parity: per-service AWS audit of all 163 services - #2452

Open

agbishop wants to merge 759 commits into

mainfrom

chore/parity-sweep-2026-09-03

This pull request is big! We're only showing the most recent 250 commits

Commits on Sep 7, 2026

fix(cli): update cli_test.go for the CreateScheduleGroup signature change

Witness Patrol
and
claude
committed
be53b55
feat(elb): verify registered instances exist; validate policy attribute names

Witness Patrol
and
claude
committed
3c6f802
refactor(eventpattern): share the numeric and CIDR matchers between eventbridge and pipes

Witness Patrol
and
claude
committed
1406d19
chore(beads): close 5c3m/ogvw/amfu, file lrgk/5eok/sphp

Witness Patrol
and
claude
committed
68a4918
fix(eventbridge): anything-but list elements must not panic the matcher

Witness Patrol
and
claude
committed
c04dba7
chore(beads): close gopherstack-lrgk

Witness Patrol
and
claude
committed
5eb404a
fix(personalize): emit DatasetGroup failureReason; drop two fabricated status constants

Witness Patrol
and
claude
committed
5e24732
chore(beads): close gopherstack-7z3p and gopherstack-h3th

Witness Patrol
and
claude
committed
8663fea
feat(pipes): validate Filter.Pattern syntax at CreatePipe and UpdatePipe

Witness Patrol
and
claude
committed
c3f4b6e
chore(beads): close gopherstack-sphp, correct gopherstack-5eok premise

Witness Patrol
and
claude
committed
3b5e0ef
fix(quicksight): surface CustomPermissionsName in DescribeUser and ListUsers

Witness Patrol
and
claude
committed
b523c39
chore(beads): close gopherstack-rt14 and gopherstack-3tju

Witness Patrol
and
claude
committed
deca768
feat(pipes): support the $or combinator and equals-ignore-case in filter patterns

Witness Patrol
and
claude
committed
549fe6d
chore(beads): close gopherstack-5eok

Witness Patrol
and
claude
committed
3b592b9
feat(bedrock): honour MaxResults on ListImportedModels

Witness Patrol
and
claude
committed
994a1b7
fix(lightsail): assign a new public IP on a stopped-to-running transition

Witness Patrol
and
claude
committed
ca893d3
test(persistence): refresh the snapshot golden for lightsail

Witness Patrol
and
claude
committed
a5b0bf8
chore(beads): close gopherstack-kkfs and gopherstack-i2s6

Witness Patrol
and
claude
committed
8a67a4c
docs(bedrockruntime): confirm AsyncInvokeStatus Failed is unreachable by construction

Witness Patrol
and
claude
committed
7897c93
chore(beads): close gopherstack-0c1r

Witness Patrol
and
claude
committed
08b57be
fix(dms): enforce StartReplicationTaskAssessment's stopped-state and connection preconditions

Witness Patrol
and
claude
committed
0f24551
fix(networkmanager): cascade customer gateway associations on DeregisterTransitGateway

Witness Patrol
and
claude
committed
9f9c098
chore(beads): close gopherstack-cq25 and gopherstack-3fkj

Witness Patrol
and
claude
committed
c1f7942
docs: regenerate READMEs for the networkmanager gap closure

Witness Patrol
and
claude
committed
43c8d2e
docs(timestreamwrite): correct ResumeBatchLoadTask's stale precondition comment

Witness Patrol
and
claude
committed
28d315f
feat(mediaconvert): make ConcurrentJobs optional and enforce it on job admission

Witness Patrol
and
claude
committed
51e7031
test(persistence): refresh the snapshot golden for mediaconvert ConcurrentJobs

Witness Patrol
and
claude
committed
afe1fae
chore(beads): close gopherstack-3geb and gopherstack-7bxb

Witness Patrol
and
claude
committed
00e0259
docs: regenerate READMEs for the mediaconvert and timestreamwrite fixes

Witness Patrol
and
claude
committed
c84990e
chore(azureblob): delete the dead ErrInvalidBlobType and ErrInvalidRange sentinels

Witness Patrol
and
claude
committed
9095dcb
feat(directconnect): enforce the re-association minimum-links rule on AssociateConnectionWithLag

Witness Patrol
and
claude
committed
4de0a91
chore(beads): close gopherstack-rxdr and gopherstack-55so

Witness Patrol
and
claude
committed
b61b244
docs: regenerate READMEs for the azureblob and directconnect changes

Witness Patrol
and
claude
committed
b216b18
docs(rolesanywhere): record why neither referential rule is implementable

Witness Patrol
and
claude
committed
b2c9a35
feat(rekognition): validate detection enums and DetectProtectiveEquipment's required members

Witness Patrol
and
claude
committed
5145d95
chore(beads): close gopherstack-i5ss, gopherstack-qlqz, gopherstack-duj0

Witness Patrol
and
claude
committed
a295c4f
docs: regenerate READMEs for the rolesanywhere gap record

Witness Patrol
and
claude
committed
8fe3d0b
fix(accessanalyzer): honour NotAction and NotResource in the policy Check ops

Witness Patrol
and
claude
committed
95ca28d
fix(bedrock): cascade data sources on KB delete and prune agent version tables

Witness Patrol
and
claude
committed
885fef8
chore(beads): close xyu4/wg7i, file x9ff/jkiu/kr6t

Witness Patrol
and
claude
committed
64a48c5
docs(securityhub): triage cf4j -- half structural, half factually wrong

Witness Patrol
and
claude
committed
502ba56
fix(accessanalyzer): reject a malformed policy document instead of reporting PASS

Witness Patrol
and
claude
committed
551c722
chore(beads): close gopherstack-cf4j and gopherstack-x9ff

Witness Patrol
and
claude
committed
0979b63
docs: regenerate accessanalyzer README for the x9ff fix

Witness Patrol
and
claude
committed
12cd7c8
docs: triage z1sd's six bundled claims -- none are structural

Witness Patrol
and
claude
committed
d136572
fix(bedrock): prune the five remaining per-parent maps on their parent's delete

Witness Patrol
and
claude
committed
9eddc93
chore(beads): close z1sd/jkiu, file e76y/uao2/z5hj/gopherstack-y0to

Witness Patrol
and
claude
committed
f65e0d6
docs: regenerate READMEs for the z1sd triage

Witness Patrol
and
claude
committed
412ca34
fix(sagemaker): StartPipelineExecution transitions through Executing

Witness Patrol
and
claude
committed
d0ce4ac
feat(kms): link keys to custom key stores and guard store deletion

Witness Patrol
and
claude
committed
407bb9a
test(persistence): refresh the snapshot golden for kms CustomKeyStoreID

Witness Patrol
and
claude
committed
0eef88a
chore(beads): close z5hj/e76y, file tdg0/ufvn/o3rp/akm2

Witness Patrol
and
claude
committed
372e0ba
docs: regenerate READMEs for the kms and sagemaker fixes

Witness Patrol
and
claude
committed
0dd4390
fix(kms): custom key store state guards must return CustomKeyStoreInvalidStateException

Witness Patrol
and
claude
committed
2774fb2
feat(rds): model Aurora cluster replica source linkage

Witness Patrol
and
claude
committed
338b20e
test(persistence): refresh the snapshot golden for rds cluster replica linkage

Witness Patrol
and
claude
committed
2cbba9a
chore(beads): close akm2/uao2, file ylkc/1cjz/didn

Witness Patrol
and
claude
committed
58c8ccb
docs: regenerate READMEs for the kms and rds fixes

Witness Patrol
and
claude
committed
0fa6a2e
fix(rds): PromoteReadReplicaDBCluster clears replica linkage on both sides

Witness Patrol
and
claude
committed
2b3eac2
fix(kms): map ErrCustomKeyStoreHasKeys to its wire error, and sweep the table

Witness Patrol
and
claude
committed
0c6aa73
chore(beads): close gopherstack-1cjz and gopherstack-ylkc

Witness Patrol
and
claude
committed
e9dda12
docs: regenerate READMEs for the rds promote and kms error-table fixes

Witness Patrol
and
claude
committed
1004974
fix(bedrock): DeleteDataSource cascades to its ingestion jobs and documents

Witness Patrol
and
claude
committed
8845034
docs(docdb): record that the rds replica-linkage template does not transfer

Witness Patrol
and
claude
committed
df50978
chore(beads): close gopherstack-y0to and gopherstack-didn

Witness Patrol
and
claude
committed
42ed546
docs: regenerate docdb README for the didn verdict

Witness Patrol
and
claude
committed
c1dfd00
fix(kms): crypto operations refuse keys in a disconnected custom key store

Witness Patrol
and
claude
committed
be93321
feat(bedrock): honour SkipResourceInUseCheck on DeleteAgent

Witness Patrol
and
claude
committed
b3566c6
chore(beads): close gopherstack-o3rp and gopherstack-kr6t

Witness Patrol
and
claude
committed
cec3421
docs: regenerate kms README for the o3rp fix

Witness Patrol
and
claude
committed
7269b91
fix(s3control): SubmitMultiRegionAccessPointRoutes rejects a missing access point

Witness Patrol
and
claude
committed
24c84f2
fix(opsworks): DeleteStack requires its children be deleted first

Witness Patrol
and
claude
committed
b56d06a
chore(beads): close gopherstack-l498 and gopherstack-bael, file gopherstack-0c0d

Witness Patrol
and
claude
committed
534f755
docs: regenerate READMEs and badge for the s3control MRAP fix

Witness Patrol
and
claude
committed
0276e3d
medialive: derive reservation term from offering Duration, honor caller Start

Witness Patrol
and
claude
committed
09eed2d
chore(beads): close gopherstack-b668, file gopherstack-f6dz
Witness Patrol
committed
f02e98f
workspaces: enforce the running-mode half of Start/StopWorkspaces preconditions

Witness Patrol
and
claude
committed
1aa8a65
chore(beads): close gopherstack-3b8k, file gopherstack-s3v4
Witness Patrol
committed
819ca57
medialive: bound PurchaseOffering's Start to the documented window

Witness Patrol
and
claude
committed
18cb96b
chore(beads): close gopherstack-f6dz
Witness Patrol
committed
63b5673
workspaces: default and validate WorkspaceProperties.RunningMode on create

Witness Patrol
and
claude
committed
16d6b34
chore(beads): close gopherstack-s3v4
Witness Patrol
committed
36ff8a0
eks: implement UpdateAddon.PodIdentityAssociations tri-state semantics

Witness Patrol
and
claude
committed
7e77781
chore(beads): close gopherstack-tu95, file gopherstack-bs4t/wmuv/gala
Witness Patrol
committed
5a09f54
neptune: parse CreateDBInstance's DBSubnetGroupName instead of dropping it

Witness Patrol
and
claude
committed
1eb7a26
chore(beads): close gopherstack-ucus, file gopherstack-qdqg
Witness Patrol
committed
089aedd
databrew: cover BatchDeleteRecipeVersion's LATEST_WORKING precondition

Witness Patrol
and
claude
committed
f7d4589
chore(beads): close gopherstack-04pg
Witness Patrol
committed
f9281f1
medialive: parse SdiSources on CreateInput and UpdateInput

Witness Patrol
and
claude
committed
38c9d9c
chore(beads): close gopherstack-ir0p
Witness Patrol
committed
eda757d
glacier: DeleteVault honours as-of-last-inventory semantics

Witness Patrol
and
claude
committed
f232a38
chore(beads): close gopherstack-x8em, file gopherstack-c8sa/zpo5
Witness Patrol
committed
921faa7
eks: wire CreateAddon's pod identity associations and clean them up on delete

Witness Patrol
and
claude
committed
9340097
chore(beads): close gopherstack-bs4t and gopherstack-wmuv
Witness Patrol
committed
49530ad
s3control: return NoSuchMultiRegionAccessPoint from PutMultiRegionAccessPointPolicy

Witness Patrol
and
claude
committed
f12479e
chore(beads): close gopherstack-0c0d
Witness Patrol
committed
ef8e2bf
networkmonitor: delete the unread arnIndex

Witness Patrol
and
claude
committed
2a1eeaa
chore(beads): close gopherstack-xtn8
Witness Patrol
committed
1e015a3
neptune: emit DBInstance.DBSubnetGroup as a nested struct, not a bare name

Witness Patrol
and
claude
committed
c1659a0
chore(beads): close gopherstack-qdqg, file gopherstack-7lrq
Witness Patrol
committed
bf5f476
sagemaker: stop Start/Retry callbacks clobbering a Stopped execution

Witness Patrol
and
claude
committed
e127a72
chore(beads): close gopherstack-tdg0 and gopherstack-7lrq, file gopherstack-rh77
Witness Patrol
committed
53e9e90
appmesh: reject a meshOwner naming another account

Witness Patrol
and
claude
committed
2890bc7
chore(beads): close gopherstack-jxsz
Witness Patrol
committed
00922b5
glacier: report DescribeVault archive stats as of the last inventory

Witness Patrol
and
claude
committed
1666e50
chore(beads): close gopherstack-zpo5
Witness Patrol
committed
99541df
sagemaker: guard endpoint and inference-component transitions on current status

Witness Patrol
and
claude
committed
4756900
chore(beads): close gopherstack-rh77, file gopherstack-iook
Witness Patrol
committed
b485945
organizations: seed the default FullAWSAccess SCP and protect AWS-managed policies

Witness Patrol
and
claude
committed
a4b6162
chore(beads): close gopherstack-hg4i
Witness Patrol
committed
57aad13
chore(beads): file gopherstack-3hov
Witness Patrol
committed
e0ee0f1
kinesisanalytics: record CodeValidationException and UnsupportedOperationException as divergences

Witness Patrol
and
claude
committed
799caaf
chore(beads): close gopherstack-725q
Witness Patrol
committed
8116c0e
sagemaker: migrate the remaining Eventually polls to synctest

Witness Patrol
and
claude
committed
0d3569c
chore(beads): close gopherstack-iook, file gopherstack-k3ae
Witness Patrol
committed
8471a02
route53: audit backendErrorTable across all 71 ops

Witness Patrol
and
claude
committed
cf4efac
chore(beads): close gopherstack-ns7j
Witness Patrol
committed
f2ac9a6
pkgs/lockmetrics: aggregate live metrics per label tuple

Witness Patrol
and
claude
committed
3a465fd
chore(beads): close gopherstack-koq4, file gopherstack-lf8p
Witness Patrol
committed
ceca51e
chore(pgo): refresh default.pgo profile

agbishop
authored and
github-actions[bot]
committed
9e175f5
cmd/errtargetaudit: see data-driven error tables, and say when it cannot

Witness Patrol
and
claude
committed
0f0c343
chore(beads): close gopherstack-yn2o, file gopherstack-jkma/8u3f/opzq
Witness Patrol
committed
57b49d7
glacier: distinguish an absent inventory snapshot from a zero one

Witness Patrol
and
claude
committed
b5c0ae4
chore(beads): close gopherstack-c8sa
Witness Patrol
committed
7b6c06e
sqs: pin ChangeMessageVisibilityBatch's per-entry failure shape

Witness Patrol
and
claude
committed
77f8174
chore(beads): close gopherstack-opzq
Witness Patrol
committed
d4b4fab
chore(beads): close gopherstack-opzq, record calibration on gopherstack-jkma
Witness Patrol
committed
b7d6bc2
kms: emit declared error codes from four wrong-state and MAC paths

Witness Patrol
and
claude
committed
6583db7
chore(beads): close gopherstack-8u3f, file gopherstack-k3ww/h88p
Witness Patrol
committed
3383b82
chore(beads): file gopherstack-ftkd/lmkr from the errtargetaudit corpus
Witness Patrol
committed
0e31bc0
acm: emit declared error codes from ACME and tag paths

Witness Patrol
and
claude
committed
46d0d01
cloudfront: use InvalidArgument for FunctionConfig quantity mismatches

Witness Patrol
and
claude
committed
58f2f2c
chore(beads): close gopherstack-ftkd and gopherstack-lmkr, file gopherstack-qgo1/kpk5
Witness Patrol
committed
aed8870
chore(beads): file gopherstack-hp83 and gopherstack-33jc from the corpus
Witness Patrol
committed
b658337
workmail: make the two documented idempotent deletes actually idempotent

Witness Patrol
and
claude
committed
b6a143a
chore(beads): close gopherstack-hp83
Witness Patrol
committed
8e4c61f
rds: emit declared error codes from five wrong-sentinel paths

Witness Patrol
and
claude
committed
f968ffe
chore(beads): close gopherstack-33jc, file gopherstack-fm1e/l20u
Witness Patrol
committed
67069cf
chore(beads): file gopherstack-yr88 and gopherstack-3djp from the corpus
Witness Patrol
committed
1cbbc44
iot: record the errtargetaudit verdicts, no code change

Witness Patrol
and
claude
committed
8c18d54
chore(beads): close gopherstack-yr88, file gopherstack-y3om/il42
Witness Patrol
committed
ce7fb79
codepipeline: record seven undeclared-code findings, no fix

Witness Patrol
and
claude
committed
2992191
chore(beads): close gopherstack-3djp, file gopherstack-wlab
Witness Patrol
committed
76fe32b
chore(beads): file the codedeploy block, raise gopherstack-il42 to P2
Witness Patrol
committed
75250ea
codedeploy: return InstanceNotRegisteredException from GetOnPremisesInstance

Witness Patrol
and
claude
committed
5ddfb73
chore(beads): close gopherstack-3pz8, file gopherstack-l81f
Witness Patrol
committed
215dcfb
cmd/errtargetaudit: resolve override codes passed as call-site arguments

Witness Patrol
and
claude
committed
5bda69f
chore(beads): close gopherstack-il42
Witness Patrol
committed
b1bbadd
chore(beads): file the acmpca and stepfunctions corpus blocks
Witness Patrol
committed
319c5f2
acmpca: third confirmation that six findings have no safe remedy

Witness Patrol
and
claude
committed
c9f69b7
chore(beads): close gopherstack-qrnq, add a screening rule to gopherstack-jkma
Witness Patrol
committed
38121c3
stepfunctions: record the errtargetaudit verdicts, one landmine, no fix

Witness Patrol
and
claude
committed
891cb6e
chore(beads): file the elasticsearch tag bug and the memorydb block
Witness Patrol
committed
6027cfb
elasticsearch: cross-reference the tag-error deferral to its fix

Witness Patrol
and
claude
committed
11bd9ce
chore(beads): close gopherstack-8h57 as already fixed, sharpen the jkma screening rule
Witness Patrol
committed
b7dd510
memorydb: record the errtargetaudit verdicts, one landmine

Witness Patrol
and
claude
committed
0f1de3a
chore(beads): file the shield and elb corpus blocks
Witness Patrol
committed
d968d25
elb: make DeleteLoadBalancer idempotent, as its doc requires

Witness Patrol
and
claude
committed
a1fb3cc
shield: emit per-op declared codes instead of one global mapping

Witness Patrol
and
claude
committed
01215e1
chore(beads): close gopherstack-g2l5, file gopherstack-hdvu
Witness Patrol
committed
f54d511
chore(beads): file the codecommit and cloudcontrol corpus blocks
Witness Patrol
committed
e00bd67
codecommit: split two sentinels whose codes differ per op

Witness Patrol
and
claude
committed
f365f47
cloudcontrol: stop emitting InvalidRequestException from ops that never declare it

Witness Patrol
and
claude
committed
c706018
chore(beads): close gopherstack-v5eb
Witness Patrol
committed
c60365d
chore(beads): file the ecr and firehose corpus blocks
Witness Patrol
committed
b7500b1
firehose: stop rejecting a filter value on an op that declares no errors

Witness Patrol
and
claude
committed
2277245
chore(beads): close gopherstack-t2wb
Witness Patrol
committed
2746dc1
ecr: stop erroring on lookups whose ops declare no not-found code

Witness Patrol
and
claude
committed
8fc5562
chore(beads): close gopherstack-jqxg
Witness Patrol
committed
9eb5d31
chore(beads): file the resourcegroups and lakeformation corpus blocks
Witness Patrol
committed
d3ded4c
lakeformation: record both findings as batch per-entry false positives

Witness Patrol
and
claude
committed
790552b
chore(beads): close gopherstack-4lvy
Witness Patrol
committed
f01b0c5
resourcegroups: stop erroring on an unknown group in ListGroupingStatuses

Witness Patrol
and
claude
committed
2b57ea1
chore(beads): close gopherstack-m4k0, file gopherstack-t3uf
Witness Patrol
committed
bf252d3
chore(beads): file the resiliencehub and dax corpus blocks
Witness Patrol
committed
c1825ac
resiliencehub: drop not-found gates from two drift List ops

Witness Patrol
and
claude
committed
7bb8080
chore(beads): close gopherstack-ulsj
Witness Patrol
committed
fa462f0
dax: stop emitting InvalidParameterValueException from the subnet-group ops

Witness Patrol
and
claude
committed
101b76c
chore(beads): close gopherstack-dkr8
Witness Patrol
committed
482d0cf
chore(beads): file the cleanrooms block, claim gopherstack-2kud
Witness Patrol
committed
0ceefb6
cleanrooms: pin the deliberate undeclared code on the Collaboration trio

Witness Patrol
and
claude
committed
ef7f53f
chore(beads): close gopherstack-b76t, file gopherstack-a2bp
Witness Patrol
committed
6575de1
cmd/errtargetaudit: count ground truth from assigned modules, not every import

Witness Patrol
and
claude
committed
e6a167d
chore(beads): close gopherstack-2kud, file gopherstack-zkpi/g7to
Witness Patrol
committed
948cee8
chore(beads): raise gopherstack-zkpi to P2, claim it and gopherstack-k3ae
Witness Patrol
committed
0678c24
sagemaker: record why the last Eventually stays

Witness Patrol
and
claude
committed
6103a24
chore(beads): close gopherstack-k3ae
Witness Patrol
committed
25950a9
cmd/errtargetaudit: report a module with no per-op error functions as untraceable

Witness Patrol
and
claude
committed
4200bd3
chore(beads): close gopherstack-zkpi, file gopherstack-84mn
Witness Patrol
committed
35f4afd
chore(beads): claim gopherstack-l20u and gopherstack-h88p
Witness Patrol
committed
79abf6e
rds: fault on an unknown DBClusterIdentifier in DescribeDBClusterEndpoints

Witness Patrol
and
claude
committed
84ba612
chore(beads): close gopherstack-l20u
Witness Patrol
committed
06268ef
kms: emit declared codes from ImportKeyMaterial's four rejection paths

Witness Patrol
and
claude
committed
e98fcdc
chore(beads): close gopherstack-h88p, file gopherstack-i4q8/5rjn
Witness Patrol
committed
cb47053
chore(beads): file the module-unknown-code check, claim it and gopherstack-i4q8
Witness Patrol
committed
a52c984
kms: fix four ValidationException sites, landmine the other thirty-two

Witness Patrol
and
claude
committed
3b06f1f
chore(beads): close gopherstack-i4q8, file gopherstack-4ra7/jyi3
Witness Patrol
committed
5b1e348
errtargetaudit: add orphan-code class and fix two code-extraction bugs

Witness Patrol
and
claude
committed
90e44c1
chore(beads): close zofv; file udkm, yatn

Witness Patrol
and
claude
committed
fc179c7
cloudfront,codecommit: emit declared error codes, not invented ones

Witness Patrol
and
claude
committed
ea08b6d
errtargetaudit: consult genericProtocolCodes only when the service models the code nowhere

Witness Patrol
and
claude
committed
809a989
chore(beads): close mq6m (mgn probe: shared-helper artifact, no fix); file jpfk, 2evc

Witness Patrol
and
claude
committed
38a9a24
chore(beads): file the ValidationException-vs-kms-landmines question

Witness Patrol
and
claude
committed
12343ef
eventbridge,stepfunctions: emit declared error codes, not invented ones

Witness Patrol
and
claude
committed
773fc2e
kms: MAC algorithm mismatch is InvalidKeyUsageException, not an invented code

Witness Patrol
and
claude
committed
24e4c34
glue: record the BatchStopJobRun orphan-code screen in PARITY.md

Witness Patrol
and
claude
committed
05f3785
ses,sts: emit declared error codes, not invented ones

Witness Patrol
and
claude
committed
98bdada
chore(beads): close yatn (orphan-code class fully triaged)

Witness Patrol
and
claude
committed
b9aece8
kms: ValidationException is a real pre-dispatch fault; drop the 32 landmines

Witness Patrol
and
claude
committed
9052099
ssm: PutParameter's input checks use its own declared exceptions

Witness Patrol
and
claude
committed
b9fb89e
stepfunctions: record pickRoutedVersion's empty-routing branch as unreachable

Witness Patrol
and
claude
committed
8495edd
errtargetaudit: group findings by emission site, not by operation

Witness Patrol
and
claude
committed
4456f5e
awsconfig,efs: emit declared error codes for input validation

Witness Patrol
and
claude
committed
6e160e4
kms: CreateKey KeySpec/KeyUsage uses a declared code; HMAC multi-Region is legal

Witness Patrol
and
claude
committed
014062b
chore(beads): file cloudfront (03rb) and acm (bzyl) audit slices

Witness Patrol
and
claude
committed
87ce820
chore(beads): close 03rb (cloudfront unreachable-guard shape); file s0dw; correct kpk5

Witness Patrol
and
claude
committed
1fe0cd1
acm: RequestCertificate and RevokeCertificate emit codes they do not declare

Witness Patrol
and
claude
committed
9e73a17
chore(beads): claim s0dw; file hntj (workmail+stepfunctions slice)

Witness Patrol
and
claude
committed
84f956e
chore(beads): close hntj as a duplicate of hp83/2hdk/yatn

Witness Patrol
and
claude
committed
eb76a5f
memorydb,elb: sharpen two no-remedy landmines with what was ruled out

Witness Patrol
and
claude
committed
9037be8
errtargetaudit: mark definition-site rows as rollups so totals are not double-counted

Witness Patrol
and
claude
committed
026042f
organizations: FullAWSAccess carries the AWS-owned ARN authority

Witness Patrol
and
claude
committed
59c8902
codedeploy: ListDeployments honours the externalId filter instead of ignoring it

Witness Patrol
and
claude
committed
76ac705
chore(beads): close g7to (tool blindness, not thin services); file the dispatch-tracer gap

Witness Patrol
and
claude
committed
b619d1b
errtargetaudit,errcodeaudit: drop InternalServerException from the shared allowlist

Witness Patrol
and
claude
committed
626f177
chore(beads): close qgo1 (superseded by bzyl); claim sgbw, fm1e, l81f

Witness Patrol
and
claude
committed
d2d3df4
rds: ModifyActivityStream returns DBInstanceNotFound, the code it declares

Witness Patrol
and
claude
committed
d48cb57
errtargetaudit: trace three dispatch shapes the tracer could not see

Witness Patrol
and
claude
committed
adbe691
kms: DescribeKey stops emitting a grant-token code it never declared

Witness Patrol
and
claude
committed
119e5cd
persistence: refresh the snapshot inventory golden for two additive fields

Witness Patrol
and
claude
committed
fc86340
eks: honour CreateAddon's NamespaceConfig instead of always using kube-system

Witness Patrol
and
claude
committed
c560527
forecast,comprehend: record why the newly-visible findings are not defects

Witness Patrol
and
claude
committed
131d491
codecommit: BatchGetCommits reports CommitIdDoesNotExistException per entry

Witness Patrol
and
claude
committed
09e3e71
errtargetaudit: stop resolving Go builtin calls to same-named methods

Witness Patrol
and
claude
committed
a509513
Merge remote-tracking branch 'origin/main' into chore/parity-sweep-2026-09-03
Witness Patrol
committed
b22ed56
chore(beads): claim hdvu and inmm

Witness Patrol
and
claude
committed
7ef1d97
chore(beads): close hdvu (shield already fixed; residual findings are class-8 false positives)

Witness Patrol
and
claude
committed
7aebefd
organizations: CreateOrganization with FeatureSet=ALL enables SCP on the root

Witness Patrol
and
claude
committed
72abb9b
chore(beads): claim g2eo and mial

Witness Patrol
and
claude
committed
be1c8ee
directoryservice: record the unreachable TrustState and SnapshotStatus values

Witness Patrol
and
claude
committed
345e66b
rds: point the ModifyActivityStream handler at its scoping landmine

Witness Patrol
and
claude
committed
d3452dd
rds: ModifyActivityStream state conflicts emit InvalidDBInstanceState

Witness Patrol
and
claude
committed
9a4d1cb
chore(beads): re-baseline jkma; file and claim 0zxv

Witness Patrol
and
claude
committed
0567ae7
chore(beads): close 0zxv (both sibling services already declined, verified)

Witness Patrol
and
claude
committed
bbe2ac4
chore(beads): file and claim 3sbi (appsync) and w4kf (elasticache)

Witness Patrol
and
claude
committed
8678952
chore(beads): close 3sbi (elasticache attribution is a mixed false positive)

Witness Patrol
and
claude
committed
5cd5081
appsync: GetIntrospectionSchema reports GraphQLSchemaException for an unparseable schema

Witness Patrol
and
claude
committed
5b6bbb8
docs: regenerate the READMEs derived from two PARITY.md edits

Witness Patrol
and
claude
committed
6c4ae88

Commits on Sep 8, 2026

Merge branches 'pgo/auto-refresh' and 'dependabot/github_actions/all-actions-dependencies-29b2323ca8' of https://github.com/BlackbirdWorks/gopherstack into chore/parity-sweep-2026-09-03
Witness Patrol
committed
9d18b83
build: move to Go 1.27 and golangci-lint 2.13.2

Witness Patrol
and
claude
committed
073ac05

Uh oh!

Commits

Commits on Sep 7, 2026