3 commits

Author	SHA1	Message	Date
Adam Moussa	53c1acb19f	refactor(terraform): keep live/dev and live/staging as HCP roots ... Leave the adopted working directories in place so this CD PR does not retarget two live HCP workspaces. Flattening stays a later change.	2026-09-17 17:13:32 -04:00
Adam Moussa	2a106d4e9e	ci(cd): convert SPA hosting to handbook HCP and GitHub content CD ... Give HCP the bucket and CloudFront with an empty origin path. GitHub owns bucket-root sync and invalidation so merge-to-main and a human staging tag can deploy without creating HCP runs. G13 fails PRs that mix terraform/ with deployable application files.	2026-09-17 15:55:25 -04:00
Adam Moussa	08da408a13	ci(governance): wire Terraform and CDK gates and isolate Terraform PRs ... Governance now runs the import-plan checker tests, Terraform fmt and validate for terraform/live/dev, the isolation gate tests, and the CDK build, tests, and synth in both modes. A new terraform-isolation workflow fails PRs that change terraform/** together with application code; the terraform-isolation-override label is the reviewed exception. Renovate gains the terraform manager.	2026-09-10 19:15:13 -04:00