fix: safety & operational hardening#61

Merged

dwsmith1983 merged 17 commits intomainfrom

fix/safety-operational-hardening

Mar 8, 2026

Commits on Mar 8, 2026

fix(trigger): restrict env var expansion to INTERLOCK_ prefix
dwsmith1983
committed
fix(lambda): release trigger lock on SFN start failure
dwsmith1983
committed
fix(envcheck): add EVENTS_TABLE and EVENTS_TTL_DAYS to alert-dispatcher
dwsmith1983
committed
fix(lambda): log WriteJobEvent and audit write errors
dwsmith1983
committed
refactor(lambda): replace time.Now() with d.now() for test injection
dwsmith1983
committed
fix(store): deep copy pipeline configs in cache via JSON round-trip
dwsmith1983
committed
feat(terraform): add CloudWatch alarms for Lambda, SFN, DLQ, streams
dwsmith1983
committed
feat(terraform): add Lambda concurrency limits and trigger IAM policy
dwsmith1983
committed
feat(terraform): route CW alarm state changes through event pipeline
dwsmith1983
committed
feat(lambda): support Secrets Manager for Slack bot token
dwsmith1983
committed
fix(terraform): address security review findings
dwsmith1983
committed
fix(alert-dispatcher): validate Slack token format from Secrets Manager
dwsmith1983
committed
fix(lambda): reuse captured now and fix test date-boundary race
dwsmith1983
committed
fix(alert-dispatcher): fail loudly on nil SecretString from Secrets Manager
dwsmith1983
committed
chore: go mod tidy
dwsmith1983
committed
fix(lambda): capture d.now() once before rule evaluation
dwsmith1983
committed
fix(alert-dispatcher): fail-fast when no Slack token is configured
dwsmith1983
committed