Fail closed when app creation would drop BYOC intent #440

New issue

Closed

opened 2026-08-19 12:34:36 +00:00 by vkobel · 0 comments

vkobel commented

2026-08-19 12:34:36 +00:00

(Migrated from codeberg.org)

Problem

caution apps create creates a fresh app without consulting prior BYOC deployment state. After a BYOC app is destroyed, apps create followed by a push can therefore select fully managed capacity without an explicit capacity-mode change. This changes the infrastructure owner, billing path, and region while workload PCR verification can still pass.

Required behavior

Persist or derive the intended capacity mode independently of the current app row.
Refuse an implicit BYOC-to-managed transition, or require an explicit override that names the target capacity type, AWS account, and region.
Print capacity type, account, and region in every create/deploy summary.
Cover a previously-BYOC directory with stale deployment state in regression tests.

Priority: P0; fail closed before provisioning.

## Problem `caution apps create` creates a fresh app without consulting prior BYOC deployment state. After a BYOC app is destroyed, `apps create` followed by a push can therefore select fully managed capacity without an explicit capacity-mode change. This changes the infrastructure owner, billing path, and region while workload PCR verification can still pass. ## Required behavior - Persist or derive the intended capacity mode independently of the current app row. - Refuse an implicit BYOC-to-managed transition, or require an explicit override that names the target capacity type, AWS account, and region. - Print capacity type, account, and region in every create/deploy summary. - Cover a previously-BYOC directory with stale deployment state in regression tests. Priority: P0; fail closed before provisioning.

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

public/platform#440

No description provided.

Rows
Columns