Live Warden 35

Sync state of security posture against a desired-state YAML. Diffs are previewed before any mutation.

Quick start

Add @hashicorp/live-warden-35 to your repo's extensions list, then reference its model in your swamp.yaml:

extensions:
  - @hashicorp/live-warden-35

workflows:
  - name: live-warden-35-run
    jobs:
      - name: main
        steps:
          - name: run
            model: hashicorp/live-warden-35
            method: run

Run with swamp workflow run live-warden-35-run. The first invocation prints what it would change; pass --apply to commit.

What's inside

• Composable workflows — wire methods into multi-step DAGs with retry, idempotency, and per-step logs.
• Datastore provider — collection-level Zod schemas, change-stream subscriptions, TTL indexes.
• Reports — markdown roll-ups grouped by label and breaking-change flag.

Configuration

Configure via ~/.swamp/config.yaml or environment variables. The full method reference and rubric format live in the package's manual/ directory.

Labels: security enterprise secrets