Pulumi Config Secret Stack Checklist from Infra Notes (No Invented Cloud Costs)

Prompt

Act as a Pulumi config secret-stack checklist engineer who only uses pasted infra notes. You compile a config secret-stack checklist the notes already support. You do not invent cloud costs, resource ranks, deploy scoreboards, or uptime claims. This is not a live Pulumi sync, not a Terraform invent, and not cloud cost consulting advice.
You work only from Inputs. Do not invent stats, citations, quotes, URLs, names, IDs, or records that are not in Inputs.

Inputs:
- Infra notes I lock (stack stubs, config cues, secret fragments): [InfraNotes]
- Pulumi project or version notes I lock: [Version]
- Project or org label I may quote (or UNKNOWN): [ProjectLabel]
- Stack titles already present (or UNKNOWN): [StackTitles]
- Config cues already present (or UNKNOWN): [ConfigCues]
- Secret cues already present (or UNKNOWN): [SecretCues]
- Provider cues already present (or UNKNOWN): [ProviderCues]
- Words I must not use: [Banned]
- What I must never invent (cloud costs, resource ranks, deploy scoreboards, uptime claims): [Never]
- Output format: [Format]
- Language: [Lang]

Generate:
1. Honesty ledger: InfraNotes nouns, Version, ProjectLabel, StackTitles, ConfigCues, SecretCues, ProviderCues, Lang. Banner: not cloud cost consulting advice; not a live Pulumi sync. Forbidden: invented cloud costs, resource ranks, deploy scoreboards, uptime claims.
2. Config secret-stack checklist: one checkbox row per StackTitles entry. Attach only ConfigCues and SecretCues named beside that stack in InfraNotes. Missing config or secret write NOT IN INPUTS.
3. Provider sketch: for each ProviderCues entry, list stacks that name it. Do not invent a $4200 cloud-cost claim if absent.
4. Project caution block: quote ProjectLabel and Version only. Preview packs not in InfraNotes stay NOT IN INPUTS.
5. Refuse list: inventing $4200 cloud costs, inventing resource ranks, inventing deploy scoreboards, inventing uptime claims.
6. Compliance pass: quote Banned and Never hits. Cut them. Print stack and config counts from InfraNotes only. Format as Format.

Constraints:
- Config secret-stack checklist from InfraNotes only. No invented cloud costs.
- Honor Version. No emojis. Not a live Pulumi dashboard. Not cloud cost consulting advice.

Instructions

Replace every [bracket] with your details before running. Works on ChatGPT, Claude, and Gemini.

Generated Output

This image was generated using the prompt above.

Pulumi Config Secret Stack Checklist from Infra Notes (No Invented Cloud Costs) - Result

Examples

Example Input

InfraNotes: stack title Harbor Quay Staging as pasted config cue cfg:quay-region as pasted secret cue sec:quay-db as pasted; stack title Quay Storm Prod as pasted config cue cfg:storm-region as pasted. Cost invent NONE. Rank invent NONE.
Version: Pulumi as pasted (do not invent unreleased AI infra coach)
ProjectLabel: Cedar Pier platform org as pasted
StackTitles: Harbor Quay Staging as pasted; Quay Storm Prod as pasted. Archive pack UNKNOWN.
ConfigCues: config cue cfg:quay-region as pasted for Harbor Quay Staging; config cue cfg:storm-region as pasted for Quay Storm Prod. Key pack UNKNOWN.
SecretCues: secret cue sec:quay-db as pasted for Harbor Quay Staging; Quay Storm Prod secret NOT IN INPUTS.
ProviderCues: provider cue aws as pasted for Harbor Quay Staging. Preview pack UNKNOWN.
Banned: $4200 cloud cost, resource rank #1, guaranteed deploy scoreboard
Never: invent cloud costs, invent resource ranks, invent deploy scoreboards, invent uptime claims
Format: ledger + config secret-stack checklist + provider sketch + project caution + refuse + compliance
Lang: English

Example Output

1. Ledger. InfraNotes: stack title Harbor Quay Staging + config cue cfg:quay-region + secret cue sec:quay-db; stack title Quay Storm Prod + config cue cfg:storm-region. Cost invent NONE. Rank invent NONE. Version Pulumi. ProjectLabel Cedar Pier platform org. StackTitles Harbor Quay Staging; Quay Storm Prod. ConfigCues cfg:quay-region for Harbor Quay Staging; cfg:storm-region for Quay Storm Prod. SecretCues sec:quay-db for Harbor Quay Staging; Quay Storm Prod secret NOT IN INPUTS. ProviderCues aws for Harbor Quay Staging. Preview pack UNKNOWN. Lang English. Banner: not cloud cost consulting advice; not a live Pulumi sync. Forbidden: invented cloud costs, resource ranks, deploy scoreboards, uptime claims, $4200 cloud cost, resource rank #1, guaranteed deploy scoreboard.

2. Config secret-stack checklist.
[ ] Harbor Quay Staging | config cfg:quay-region as pasted | secret sec:quay-db as pasted.
[ ] Quay Storm Prod | config cfg:storm-region as pasted | secret NOT IN INPUTS.
Key pack not attached. Archive pack not added.

3. Provider sketch.
provider cue aws | stack Harbor Quay Staging as pasted.
Quay Storm Prod provider | NOT IN INPUTS.
Cloud costs NOT IN INPUTS so do not invent $4200 cloud cost. Second provider cue not invented.

4. Project caution. ProjectLabel Cedar Pier platform org. Version Pulumi. Preview pack UNKNOWN. Do not invent uptime claim packs.

5. Refuse. $4200 cloud costs: refused. resource ranks: refused. deploy scoreboards: refused. uptime claims: refused. Unreleased AI infra coach: refused.

6. Compliance. Banned hits none. Stacks 2. Configs named 2. Format ledger+config secret-stack checklist+provider sketch+project caution+refuse+compliance. Gaps: Quay Storm Prod secret, Quay Storm Prod provider, Key pack, Archive pack, Preview pack.

Missing-data policy: if a field was blank, write NOT IN INPUTS rather than guessing. Lock any tool version named in Inputs; if unnamed, write unknown. No invented testimonials, star ratings, or press logos. If legal, clinical, insurance, HR, education-plan, or veterinary content appears, add a one-line not-advice and de-identify banner. Quote banned-word hits and cut them. End with a gaps list of five bullets the user still owes you. Character and byte caps in the job are hard; print counts when relevant. Refuse to backfill DOIs, exam dumps, PHI, PII, or compensation promises not in Inputs.