Phase 4 — Run 5: prod Partition Rollout (G-B+C+D)

Overview

Branch / PR: jmpicnic/email-integration-phase-4 (infra) → PR phase-4-G-B-C-D-prod against Arda-cards/infrastructure main. Group(s): G-B + G-C + G-D for prod. Tasks: T-I5-prod, T-D8, T-O1-prod (pre-flight), T-O7 (deploy prod). Working directory: /Users/jmp/code/arda/projects/email-integration-worktrees/phase-4/infrastructure. AWS impact: Resource-touching in Alpha001 — production deploy. Highest-care review of cdk diff. Same shape as run-4 but on the production partition. Postmark account: PostmarkProd. Personas: devops-engineer for T-I5; user as operator for T-O1, T-O7 (with explicit production deploy confirmation).

Entry criteria

Run-4 PR merged; demo.ardamails.com Sender Signature verified.
All three prior partitions (dev, stage, demo) deployed and verified end-to-end. Their AWS resources are stable.
Operator pre-flight T-O1-prod green:
- op read "$(... postmarkCredentialOpReference('prod'))" returns non-empty.
- aws sts get-caller-identity --profile Admin-Alpha1 returns Alpha001.
Operator has explicitly reviewed the per-partition cdk diff for prod and confirmed the expected resource set. This is the production deploy; no surprises.

Tasks

Task	Description	Files touched	Persona
T-I5-prod	Per-partition instance config for `prod`	`src/main/cdk/instances/Alpha001/prod.ts`	`devops-engineer`
T-D8	Infra `CHANGELOG.md` entry	`CHANGELOG.md`	`devops-engineer`
T-O1-prod	Pre-flight checks for `prod`	none (operator-driven)	user
T-O7	Operator runs `./amm.sh Alpha001 prod` after merge with explicit confirmation	none (operator-driven)	user

Worktree strategy

Single working directory.

Validation

validate-exit.sh parameterised for prod / Alpha001 / Admin-Alpha1 / PostmarkProd. Pre-merge code checks; --post-merge flag for AWS state confirmation after deploy.

Exit criteria

npm run build && npm run lint && npm test exit 0.
cdk synth --app apps/Al1x/partition --context partition=prod produces a valid template; CFN stack name is Alpha001-prod-Email.
PR opened; checks green; reviewer approval; production cdk diff summary in PR description; user confirms before merge.
Post-merge: ./amm.sh Alpha001 prod runs end-to-end. All dig checks pass for prod.ardamails.com. Postmark Console shows prod.ardamails.com Sender Signature verified on PostmarkProd. Sign-off row populated. Production deploy outcome explicitly captured in the operator runbook.
Phase B (per-partition rollouts) complete: all four active partitions deployed.

References

../run-2-dev-rollout/project-plan.md — canonical template.
../../choreography.md § 4 — operator gate between run-4 and run-5; § 6 rollback semantics (prod care).