Evidence hold Pilot Kiro on a small non-production app; require environment separation, protected repo branches, secret isolation, and reviewer signoff.
Evidence hold
Spec-driven app/coding workflow can be piloted in staging only with environment separation and approval controls.
Decision depth: Preliminary monitored record. Not yet launch-audited for a rollout decision.
Evidence audit: automated extraction
Level 4: controls external systems or deployment
Highest-risk evidenced power: deployment access
least-privilege permissions, separate test credentials, deployment approval, audit logs, data-retention controls, protected branches, mandatory human review
security docs, admin console
native sandbox, permission system, audit logs, branch isolation, SSO, data-retention settings
Task class: App builder and deployment agent
Environment: staging
Maximum access: deployment access
Reviewer: platform engineer and application owner
Success criteria: generated app deploys only to staging with rollback and no production data
Stop conditions: requires production secrets, database admin, or uncontrolled deploy permissions
Prohibited: production databases, unapproved deploy targets, persistent secrets in generated apps
Blockers: Record has not been launch-audited for rollout use.; reads repository is not explicitly evidenced in the current source set.
Unknowns: Deployment permissions and production data boundaries need verification.
Limitations: App-builder workflows can drift into deployment/infrastructure access.
Kiro: reads repository
Status: not-evidenced · Reviewer: automated-extraction · Confidence: 24/100
Source: AWS official source set (official-docs)
Excerpt:
Limitations: No exact official-source excerpt was found for reads repository; treat as an evidence gap.
Kiro: edits files
Status: not-evidenced · Reviewer: automated-extraction · Confidence: 24/100
Source: AWS official source set (official-docs)
Excerpt:
Limitations: No exact official-source excerpt was found for edits files; treat as an evidence gap.
Kiro: runs commands
Status: not-evidenced · Reviewer: automated-extraction · Confidence: 24/100
Source: AWS official source set (official-docs)
Excerpt:
Limitations: No exact official-source excerpt was found for runs commands; treat as an evidence gap.
Kiro: opens pull requests
Status: not-evidenced · Reviewer: automated-extraction · Confidence: 24/100
Source: AWS official source set (official-docs)
Excerpt:
Limitations: No exact official-source excerpt was found for opens pull requests; treat as an evidence gap.
Kiro: comments on issues or PRs
Status: not-evidenced · Reviewer: automated-extraction · Confidence: 24/100
Source: AWS official source set (official-docs)
Excerpt:
Limitations: No exact official-source excerpt was found for comments on issues or PRs; treat as an evidence gap.
Kiro: accesses secrets or environment variables
Status: not-evidenced · Reviewer: automated-extraction · Confidence: 24/100
Source: AWS official source set (official-docs)
Excerpt:
Limitations: No exact official-source excerpt was found for accesses secrets or environment variables; treat as an evidence gap.
Kiro: makes network/API calls
Status: not-evidenced · Reviewer: automated-extraction · Confidence: 24/100
Source: AWS official source set (official-docs)
Excerpt:
Limitations: No exact official-source excerpt was found for makes network/API calls; treat as an evidence gap.
Kiro: supports sandboxing
Status: not-evidenced · Reviewer: automated-extraction · Confidence: 24/100
Source: AWS official source set (official-docs)
Excerpt:
Limitations: No exact official-source excerpt was found for supports sandboxing; treat as an evidence gap.
Kiro: supports permission controls
Status: not-evidenced · Reviewer: automated-extraction · Confidence: 24/100
Source: AWS official source set (official-docs)
Excerpt:
Limitations: No exact official-source excerpt was found for supports permission controls; treat as an evidence gap.
Kiro: provides audit logging
Status: not-evidenced · Reviewer: automated-extraction · Confidence: 24/100
Source: AWS official source set (official-docs)
Excerpt:
Limitations: No exact official-source excerpt was found for provides audit logging; treat as an evidence gap.
Kiro: supports enterprise administration
Status: not-evidenced · Reviewer: automated-extraction · Confidence: 24/100
Source: AWS official source set (official-docs)
Excerpt:
Limitations: No exact official-source excerpt was found for supports enterprise administration; treat as an evidence gap.
Kiro: supports branch isolation
Status: not-evidenced · Reviewer: automated-extraction · Confidence: 24/100
Source: AWS official source set (official-docs)
Excerpt:
Limitations: No exact official-source excerpt was found for supports branch isolation; treat as an evidence gap.
Last successful source check: 2026-07-15T05:34:48.576Z
Generate a receipt that inherits this record depth, unsupported claims, inferred claims, source health, and expiry.
Check this agent for your environment