Blast propagation proto removal (#3971)

Reserve `BlastPropagation` and `followOnlyBlastPropagation` fields from
SDP protos to maintain wire-format compatibility and update
documentation and tests to reflect their deprecation.

This PR completes Phase 3 of the "Remove Blast Propagation Information"
project (ENG-2404), following the prior code removal (ENG-2647). It
ensures that old messages can still be parsed safely and prevents
accidental reuse of field numbers.

---
Linear Issue:
[ENG-2404](https://linear.app/overmind/issue/ENG-2404/sdp-reserve-blastpropagation-and-followonlyblastpropagation-from)

<p><a
href="https://cursor.com/agents?id=bc-9c62732b-1a27-42af-abf2-8c9866357e8b"><picture><source
media="(prefers-color-scheme: dark)"
srcset="https://cursor.com/assets/images/open-in-web-dark.png"><source
media="(prefers-color-scheme: light)"
srcset="https://cursor.com/assets/images/open-in-web-light.png"><img
alt="Open in Web" width="114" height="28"
src="https://cursor.com/assets/images/open-in-web-dark.png"></picture></a>&nbsp;<a
href="https://cursor.com/background-agent?bcId=bc-9c62732b-1a27-42af-abf2-8c9866357e8b"><picture><source
media="(prefers-color-scheme: dark)"
srcset="https://cursor.com/assets/images/open-in-cursor-dark.png"><source
media="(prefers-color-scheme: light)"
srcset="https://cursor.com/assets/images/open-in-cursor-light.png"><img
alt="Open in Cursor" width="131" height="28"
src="https://cursor.com/assets/images/open-in-cursor-dark.png"></picture></a>&nbsp;</p>

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **Medium Risk**
> Touches core protobuf contracts and regenerated client code;
downstream services/clients relying on `blastPropagation` fields or
reverse-edge filtering may break if not updated in lockstep.
>
> **Overview**
> This PR **deprecates and effectively removes blast-propagation
metadata from the SDP surface** by reserving the `BlastPropagation`
fields in `sdp/items.proto` and `sdp/revlink.proto` (and regenerating
Go/TS protobuf outputs) so old messages can still be parsed without
allowing field-number reuse.
>
> It updates sources and tooling to stop setting/expecting
`BlastPropagation` on links (e.g., AWS CloudWatch metric suggested
queries, EC2 address links, snapshot edge→linked-item conversion), and
strips Azure integration tests and docs/prompting guidance that
referenced propagation semantics, reflecting the move to AI-driven blast
radius calculation.
>
> <sup>Written by [Cursor
Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit
58035be2747c0f212919a366e08717efd786b30f. This will update automatically
on new commits. Configure
[here](https://cursor.com/dashboard?tab=bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

---------

Co-authored-by: Cursor Agent <cursoragent@cursor.com>
GitOrigin-RevId: ecdcb08090547689567725f2c37d33617b0456aa

Author: 2 people

aws-source/adapters/cloudwatch_metric_links.go

@@ -24,14 +24,6 @@ func SuggestedQuery(namespace string, scope string, dimensions []types.Dimension
 	var query *sdp.Query
 	var err error
 
-	bp := &sdp.BlastPropagation{
-		// These links are the metrics that feed the alarms. If the thing that
-		// we're measuring changes, we definitely want the alarm to be in the
-		// blast radius. But an alarm on its own doesn't affect these things
-		In:  false,
-		Out: true,
-	}
-
 	accountID, _, err := ParseScope(scope)
 
 	if err != nil {
@@ -244,7 +236,6 @@ func SuggestedQuery(namespace string, scope string, dimensions []types.Dimension
 
 	return &sdp.LinkedItemQuery{
 		Query:            query,
-		BlastPropagation: bp,
 	}, err
 }
 

aws-source/adapters/ec2-address.go

@@ -34,14 +34,6 @@ func addressOutputMapper(_ context.Context, _ *ec2.Client, scope string, _ *ec2.
 	var err error
 	var attrs *sdp.ItemAttributes
 
-	// An EC2-address, along with an IP is an item that inherently links things
-	// and therefore should propagate blast radius in both directions on all
-	// links
-	bp := &sdp.BlastPropagation{
-		In:  true,
-		Out: true,
-	}
-
 	for _, address := range output.Addresses {
 		attrs, err = ToAttributesWithExclude(address, "tags")
 
@@ -62,7 +54,6 @@ func addressOutputMapper(_ context.Context, _ *ec2.Client, scope string, _ *ec2.
 						Query:  *address.PublicIp,
 						Scope:  "global",
 					},
-					BlastPropagation: bp,
 				},
 			},
 			Tags: ec2TagsToMap(address.Tags),
@@ -76,7 +67,6 @@ func addressOutputMapper(_ context.Context, _ *ec2.Client, scope string, _ *ec2.
 					Query:  *address.InstanceId,
 					Scope:  scope,
 				},
-				BlastPropagation: bp,
 			})
 		}
 
@@ -88,7 +78,6 @@ func addressOutputMapper(_ context.Context, _ *ec2.Client, scope string, _ *ec2.
 					Query:  *address.CarrierIp,
 					Scope:  "global",
 				},
-				BlastPropagation: bp,
 			})
 		}
 
@@ -100,7 +89,6 @@ func addressOutputMapper(_ context.Context, _ *ec2.Client, scope string, _ *ec2.
 					Query:  *address.CustomerOwnedIp,
 					Scope:  "global",
 				},
-				BlastPropagation: bp,
 			})
 		}
 
@@ -112,7 +100,6 @@ func addressOutputMapper(_ context.Context, _ *ec2.Client, scope string, _ *ec2.
 					Query:  *address.NetworkInterfaceId,
 					Scope:  scope,
 				},
-				BlastPropagation: bp,
 			})
 		}
 
@@ -124,7 +111,6 @@ func addressOutputMapper(_ context.Context, _ *ec2.Client, scope string, _ *ec2.
 					Query:  *address.PrivateIpAddress,
 					Scope:  "global",
 				},
-				BlastPropagation: bp,
 			})
 		}
 

go/sdp-go/items.go

@@ -20,12 +20,6 @@ import (
 
 const WILDCARD = "*"
 
-// IsEqual compares two BlastPropagation settings for equality by checking
-// both the In and Out propagation directions.
-func (bp *BlastPropagation) IsEqual(other *BlastPropagation) bool {
-	return bp.GetIn() == other.GetIn() && bp.GetOut() == other.GetOut()
-}
-
 // UniqueAttributeValue returns the value of whatever the Unique Attribute is
 // for this item. This will then be converted to a string and returned
 func (i *Item) UniqueAttributeValue() string {