARMed). Fail-safe: empty/unset = run all. - systemd: sea-haven-checkers.{service,timer} run the coordinator nightly at ~03:30 UTC (90 min after the secrev sweep so they don't contend on $MIRROR_DIR / the Claude pool). The unit sets COORDINATOR_SKIP_ROLES=aws-posture,confluence-doc (aws-posture needs IAM Roles Anywhere; confluence-doc needs the confluence-bot token — both intentionally unprovisioned). Deployed + enabled on the box (deploy-before-merge): canary 4/4 with the skip, timer scheduled for 2026-06-23 03:35 UTC.		2026-06-22 19:05:02 -04:00
..
sea-haven-checkers.service	feat(security-review): schedule the Plane-1 checker coordinator nightly + role-skip (#36)	2026-06-22 19:05:02 -04:00
sea-haven-checkers.timer	feat(security-review): schedule the Plane-1 checker coordinator nightly + role-skip (#36)	2026-06-22 19:05:02 -04:00
sea-haven-secrev.service	Raise nightly agentic budget $20 -> $120 for full per-night coverage	2026-06-17 13:18:46 -04:00
sea-haven-secrev.timer	Rewrite nightly sweep as two-tier clean-clone auto-discovery	2026-06-16 15:00:00 -04:00