When it fits
- Changes need provider-aware infrastructure review.
Proposed guarantees
These describe the intended contract. Consult implementation and verification evidence before relying on them.
- Narrow preview identity
- Bounded outcome reporting
What stays outside
- Automatic production apply
Failure modes
- Untrusted code accesses secrets
- Preview mistaken for enforcement
Existing alternatives
Pulumi GitHub Actions
Reuse native tooling with constrained caller trust.
Implementations
No AMSL implementation is recorded in this snapshot. External alternatives above are not claims of AMSL adoption.
Evidence and verification
Candidate selection includes restricted, maintainer-reported evidence. It is not independently reproducible here, and no private source details are published.
No executed verification or real consumer adoption is recorded in this snapshot.
Open questions
- Set trusted-event rules and live permission tests.