# TASKS
| Task | Owner(s) | Depends on | Notes |
|---|---|---|---|
|Document CERT/CC advisory sources|BE-Conn-CERTCC|Research|**DONE (2025-10-10)** – Catalogued Atom feed + VINCE API endpoints and archive references in `README.md`; include polling/backoff guidance.|
|Fetch pipeline & state tracking|BE-Conn-CERTCC|Source.Common, Storage.Mongo|**DOING (2025-10-10)** – Summary planner + fetch job now persist monthly/yearly VINCE JSON to `DocumentStore` while advancing a `TimeWindowCursorState`; follow-up: fan out summary payloads into per-note detail fetch queue and store hydrated cursor state.|
|VINCE note detail fetcher|BE-Conn-CERTCC|Source.Common, Storage.Mongo|**TODO** – Read summary documents, enqueue unique VU IDs, fetch `/vuls/api/{id}/`, `/vuls/api/{id}/vendors/`, `/vuls/api/{id}/vuls/`, persist raw JSON, dedupe via SHA/ETag, and record retry/backoff metadata.|
|DTO & parser implementation|BE-Conn-CERTCC|Source.Common|**TODO** – Model VINCE JSON (note + vendors + vulnerabilities), create strongly typed DTOs, normalise markdown into HTML-safe fragments, and surface vendor/product impact statements.|
|Canonical mapping & range primitives|BE-Conn-CERTCC|Models|**TODO** – Map VINCE DTOs to canonical advisories (aliases: VU#, CVE), vendors/products into RangePrimitives (`certcc.vendor`, affected platforms), and emit mitigation references.|
|Deterministic fixtures/tests|QA|Testing|**TODO** – Expand `Source.CertCc.Tests` with summary→detail→map regression tests; seed fixtures under `Source.CertCc.Tests/Fixtures` and honour `UPDATE_CERTCC_FIXTURES=1` for regeneration.|
|Telemetry & documentation|DevEx|Docs|**TODO** – Add logging/metrics, document connector behaviour, update backlog once implementation completes.|
