Enforce comprehensive migration HTML reports with post-write validation#78
Open
herosjourney wants to merge 12 commits into
Open
Enforce comprehensive migration HTML reports with post-write validation#78herosjourney wants to merge 12 commits into
herosjourney wants to merge 12 commits into
Conversation
Expand generate-artifacts-report.md with combined TCO, security baseline component costs, gap analysis, and assumptions sections; add an HTML validator script, reference fixture, and tests so stub appendices fail validation instead of shipping as complete reports. Co-authored-by: Cursor <cursoragent@cursor.com>
…ults. Fix broken TOC anchors in the reference fixture; validate nav links match section ids; require exactly one <section id> per required block; scope GuardDuty checks to cost/security appendices; gate exec-tco on both estimate JSON files; default to rename-on-fail; expand test coverage to 11 cases. Co-authored-by: Cursor <cursoragent@cursor.com>
…RT_OK scope. Validate reference HTML with estimation-infra/ai fixture JSON; replace dead GuardDuty regex with component dollar matching; document that REPORT_OK means structure complete not numerically audited; expand tests to 14 cases. Co-authored-by: Cursor <cursoragent@cursor.com>
Add Generate-phase report overview, REPORT_OK scope, pytest/validator commands, and fix stale skill/docs paths in Development section. Co-authored-by: Cursor <cursoragent@cursor.com>
Replace the hardcoded SF Beach path with STUB_FAIL pytest coverage, add a committed stub fixture for manual CLI validation, and use word-boundary regex in _dollar_amount_present so $13 does not match $130. Co-authored-by: Cursor <cursoragent@cursor.com>
Drop project-specific structural-reference wording from the PR-facing README and reference HTML footer. Co-authored-by: Cursor <cursoragent@cursor.com>
Add readability gates (no Rubric:/Section N headings), rewrite the reference report with security teaser + appendix split, and document conventions in the spec so generated reports stay exec-friendly. Co-authored-by: Cursor <cursoragent@cursor.com>
Require exec-security-teaser when security_baseline exists, a verdict banner when recommendation exists, and --migration-dir canary checks on real runs; refresh the stub regression fixture and wire --migration-dir into Generate Step 4. Co-authored-by: Cursor <cursoragent@cursor.com>
Reframe Stay if, risk severity, deferred callout, and estimate/report spec so phased infra+AI migration proceeds while analytics target is evaluated in parallel with AWS account team or data partner. Co-authored-by: Cursor <cursoragent@cursor.com>
Correct observability messaging (5 GB logs / 10 metrics / 10 alarms always-free vs GCP's larger tier), subtract allowances in Step 4, and recascade SF Beach reference totals ($118→$112 infra, ~$503 combined savings). Co-authored-by: Cursor <cursoragent@cursor.com>
Ensure user-facing cost output consistently uses 'estimated monthly costs' phrasing across the estimate phase summaries, report template, README, and report fixture. Adds an explicit cost-labeling rule to the estimate orchestrator and each sub-estimate Present Summary.
…xec flow Apply Anthropic frontend-design skill principles to the migration report: - "Name things by what people control, not how the system is built": add a post-write gate so executive-flow sections (decision-summary, exec-*) cannot expose artifact filenames (*.json) or Terraform resource IDs (aws_<resource>.<name>). Those identifiers stay in the technical appendices, which remain exempt. Gated under --no-readability. - "Structure is information": clarify the numbered-heading ban targets decorative labels only — genuine sequences (cluster order, phased weeks, migration phases, rollback steps) keep their numbering. - "One name per concept": require a single consistent label for the recommended model and cost tier across verdict, tables, and appendices. Updates the reference fixture to reader-facing copy in exec-tco and exec-security-teaser, documents check awslabs#14 + the sequence nuance in validate-migration-report.md and generate-artifacts-report.md, and adds 4 tests (28 pass).
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
generate-artifacts-report.mdsomigration-report.htmlincludes full appendices (combined infra+AI TCO, security baseline components, gap analysis, assumptions, architecture diagram, effort hours) — not JSON stubsscripts/validate-migration-report.pypost-write gate: section IDs, TOC integrity, appendix depth, readability rules, and artifact-driven checksmigration-report-reference.html,estimation-*-reference.json) plus inverse stub (migration-report-stub.html) for CI regression<details>mapping rationale, verdict banner, glossary, accessible tablesexec-security-teaserrequired whensecurity_baselineexists; verdict banner whenrecommendationexists;--migration-dirfixture-bleed detection on real runsdecision-summary/exec-*) must not expose artifact filenames (*.json) or Terraform resource IDs (aws_*.*) — those names stay in the technical appendices. Clarifies the numbered-heading ban targets decorative labels only; genuine sequences (cluster order, phases, weeks, rollback) keep their numberingProblem
Generate-phase agents often produced executive-summary-only HTML with appendices that only linked to JSON. Partners manually mined
estimation-infra.jsonfor GuardDuty costs and line-item breakdowns that were never rendered. The reference fixture also had exec-flow readability issues (patched section numbering, full security table before timeline, leakedRubric:lines).Solution
--migration-diron real runsTest plan
python3 migrate/plugins/migration-to-aws/scripts/validate-migration-report.py fixtures/migration-report-reference.html --estimation-infra fixtures/estimation-infra-reference.json --estimation-ai fixtures/estimation-ai-reference.json→REPORT_OKfixtures/migration-report-stub.html→REPORT_FAIL(11+ actionable errors)pytest migrate/plugins/migration-to-aws/tests/test_validate_migration_report.py -q→ 28 passed$MIGRATION_DIR/migration-report.htmlpasses with--migration-dir