Author here. These come from an audit doc I keep of agents faking completion in my infra code. All three caught pre-release. Curious how others are catching the semantic ones, the bugs that compile and deploy clean but are still wrong.
Nice work, starred. Hit the same "every app needs the same 8 resources stitched together" problem in a recent project. We ended up generating manifests from a typed app spec rather than templating, but a universal chart is a more GitOps-native answer for Helm-first teams. Values validation and signed OCI releases are the right things to invest in early. Good luck with the release.
As others already pointed out, there are alternatives of .env files. Although, I'm not very concerned about having temporary access keys to development environments stored in .env files. The agents should not be dealing with secrets directly though.
I'm building tsdevstack - Infrastructure as Framework
It's an open-source TypeScript microservices framework. It generates and deploys an entire production-grade cloud infrastructure (VPC, gateway, WAF, observability, CI/CD) from a single config file. Multi-cloud across GCP, AWS, and Azure. Just shipped v0.2.0. Built it because I got tired of writing the same Terraform, gateway config, and CI/CD for every TypeScript project. It does include an MCP server so AI agents can understand the framework, help in the development and also in managing the stack.
An open-source TypeScript microservices framework I've been building solo for the 8 months. It generates and deploys an entire production-grade cloud infrastructure (VPC, gateway, WAF, observability, CI/CD) from a single config file. Multi-cloud across GCP, AWS, and Azure. Just shipped v0.2.0.
Built it because I got tired of writing the same Terraform, gateway config, and CI/CD for every TypeScript project. The application code came together quickly, the infrastructure took weeks every time.
Relevant to your "not AI" framing: the framework itself isn't an AI product, though it does include an MCP server so AI agents can manage the stack if you want them to.