3 commits

Author	SHA1	Message	Date
Adam Moussa	69c24c1c2c	feat(terraform): ship dev content CD through Terraform (SH-300) (#180) ... * feat(terraform): ship dev content CD through Terraform (SH-300) GitHub uploads immutable release prefixes; Terraform owns live publish. Push-to-dev stays off until TERRAFORM_CONTENT_CD_ENABLED is set. * fix(terraform): align release-plan guard flags and CloudFront verify IAM (SH-300)	2026-09-11 13:40:14 -04:00
Adam Moussa	8b5281d357	ci(terraform-isolation): re-evaluate the gate on label changes (#177) ... * ci(terraform-isolation): re-evaluate the gate on label changes * test(terraform-isolation): lock the ci.yaml label-event contract * fix(terraform-isolation): do not treat terraform markdown as a mixed change * fix(ci): do not skip Frontend checks on isolation label events * ci(terraform-isolation): run label retriggers in a dedicated workflow * fix: apply eslint formatting * fix: apply additional missed eslint formatting	2026-09-10 20:45:49 -04:00
Adam Moussa	08da408a13	ci(governance): wire Terraform and CDK gates and isolate Terraform PRs ... Governance now runs the import-plan checker tests, Terraform fmt and validate for terraform/live/dev, the isolation gate tests, and the CDK build, tests, and synth in both modes. A new terraform-isolation workflow fails PRs that change terraform/** together with application code; the terraform-isolation-override label is the reviewed exception. Renovate gains the terraform manager.	2026-09-10 19:15:13 -04:00