{
  "executionMode": "plan-preview",
  "realExecution": ".github/workflows/validate-cloud.yml and deploy-gitops.yml",
  "stages": [
    {
      "id": "source",
      "label": "SOURCE",
      "detail": "Review + signed commit",
      "command": "git verify-commit HEAD"
    },
    {
      "id": "validate",
      "label": "VALIDATE",
      "detail": "Terraform, Helm, manifests",
      "command": "terraform fmt -check && terraform validate"
    },
    {
      "id": "preview",
      "label": "PREVIEW",
      "detail": "Plan + Pulumi preview",
      "command": "terraform plan && pulumi preview"
    },
    {
      "id": "build",
      "label": "BUILD",
      "detail": "Moby container image",
      "command": "docker buildx build --provenance=true ."
    },
    {
      "id": "scan",
      "label": "VERIFY",
      "detail": "SBOM + policy gates",
      "command": "verify image signature and policy results"
    },
    {
      "id": "package",
      "label": "PACKAGE",
      "detail": "Helm chart release",
      "command": "helm lint && helm package"
    },
    {
      "id": "sync",
      "label": "GITOPS",
      "detail": "Argo CD reconcile",
      "command": "argocd app sync cloud-command"
    },
    {
      "id": "observe",
      "label": "OBSERVE",
      "detail": "SLO + rollout checks",
      "command": "kubectl rollout status deployment/cloud-command"
    }
  ]
}