feat: add exact-parameter AWS SSM backend

coilyco-ops commented

2026-07-23 03:39:09 +00:00

Member

Add a KDL-policy-backed AWS SDK runtime exposing get_parameter and get_forgejo_read_token for one exact parameter, with fail-closed parsing and tests.

coilyco-ops referenced this issue from a commit

2026-07-23 03:39:38 +00:00

feat: add exact-parameter AWS SSM backend

coilyco-ops referenced this issue from a pull request that will close it,

2026-07-23 03:39:47 +00:00

feat: add exact-parameter AWS SSM backend #27

coilyco-ops commented

2026-07-23 03:49:25 +00:00

Author

Member

workflow: pull-request-and-merge

coilyco-ops commented

2026-07-23 03:49:27 +00:00

Author

Member

WARD-OUTCOME: done

coilyco-ops commented

2026-07-23 03:49:29 +00:00

Author

Member

Review summary: passed. PR #27 is mergeable. Go tests and the Forgejo ci.yml push and pull-request runs succeeded for 7a95fc8. The KDL parser fails closed on unknown or write grants, both tools resolve the same exact parameter, and IAM remains an independent downstream boundary.

Review summary: passed. PR #27 is mergeable. Go tests and the Forgejo ci.yml push and pull-request runs succeeded for 7a95fc8. The KDL parser fails closed on unknown or write grants, both tools resolve the same exact parameter, and IAM remains an independent downstream boundary.

coilyco-ops commented

2026-07-23 03:49:54 +00:00

Author

Member

workflow: pull-request-and-merge

coilyco-ops commented

2026-07-23 03:49:56 +00:00

Author

Member

WARDED_WORKFLOW: blocked 🛑

details

human comment by @coilyco-ops at 2026-07-23T03:49:54Z is newer than the latest ward acknowledgement at 2026-07-23T03:49:27Z

This action is blocked until the feedback is visibly acknowledged.

— Codex, via ward agent

WARDED_WORKFLOW: blocked 🛑 <details><summary>details</summary> human comment by @coilyco-ops at 2026-07-23T03:49:54Z is newer than the latest ward acknowledgement at 2026-07-23T03:49:27Z This action is blocked until the feedback is visibly acknowledged. </details>  — Codex, via `ward agent`

coilyco-ops commented

2026-07-23 03:50:15 +00:00

Author

Member

WARDED_WORKFLOW: coilyco-flight-deck/ward-mcp#27

reviewed and ready

director merge authorization: reviewed-and-ready
review summary: passed
workflow: pull-request-and-merge
WARD-OUTCOME: done

CI runs 29 and 30 passed for commit 7a95fc8.

WARDED_WORKFLOW: https://forgejo.coilysiren.me/coilyco-flight-deck/ward-mcp/pulls/27 <details> <summary>reviewed and ready</summary> director merge authorization: reviewed-and-ready review summary: passed workflow: pull-request-and-merge WARD-OUTCOME: done CI runs 29 and 30 passed for commit 7a95fc8. </details>

coilyco-ops commented

2026-07-23 03:50:26 +00:00

Author

Member

WARDED_WORKFLOW: blocked 🛑

details

manual close/update snapshot at 2026-07-23T03:50:23Z is newer than the latest ward acknowledgement at 2026-07-23T03:50:15Z

This action is blocked until the feedback is visibly acknowledged.

— Codex, via ward agent

WARDED_WORKFLOW: blocked 🛑 <details><summary>details</summary> manual close/update snapshot at 2026-07-23T03:50:23Z is newer than the latest ward acknowledgement at 2026-07-23T03:50:15Z This action is blocked until the feedback is visibly acknowledged. </details>  — Codex, via `ward agent`

coilyco-ops commented

2026-07-23 03:50:34 +00:00

Author

Member

WARDED_WORKFLOW: coilyco-flight-deck/ward-mcp#27

reviewed and ready after PR metadata update

director merge authorization: reviewed-and-ready
review summary: passed
workflow: pull-request-and-merge
WARD-OUTCOME: done

CI runs 29 and 30 passed for commit 7a95fc8. The PR body now carries the required workflow marker.

WARDED_WORKFLOW: https://forgejo.coilysiren.me/coilyco-flight-deck/ward-mcp/pulls/27 <details> <summary>reviewed and ready after PR metadata update</summary> director merge authorization: reviewed-and-ready review summary: passed workflow: pull-request-and-merge WARD-OUTCOME: done CI runs 29 and 30 passed for commit 7a95fc8. The PR body now carries the required workflow marker. </details>

coilyco-ops commented

2026-07-23 03:52:04 +00:00

Author

Member

WARDED_WORKFLOW: qa-passed ✅

qa details

verdict: pass
reviewed_sha: 7a95fc8144
reviewer_family: internal
workflow: pull-request-and-merge
issue_ref: coilyco-flight-deck/ward-mcp#26
pr_ref: coilyco-flight-deck/ward-mcp#27
reason: Read-only SSM tools, exact parameter scoping, static credential support, and fail-closed ward policy were reviewed. The exact PR head passed both Forgejo CI runs.
evidence:

Forgejo action runs 29 and 30 succeeded for the reviewed head.
Local tests and pre-commit validation passed before the PR was opened.
Both MCP tools target one configured SSM parameter and expose no write operation.

risks:

Live deployment remains gated on provisioning the scoped AWS principal and secret inputs.

run_identity: codex-manual-review-2026-07-22

WARDED_WORKFLOW: qa-passed ✅ <details> <summary>qa details</summary> verdict: pass reviewed_sha: 7a95fc81443c110812b77f0bfd6ccd74ad7ae9fc reviewer_family: internal workflow: pull-request-and-merge issue_ref: coilyco-flight-deck/ward-mcp#26 pr_ref: coilyco-flight-deck/ward-mcp#27 reason: Read-only SSM tools, exact parameter scoping, static credential support, and fail-closed ward policy were reviewed. The exact PR head passed both Forgejo CI runs. evidence: - Forgejo action runs 29 and 30 succeeded for the reviewed head. - Local tests and pre-commit validation passed before the PR was opened. - Both MCP tools target one configured SSM parameter and expose no write operation. risks: - Live deployment remains gated on provisioning the scoped AWS principal and secret inputs. run_identity: codex-manual-review-2026-07-22 </details>

coilyco-ops closed this issue

2026-07-23 03:52:21 +00:00

Rows
Columns

feat: add exact-parameter AWS SSM backend #26