Fix enforcer error after aws update

[natechadwick-intsof]

Fix enforcer error

[kilo-code-bot]

Code Review Summary

Status: 1 Issue Found | Recommendation: Address before merge (low-risk nit)

Overview

Severity	Count
CRITICAL	0
WARNING	0
SUGGESTION	1

Issue Details (click to expand)

SUGGESTION

File	Line	Issue
pom.xml	136	Comment cites ${aws.sdk.v2.version} as if Maven interpolates XML comments (it does not). Future readers cannot verify the version claim without grepping for the property.

Files Reviewed (18 files)

• pom.xml — 1 issue (HC5 management for enforcer; shape and dependencyManagement placement look correct; relative paths in vendored doc references are correct for each location: ../docs/... from root-level modules, ../../docs/... from modules/*/, and ../docs/... from WebUI/)
• docs/policies/UC-EMBED-v1.0.0.md — new file, vendored from upstream commit b7f9d517…; HTML comment correctly pins the source commit and tells future editors to re-vendor rather than hand-edit the body
• docs/policies/UC-v1.0.0.md — new file, same vendoring pattern; **Canonical source** line intentionally points at blob/main/… (latest) while the body is pinned to v1.0.0
• AGENTS.md — vendored-policy line updated; new path resolves correctly from repo root
• CLAUDE.md, GEMINI.md — same one-line update, both use the short embed variant
• README.md — links the longer UC-v1.0.0.md (human-readable) plus the upstream repo; correct
• WebUI/AGENTS.md, rest/AGENTS.md, system/AGENTS.md — all use ../docs/policies/... (root-level modules); paths resolve correctly
• modules/CMLight-Main-cactus-tests/AGENTS.md, modules/extensions-main/AGENTS.md, modules/extensions-workflow/AGENTS.md, modules/perc-distribution-tree/AGENTS.md, modules/perc-i18n/AGENTS.md, modules/perc-jetty/AGENTS.md, modules/perc-qa-automation/AGENTS.md, projects/sitemanage/AGENTS.md — all use ../../docs/policies/...; paths resolve correctly

Substantive assessment

• The pom.xml change is the real fix: adding <dependencyManagement> entries for httpclient5, httpcore5, and httpcore5-h2 is the right shape to converge the transitive httpcomponents.client5 / core5 versions pulled in by AntiSamy 1.7.8 (5.4.4/5.3.4) and the AWS SDK v2 apache5-client (5.6.2/5.4.3) at the upper bound. Placed in the existing <properties> and <dependencyManagement> blocks per root AGENTS.md (parent-POM-managed versions, no per-module duplication).
• Vendoring the Universal Code locally matches the root AGENTS.md policy line and removes the external-URL dependency in 17 doc files. The HTML comment header on each vendored file is a good practice: it pins the source commit, distinguishes vendored content from project content, and tells future contributors to re-vendor rather than hand-edit.
• No code logic changed, no tests required (build-config + doc-only change).
• No secrets, no cross-platform path regressions, no Spring Boot imports introduced.

Style observation (not a flagged issue): across the 17 doc files the separator between the policy intro and the link changed from em-dash (—) to hyphen (-). This appears to be an intentional consistency pass; leaving the flag off since it is subjective and harmless.

Fix these issues in Kilo Cloud

---

_{Reviewed by minimax-m3 · Input: 81.6K · Output: 8.2K · Cached: 484.6K}

_{Review guidance: REVIEW.md from base branch development}