5 commits

Author	SHA1	Message	Date
Adam Moussa	41b88f2c85	fix(test): restore exact SHOC principal pin in terraform ... Pin shoc_consumer_role_arn's Terraform default and example to the trusted ARN, and require grant sites to consume local.shoc_consumer_role_arn only.	2026-08-07 12:10:27 -04:00
Adam Moussa	6ac10f125e	fix(infra): hash live API GW attrs for redeploy triggers	2026-08-06 20:13:06 -04:00
Adam Moussa	21e939e8e1	fix(infra): bind SES bucket policies to receipt rule ARNs	2026-08-06 19:58:19 -04:00
Adam Moussa	dd07bb973b	fix(infra): import SHOC secret policy; guard S3 cutover	2026-08-06 19:58:19 -04:00
Adam Moussa	0ba3600177	feat(infra): add HCP Terraform for procurement-ingest import-in-place	2026-08-06 17:07:40 -04:00