6 commits

Author	SHA1	Message	Date
Adam Moussa	46dbe35998	ci(terraform-isolation): run label retriggers in a dedicated workflow	2026-09-10 20:27:41 -04:00
Adam Moussa	f366d449c8	fix(ci): do not skip Frontend checks on isolation label events	2026-09-10 20:23:36 -04:00
Adam Moussa	fc54afd421	fix(terraform-isolation): do not treat terraform markdown as a mixed change	2026-09-10 20:16:51 -04:00
Adam Moussa	ddb45c7960	test(terraform-isolation): lock the ci.yaml label-event contract	2026-09-10 20:12:06 -04:00
Adam Moussa	a95c11527c	ci(terraform-isolation): re-evaluate the gate on label changes	2026-09-10 20:11:20 -04:00
Adam Moussa	08da408a13	ci(governance): wire Terraform and CDK gates and isolate Terraform PRs ... Governance now runs the import-plan checker tests, Terraform fmt and validate for terraform/live/dev, the isolation gate tests, and the CDK build, tests, and synth in both modes. A new terraform-isolation workflow fails PRs that change terraform/** together with application code; the terraform-isolation-override label is the reviewed exception. Renovate gains the terraform manager.	2026-09-10 19:15:13 -04:00