gabriel / musehub public
Merged
gabriel gabriel · 25 days ago · 1 agent

docs: IAM Identity Center rollout + Aaron access decision + stale blocker fixes

docs/aws-identity-and-deploy-fixes dev sha256:cd5c2fcb91a4 branch
medium risk
0/2 approvals
merge type
overlay strategy
sha256:c113f2514d5a96866ed11368012a3a7f63a27d412847692497fbf996720a06d9 from
sha256:bba4b69de173366aeb7d490d687ccffb6db9726374033addece89cf2b87642d8 to
Proposal merged as sha256:cd5c2fcb91a4

Symbol Delta

79 symbols
17 added 49 modified 13 deleted
docs/architecture/musehub-cloud-identity-and-aws-operating-model.md 9
+ MuseHub Cloud Identity and AWS Account Operating Model.8. Human AWS access procedure.Sign-in quick reference
+ MuseHub Cloud Identity and AWS Account Operating Model.8. Human AWS access procedure.Sign-in quick reference.table
+ MuseHub Cloud Identity and AWS Account Operating Model.9. Root mailbox and root-user model.Centralized root access management
~ MuseHub Cloud Identity and AWS Account Operating Model
~ MuseHub Cloud Identity and AWS Account Operating Model.13. Security work completed
~ MuseHub Cloud Identity and AWS Account Operating Model.14. Remaining work
~ MuseHub Cloud Identity and AWS Account Operating Model.14. Remaining work.Security follow-up
~ MuseHub Cloud Identity and AWS Account Operating Model.8. Human AWS access procedure
~ MuseHub Cloud Identity and AWS Account Operating Model.9. Root mailbox and root-user model
docs/infrastructure.md 49
+ MuseHub Cloud Infrastructure.Costs (approximate, us-east-1, 2026 pricing)
+ MuseHub Cloud Infrastructure.Costs (approximate, us-east-1, 2026 pricing).table
+ MuseHub Cloud Infrastructure.Production Environment.Instance access (SSM — no SSH, no key pair exists)
+ MuseHub Cloud Infrastructure.Production Environment.Instance access (SSM — no SSH, no key pair exists).code[bash]
+ MuseHub Cloud Infrastructure.Production Environment.Secrets — AWS SSM Parameter Store (both environments now use this pipeline for the secret half)
+ MuseHub Cloud Infrastructure.Production Environment.Secrets — AWS SSM Parameter Store (both environments now use this pipeline for the secret half).code[bash]
+ MuseHub Cloud Infrastructure.Production Environment.TLS
~ MuseHub Cloud Infrastructure
~ MuseHub Cloud Infrastructure.Backups
~ MuseHub Cloud Infrastructure.Costs (approximate, us-east-1, 2025 pricing).code[bash]
~ MuseHub Cloud Infrastructure.Deployment Workflow
~ MuseHub Cloud Infrastructure.Deployment Workflow.ECR Push — Use crane (not docker push).code[bash]@L374
~ MuseHub Cloud Infrastructure.Deployment Workflow.ECR Push — Use crane (not docker push).code[bash]@L380
~ MuseHub Cloud Infrastructure.Deployment Workflow.Emergency migration rollback (on instance via SSM)
~ MuseHub Cloud Infrastructure.Deployment Workflow.Emergency migration rollback (on instance via SSM).code[bash]
~ MuseHub Cloud Infrastructure.Deployment Workflow.Rollback
~ MuseHub Cloud Infrastructure.Deployment Workflow.Rollback.code[bash]
~ MuseHub Cloud Infrastructure.Deployment Workflow.Standard deploy
~ MuseHub Cloud Infrastructure.Deployment Workflow.Standard deploy.code[bash]
~ MuseHub Cloud Infrastructure.Overview
~ MuseHub Cloud Infrastructure.Overview.table
~ MuseHub Cloud Infrastructure.Production Environment
~ MuseHub Cloud Infrastructure.Production Environment.DNS (musehub.ai) — hosted at Cloudflare, not Namecheap
~ MuseHub Cloud Infrastructure.Production Environment.DNS (musehub.ai) — hosted at Cloudflare, not Namecheap.table
~ MuseHub Cloud Infrastructure.Production Environment.Instance
~ MuseHub Cloud Infrastructure.Production Environment.Instance.code
~ MuseHub Cloud Infrastructure.Production Environment.Nginx config
~ MuseHub Cloud Infrastructure.Production Environment.Object storage — Cloudflare R2, not a local volume
~ MuseHub Cloud Infrastructure.Production Environment.Object storage — Cloudflare R2, not a local volume.table
~ MuseHub Cloud Infrastructure.Production Environment.Stack
~ MuseHub Cloud Infrastructure.Production Environment.Stack.code
~ MuseHub Cloud Infrastructure.Production Environment.Useful commands on the instance
~ MuseHub Cloud Infrastructure.Production Environment.Useful commands on the instance.code[bash]
~ MuseHub Cloud Infrastructure.Production Environment.Volumes
~ MuseHub Cloud Infrastructure.Production Environment.Volumes.table
~ MuseHub Cloud Infrastructure.Secrets inventory
~ MuseHub Cloud Infrastructure.Secrets inventory.table
~ MuseHub Cloud Infrastructure.Shared AWS Resources
~ MuseHub Cloud Infrastructure.Shared AWS Resources.table
~ MuseHub Cloud Infrastructure.Staging Environment.Publishing a new muse CLI release.code[bash]@L298
~ MuseHub Cloud Infrastructure.Staging Environment.Publishing a new muse CLI release.code[bash]@L316
× MuseHub Cloud Infrastructure.Backups.code[bash]
× MuseHub Cloud Infrastructure.Costs (approximate, us-east-1, 2025 pricing)
× MuseHub Cloud Infrastructure.Costs (approximate, us-east-1, 2025 pricing).table
× MuseHub Cloud Infrastructure.Production Environment.Environment variables (.env on instance at /opt/musehub/.env)
× MuseHub Cloud Infrastructure.Production Environment.Environment variables (.env on instance at /opt/musehub/.env).code
× MuseHub Cloud Infrastructure.Production Environment.Instance access (SSM — no SSH)
× MuseHub Cloud Infrastructure.Production Environment.Instance access (SSM — no SSH).code[bash]
× MuseHub Cloud Infrastructure.Production Environment.SSL
docs/production-readiness/03-identity-and-permissions.md 3
~ Section 3 — Identity, Authentication, and Permissions
~ Section 3 — Identity, Authentication, and Permissions.What this section actually requires (not yet done)
~ Section 3 — Identity, Authentication, and Permissions.What this section actually requires (not yet done).Human Access
docs/production-readiness/10-11-automated-deployment.md 3
+ Sections 10 & 11 — Automated Staging and Production Deployment.Update (2026-08-26) — prod deploy is fixed; automation itself is still deferred
~ Sections 10 & 11 — Automated Staging and Production Deployment
× Sections 10 & 11 — Automated Staging and Production Deployment.Reminder — prod deploy is currently broken regardless of automation
docs/production-readiness/musehub-production-infrastructure-launch-todo.md 8
+ MuseHub Production Infrastructure Launch TODO.Phase 3 — Provision the production baseline ✅ complete (2026-08-24)
+ MuseHub Production Infrastructure Launch TODO.Targets (decided 2026-08-25, closing out readiness ticket #149)
+ MuseHub Production Infrastructure Launch TODO.Targets (decided 2026-08-25, closing out readiness ticket #149).table
~ MuseHub Production Infrastructure Launch TODO
~ MuseHub Production Infrastructure Launch TODO.Decisions that must be resolved during discovery
~ MuseHub Production Infrastructure Launch TODO.Phase 2 — Decide the production design
~ MuseHub Production Infrastructure Launch TODO.Phase 4 — Deploy and validate before public DNS
× MuseHub Production Infrastructure Launch TODO.Phase 3 — Provision the production baseline
docs/production-readiness/runbook-deploy-onboarding.md 7
+ Deploy Runbook — Team Onboarding.Access tiers (decided 2026-08-08; Aaron's tier updated 2026-08-26)
+ Deploy Runbook — Team Onboarding.Access tiers (decided 2026-08-08; Aaron's tier updated 2026-08-26).table
+ Deploy Runbook — Team Onboarding.Production deploy (Gabriel and Aaron only)
~ Deploy Runbook — Team Onboarding
× Deploy Runbook — Team Onboarding.Access tiers (decided 2026-08-08)
× Deploy Runbook — Team Onboarding.Access tiers (decided 2026-08-08).table
× Deploy Runbook — Team Onboarding.Production deploy (Gabriel and Aaron only, once prod is actually fixed)

Files Changed

6 of 1,059
M docs/architecture/musehub-cloud-identity-and-aws-operating-model.md
M docs/infrastructure.md
M docs/production-readiness/03-identity-and-permissions.md
M docs/production-readiness/10-11-automated-deployment.md
M docs/production-readiness/musehub-production-infrastructure-launch-todo.md
M docs/production-readiness/runbook-deploy-onboarding.md

Commits

2
Merge staging/dev into docs/aws-identity-and-deploy-fixes
· 25 days ago
sha256:6539fa9ad928
docs agent
docs: reflect IAM Identity Center rollout, Aaron's access decision, and corrected...
gabriel · 25 days ago
sha256:c113f2514d5a

Divergence Analysis

docs/aws-identity-and-deploy-fixes → dev
0%
0% divergence
Very compatible — minimal differences

Review comments

0

No review comments yet

Be the first to leave a review comment on this merge proposal.

Muse CLI

Comment muse hub proposal comment create sha256:b6e7b326651771222312055edb1d37e0bf0a532afa2ecfe1bf36dd51f2405a6b --body "…"
Approve muse hub proposal review submit sha256:b6e7b326651771222312055edb1d37e0bf0a532afa2ecfe1bf36dd51f2405a6b --verdict approve
Request changes muse hub proposal review submit sha256:b6e7b326651771222312055edb1d37e0bf0a532afa2ecfe1bf36dd51f2405a6b --verdict request_changes --body "…"
Close muse hub proposal close sha256:b6e7b326651771222312055edb1d37e0bf0a532afa2ecfe1bf36dd51f2405a6b