5 commits

Author	SHA1	Message	Date
Adam Moussa	5a3729c583	chore(infra): remove cdk tree after hcp cutover (PLAT-89) (#164) ... * chore(infra): remove cdk tree after hcp cutover Delete retired CDK sources, retarget bundle/principal contract tests to Terraform packaging, disable CDK synth in CI, and scrub deploy-adjacent docs. * fix(test): restore exact SHOC principal pin in terraform Pin shoc_consumer_role_arn's Terraform default and example to the trusted ARN, and require grant sites to consume local.shoc_consumer_role_arn only.	2026-08-07 12:20:29 -04:00
Adam Moussa	6ac10f125e	fix(infra): hash live API GW attrs for redeploy triggers	2026-08-06 20:13:06 -04:00
Adam Moussa	21e939e8e1	fix(infra): bind SES bucket policies to receipt rule ARNs	2026-08-06 19:58:19 -04:00
Adam Moussa	dd07bb973b	fix(infra): import SHOC secret policy; guard S3 cutover	2026-08-06 19:58:19 -04:00
Adam Moussa	0ba3600177	feat(infra): add HCP Terraform for procurement-ingest import-in-place	2026-08-06 17:07:40 -04:00