joshsiv-mulga 5342f78abe docs: record D4 and D9 IAM enforcement decisions ...

D4 accepts an in-process synchronous enforcement profile for AWSGW while
it is co-located with the IAM authority, using the projection's
enforcement semantics with no per-request fallback. D9 makes the IAM
authority the sole publisher of session-validity facts. Neither remains
a Phase 1 gate; D11 and D12 stay open.

Preflight is not green: lint fails on the 13 known strings.CutLast
modernize findings in production files, and the vulnerability gate
reports advisories within the recorded GO-2026-6599..6617 exception.
The Phase 0 focused and race test runs pass.

2026-10-12 17:30:16 +10:00

..

adr-0004-inventory-ecs.md

docs: record ECS, EKS and RDS source inventory and first-resource ranking

2026-10-08 08:44:51 +10:00

adr-0004-inventory-eks.md

docs: qualify historical architecture references

2026-10-09 08:59:41 +10:00

adr-0004-inventory-rds.md

docs: record ECS, EKS and RDS source inventory and first-resource ranking

2026-10-08 08:44:51 +10:00

ecs-task-definition-lifecycle.md

docs: record ECS task definition owner extraction

2026-10-08 11:08:48 +10:00

eks-access-entry-lifecycle.md

docs: record EKS access entry owner extraction

2026-10-08 12:34:24 +10:00

eks-addon-bundle-inventory.md

docs: add EKS add-on executor, bundle, v1 compatibility and release inventories

2026-10-09 08:37:42 +10:00

eks-addon-executor-inventory.md

docs: record EKS internal-route and role-ARN security corrections

2026-10-09 10:27:04 +10:00

eks-addon-lifecycle-design.md

docs: apply review decisions to EKS add-on lifecycle design

2026-10-09 07:48:54 +10:00

eks-addon-lifecycle.md

docs: record EKS add-on wire contract extraction

2026-10-08 23:02:20 +10:00

eks-addon-v1-compatibility.md

docs: add EKS add-on executor, bundle, v1 compatibility and release inventories

2026-10-09 08:37:42 +10:00

eks-addon-v2-contract-design.md

docs: record EKS add-on activation review decisions

2026-10-09 10:54:26 +10:00

eks-release-membership-and-activation-design.md

docs: record EKS add-on activation review decisions

2026-10-09 10:54:26 +10:00

iam-enforcement-inventory.md

docs: add IAM enforcement projection inventory and design

2026-10-12 17:18:29 +10:00

iam-enforcement-projection-design.md

docs: record D4 and D9 IAM enforcement decisions

2026-10-12 17:30:16 +10:00

rds-db-parameter-group-lifecycle.md

docs: record RDS DB parameter group owner extraction

2026-10-08 21:51:43 +10:00

rds-db-subnet-group-lifecycle.md

docs: correct RDS subnet group tagging debt and conformance scope

2026-10-08 10:27:47 +10:00

rds-engine-catalogue-boundary.md

docs: record RDS engine catalogue owner move

2026-10-08 17:33:30 +10:00

release-and-version-inventory.md

refactor: split the Viperblock EBS adapter out of services/viperblockd

2026-10-09 15:52:29 +10:00

sts-oidc-discovery-projection-plan.md

refactor: inject the STS cluster JWKS lookup from handlers/eks

2026-10-11 21:59:47 +10:00