internal/

Package audit is the append-only record of what this tool did.

Package awsx is everything that talks to AWS: finding what is running, and changing it.

Package engine executes a plan, and enforces the two rules that make firing one survivable: the restore record is written first, and it is updated after every single change.

Package model is the vocabulary: what can be stopped, what stopping it means, and — the part that matters most — what must never be touched.

Package plan turns a pile of discovered resources into an ordered, reversible sequence of changes — and, just as importantly, a list of everything it will not touch and why.

Package policy is what the operator is allowed to hit, decided before the incident rather than during it.

Package state persists the snapshot that makes a fire reversible.

Package trip is one discover → plan → fire cycle, with nothing in it that belongs to a particular way of being invoked.

Package verify runs a full fire/restore cycle and checks the result by reading the account back, twice.