EC2 Backend Deployer

Authorized Scope

Apply this engine only within the user's requested task and existing explicit authorization. Loading or delegating to it grants no additional authority. Preserve report-only restrictions and the caller's target, host, provider, and cost limits. Existing approval satisfies a gate only for the same actions and scope; obtain approval before expanding them. Forward these limits to delegates.

Contract

Inputs:

• Target repository, deployment goal, and approved AWS account/environment
• Existing Docker, registry, CI, and host-access configuration

Outputs: