Pending Items — 2026-03-20 (updated)

Open PRs

PR	Repo	Content	Status
#429	infrastructure	IAM us-east-2 permissions, PR preview template, branch mapping to `main`, OIDC demo cleanup, `EnablePullRequestPreview: false` on deployment branch	Awaiting CI + merge. Critical: must merge before any `amm.sh` CDK deployment.
#709	arda-frontend-app	Deploy demo+prod in parallel; `amplify.yml` unit test quality gate + warning comment; flaky test timeout fix	Awaiting CI + merge
#826	management	Build status: updated badges, deployment status section with per-environment links	Awaiting merge

~~Delete old branch resources (dev, stage) from Amplify apps~~ ✓
~~Delete dev, stage, demo git branches from arda-frontend-app~~ ✓
~~PR4 OIDC cleanup~~ ✓ folded into PR #429
~~Remove inline build specs from dev/stage/prod apps~~ ✓ updated to match repo amplify.yml
~~PR previews (#707)~~ ✓ working on dev app, ticket closed
~~Domain associations~~ ✓ dev + stage pointed to main
~~PR preview disabled on demo~~ ✓ only dev responds to webhooks
~~Required checks updated~~ ✓ lint, build, test, validate-release + 1 reviewer approval

Reconcile CDK state: run amm.sh for Alpha001 and Alpha002 after PR #429 merges
Run tools/sync-secrets-from-1password.sh to ensure all GitHub org secrets match 1Password

Ticket	Description	Priority
#426	`amm.sh`: partition-aware 1Password secret lookup for local runs	Low
#427	`amplify.cfn.yaml`: add `GITHUB_TOKEN` env var for GitHub Packages auth	Medium

Ticket	Description	Priority
#701	Auth error handling: eliminate flash redirect, add Sentry logging	Medium
#703	Coverage pipeline: Jest open async handles	Low
#706	E2e coverage: mock mode server-side API routes return 500	Medium
#708	E2e tests: timeout at 20 min. Re-add as required check once fixed.	High

#1: GITHUB_TOKEN manually set on demo app (needs #427)
#8, #9, #10: Branch resources, exports, domain associations, PR preview — all reconciled by PR #429 once merged + amm.sh run