Adam Moussa 97f27bd8d7 Add org-governance stack: OU skeleton + generalized SCPs ... Phase 2 of the multi-account segregation plan: codifies the OU tree (workloads/prod/nonprod, security, sandbox, graveyard) and three org-wide SCPs (workloads-region-lock, protect-security-baseline, deny-root-user) generalized from the proven external-dev guardrails. All resources Retain — CFN must never detach a live guardrail. New SCPs attach only to the new empty OUs; extending to external-dev is a separate gated targetIds change after live verification.		2026-07-14 13:59:57 -04:00
..
app.ts	Add org-governance stack: OU skeleton + generalized SCPs	2026-07-14 13:59:57 -04:00