feat(cloud): read-only cloud-context MCP for GCP and AWS - #53

Merged

sourcehawk merged 76 commits into

mainfrom

feature/cloud-context-mcp

Jun 2, 2026

Commits on May 30, 2026

docs(spec): read-only cloud-context MCP (GCP and AWS) design

sourcehawk
and
claude
committed
docs(plan): cloud-context MCP implementation plan and orchestration state

sourcehawk
and
claude
committed
chore(state): enter developing, dispatch #45 scaffold wave

sourcehawk
and
claude
committed
docs(claude): require testify assertions in tests; log #45 env + testify bubble-ups

sourcehawk
and
claude
committed
feat(cloud): scaffold the read-only cloud-context MCP package and safety harness (#48)

sourcehawk
and
claude
authored
chore(state): #45 self-merged (#48), contracts locked, Phase 2 unblocked

sourcehawk
and
claude
committed
chore(state): dispatch Wave 2 (#43/#46/#47); log serve.go resource conflict

sourcehawk
and
claude
committed
chore(state): re-sequence #47 to Wave 2b (depends on #43+#46); add provider-factory contract

sourcehawk
and
claude
committed
feat(cloud/gcp): GCP provider for the cloud-context MCP (#49)

sourcehawk
and
claude
authored
chore(state): #43 self-merged (#49); log probe-env, expected-identity-env, and #46 binary findings

sourcehawk
and
claude
committed
feat(cloud/aws): AWS provider for the cloud-context MCP (#50)

sourcehawk
and
claude
authored
chore(state): #46 self-merged (#50); Wave 2a complete

sourcehawk
and
claude
committed
chore(state): Wave 2a checkpoint clean; dispatch Wave 2b (#47 + probe-env)

sourcehawk
and
claude
committed
fix(cloud): probe with a minimal subprocess env instead of inheriting the parent (#51)

sourcehawk
and
claude
authored
chore(state): probe-env remediation self-merged (#51)

sourcehawk
and
claude
committed
feat(cloud): launcher integration for the cloud-context MCP (#52)

sourcehawk
and
claude
authored
chore(state): #47 self-merged (#52); all sub-PRs merged, status=review

sourcehawk
and
claude
committed
chore(state): integration PR #53 opened

sourcehawk
and
claude
committed
chore: remove cloud-context-mcp scratch plan and state (shipped)

sourcehawk
and
claude
committed
docs(cloud): document configuring the GCP and AWS cloud providers (#54)

sourcehawk
and
claude
authored
refactor(cloud): thread probe identity explicitly instead of pinning process env (#56)

sourcehawk
and
claude
authored
fix(cloud): enforce cloud-source degrade and carry the source alias (#57)

sourcehawk
and
claude
authored
fix(cloud): address review findings in the harness, allowlist, and providers (#58)

sourcehawk
and
claude
authored
fix(cloud): second review pass — GCP probe regression, profile validation, allowlist path, identity display (#59)

sourcehawk
and
claude
authored
docs(cloud): recommend a minimal read-only IAM grant for the pinned identity (#60)

sourcehawk
and
claude
authored
fix(cloud): third review pass — deny-floor nested exfil paths, file-flags, degraded-source identity (#63)

sourcehawk
and
claude
authored

Commits on May 31, 2026

Commits on Jun 1, 2026

feat(cloud): deployment tags on selectable targets, returned by list_inventory

sourcehawk
and
claude
committed

Commits on Jun 2, 2026