feat(iac): JIT secret resolution + ProviderID propagation (W-5 of 12)#531

Merged

intel352 merged 62 commits into

mainfrom

feat/iac-jit-secrets

May 4, 2026

Commits on May 3, 2026

feat(iac): add IaCPlan.SchemaVersion + InputSnapshot + PlanAction.ResolvedConfigHash + DriftEntry type
intel352
committed
feat(iac): add inputsnapshot.Compute + Snapshot + NewTolerantEnvProvider with preservation sentinel
intel352
committed
feat(iac): wfctl infra plan writes InputSnapshot to plan.json
intel352
committed
feat(iac): ComputePlan sets PlanAction.ResolvedConfigHash
intel352
committed
feat(iac): wfctl infra plan warns when plan.json not in .gitignore
intel352
committed
feat(iac): typed ErrEnvVarChanged sentinel + plan-stale diagnostic + ComputeDrift sentinel-honoring
intel352
committed
feat(iac): add refreshoutputs.Refresh — read-only state output refresh

intel352
and
claude
committed

Commits on May 4, 2026