feat(cigen): per-phase secret scoping + migration --format json/--env#805

Merged

intel352 merged 8 commits into

mainfrom

feat/cigen-phase-secret-scoping

May 31, 2026

Commits on May 31, 2026

docs(cigen): design (adversarial PASS) + implementation plan for #3 per-phase secret scoping + #4 migration flags

intel352
and
claude
committed
docs(cigen): revise plan per adversarial C1/C2/C3 + Important

intel352
and
claude
committed
docs(cigen): plan PASS adversarial cycle-2 (fix Task 2/3 git-add paths to *_phase_test.go)

intel352
and
claude
committed
chore: lock scope for cigen fidelity (alignment passed)

intel352
and
claude
committed
feat(cigen): add DeployPhase.Secrets + Scoped for per-phase scoping
intel352
committed
feat(cigen): scope per-phase secrets in Analyze; derive single-env migrations --env
intel352
committed
feat(cigen): per-phase env block + wfctl migrations up --format json
intel352
committed
test(cigen): regen multisite evidence (scoped prereq env + migrations --format json) + on-disk golden test; honest GAP.md
intel352
committed