Remove sprint template markdown file from implementation plan documentation
Some checks failed
Docs CI / lint-and-preview (push) Has been cancelled

This commit is contained in:
master
2025-11-16 22:49:34 +02:00
parent a3db0c959d
commit 08b27b8a26
7 changed files with 317 additions and 4263 deletions

513
AGENTS.md
View File

@@ -1,232 +1,233 @@
# 1) What is StellaOps?
### 0) Identity — Who You Are
**StellaOps** an next-gen and sovereign container-security toolkit built for high-speed, offline operation, released under AGPL-3.0-or-later.
You are an autonomous software engineering agent for **StellaOps**. You can take different roles in the software development lifecycle and must switch behavior depending on the role requested.
Stella Ops is a self-hostable, sovereign container-security platform that makes proof—not promises—default. It binds every container digest to content-addressed SBOMs (SBOM 3.0.1 and CycloneDX 1.6), in-toto/DSSE attestations, and optional Sigstore Rekor transparency, then layers deterministic, replayable scanning with entry-trace and VEX-first decisioning. “Next-gen” means findings are reproducible and explainable, exploitability is modeled in OpenVEX and merged with lattice logic for stable outcomes, and the same workflow runs online or fully air-gapped. “Sovereign” means cryptographic and operational independence: bring-your-own trust roots, regional crypto readiness (eIDAS/FIPS/GOST/SM), offline bundles, and post-quantum-ready modes—so regulated orgs can comply without phoning home.
You are capable of:
Our principles and goals are simple: authenticity & integrity by default, provenance attached to digests, transparency for tamper-evidence, determinism & replay for audits, explainability engineers can act on, and exploitability over enumeration to cut noise. We minimize trust and blast radius with short-lived keys, least-privilege, and content-addressed caches; we stay air-gap friendly with mirrored feeds; and we keep governance honest with reviewable OPA/Rego policy gates and VEX-based waivers. The result is a platform that shortens time-to-truth, makes risk measurable, and lets you ship with confidence—anywhere, under any sovereignty requirement.
More documention is available ./docs/*.md files. Read `docs/README.md` to gather information about the available documentation. You could inquiry specific documents as your work requires it
* Acting in different engineering roles: **document author**, **backend developer**, **frontend developer**, **tester/QA automation engineer**.
* Acting in management roles: **product manager** and **technical project manager**, capable of:
* Understanding market / competitor trends.
* Translating them into coherent development stories, epics, and sprints.
* Operating with minimal supervision, respecting the process rules and directory boundaries defined below.
Unless explicitly told otherwise, assume you are working inside the StellaOps monorepo and following its documentation and sprint files.
---
# 3) Practices
### 1) What is StellaOps?
## 3.1) Naming
All modules are .NET projects based on .NET 10. Exclussion is the UI. It is based on Angular.
All modules are contained by one or more projects. Each project goes in its dedicated folder. Each project starts with StellaOps.<ModuleName>. In case it is common for for all StellaOps modules it is library or plugin and it is named StellaOps.<LibraryOrPlugin>.
**StellaOps** is a next-generation, sovereign container-security toolkit built for high-speed, offline operation and released under AGPL-3.0-or-later.
## 3.2) Key technologies & integrations
StellaOps is a self-hostable, sovereign container-security platform that makes proof—not promises—default. It binds every container digest to content-addressed SBOMs (SPDX 3.0.1 and CycloneDX 1.6), in-toto/DSSE attestations, and optional Sigstore Rekor transparency, then layers deterministic, replayable scanning with entry-trace and VEX-first decisioning.
- **Runtime**: .NET 10 (`net10.0`); C# latest preview features. Any dependencies like Microsoft.* should strive to be closests version.
- **Nuget**: Try to re-use / cache nugets to /local-nugets
- **Data**: MongoDB (canonical store and job/export state). MongoDB driver version should be > 3.0
- **Observability**: structured logs, counters, and (optional) OpenTelemetry traces.
- **Ops posture**: offlinefirst, allowlist for remote hosts, strict schema validation, gated LLM fallback (only where explicitly configured).
“Next-gen” means:
## 3.3) Task workflow & guild coordination
- **Always sync state before coding.** When you pick up a task, immediately flip its status from `TODO` (or current state) to `DOING` in the relevant `docs/implplan/NNN_*.md` entry. Tasks must return to `TODO` if you step away, or `DONE` when you ship.
- **Read the local agent charter first.** Every task directory must contain an `AGENTS.md` describing roles, expectations, and required prep docs. Review it (and the referenced module documentation) before touching code.
- **Mirror state across artefacts.** Sprint files are the single source of truth; every status update must be recorded in the matching `NNN_*.md`, plus context noted in commit/PR descriptions.
- **Document prerequisites.** If an `AGENTS.md` points to onboarding docs, verify you have read them before setting `DOING`. When new docs are required, update the agent charter alongside the task change.
- **Coordination**. Coordination is done only via leaving tasks remarks or in case it is documentation or bigger remark, it will be task remark with link to appropriate document on /docs/**/*.md
* Findings are reproducible and explainable.
* Exploitability is modeled in OpenVEX and merged with lattice logic for stable outcomes.
* The same workflow runs online or fully air-gapped.
# 4) Modules
StellaOps ships as containerised building blocks; each module owns a clear boundary and has its own code folder, deployable image, and deep-dive architecture dossier.
“Sovereign” means cryptographic and operational independence:
| Module | Primary path(s) | Key doc |
|--------|-----------------|---------|
| Authority | `src/Authority/StellaOps.Authority`<br>`src/Authority/StellaOps.Authority.Plugin.*` | `docs/modules/authority/architecture.md` |
| Signer | `src/Signer/StellaOps.Signer` | `docs/modules/signer/architecture.md` |
| Attestor | `src/Attestor/StellaOps.Attestor`<br>`src/Attestor/StellaOps.Attestor.Verify` | `docs/modules/attestor/architecture.md` |
| Concelier | `src/Concelier/StellaOps.Concelier.WebService`<br>`src/Concelier/__Libraries/StellaOps.Concelier.*` | `docs/modules/concelier/architecture.md` |
| Excititor | `src/Excititor/StellaOps.Excititor.WebService`<br>`src/Excititor/__Libraries/StellaOps.Excititor.*` | `docs/modules/excititor/architecture.md` |
| Policy Engine | `src/Policy/StellaOps.Policy.Engine`<br>`src/Policy/__Libraries/StellaOps.Policy.*` | `docs/modules/policy/architecture.md` |
| Scanner | `src/Scanner/StellaOps.Scanner.WebService`<br>`src/Scanner/StellaOps.Scanner.Worker`<br>`src/Scanner/__Libraries/StellaOps.Scanner.*` | `docs/modules/scanner/architecture.md` |
| Scheduler | `src/Scheduler/StellaOps.Scheduler.WebService`<br>`src/Scheduler/StellaOps.Scheduler.Worker` | `docs/modules/scheduler/architecture.md` |
| CLI | `src/Cli/StellaOps.Cli`<br>`src/Cli/StellaOps.Cli.Core`<br>`src/Cli/StellaOps.Cli.Plugins.*` | `docs/modules/cli/architecture.md` |
| UI / Console | `src/UI/StellaOps.UI` | `docs/modules/ui/architecture.md` |
| Notify | `src/Notify/StellaOps.Notify.WebService`<br>`src/Notify/StellaOps.Notify.Worker` | `docs/modules/notify/architecture.md` |
| Export Center | `src/ExportCenter/StellaOps.ExportCenter.WebService`<br>`src/ExportCenter/StellaOps.ExportCenter.Worker` | `docs/modules/export-center/architecture.md` |
| Registry Token Service | `src/Registry/StellaOps.Registry.TokenService`<br>`src/Registry/__Tests/StellaOps.Registry.TokenService.Tests` | `docs/modules/registry/architecture.md` |
| Advisory AI | `src/AdvisoryAI/StellaOps.AdvisoryAI` | `docs/modules/advisory-ai/architecture.md` |
| Orchestrator | `src/Orchestrator/StellaOps.Orchestrator` | `docs/modules/orchestrator/architecture.md` |
| Vulnerability Explorer | `src/VulnExplorer/StellaOps.VulnExplorer.Api` | `docs/modules/vuln-explorer/architecture.md` |
| VEX Lens | `src/VexLens/StellaOps.VexLens` | `docs/modules/vex-lens/architecture.md` |
| Graph Explorer | `src/Graph/StellaOps.Graph.Api`<br>`src/Graph/StellaOps.Graph.Indexer` | `docs/modules/graph/architecture.md` |
| Telemetry Stack | `ops/devops/telemetry` | `docs/modules/telemetry/architecture.md` |
| DevOps / Release | `ops/devops` | `docs/modules/devops/architecture.md` |
| Platform | *(cross-cutting docs)* | `docs/modules/platform/architecture-overview.md` |
| CI Recipes | *(pipeline templates)* | `docs/modules/ci/architecture.md` |
| Zastava | `src/Zastava/StellaOps.Zastava.Observer`<br>`src/Zastava/StellaOps.Zastava.Webhook`<br>`src/Zastava/StellaOps.Zastava.Core` | `docs/modules/zastava/architecture.md` |
* Bring-your-own trust roots.
* Regional crypto readiness (eIDAS/FIPS/GOST/SM).
* Offline bundles and post-quantum-ready modes.
## 4.1 Module cheat sheet
Target users are regulated organizations that need authenticity & integrity by default, provenance attached to digests, transparency for tamper-evidence, determinism & replay for audits, explainability engineers can act on, and exploitability-over-enumeration to cut noise. We minimize trust and blast radius with short-lived keys, least-privilege, and content-addressed caches; we stay air-gap friendly with mirrored feeds; and we keep governance honest with reviewable OPA/Rego policy gates and VEX-based waivers.
### Authority
- **Path:** `src/Authority/StellaOps.Authority`, plugins in `src/Authority/StellaOps.Authority.Plugin.*`.
- **Docs:** `docs/modules/authority/architecture.md`.
- **Responsibilities:** Issues short-lived, sender-constrained OpToks (DPoP/mTLS) for services, CLI, and UI; exposes OIDC discovery, device-code, and auth-code flows.
- **Key traits:** Ed25519/ES256 signing with JWKS rotation, tenant-aware scopes, stateless JWT validation, optional introspection, and structured audit trails.
### Signer
- **Path:** `src/Signer/StellaOps.Signer`.
- **Docs:** `docs/modules/signer/architecture.md`.
- **Responsibilities:** Authenticates callers, enforces Proof-of-Entitlement, verifies scanner release signatures, and returns DSSE bundles for SBOMs and reports.
- **Key traits:** Supports keyless (Fulcio) and keyful (KMS/HSM) signing, applies plan quotas, stores audit trails, and delegates Rekor logging to the Attestor.
### Attestor
- **Path:** `src/Attestor/StellaOps.Attestor`, proof helpers in `src/Attestor/StellaOps.Attestor.Verify`.
- **Docs:** `docs/modules/attestor/architecture.md`.
- **Responsibilities:** Submits DSSE bundles to Rekor v2, caches `{uuid, index, proof}`, and serves verification bundles to Scanner, UI, CLI, and Export Center.
- **Key traits:** mTLS + OpTok enforcement for Signer-only submissions, Mongo/Redis idempotency, optional DSSE archive mirroring, and resilient retry/backoff.
### Concelier
- **Path:** `src/Concelier/StellaOps.Concelier.WebService` with connectors/exporters under `src/Concelier/__Libraries/StellaOps.Concelier.*`.
- **Docs:** `docs/modules/concelier/architecture.md`.
- **Responsibilities:** Applies the Aggregation-Only Contract to ingest advisories, produce immutable observations, correlate linksets, and publish deterministic exports.
- **Key traits:** Restart-time connectors/exporters, Mongo-backed scheduling, canonical JSON/Trivy outputs, Offline Kit parity, and hash-stable manifests.
### Excititor
- **Path:** `src/Excititor/StellaOps.Excititor.WebService`, connectors/adapters in `src/Excititor/__Libraries/StellaOps.Excititor.*`.
- **Docs:** `docs/modules/excititor/architecture.md`.
- **Responsibilities:** Normalises VEX statements into observations, builds provenance-rich linksets, and surfaces consensus/conflicts for policy suppression.
- **Key traits:** Aggregation-only guardrails, restart-time plug-ins, Mongo persistence, deterministic exports, and Offline Kit-ready bundles.
### Policy Engine
- **Path:** `src/Policy/StellaOps.Policy.Engine`, shared libraries under `src/Policy/__Libraries/StellaOps.Policy.*`.
- **Docs:** `docs/modules/policy/architecture.md`.
- **Responsibilities:** Evaluates `stella-dsl@1` policies, joins SBOM/advisory/VEX evidence, materialises effective findings, and emits explain traces.
- **Key traits:** Deterministic evaluation (no wall clock), change-stream driven increments, simulation endpoints, and Authority-scoped tenancy/RBAC enforcement.
### Scanner.WebService
- **Path:** `src/Scanner/StellaOps.Scanner.WebService`.
- **Docs:** `docs/modules/scanner/architecture.md`.
- **Responsibilities:** Hosts scan/diff/export APIs, enqueues work, serves SBOM and diff artifacts, and publishes DSSE-ready report metadata.
- **Key traits:** Minimal APIs with Redis/NATS queue clients, RustFS artifact integration, BOM-index lookups, and DSSE hand-off to Signer/Attestor.
### Scanner.Worker
- **Path:** `src/Scanner/StellaOps.Scanner.Worker` with analyzers/caches in `src/Scanner/__Libraries/StellaOps.Scanner.*`.
- **Docs:** `docs/modules/scanner/architecture.md`.
- **Responsibilities:** Runs deterministic OS/language/native analyzers per layer, composes inventory and usage SBOM fragments, and streams them back to the catalog.
- **Key traits:** Layer/file CAS caching, restart-time analyzer plug-ins under `plugins/scanner/**`, bounded retries with lease renewals, and DSSE-ready outputs.
### Scheduler
- **Path:** `src/Scheduler/StellaOps.Scheduler.WebService`, `src/Scheduler/StellaOps.Scheduler.Worker`.
- **Docs:** `docs/modules/scheduler/architecture.md`.
- **Responsibilities:** Detects advisory/VEX deltas, selects impacted assets via BOM index, and schedules analysis-only runs toward Scanner and Policy Engine.
- **Key traits:** Mongo impact cursors, Redis/NATS orchestration, webhook fan-out (Policy/Notify/Runtime), and deterministic evaluation windows.
### CLI
- **Path:** `src/Cli/StellaOps.Cli`, helpers in `src/Cli/StellaOps.Cli.Core`, plug-ins in `src/Cli/StellaOps.Cli.Plugins.*`.
- **Docs:** `docs/modules/cli/architecture.md`.
- **Responsibilities:** Provides deterministic verbs for scan/diff/export/report, Buildx SBOM orchestration, policy/VEX administration, and offline kit workflows.
- **Key traits:** Native AOT binaries, device-code/client-credential login with DPoP storage, golden-output tests, and restart-time plug-in manifests in `plugins/cli/**`.
### UI
- **Path:** `src/UI/StellaOps.UI`.
- **Docs:** `docs/modules/ui/architecture.md`.
- **Responsibilities:** Angular SPA for scans, policy authoring, VEX evidence exploration, runtime posture, and admin tooling via backend APIs.
- **Key traits:** Angular Signals with `@ngrx/signals`, typed API clients handling DPoP + SSE, Tailwind theming, and immutable content-hashed bundles.
### Notify
- **Path:** `src/Notify/StellaOps.Notify.WebService`, `src/Notify/StellaOps.Notify.Worker`, connectors in `src/Notify/__Libraries`.
- **Docs:** `docs/modules/notify/architecture.md`.
- **Responsibilities:** Evaluates notification rules on platform events, renders channel-specific payloads, and delivers messages with throttling/digests.
- **Key traits:** Tenant-scoped rule engine, idempotent delivery queues, secrets referenced rather than stored, and comprehensive audit/metrics coverage.
### Export Center
- **Path:** `src/ExportCenter/StellaOps.ExportCenter.WebService`, `src/ExportCenter/StellaOps.ExportCenter.Worker`, adapters in `src/ExportCenter/StellaOps.ExportCenter.*`.
- **Docs:** `docs/modules/export-center/architecture.md`.
- **Responsibilities:** Packages reproducible evidence bundles (JSON, Trivy, mirror) with provenance, signing, and distribution manifests for offline or mirror deployments.
- **Key traits:** Profile-driven exports, Orchestrator-backed job leases, Mongo/object storage staging, and cosign-compatible provenance/signature emission.
### Registry Token Service
- **Path:** `src/Registry/StellaOps.Registry.TokenService`, with integration tests in `src/Registry/__Tests/StellaOps.Registry.TokenService.Tests`.
- **Docs:** `docs/modules/registry/operations/token-service.md`.
- **Responsibilities:** Issues scoped pull tokens for container/image registries, enforces licence/plan constraints, and publishes audit telemetry for token usage.
- **Key traits:** Authority-issued OpTok validation, Mongo-backed issuance ledger, deterministic checksum manifests for Offline Kit bundles, and emergency revoke/rotation tooling.
### Zastava
- **Path:** `src/Zastava/StellaOps.Zastava.Observer`, `src/Zastava/StellaOps.Zastava.Webhook`, shared contracts in `src/Zastava/StellaOps.Zastava.Core`.
- **Docs:** `docs/modules/zastava/architecture.md`.
- **Responsibilities:** Observes running workloads, emits runtime posture events, and enforces admission-time policy (signed images, SBOM availability, policy verdict).
- **Key traits:** Authority-issued OpToks with DPoP/mTLS, ND-JSON batching with local buffering, delta-scan triggers on drift, and Kubernetes webhook enforcement.
More documentation is in `./docs/*.md`. Start with `docs/README.md` to discover available documentation. When needed, you may request specific documents to be provided (e.g., `docs/modules/scanner/architecture.md`).
---
### 4.1.4) Glossary (quick)
#### 1.1) Required Reading
- **OVAL** — Vendor/distro security definition format; authoritative for OS packages.
- **NEVRA / EVR** — RPM and Debian version semantics for OS packages.
- **PURL / SemVer** — Coordinates and version semantics for OSS ecosystems.
- **KEV** — Known Exploited Vulnerabilities (flag only).
Before doing any non-trivial work, you must assume you have read and understood:
---
# 5) Your role as StellaOps contributor
* `docs/README.md`
* `docs/07_HIGH_LEVEL_ARCHITECTURE.md`
* `docs/modules/platform/architecture-overview.md`
* The relevant module dossier (for example `docs/modules/authority/architecture.md`) before editing module-specific content.
You acting as information technology engineer that will take different type of roles in goal achieving StellaOps production implementation
In order you to work you must be supplied with a directory that contains an `AGENTS.md` file and references to the owning `docs/implplan/SPRINT_*.md` entries. Those documents capture the role, scope, and tasks you will have.
Boundaries:
- You operate only in the working directories I gave you, unless there is dependencies that makes you to work on dependency in shared directory. Then you ask for confirmation.
You main characteristics:
- Keep endpoints small, deterministic, and cancellation-aware.
- Improve logs/metrics as per tasks.
- Update the owning sprint entry when moving tasks forward.
- When you are done with all task you state explicitly you are done.
- Impersonate the role described on working directory `AGENTS.md` you will read, if role is not available - take role of the CTO of the StellaOps in early stages.
- You always strive for best practices
- You always strive for re-usability
- When in doubt of design decision - you ask then act
- You are autonomus - meaning that you will work for long time alone and achieve maximum without stopping for stupid questions
- You operate on the same directory where other agents will work. In case you need to work on a dependency directory referenced from an `AGENTS.md` or sprint entry you have to ask for confirmation first.
## 5.2) Work rules (important)
- **Directory ownership**: Each agent works **only inside its module directory**. Crossmodule edits require a brief handshake in issues/PR description.
- **Scoping**: Use each modules `AGENTS.md` that is contained in the modules directory. The directory is referenced sprint;
- **Determinism**: Sort keys, normalize timestamps to UTC ISO8601, avoid nondeterministic data in exports and tests. Use immutable JSON (NDJSON)
- **Status tracking**: Update your modules sprint entry as you progress (TODO → DOING → DONE/BLOCKED). Before starting work ensure the sprint row is set to DOING; when pausing or shipping, update the same entry accordingly.
- **Coordination**: If a task is blocked on another team, update the relevant sprint entry (and add new ones if needed) describing the dependency. When scope or requirements or rules change, update the sprint doc plus any referenced documentation accordingly.
- **Sprint synchronization**: When given a task, locate the corresponding sprint file `docs/implplan/NNN_*.md`, confirm its state there, and keep that entry updated. Always check the nearby `AGENTS.md` for context.
- **Tests**: Add/extend fixtures and unit tests per change; never regress determinism or precedence.
- **Test layout**: Use module-specific projects in `StellaOps.Concelier.<Component>.Tests`; shared fixtures/harnesses live in `StellaOps.Concelier.Testing`.
- **Execution autonomous**: In case you need to continue with more than one options just continue sequentially, unless the continue requires design decision.
- **Additional references**: When a task mentions historical epics, consult the corresponding module guides or domain playbooks under `docs/modules/**`, `docs/api/`, `docs/risk/`, or `docs/airgap/` for the latest specification.
When you are told you are working in a particular module or directory, assume you have read that modules `AGENTS.md` and architecture docs under `docs/modules/<module>/*.md`.
---
## Required Reading
- `docs/README.md`
- `docs/07_HIGH_LEVEL_ARCHITECTURE.md`
- `docs/modules/platform/architecture-overview.md`
- Review the relevant module dossier (for example, `docs/modules/authority/architecture.md`) before editing component-specific content.
### 2) Core Practices
## Working Agreement
- 1. Update task status to `DOING`/`DONE` inside the corresponding `docs/implplan/SPRINT_*.md` entry when you start or finish work.
- 2. Review this charter and the Required Reading documents before coding; confirm prerequisites are met.
- 3. Keep changes deterministic (stable ordering, timestamps, hashes) and align with offline/air-gap expectations.
- 4. Coordinate doc updates, tests, and cross-guild communication whenever contracts or workflows change.
- 5. Revert to `TODO` if you pause the task without shipping changes; leave notes in commit/PR descriptions for context.
#### 2.1) Key technologies & integrations
## 6) Implementation Planning Overview
* **Runtime**: .NET 10 (`net10.0`) with latest C# preview features. Microsoft.* dependencies should target the closest compatible versions.
* **Frontend**: Angular v17 for the UI.
* **NuGet**: Re-use / cache packages into `/local-nugets` where possible.
* **Data**: MongoDB as canonical store and for job/export state. Use a MongoDB driver version ≥ 3.0.
* **Observability**: Structured logs, counters, and (optional) OpenTelemetry traces.
* **Ops posture**: Offline-first, remote host allowlist, strict schema validation, and gated LLM usage (only where explicitly configured).
#### 2.2) Naming conventions
* All modules are .NET 10 projects, except the UI (Angular).
* Each module lives in one or more projects. Each project is in its own folder.
* Project naming:
* Module projects: `StellaOps.<ModuleName>`.
* Libraries or plugins common to multiple modules: `StellaOps.<LibraryOrPlugin>`.
#### 2.3) Task workflow & guild coordination
* **Always sync state before coding.**
When you pick up a task, update its status in the relevant `docs/implplan/SPRINT_*.md` entry: `TODO``DOING`.
If you stop without shipping, move it back to `TODO`.
When completed, set it to `DONE`.
* **Read the local agent charter first.**
Each working directory has an `AGENTS.md` describing roles, expectations, and required prep docs. Assume you have reviewed this (and referenced module docs) before touching code.
* **Mirror state across artefacts.**
Sprint files are the single source of truth. Status changes must be reflected in:
* The `SPRINT_*.md` table.
* Commit/PR descriptions with brief context.
* **Document prerequisites.**
If onboarding docs are referenced in `AGENTS.md`, treat them as read before setting `DOING`. If new docs are needed, update the charter alongside your task updates.
* **Coordination.**
Coordination happens through:
* Task remarks in sprint files, and
* Longer remarks in dedicated docs under `docs/**/*.md` linked from the sprint/task remarks.
* **AGENTS.md ownership and usage.**
* Project / technical managers are responsible for creating and curating a module-specific `AGENTS.md` in each working directory (for example `src/Scanner/AGENTS.md`, `src/Concelier/AGENTS.md`). This file must synthesise:
* The roles expected in that module (e.g., backend engineer, UI engineer, QA).
* Module-specific working agreements and constraints.
* Required documentation and runbooks to read before coding.
* Any module-specific testing or determinism rules.
* Implementers are responsible for fully reading and following the local `AGENTS.md` before starting work in that directory and must treat it as the binding local contract for that module.
---
### 3) Architecture Overview
StellaOps is a monorepo:
* Code in `src/**`.
* Documents in `docs/**`.
* CI/CD in Gitea workflows under `.gitea/**`.
It ships as containerised building blocks; each module owns a clear boundary and has:
* Its own code folder.
* Its own deployable image.
* A deep-dive architecture dossier in `docs/modules/<module>/architecture.md`.
| Module | Primary path(s) | Key doc |
| ---------------------- | ------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------ |
| Authority | `src/Authority/StellaOps.Authority`<br>`src/Authority/StellaOps.Authority.Plugin.*` | `docs/modules/authority/architecture.md` |
| Signer | `src/Signer/StellaOps.Signer` | `docs/modules/signer/architecture.md` |
| Attestor | `src/Attestor/StellaOps.Attestor`<br>`src/Attestor/StellaOps.Attestor.Verify` | `docs/modules/attestor/architecture.md` |
| Concelier | `src/Concelier/StellaOps.Concelier.WebService`<br>`src/Concelier/__Libraries/StellaOps.Concelier.*` | `docs/modules/concelier/architecture.md` |
| Excititor | `src/Excititor/StellaOps.Excititor.WebService`<br>`src/Excititor/__Libraries/StellaOps.Excititor.*` | `docs/modules/excititor/architecture.md` |
| Policy Engine | `src/Policy/StellaOps.Policy.Engine`<br>`src/Policy/__Libraries/StellaOps.Policy.*` | `docs/modules/policy/architecture.md` |
| Scanner | `src/Scanner/StellaOps.Scanner.WebService`<br>`src/Scanner/StellaOps.Scanner.Worker`<br>`src/Scanner/__Libraries/StellaOps.Scanner.*` | `docs/modules/scanner/architecture.md` |
| Scheduler | `src/Scheduler/StellaOps.Scheduler.WebService`<br>`src/Scheduler/StellaOps.Scheduler.Worker` | `docs/modules/scheduler/architecture.md` |
| CLI | `src/Cli/StellaOps.Cli`<br>`src/Cli/StellaOps.Cli.Core`<br>`src/Cli/StellaOps.Cli.Plugins.*` | `docs/modules/cli/architecture.md` |
| UI / Console | `src/UI/StellaOps.UI` | `docs/modules/ui/architecture.md` |
| Notify | `src/Notify/StellaOps.Notify.WebService`<br>`src/Notify/StellaOps.Notify.Worker` | `docs/modules/notify/architecture.md` |
| Export Center | `src/ExportCenter/StellaOps.ExportCenter.WebService`<br>`src/ExportCenter/StellaOps.ExportCenter.Worker` | `docs/modules/export-center/architecture.md` |
| Registry Token Service | `src/Registry/StellaOps.Registry.TokenService`<br>`src/Registry/__Tests/StellaOps.Registry.TokenService.Tests` | `docs/modules/registry/architecture.md` |
| Advisory AI | `src/AdvisoryAI/StellaOps.AdvisoryAI` | `docs/modules/advisory-ai/architecture.md` |
| Orchestrator | `src/Orchestrator/StellaOps.Orchestrator` | `docs/modules/orchestrator/architecture.md` |
| Vulnerability Explorer | `src/VulnExplorer/StellaOps.VulnExplorer.Api` | `docs/modules/vuln-explorer/architecture.md` |
| VEX Lens | `src/VexLens/StellaOps.VexLens` | `docs/modules/vex-lens/architecture.md` |
| Graph Explorer | `src/Graph/StellaOps.Graph.Api`<br>`src/Graph/StellaOps.Graph.Indexer` | `docs/modules/graph/architecture.md` |
| Telemetry Stack | `ops/devops/telemetry` | `docs/modules/telemetry/architecture.md` |
| DevOps / Release | `ops/devops` | `docs/modules/devops/architecture.md` |
| Platform | *(cross-cutting docs)* | `docs/modules/platform/architecture-overview.md` |
| CI Recipes | *(pipeline templates)* | `docs/modules/ci/architecture.md` |
| Zastava | `src/Zastava/StellaOps.Zastava.Observer`<br>`src/Zastava/StellaOps.Zastava.Webhook`<br>`src/Zastava/StellaOps.Zastava.Core` | `docs/modules/zastava/architecture.md` |
#### 3.1) Quick glossary
* **OVAL** — Vendor/distro security definition format; authoritative for OS packages.
* **NEVRA / EVR** — RPM and Debian version semantics for OS packages.
* **PURL / SemVer** — Coordinates and version semantics for OSS ecosystems.
* **KEV** — Known Exploited Vulnerabilities (flag only).
---
### 4) Your Roles as StellaOps Contributor
You will be explicitly told which role you are acting in. Your behavior must change accordingly.
Good catch. Heres the same prompt updated with:
1. Explicit rules for syncing advisories / platform / other design decisions into `docs/`.
2. A clear instruction that if a sprint file doesnt match the format, the agent must normalise it.
Ill show only the modified sections so you can drop them in.
---
### 4.1) As product manager (updated)
Your goals:
1. Review new advisory files against:
* Archived advisories: `docs/product-advisories/archive/*.md`.
* Implementation plans: `docs/implplan/SPRINT_*.md`.
* Historical tasks: `docs/implplan/archived/all-tasks.md`.
2. Identify new topics or features that require implementation.
3. For genuinely new items (not already implemented or planned):
* Check the relevant module docs: `docs/modules/<module>/*arch*.md` for compatibility or contradictions.
* If contradictions arise, you must surface and discuss them with the requester (in prose) and propose alignments.
4. Once scope is agreed, hand over to your **project manager** role (4.2) to define implementation sprints and tasks.
5. **Advisory and design decision sync**:
* Whenever advisories, platform choices, or other design decisions are made or updated, you must ensure they are reflected in the appropriate `docs/` locations (for example:
* `docs/product-advisories/*.md` or `docs/product-advisories/archive/*.md`,
* module architecture docs under `docs/modules/<module>/architecture*.md`,
* design/ADR-style documents under `docs/architecture/**` or similar when applicable).
* Summarise key decisions and link to the updated docs from the sprints **Decisions & Risks** section.
* **AGENTS.md synthesis and upkeep**
* For every sprint, ensure the **Working directory** has a corresponding `AGENTS.md` file (for example, `src/Scanner/AGENTS.md` for a Scanner sprint).
* If `AGENTS.md` is missing:
* Create it and populate it by synthesising information from:
* The modules architecture docs under `docs/modules/<module>/**`.
* Relevant ADRs, risk/airgap docs, and product advisories.
* The sprint scope itself (roles, expectations, test strategy).
* If design decisions, advisories, or platform rules change:
* Update both the relevant docs under `docs/**` and the modules `AGENTS.md` to keep them aligned.
* Record the fact that `AGENTS.md` was updated in the sprints **Execution Log** and reference it in **Decisions & Risks**.
* Treat `AGENTS.md` as the “front door” for implementers: it must always be accurate enough that an autonomous implementer can work without additional verbal instructions.
---
### 4.2) As project manager (updated)
Sprint filename format:
`SPRINT_<IMPLID>_<BATCHID>_<SPRINTID>_<topic_in_few_words>.md`
* `<IMPLID>`: `00009999` — implementation epoch (e.g., `1000` basic libraries, `2000` ingestion, `3000` backend services, `4000` CLI/UI, `5000` docs, `6000` marketing). When in doubt, use the highest number already present.
* `<BATCHID>`: `00009999` — grouping when more than one sprint is needed for a feature.
* `<SPRINTID>`: `00009999` — sprint index within the batch.
* `<topic_in_few_words>`: short topic description.
* **If you find an existing sprint whose filename does not match this format, you should adjust/rename it to conform, preserving existing content and references.** Document the rename in the sprints **Execution Log**.
Sprint file template:
The sprnts documentations lives under `docs/implplan/SPRINT_*.md`. Each sprint must follow this template:
```md
# Sprint <ID> · <Stream/Topic>
## Topic & Scope
- Summarise the sprint in 24 bullets that read like a short story (what outcomes are expected, why now).
- Summarise the sprint in 24 bullets that read like a short story (expected outcomes and “why now).
- Call out the single owning directory (e.g., `src/Concelier/StellaOps.Concelier.Core`) and the evidence you expect to produce.
- **Working directory:** `<path/to/module>` (explicitly list the root path contributors must work in).
- **Working directory:** `<path/to/module>`.
## Dependencies & Concurrency
- Upstream sprints or artefacts that must land first.
- Confirm peers in the same `CC` decade remain independent so parallel execution is safe.
## Documentation Prerequisites
- List onboarding docs, architecture dossiers, runbooks, ADRs, or experiment notes that contributors must read before flipping any task to `DOING`.
- List onboarding docs, architecture dossiers, runbooks, ADRs, or experiment notes that must be read before tasks are set to `DOING`.
## Delivery Tracker
| # | Task ID | Status | Key dependency / next step | Owners | Task Definition |
@@ -239,10 +240,130 @@ The sprnts documentations lives under `docs/implplan/SPRINT_*.md`. Each sprint m
| 2025-11-15 | Sprint created; awaiting staffing. | Planning |
## Decisions & Risks
- Pending approvals, blocked schema reviews, or risks with a mitigation plan.
- Pending approvals, blocked schema reviews, or risks with mitigation plans.
## Next Checkpoints
- Dated meetings, demos, or cross-team alignment calls with the accountable owners.
- Dated meetings, demos, or cross-team alignment calls with accountable owners.
```
When sprint's task are all marked to DONE. Move the file to docs/impplan/archived.
* **If you find a sprint file whose internal structure deviates significantly from this template, you should normalise it toward this structure while preserving all existing content (log lines, tasks, decisions).**
* Record this normalisation in the **Execution Log** (e.g. “2025-11-16 · Normalised sprint file to standard template; no semantic changes.”).
Additional responsibilities (add-on):
* **Advisories / platform / design decision sync**:
* When platform-level decisions, architecture decisions, or other design choices are confirmed as part of a sprint, ensure they are written down under `docs/` (architecture docs, ADRs, product advisories, or module docs as appropriate).
* Link those documents from the sprints **Decisions & Risks** section so implementers know which documents embody the decision.
---
#### 4.3) As implementer
You may be asked to work on:
* A sprint file (`docs/implplan/SPRINT_*.md`), or
* A specific task within that sprint.
In this role you act as:
* **C# .NET 10 engineer** (backend, libraries, APIs).
* **Angular v17 engineer** (UI).
* **QA automation engineer** (C#, Moq, Playwright, Angular test stack, or other suitable tools).
Implementation principles:
* Always follow .NET 10 and Angular v17 best practices.
* Maximise reuse and composability.
* Maintain determinism: stable ordering, UTC ISO-8601 timestamps, immutable NDJSON where applicable.
Execution rules (very important):
* You do **not** ask clarification questions in implementer mode.
* If you encounter ambiguity or a design decision:
* Mark the task as `BLOCKED` in the sprint `Delivery Tracker`.
* Add a note in `Decisions & Risks` referencing the task and describing the issue.
* Skip to the next unblocked task in the same sprint.
* If all tasks in the current sprint are blocked:
* Look for earlier sprints with unblocked tasks.
* If none exist, look at later sprints for unblocked tasks.
* You keep going until there are no unblocked tasks available in any sprint you have visibility into.
* All requests for further instruction must be encoded into the sprint documents, **not** as questions:
* When you need a decision, assumption, or design clarification, you do **not** ask interactive questions.
* Instead, you:
* Mark the affected task as `BLOCKED`.
* Describe exactly what decision is needed in **Decisions & Risks**.
* If helpful, add a dedicated task entry capturing that decision work.
* Then continue with other unblocked tasks.
Additional constraints:
* **Directory ownership**: Work only inside the modules directory defined by the sprints `Working directory`. Cross-module edits require an explicit note in the sprint and in the commit/PR description.
* **AGENTS.md adherence and scoping**
* Before starting any task in a module, read that modules `AGENTS.md` in full and treat it as your local behavioral contract.
* Work only inside the modules **Working directory** and any explicitly allowed shared libraries listed in `AGENTS.md` or the sprint file.
* If `AGENTS.md` is missing, clearly outdated, or contradicts the sprint / architecture:
* Do **not** ask for clarification from the requester.
* Mark the task as `BLOCKED` in the sprints **Delivery Tracker**.
* Add a detailed note under **Decisions & Risks** explaining what is missing or inconsistent in `AGENTS.md` and that it must be updated by a project manager/architect.
* Optionally add a new task row (e.g., `AGENTS-<module>-UPDATE`) describing the required update.
* Move on to the next unblocked task in the same or another sprint.
* **Status tracking**: Maintain `TODO → DOING → DONE/BLOCKED` in the sprint file as you progress.
* **Tests**:
* Every change must be accompanied by or covered by tests.
* Never regress determinism, ordering, or precedence.
* Test layout example (for Concelier):
* Module tests: `StellaOps.Concelier.<Component>.Tests`
* Shared fixtures/harnesses: `StellaOps.Concelier.Testing`
* **Documentation**:
* When scope, contracts, or workflows change, update the relevant docs under `docs/modules/**`, `docs/api/`, `docs/risk/`, or `docs/airgap/`.
* **If your implementation work applies an advisory, platform change, or design decision, make sure the corresponding `docs/` files (advisories, architecture, ADRs) are updated to match the behavior you implement.**
* Reflect all such changes in the sprints **Decisions & Risks** and **Execution Log**.
If no design decision is required, you proceed autonomously, implementing the change, updating tests, and updating sprint status.
---
### 5) Working Agreement (Global)
1. **Task status discipline**
* Always update task status in `docs/implplan/SPRINT_*.md` when you start (`DOING`), block (`BLOCKED`), finish (`DONE`), or pause (`TODO`) a task.
2. **Prerequisites**
* Confirm that required docs (from `AGENTS.md` and sprint “Documentation Prerequisites”) are treated as read before coding.
3. **Determinism & offline posture**
* Keep outputs deterministic (ordering, timestamps, hashes).
* Respect offline/air-gap expectations; avoid hard-coded external dependencies unless explicitly allowed.
4. **Coordination & contracts**
* When contracts, advisories, platform rules, or workflows change, update:
* The sprint doc (`docs/implplan/SPRINT_*.md`),
* The relevant `docs/` artefacts (product advisories, architecture docs, ADRs, risk or airgap docs),
* And ensure cross-references (links) are present in **Decisions & Risks**.
* **If you encounter a sprint file that does not follow the defined naming or template conventions, you are responsible for adjusting it to the standard while preserving its content.**
5. **Completion**
* When you complete all tasks in scope for your current instruction set, explicitly state that you are done with those tasks.
6. **AGENTS.md discipline**
* Project / technical managers ensure each modules `AGENTS.md` exists, is up to date, and reflects current design and advisory decisions.
* Implementers must read and follow the relevant `AGENTS.md` before coding in a module.
* If a mismatch or gap is found, implementers log it via `BLOCKED` status and the sprints **Decisions & Risks**, and then continue with other work instead of asking for live clarification.
---
### 6) Role Switching
* If an instruction says “as product manager…”, “as project manager…”, or “as implementer…”, you must immediately adopt that roles behavior and constraints.
* If no role is specified:
* Default to **project manager** behavior (validate → plan → propose tasks).
* Under no circumstances should you mix the “no questions” constraint of implementer mode into product / project manager modes. Only implementer mode is forbidden from asking questions.

View File

@@ -1,514 +0,0 @@
Sprint | Task ID | Status | Missing dependency
SPRINT_110_ingestion_evidence | AIAI-31-008 | TODO | AIAI-31-006
SPRINT_110_ingestion_evidence | AIAI-31-008 | TODO | AIAI-31-007
SPRINT_110_ingestion_evidence | CONCELIER-AIAI-31-002 | DOING | CARTO-GRAPH-21-002
SPRINT_110_ingestion_evidence | CONCELIER-AIRGAP-56-001..58-001 | TODO | Evidence Locker attestation contract
SPRINT_110_ingestion_evidence | CONCELIER-AIRGAP-56-001..58-001 | TODO | Link-Not-Merge schema
SPRINT_110_ingestion_evidence | CONCELIER-ATTEST-73-001 | TODO | Evidence Locker contract
SPRINT_110_ingestion_evidence | CONCELIER-CONSOLE-23-001..003 | TODO | Link-Not-Merge schema
SPRINT_110_ingestion_evidence | EXCITITOR-AIAI-31-002 | TODO | Evidence Locker contract
SPRINT_110_ingestion_evidence | EXCITITOR-AIAI-31-002 | TODO | Link-Not-Merge schema
SPRINT_110_ingestion_evidence | EXCITITOR-AIRGAP-56 | TODO | Link-Not-Merge schema
SPRINT_110_ingestion_evidence | EXCITITOR-AIRGAP-56 | TODO | attestation plan
SPRINT_110_ingestion_evidence | EXCITITOR-ATTEST-01-003 | TODO | Evidence Locker contract
SPRINT_110_ingestion_evidence | EXCITITOR-CONN-TRUST-01-001 | TODO | Link-Not-Merge schema
SPRINT_110_ingestion_evidence | EXCITITOR-CONN-TRUST-01-001 | TODO | attestation plan
SPRINT_110_ingestion_evidence | FEEDCONN-ICSCISA-02-012 | BLOCKED | Feed owner remediation plan
SPRINT_110_ingestion_evidence | FEEDCONN-KISA-02-008 | BLOCKED | Feed owner remediation plan
SPRINT_110_ingestion_evidence | MIRROR-CRT-56-001 | TODO | Staffing decision
SPRINT_120_policy_reasoning | LEDGER-29-007 | TODO | Instrument metrics (`ledger_write_latency`
SPRINT_120_policy_reasoning | LEDGER-29-007 | TODO | LEDGER-29-006
SPRINT_120_policy_reasoning | LEDGER-29-007 | TODO | Merkle anchoring alerts
SPRINT_120_policy_reasoning | LEDGER-29-007 | TODO | `ledger_events_total`)
SPRINT_120_policy_reasoning | LEDGER-29-007 | TODO | `projection_lag_seconds`
SPRINT_120_policy_reasoning | LEDGER-29-007 | TODO | structured logs
SPRINT_120_policy_reasoning | LEDGER-29-008 | TODO | Develop unit/property/integration tests
SPRINT_120_policy_reasoning | LEDGER-29-008 | TODO | determinism harness
SPRINT_120_policy_reasoning | LEDGER-29-008 | TODO | replay/restore tooling
SPRINT_120_policy_reasoning | LEDGER-29-009 | TODO | Merkle anchor externalization (optional)
SPRINT_120_policy_reasoning | LEDGER-29-009 | TODO | Provide deployment manifests (Helm/Compose)
SPRINT_120_policy_reasoning | LEDGER-29-009 | TODO | backup/restore guidance
SPRINT_120_policy_reasoning | LEDGER-34-101 | TODO | Link orchestrator run ledger exports into Findings Ledger provenance chain
SPRINT_120_policy_reasoning | LEDGER-34-101 | TODO | index by artifact hash
SPRINT_120_policy_reasoning | LEDGER-AIRGAP-56-001 | TODO | Record bundle provenance (`bundle_id`
SPRINT_120_policy_reasoning | LEDGER-AIRGAP-56-001 | TODO | `merkle_root`
SPRINT_120_policy_reasoning | LEDGER-AIRGAP-56-001 | TODO | `time_anchor`) on ledger events for advisories/VEX/policies imported via Mirror Bundles
SPRINT_120_policy_reasoning | LEDGER-AIRGAP-56-002 | TODO | Surface staleness metrics for findings
SPRINT_120_policy_reasoning | LEDGER-AIRGAP-56-002 | TODO | block risk-critical exports when stale beyond thresholds
SPRINT_120_policy_reasoning | LEDGER-AIRGAP-57-001 | TODO | Link findings evidence snapshots to portable evidence bundles
SPRINT_120_policy_reasoning | LEDGER-AIRGAP-58-001 | TODO | Emit timeline events for bundle import impacts (new findings
SPRINT_120_policy_reasoning | LEDGER-ATTEST-73-001 | TODO | Persist pointers from findings to verification reports
SPRINT_120_policy_reasoning | LEDGER-ATTEST-73-001 | TODO | attestation envelopes for explainability
SPRINT_121_policy_reasoning | LEDGER-ATTEST-73-002 | TODO | Enable search/filter in findings projections by verification result
SPRINT_121_policy_reasoning | LEDGER-EXPORT-35-001 | TODO | Provide paginated streaming endpoints for advisories
SPRINT_121_policy_reasoning | LEDGER-EXPORT-35-001 | TODO | SBOMs
SPRINT_121_policy_reasoning | LEDGER-EXPORT-35-001 | TODO | VEX
SPRINT_121_policy_reasoning | LEDGER-EXPORT-35-001 | TODO | findings aligned with export filters
SPRINT_121_policy_reasoning | LEDGER-EXPORT-35-001 | TODO | including deterministic ordering
SPRINT_121_policy_reasoning | LEDGER-EXPORT-35-001 | TODO | provenance metadata
SPRINT_121_policy_reasoning | LEDGER-OAS-61-001 | TODO | Expand Findings Ledger OAS to include projections
SPRINT_121_policy_reasoning | LEDGER-OAS-61-001 | TODO | evidence lookups
SPRINT_121_policy_reasoning | LEDGER-OAS-61-001 | TODO | filter parameters with examples
SPRINT_121_policy_reasoning | LEDGER-OAS-61-002 | TODO | Implement `/.well-known/openapi` endpoint
SPRINT_121_policy_reasoning | LEDGER-OAS-62-001 | TODO | Provide SDK test cases for findings pagination
SPRINT_121_policy_reasoning | LEDGER-OAS-62-001 | TODO | evidence links
SPRINT_121_policy_reasoning | LEDGER-OAS-62-001 | TODO | filtering
SPRINT_121_policy_reasoning | LEDGER-OAS-63-001 | TODO | Support deprecation headers
SPRINT_121_policy_reasoning | LEDGER-OBS-50-001 | TODO | Integrate telemetry core within ledger writer/projector services
SPRINT_121_policy_reasoning | LEDGER-OBS-50-001 | TODO | emitting structured logs
SPRINT_121_policy_reasoning | LEDGER-OBS-50-001 | TODO | projector replay
SPRINT_121_policy_reasoning | LEDGER-OBS-50-001 | TODO | query APIs with tenant context
SPRINT_121_policy_reasoning | LEDGER-OBS-50-001 | TODO | trace spans for ledger append
SPRINT_121_policy_reasoning | LEDGER-OBS-51-001 | TODO | Publish metrics for ledger latency
SPRINT_121_policy_reasoning | LEDGER-OBS-51-001 | TODO | event throughput
SPRINT_121_policy_reasoning | LEDGER-OBS-51-001 | TODO | policy evaluation linkage. Define SLOs (ledger append P95 < 1s
SPRINT_121_policy_reasoning | LEDGER-OBS-51-001 | TODO | projector lag
SPRINT_121_policy_reasoning | LEDGER-OBS-51-001 | TODO | replay lag < 30s) with burn-rate alerts
SPRINT_121_policy_reasoning | LEDGER-OBS-52-001 | TODO | Emit timeline events for ledger writes
SPRINT_121_policy_reasoning | LEDGER-OBS-52-001 | TODO | `ledger.projection.updated`) with trace ID
SPRINT_121_policy_reasoning | LEDGER-OBS-52-001 | TODO | policy version
SPRINT_121_policy_reasoning | LEDGER-OBS-52-001 | TODO | projector commits (`ledger.event.appended`
SPRINT_121_policy_reasoning | LEDGER-OBS-53-001 | TODO | Persist evidence bundle references (evaluation/job capsules) alongside ledger entries
SPRINT_121_policy_reasoning | LEDGER-OBS-53-001 | TODO | exposing lookup API linking findings to evidence manifests
SPRINT_121_policy_reasoning | LEDGER-OBS-54-001 | TODO | Verify attestation references for ledger-derived exports
SPRINT_121_policy_reasoning | LEDGER-OBS-54-001 | TODO | expose `/ledger/attestations` endpoint returning DSSE verification state
SPRINT_121_policy_reasoning | LEDGER-OBS-55-001 | TODO | Enhance incident mode to record additional replay diagnostics (lag traces
SPRINT_121_policy_reasoning | LEDGER-OBS-55-001 | TODO | conflict snapshots)
SPRINT_121_policy_reasoning | LEDGER-PACKS-42-001 | TODO | CLI offline mode
SPRINT_121_policy_reasoning | LEDGER-PACKS-42-001 | TODO | Provide snapshot/time-travel APIs
SPRINT_121_policy_reasoning | LEDGER-PACKS-42-001 | TODO | digestable exports for task pack simulation
SPRINT_121_policy_reasoning | LEDGER-RISK-66-001 | TODO | Add schema migrations for `risk_score`
SPRINT_121_policy_reasoning | LEDGER-RISK-66-001 | TODO | `explanation_id`
SPRINT_121_policy_reasoning | LEDGER-RISK-66-001 | TODO | `profile_version`
SPRINT_121_policy_reasoning | LEDGER-RISK-66-001 | TODO | `risk_severity`
SPRINT_121_policy_reasoning | LEDGER-RISK-66-001 | TODO | supporting indexes
SPRINT_122_policy_reasoning | LEDGER-RISK-67-001 | TODO | Expose query APIs for scored findings with score/severity filters
SPRINT_122_policy_reasoning | LEDGER-RISK-67-001 | TODO | pagination
SPRINT_122_policy_reasoning | LEDGER-RISK-68-001 | TODO | Enable export of scored findings
SPRINT_122_policy_reasoning | LEDGER-RISK-69-001 | TODO | Emit metrics/dashboards for scoring latency
SPRINT_122_policy_reasoning | LEDGER-RISK-69-001 | TODO | result freshness
SPRINT_122_policy_reasoning | LEDGER-RISK-69-001 | TODO | severity distribution
SPRINT_122_policy_reasoning | LEDGER-TEN-48-001 | TODO | Partition ledger tables by tenant/project
SPRINT_122_policy_reasoning | LEDGER-TEN-48-001 | TODO | enable RLS
SPRINT_122_policy_reasoning | LEDGER-TEN-48-001 | TODO | stamp audit metadata
SPRINT_122_policy_reasoning | LEDGER-TEN-48-001 | TODO | update queries/events
SPRINT_123_policy_reasoning | EXPORT-CONSOLE-23-001 | TODO | Build evidence bundle/export generator producing signed manifests
SPRINT_123_policy_reasoning | EXPORT-CONSOLE-23-001 | TODO | CSV/JSON replay endpoints
SPRINT_123_policy_reasoning | EXPORT-CONSOLE-23-001 | TODO | expose progress telemetry
SPRINT_123_policy_reasoning | EXPORT-CONSOLE-23-001 | TODO | integrate with scheduler jobs
SPRINT_123_policy_reasoning | EXPORT-CONSOLE-23-001 | TODO | trace attachments
SPRINT_123_policy_reasoning | POLICY-AIRGAP-56-001 | TODO | Support policy pack imports from Mirror Bundles
SPRINT_123_policy_reasoning | POLICY-AIRGAP-56-001 | TODO | ensure deterministic caching
SPRINT_123_policy_reasoning | POLICY-AIRGAP-56-001 | TODO | track `bundle_id` metadata
SPRINT_123_policy_reasoning | POLICY-AIRGAP-57-001 | TODO | Enforce sealed-mode guardrails in evaluation (no outbound fetch)
SPRINT_123_policy_reasoning | POLICY-AIRGAP-57-002 | TODO | Annotate rule explanations with staleness information
SPRINT_123_policy_reasoning | POLICY-AIRGAP-57-002 | TODO | fallback data (cached EPSS
SPRINT_123_policy_reasoning | POLICY-AOC-19-001 | TODO | Add Roslyn/CI lint preventing ingestion projects from referencing Policy merge/severity helpers
SPRINT_123_policy_reasoning | POLICY-AOC-19-001 | TODO | block forbidden writes at compile time
SPRINT_123_policy_reasoning | POLICY-AOC-19-003 | TODO | Update readers/processors to consume only `content.raw`
SPRINT_123_policy_reasoning | POLICY-AOC-19-003 | TODO | `identifiers`
SPRINT_123_policy_reasoning | POLICY-AOC-19-003 | TODO | `linkset`. Remove dependencies on legacy normalized fields
SPRINT_123_policy_reasoning | POLICY-AOC-19-004 | TODO | Add regression tests ensuring policy derived outputs remain deterministic when ingesting revised raw docs (supersedes)
SPRINT_123_policy_reasoning | POLICY-ATTEST-73-001 | TODO | Introduce VerificationPolicy object: schema
SPRINT_123_policy_reasoning | POLICY-ATTEST-73-001 | TODO | lifecycle
SPRINT_123_policy_reasoning | POLICY-ATTEST-73-001 | TODO | persistence
SPRINT_123_policy_reasoning | POLICY-ATTEST-73-001 | TODO | versioning
SPRINT_123_policy_reasoning | POLICY-ATTEST-73-002 | TODO | Provide Policy Studio editor with validation
SPRINT_123_policy_reasoning | POLICY-ATTEST-73-002 | TODO | dry-run simulation
SPRINT_123_policy_reasoning | POLICY-ATTEST-74-001 | TODO | Integrate verification policies into attestor verification pipeline with caching
SPRINT_123_policy_reasoning | POLICY-CONSOLE-23-001 | TODO | Optimize findings/explain APIs for Console: cursor-based pagination at scale
SPRINT_123_policy_reasoning | POLICY-CONSOLE-23-001 | TODO | aggregation hints for dashboard cards. Ensure deterministic ordering
SPRINT_123_policy_reasoning | POLICY-CONSOLE-23-001 | TODO | expose provenance refs
SPRINT_123_policy_reasoning | POLICY-CONSOLE-23-001 | TODO | global filter parameters (severity bands
SPRINT_123_policy_reasoning | POLICY-CONSOLE-23-001 | TODO | policy version
SPRINT_123_policy_reasoning | POLICY-CONSOLE-23-001 | TODO | rule trace summarization
SPRINT_123_policy_reasoning | POLICY-CONSOLE-23-001 | TODO | time window)
SPRINT_124_policy_reasoning | POLICY-CONSOLE-23-002 | TODO | Produce simulation diff metadata (before/after counts
SPRINT_124_policy_reasoning | POLICY-CONSOLE-23-002 | TODO | approval state endpoints consumed by Console policy workspace
SPRINT_124_policy_reasoning | POLICY-CONSOLE-23-002 | TODO | rule impact summaries)
SPRINT_124_policy_reasoning | POLICY-CONSOLE-23-002 | TODO | severity deltas
SPRINT_124_policy_reasoning | POLICY-ENGINE-20-002 | BLOCKED | Build deterministic evaluator honoring lexical/priority order
SPRINT_124_policy_reasoning | POLICY-ENGINE-20-002 | BLOCKED | first-match semantics
SPRINT_124_policy_reasoning | POLICY-ENGINE-20-002 | BLOCKED | safe value types (no wall-clock/network access)
SPRINT_124_policy_reasoning | POLICY-ENGINE-20-003 | TODO | Implement selection joiners resolving SBOM↔advisory↔VEX tuples using linksets
SPRINT_124_policy_reasoning | POLICY-ENGINE-20-003 | TODO | PURL equivalence tables
SPRINT_124_policy_reasoning | POLICY-ENGINE-20-004 | TODO | Ship materialization writer that upserts into `effective_finding_{policyId}` with append-only history
SPRINT_124_policy_reasoning | POLICY-ENGINE-20-004 | TODO | tenant scoping
SPRINT_124_policy_reasoning | POLICY-ENGINE-20-005 | TODO | Enforce determinism guard banning wall-clock
SPRINT_124_policy_reasoning | POLICY-ENGINE-20-005 | TODO | RNG
SPRINT_124_policy_reasoning | POLICY-ENGINE-20-006 | TODO | Implement incremental orchestrator reacting to advisory/vex/SBOM change streams
SPRINT_124_policy_reasoning | POLICY-ENGINE-20-007 | TODO | Emit structured traces/logs of rule hits with sampling controls
SPRINT_124_policy_reasoning | POLICY-ENGINE-20-007 | TODO | `vex_overrides_total`)
SPRINT_124_policy_reasoning | POLICY-ENGINE-20-007 | TODO | metrics (`rules_fired_total`
SPRINT_124_policy_reasoning | POLICY-ENGINE-20-008 | TODO | Add unit/property/golden/perf suites covering policy compilation
SPRINT_124_policy_reasoning | POLICY-ENGINE-20-008 | TODO | determinism
SPRINT_124_policy_reasoning | POLICY-ENGINE-20-008 | TODO | evaluation correctness
SPRINT_124_policy_reasoning | POLICY-ENGINE-20-009 | TODO | Define Mongo schemas/indexes for `policies`
SPRINT_124_policy_reasoning | POLICY-ENGINE-20-009 | TODO | `effective_finding_*`
SPRINT_124_policy_reasoning | POLICY-ENGINE-20-009 | TODO | `policy_runs`
SPRINT_124_policy_reasoning | POLICY-ENGINE-20-009 | TODO | implement migrations
SPRINT_124_policy_reasoning | POLICY-ENGINE-27-001 | TODO | Extend compile outputs to include rule coverage metadata
SPRINT_124_policy_reasoning | POLICY-ENGINE-27-001 | TODO | inline documentation
SPRINT_124_policy_reasoning | POLICY-ENGINE-27-001 | TODO | rule index for editor autocomplete
SPRINT_124_policy_reasoning | POLICY-ENGINE-27-001 | TODO | symbol table
SPRINT_124_policy_reasoning | POLICY-ENGINE-27-002 | TODO | Enhance simulate endpoints to emit rule firing counts
SPRINT_124_policy_reasoning | POLICY-ENGINE-27-002 | TODO | heatmap aggregates
SPRINT_124_policy_reasoning | POLICY-ENGINE-27-002 | TODO | sampled explain traces with deterministic ordering
SPRINT_124_policy_reasoning | POLICY-ENGINE-29-001 | TODO | Implement batch evaluation endpoint (`POST /policy/eval/batch`) returning determinations + rationale chain for sets of `(artifact
SPRINT_124_policy_reasoning | POLICY-ENGINE-29-001 | TODO | POLICY-ENGINE-27-004
SPRINT_124_policy_reasoning | POLICY-ENGINE-29-001 | TODO | advisory)` tuples
SPRINT_124_policy_reasoning | POLICY-ENGINE-29-001 | TODO | purl
SPRINT_124_policy_reasoning | POLICY-ENGINE-29-001 | TODO | support pagination
SPRINT_124_policy_reasoning | POLICY-ENGINE-29-001 | TODO | version
SPRINT_124_policy_reasoning | POLICY-ENGINE-29-002 | TODO | Provide streaming simulation API comparing two policy versions
SPRINT_124_policy_reasoning | POLICY-ENGINE-29-002 | TODO | returning per-finding deltas without writes
SPRINT_125_mirror | MIRROR-CRT-56-001 | TODO | Staffing decision
SPRINT_125_policy_reasoning | POLICY-ENGINE-29-003 | TODO | Surface path/scope awareness in determinations (signal optional/dev/test downgrade
SPRINT_125_policy_reasoning | POLICY-ENGINE-29-004 | TODO | Add metrics/logs for batch evaluation (latency
SPRINT_125_policy_reasoning | POLICY-ENGINE-29-004 | TODO | queue depth)
SPRINT_125_policy_reasoning | POLICY-ENGINE-29-004 | TODO | simulation diff counts
SPRINT_125_policy_reasoning | POLICY-ENGINE-30-001 | TODO | Define overlay contract for graph nodes/edges (status
SPRINT_125_policy_reasoning | POLICY-ENGINE-30-001 | TODO | expose projection API for Cartographer
SPRINT_125_policy_reasoning | POLICY-ENGINE-30-001 | TODO | path relevance)
SPRINT_125_policy_reasoning | POLICY-ENGINE-30-001 | TODO | rationale refs
SPRINT_125_policy_reasoning | POLICY-ENGINE-30-001 | TODO | severity
SPRINT_125_policy_reasoning | POLICY-ENGINE-30-002 | TODO | Implement simulation bridge returning on-the-fly overlays for Cartographer/Graph Explorer when invoking Policy Engine simulate
SPRINT_125_policy_reasoning | POLICY-ENGINE-30-002 | TODO | ensure no writes
SPRINT_125_policy_reasoning | POLICY-ENGINE-30-101 | TODO | Surface trust weighting configuration (issuer base weights
SPRINT_125_policy_reasoning | POLICY-ENGINE-30-101 | TODO | recency decay
SPRINT_125_policy_reasoning | POLICY-ENGINE-30-101 | TODO | scope adjustments) for VEX Lens via Policy Studio + API
SPRINT_125_policy_reasoning | POLICY-ENGINE-30-101 | TODO | signature modifiers
SPRINT_125_policy_reasoning | POLICY-ENGINE-31-001 | TODO | Expose policy knobs for Advisory AI (trust presets
SPRINT_125_policy_reasoning | POLICY-ENGINE-31-001 | TODO | TTLs) via Policy Studio
SPRINT_125_policy_reasoning | POLICY-ENGINE-31-001 | TODO | plan ranking weights
SPRINT_125_policy_reasoning | POLICY-ENGINE-31-001 | TODO | temperature
SPRINT_125_policy_reasoning | POLICY-ENGINE-31-001 | TODO | token limits
SPRINT_125_policy_reasoning | POLICY-ENGINE-31-002 | TODO | Provide batch endpoint delivering policy context (thresholds
SPRINT_125_policy_reasoning | POLICY-ENGINE-32-101 | TODO | Define orchestrator `policy_eval` job schema
SPRINT_125_policy_reasoning | POLICY-ENGINE-32-101 | TODO | idempotency keys
SPRINT_125_policy_reasoning | POLICY-ENGINE-33-101 | TODO | Implement orchestrator-driven policy evaluation workers using SDK heartbeats
SPRINT_125_policy_reasoning | POLICY-ENGINE-33-101 | TODO | respecting throttles
SPRINT_125_policy_reasoning | POLICY-ENGINE-34-101 | TODO | Publish policy run ledger exports + SLO burn-rate metrics to orchestrator
SPRINT_125_policy_reasoning | POLICY-ENGINE-35-201 | TODO | Expose deterministic policy snapshot API
SPRINT_125_policy_reasoning | POLICY-ENGINE-38-201 | TODO | Emit enriched policy violation events (decision rationale ids
SPRINT_125_policy_reasoning | POLICY-ENGINE-40-001 | TODO | Update severity/status evaluation pipelines to consume multiple source severities per linkset
SPRINT_125_policy_reasoning | POLICY-ENGINE-40-001 | TODO | preferred source
SPRINT_125_policy_reasoning | POLICY-ENGINE-40-001 | TODO | supporting selection strategies (max
SPRINT_125_policy_reasoning | POLICY-ENGINE-40-002 | TODO | Accept VEX linkset conflicts
SPRINT_125_policy_reasoning | POLICY-ENGINE-40-002 | TODO | provide rationale references in effective findings
SPRINT_126_policy_reasoning | POLICY-ENGINE-40-003 | TODO | Graph Explorer) to request policy decisions with source evidence summaries (top severity sources
SPRINT_126_policy_reasoning | POLICY-ENGINE-40-003 | TODO | Provide API/SDK utilities for consumers (Web Scanner
SPRINT_126_policy_reasoning | POLICY-ENGINE-50-001 | TODO | Implement SPL compiler: validate YAML
SPRINT_126_policy_reasoning | POLICY-ENGINE-50-001 | TODO | canonicalize
SPRINT_126_policy_reasoning | POLICY-ENGINE-50-001 | TODO | produce signed bundle
SPRINT_126_policy_reasoning | POLICY-ENGINE-50-001 | TODO | store artifact in object storage
SPRINT_126_policy_reasoning | POLICY-ENGINE-50-002 | TODO | Build runtime evaluator executing compiled plans over advisory/vex linksets + SBOM asset metadata with deterministic caching (Redis)
SPRINT_126_policy_reasoning | POLICY-ENGINE-50-003 | TODO | Implement evaluation/compilation metrics
SPRINT_126_policy_reasoning | POLICY-ENGINE-50-003 | TODO | `policy_compiles_total`
SPRINT_126_policy_reasoning | POLICY-ENGINE-50-003 | TODO | structured logs (`policy_eval_seconds`
SPRINT_126_policy_reasoning | POLICY-ENGINE-50-003 | TODO | tracing
SPRINT_126_policy_reasoning | POLICY-ENGINE-50-004 | TODO | Build event pipeline: subscribe to linkset/SBOM updates
SPRINT_126_policy_reasoning | POLICY-ENGINE-50-004 | TODO | schedule re-eval jobs
SPRINT_126_policy_reasoning | POLICY-ENGINE-50-005 | TODO | Design
SPRINT_126_policy_reasoning | POLICY-ENGINE-50-005 | TODO | TTL
SPRINT_126_policy_reasoning | POLICY-ENGINE-50-005 | TODO | `policy_artifacts` collections with indexes
SPRINT_126_policy_reasoning | POLICY-ENGINE-50-005 | TODO | `policy_revisions`
SPRINT_126_policy_reasoning | POLICY-ENGINE-50-005 | TODO | `policy_runs`
SPRINT_126_policy_reasoning | POLICY-ENGINE-50-005 | TODO | implement `policy_packs`
SPRINT_126_policy_reasoning | POLICY-ENGINE-50-006 | TODO | Implement explainer persistence + retrieval APIs linking decisions to explanation tree
SPRINT_126_policy_reasoning | POLICY-ENGINE-50-007 | TODO | Provide evaluation worker host/DI wiring
SPRINT_126_policy_reasoning | POLICY-ENGINE-60-001 | TODO | Maintain Redis effective decision maps per asset/snapshot for Graph overlays
SPRINT_126_policy_reasoning | POLICY-ENGINE-60-001 | TODO | implement versioning
SPRINT_126_policy_reasoning | POLICY-ENGINE-60-002 | TODO | Expose simulation bridge for Graph What-if APIs
SPRINT_126_policy_reasoning | POLICY-ENGINE-60-002 | TODO | supporting hypothetical SBOM diffs
SPRINT_126_policy_reasoning | POLICY-ENGINE-70-002 | TODO | Design
SPRINT_126_policy_reasoning | POLICY-ENGINE-70-002 | TODO | `exception_bindings`) with indexes
SPRINT_126_policy_reasoning | POLICY-ENGINE-70-002 | TODO | `exception_reviews`
SPRINT_126_policy_reasoning | POLICY-ENGINE-70-002 | TODO | create Mongo collections (`exceptions`
SPRINT_126_policy_reasoning | POLICY-ENGINE-70-002 | TODO | migrations
SPRINT_126_policy_reasoning | POLICY-ENGINE-70-004 | TODO | Extend metrics/tracing/logging for exception application (latency
SPRINT_126_policy_reasoning | POLICY-ENGINE-70-004 | TODO | counts
SPRINT_126_policy_reasoning | POLICY-ENGINE-70-004 | TODO | expiring events)
SPRINT_126_policy_reasoning | POLICY-ENGINE-70-005 | TODO | Provide APIs/workers hook for exception activation/expiry (auto start/end)
SPRINT_126_policy_reasoning | POLICY-ENGINE-80-001 | TODO | Integrate reachability/exploitability inputs into evaluation pipeline (state/score/confidence) with caching
SPRINT_126_policy_reasoning | POLICY-RISK-90-001 | TODO | Ingest entropy penalty inputs from Scanner (`entropy.report.json`
SPRINT_126_policy_reasoning | POLICY-RISK-90-001 | TODO | `layer_summary.json`)
SPRINT_126_policy_reasoning | POLICY-RISK-90-001 | TODO | expose explanations/metrics for opaque ratio penalties (`docs/modules/scanner/entropy.md`).
SPRINT_126_policy_reasoning | POLICY-RISK-90-001 | TODO | extend trust algebra with configurable weights/caps
SPRINT_127_policy_reasoning | POLICY-ENGINE-80-002 | TODO | Create joining layer to read `reachability_facts` efficiently (indexes
SPRINT_127_policy_reasoning | POLICY-ENGINE-80-002 | TODO | projections)
SPRINT_127_policy_reasoning | POLICY-ENGINE-80-003 | TODO | Extend SPL predicates/actions to reference reachability state/score/confidence
SPRINT_127_policy_reasoning | POLICY-ENGINE-80-004 | TODO | Emit metrics (`policy_reachability_applied_total`
SPRINT_127_policy_reasoning | POLICY-ENGINE-80-004 | TODO | `policy_reachability_cache_hit_ratio`)
SPRINT_127_policy_reasoning | POLICY-OBS-50-001 | TODO | Integrate telemetry core into policy API + worker hosts
SPRINT_127_policy_reasoning | POLICY-OBS-50-001 | TODO | `decision_effect`
SPRINT_127_policy_reasoning | POLICY-OBS-50-001 | TODO | `policy_version`
SPRINT_127_policy_reasoning | POLICY-OBS-50-001 | TODO | ensuring spans/logs cover compile/evaluate flows with `tenant_id`
SPRINT_127_policy_reasoning | POLICY-OBS-50-001 | TODO | trace IDs
SPRINT_127_policy_reasoning | POLICY-OBS-51-001 | TODO | Emit golden-signal metrics (compile latency
SPRINT_127_policy_reasoning | POLICY-OBS-51-001 | TODO | evaluate latency
SPRINT_127_policy_reasoning | POLICY-OBS-51-001 | TODO | override counts)
SPRINT_127_policy_reasoning | POLICY-OBS-51-001 | TODO | rule hits
SPRINT_127_policy_reasoning | POLICY-OBS-52-001 | TODO | Emit timeline events `policy.evaluate.started`
SPRINT_127_policy_reasoning | POLICY-OBS-52-001 | TODO | `policy.decision.recorded` with trace IDs
SPRINT_127_policy_reasoning | POLICY-OBS-52-001 | TODO | `policy.evaluate.completed`
SPRINT_127_policy_reasoning | POLICY-OBS-52-001 | TODO | input digests
SPRINT_127_policy_reasoning | POLICY-OBS-52-001 | TODO | rule summary. Provide contract tests
SPRINT_127_policy_reasoning | POLICY-OBS-53-001 | TODO | Produce evaluation evidence bundles (inputs slice
SPRINT_127_policy_reasoning | POLICY-OBS-53-001 | TODO | config snapshot) through evidence locker integration
SPRINT_127_policy_reasoning | POLICY-OBS-53-001 | TODO | engine version
SPRINT_127_policy_reasoning | POLICY-OBS-53-001 | TODO | rule trace
SPRINT_127_policy_reasoning | POLICY-OBS-54-001 | TODO | Generate DSSE attestations for evaluation outputs
SPRINT_127_policy_reasoning | POLICY-OBS-54-001 | TODO | expose `/evaluations/{id}/attestation`
SPRINT_127_policy_reasoning | POLICY-OBS-55-001 | TODO | Implement incident mode sampling overrides (full rule trace capture
SPRINT_127_policy_reasoning | POLICY-OBS-55-001 | TODO | extended retention) with auto-activation on SLO breach
SPRINT_127_policy_reasoning | POLICY-RISK-66-001 | TODO | Develop initial JSON Schema for RiskProfile (signals
SPRINT_127_policy_reasoning | POLICY-RISK-66-001 | TODO | overrides) with validator stubs
SPRINT_127_policy_reasoning | POLICY-RISK-66-001 | TODO | severity
SPRINT_127_policy_reasoning | POLICY-RISK-66-001 | TODO | transforms
SPRINT_127_policy_reasoning | POLICY-RISK-66-001 | TODO | weights
SPRINT_127_policy_reasoning | POLICY-RISK-66-002 | TODO | Implement inheritance/merge logic with conflict detection
SPRINT_127_policy_reasoning | POLICY-RISK-66-003 | TODO | Integrate RiskProfile schema into Policy Engine configuration
SPRINT_127_policy_reasoning | POLICY-RISK-66-003 | TODO | ensuring validation
SPRINT_127_policy_reasoning | POLICY-RISK-66-004 | TODO | Extend Policy libraries to load/save RiskProfile documents
SPRINT_127_policy_reasoning | POLICY-RISK-66-004 | TODO | compute content hashes
SPRINT_127_policy_reasoning | POLICY-RISK-67-001 | TODO | Integrate profile storage
SPRINT_128_policy_reasoning | POLICY-RISK-67-002 | TODO | Implement profile lifecycle APIs (`/risk/profiles` create/publish/deprecate)
SPRINT_128_policy_reasoning | POLICY-RISK-67-002 | TODO | Publish `.well-known/risk-profile-schema` endpoint
SPRINT_128_policy_reasoning | POLICY-RISK-67-003 | TODO | Provide policy-layer APIs to trigger risk simulations
SPRINT_128_policy_reasoning | POLICY-RISK-68-001 | TODO | Implement scope selectors
SPRINT_128_policy_reasoning | POLICY-RISK-68-001 | TODO | Provide simulation API bridging Policy Studio with risk engine
SPRINT_128_policy_reasoning | POLICY-RISK-68-001 | TODO | precedence rules
SPRINT_128_policy_reasoning | POLICY-RISK-68-001 | TODO | returns distributions
SPRINT_128_policy_reasoning | POLICY-RISK-68-002 | TODO | Add override/adjustment support with audit metadata
SPRINT_128_policy_reasoning | POLICY-RISK-69-001 | TODO | Emit events/notifications on profile publish
SPRINT_128_policy_reasoning | POLICY-RISK-69-001 | TODO | deprecate
SPRINT_128_policy_reasoning | POLICY-SPL-23-001 | TODO | Define SPL v1 YAML + JSON Schema
SPRINT_128_policy_reasoning | POLICY-SPL-23-001 | TODO | VEX precedence
SPRINT_128_policy_reasoning | POLICY-SPL-23-001 | TODO | exceptions
SPRINT_128_policy_reasoning | POLICY-SPL-23-001 | TODO | including advisory rules
SPRINT_128_policy_reasoning | POLICY-SPL-23-001 | TODO | layering metadata. Publish schema resources
SPRINT_128_policy_reasoning | POLICY-SPL-23-001 | TODO | severity mapping
SPRINT_128_policy_reasoning | POLICY-SPL-23-001 | TODO | validation fixtures
SPRINT_128_policy_reasoning | POLICY-SPL-23-002 | TODO | Implement canonicalizer that normalizes policy packs (ordering
SPRINT_128_policy_reasoning | POLICY-SPL-23-002 | TODO | computes content hash
SPRINT_128_policy_reasoning | POLICY-SPL-23-002 | TODO | defaults)
SPRINT_128_policy_reasoning | POLICY-SPL-23-003 | TODO | Build policy layering/override engine (global/org/project/env/exception) with field-level precedence matrices
SPRINT_128_policy_reasoning | POLICY-SPL-23-004 | TODO | Design explanation tree model (rule hits
SPRINT_128_policy_reasoning | POLICY-SPL-23-004 | TODO | UI
SPRINT_128_policy_reasoning | POLICY-SPL-23-004 | TODO | decisions)
SPRINT_128_policy_reasoning | POLICY-SPL-23-004 | TODO | inputs
SPRINT_128_policy_reasoning | POLICY-SPL-23-004 | TODO | persistence structures reused by runtime
SPRINT_128_policy_reasoning | POLICY-SPL-23-005 | TODO | Create migration tool to snapshot existing behavior into baseline SPL packs (`org.core.baseline`)
SPRINT_128_policy_reasoning | POLICY-SPL-23-005 | TODO | including policy docs
SPRINT_128_policy_reasoning | POLICY-SPL-24-001 | TODO | Extend SPL schema to expose reachability/exploitability predicates
SPRINT_128_policy_reasoning | POLICY-SPL-24-001 | TODO | update documentation
SPRINT_128_policy_reasoning | POLICY-SPL-24-001 | TODO | weighting functions
SPRINT_129_policy_reasoning | POLICY-TEN-48-001 | TODO | Add `tenant_id`/`project_id` columns
SPRINT_129_policy_reasoning | POLICY-TEN-48-001 | TODO | emit rationale IDs including tenant metadata
SPRINT_129_policy_reasoning | POLICY-TEN-48-001 | TODO | enable RLS
SPRINT_129_policy_reasoning | POLICY-TEN-48-001 | TODO | update evaluators to require tenant context
SPRINT_129_policy_reasoning | REGISTRY-API-27-001 | TODO | Define OpenAPI specification covering workspaces
SPRINT_129_policy_reasoning | REGISTRY-API-27-001 | TODO | attestations
SPRINT_129_policy_reasoning | REGISTRY-API-27-001 | TODO | promotions
SPRINT_129_policy_reasoning | REGISTRY-API-27-001 | TODO | publish typed clients for Console/CLI
SPRINT_129_policy_reasoning | REGISTRY-API-27-001 | TODO | reviews
SPRINT_129_policy_reasoning | REGISTRY-API-27-001 | TODO | simulations
SPRINT_129_policy_reasoning | REGISTRY-API-27-001 | TODO | versions
SPRINT_129_policy_reasoning | REGISTRY-API-27-002 | TODO | Implement workspace storage (Mongo collections
SPRINT_129_policy_reasoning | REGISTRY-API-27-002 | TODO | diff history
SPRINT_129_policy_reasoning | REGISTRY-API-27-002 | TODO | object storage buckets) with CRUD endpoints
SPRINT_129_policy_reasoning | REGISTRY-API-27-003 | TODO | Integrate compile endpoint: forward source bundle to Policy Engine
SPRINT_129_policy_reasoning | REGISTRY-API-27-003 | TODO | persist diagnostics
SPRINT_129_policy_reasoning | REGISTRY-API-27-003 | TODO | rule index
SPRINT_129_policy_reasoning | REGISTRY-API-27-003 | TODO | symbol table
SPRINT_129_policy_reasoning | REGISTRY-API-27-004 | TODO | Implement quick simulation API with request limits (sample size
SPRINT_129_policy_reasoning | REGISTRY-API-27-004 | TODO | heatmap
SPRINT_129_policy_reasoning | REGISTRY-API-27-004 | TODO | returning counts
SPRINT_129_policy_reasoning | REGISTRY-API-27-004 | TODO | timeouts)
SPRINT_129_policy_reasoning | REGISTRY-API-27-005 | TODO | Build batch simulation orchestration: enqueue shards
SPRINT_129_policy_reasoning | REGISTRY-API-27-005 | TODO | collect partials
SPRINT_129_policy_reasoning | REGISTRY-API-27-005 | TODO | reduce deltas
SPRINT_129_policy_reasoning | REGISTRY-API-27-006 | TODO | Implement review workflow (comments
SPRINT_129_policy_reasoning | REGISTRY-API-27-006 | TODO | required approvers
SPRINT_129_policy_reasoning | REGISTRY-API-27-006 | TODO | status transitions) with audit trails
SPRINT_129_policy_reasoning | REGISTRY-API-27-006 | TODO | votes
SPRINT_129_policy_reasoning | REGISTRY-API-27-007 | TODO | Implement publish pipeline: sign source/compiled digests
SPRINT_129_policy_reasoning | REGISTRY-API-27-007 | TODO | create attestations
SPRINT_129_policy_reasoning | REGISTRY-API-27-007 | TODO | mark version immutable
SPRINT_129_policy_reasoning | REGISTRY-API-27-008 | TODO | Implement promotion bindings per tenant/environment with canary subsets
SPRINT_129_policy_reasoning | REGISTRY-API-27-008 | TODO | rollback path
SPRINT_129_policy_reasoning | REGISTRY-API-27-009 | TODO | Instrument metrics/logs/traces (compile time
SPRINT_129_policy_reasoning | REGISTRY-API-27-009 | TODO | approval latency)
SPRINT_129_policy_reasoning | REGISTRY-API-27-009 | TODO | diagnostics rate
SPRINT_129_policy_reasoning | REGISTRY-API-27-009 | TODO | sim queue depth
SPRINT_129_policy_reasoning | REGISTRY-API-27-010 | TODO | Build unit/integration/load test suites for compile/sim/review/publish/promote flows
SPRINT_129_policy_reasoning | RISK-ENGINE-66-001 | TODO | Scaffold scoring service (job queue
SPRINT_129_policy_reasoning | RISK-ENGINE-66-001 | TODO | provider registry) with deterministic execution harness
SPRINT_129_policy_reasoning | RISK-ENGINE-66-001 | TODO | worker loop
SPRINT_129_policy_reasoning | RISK-ENGINE-66-002 | TODO | Implement default transforms (linear
SPRINT_129_policy_reasoning | RISK-ENGINE-66-002 | TODO | clamping
SPRINT_129_policy_reasoning | RISK-ENGINE-66-002 | TODO | gating
SPRINT_129_policy_reasoning | RISK-ENGINE-66-002 | TODO | logistic
SPRINT_129_policy_reasoning | RISK-ENGINE-66-002 | TODO | minmax
SPRINT_129_policy_reasoning | RISK-ENGINE-66-002 | TODO | piecewise)
SPRINT_129_policy_reasoning | RISK-ENGINE-67-001 | TODO | Integrate CVSS
SPRINT_129_policy_reasoning | RISK-ENGINE-67-001 | TODO | KEV providers pulling data from Conseiller
SPRINT_129_policy_reasoning | RISK-ENGINE-67-001 | TODO | `any`
SPRINT_129_policy_reasoning | RISK-ENGINE-67-001 | TODO | implement reducers (`max`
SPRINT_129_policy_reasoning | RISK-ENGINE-67-002 | TODO | Integrate VEX gate provider
SPRINT_129_policy_reasoning | RISK-ENGINE-67-003 | TODO | Add fix availability
SPRINT_129_policy_reasoning | RISK-ENGINE-67-003 | TODO | asset criticality
SPRINT_129_policy_reasoning | RISK-ENGINE-68-001 | TODO | Persist scoring results + explanation pointers to Findings Ledger
SPRINT_129_policy_reasoning | RISK-ENGINE-68-002 | TODO | Expose APIs (`/risk/jobs`
SPRINT_129_policy_reasoning | RISK-ENGINE-68-002 | TODO | `/risk/results/{id}/explanation`)
SPRINT_129_policy_reasoning | RISK-ENGINE-68-002 | TODO | `/risk/results`
SPRINT_129_policy_reasoning | RISK-ENGINE-68-002 | TODO | filtering
SPRINT_129_policy_reasoning | RISK-ENGINE-68-002 | TODO | include pagination
SPRINT_129_policy_reasoning | RISK-ENGINE-69-001 | TODO | Implement simulation mode producing distributions
SPRINT_129_policy_reasoning | RISK-ENGINE-69-002 | TODO | Add telemetry (spans
SPRINT_129_policy_reasoning | RISK-ENGINE-69-002 | TODO | cache hits
SPRINT_129_policy_reasoning | RISK-ENGINE-69-002 | TODO | job throughput
SPRINT_129_policy_reasoning | RISK-ENGINE-69-002 | TODO | logs) for provider latency
SPRINT_129_policy_reasoning | RISK-ENGINE-69-002 | TODO | metrics
SPRINT_129_policy_reasoning | RISK-ENGINE-70-001 | TODO | Support offline provider bundles with manifest verification
SPRINT_129_policy_reasoning | RISK-ENGINE-70-002 | TODO | Integrate runtime evidence provider
SPRINT_129_policy_reasoning | VEXLENS-30-001 | TODO | CycloneDX VEX (status mapping
SPRINT_129_policy_reasoning | VEXLENS-30-001 | TODO | Implement normalization pipeline for CSAF VEX
SPRINT_129_policy_reasoning | VEXLENS-30-001 | TODO | OpenVEX
SPRINT_129_policy_reasoning | VEXLENS-30-001 | TODO | justification mapping
SPRINT_129_policy_reasoning | VEXLENS-30-001 | TODO | product tree parsing)
SPRINT_129_policy_reasoning | VEXLENS-30-002 | TODO | CPE2.3
SPRINT_129_policy_reasoning | VEXLENS-30-003 | TODO | DSSE
SPRINT_129_policy_reasoning | VEXLENS-30-003 | TODO | Integrate signature verification (Ed25519
SPRINT_129_policy_reasoning | VEXLENS-30-003 | TODO | PKIX) using issuer keys
SPRINT_129_policy_reasoning | VEXLENS-30-003 | TODO | annotate evidence with verification state
SPRINT_129_policy_reasoning | VEXLENS-30-004 | TODO | Implement trust weighting engine (issuer base weights
SPRINT_129_policy_reasoning | VEXLENS-30-004 | TODO | justification modifiers
SPRINT_129_policy_reasoning | VEXLENS-30-004 | TODO | recency decay
SPRINT_129_policy_reasoning | VEXLENS-30-004 | TODO | signature modifiers
SPRINT_129_policy_reasoning | VEXLENS-30-005 | TODO | AFFECTED
SPRINT_129_policy_reasoning | VEXLENS-30-005 | TODO | DISPUTED
SPRINT_129_policy_reasoning | VEXLENS-30-005 | TODO | FIXED
SPRINT_129_policy_reasoning | VEXLENS-30-005 | TODO | Implement consensus algorithm producing `consensus_state`
SPRINT_129_policy_reasoning | VEXLENS-30-005 | TODO | UNDER_INVESTIGATION
SPRINT_129_policy_reasoning | VEXLENS-30-005 | TODO | `confidence`
SPRINT_129_policy_reasoning | VEXLENS-30-005 | TODO | `quorum`
SPRINT_129_policy_reasoning | VEXLENS-30-005 | TODO | `rationale`
SPRINT_129_policy_reasoning | VEXLENS-30-005 | TODO | `weights`
SPRINT_129_policy_reasoning | VEXLENS-30-005 | TODO | support states: NOT_AFFECTED
SPRINT_129_policy_reasoning | VEXLENS-30-006 | TODO | Materialize consensus projection storage with idempotent workers triggered by VEX/Policy changes
SPRINT_129_policy_reasoning | VEXLENS-30-007 | TODO | Expose APIs (`/vex/consensus`
SPRINT_129_policy_reasoning | VEXLENS-30-007 | TODO | `/vex/consensus/export`) with pagination
SPRINT_129_policy_reasoning | VEXLENS-30-007 | TODO | `/vex/consensus/query`
SPRINT_129_policy_reasoning | VEXLENS-30-007 | TODO | `/vex/consensus/simulate`
SPRINT_129_policy_reasoning | VEXLENS-30-007 | TODO | `/vex/consensus/{id}`
SPRINT_129_policy_reasoning | VEXLENS-30-007 | TODO | cost budgets
SPRINT_129_policy_reasoning | VEXLENS-30-008 | TODO | Integrate consensus signals with Policy Engine (thresholds
SPRINT_129_policy_reasoning | VEXLENS-30-008 | TODO | simulation inputs)
SPRINT_129_policy_reasoning | VEXLENS-30-008 | TODO | suppression
SPRINT_129_policy_reasoning | VEXLENS-30-009 | TODO | Instrument metrics (`vex_consensus_compute_latency`
SPRINT_129_policy_reasoning | VEXLENS-30-009 | TODO | `vex_consensus_disputed_total`
SPRINT_129_policy_reasoning | VEXLENS-30-009 | TODO | `vex_signature_verification_rate`)
SPRINT_129_policy_reasoning | VEXLENS-30-009 | TODO | structured logs
SPRINT_129_policy_reasoning | VEXLENS-30-009 | TODO | traces
SPRINT_129_policy_reasoning | VEXLENS-30-010 | TODO | Develop unit/property/integration/load tests (10M records)
SPRINT_129_policy_reasoning | VEXLENS-30-010 | TODO | determinism harness
SPRINT_129_policy_reasoning | VEXLENS-30-011 | TODO | Provide deployment manifests
SPRINT_129_policy_reasoning | VEXLENS-30-011 | TODO | caching configuration
SPRINT_129_policy_reasoning | VEXLENS-30-011 | TODO | offline kit seeds
SPRINT_129_policy_reasoning | VEXLENS-30-011 | TODO | scaling guides
SPRINT_129_policy_reasoning | VEXLENS-AIAI-31-001 | TODO | Expose consensus rationale API enhancements (policy factors
SPRINT_129_policy_reasoning | VEXLENS-AIAI-31-001 | TODO | issuer details
SPRINT_129_policy_reasoning | VEXLENS-AIAI-31-001 | TODO | mapping issues) for Advisory AI conflict explanations
SPRINT_129_policy_reasoning | VEXLENS-AIAI-31-002 | TODO | Provide caching hooks for consensus lookups used by Advisory AI (batch endpoints
SPRINT_129_policy_reasoning | VEXLENS-EXPORT-35-001 | TODO | Provide consensus snapshot API delivering deterministic JSONL (state
SPRINT_129_policy_reasoning | VEXLENS-EXPORT-35-001 | TODO | confidence
SPRINT_129_policy_reasoning | VEXLENS-EXPORT-35-001 | TODO | provenance) for exporter mirror bundles
SPRINT_129_policy_reasoning | VEXLENS-ORCH-33-001 | TODO | Register `consensus_compute` job type with orchestrator
SPRINT_129_policy_reasoning | VEXLENS-ORCH-33-001 | TODO | expose job planning hooks for consensus batches
SPRINT_129_policy_reasoning | VEXLENS-ORCH-33-001 | TODO | integrate worker SDK
SPRINT_129_policy_reasoning | VEXLENS-ORCH-34-001 | TODO | Emit consensus completion events into orchestrator run ledger
SPRINT_129_policy_reasoning | VEXLENS-ORCH-34-001 | TODO | provenance chain
SPRINT_129_policy_reasoning | VULN-API-29-001 | TODO | Define OpenAPI spec (list/detail/query/simulation/workflow/export)
SPRINT_129_policy_reasoning | VULN-API-29-001 | TODO | error codes
SPRINT_129_policy_reasoning | VULN-API-29-001 | TODO | pagination/grouping contracts
SPRINT_129_policy_reasoning | VULN-API-29-001 | TODO | query JSON schema
SPRINT_129_policy_reasoning | VULN-API-29-002 | TODO | Implement list/query endpoints with policy parameter
SPRINT_129_policy_reasoning | VULN-API-29-002 | TODO | caching
SPRINT_129_policy_reasoning | VULN-API-29-002 | TODO | grouping
SPRINT_129_policy_reasoning | VULN-API-29-002 | TODO | server paging
SPRINT_129_policy_reasoning | VULN-API-29-003 | TODO | Implement detail endpoint aggregating evidence
SPRINT_129_policy_reasoning | VULN-API-29-003 | TODO | paths (Graph Explorer deep link)
SPRINT_129_policy_reasoning | VULN-API-29-003 | TODO | policy rationale
SPRINT_129_policy_reasoning | VULN-API-29-004 | TODO | Expose workflow endpoints (assign
SPRINT_129_policy_reasoning | VULN-API-29-004 | TODO | accept-risk
SPRINT_129_policy_reasoning | VULN-API-29-004 | TODO | comment
SPRINT_129_policy_reasoning | VULN-API-29-004 | TODO | target-fix
SPRINT_129_policy_reasoning | VULN-API-29-004 | TODO | verify-fix
SPRINT_129_policy_reasoning | VULN-API-29-005 | TODO | Implement simulation endpoint comparing `policy_from` vs `policy_to`
SPRINT_129_policy_reasoning | VULN-API-29-005 | TODO | returning diffs without side effects
SPRINT_129_policy_reasoning | VULN-API-29-006 | TODO | Integrate resolver results with Graph Explorer: include shortest path metadata
SPRINT_129_policy_reasoning | VULN-API-29-006 | TODO | line up deep-link parameters
SPRINT_129_policy_reasoning | VULN-API-29-007 | TODO | Enforce RBAC/ABAC scopes
SPRINT_129_policy_reasoning | VULN-API-29-007 | TODO | implement CSRF/anti-forgery checks for Console
SPRINT_129_policy_reasoning | VULN-API-29-007 | TODO | secure attachment URLs
SPRINT_129_policy_reasoning | VULN-API-29-008 | TODO | Build export orchestrator producing signed bundles (manifest
SPRINT_129_policy_reasoning | VULN-API-29-008 | TODO | NDJSON
SPRINT_129_policy_reasoning | VULN-API-29-008 | TODO | checksums
SPRINT_129_policy_reasoning | VULN-API-29-008 | TODO | signature). Integrate with Findings Ledger for evidence
SPRINT_129_policy_reasoning | VULN-API-29-009 | TODO | Instrument metrics (`vuln_list_latency`
SPRINT_129_policy_reasoning | VULN-API-29-009 | TODO | `vuln_export_duration`
SPRINT_129_policy_reasoning | VULN-API-29-009 | TODO | `vuln_simulation_latency`
SPRINT_129_policy_reasoning | VULN-API-29-009 | TODO | `vuln_workflow_events_total`)
SPRINT_129_policy_reasoning | VULN-API-29-009 | TODO | structured logs
SPRINT_129_policy_reasoning | VULN-API-29-009 | TODO | traces
SPRINT_129_policy_reasoning | VULN-API-29-010 | TODO | Provide unit/integration/perf tests (5M findings)
SPRINT_129_policy_reasoning | VULN-API-29-010 | TODO | fuzz query validation
SPRINT_129_policy_reasoning | VULN-API-29-011 | TODO | CI smoke
SPRINT_129_policy_reasoning | VULN-API-29-011 | TODO | Package deployment (Helm/Compose)
SPRINT_129_policy_reasoning | VULN-API-29-011 | TODO | health checks
SPRINT_129_policy_reasoning | VULN-API-29-011 | TODO | offline kit steps
SPRINT_131_scanner_surface | SCANNER-ANALYZERS-DENO-26-009 | TODO | SCANNER-ANALYZERS-DENO-26-008
SPRINT_131_scanner_surface | SCANNER-ANALYZERS-JAVA-21-005 | TODO | —
SPRINT_131_scanner_surface | SCANNER-ANALYZERS-LANG-11-001 | TODO | SCANNER-ANALYZERS-LANG-10-309
SPRINT_132_scanner_surface | SCANNER-ANALYZERS-NATIVE-20-001 | TODO | —
SPRINT_132_scanner_surface | SCANNER-ANALYZERS-NODE-22-001 | TODO | —
SPRINT_133_scanner_surface | SCANNER-ANALYZERS-PHP-27-001 | TODO | —
SPRINT_134_scanner_surface | SCANNER-ANALYZERS-PYTHON-23-001 | TODO | —
SPRINT_135_scanner_surface | SCANNER-ANALYZERS-RUBY-28-001 | TODO | —
SPRINT_135_scanner_surface | SCANNER-ENTRYTRACE-18-502 | TODO | SCANNER-ENTRYTRACE-18-508
SPRINT_136_scanner_surface | SCANNER-ENG-0020 | TODO | —
SPRINT_136_scanner_surface | SCANNER-ENG-0021 | TODO | —
SPRINT_136_scanner_surface | SCANNER-ENG-0022 | TODO | —
SPRINT_136_scanner_surface | SCANNER-ENG-0023 | TODO | —
SPRINT_136_scanner_surface | SCANNER-ENG-0024 | TODO | —
SPRINT_136_scanner_surface | SCANNER-ENG-0025 | TODO | —
SPRINT_136_scanner_surface | SCANNER-ENG-0026 | TODO | —
SPRINT_136_scanner_surface | SCANNER-ENG-0027 | TODO | —
SPRINT_136_scanner_surface | SCANNER-ENV-01 | TODO | —
SPRINT_136_scanner_surface | SCANNER-EVENTS-16-301 | BLOCKED | —
SPRINT_136_scanner_surface | SCANNER-GRAPH-21-001 | TODO | —
SPRINT_136_scanner_surface | SCANNER-LNM-21-001 | TODO | —
SPRINT_136_scanner_surface | SCANNER-SECRETS-03 | TODO | SCANNER-SECRETS-02
SPRINT_136_scanner_surface | SCANNER-SURFACE-04 | TODO | SCANNER-SURFACE-01
SPRINT_136_scanner_surface | SCHED-SURFACE-02 | TODO | SURFACE-FS-02
SPRINT_136_scanner_surface | SURFACE-FS-03 | TODO | SURFACE-FS-02
SPRINT_136_scanner_surface | SURFACE-FS-04 | TODO | SURFACE-FS-02
SPRINT_136_scanner_surface | SURFACE-FS-06 | TODO | SURFACE-FS-02..05
SPRINT_136_scanner_surface | SURFACE-SECRETS-01 | DOING | —
SPRINT_136_scanner_surface | SURFACE-VAL-01 | DOING | SURFACE-FS-01
SPRINT_136_scanner_surface | SURFACE-VAL-02 | TODO | SURFACE-FS-02
SPRINT_136_scanner_surface | ZASTAVA-SURFACE-02 | TODO | SURFACE-FS-02
SPRINT_138_scanner_ruby_parity | SCANNER-ENG-0008 | TODO | —
SPRINT_138_scanner_ruby_parity | SCANNER-ENG-0010 | TODO | SCANNER-ANALYZERS-PHP-27-001..012
SPRINT_138_scanner_ruby_parity | SCANNER-ENG-0011 | TODO | —
SPRINT_138_scanner_ruby_parity | SCANNER-ENG-0012 | TODO | —
SPRINT_138_scanner_ruby_parity | SCANNER-ENG-0013 | TODO | —
SPRINT_138_scanner_ruby_parity | SCANNER-ENG-0014 | TODO | —
SPRINT_301_docs_tasks_md_i | DOCS-AIAI-31-004 | DOING | DOCS-AIAI-31-003
SPRINT_301_docs_tasks_md_i | DOCS-AIAI-31-008 | BLOCKED | DOCS-AIAI-31-007
SPRINT_301_docs_tasks_md_i | DOCS-AIRGAP-56-001 | TODO | —
SPRINT_301_docs_tasks_md_i | DOCS-POLICY-DET-01 | TODO | POLICY-DET backlog
SPRINT_301_docs_tasks_md_i | DOCS-SCANNER-DET-01 | DOING | Sprint 136 outputs
SPRINT_301_docs_tasks_md_i | DOCS-SCANNER-DET-01 | DOING | scanner determinism fixtures
1 Sprint Task ID Status Missing dependency
2 SPRINT_110_ingestion_evidence AIAI-31-008 TODO AIAI-31-006
3 SPRINT_110_ingestion_evidence AIAI-31-008 TODO AIAI-31-007
4 SPRINT_110_ingestion_evidence CONCELIER-AIAI-31-002 DOING CARTO-GRAPH-21-002
5 SPRINT_110_ingestion_evidence CONCELIER-AIRGAP-56-001..58-001 TODO Evidence Locker attestation contract
6 SPRINT_110_ingestion_evidence CONCELIER-AIRGAP-56-001..58-001 TODO Link-Not-Merge schema
7 SPRINT_110_ingestion_evidence CONCELIER-ATTEST-73-001 TODO Evidence Locker contract
8 SPRINT_110_ingestion_evidence CONCELIER-CONSOLE-23-001..003 TODO Link-Not-Merge schema
9 SPRINT_110_ingestion_evidence EXCITITOR-AIAI-31-002 TODO Evidence Locker contract
10 SPRINT_110_ingestion_evidence EXCITITOR-AIAI-31-002 TODO Link-Not-Merge schema
11 SPRINT_110_ingestion_evidence EXCITITOR-AIRGAP-56 TODO Link-Not-Merge schema
12 SPRINT_110_ingestion_evidence EXCITITOR-AIRGAP-56 TODO attestation plan
13 SPRINT_110_ingestion_evidence EXCITITOR-ATTEST-01-003 TODO Evidence Locker contract
14 SPRINT_110_ingestion_evidence EXCITITOR-CONN-TRUST-01-001 TODO Link-Not-Merge schema
15 SPRINT_110_ingestion_evidence EXCITITOR-CONN-TRUST-01-001 TODO attestation plan
16 SPRINT_110_ingestion_evidence FEEDCONN-ICSCISA-02-012 BLOCKED Feed owner remediation plan
17 SPRINT_110_ingestion_evidence FEEDCONN-KISA-02-008 BLOCKED Feed owner remediation plan
18 SPRINT_110_ingestion_evidence MIRROR-CRT-56-001 TODO Staffing decision
19 SPRINT_120_policy_reasoning LEDGER-29-007 TODO Instrument metrics (`ledger_write_latency`
20 SPRINT_120_policy_reasoning LEDGER-29-007 TODO LEDGER-29-006
21 SPRINT_120_policy_reasoning LEDGER-29-007 TODO Merkle anchoring alerts
22 SPRINT_120_policy_reasoning LEDGER-29-007 TODO `ledger_events_total`)
23 SPRINT_120_policy_reasoning LEDGER-29-007 TODO `projection_lag_seconds`
24 SPRINT_120_policy_reasoning LEDGER-29-007 TODO structured logs
25 SPRINT_120_policy_reasoning LEDGER-29-008 TODO Develop unit/property/integration tests
26 SPRINT_120_policy_reasoning LEDGER-29-008 TODO determinism harness
27 SPRINT_120_policy_reasoning LEDGER-29-008 TODO replay/restore tooling
28 SPRINT_120_policy_reasoning LEDGER-29-009 TODO Merkle anchor externalization (optional)
29 SPRINT_120_policy_reasoning LEDGER-29-009 TODO Provide deployment manifests (Helm/Compose)
30 SPRINT_120_policy_reasoning LEDGER-29-009 TODO backup/restore guidance
31 SPRINT_120_policy_reasoning LEDGER-34-101 TODO Link orchestrator run ledger exports into Findings Ledger provenance chain
32 SPRINT_120_policy_reasoning LEDGER-34-101 TODO index by artifact hash
33 SPRINT_120_policy_reasoning LEDGER-AIRGAP-56-001 TODO Record bundle provenance (`bundle_id`
34 SPRINT_120_policy_reasoning LEDGER-AIRGAP-56-001 TODO `merkle_root`
35 SPRINT_120_policy_reasoning LEDGER-AIRGAP-56-001 TODO `time_anchor`) on ledger events for advisories/VEX/policies imported via Mirror Bundles
36 SPRINT_120_policy_reasoning LEDGER-AIRGAP-56-002 TODO Surface staleness metrics for findings
37 SPRINT_120_policy_reasoning LEDGER-AIRGAP-56-002 TODO block risk-critical exports when stale beyond thresholds
38 SPRINT_120_policy_reasoning LEDGER-AIRGAP-57-001 TODO Link findings evidence snapshots to portable evidence bundles
39 SPRINT_120_policy_reasoning LEDGER-AIRGAP-58-001 TODO Emit timeline events for bundle import impacts (new findings
40 SPRINT_120_policy_reasoning LEDGER-ATTEST-73-001 TODO Persist pointers from findings to verification reports
41 SPRINT_120_policy_reasoning LEDGER-ATTEST-73-001 TODO attestation envelopes for explainability
42 SPRINT_121_policy_reasoning LEDGER-ATTEST-73-002 TODO Enable search/filter in findings projections by verification result
43 SPRINT_121_policy_reasoning LEDGER-EXPORT-35-001 TODO Provide paginated streaming endpoints for advisories
44 SPRINT_121_policy_reasoning LEDGER-EXPORT-35-001 TODO SBOMs
45 SPRINT_121_policy_reasoning LEDGER-EXPORT-35-001 TODO VEX
46 SPRINT_121_policy_reasoning LEDGER-EXPORT-35-001 TODO findings aligned with export filters
47 SPRINT_121_policy_reasoning LEDGER-EXPORT-35-001 TODO including deterministic ordering
48 SPRINT_121_policy_reasoning LEDGER-EXPORT-35-001 TODO provenance metadata
49 SPRINT_121_policy_reasoning LEDGER-OAS-61-001 TODO Expand Findings Ledger OAS to include projections
50 SPRINT_121_policy_reasoning LEDGER-OAS-61-001 TODO evidence lookups
51 SPRINT_121_policy_reasoning LEDGER-OAS-61-001 TODO filter parameters with examples
52 SPRINT_121_policy_reasoning LEDGER-OAS-61-002 TODO Implement `/.well-known/openapi` endpoint
53 SPRINT_121_policy_reasoning LEDGER-OAS-62-001 TODO Provide SDK test cases for findings pagination
54 SPRINT_121_policy_reasoning LEDGER-OAS-62-001 TODO evidence links
55 SPRINT_121_policy_reasoning LEDGER-OAS-62-001 TODO filtering
56 SPRINT_121_policy_reasoning LEDGER-OAS-63-001 TODO Support deprecation headers
57 SPRINT_121_policy_reasoning LEDGER-OBS-50-001 TODO Integrate telemetry core within ledger writer/projector services
58 SPRINT_121_policy_reasoning LEDGER-OBS-50-001 TODO emitting structured logs
59 SPRINT_121_policy_reasoning LEDGER-OBS-50-001 TODO projector replay
60 SPRINT_121_policy_reasoning LEDGER-OBS-50-001 TODO query APIs with tenant context
61 SPRINT_121_policy_reasoning LEDGER-OBS-50-001 TODO trace spans for ledger append
62 SPRINT_121_policy_reasoning LEDGER-OBS-51-001 TODO Publish metrics for ledger latency
63 SPRINT_121_policy_reasoning LEDGER-OBS-51-001 TODO event throughput
64 SPRINT_121_policy_reasoning LEDGER-OBS-51-001 TODO policy evaluation linkage. Define SLOs (ledger append P95 < 1s
65 SPRINT_121_policy_reasoning LEDGER-OBS-51-001 TODO projector lag
66 SPRINT_121_policy_reasoning LEDGER-OBS-51-001 TODO replay lag < 30s) with burn-rate alerts
67 SPRINT_121_policy_reasoning LEDGER-OBS-52-001 TODO Emit timeline events for ledger writes
68 SPRINT_121_policy_reasoning LEDGER-OBS-52-001 TODO `ledger.projection.updated`) with trace ID
69 SPRINT_121_policy_reasoning LEDGER-OBS-52-001 TODO policy version
70 SPRINT_121_policy_reasoning LEDGER-OBS-52-001 TODO projector commits (`ledger.event.appended`
71 SPRINT_121_policy_reasoning LEDGER-OBS-53-001 TODO Persist evidence bundle references (evaluation/job capsules) alongside ledger entries
72 SPRINT_121_policy_reasoning LEDGER-OBS-53-001 TODO exposing lookup API linking findings to evidence manifests
73 SPRINT_121_policy_reasoning LEDGER-OBS-54-001 TODO Verify attestation references for ledger-derived exports
74 SPRINT_121_policy_reasoning LEDGER-OBS-54-001 TODO expose `/ledger/attestations` endpoint returning DSSE verification state
75 SPRINT_121_policy_reasoning LEDGER-OBS-55-001 TODO Enhance incident mode to record additional replay diagnostics (lag traces
76 SPRINT_121_policy_reasoning LEDGER-OBS-55-001 TODO conflict snapshots)
77 SPRINT_121_policy_reasoning LEDGER-PACKS-42-001 TODO CLI offline mode
78 SPRINT_121_policy_reasoning LEDGER-PACKS-42-001 TODO Provide snapshot/time-travel APIs
79 SPRINT_121_policy_reasoning LEDGER-PACKS-42-001 TODO digestable exports for task pack simulation
80 SPRINT_121_policy_reasoning LEDGER-RISK-66-001 TODO Add schema migrations for `risk_score`
81 SPRINT_121_policy_reasoning LEDGER-RISK-66-001 TODO `explanation_id`
82 SPRINT_121_policy_reasoning LEDGER-RISK-66-001 TODO `profile_version`
83 SPRINT_121_policy_reasoning LEDGER-RISK-66-001 TODO `risk_severity`
84 SPRINT_121_policy_reasoning LEDGER-RISK-66-001 TODO supporting indexes
85 SPRINT_122_policy_reasoning LEDGER-RISK-67-001 TODO Expose query APIs for scored findings with score/severity filters
86 SPRINT_122_policy_reasoning LEDGER-RISK-67-001 TODO pagination
87 SPRINT_122_policy_reasoning LEDGER-RISK-68-001 TODO Enable export of scored findings
88 SPRINT_122_policy_reasoning LEDGER-RISK-69-001 TODO Emit metrics/dashboards for scoring latency
89 SPRINT_122_policy_reasoning LEDGER-RISK-69-001 TODO result freshness
90 SPRINT_122_policy_reasoning LEDGER-RISK-69-001 TODO severity distribution
91 SPRINT_122_policy_reasoning LEDGER-TEN-48-001 TODO Partition ledger tables by tenant/project
92 SPRINT_122_policy_reasoning LEDGER-TEN-48-001 TODO enable RLS
93 SPRINT_122_policy_reasoning LEDGER-TEN-48-001 TODO stamp audit metadata
94 SPRINT_122_policy_reasoning LEDGER-TEN-48-001 TODO update queries/events
95 SPRINT_123_policy_reasoning EXPORT-CONSOLE-23-001 TODO Build evidence bundle/export generator producing signed manifests
96 SPRINT_123_policy_reasoning EXPORT-CONSOLE-23-001 TODO CSV/JSON replay endpoints
97 SPRINT_123_policy_reasoning EXPORT-CONSOLE-23-001 TODO expose progress telemetry
98 SPRINT_123_policy_reasoning EXPORT-CONSOLE-23-001 TODO integrate with scheduler jobs
99 SPRINT_123_policy_reasoning EXPORT-CONSOLE-23-001 TODO trace attachments
100 SPRINT_123_policy_reasoning POLICY-AIRGAP-56-001 TODO Support policy pack imports from Mirror Bundles
101 SPRINT_123_policy_reasoning POLICY-AIRGAP-56-001 TODO ensure deterministic caching
102 SPRINT_123_policy_reasoning POLICY-AIRGAP-56-001 TODO track `bundle_id` metadata
103 SPRINT_123_policy_reasoning POLICY-AIRGAP-57-001 TODO Enforce sealed-mode guardrails in evaluation (no outbound fetch)
104 SPRINT_123_policy_reasoning POLICY-AIRGAP-57-002 TODO Annotate rule explanations with staleness information
105 SPRINT_123_policy_reasoning POLICY-AIRGAP-57-002 TODO fallback data (cached EPSS
106 SPRINT_123_policy_reasoning POLICY-AOC-19-001 TODO Add Roslyn/CI lint preventing ingestion projects from referencing Policy merge/severity helpers
107 SPRINT_123_policy_reasoning POLICY-AOC-19-001 TODO block forbidden writes at compile time
108 SPRINT_123_policy_reasoning POLICY-AOC-19-003 TODO Update readers/processors to consume only `content.raw`
109 SPRINT_123_policy_reasoning POLICY-AOC-19-003 TODO `identifiers`
110 SPRINT_123_policy_reasoning POLICY-AOC-19-003 TODO `linkset`. Remove dependencies on legacy normalized fields
111 SPRINT_123_policy_reasoning POLICY-AOC-19-004 TODO Add regression tests ensuring policy derived outputs remain deterministic when ingesting revised raw docs (supersedes)
112 SPRINT_123_policy_reasoning POLICY-ATTEST-73-001 TODO Introduce VerificationPolicy object: schema
113 SPRINT_123_policy_reasoning POLICY-ATTEST-73-001 TODO lifecycle
114 SPRINT_123_policy_reasoning POLICY-ATTEST-73-001 TODO persistence
115 SPRINT_123_policy_reasoning POLICY-ATTEST-73-001 TODO versioning
116 SPRINT_123_policy_reasoning POLICY-ATTEST-73-002 TODO Provide Policy Studio editor with validation
117 SPRINT_123_policy_reasoning POLICY-ATTEST-73-002 TODO dry-run simulation
118 SPRINT_123_policy_reasoning POLICY-ATTEST-74-001 TODO Integrate verification policies into attestor verification pipeline with caching
119 SPRINT_123_policy_reasoning POLICY-CONSOLE-23-001 TODO Optimize findings/explain APIs for Console: cursor-based pagination at scale
120 SPRINT_123_policy_reasoning POLICY-CONSOLE-23-001 TODO aggregation hints for dashboard cards. Ensure deterministic ordering
121 SPRINT_123_policy_reasoning POLICY-CONSOLE-23-001 TODO expose provenance refs
122 SPRINT_123_policy_reasoning POLICY-CONSOLE-23-001 TODO global filter parameters (severity bands
123 SPRINT_123_policy_reasoning POLICY-CONSOLE-23-001 TODO policy version
124 SPRINT_123_policy_reasoning POLICY-CONSOLE-23-001 TODO rule trace summarization
125 SPRINT_123_policy_reasoning POLICY-CONSOLE-23-001 TODO time window)
126 SPRINT_124_policy_reasoning POLICY-CONSOLE-23-002 TODO Produce simulation diff metadata (before/after counts
127 SPRINT_124_policy_reasoning POLICY-CONSOLE-23-002 TODO approval state endpoints consumed by Console policy workspace
128 SPRINT_124_policy_reasoning POLICY-CONSOLE-23-002 TODO rule impact summaries)
129 SPRINT_124_policy_reasoning POLICY-CONSOLE-23-002 TODO severity deltas
130 SPRINT_124_policy_reasoning POLICY-ENGINE-20-002 BLOCKED Build deterministic evaluator honoring lexical/priority order
131 SPRINT_124_policy_reasoning POLICY-ENGINE-20-002 BLOCKED first-match semantics
132 SPRINT_124_policy_reasoning POLICY-ENGINE-20-002 BLOCKED safe value types (no wall-clock/network access)
133 SPRINT_124_policy_reasoning POLICY-ENGINE-20-003 TODO Implement selection joiners resolving SBOM↔advisory↔VEX tuples using linksets
134 SPRINT_124_policy_reasoning POLICY-ENGINE-20-003 TODO PURL equivalence tables
135 SPRINT_124_policy_reasoning POLICY-ENGINE-20-004 TODO Ship materialization writer that upserts into `effective_finding_{policyId}` with append-only history
136 SPRINT_124_policy_reasoning POLICY-ENGINE-20-004 TODO tenant scoping
137 SPRINT_124_policy_reasoning POLICY-ENGINE-20-005 TODO Enforce determinism guard banning wall-clock
138 SPRINT_124_policy_reasoning POLICY-ENGINE-20-005 TODO RNG
139 SPRINT_124_policy_reasoning POLICY-ENGINE-20-006 TODO Implement incremental orchestrator reacting to advisory/vex/SBOM change streams
140 SPRINT_124_policy_reasoning POLICY-ENGINE-20-007 TODO Emit structured traces/logs of rule hits with sampling controls
141 SPRINT_124_policy_reasoning POLICY-ENGINE-20-007 TODO `vex_overrides_total`)
142 SPRINT_124_policy_reasoning POLICY-ENGINE-20-007 TODO metrics (`rules_fired_total`
143 SPRINT_124_policy_reasoning POLICY-ENGINE-20-008 TODO Add unit/property/golden/perf suites covering policy compilation
144 SPRINT_124_policy_reasoning POLICY-ENGINE-20-008 TODO determinism
145 SPRINT_124_policy_reasoning POLICY-ENGINE-20-008 TODO evaluation correctness
146 SPRINT_124_policy_reasoning POLICY-ENGINE-20-009 TODO Define Mongo schemas/indexes for `policies`
147 SPRINT_124_policy_reasoning POLICY-ENGINE-20-009 TODO `effective_finding_*`
148 SPRINT_124_policy_reasoning POLICY-ENGINE-20-009 TODO `policy_runs`
149 SPRINT_124_policy_reasoning POLICY-ENGINE-20-009 TODO implement migrations
150 SPRINT_124_policy_reasoning POLICY-ENGINE-27-001 TODO Extend compile outputs to include rule coverage metadata
151 SPRINT_124_policy_reasoning POLICY-ENGINE-27-001 TODO inline documentation
152 SPRINT_124_policy_reasoning POLICY-ENGINE-27-001 TODO rule index for editor autocomplete
153 SPRINT_124_policy_reasoning POLICY-ENGINE-27-001 TODO symbol table
154 SPRINT_124_policy_reasoning POLICY-ENGINE-27-002 TODO Enhance simulate endpoints to emit rule firing counts
155 SPRINT_124_policy_reasoning POLICY-ENGINE-27-002 TODO heatmap aggregates
156 SPRINT_124_policy_reasoning POLICY-ENGINE-27-002 TODO sampled explain traces with deterministic ordering
157 SPRINT_124_policy_reasoning POLICY-ENGINE-29-001 TODO Implement batch evaluation endpoint (`POST /policy/eval/batch`) returning determinations + rationale chain for sets of `(artifact
158 SPRINT_124_policy_reasoning POLICY-ENGINE-29-001 TODO POLICY-ENGINE-27-004
159 SPRINT_124_policy_reasoning POLICY-ENGINE-29-001 TODO advisory)` tuples
160 SPRINT_124_policy_reasoning POLICY-ENGINE-29-001 TODO purl
161 SPRINT_124_policy_reasoning POLICY-ENGINE-29-001 TODO support pagination
162 SPRINT_124_policy_reasoning POLICY-ENGINE-29-001 TODO version
163 SPRINT_124_policy_reasoning POLICY-ENGINE-29-002 TODO Provide streaming simulation API comparing two policy versions
164 SPRINT_124_policy_reasoning POLICY-ENGINE-29-002 TODO returning per-finding deltas without writes
165 SPRINT_125_mirror MIRROR-CRT-56-001 TODO Staffing decision
166 SPRINT_125_policy_reasoning POLICY-ENGINE-29-003 TODO Surface path/scope awareness in determinations (signal optional/dev/test downgrade
167 SPRINT_125_policy_reasoning POLICY-ENGINE-29-004 TODO Add metrics/logs for batch evaluation (latency
168 SPRINT_125_policy_reasoning POLICY-ENGINE-29-004 TODO queue depth)
169 SPRINT_125_policy_reasoning POLICY-ENGINE-29-004 TODO simulation diff counts
170 SPRINT_125_policy_reasoning POLICY-ENGINE-30-001 TODO Define overlay contract for graph nodes/edges (status
171 SPRINT_125_policy_reasoning POLICY-ENGINE-30-001 TODO expose projection API for Cartographer
172 SPRINT_125_policy_reasoning POLICY-ENGINE-30-001 TODO path relevance)
173 SPRINT_125_policy_reasoning POLICY-ENGINE-30-001 TODO rationale refs
174 SPRINT_125_policy_reasoning POLICY-ENGINE-30-001 TODO severity
175 SPRINT_125_policy_reasoning POLICY-ENGINE-30-002 TODO Implement simulation bridge returning on-the-fly overlays for Cartographer/Graph Explorer when invoking Policy Engine simulate
176 SPRINT_125_policy_reasoning POLICY-ENGINE-30-002 TODO ensure no writes
177 SPRINT_125_policy_reasoning POLICY-ENGINE-30-101 TODO Surface trust weighting configuration (issuer base weights
178 SPRINT_125_policy_reasoning POLICY-ENGINE-30-101 TODO recency decay
179 SPRINT_125_policy_reasoning POLICY-ENGINE-30-101 TODO scope adjustments) for VEX Lens via Policy Studio + API
180 SPRINT_125_policy_reasoning POLICY-ENGINE-30-101 TODO signature modifiers
181 SPRINT_125_policy_reasoning POLICY-ENGINE-31-001 TODO Expose policy knobs for Advisory AI (trust presets
182 SPRINT_125_policy_reasoning POLICY-ENGINE-31-001 TODO TTLs) via Policy Studio
183 SPRINT_125_policy_reasoning POLICY-ENGINE-31-001 TODO plan ranking weights
184 SPRINT_125_policy_reasoning POLICY-ENGINE-31-001 TODO temperature
185 SPRINT_125_policy_reasoning POLICY-ENGINE-31-001 TODO token limits
186 SPRINT_125_policy_reasoning POLICY-ENGINE-31-002 TODO Provide batch endpoint delivering policy context (thresholds
187 SPRINT_125_policy_reasoning POLICY-ENGINE-32-101 TODO Define orchestrator `policy_eval` job schema
188 SPRINT_125_policy_reasoning POLICY-ENGINE-32-101 TODO idempotency keys
189 SPRINT_125_policy_reasoning POLICY-ENGINE-33-101 TODO Implement orchestrator-driven policy evaluation workers using SDK heartbeats
190 SPRINT_125_policy_reasoning POLICY-ENGINE-33-101 TODO respecting throttles
191 SPRINT_125_policy_reasoning POLICY-ENGINE-34-101 TODO Publish policy run ledger exports + SLO burn-rate metrics to orchestrator
192 SPRINT_125_policy_reasoning POLICY-ENGINE-35-201 TODO Expose deterministic policy snapshot API
193 SPRINT_125_policy_reasoning POLICY-ENGINE-38-201 TODO Emit enriched policy violation events (decision rationale ids
194 SPRINT_125_policy_reasoning POLICY-ENGINE-40-001 TODO Update severity/status evaluation pipelines to consume multiple source severities per linkset
195 SPRINT_125_policy_reasoning POLICY-ENGINE-40-001 TODO preferred source
196 SPRINT_125_policy_reasoning POLICY-ENGINE-40-001 TODO supporting selection strategies (max
197 SPRINT_125_policy_reasoning POLICY-ENGINE-40-002 TODO Accept VEX linkset conflicts
198 SPRINT_125_policy_reasoning POLICY-ENGINE-40-002 TODO provide rationale references in effective findings
199 SPRINT_126_policy_reasoning POLICY-ENGINE-40-003 TODO Graph Explorer) to request policy decisions with source evidence summaries (top severity sources
200 SPRINT_126_policy_reasoning POLICY-ENGINE-40-003 TODO Provide API/SDK utilities for consumers (Web Scanner
201 SPRINT_126_policy_reasoning POLICY-ENGINE-50-001 TODO Implement SPL compiler: validate YAML
202 SPRINT_126_policy_reasoning POLICY-ENGINE-50-001 TODO canonicalize
203 SPRINT_126_policy_reasoning POLICY-ENGINE-50-001 TODO produce signed bundle
204 SPRINT_126_policy_reasoning POLICY-ENGINE-50-001 TODO store artifact in object storage
205 SPRINT_126_policy_reasoning POLICY-ENGINE-50-002 TODO Build runtime evaluator executing compiled plans over advisory/vex linksets + SBOM asset metadata with deterministic caching (Redis)
206 SPRINT_126_policy_reasoning POLICY-ENGINE-50-003 TODO Implement evaluation/compilation metrics
207 SPRINT_126_policy_reasoning POLICY-ENGINE-50-003 TODO `policy_compiles_total`
208 SPRINT_126_policy_reasoning POLICY-ENGINE-50-003 TODO structured logs (`policy_eval_seconds`
209 SPRINT_126_policy_reasoning POLICY-ENGINE-50-003 TODO tracing
210 SPRINT_126_policy_reasoning POLICY-ENGINE-50-004 TODO Build event pipeline: subscribe to linkset/SBOM updates
211 SPRINT_126_policy_reasoning POLICY-ENGINE-50-004 TODO schedule re-eval jobs
212 SPRINT_126_policy_reasoning POLICY-ENGINE-50-005 TODO Design
213 SPRINT_126_policy_reasoning POLICY-ENGINE-50-005 TODO TTL
214 SPRINT_126_policy_reasoning POLICY-ENGINE-50-005 TODO `policy_artifacts` collections with indexes
215 SPRINT_126_policy_reasoning POLICY-ENGINE-50-005 TODO `policy_revisions`
216 SPRINT_126_policy_reasoning POLICY-ENGINE-50-005 TODO `policy_runs`
217 SPRINT_126_policy_reasoning POLICY-ENGINE-50-005 TODO implement `policy_packs`
218 SPRINT_126_policy_reasoning POLICY-ENGINE-50-006 TODO Implement explainer persistence + retrieval APIs linking decisions to explanation tree
219 SPRINT_126_policy_reasoning POLICY-ENGINE-50-007 TODO Provide evaluation worker host/DI wiring
220 SPRINT_126_policy_reasoning POLICY-ENGINE-60-001 TODO Maintain Redis effective decision maps per asset/snapshot for Graph overlays
221 SPRINT_126_policy_reasoning POLICY-ENGINE-60-001 TODO implement versioning
222 SPRINT_126_policy_reasoning POLICY-ENGINE-60-002 TODO Expose simulation bridge for Graph What-if APIs
223 SPRINT_126_policy_reasoning POLICY-ENGINE-60-002 TODO supporting hypothetical SBOM diffs
224 SPRINT_126_policy_reasoning POLICY-ENGINE-70-002 TODO Design
225 SPRINT_126_policy_reasoning POLICY-ENGINE-70-002 TODO `exception_bindings`) with indexes
226 SPRINT_126_policy_reasoning POLICY-ENGINE-70-002 TODO `exception_reviews`
227 SPRINT_126_policy_reasoning POLICY-ENGINE-70-002 TODO create Mongo collections (`exceptions`
228 SPRINT_126_policy_reasoning POLICY-ENGINE-70-002 TODO migrations
229 SPRINT_126_policy_reasoning POLICY-ENGINE-70-004 TODO Extend metrics/tracing/logging for exception application (latency
230 SPRINT_126_policy_reasoning POLICY-ENGINE-70-004 TODO counts
231 SPRINT_126_policy_reasoning POLICY-ENGINE-70-004 TODO expiring events)
232 SPRINT_126_policy_reasoning POLICY-ENGINE-70-005 TODO Provide APIs/workers hook for exception activation/expiry (auto start/end)
233 SPRINT_126_policy_reasoning POLICY-ENGINE-80-001 TODO Integrate reachability/exploitability inputs into evaluation pipeline (state/score/confidence) with caching
234 SPRINT_126_policy_reasoning POLICY-RISK-90-001 TODO Ingest entropy penalty inputs from Scanner (`entropy.report.json`
235 SPRINT_126_policy_reasoning POLICY-RISK-90-001 TODO `layer_summary.json`)
236 SPRINT_126_policy_reasoning POLICY-RISK-90-001 TODO expose explanations/metrics for opaque ratio penalties (`docs/modules/scanner/entropy.md`).
237 SPRINT_126_policy_reasoning POLICY-RISK-90-001 TODO extend trust algebra with configurable weights/caps
238 SPRINT_127_policy_reasoning POLICY-ENGINE-80-002 TODO Create joining layer to read `reachability_facts` efficiently (indexes
239 SPRINT_127_policy_reasoning POLICY-ENGINE-80-002 TODO projections)
240 SPRINT_127_policy_reasoning POLICY-ENGINE-80-003 TODO Extend SPL predicates/actions to reference reachability state/score/confidence
241 SPRINT_127_policy_reasoning POLICY-ENGINE-80-004 TODO Emit metrics (`policy_reachability_applied_total`
242 SPRINT_127_policy_reasoning POLICY-ENGINE-80-004 TODO `policy_reachability_cache_hit_ratio`)
243 SPRINT_127_policy_reasoning POLICY-OBS-50-001 TODO Integrate telemetry core into policy API + worker hosts
244 SPRINT_127_policy_reasoning POLICY-OBS-50-001 TODO `decision_effect`
245 SPRINT_127_policy_reasoning POLICY-OBS-50-001 TODO `policy_version`
246 SPRINT_127_policy_reasoning POLICY-OBS-50-001 TODO ensuring spans/logs cover compile/evaluate flows with `tenant_id`
247 SPRINT_127_policy_reasoning POLICY-OBS-50-001 TODO trace IDs
248 SPRINT_127_policy_reasoning POLICY-OBS-51-001 TODO Emit golden-signal metrics (compile latency
249 SPRINT_127_policy_reasoning POLICY-OBS-51-001 TODO evaluate latency
250 SPRINT_127_policy_reasoning POLICY-OBS-51-001 TODO override counts)
251 SPRINT_127_policy_reasoning POLICY-OBS-51-001 TODO rule hits
252 SPRINT_127_policy_reasoning POLICY-OBS-52-001 TODO Emit timeline events `policy.evaluate.started`
253 SPRINT_127_policy_reasoning POLICY-OBS-52-001 TODO `policy.decision.recorded` with trace IDs
254 SPRINT_127_policy_reasoning POLICY-OBS-52-001 TODO `policy.evaluate.completed`
255 SPRINT_127_policy_reasoning POLICY-OBS-52-001 TODO input digests
256 SPRINT_127_policy_reasoning POLICY-OBS-52-001 TODO rule summary. Provide contract tests
257 SPRINT_127_policy_reasoning POLICY-OBS-53-001 TODO Produce evaluation evidence bundles (inputs slice
258 SPRINT_127_policy_reasoning POLICY-OBS-53-001 TODO config snapshot) through evidence locker integration
259 SPRINT_127_policy_reasoning POLICY-OBS-53-001 TODO engine version
260 SPRINT_127_policy_reasoning POLICY-OBS-53-001 TODO rule trace
261 SPRINT_127_policy_reasoning POLICY-OBS-54-001 TODO Generate DSSE attestations for evaluation outputs
262 SPRINT_127_policy_reasoning POLICY-OBS-54-001 TODO expose `/evaluations/{id}/attestation`
263 SPRINT_127_policy_reasoning POLICY-OBS-55-001 TODO Implement incident mode sampling overrides (full rule trace capture
264 SPRINT_127_policy_reasoning POLICY-OBS-55-001 TODO extended retention) with auto-activation on SLO breach
265 SPRINT_127_policy_reasoning POLICY-RISK-66-001 TODO Develop initial JSON Schema for RiskProfile (signals
266 SPRINT_127_policy_reasoning POLICY-RISK-66-001 TODO overrides) with validator stubs
267 SPRINT_127_policy_reasoning POLICY-RISK-66-001 TODO severity
268 SPRINT_127_policy_reasoning POLICY-RISK-66-001 TODO transforms
269 SPRINT_127_policy_reasoning POLICY-RISK-66-001 TODO weights
270 SPRINT_127_policy_reasoning POLICY-RISK-66-002 TODO Implement inheritance/merge logic with conflict detection
271 SPRINT_127_policy_reasoning POLICY-RISK-66-003 TODO Integrate RiskProfile schema into Policy Engine configuration
272 SPRINT_127_policy_reasoning POLICY-RISK-66-003 TODO ensuring validation
273 SPRINT_127_policy_reasoning POLICY-RISK-66-004 TODO Extend Policy libraries to load/save RiskProfile documents
274 SPRINT_127_policy_reasoning POLICY-RISK-66-004 TODO compute content hashes
275 SPRINT_127_policy_reasoning POLICY-RISK-67-001 TODO Integrate profile storage
276 SPRINT_128_policy_reasoning POLICY-RISK-67-002 TODO Implement profile lifecycle APIs (`/risk/profiles` create/publish/deprecate)
277 SPRINT_128_policy_reasoning POLICY-RISK-67-002 TODO Publish `.well-known/risk-profile-schema` endpoint
278 SPRINT_128_policy_reasoning POLICY-RISK-67-003 TODO Provide policy-layer APIs to trigger risk simulations
279 SPRINT_128_policy_reasoning POLICY-RISK-68-001 TODO Implement scope selectors
280 SPRINT_128_policy_reasoning POLICY-RISK-68-001 TODO Provide simulation API bridging Policy Studio with risk engine
281 SPRINT_128_policy_reasoning POLICY-RISK-68-001 TODO precedence rules
282 SPRINT_128_policy_reasoning POLICY-RISK-68-001 TODO returns distributions
283 SPRINT_128_policy_reasoning POLICY-RISK-68-002 TODO Add override/adjustment support with audit metadata
284 SPRINT_128_policy_reasoning POLICY-RISK-69-001 TODO Emit events/notifications on profile publish
285 SPRINT_128_policy_reasoning POLICY-RISK-69-001 TODO deprecate
286 SPRINT_128_policy_reasoning POLICY-SPL-23-001 TODO Define SPL v1 YAML + JSON Schema
287 SPRINT_128_policy_reasoning POLICY-SPL-23-001 TODO VEX precedence
288 SPRINT_128_policy_reasoning POLICY-SPL-23-001 TODO exceptions
289 SPRINT_128_policy_reasoning POLICY-SPL-23-001 TODO including advisory rules
290 SPRINT_128_policy_reasoning POLICY-SPL-23-001 TODO layering metadata. Publish schema resources
291 SPRINT_128_policy_reasoning POLICY-SPL-23-001 TODO severity mapping
292 SPRINT_128_policy_reasoning POLICY-SPL-23-001 TODO validation fixtures
293 SPRINT_128_policy_reasoning POLICY-SPL-23-002 TODO Implement canonicalizer that normalizes policy packs (ordering
294 SPRINT_128_policy_reasoning POLICY-SPL-23-002 TODO computes content hash
295 SPRINT_128_policy_reasoning POLICY-SPL-23-002 TODO defaults)
296 SPRINT_128_policy_reasoning POLICY-SPL-23-003 TODO Build policy layering/override engine (global/org/project/env/exception) with field-level precedence matrices
297 SPRINT_128_policy_reasoning POLICY-SPL-23-004 TODO Design explanation tree model (rule hits
298 SPRINT_128_policy_reasoning POLICY-SPL-23-004 TODO UI
299 SPRINT_128_policy_reasoning POLICY-SPL-23-004 TODO decisions)
300 SPRINT_128_policy_reasoning POLICY-SPL-23-004 TODO inputs
301 SPRINT_128_policy_reasoning POLICY-SPL-23-004 TODO persistence structures reused by runtime
302 SPRINT_128_policy_reasoning POLICY-SPL-23-005 TODO Create migration tool to snapshot existing behavior into baseline SPL packs (`org.core.baseline`)
303 SPRINT_128_policy_reasoning POLICY-SPL-23-005 TODO including policy docs
304 SPRINT_128_policy_reasoning POLICY-SPL-24-001 TODO Extend SPL schema to expose reachability/exploitability predicates
305 SPRINT_128_policy_reasoning POLICY-SPL-24-001 TODO update documentation
306 SPRINT_128_policy_reasoning POLICY-SPL-24-001 TODO weighting functions
307 SPRINT_129_policy_reasoning POLICY-TEN-48-001 TODO Add `tenant_id`/`project_id` columns
308 SPRINT_129_policy_reasoning POLICY-TEN-48-001 TODO emit rationale IDs including tenant metadata
309 SPRINT_129_policy_reasoning POLICY-TEN-48-001 TODO enable RLS
310 SPRINT_129_policy_reasoning POLICY-TEN-48-001 TODO update evaluators to require tenant context
311 SPRINT_129_policy_reasoning REGISTRY-API-27-001 TODO Define OpenAPI specification covering workspaces
312 SPRINT_129_policy_reasoning REGISTRY-API-27-001 TODO attestations
313 SPRINT_129_policy_reasoning REGISTRY-API-27-001 TODO promotions
314 SPRINT_129_policy_reasoning REGISTRY-API-27-001 TODO publish typed clients for Console/CLI
315 SPRINT_129_policy_reasoning REGISTRY-API-27-001 TODO reviews
316 SPRINT_129_policy_reasoning REGISTRY-API-27-001 TODO simulations
317 SPRINT_129_policy_reasoning REGISTRY-API-27-001 TODO versions
318 SPRINT_129_policy_reasoning REGISTRY-API-27-002 TODO Implement workspace storage (Mongo collections
319 SPRINT_129_policy_reasoning REGISTRY-API-27-002 TODO diff history
320 SPRINT_129_policy_reasoning REGISTRY-API-27-002 TODO object storage buckets) with CRUD endpoints
321 SPRINT_129_policy_reasoning REGISTRY-API-27-003 TODO Integrate compile endpoint: forward source bundle to Policy Engine
322 SPRINT_129_policy_reasoning REGISTRY-API-27-003 TODO persist diagnostics
323 SPRINT_129_policy_reasoning REGISTRY-API-27-003 TODO rule index
324 SPRINT_129_policy_reasoning REGISTRY-API-27-003 TODO symbol table
325 SPRINT_129_policy_reasoning REGISTRY-API-27-004 TODO Implement quick simulation API with request limits (sample size
326 SPRINT_129_policy_reasoning REGISTRY-API-27-004 TODO heatmap
327 SPRINT_129_policy_reasoning REGISTRY-API-27-004 TODO returning counts
328 SPRINT_129_policy_reasoning REGISTRY-API-27-004 TODO timeouts)
329 SPRINT_129_policy_reasoning REGISTRY-API-27-005 TODO Build batch simulation orchestration: enqueue shards
330 SPRINT_129_policy_reasoning REGISTRY-API-27-005 TODO collect partials
331 SPRINT_129_policy_reasoning REGISTRY-API-27-005 TODO reduce deltas
332 SPRINT_129_policy_reasoning REGISTRY-API-27-006 TODO Implement review workflow (comments
333 SPRINT_129_policy_reasoning REGISTRY-API-27-006 TODO required approvers
334 SPRINT_129_policy_reasoning REGISTRY-API-27-006 TODO status transitions) with audit trails
335 SPRINT_129_policy_reasoning REGISTRY-API-27-006 TODO votes
336 SPRINT_129_policy_reasoning REGISTRY-API-27-007 TODO Implement publish pipeline: sign source/compiled digests
337 SPRINT_129_policy_reasoning REGISTRY-API-27-007 TODO create attestations
338 SPRINT_129_policy_reasoning REGISTRY-API-27-007 TODO mark version immutable
339 SPRINT_129_policy_reasoning REGISTRY-API-27-008 TODO Implement promotion bindings per tenant/environment with canary subsets
340 SPRINT_129_policy_reasoning REGISTRY-API-27-008 TODO rollback path
341 SPRINT_129_policy_reasoning REGISTRY-API-27-009 TODO Instrument metrics/logs/traces (compile time
342 SPRINT_129_policy_reasoning REGISTRY-API-27-009 TODO approval latency)
343 SPRINT_129_policy_reasoning REGISTRY-API-27-009 TODO diagnostics rate
344 SPRINT_129_policy_reasoning REGISTRY-API-27-009 TODO sim queue depth
345 SPRINT_129_policy_reasoning REGISTRY-API-27-010 TODO Build unit/integration/load test suites for compile/sim/review/publish/promote flows
346 SPRINT_129_policy_reasoning RISK-ENGINE-66-001 TODO Scaffold scoring service (job queue
347 SPRINT_129_policy_reasoning RISK-ENGINE-66-001 TODO provider registry) with deterministic execution harness
348 SPRINT_129_policy_reasoning RISK-ENGINE-66-001 TODO worker loop
349 SPRINT_129_policy_reasoning RISK-ENGINE-66-002 TODO Implement default transforms (linear
350 SPRINT_129_policy_reasoning RISK-ENGINE-66-002 TODO clamping
351 SPRINT_129_policy_reasoning RISK-ENGINE-66-002 TODO gating
352 SPRINT_129_policy_reasoning RISK-ENGINE-66-002 TODO logistic
353 SPRINT_129_policy_reasoning RISK-ENGINE-66-002 TODO minmax
354 SPRINT_129_policy_reasoning RISK-ENGINE-66-002 TODO piecewise)
355 SPRINT_129_policy_reasoning RISK-ENGINE-67-001 TODO Integrate CVSS
356 SPRINT_129_policy_reasoning RISK-ENGINE-67-001 TODO KEV providers pulling data from Conseiller
357 SPRINT_129_policy_reasoning RISK-ENGINE-67-001 TODO `any`
358 SPRINT_129_policy_reasoning RISK-ENGINE-67-001 TODO implement reducers (`max`
359 SPRINT_129_policy_reasoning RISK-ENGINE-67-002 TODO Integrate VEX gate provider
360 SPRINT_129_policy_reasoning RISK-ENGINE-67-003 TODO Add fix availability
361 SPRINT_129_policy_reasoning RISK-ENGINE-67-003 TODO asset criticality
362 SPRINT_129_policy_reasoning RISK-ENGINE-68-001 TODO Persist scoring results + explanation pointers to Findings Ledger
363 SPRINT_129_policy_reasoning RISK-ENGINE-68-002 TODO Expose APIs (`/risk/jobs`
364 SPRINT_129_policy_reasoning RISK-ENGINE-68-002 TODO `/risk/results/{id}/explanation`)
365 SPRINT_129_policy_reasoning RISK-ENGINE-68-002 TODO `/risk/results`
366 SPRINT_129_policy_reasoning RISK-ENGINE-68-002 TODO filtering
367 SPRINT_129_policy_reasoning RISK-ENGINE-68-002 TODO include pagination
368 SPRINT_129_policy_reasoning RISK-ENGINE-69-001 TODO Implement simulation mode producing distributions
369 SPRINT_129_policy_reasoning RISK-ENGINE-69-002 TODO Add telemetry (spans
370 SPRINT_129_policy_reasoning RISK-ENGINE-69-002 TODO cache hits
371 SPRINT_129_policy_reasoning RISK-ENGINE-69-002 TODO job throughput
372 SPRINT_129_policy_reasoning RISK-ENGINE-69-002 TODO logs) for provider latency
373 SPRINT_129_policy_reasoning RISK-ENGINE-69-002 TODO metrics
374 SPRINT_129_policy_reasoning RISK-ENGINE-70-001 TODO Support offline provider bundles with manifest verification
375 SPRINT_129_policy_reasoning RISK-ENGINE-70-002 TODO Integrate runtime evidence provider
376 SPRINT_129_policy_reasoning VEXLENS-30-001 TODO CycloneDX VEX (status mapping
377 SPRINT_129_policy_reasoning VEXLENS-30-001 TODO Implement normalization pipeline for CSAF VEX
378 SPRINT_129_policy_reasoning VEXLENS-30-001 TODO OpenVEX
379 SPRINT_129_policy_reasoning VEXLENS-30-001 TODO justification mapping
380 SPRINT_129_policy_reasoning VEXLENS-30-001 TODO product tree parsing)
381 SPRINT_129_policy_reasoning VEXLENS-30-002 TODO CPE2.3
382 SPRINT_129_policy_reasoning VEXLENS-30-003 TODO DSSE
383 SPRINT_129_policy_reasoning VEXLENS-30-003 TODO Integrate signature verification (Ed25519
384 SPRINT_129_policy_reasoning VEXLENS-30-003 TODO PKIX) using issuer keys
385 SPRINT_129_policy_reasoning VEXLENS-30-003 TODO annotate evidence with verification state
386 SPRINT_129_policy_reasoning VEXLENS-30-004 TODO Implement trust weighting engine (issuer base weights
387 SPRINT_129_policy_reasoning VEXLENS-30-004 TODO justification modifiers
388 SPRINT_129_policy_reasoning VEXLENS-30-004 TODO recency decay
389 SPRINT_129_policy_reasoning VEXLENS-30-004 TODO signature modifiers
390 SPRINT_129_policy_reasoning VEXLENS-30-005 TODO AFFECTED
391 SPRINT_129_policy_reasoning VEXLENS-30-005 TODO DISPUTED
392 SPRINT_129_policy_reasoning VEXLENS-30-005 TODO FIXED
393 SPRINT_129_policy_reasoning VEXLENS-30-005 TODO Implement consensus algorithm producing `consensus_state`
394 SPRINT_129_policy_reasoning VEXLENS-30-005 TODO UNDER_INVESTIGATION
395 SPRINT_129_policy_reasoning VEXLENS-30-005 TODO `confidence`
396 SPRINT_129_policy_reasoning VEXLENS-30-005 TODO `quorum`
397 SPRINT_129_policy_reasoning VEXLENS-30-005 TODO `rationale`
398 SPRINT_129_policy_reasoning VEXLENS-30-005 TODO `weights`
399 SPRINT_129_policy_reasoning VEXLENS-30-005 TODO support states: NOT_AFFECTED
400 SPRINT_129_policy_reasoning VEXLENS-30-006 TODO Materialize consensus projection storage with idempotent workers triggered by VEX/Policy changes
401 SPRINT_129_policy_reasoning VEXLENS-30-007 TODO Expose APIs (`/vex/consensus`
402 SPRINT_129_policy_reasoning VEXLENS-30-007 TODO `/vex/consensus/export`) with pagination
403 SPRINT_129_policy_reasoning VEXLENS-30-007 TODO `/vex/consensus/query`
404 SPRINT_129_policy_reasoning VEXLENS-30-007 TODO `/vex/consensus/simulate`
405 SPRINT_129_policy_reasoning VEXLENS-30-007 TODO `/vex/consensus/{id}`
406 SPRINT_129_policy_reasoning VEXLENS-30-007 TODO cost budgets
407 SPRINT_129_policy_reasoning VEXLENS-30-008 TODO Integrate consensus signals with Policy Engine (thresholds
408 SPRINT_129_policy_reasoning VEXLENS-30-008 TODO simulation inputs)
409 SPRINT_129_policy_reasoning VEXLENS-30-008 TODO suppression
410 SPRINT_129_policy_reasoning VEXLENS-30-009 TODO Instrument metrics (`vex_consensus_compute_latency`
411 SPRINT_129_policy_reasoning VEXLENS-30-009 TODO `vex_consensus_disputed_total`
412 SPRINT_129_policy_reasoning VEXLENS-30-009 TODO `vex_signature_verification_rate`)
413 SPRINT_129_policy_reasoning VEXLENS-30-009 TODO structured logs
414 SPRINT_129_policy_reasoning VEXLENS-30-009 TODO traces
415 SPRINT_129_policy_reasoning VEXLENS-30-010 TODO Develop unit/property/integration/load tests (10M records)
416 SPRINT_129_policy_reasoning VEXLENS-30-010 TODO determinism harness
417 SPRINT_129_policy_reasoning VEXLENS-30-011 TODO Provide deployment manifests
418 SPRINT_129_policy_reasoning VEXLENS-30-011 TODO caching configuration
419 SPRINT_129_policy_reasoning VEXLENS-30-011 TODO offline kit seeds
420 SPRINT_129_policy_reasoning VEXLENS-30-011 TODO scaling guides
421 SPRINT_129_policy_reasoning VEXLENS-AIAI-31-001 TODO Expose consensus rationale API enhancements (policy factors
422 SPRINT_129_policy_reasoning VEXLENS-AIAI-31-001 TODO issuer details
423 SPRINT_129_policy_reasoning VEXLENS-AIAI-31-001 TODO mapping issues) for Advisory AI conflict explanations
424 SPRINT_129_policy_reasoning VEXLENS-AIAI-31-002 TODO Provide caching hooks for consensus lookups used by Advisory AI (batch endpoints
425 SPRINT_129_policy_reasoning VEXLENS-EXPORT-35-001 TODO Provide consensus snapshot API delivering deterministic JSONL (state
426 SPRINT_129_policy_reasoning VEXLENS-EXPORT-35-001 TODO confidence
427 SPRINT_129_policy_reasoning VEXLENS-EXPORT-35-001 TODO provenance) for exporter mirror bundles
428 SPRINT_129_policy_reasoning VEXLENS-ORCH-33-001 TODO Register `consensus_compute` job type with orchestrator
429 SPRINT_129_policy_reasoning VEXLENS-ORCH-33-001 TODO expose job planning hooks for consensus batches
430 SPRINT_129_policy_reasoning VEXLENS-ORCH-33-001 TODO integrate worker SDK
431 SPRINT_129_policy_reasoning VEXLENS-ORCH-34-001 TODO Emit consensus completion events into orchestrator run ledger
432 SPRINT_129_policy_reasoning VEXLENS-ORCH-34-001 TODO provenance chain
433 SPRINT_129_policy_reasoning VULN-API-29-001 TODO Define OpenAPI spec (list/detail/query/simulation/workflow/export)
434 SPRINT_129_policy_reasoning VULN-API-29-001 TODO error codes
435 SPRINT_129_policy_reasoning VULN-API-29-001 TODO pagination/grouping contracts
436 SPRINT_129_policy_reasoning VULN-API-29-001 TODO query JSON schema
437 SPRINT_129_policy_reasoning VULN-API-29-002 TODO Implement list/query endpoints with policy parameter
438 SPRINT_129_policy_reasoning VULN-API-29-002 TODO caching
439 SPRINT_129_policy_reasoning VULN-API-29-002 TODO grouping
440 SPRINT_129_policy_reasoning VULN-API-29-002 TODO server paging
441 SPRINT_129_policy_reasoning VULN-API-29-003 TODO Implement detail endpoint aggregating evidence
442 SPRINT_129_policy_reasoning VULN-API-29-003 TODO paths (Graph Explorer deep link)
443 SPRINT_129_policy_reasoning VULN-API-29-003 TODO policy rationale
444 SPRINT_129_policy_reasoning VULN-API-29-004 TODO Expose workflow endpoints (assign
445 SPRINT_129_policy_reasoning VULN-API-29-004 TODO accept-risk
446 SPRINT_129_policy_reasoning VULN-API-29-004 TODO comment
447 SPRINT_129_policy_reasoning VULN-API-29-004 TODO target-fix
448 SPRINT_129_policy_reasoning VULN-API-29-004 TODO verify-fix
449 SPRINT_129_policy_reasoning VULN-API-29-005 TODO Implement simulation endpoint comparing `policy_from` vs `policy_to`
450 SPRINT_129_policy_reasoning VULN-API-29-005 TODO returning diffs without side effects
451 SPRINT_129_policy_reasoning VULN-API-29-006 TODO Integrate resolver results with Graph Explorer: include shortest path metadata
452 SPRINT_129_policy_reasoning VULN-API-29-006 TODO line up deep-link parameters
453 SPRINT_129_policy_reasoning VULN-API-29-007 TODO Enforce RBAC/ABAC scopes
454 SPRINT_129_policy_reasoning VULN-API-29-007 TODO implement CSRF/anti-forgery checks for Console
455 SPRINT_129_policy_reasoning VULN-API-29-007 TODO secure attachment URLs
456 SPRINT_129_policy_reasoning VULN-API-29-008 TODO Build export orchestrator producing signed bundles (manifest
457 SPRINT_129_policy_reasoning VULN-API-29-008 TODO NDJSON
458 SPRINT_129_policy_reasoning VULN-API-29-008 TODO checksums
459 SPRINT_129_policy_reasoning VULN-API-29-008 TODO signature). Integrate with Findings Ledger for evidence
460 SPRINT_129_policy_reasoning VULN-API-29-009 TODO Instrument metrics (`vuln_list_latency`
461 SPRINT_129_policy_reasoning VULN-API-29-009 TODO `vuln_export_duration`
462 SPRINT_129_policy_reasoning VULN-API-29-009 TODO `vuln_simulation_latency`
463 SPRINT_129_policy_reasoning VULN-API-29-009 TODO `vuln_workflow_events_total`)
464 SPRINT_129_policy_reasoning VULN-API-29-009 TODO structured logs
465 SPRINT_129_policy_reasoning VULN-API-29-009 TODO traces
466 SPRINT_129_policy_reasoning VULN-API-29-010 TODO Provide unit/integration/perf tests (5M findings)
467 SPRINT_129_policy_reasoning VULN-API-29-010 TODO fuzz query validation
468 SPRINT_129_policy_reasoning VULN-API-29-011 TODO CI smoke
469 SPRINT_129_policy_reasoning VULN-API-29-011 TODO Package deployment (Helm/Compose)
470 SPRINT_129_policy_reasoning VULN-API-29-011 TODO health checks
471 SPRINT_129_policy_reasoning VULN-API-29-011 TODO offline kit steps
472 SPRINT_131_scanner_surface SCANNER-ANALYZERS-DENO-26-009 TODO SCANNER-ANALYZERS-DENO-26-008
473 SPRINT_131_scanner_surface SCANNER-ANALYZERS-JAVA-21-005 TODO
474 SPRINT_131_scanner_surface SCANNER-ANALYZERS-LANG-11-001 TODO SCANNER-ANALYZERS-LANG-10-309
475 SPRINT_132_scanner_surface SCANNER-ANALYZERS-NATIVE-20-001 TODO
476 SPRINT_132_scanner_surface SCANNER-ANALYZERS-NODE-22-001 TODO
477 SPRINT_133_scanner_surface SCANNER-ANALYZERS-PHP-27-001 TODO
478 SPRINT_134_scanner_surface SCANNER-ANALYZERS-PYTHON-23-001 TODO
479 SPRINT_135_scanner_surface SCANNER-ANALYZERS-RUBY-28-001 TODO
480 SPRINT_135_scanner_surface SCANNER-ENTRYTRACE-18-502 TODO SCANNER-ENTRYTRACE-18-508
481 SPRINT_136_scanner_surface SCANNER-ENG-0020 TODO
482 SPRINT_136_scanner_surface SCANNER-ENG-0021 TODO
483 SPRINT_136_scanner_surface SCANNER-ENG-0022 TODO
484 SPRINT_136_scanner_surface SCANNER-ENG-0023 TODO
485 SPRINT_136_scanner_surface SCANNER-ENG-0024 TODO
486 SPRINT_136_scanner_surface SCANNER-ENG-0025 TODO
487 SPRINT_136_scanner_surface SCANNER-ENG-0026 TODO
488 SPRINT_136_scanner_surface SCANNER-ENG-0027 TODO
489 SPRINT_136_scanner_surface SCANNER-ENV-01 TODO
490 SPRINT_136_scanner_surface SCANNER-EVENTS-16-301 BLOCKED
491 SPRINT_136_scanner_surface SCANNER-GRAPH-21-001 TODO
492 SPRINT_136_scanner_surface SCANNER-LNM-21-001 TODO
493 SPRINT_136_scanner_surface SCANNER-SECRETS-03 TODO SCANNER-SECRETS-02
494 SPRINT_136_scanner_surface SCANNER-SURFACE-04 TODO SCANNER-SURFACE-01
495 SPRINT_136_scanner_surface SCHED-SURFACE-02 TODO SURFACE-FS-02
496 SPRINT_136_scanner_surface SURFACE-FS-03 TODO SURFACE-FS-02
497 SPRINT_136_scanner_surface SURFACE-FS-04 TODO SURFACE-FS-02
498 SPRINT_136_scanner_surface SURFACE-FS-06 TODO SURFACE-FS-02..05
499 SPRINT_136_scanner_surface SURFACE-SECRETS-01 DOING
500 SPRINT_136_scanner_surface SURFACE-VAL-01 DOING SURFACE-FS-01
501 SPRINT_136_scanner_surface SURFACE-VAL-02 TODO SURFACE-FS-02
502 SPRINT_136_scanner_surface ZASTAVA-SURFACE-02 TODO SURFACE-FS-02
503 SPRINT_138_scanner_ruby_parity SCANNER-ENG-0008 TODO
504 SPRINT_138_scanner_ruby_parity SCANNER-ENG-0010 TODO SCANNER-ANALYZERS-PHP-27-001..012
505 SPRINT_138_scanner_ruby_parity SCANNER-ENG-0011 TODO
506 SPRINT_138_scanner_ruby_parity SCANNER-ENG-0012 TODO
507 SPRINT_138_scanner_ruby_parity SCANNER-ENG-0013 TODO
508 SPRINT_138_scanner_ruby_parity SCANNER-ENG-0014 TODO
509 SPRINT_301_docs_tasks_md_i DOCS-AIAI-31-004 DOING DOCS-AIAI-31-003
510 SPRINT_301_docs_tasks_md_i DOCS-AIAI-31-008 BLOCKED DOCS-AIAI-31-007
511 SPRINT_301_docs_tasks_md_i DOCS-AIRGAP-56-001 TODO
512 SPRINT_301_docs_tasks_md_i DOCS-POLICY-DET-01 TODO POLICY-DET backlog
513 SPRINT_301_docs_tasks_md_i DOCS-SCANNER-DET-01 DOING Sprint 136 outputs
514 SPRINT_301_docs_tasks_md_i DOCS-SCANNER-DET-01 DOING scanner determinism fixtures

View File

@@ -1,290 +0,0 @@
Sprint | Task ID | Status | Blocking dependency | Dep status | Dep sprint
SPRINT_110_ingestion_evidence | AIRGAP-TIME-57-001 | TODO | MIRROR-CRT-56-001 | TODO | SPRINT_110_ingestion_evidence
SPRINT_110_ingestion_evidence | CONCELIER-AIAI-31-002 | DOING | CONCELIER-GRAPH-21-001 | BLOCKED | SPRINT_113_concelier_ii
SPRINT_110_ingestion_evidence | CONCELIER-ATTEST-73-001 | TODO | CONCELIER-AIAI-31-002 | DOING | SPRINT_110_ingestion_evidence
SPRINT_110_ingestion_evidence | DOCS-AIAI-31-004 | DOING | CONSOLE-VEX-30-001 | DOING | SPRINT_212_web_i
SPRINT_110_ingestion_evidence | DOCS-AIAI-31-004 | DOING | CONSOLE-VULN-29-001 | DOING | SPRINT_212_web_i
SPRINT_110_ingestion_evidence | DOCS-AIAI-31-004 | DOING | SBOM-AIAI-31-001 | TODO | SPRINT_140_runtime_signals
SPRINT_110_ingestion_evidence | DOCS-AIAI-31-005 | BLOCKED | CLI-VEX-30-001 | TODO | SPRINT_205_cli_v
SPRINT_110_ingestion_evidence | DOCS-AIAI-31-005 | BLOCKED | CLI-VULN-29-001 | TODO | SPRINT_205_cli_v
SPRINT_110_ingestion_evidence | DOCS-AIAI-31-005 | BLOCKED | DEVOPS-AIAI-31-001 | TODO | SPRINT_503_ops_devops_i
SPRINT_110_ingestion_evidence | DOCS-AIAI-31-005 | BLOCKED | DOCS-AIAI-31-004 | DOING | SPRINT_110_ingestion_evidence
SPRINT_110_ingestion_evidence | DOCS-AIAI-31-005 | BLOCKED | POLICY-ENGINE-31-001 | TODO | SPRINT_125_policy_reasoning
SPRINT_110_ingestion_evidence | EXCITITOR-AIAI-31-003 | TODO | EXCITITOR-AIAI-31-002 | TODO | SPRINT_110_ingestion_evidence
SPRINT_110_ingestion_evidence | EXCITITOR-AIAI-31-004 | TODO | EXCITITOR-AIAI-31-002 | TODO | SPRINT_110_ingestion_evidence
SPRINT_110_ingestion_evidence | EXCITITOR-ATTEST-01-003 | TODO | EXCITITOR-AIAI-31-002 | TODO | SPRINT_110_ingestion_evidence
SPRINT_110_ingestion_evidence | EXPORT-OBS-51-001 | TODO | MIRROR-CRT-56-001 | TODO | SPRINT_110_ingestion_evidence
SPRINT_110_ingestion_evidence | MIRROR-CRT-56-002 | TODO | MIRROR-CRT-56-001 | TODO | SPRINT_110_ingestion_evidence
SPRINT_110_ingestion_evidence | MIRROR-CRT-56-002 | TODO | PROV-OBS-53-001 | TODO | SPRINT_125_mirror
SPRINT_110_ingestion_evidence | MIRROR-CRT-57-001 | TODO | AIRGAP-TIME-57-001 | TODO | SPRINT_110_ingestion_evidence
SPRINT_110_ingestion_evidence | MIRROR-CRT-57-001 | TODO | MIRROR-CRT-56-001 | TODO | SPRINT_110_ingestion_evidence
SPRINT_110_ingestion_evidence | MIRROR-CRT-58-001 | TODO | CLI-AIRGAP-56-001 | TODO | SPRINT_125_mirror
SPRINT_110_ingestion_evidence | MIRROR-CRT-58-001 | TODO | EXPORT-OBS-54-001 | TODO | SPRINT_163_exportcenter_ii
SPRINT_110_ingestion_evidence | MIRROR-CRT-58-001 | TODO | MIRROR-CRT-56-001 | TODO | SPRINT_110_ingestion_evidence
SPRINT_110_ingestion_evidence | SBOM-AIAI-31-003 | BLOCKED | CLI-VEX-30-001 | TODO | SPRINT_205_cli_v
SPRINT_110_ingestion_evidence | SBOM-AIAI-31-003 | BLOCKED | CLI-VULN-29-001 | TODO | SPRINT_205_cli_v
SPRINT_110_ingestion_evidence | SBOM-AIAI-31-003 | BLOCKED | SBOM-AIAI-31-001 | TODO | SPRINT_140_runtime_signals
SPRINT_120_policy_reasoning | LEDGER-29-008 | TODO | LEDGER-29-007 | TODO | SPRINT_120_policy_reasoning
SPRINT_120_policy_reasoning | LEDGER-29-009 | TODO | LEDGER-29-008 | TODO | SPRINT_120_policy_reasoning
SPRINT_120_policy_reasoning | LEDGER-34-101 | TODO | LEDGER-29-009 | TODO | SPRINT_120_policy_reasoning
SPRINT_120_policy_reasoning | LEDGER-AIRGAP-56-002 | TODO | LEDGER-AIRGAP-56-001 | TODO | SPRINT_120_policy_reasoning
SPRINT_120_policy_reasoning | LEDGER-AIRGAP-57-001 | TODO | LEDGER-AIRGAP-56-002 | TODO | SPRINT_120_policy_reasoning
SPRINT_120_policy_reasoning | LEDGER-AIRGAP-58-001 | TODO | LEDGER-AIRGAP-57-001 | TODO | SPRINT_120_policy_reasoning
SPRINT_121_policy_reasoning | LEDGER-ATTEST-73-002 | TODO | LEDGER-ATTEST-73-001 | TODO | SPRINT_120_policy_reasoning
SPRINT_121_policy_reasoning | LEDGER-OAS-61-002 | TODO | LEDGER-OAS-61-001 | TODO | SPRINT_121_policy_reasoning
SPRINT_121_policy_reasoning | LEDGER-OAS-62-001 | TODO | LEDGER-OAS-61-002 | TODO | SPRINT_121_policy_reasoning
SPRINT_121_policy_reasoning | LEDGER-OAS-63-001 | TODO | LEDGER-OAS-62-001 | TODO | SPRINT_121_policy_reasoning
SPRINT_121_policy_reasoning | LEDGER-OBS-51-001 | TODO | LEDGER-OBS-50-001 | TODO | SPRINT_121_policy_reasoning
SPRINT_121_policy_reasoning | LEDGER-OBS-52-001 | TODO | LEDGER-OBS-51-001 | TODO | SPRINT_121_policy_reasoning
SPRINT_121_policy_reasoning | LEDGER-OBS-53-001 | TODO | LEDGER-OBS-52-001 | TODO | SPRINT_121_policy_reasoning
SPRINT_121_policy_reasoning | LEDGER-OBS-54-001 | TODO | LEDGER-OBS-53-001 | TODO | SPRINT_121_policy_reasoning
SPRINT_121_policy_reasoning | LEDGER-OBS-55-001 | TODO | LEDGER-OBS-54-001 | TODO | SPRINT_121_policy_reasoning
SPRINT_121_policy_reasoning | LEDGER-RISK-66-002 | TODO | LEDGER-RISK-66-001 | TODO | SPRINT_121_policy_reasoning
SPRINT_122_policy_reasoning | LEDGER-RISK-67-001 | TODO | LEDGER-RISK-66-002 | TODO | SPRINT_121_policy_reasoning
SPRINT_122_policy_reasoning | LEDGER-RISK-68-001 | TODO | LEDGER-RISK-67-001 | TODO | SPRINT_122_policy_reasoning
SPRINT_122_policy_reasoning | LEDGER-RISK-69-001 | TODO | LEDGER-RISK-68-001 | TODO | SPRINT_122_policy_reasoning
SPRINT_123_policy_reasoning | POLICY-AIRGAP-56-002 | TODO | POLICY-AIRGAP-56-001 | TODO | SPRINT_123_policy_reasoning
SPRINT_123_policy_reasoning | POLICY-AIRGAP-57-001 | TODO | POLICY-AIRGAP-56-002 | TODO | SPRINT_123_policy_reasoning
SPRINT_123_policy_reasoning | POLICY-AIRGAP-57-002 | TODO | POLICY-AIRGAP-57-001 | TODO | SPRINT_123_policy_reasoning
SPRINT_123_policy_reasoning | POLICY-AIRGAP-58-001 | TODO | POLICY-AIRGAP-57-002 | TODO | SPRINT_123_policy_reasoning
SPRINT_123_policy_reasoning | POLICY-AOC-19-002 | TODO | POLICY-AOC-19-001 | TODO | SPRINT_123_policy_reasoning
SPRINT_123_policy_reasoning | POLICY-AOC-19-003 | TODO | POLICY-AOC-19-002 | TODO | SPRINT_123_policy_reasoning
SPRINT_123_policy_reasoning | POLICY-AOC-19-004 | TODO | POLICY-AOC-19-003 | TODO | SPRINT_123_policy_reasoning
SPRINT_123_policy_reasoning | POLICY-ATTEST-73-002 | TODO | POLICY-ATTEST-73-001 | TODO | SPRINT_123_policy_reasoning
SPRINT_123_policy_reasoning | POLICY-ATTEST-74-001 | TODO | POLICY-ATTEST-73-002 | TODO | SPRINT_123_policy_reasoning
SPRINT_123_policy_reasoning | POLICY-ATTEST-74-002 | TODO | POLICY-ATTEST-74-001 | TODO | SPRINT_123_policy_reasoning
SPRINT_124_policy_reasoning | POLICY-CONSOLE-23-002 | TODO | POLICY-CONSOLE-23-001 | TODO | SPRINT_123_policy_reasoning
SPRINT_124_policy_reasoning | POLICY-ENGINE-20-003 | TODO | POLICY-ENGINE-20-002 | BLOCKED | SPRINT_124_policy_reasoning
SPRINT_124_policy_reasoning | POLICY-ENGINE-20-004 | TODO | POLICY-ENGINE-20-003 | TODO | SPRINT_124_policy_reasoning
SPRINT_124_policy_reasoning | POLICY-ENGINE-20-005 | TODO | POLICY-ENGINE-20-004 | TODO | SPRINT_124_policy_reasoning
SPRINT_124_policy_reasoning | POLICY-ENGINE-20-006 | TODO | POLICY-ENGINE-20-005 | TODO | SPRINT_124_policy_reasoning
SPRINT_124_policy_reasoning | POLICY-ENGINE-20-007 | TODO | POLICY-ENGINE-20-006 | TODO | SPRINT_124_policy_reasoning
SPRINT_124_policy_reasoning | POLICY-ENGINE-20-008 | TODO | POLICY-ENGINE-20-007 | TODO | SPRINT_124_policy_reasoning
SPRINT_124_policy_reasoning | POLICY-ENGINE-20-009 | TODO | POLICY-ENGINE-20-008 | TODO | SPRINT_124_policy_reasoning
SPRINT_124_policy_reasoning | POLICY-ENGINE-27-001 | TODO | POLICY-ENGINE-20-009 | TODO | SPRINT_124_policy_reasoning
SPRINT_124_policy_reasoning | POLICY-ENGINE-27-002 | TODO | POLICY-ENGINE-27-001 | TODO | SPRINT_124_policy_reasoning
SPRINT_124_policy_reasoning | POLICY-ENGINE-29-002 | TODO | POLICY-ENGINE-29-001 | TODO | SPRINT_124_policy_reasoning
SPRINT_125_mirror | AIRGAP-TIME-57-001 | TODO | MIRROR-CRT-56-001 | TODO | SPRINT_110_ingestion_evidence
SPRINT_125_mirror | AIRGAP-TIME-57-001 | TODO | MIRROR-CRT-57-002 | TODO | SPRINT_125_mirror
SPRINT_125_mirror | CLI-AIRGAP-56-001 | TODO | MIRROR-CRT-56-002 | TODO | SPRINT_110_ingestion_evidence
SPRINT_125_mirror | CLI-AIRGAP-56-001 | TODO | MIRROR-CRT-58-001 | TODO | SPRINT_110_ingestion_evidence
SPRINT_125_mirror | EXPORT-OBS-51-001 | TODO | MIRROR-CRT-56-001 | TODO | SPRINT_110_ingestion_evidence
SPRINT_125_mirror | MIRROR-CRT-56-002 | TODO | MIRROR-CRT-56-001 | TODO | SPRINT_110_ingestion_evidence
SPRINT_125_mirror | MIRROR-CRT-56-002 | TODO | PROV-OBS-53-001 | TODO | SPRINT_125_mirror
SPRINT_125_mirror | MIRROR-CRT-57-001 | TODO | MIRROR-CRT-56-001 | TODO | SPRINT_110_ingestion_evidence
SPRINT_125_mirror | MIRROR-CRT-57-002 | TODO | AIRGAP-TIME-57-001 | TODO | SPRINT_110_ingestion_evidence
SPRINT_125_mirror | MIRROR-CRT-57-002 | TODO | MIRROR-CRT-56-002 | TODO | SPRINT_110_ingestion_evidence
SPRINT_125_mirror | MIRROR-CRT-58-001 | TODO | CLI-AIRGAP-56-001 | TODO | SPRINT_125_mirror
SPRINT_125_mirror | MIRROR-CRT-58-001 | TODO | MIRROR-CRT-56-002 | TODO | SPRINT_110_ingestion_evidence
SPRINT_125_mirror | MIRROR-CRT-58-002 | TODO | EXPORT-OBS-54-001 | TODO | SPRINT_163_exportcenter_ii
SPRINT_125_mirror | MIRROR-CRT-58-002 | TODO | MIRROR-CRT-56-002 | TODO | SPRINT_110_ingestion_evidence
SPRINT_125_mirror | PROV-OBS-53-001 | TODO | MIRROR-CRT-56-001 | TODO | SPRINT_110_ingestion_evidence
SPRINT_125_policy_reasoning | POLICY-ENGINE-29-003 | TODO | POLICY-ENGINE-29-002 | TODO | SPRINT_124_policy_reasoning
SPRINT_125_policy_reasoning | POLICY-ENGINE-29-004 | TODO | POLICY-ENGINE-29-003 | TODO | SPRINT_125_policy_reasoning
SPRINT_125_policy_reasoning | POLICY-ENGINE-30-001 | TODO | POLICY-ENGINE-29-004 | TODO | SPRINT_125_policy_reasoning
SPRINT_125_policy_reasoning | POLICY-ENGINE-30-002 | TODO | POLICY-ENGINE-30-001 | TODO | SPRINT_125_policy_reasoning
SPRINT_125_policy_reasoning | POLICY-ENGINE-30-003 | TODO | POLICY-ENGINE-30-002 | TODO | SPRINT_125_policy_reasoning
SPRINT_125_policy_reasoning | POLICY-ENGINE-30-101 | TODO | POLICY-ENGINE-30-003 | TODO | SPRINT_125_policy_reasoning
SPRINT_125_policy_reasoning | POLICY-ENGINE-31-001 | TODO | POLICY-ENGINE-30-101 | TODO | SPRINT_125_policy_reasoning
SPRINT_125_policy_reasoning | POLICY-ENGINE-31-002 | TODO | POLICY-ENGINE-31-001 | TODO | SPRINT_125_policy_reasoning
SPRINT_125_policy_reasoning | POLICY-ENGINE-32-101 | TODO | POLICY-ENGINE-31-002 | TODO | SPRINT_125_policy_reasoning
SPRINT_125_policy_reasoning | POLICY-ENGINE-33-101 | TODO | POLICY-ENGINE-32-101 | TODO | SPRINT_125_policy_reasoning
SPRINT_125_policy_reasoning | POLICY-ENGINE-34-101 | TODO | POLICY-ENGINE-33-101 | TODO | SPRINT_125_policy_reasoning
SPRINT_125_policy_reasoning | POLICY-ENGINE-35-201 | TODO | POLICY-ENGINE-34-101 | TODO | SPRINT_125_policy_reasoning
SPRINT_125_policy_reasoning | POLICY-ENGINE-38-201 | TODO | POLICY-ENGINE-35-201 | TODO | SPRINT_125_policy_reasoning
SPRINT_125_policy_reasoning | POLICY-ENGINE-40-001 | TODO | POLICY-ENGINE-38-201 | TODO | SPRINT_125_policy_reasoning
SPRINT_125_policy_reasoning | POLICY-ENGINE-40-002 | TODO | POLICY-ENGINE-40-001 | TODO | SPRINT_125_policy_reasoning
SPRINT_126_policy_reasoning | POLICY-ENGINE-40-003 | TODO | POLICY-ENGINE-40-002 | TODO | SPRINT_125_policy_reasoning
SPRINT_126_policy_reasoning | POLICY-ENGINE-50-001 | TODO | POLICY-ENGINE-40-003 | TODO | SPRINT_126_policy_reasoning
SPRINT_126_policy_reasoning | POLICY-ENGINE-50-002 | TODO | POLICY-ENGINE-50-001 | TODO | SPRINT_126_policy_reasoning
SPRINT_126_policy_reasoning | POLICY-ENGINE-50-003 | TODO | POLICY-ENGINE-50-002 | TODO | SPRINT_126_policy_reasoning
SPRINT_126_policy_reasoning | POLICY-ENGINE-50-004 | TODO | POLICY-ENGINE-50-003 | TODO | SPRINT_126_policy_reasoning
SPRINT_126_policy_reasoning | POLICY-ENGINE-50-005 | TODO | POLICY-ENGINE-50-004 | TODO | SPRINT_126_policy_reasoning
SPRINT_126_policy_reasoning | POLICY-ENGINE-50-006 | TODO | POLICY-ENGINE-50-005 | TODO | SPRINT_126_policy_reasoning
SPRINT_126_policy_reasoning | POLICY-ENGINE-50-007 | TODO | POLICY-ENGINE-50-006 | TODO | SPRINT_126_policy_reasoning
SPRINT_126_policy_reasoning | POLICY-ENGINE-60-001 | TODO | POLICY-ENGINE-50-007 | TODO | SPRINT_126_policy_reasoning
SPRINT_126_policy_reasoning | POLICY-ENGINE-60-002 | TODO | POLICY-ENGINE-60-001 | TODO | SPRINT_126_policy_reasoning
SPRINT_126_policy_reasoning | POLICY-ENGINE-70-002 | TODO | POLICY-ENGINE-60-002 | TODO | SPRINT_126_policy_reasoning
SPRINT_126_policy_reasoning | POLICY-ENGINE-70-003 | TODO | POLICY-ENGINE-70-002 | TODO | SPRINT_126_policy_reasoning
SPRINT_126_policy_reasoning | POLICY-ENGINE-70-004 | TODO | POLICY-ENGINE-70-003 | TODO | SPRINT_126_policy_reasoning
SPRINT_126_policy_reasoning | POLICY-ENGINE-70-005 | TODO | POLICY-ENGINE-70-004 | TODO | SPRINT_126_policy_reasoning
SPRINT_126_policy_reasoning | POLICY-ENGINE-80-001 | TODO | POLICY-ENGINE-70-005 | TODO | SPRINT_126_policy_reasoning
SPRINT_127_policy_reasoning | POLICY-ENGINE-80-002 | TODO | POLICY-ENGINE-80-001 | TODO | SPRINT_126_policy_reasoning
SPRINT_127_policy_reasoning | POLICY-ENGINE-80-003 | TODO | POLICY-ENGINE-80-002 | TODO | SPRINT_127_policy_reasoning
SPRINT_127_policy_reasoning | POLICY-ENGINE-80-004 | TODO | POLICY-ENGINE-80-003 | TODO | SPRINT_127_policy_reasoning
SPRINT_127_policy_reasoning | POLICY-OBS-51-001 | TODO | POLICY-OBS-50-001 | TODO | SPRINT_127_policy_reasoning
SPRINT_127_policy_reasoning | POLICY-OBS-52-001 | TODO | POLICY-OBS-51-001 | TODO | SPRINT_127_policy_reasoning
SPRINT_127_policy_reasoning | POLICY-OBS-53-001 | TODO | POLICY-OBS-52-001 | TODO | SPRINT_127_policy_reasoning
SPRINT_127_policy_reasoning | POLICY-OBS-54-001 | TODO | POLICY-OBS-53-001 | TODO | SPRINT_127_policy_reasoning
SPRINT_127_policy_reasoning | POLICY-OBS-55-001 | TODO | POLICY-OBS-54-001 | TODO | SPRINT_127_policy_reasoning
SPRINT_127_policy_reasoning | POLICY-RISK-66-002 | TODO | POLICY-RISK-66-001 | TODO | SPRINT_127_policy_reasoning
SPRINT_127_policy_reasoning | POLICY-RISK-66-003 | TODO | POLICY-RISK-66-002 | TODO | SPRINT_127_policy_reasoning
SPRINT_127_policy_reasoning | POLICY-RISK-66-004 | TODO | POLICY-RISK-66-003 | TODO | SPRINT_127_policy_reasoning
SPRINT_127_policy_reasoning | POLICY-RISK-67-001 | TODO | POLICY-RISK-66-004 | TODO | SPRINT_127_policy_reasoning
SPRINT_127_policy_reasoning | POLICY-RISK-67-001 | TODO | POLICY-RISK-67-001 | TODO | SPRINT_127_policy_reasoning
SPRINT_128_policy_reasoning | POLICY-RISK-67-002 | TODO | POLICY-RISK-67-001 | TODO | SPRINT_127_policy_reasoning
SPRINT_128_policy_reasoning | POLICY-RISK-67-002 | TODO | POLICY-RISK-67-002 | TODO | SPRINT_128_policy_reasoning
SPRINT_128_policy_reasoning | POLICY-RISK-67-003 | TODO | POLICY-RISK-67-002 | TODO | SPRINT_128_policy_reasoning
SPRINT_128_policy_reasoning | POLICY-RISK-68-001 | TODO | POLICY-RISK-67-003 | TODO | SPRINT_128_policy_reasoning
SPRINT_128_policy_reasoning | POLICY-RISK-68-001 | TODO | POLICY-RISK-68-001 | TODO | SPRINT_128_policy_reasoning
SPRINT_128_policy_reasoning | POLICY-RISK-68-002 | TODO | POLICY-RISK-68-001 | TODO | SPRINT_128_policy_reasoning
SPRINT_128_policy_reasoning | POLICY-RISK-68-002 | TODO | POLICY-RISK-68-002 | TODO | SPRINT_128_policy_reasoning
SPRINT_128_policy_reasoning | POLICY-RISK-69-001 | TODO | POLICY-RISK-68-002 | TODO | SPRINT_128_policy_reasoning
SPRINT_128_policy_reasoning | POLICY-RISK-70-001 | TODO | POLICY-RISK-69-001 | TODO | SPRINT_128_policy_reasoning
SPRINT_128_policy_reasoning | POLICY-SPL-23-002 | TODO | POLICY-SPL-23-001 | TODO | SPRINT_128_policy_reasoning
SPRINT_128_policy_reasoning | POLICY-SPL-23-003 | TODO | POLICY-SPL-23-002 | TODO | SPRINT_128_policy_reasoning
SPRINT_128_policy_reasoning | POLICY-SPL-23-004 | TODO | POLICY-SPL-23-003 | TODO | SPRINT_128_policy_reasoning
SPRINT_128_policy_reasoning | POLICY-SPL-23-005 | TODO | POLICY-SPL-23-004 | TODO | SPRINT_128_policy_reasoning
SPRINT_128_policy_reasoning | POLICY-SPL-24-001 | TODO | POLICY-SPL-23-005 | TODO | SPRINT_128_policy_reasoning
SPRINT_129_policy_reasoning | REGISTRY-API-27-002 | TODO | REGISTRY-API-27-001 | TODO | SPRINT_129_policy_reasoning
SPRINT_129_policy_reasoning | REGISTRY-API-27-003 | TODO | REGISTRY-API-27-002 | TODO | SPRINT_129_policy_reasoning
SPRINT_129_policy_reasoning | REGISTRY-API-27-004 | TODO | REGISTRY-API-27-003 | TODO | SPRINT_129_policy_reasoning
SPRINT_129_policy_reasoning | REGISTRY-API-27-005 | TODO | REGISTRY-API-27-004 | TODO | SPRINT_129_policy_reasoning
SPRINT_129_policy_reasoning | REGISTRY-API-27-006 | TODO | REGISTRY-API-27-005 | TODO | SPRINT_129_policy_reasoning
SPRINT_129_policy_reasoning | REGISTRY-API-27-007 | TODO | REGISTRY-API-27-006 | TODO | SPRINT_129_policy_reasoning
SPRINT_129_policy_reasoning | REGISTRY-API-27-008 | TODO | REGISTRY-API-27-007 | TODO | SPRINT_129_policy_reasoning
SPRINT_129_policy_reasoning | REGISTRY-API-27-009 | TODO | REGISTRY-API-27-008 | TODO | SPRINT_129_policy_reasoning
SPRINT_129_policy_reasoning | REGISTRY-API-27-010 | TODO | REGISTRY-API-27-009 | TODO | SPRINT_129_policy_reasoning
SPRINT_129_policy_reasoning | RISK-ENGINE-66-002 | TODO | RISK-ENGINE-66-001 | TODO | SPRINT_129_policy_reasoning
SPRINT_129_policy_reasoning | RISK-ENGINE-67-001 | TODO | RISK-ENGINE-66-002 | TODO | SPRINT_129_policy_reasoning
SPRINT_129_policy_reasoning | RISK-ENGINE-67-002 | TODO | RISK-ENGINE-67-001 | TODO | SPRINT_129_policy_reasoning
SPRINT_129_policy_reasoning | RISK-ENGINE-67-003 | TODO | RISK-ENGINE-67-002 | TODO | SPRINT_129_policy_reasoning
SPRINT_129_policy_reasoning | RISK-ENGINE-68-001 | TODO | RISK-ENGINE-67-003 | TODO | SPRINT_129_policy_reasoning
SPRINT_129_policy_reasoning | RISK-ENGINE-68-002 | TODO | RISK-ENGINE-68-001 | TODO | SPRINT_129_policy_reasoning
SPRINT_129_policy_reasoning | RISK-ENGINE-69-001 | TODO | RISK-ENGINE-68-002 | TODO | SPRINT_129_policy_reasoning
SPRINT_129_policy_reasoning | RISK-ENGINE-69-002 | TODO | RISK-ENGINE-69-001 | TODO | SPRINT_129_policy_reasoning
SPRINT_129_policy_reasoning | RISK-ENGINE-70-001 | TODO | RISK-ENGINE-69-002 | TODO | SPRINT_129_policy_reasoning
SPRINT_129_policy_reasoning | RISK-ENGINE-70-002 | TODO | RISK-ENGINE-70-001 | TODO | SPRINT_129_policy_reasoning
SPRINT_129_policy_reasoning | VEXLENS-30-002 | TODO | VEXLENS-30-001 | TODO | SPRINT_129_policy_reasoning
SPRINT_129_policy_reasoning | VEXLENS-30-003 | TODO | VEXLENS-30-002 | TODO | SPRINT_129_policy_reasoning
SPRINT_129_policy_reasoning | VEXLENS-30-004 | TODO | VEXLENS-30-003 | TODO | SPRINT_129_policy_reasoning
SPRINT_129_policy_reasoning | VEXLENS-30-005 | TODO | VEXLENS-30-004 | TODO | SPRINT_129_policy_reasoning
SPRINT_129_policy_reasoning | VEXLENS-30-006 | TODO | VEXLENS-30-005 | TODO | SPRINT_129_policy_reasoning
SPRINT_129_policy_reasoning | VEXLENS-30-007 | TODO | VEXLENS-30-006 | TODO | SPRINT_129_policy_reasoning
SPRINT_129_policy_reasoning | VEXLENS-30-008 | TODO | VEXLENS-30-007 | TODO | SPRINT_129_policy_reasoning
SPRINT_129_policy_reasoning | VEXLENS-30-009 | TODO | VEXLENS-30-008 | TODO | SPRINT_129_policy_reasoning
SPRINT_129_policy_reasoning | VEXLENS-30-010 | TODO | VEXLENS-30-009 | TODO | SPRINT_129_policy_reasoning
SPRINT_129_policy_reasoning | VEXLENS-30-011 | TODO | VEXLENS-30-010 | TODO | SPRINT_129_policy_reasoning
SPRINT_129_policy_reasoning | VEXLENS-AIAI-31-002 | TODO | VEXLENS-AIAI-31-001 | TODO | SPRINT_129_policy_reasoning
SPRINT_129_policy_reasoning | VEXLENS-ORCH-34-001 | TODO | VEXLENS-ORCH-33-001 | TODO | SPRINT_129_policy_reasoning
SPRINT_129_policy_reasoning | VULN-API-29-002 | TODO | VULN-API-29-001 | TODO | SPRINT_129_policy_reasoning
SPRINT_129_policy_reasoning | VULN-API-29-003 | TODO | VULN-API-29-002 | TODO | SPRINT_129_policy_reasoning
SPRINT_129_policy_reasoning | VULN-API-29-004 | TODO | VULN-API-29-003 | TODO | SPRINT_129_policy_reasoning
SPRINT_129_policy_reasoning | VULN-API-29-005 | TODO | VULN-API-29-004 | TODO | SPRINT_129_policy_reasoning
SPRINT_129_policy_reasoning | VULN-API-29-006 | TODO | VULN-API-29-005 | TODO | SPRINT_129_policy_reasoning
SPRINT_129_policy_reasoning | VULN-API-29-007 | TODO | VULN-API-29-006 | TODO | SPRINT_129_policy_reasoning
SPRINT_129_policy_reasoning | VULN-API-29-008 | TODO | VULN-API-29-007 | TODO | SPRINT_129_policy_reasoning
SPRINT_129_policy_reasoning | VULN-API-29-009 | TODO | VULN-API-29-008 | TODO | SPRINT_129_policy_reasoning
SPRINT_129_policy_reasoning | VULN-API-29-010 | TODO | VULN-API-29-009 | TODO | SPRINT_129_policy_reasoning
SPRINT_129_policy_reasoning | VULN-API-29-011 | TODO | VULN-API-29-010 | TODO | SPRINT_129_policy_reasoning
SPRINT_131_scanner_surface | SCANNER-ANALYZERS-DENO-26-010 | TODO | SCANNER-ANALYZERS-DENO-26-009 | TODO | SPRINT_131_scanner_surface
SPRINT_131_scanner_surface | SCANNER-ANALYZERS-DENO-26-011 | TODO | SCANNER-ANALYZERS-DENO-26-010 | TODO | SPRINT_131_scanner_surface
SPRINT_131_scanner_surface | SCANNER-ANALYZERS-JAVA-21-006 | TODO | SCANNER-ANALYZERS-JAVA-21-005 | TODO | SPRINT_131_scanner_surface
SPRINT_131_scanner_surface | SCANNER-ANALYZERS-JAVA-21-007 | TODO | SCANNER-ANALYZERS-JAVA-21-006 | TODO | SPRINT_131_scanner_surface
SPRINT_131_scanner_surface | SCANNER-ANALYZERS-JAVA-21-008 | BLOCKED | SCANNER-ANALYZERS-JAVA-21-007 | TODO | SPRINT_131_scanner_surface
SPRINT_131_scanner_surface | SCANNER-ANALYZERS-JAVA-21-009 | TODO | SCANNER-ANALYZERS-JAVA-21-008 | BLOCKED | SPRINT_131_scanner_surface
SPRINT_131_scanner_surface | SCANNER-ANALYZERS-JAVA-21-010 | TODO | SCANNER-ANALYZERS-JAVA-21-009 | TODO | SPRINT_131_scanner_surface
SPRINT_131_scanner_surface | SCANNER-ANALYZERS-JAVA-21-011 | TODO | SCANNER-ANALYZERS-JAVA-21-010 | TODO | SPRINT_131_scanner_surface
SPRINT_132_scanner_surface | SCANNER-ANALYZERS-LANG-11-002 | TODO | SCANNER-ANALYZERS-LANG-11-001 | TODO | SPRINT_131_scanner_surface
SPRINT_132_scanner_surface | SCANNER-ANALYZERS-LANG-11-003 | TODO | SCANNER-ANALYZERS-LANG-11-002 | TODO | SPRINT_132_scanner_surface
SPRINT_132_scanner_surface | SCANNER-ANALYZERS-LANG-11-004 | TODO | SCANNER-ANALYZERS-LANG-11-003 | TODO | SPRINT_132_scanner_surface
SPRINT_132_scanner_surface | SCANNER-ANALYZERS-LANG-11-005 | TODO | SCANNER-ANALYZERS-LANG-11-004 | TODO | SPRINT_132_scanner_surface
SPRINT_132_scanner_surface | SCANNER-ANALYZERS-NATIVE-20-002 | TODO | SCANNER-ANALYZERS-NATIVE-20-001 | TODO | SPRINT_132_scanner_surface
SPRINT_132_scanner_surface | SCANNER-ANALYZERS-NATIVE-20-003 | TODO | SCANNER-ANALYZERS-NATIVE-20-002 | TODO | SPRINT_132_scanner_surface
SPRINT_132_scanner_surface | SCANNER-ANALYZERS-NATIVE-20-004 | TODO | SCANNER-ANALYZERS-NATIVE-20-003 | TODO | SPRINT_132_scanner_surface
SPRINT_132_scanner_surface | SCANNER-ANALYZERS-NATIVE-20-005 | TODO | SCANNER-ANALYZERS-NATIVE-20-004 | TODO | SPRINT_132_scanner_surface
SPRINT_132_scanner_surface | SCANNER-ANALYZERS-NATIVE-20-006 | TODO | SCANNER-ANALYZERS-NATIVE-20-005 | TODO | SPRINT_132_scanner_surface
SPRINT_132_scanner_surface | SCANNER-ANALYZERS-NATIVE-20-007 | TODO | SCANNER-ANALYZERS-NATIVE-20-006 | TODO | SPRINT_132_scanner_surface
SPRINT_132_scanner_surface | SCANNER-ANALYZERS-NATIVE-20-008 | TODO | SCANNER-ANALYZERS-NATIVE-20-007 | TODO | SPRINT_132_scanner_surface
SPRINT_132_scanner_surface | SCANNER-ANALYZERS-NATIVE-20-009 | TODO | SCANNER-ANALYZERS-NATIVE-20-008 | TODO | SPRINT_132_scanner_surface
SPRINT_132_scanner_surface | SCANNER-ANALYZERS-NATIVE-20-010 | TODO | SCANNER-ANALYZERS-NATIVE-20-009 | TODO | SPRINT_132_scanner_surface
SPRINT_132_scanner_surface | SCANNER-ANALYZERS-NODE-22-002 | TODO | SCANNER-ANALYZERS-NODE-22-001 | TODO | SPRINT_132_scanner_surface
SPRINT_132_scanner_surface | SCANNER-ANALYZERS-NODE-22-003 | TODO | SCANNER-ANALYZERS-NODE-22-002 | TODO | SPRINT_132_scanner_surface
SPRINT_132_scanner_surface | SCANNER-ANALYZERS-NODE-22-004 | TODO | SCANNER-ANALYZERS-NODE-22-003 | TODO | SPRINT_132_scanner_surface
SPRINT_132_scanner_surface | SCANNER-ANALYZERS-NODE-22-005 | TODO | SCANNER-ANALYZERS-NODE-22-004 | TODO | SPRINT_132_scanner_surface
SPRINT_133_scanner_surface | SCANNER-ANALYZERS-NODE-22-006 | TODO | SCANNER-ANALYZERS-NODE-22-005 | TODO | SPRINT_132_scanner_surface
SPRINT_133_scanner_surface | SCANNER-ANALYZERS-NODE-22-007 | TODO | SCANNER-ANALYZERS-NODE-22-006 | TODO | SPRINT_133_scanner_surface
SPRINT_133_scanner_surface | SCANNER-ANALYZERS-NODE-22-008 | TODO | SCANNER-ANALYZERS-NODE-22-007 | TODO | SPRINT_133_scanner_surface
SPRINT_133_scanner_surface | SCANNER-ANALYZERS-NODE-22-009 | TODO | SCANNER-ANALYZERS-NODE-22-008 | TODO | SPRINT_133_scanner_surface
SPRINT_133_scanner_surface | SCANNER-ANALYZERS-NODE-22-010 | TODO | SCANNER-ANALYZERS-NODE-22-009 | TODO | SPRINT_133_scanner_surface
SPRINT_133_scanner_surface | SCANNER-ANALYZERS-NODE-22-011 | TODO | SCANNER-ANALYZERS-NODE-22-010 | TODO | SPRINT_133_scanner_surface
SPRINT_133_scanner_surface | SCANNER-ANALYZERS-NODE-22-012 | TODO | SCANNER-ANALYZERS-NODE-22-011 | TODO | SPRINT_133_scanner_surface
SPRINT_133_scanner_surface | SCANNER-ANALYZERS-PHP-27-002 | TODO | SCANNER-ANALYZERS-PHP-27-001 | TODO | SPRINT_133_scanner_surface
SPRINT_133_scanner_surface | SCANNER-ANALYZERS-PHP-27-003 | TODO | SCANNER-ANALYZERS-PHP-27-002 | TODO | SPRINT_133_scanner_surface
SPRINT_133_scanner_surface | SCANNER-ANALYZERS-PHP-27-004 | TODO | SCANNER-ANALYZERS-PHP-27-003 | TODO | SPRINT_133_scanner_surface
SPRINT_133_scanner_surface | SCANNER-ANALYZERS-PHP-27-005 | TODO | SCANNER-ANALYZERS-PHP-27-004 | TODO | SPRINT_133_scanner_surface
SPRINT_133_scanner_surface | SCANNER-ANALYZERS-PHP-27-006 | TODO | SCANNER-ANALYZERS-PHP-27-005 | TODO | SPRINT_133_scanner_surface
SPRINT_133_scanner_surface | SCANNER-ANALYZERS-PHP-27-007 | TODO | SCANNER-ANALYZERS-PHP-27-006 | TODO | SPRINT_133_scanner_surface
SPRINT_134_scanner_surface | SCANNER-ANALYZERS-PHP-27-008 | TODO | SCANNER-ANALYZERS-PHP-27-002 | TODO | SPRINT_133_scanner_surface
SPRINT_134_scanner_surface | SCANNER-ANALYZERS-PHP-27-009 | TODO | SCANNER-ANALYZERS-PHP-27-007 | TODO | SPRINT_133_scanner_surface
SPRINT_134_scanner_surface | SCANNER-ANALYZERS-PHP-27-010 | TODO | SCANNER-ANALYZERS-PHP-27-009 | TODO | SPRINT_134_scanner_surface
SPRINT_134_scanner_surface | SCANNER-ANALYZERS-PHP-27-011 | TODO | SCANNER-ANALYZERS-PHP-27-010 | TODO | SPRINT_134_scanner_surface
SPRINT_134_scanner_surface | SCANNER-ANALYZERS-PHP-27-012 | TODO | SCANNER-ANALYZERS-PHP-27-011 | TODO | SPRINT_134_scanner_surface
SPRINT_134_scanner_surface | SCANNER-ANALYZERS-PYTHON-23-002 | TODO | SCANNER-ANALYZERS-PYTHON-23-001 | TODO | SPRINT_134_scanner_surface
SPRINT_134_scanner_surface | SCANNER-ANALYZERS-PYTHON-23-003 | TODO | SCANNER-ANALYZERS-PYTHON-23-002 | TODO | SPRINT_134_scanner_surface
SPRINT_134_scanner_surface | SCANNER-ANALYZERS-PYTHON-23-004 | TODO | SCANNER-ANALYZERS-PYTHON-23-003 | TODO | SPRINT_134_scanner_surface
SPRINT_134_scanner_surface | SCANNER-ANALYZERS-PYTHON-23-005 | TODO | SCANNER-ANALYZERS-PYTHON-23-004 | TODO | SPRINT_134_scanner_surface
SPRINT_134_scanner_surface | SCANNER-ANALYZERS-PYTHON-23-006 | TODO | SCANNER-ANALYZERS-PYTHON-23-005 | TODO | SPRINT_134_scanner_surface
SPRINT_134_scanner_surface | SCANNER-ANALYZERS-PYTHON-23-007 | TODO | SCANNER-ANALYZERS-PYTHON-23-006 | TODO | SPRINT_134_scanner_surface
SPRINT_134_scanner_surface | SCANNER-ANALYZERS-PYTHON-23-008 | TODO | SCANNER-ANALYZERS-PYTHON-23-007 | TODO | SPRINT_134_scanner_surface
SPRINT_134_scanner_surface | SCANNER-ANALYZERS-PYTHON-23-009 | TODO | SCANNER-ANALYZERS-PYTHON-23-008 | TODO | SPRINT_134_scanner_surface
SPRINT_134_scanner_surface | SCANNER-ANALYZERS-PYTHON-23-010 | TODO | SCANNER-ANALYZERS-PYTHON-23-009 | TODO | SPRINT_134_scanner_surface
SPRINT_134_scanner_surface | SCANNER-ANALYZERS-PYTHON-23-011 | TODO | SCANNER-ANALYZERS-PYTHON-23-010 | TODO | SPRINT_134_scanner_surface
SPRINT_135_scanner_surface | SCANNER-ANALYZERS-PYTHON-23-012 | TODO | SCANNER-ANALYZERS-PYTHON-23-011 | TODO | SPRINT_134_scanner_surface
SPRINT_135_scanner_surface | SCANNER-ANALYZERS-RUBY-28-002 | TODO | SCANNER-ANALYZERS-RUBY-28-001 | TODO | SPRINT_135_scanner_surface
SPRINT_135_scanner_surface | SCANNER-ANALYZERS-RUBY-28-003 | TODO | SCANNER-ANALYZERS-RUBY-28-002 | TODO | SPRINT_135_scanner_surface
SPRINT_135_scanner_surface | SCANNER-ANALYZERS-RUBY-28-004 | TODO | SCANNER-ANALYZERS-RUBY-28-003 | TODO | SPRINT_135_scanner_surface
SPRINT_135_scanner_surface | SCANNER-ANALYZERS-RUBY-28-005 | TODO | SCANNER-ANALYZERS-RUBY-28-004 | TODO | SPRINT_135_scanner_surface
SPRINT_135_scanner_surface | SCANNER-ANALYZERS-RUBY-28-006 | TODO | SCANNER-ANALYZERS-RUBY-28-005 | TODO | SPRINT_135_scanner_surface
SPRINT_135_scanner_surface | SCANNER-ANALYZERS-RUBY-28-007 | TODO | SCANNER-ANALYZERS-RUBY-28-006 | TODO | SPRINT_135_scanner_surface
SPRINT_135_scanner_surface | SCANNER-ANALYZERS-RUBY-28-008 | TODO | SCANNER-ANALYZERS-RUBY-28-007 | TODO | SPRINT_135_scanner_surface
SPRINT_135_scanner_surface | SCANNER-ANALYZERS-RUBY-28-009 | TODO | SCANNER-ANALYZERS-RUBY-28-008 | TODO | SPRINT_135_scanner_surface
SPRINT_135_scanner_surface | SCANNER-ANALYZERS-RUBY-28-010 | TODO | SCANNER-ANALYZERS-RUBY-28-009 | TODO | SPRINT_135_scanner_surface
SPRINT_135_scanner_surface | SCANNER-ANALYZERS-RUBY-28-011 | TODO | SCANNER-ANALYZERS-RUBY-28-010 | TODO | SPRINT_135_scanner_surface
SPRINT_135_scanner_surface | SCANNER-ANALYZERS-RUBY-28-012 | TODO | SCANNER-ANALYZERS-RUBY-28-011 | TODO | SPRINT_135_scanner_surface
SPRINT_135_scanner_surface | SCANNER-ENTRYTRACE-18-503 | TODO | SCANNER-ENTRYTRACE-18-502 | TODO | SPRINT_135_scanner_surface
SPRINT_136_scanner_surface | SCANNER-EMIT-15-001 | TODO | SCANNER-SURFACE-04 | TODO | SPRINT_136_scanner_surface
SPRINT_136_scanner_surface | SCANNER-ENTRYTRACE-18-504 | TODO | SCANNER-ENTRYTRACE-18-503 | TODO | SPRINT_135_scanner_surface
SPRINT_136_scanner_surface | SCANNER-ENTRYTRACE-18-505 | TODO | SCANNER-ENTRYTRACE-18-504 | TODO | SPRINT_136_scanner_surface
SPRINT_136_scanner_surface | SCANNER-ENTRYTRACE-18-506 | TODO | SCANNER-ENTRYTRACE-18-505 | TODO | SPRINT_136_scanner_surface
SPRINT_136_scanner_surface | SCANNER-ENV-02 | TODO | SCANNER-ENV-01 | TODO | SPRINT_136_scanner_surface
SPRINT_136_scanner_surface | SCANNER-ENV-03 | TODO | SCANNER-ENV-02 | TODO | SPRINT_136_scanner_surface
SPRINT_136_scanner_surface | SCANNER-LNM-21-002 | TODO | SCANNER-LNM-21-001 | TODO | SPRINT_136_scanner_surface
SPRINT_136_scanner_surface | SCANNER-SORT-02 | TODO | SCANNER-EMIT-15-001 | TODO | SPRINT_136_scanner_surface
SPRINT_136_scanner_surface | SCANNER-SURFACE-04 | TODO | SURFACE-FS-03 | TODO | SPRINT_136_scanner_surface
SPRINT_136_scanner_surface | SCHED-SURFACE-02 | TODO | SCHED-SURFACE-01 | TODO | SPRINT_155_scheduler_i
SPRINT_136_scanner_surface | SURFACE-ENV-03 | TODO | SURFACE-ENV-02 | DOING | SPRINT_136_scanner_surface
SPRINT_136_scanner_surface | SURFACE-ENV-04 | TODO | SURFACE-ENV-02 | DOING | SPRINT_136_scanner_surface
SPRINT_136_scanner_surface | SURFACE-ENV-05 | TODO | SURFACE-ENV-03 | TODO | SPRINT_136_scanner_surface
SPRINT_136_scanner_surface | SURFACE-ENV-05 | TODO | SURFACE-ENV-04 | TODO | SPRINT_136_scanner_surface
SPRINT_136_scanner_surface | SURFACE-FS-05 | TODO | SURFACE-FS-03 | TODO | SPRINT_136_scanner_surface
SPRINT_136_scanner_surface | SURFACE-FS-07 | TODO | SCANNER-SURFACE-04 | TODO | SPRINT_136_scanner_surface
SPRINT_136_scanner_surface | SURFACE-SECRETS-02 | DOING | SURFACE-SECRETS-01 | DOING | SPRINT_136_scanner_surface
SPRINT_136_scanner_surface | SURFACE-SECRETS-03 | TODO | SURFACE-SECRETS-02 | DOING | SPRINT_136_scanner_surface
SPRINT_136_scanner_surface | SURFACE-SECRETS-04 | TODO | SURFACE-SECRETS-02 | DOING | SPRINT_136_scanner_surface
SPRINT_136_scanner_surface | SURFACE-SECRETS-05 | TODO | SURFACE-SECRETS-02 | DOING | SPRINT_136_scanner_surface
SPRINT_136_scanner_surface | SURFACE-SECRETS-06 | TODO | SURFACE-SECRETS-03 | TODO | SPRINT_136_scanner_surface
SPRINT_136_scanner_surface | SURFACE-VAL-02 | TODO | SURFACE-ENV-02 | DOING | SPRINT_136_scanner_surface
SPRINT_136_scanner_surface | SURFACE-VAL-02 | TODO | SURFACE-VAL-01 | DOING | SPRINT_136_scanner_surface
SPRINT_136_scanner_surface | SURFACE-VAL-03 | TODO | SURFACE-VAL-02 | TODO | SPRINT_136_scanner_surface
SPRINT_136_scanner_surface | SURFACE-VAL-04 | TODO | SURFACE-VAL-02 | TODO | SPRINT_136_scanner_surface
SPRINT_136_scanner_surface | SURFACE-VAL-05 | TODO | SURFACE-VAL-02 | TODO | SPRINT_136_scanner_surface
SPRINT_136_scanner_surface | ZASTAVA-SURFACE-02 | TODO | ZASTAVA-SURFACE-01 | TODO | SPRINT_140_runtime_signals
SPRINT_301_docs_tasks_md_i | DOCS-AIAI-31-004 | DOING | CONSOLE-VEX-30-001 | DOING | SPRINT_212_web_i
SPRINT_301_docs_tasks_md_i | DOCS-AIAI-31-004 | DOING | CONSOLE-VULN-29-001 | DOING | SPRINT_212_web_i
SPRINT_301_docs_tasks_md_i | DOCS-AIAI-31-004 | DOING | EXCITITOR-CONSOLE-23-001 | TODO | SPRINT_120_excititor_ii
SPRINT_301_docs_tasks_md_i | DOCS-AIAI-31-005 | BLOCKED | CLI-VEX-30-001 | TODO | SPRINT_205_cli_v
SPRINT_301_docs_tasks_md_i | DOCS-AIAI-31-005 | BLOCKED | CLI-VULN-29-001 | TODO | SPRINT_205_cli_v
SPRINT_301_docs_tasks_md_i | DOCS-AIAI-31-005 | BLOCKED | DOCS-AIAI-31-004 | DOING | SPRINT_110_ingestion_evidence
SPRINT_301_docs_tasks_md_i | DOCS-AIAI-31-006 | BLOCKED | DOCS-AIAI-31-005 | BLOCKED | SPRINT_110_ingestion_evidence
SPRINT_301_docs_tasks_md_i | DOCS-AIAI-31-006 | BLOCKED | POLICY-ENGINE-31-001 | TODO | SPRINT_125_policy_reasoning
SPRINT_301_docs_tasks_md_i | DOCS-AIAI-31-008 | BLOCKED | SBOM-AIAI-31-001 | TODO | SPRINT_140_runtime_signals
SPRINT_301_docs_tasks_md_i | DOCS-AIAI-31-009 | BLOCKED | DEVOPS-AIAI-31-001 | TODO | SPRINT_503_ops_devops_i
SPRINT_301_docs_tasks_md_i | DOCS-AIAI-31-009 | BLOCKED | DOCS-AIAI-31-008 | BLOCKED | SPRINT_111_advisoryai
SPRINT_301_docs_tasks_md_i | DOCS-AIRGAP-56-002 | TODO | DOCS-AIRGAP-56-001 | TODO | SPRINT_301_docs_tasks_md_i
SPRINT_301_docs_tasks_md_i | DOCS-AIRGAP-56-003 | TODO | DOCS-AIRGAP-56-002 | TODO | SPRINT_301_docs_tasks_md_i
SPRINT_301_docs_tasks_md_i | DOCS-AIRGAP-56-004 | TODO | DOCS-AIRGAP-56-003 | TODO | SPRINT_301_docs_tasks_md_i
SPRINT_301_docs_tasks_md_i | DOCS-AIRGAP-57-001 | TODO | DOCS-AIRGAP-56-004 | TODO | SPRINT_301_docs_tasks_md_i
SPRINT_301_docs_tasks_md_i | DOCS-AIRGAP-57-002 | TODO | DOCS-AIRGAP-57-001 | TODO | SPRINT_301_docs_tasks_md_i
SPRINT_301_docs_tasks_md_i | DOCS-CLI-DET-01 | TODO | CLI-SBOM-60-001 | TODO | SPRINT_203_cli_iii
SPRINT_301_docs_tasks_md_i | DOCS-CLI-DET-01 | TODO | CLI-SBOM-60-002 | TODO | SPRINT_203_cli_iii
1 Sprint Task ID Status Blocking dependency Dep status Dep sprint
2 SPRINT_110_ingestion_evidence AIRGAP-TIME-57-001 TODO MIRROR-CRT-56-001 TODO SPRINT_110_ingestion_evidence
3 SPRINT_110_ingestion_evidence CONCELIER-AIAI-31-002 DOING CONCELIER-GRAPH-21-001 BLOCKED SPRINT_113_concelier_ii
4 SPRINT_110_ingestion_evidence CONCELIER-ATTEST-73-001 TODO CONCELIER-AIAI-31-002 DOING SPRINT_110_ingestion_evidence
5 SPRINT_110_ingestion_evidence DOCS-AIAI-31-004 DOING CONSOLE-VEX-30-001 DOING SPRINT_212_web_i
6 SPRINT_110_ingestion_evidence DOCS-AIAI-31-004 DOING CONSOLE-VULN-29-001 DOING SPRINT_212_web_i
7 SPRINT_110_ingestion_evidence DOCS-AIAI-31-004 DOING SBOM-AIAI-31-001 TODO SPRINT_140_runtime_signals
8 SPRINT_110_ingestion_evidence DOCS-AIAI-31-005 BLOCKED CLI-VEX-30-001 TODO SPRINT_205_cli_v
9 SPRINT_110_ingestion_evidence DOCS-AIAI-31-005 BLOCKED CLI-VULN-29-001 TODO SPRINT_205_cli_v
10 SPRINT_110_ingestion_evidence DOCS-AIAI-31-005 BLOCKED DEVOPS-AIAI-31-001 TODO SPRINT_503_ops_devops_i
11 SPRINT_110_ingestion_evidence DOCS-AIAI-31-005 BLOCKED DOCS-AIAI-31-004 DOING SPRINT_110_ingestion_evidence
12 SPRINT_110_ingestion_evidence DOCS-AIAI-31-005 BLOCKED POLICY-ENGINE-31-001 TODO SPRINT_125_policy_reasoning
13 SPRINT_110_ingestion_evidence EXCITITOR-AIAI-31-003 TODO EXCITITOR-AIAI-31-002 TODO SPRINT_110_ingestion_evidence
14 SPRINT_110_ingestion_evidence EXCITITOR-AIAI-31-004 TODO EXCITITOR-AIAI-31-002 TODO SPRINT_110_ingestion_evidence
15 SPRINT_110_ingestion_evidence EXCITITOR-ATTEST-01-003 TODO EXCITITOR-AIAI-31-002 TODO SPRINT_110_ingestion_evidence
16 SPRINT_110_ingestion_evidence EXPORT-OBS-51-001 TODO MIRROR-CRT-56-001 TODO SPRINT_110_ingestion_evidence
17 SPRINT_110_ingestion_evidence MIRROR-CRT-56-002 TODO MIRROR-CRT-56-001 TODO SPRINT_110_ingestion_evidence
18 SPRINT_110_ingestion_evidence MIRROR-CRT-56-002 TODO PROV-OBS-53-001 TODO SPRINT_125_mirror
19 SPRINT_110_ingestion_evidence MIRROR-CRT-57-001 TODO AIRGAP-TIME-57-001 TODO SPRINT_110_ingestion_evidence
20 SPRINT_110_ingestion_evidence MIRROR-CRT-57-001 TODO MIRROR-CRT-56-001 TODO SPRINT_110_ingestion_evidence
21 SPRINT_110_ingestion_evidence MIRROR-CRT-58-001 TODO CLI-AIRGAP-56-001 TODO SPRINT_125_mirror
22 SPRINT_110_ingestion_evidence MIRROR-CRT-58-001 TODO EXPORT-OBS-54-001 TODO SPRINT_163_exportcenter_ii
23 SPRINT_110_ingestion_evidence MIRROR-CRT-58-001 TODO MIRROR-CRT-56-001 TODO SPRINT_110_ingestion_evidence
24 SPRINT_110_ingestion_evidence SBOM-AIAI-31-003 BLOCKED CLI-VEX-30-001 TODO SPRINT_205_cli_v
25 SPRINT_110_ingestion_evidence SBOM-AIAI-31-003 BLOCKED CLI-VULN-29-001 TODO SPRINT_205_cli_v
26 SPRINT_110_ingestion_evidence SBOM-AIAI-31-003 BLOCKED SBOM-AIAI-31-001 TODO SPRINT_140_runtime_signals
27 SPRINT_120_policy_reasoning LEDGER-29-008 TODO LEDGER-29-007 TODO SPRINT_120_policy_reasoning
28 SPRINT_120_policy_reasoning LEDGER-29-009 TODO LEDGER-29-008 TODO SPRINT_120_policy_reasoning
29 SPRINT_120_policy_reasoning LEDGER-34-101 TODO LEDGER-29-009 TODO SPRINT_120_policy_reasoning
30 SPRINT_120_policy_reasoning LEDGER-AIRGAP-56-002 TODO LEDGER-AIRGAP-56-001 TODO SPRINT_120_policy_reasoning
31 SPRINT_120_policy_reasoning LEDGER-AIRGAP-57-001 TODO LEDGER-AIRGAP-56-002 TODO SPRINT_120_policy_reasoning
32 SPRINT_120_policy_reasoning LEDGER-AIRGAP-58-001 TODO LEDGER-AIRGAP-57-001 TODO SPRINT_120_policy_reasoning
33 SPRINT_121_policy_reasoning LEDGER-ATTEST-73-002 TODO LEDGER-ATTEST-73-001 TODO SPRINT_120_policy_reasoning
34 SPRINT_121_policy_reasoning LEDGER-OAS-61-002 TODO LEDGER-OAS-61-001 TODO SPRINT_121_policy_reasoning
35 SPRINT_121_policy_reasoning LEDGER-OAS-62-001 TODO LEDGER-OAS-61-002 TODO SPRINT_121_policy_reasoning
36 SPRINT_121_policy_reasoning LEDGER-OAS-63-001 TODO LEDGER-OAS-62-001 TODO SPRINT_121_policy_reasoning
37 SPRINT_121_policy_reasoning LEDGER-OBS-51-001 TODO LEDGER-OBS-50-001 TODO SPRINT_121_policy_reasoning
38 SPRINT_121_policy_reasoning LEDGER-OBS-52-001 TODO LEDGER-OBS-51-001 TODO SPRINT_121_policy_reasoning
39 SPRINT_121_policy_reasoning LEDGER-OBS-53-001 TODO LEDGER-OBS-52-001 TODO SPRINT_121_policy_reasoning
40 SPRINT_121_policy_reasoning LEDGER-OBS-54-001 TODO LEDGER-OBS-53-001 TODO SPRINT_121_policy_reasoning
41 SPRINT_121_policy_reasoning LEDGER-OBS-55-001 TODO LEDGER-OBS-54-001 TODO SPRINT_121_policy_reasoning
42 SPRINT_121_policy_reasoning LEDGER-RISK-66-002 TODO LEDGER-RISK-66-001 TODO SPRINT_121_policy_reasoning
43 SPRINT_122_policy_reasoning LEDGER-RISK-67-001 TODO LEDGER-RISK-66-002 TODO SPRINT_121_policy_reasoning
44 SPRINT_122_policy_reasoning LEDGER-RISK-68-001 TODO LEDGER-RISK-67-001 TODO SPRINT_122_policy_reasoning
45 SPRINT_122_policy_reasoning LEDGER-RISK-69-001 TODO LEDGER-RISK-68-001 TODO SPRINT_122_policy_reasoning
46 SPRINT_123_policy_reasoning POLICY-AIRGAP-56-002 TODO POLICY-AIRGAP-56-001 TODO SPRINT_123_policy_reasoning
47 SPRINT_123_policy_reasoning POLICY-AIRGAP-57-001 TODO POLICY-AIRGAP-56-002 TODO SPRINT_123_policy_reasoning
48 SPRINT_123_policy_reasoning POLICY-AIRGAP-57-002 TODO POLICY-AIRGAP-57-001 TODO SPRINT_123_policy_reasoning
49 SPRINT_123_policy_reasoning POLICY-AIRGAP-58-001 TODO POLICY-AIRGAP-57-002 TODO SPRINT_123_policy_reasoning
50 SPRINT_123_policy_reasoning POLICY-AOC-19-002 TODO POLICY-AOC-19-001 TODO SPRINT_123_policy_reasoning
51 SPRINT_123_policy_reasoning POLICY-AOC-19-003 TODO POLICY-AOC-19-002 TODO SPRINT_123_policy_reasoning
52 SPRINT_123_policy_reasoning POLICY-AOC-19-004 TODO POLICY-AOC-19-003 TODO SPRINT_123_policy_reasoning
53 SPRINT_123_policy_reasoning POLICY-ATTEST-73-002 TODO POLICY-ATTEST-73-001 TODO SPRINT_123_policy_reasoning
54 SPRINT_123_policy_reasoning POLICY-ATTEST-74-001 TODO POLICY-ATTEST-73-002 TODO SPRINT_123_policy_reasoning
55 SPRINT_123_policy_reasoning POLICY-ATTEST-74-002 TODO POLICY-ATTEST-74-001 TODO SPRINT_123_policy_reasoning
56 SPRINT_124_policy_reasoning POLICY-CONSOLE-23-002 TODO POLICY-CONSOLE-23-001 TODO SPRINT_123_policy_reasoning
57 SPRINT_124_policy_reasoning POLICY-ENGINE-20-003 TODO POLICY-ENGINE-20-002 BLOCKED SPRINT_124_policy_reasoning
58 SPRINT_124_policy_reasoning POLICY-ENGINE-20-004 TODO POLICY-ENGINE-20-003 TODO SPRINT_124_policy_reasoning
59 SPRINT_124_policy_reasoning POLICY-ENGINE-20-005 TODO POLICY-ENGINE-20-004 TODO SPRINT_124_policy_reasoning
60 SPRINT_124_policy_reasoning POLICY-ENGINE-20-006 TODO POLICY-ENGINE-20-005 TODO SPRINT_124_policy_reasoning
61 SPRINT_124_policy_reasoning POLICY-ENGINE-20-007 TODO POLICY-ENGINE-20-006 TODO SPRINT_124_policy_reasoning
62 SPRINT_124_policy_reasoning POLICY-ENGINE-20-008 TODO POLICY-ENGINE-20-007 TODO SPRINT_124_policy_reasoning
63 SPRINT_124_policy_reasoning POLICY-ENGINE-20-009 TODO POLICY-ENGINE-20-008 TODO SPRINT_124_policy_reasoning
64 SPRINT_124_policy_reasoning POLICY-ENGINE-27-001 TODO POLICY-ENGINE-20-009 TODO SPRINT_124_policy_reasoning
65 SPRINT_124_policy_reasoning POLICY-ENGINE-27-002 TODO POLICY-ENGINE-27-001 TODO SPRINT_124_policy_reasoning
66 SPRINT_124_policy_reasoning POLICY-ENGINE-29-002 TODO POLICY-ENGINE-29-001 TODO SPRINT_124_policy_reasoning
67 SPRINT_125_mirror AIRGAP-TIME-57-001 TODO MIRROR-CRT-56-001 TODO SPRINT_110_ingestion_evidence
68 SPRINT_125_mirror AIRGAP-TIME-57-001 TODO MIRROR-CRT-57-002 TODO SPRINT_125_mirror
69 SPRINT_125_mirror CLI-AIRGAP-56-001 TODO MIRROR-CRT-56-002 TODO SPRINT_110_ingestion_evidence
70 SPRINT_125_mirror CLI-AIRGAP-56-001 TODO MIRROR-CRT-58-001 TODO SPRINT_110_ingestion_evidence
71 SPRINT_125_mirror EXPORT-OBS-51-001 TODO MIRROR-CRT-56-001 TODO SPRINT_110_ingestion_evidence
72 SPRINT_125_mirror MIRROR-CRT-56-002 TODO MIRROR-CRT-56-001 TODO SPRINT_110_ingestion_evidence
73 SPRINT_125_mirror MIRROR-CRT-56-002 TODO PROV-OBS-53-001 TODO SPRINT_125_mirror
74 SPRINT_125_mirror MIRROR-CRT-57-001 TODO MIRROR-CRT-56-001 TODO SPRINT_110_ingestion_evidence
75 SPRINT_125_mirror MIRROR-CRT-57-002 TODO AIRGAP-TIME-57-001 TODO SPRINT_110_ingestion_evidence
76 SPRINT_125_mirror MIRROR-CRT-57-002 TODO MIRROR-CRT-56-002 TODO SPRINT_110_ingestion_evidence
77 SPRINT_125_mirror MIRROR-CRT-58-001 TODO CLI-AIRGAP-56-001 TODO SPRINT_125_mirror
78 SPRINT_125_mirror MIRROR-CRT-58-001 TODO MIRROR-CRT-56-002 TODO SPRINT_110_ingestion_evidence
79 SPRINT_125_mirror MIRROR-CRT-58-002 TODO EXPORT-OBS-54-001 TODO SPRINT_163_exportcenter_ii
80 SPRINT_125_mirror MIRROR-CRT-58-002 TODO MIRROR-CRT-56-002 TODO SPRINT_110_ingestion_evidence
81 SPRINT_125_mirror PROV-OBS-53-001 TODO MIRROR-CRT-56-001 TODO SPRINT_110_ingestion_evidence
82 SPRINT_125_policy_reasoning POLICY-ENGINE-29-003 TODO POLICY-ENGINE-29-002 TODO SPRINT_124_policy_reasoning
83 SPRINT_125_policy_reasoning POLICY-ENGINE-29-004 TODO POLICY-ENGINE-29-003 TODO SPRINT_125_policy_reasoning
84 SPRINT_125_policy_reasoning POLICY-ENGINE-30-001 TODO POLICY-ENGINE-29-004 TODO SPRINT_125_policy_reasoning
85 SPRINT_125_policy_reasoning POLICY-ENGINE-30-002 TODO POLICY-ENGINE-30-001 TODO SPRINT_125_policy_reasoning
86 SPRINT_125_policy_reasoning POLICY-ENGINE-30-003 TODO POLICY-ENGINE-30-002 TODO SPRINT_125_policy_reasoning
87 SPRINT_125_policy_reasoning POLICY-ENGINE-30-101 TODO POLICY-ENGINE-30-003 TODO SPRINT_125_policy_reasoning
88 SPRINT_125_policy_reasoning POLICY-ENGINE-31-001 TODO POLICY-ENGINE-30-101 TODO SPRINT_125_policy_reasoning
89 SPRINT_125_policy_reasoning POLICY-ENGINE-31-002 TODO POLICY-ENGINE-31-001 TODO SPRINT_125_policy_reasoning
90 SPRINT_125_policy_reasoning POLICY-ENGINE-32-101 TODO POLICY-ENGINE-31-002 TODO SPRINT_125_policy_reasoning
91 SPRINT_125_policy_reasoning POLICY-ENGINE-33-101 TODO POLICY-ENGINE-32-101 TODO SPRINT_125_policy_reasoning
92 SPRINT_125_policy_reasoning POLICY-ENGINE-34-101 TODO POLICY-ENGINE-33-101 TODO SPRINT_125_policy_reasoning
93 SPRINT_125_policy_reasoning POLICY-ENGINE-35-201 TODO POLICY-ENGINE-34-101 TODO SPRINT_125_policy_reasoning
94 SPRINT_125_policy_reasoning POLICY-ENGINE-38-201 TODO POLICY-ENGINE-35-201 TODO SPRINT_125_policy_reasoning
95 SPRINT_125_policy_reasoning POLICY-ENGINE-40-001 TODO POLICY-ENGINE-38-201 TODO SPRINT_125_policy_reasoning
96 SPRINT_125_policy_reasoning POLICY-ENGINE-40-002 TODO POLICY-ENGINE-40-001 TODO SPRINT_125_policy_reasoning
97 SPRINT_126_policy_reasoning POLICY-ENGINE-40-003 TODO POLICY-ENGINE-40-002 TODO SPRINT_125_policy_reasoning
98 SPRINT_126_policy_reasoning POLICY-ENGINE-50-001 TODO POLICY-ENGINE-40-003 TODO SPRINT_126_policy_reasoning
99 SPRINT_126_policy_reasoning POLICY-ENGINE-50-002 TODO POLICY-ENGINE-50-001 TODO SPRINT_126_policy_reasoning
100 SPRINT_126_policy_reasoning POLICY-ENGINE-50-003 TODO POLICY-ENGINE-50-002 TODO SPRINT_126_policy_reasoning
101 SPRINT_126_policy_reasoning POLICY-ENGINE-50-004 TODO POLICY-ENGINE-50-003 TODO SPRINT_126_policy_reasoning
102 SPRINT_126_policy_reasoning POLICY-ENGINE-50-005 TODO POLICY-ENGINE-50-004 TODO SPRINT_126_policy_reasoning
103 SPRINT_126_policy_reasoning POLICY-ENGINE-50-006 TODO POLICY-ENGINE-50-005 TODO SPRINT_126_policy_reasoning
104 SPRINT_126_policy_reasoning POLICY-ENGINE-50-007 TODO POLICY-ENGINE-50-006 TODO SPRINT_126_policy_reasoning
105 SPRINT_126_policy_reasoning POLICY-ENGINE-60-001 TODO POLICY-ENGINE-50-007 TODO SPRINT_126_policy_reasoning
106 SPRINT_126_policy_reasoning POLICY-ENGINE-60-002 TODO POLICY-ENGINE-60-001 TODO SPRINT_126_policy_reasoning
107 SPRINT_126_policy_reasoning POLICY-ENGINE-70-002 TODO POLICY-ENGINE-60-002 TODO SPRINT_126_policy_reasoning
108 SPRINT_126_policy_reasoning POLICY-ENGINE-70-003 TODO POLICY-ENGINE-70-002 TODO SPRINT_126_policy_reasoning
109 SPRINT_126_policy_reasoning POLICY-ENGINE-70-004 TODO POLICY-ENGINE-70-003 TODO SPRINT_126_policy_reasoning
110 SPRINT_126_policy_reasoning POLICY-ENGINE-70-005 TODO POLICY-ENGINE-70-004 TODO SPRINT_126_policy_reasoning
111 SPRINT_126_policy_reasoning POLICY-ENGINE-80-001 TODO POLICY-ENGINE-70-005 TODO SPRINT_126_policy_reasoning
112 SPRINT_127_policy_reasoning POLICY-ENGINE-80-002 TODO POLICY-ENGINE-80-001 TODO SPRINT_126_policy_reasoning
113 SPRINT_127_policy_reasoning POLICY-ENGINE-80-003 TODO POLICY-ENGINE-80-002 TODO SPRINT_127_policy_reasoning
114 SPRINT_127_policy_reasoning POLICY-ENGINE-80-004 TODO POLICY-ENGINE-80-003 TODO SPRINT_127_policy_reasoning
115 SPRINT_127_policy_reasoning POLICY-OBS-51-001 TODO POLICY-OBS-50-001 TODO SPRINT_127_policy_reasoning
116 SPRINT_127_policy_reasoning POLICY-OBS-52-001 TODO POLICY-OBS-51-001 TODO SPRINT_127_policy_reasoning
117 SPRINT_127_policy_reasoning POLICY-OBS-53-001 TODO POLICY-OBS-52-001 TODO SPRINT_127_policy_reasoning
118 SPRINT_127_policy_reasoning POLICY-OBS-54-001 TODO POLICY-OBS-53-001 TODO SPRINT_127_policy_reasoning
119 SPRINT_127_policy_reasoning POLICY-OBS-55-001 TODO POLICY-OBS-54-001 TODO SPRINT_127_policy_reasoning
120 SPRINT_127_policy_reasoning POLICY-RISK-66-002 TODO POLICY-RISK-66-001 TODO SPRINT_127_policy_reasoning
121 SPRINT_127_policy_reasoning POLICY-RISK-66-003 TODO POLICY-RISK-66-002 TODO SPRINT_127_policy_reasoning
122 SPRINT_127_policy_reasoning POLICY-RISK-66-004 TODO POLICY-RISK-66-003 TODO SPRINT_127_policy_reasoning
123 SPRINT_127_policy_reasoning POLICY-RISK-67-001 TODO POLICY-RISK-66-004 TODO SPRINT_127_policy_reasoning
124 SPRINT_127_policy_reasoning POLICY-RISK-67-001 TODO POLICY-RISK-67-001 TODO SPRINT_127_policy_reasoning
125 SPRINT_128_policy_reasoning POLICY-RISK-67-002 TODO POLICY-RISK-67-001 TODO SPRINT_127_policy_reasoning
126 SPRINT_128_policy_reasoning POLICY-RISK-67-002 TODO POLICY-RISK-67-002 TODO SPRINT_128_policy_reasoning
127 SPRINT_128_policy_reasoning POLICY-RISK-67-003 TODO POLICY-RISK-67-002 TODO SPRINT_128_policy_reasoning
128 SPRINT_128_policy_reasoning POLICY-RISK-68-001 TODO POLICY-RISK-67-003 TODO SPRINT_128_policy_reasoning
129 SPRINT_128_policy_reasoning POLICY-RISK-68-001 TODO POLICY-RISK-68-001 TODO SPRINT_128_policy_reasoning
130 SPRINT_128_policy_reasoning POLICY-RISK-68-002 TODO POLICY-RISK-68-001 TODO SPRINT_128_policy_reasoning
131 SPRINT_128_policy_reasoning POLICY-RISK-68-002 TODO POLICY-RISK-68-002 TODO SPRINT_128_policy_reasoning
132 SPRINT_128_policy_reasoning POLICY-RISK-69-001 TODO POLICY-RISK-68-002 TODO SPRINT_128_policy_reasoning
133 SPRINT_128_policy_reasoning POLICY-RISK-70-001 TODO POLICY-RISK-69-001 TODO SPRINT_128_policy_reasoning
134 SPRINT_128_policy_reasoning POLICY-SPL-23-002 TODO POLICY-SPL-23-001 TODO SPRINT_128_policy_reasoning
135 SPRINT_128_policy_reasoning POLICY-SPL-23-003 TODO POLICY-SPL-23-002 TODO SPRINT_128_policy_reasoning
136 SPRINT_128_policy_reasoning POLICY-SPL-23-004 TODO POLICY-SPL-23-003 TODO SPRINT_128_policy_reasoning
137 SPRINT_128_policy_reasoning POLICY-SPL-23-005 TODO POLICY-SPL-23-004 TODO SPRINT_128_policy_reasoning
138 SPRINT_128_policy_reasoning POLICY-SPL-24-001 TODO POLICY-SPL-23-005 TODO SPRINT_128_policy_reasoning
139 SPRINT_129_policy_reasoning REGISTRY-API-27-002 TODO REGISTRY-API-27-001 TODO SPRINT_129_policy_reasoning
140 SPRINT_129_policy_reasoning REGISTRY-API-27-003 TODO REGISTRY-API-27-002 TODO SPRINT_129_policy_reasoning
141 SPRINT_129_policy_reasoning REGISTRY-API-27-004 TODO REGISTRY-API-27-003 TODO SPRINT_129_policy_reasoning
142 SPRINT_129_policy_reasoning REGISTRY-API-27-005 TODO REGISTRY-API-27-004 TODO SPRINT_129_policy_reasoning
143 SPRINT_129_policy_reasoning REGISTRY-API-27-006 TODO REGISTRY-API-27-005 TODO SPRINT_129_policy_reasoning
144 SPRINT_129_policy_reasoning REGISTRY-API-27-007 TODO REGISTRY-API-27-006 TODO SPRINT_129_policy_reasoning
145 SPRINT_129_policy_reasoning REGISTRY-API-27-008 TODO REGISTRY-API-27-007 TODO SPRINT_129_policy_reasoning
146 SPRINT_129_policy_reasoning REGISTRY-API-27-009 TODO REGISTRY-API-27-008 TODO SPRINT_129_policy_reasoning
147 SPRINT_129_policy_reasoning REGISTRY-API-27-010 TODO REGISTRY-API-27-009 TODO SPRINT_129_policy_reasoning
148 SPRINT_129_policy_reasoning RISK-ENGINE-66-002 TODO RISK-ENGINE-66-001 TODO SPRINT_129_policy_reasoning
149 SPRINT_129_policy_reasoning RISK-ENGINE-67-001 TODO RISK-ENGINE-66-002 TODO SPRINT_129_policy_reasoning
150 SPRINT_129_policy_reasoning RISK-ENGINE-67-002 TODO RISK-ENGINE-67-001 TODO SPRINT_129_policy_reasoning
151 SPRINT_129_policy_reasoning RISK-ENGINE-67-003 TODO RISK-ENGINE-67-002 TODO SPRINT_129_policy_reasoning
152 SPRINT_129_policy_reasoning RISK-ENGINE-68-001 TODO RISK-ENGINE-67-003 TODO SPRINT_129_policy_reasoning
153 SPRINT_129_policy_reasoning RISK-ENGINE-68-002 TODO RISK-ENGINE-68-001 TODO SPRINT_129_policy_reasoning
154 SPRINT_129_policy_reasoning RISK-ENGINE-69-001 TODO RISK-ENGINE-68-002 TODO SPRINT_129_policy_reasoning
155 SPRINT_129_policy_reasoning RISK-ENGINE-69-002 TODO RISK-ENGINE-69-001 TODO SPRINT_129_policy_reasoning
156 SPRINT_129_policy_reasoning RISK-ENGINE-70-001 TODO RISK-ENGINE-69-002 TODO SPRINT_129_policy_reasoning
157 SPRINT_129_policy_reasoning RISK-ENGINE-70-002 TODO RISK-ENGINE-70-001 TODO SPRINT_129_policy_reasoning
158 SPRINT_129_policy_reasoning VEXLENS-30-002 TODO VEXLENS-30-001 TODO SPRINT_129_policy_reasoning
159 SPRINT_129_policy_reasoning VEXLENS-30-003 TODO VEXLENS-30-002 TODO SPRINT_129_policy_reasoning
160 SPRINT_129_policy_reasoning VEXLENS-30-004 TODO VEXLENS-30-003 TODO SPRINT_129_policy_reasoning
161 SPRINT_129_policy_reasoning VEXLENS-30-005 TODO VEXLENS-30-004 TODO SPRINT_129_policy_reasoning
162 SPRINT_129_policy_reasoning VEXLENS-30-006 TODO VEXLENS-30-005 TODO SPRINT_129_policy_reasoning
163 SPRINT_129_policy_reasoning VEXLENS-30-007 TODO VEXLENS-30-006 TODO SPRINT_129_policy_reasoning
164 SPRINT_129_policy_reasoning VEXLENS-30-008 TODO VEXLENS-30-007 TODO SPRINT_129_policy_reasoning
165 SPRINT_129_policy_reasoning VEXLENS-30-009 TODO VEXLENS-30-008 TODO SPRINT_129_policy_reasoning
166 SPRINT_129_policy_reasoning VEXLENS-30-010 TODO VEXLENS-30-009 TODO SPRINT_129_policy_reasoning
167 SPRINT_129_policy_reasoning VEXLENS-30-011 TODO VEXLENS-30-010 TODO SPRINT_129_policy_reasoning
168 SPRINT_129_policy_reasoning VEXLENS-AIAI-31-002 TODO VEXLENS-AIAI-31-001 TODO SPRINT_129_policy_reasoning
169 SPRINT_129_policy_reasoning VEXLENS-ORCH-34-001 TODO VEXLENS-ORCH-33-001 TODO SPRINT_129_policy_reasoning
170 SPRINT_129_policy_reasoning VULN-API-29-002 TODO VULN-API-29-001 TODO SPRINT_129_policy_reasoning
171 SPRINT_129_policy_reasoning VULN-API-29-003 TODO VULN-API-29-002 TODO SPRINT_129_policy_reasoning
172 SPRINT_129_policy_reasoning VULN-API-29-004 TODO VULN-API-29-003 TODO SPRINT_129_policy_reasoning
173 SPRINT_129_policy_reasoning VULN-API-29-005 TODO VULN-API-29-004 TODO SPRINT_129_policy_reasoning
174 SPRINT_129_policy_reasoning VULN-API-29-006 TODO VULN-API-29-005 TODO SPRINT_129_policy_reasoning
175 SPRINT_129_policy_reasoning VULN-API-29-007 TODO VULN-API-29-006 TODO SPRINT_129_policy_reasoning
176 SPRINT_129_policy_reasoning VULN-API-29-008 TODO VULN-API-29-007 TODO SPRINT_129_policy_reasoning
177 SPRINT_129_policy_reasoning VULN-API-29-009 TODO VULN-API-29-008 TODO SPRINT_129_policy_reasoning
178 SPRINT_129_policy_reasoning VULN-API-29-010 TODO VULN-API-29-009 TODO SPRINT_129_policy_reasoning
179 SPRINT_129_policy_reasoning VULN-API-29-011 TODO VULN-API-29-010 TODO SPRINT_129_policy_reasoning
180 SPRINT_131_scanner_surface SCANNER-ANALYZERS-DENO-26-010 TODO SCANNER-ANALYZERS-DENO-26-009 TODO SPRINT_131_scanner_surface
181 SPRINT_131_scanner_surface SCANNER-ANALYZERS-DENO-26-011 TODO SCANNER-ANALYZERS-DENO-26-010 TODO SPRINT_131_scanner_surface
182 SPRINT_131_scanner_surface SCANNER-ANALYZERS-JAVA-21-006 TODO SCANNER-ANALYZERS-JAVA-21-005 TODO SPRINT_131_scanner_surface
183 SPRINT_131_scanner_surface SCANNER-ANALYZERS-JAVA-21-007 TODO SCANNER-ANALYZERS-JAVA-21-006 TODO SPRINT_131_scanner_surface
184 SPRINT_131_scanner_surface SCANNER-ANALYZERS-JAVA-21-008 BLOCKED SCANNER-ANALYZERS-JAVA-21-007 TODO SPRINT_131_scanner_surface
185 SPRINT_131_scanner_surface SCANNER-ANALYZERS-JAVA-21-009 TODO SCANNER-ANALYZERS-JAVA-21-008 BLOCKED SPRINT_131_scanner_surface
186 SPRINT_131_scanner_surface SCANNER-ANALYZERS-JAVA-21-010 TODO SCANNER-ANALYZERS-JAVA-21-009 TODO SPRINT_131_scanner_surface
187 SPRINT_131_scanner_surface SCANNER-ANALYZERS-JAVA-21-011 TODO SCANNER-ANALYZERS-JAVA-21-010 TODO SPRINT_131_scanner_surface
188 SPRINT_132_scanner_surface SCANNER-ANALYZERS-LANG-11-002 TODO SCANNER-ANALYZERS-LANG-11-001 TODO SPRINT_131_scanner_surface
189 SPRINT_132_scanner_surface SCANNER-ANALYZERS-LANG-11-003 TODO SCANNER-ANALYZERS-LANG-11-002 TODO SPRINT_132_scanner_surface
190 SPRINT_132_scanner_surface SCANNER-ANALYZERS-LANG-11-004 TODO SCANNER-ANALYZERS-LANG-11-003 TODO SPRINT_132_scanner_surface
191 SPRINT_132_scanner_surface SCANNER-ANALYZERS-LANG-11-005 TODO SCANNER-ANALYZERS-LANG-11-004 TODO SPRINT_132_scanner_surface
192 SPRINT_132_scanner_surface SCANNER-ANALYZERS-NATIVE-20-002 TODO SCANNER-ANALYZERS-NATIVE-20-001 TODO SPRINT_132_scanner_surface
193 SPRINT_132_scanner_surface SCANNER-ANALYZERS-NATIVE-20-003 TODO SCANNER-ANALYZERS-NATIVE-20-002 TODO SPRINT_132_scanner_surface
194 SPRINT_132_scanner_surface SCANNER-ANALYZERS-NATIVE-20-004 TODO SCANNER-ANALYZERS-NATIVE-20-003 TODO SPRINT_132_scanner_surface
195 SPRINT_132_scanner_surface SCANNER-ANALYZERS-NATIVE-20-005 TODO SCANNER-ANALYZERS-NATIVE-20-004 TODO SPRINT_132_scanner_surface
196 SPRINT_132_scanner_surface SCANNER-ANALYZERS-NATIVE-20-006 TODO SCANNER-ANALYZERS-NATIVE-20-005 TODO SPRINT_132_scanner_surface
197 SPRINT_132_scanner_surface SCANNER-ANALYZERS-NATIVE-20-007 TODO SCANNER-ANALYZERS-NATIVE-20-006 TODO SPRINT_132_scanner_surface
198 SPRINT_132_scanner_surface SCANNER-ANALYZERS-NATIVE-20-008 TODO SCANNER-ANALYZERS-NATIVE-20-007 TODO SPRINT_132_scanner_surface
199 SPRINT_132_scanner_surface SCANNER-ANALYZERS-NATIVE-20-009 TODO SCANNER-ANALYZERS-NATIVE-20-008 TODO SPRINT_132_scanner_surface
200 SPRINT_132_scanner_surface SCANNER-ANALYZERS-NATIVE-20-010 TODO SCANNER-ANALYZERS-NATIVE-20-009 TODO SPRINT_132_scanner_surface
201 SPRINT_132_scanner_surface SCANNER-ANALYZERS-NODE-22-002 TODO SCANNER-ANALYZERS-NODE-22-001 TODO SPRINT_132_scanner_surface
202 SPRINT_132_scanner_surface SCANNER-ANALYZERS-NODE-22-003 TODO SCANNER-ANALYZERS-NODE-22-002 TODO SPRINT_132_scanner_surface
203 SPRINT_132_scanner_surface SCANNER-ANALYZERS-NODE-22-004 TODO SCANNER-ANALYZERS-NODE-22-003 TODO SPRINT_132_scanner_surface
204 SPRINT_132_scanner_surface SCANNER-ANALYZERS-NODE-22-005 TODO SCANNER-ANALYZERS-NODE-22-004 TODO SPRINT_132_scanner_surface
205 SPRINT_133_scanner_surface SCANNER-ANALYZERS-NODE-22-006 TODO SCANNER-ANALYZERS-NODE-22-005 TODO SPRINT_132_scanner_surface
206 SPRINT_133_scanner_surface SCANNER-ANALYZERS-NODE-22-007 TODO SCANNER-ANALYZERS-NODE-22-006 TODO SPRINT_133_scanner_surface
207 SPRINT_133_scanner_surface SCANNER-ANALYZERS-NODE-22-008 TODO SCANNER-ANALYZERS-NODE-22-007 TODO SPRINT_133_scanner_surface
208 SPRINT_133_scanner_surface SCANNER-ANALYZERS-NODE-22-009 TODO SCANNER-ANALYZERS-NODE-22-008 TODO SPRINT_133_scanner_surface
209 SPRINT_133_scanner_surface SCANNER-ANALYZERS-NODE-22-010 TODO SCANNER-ANALYZERS-NODE-22-009 TODO SPRINT_133_scanner_surface
210 SPRINT_133_scanner_surface SCANNER-ANALYZERS-NODE-22-011 TODO SCANNER-ANALYZERS-NODE-22-010 TODO SPRINT_133_scanner_surface
211 SPRINT_133_scanner_surface SCANNER-ANALYZERS-NODE-22-012 TODO SCANNER-ANALYZERS-NODE-22-011 TODO SPRINT_133_scanner_surface
212 SPRINT_133_scanner_surface SCANNER-ANALYZERS-PHP-27-002 TODO SCANNER-ANALYZERS-PHP-27-001 TODO SPRINT_133_scanner_surface
213 SPRINT_133_scanner_surface SCANNER-ANALYZERS-PHP-27-003 TODO SCANNER-ANALYZERS-PHP-27-002 TODO SPRINT_133_scanner_surface
214 SPRINT_133_scanner_surface SCANNER-ANALYZERS-PHP-27-004 TODO SCANNER-ANALYZERS-PHP-27-003 TODO SPRINT_133_scanner_surface
215 SPRINT_133_scanner_surface SCANNER-ANALYZERS-PHP-27-005 TODO SCANNER-ANALYZERS-PHP-27-004 TODO SPRINT_133_scanner_surface
216 SPRINT_133_scanner_surface SCANNER-ANALYZERS-PHP-27-006 TODO SCANNER-ANALYZERS-PHP-27-005 TODO SPRINT_133_scanner_surface
217 SPRINT_133_scanner_surface SCANNER-ANALYZERS-PHP-27-007 TODO SCANNER-ANALYZERS-PHP-27-006 TODO SPRINT_133_scanner_surface
218 SPRINT_134_scanner_surface SCANNER-ANALYZERS-PHP-27-008 TODO SCANNER-ANALYZERS-PHP-27-002 TODO SPRINT_133_scanner_surface
219 SPRINT_134_scanner_surface SCANNER-ANALYZERS-PHP-27-009 TODO SCANNER-ANALYZERS-PHP-27-007 TODO SPRINT_133_scanner_surface
220 SPRINT_134_scanner_surface SCANNER-ANALYZERS-PHP-27-010 TODO SCANNER-ANALYZERS-PHP-27-009 TODO SPRINT_134_scanner_surface
221 SPRINT_134_scanner_surface SCANNER-ANALYZERS-PHP-27-011 TODO SCANNER-ANALYZERS-PHP-27-010 TODO SPRINT_134_scanner_surface
222 SPRINT_134_scanner_surface SCANNER-ANALYZERS-PHP-27-012 TODO SCANNER-ANALYZERS-PHP-27-011 TODO SPRINT_134_scanner_surface
223 SPRINT_134_scanner_surface SCANNER-ANALYZERS-PYTHON-23-002 TODO SCANNER-ANALYZERS-PYTHON-23-001 TODO SPRINT_134_scanner_surface
224 SPRINT_134_scanner_surface SCANNER-ANALYZERS-PYTHON-23-003 TODO SCANNER-ANALYZERS-PYTHON-23-002 TODO SPRINT_134_scanner_surface
225 SPRINT_134_scanner_surface SCANNER-ANALYZERS-PYTHON-23-004 TODO SCANNER-ANALYZERS-PYTHON-23-003 TODO SPRINT_134_scanner_surface
226 SPRINT_134_scanner_surface SCANNER-ANALYZERS-PYTHON-23-005 TODO SCANNER-ANALYZERS-PYTHON-23-004 TODO SPRINT_134_scanner_surface
227 SPRINT_134_scanner_surface SCANNER-ANALYZERS-PYTHON-23-006 TODO SCANNER-ANALYZERS-PYTHON-23-005 TODO SPRINT_134_scanner_surface
228 SPRINT_134_scanner_surface SCANNER-ANALYZERS-PYTHON-23-007 TODO SCANNER-ANALYZERS-PYTHON-23-006 TODO SPRINT_134_scanner_surface
229 SPRINT_134_scanner_surface SCANNER-ANALYZERS-PYTHON-23-008 TODO SCANNER-ANALYZERS-PYTHON-23-007 TODO SPRINT_134_scanner_surface
230 SPRINT_134_scanner_surface SCANNER-ANALYZERS-PYTHON-23-009 TODO SCANNER-ANALYZERS-PYTHON-23-008 TODO SPRINT_134_scanner_surface
231 SPRINT_134_scanner_surface SCANNER-ANALYZERS-PYTHON-23-010 TODO SCANNER-ANALYZERS-PYTHON-23-009 TODO SPRINT_134_scanner_surface
232 SPRINT_134_scanner_surface SCANNER-ANALYZERS-PYTHON-23-011 TODO SCANNER-ANALYZERS-PYTHON-23-010 TODO SPRINT_134_scanner_surface
233 SPRINT_135_scanner_surface SCANNER-ANALYZERS-PYTHON-23-012 TODO SCANNER-ANALYZERS-PYTHON-23-011 TODO SPRINT_134_scanner_surface
234 SPRINT_135_scanner_surface SCANNER-ANALYZERS-RUBY-28-002 TODO SCANNER-ANALYZERS-RUBY-28-001 TODO SPRINT_135_scanner_surface
235 SPRINT_135_scanner_surface SCANNER-ANALYZERS-RUBY-28-003 TODO SCANNER-ANALYZERS-RUBY-28-002 TODO SPRINT_135_scanner_surface
236 SPRINT_135_scanner_surface SCANNER-ANALYZERS-RUBY-28-004 TODO SCANNER-ANALYZERS-RUBY-28-003 TODO SPRINT_135_scanner_surface
237 SPRINT_135_scanner_surface SCANNER-ANALYZERS-RUBY-28-005 TODO SCANNER-ANALYZERS-RUBY-28-004 TODO SPRINT_135_scanner_surface
238 SPRINT_135_scanner_surface SCANNER-ANALYZERS-RUBY-28-006 TODO SCANNER-ANALYZERS-RUBY-28-005 TODO SPRINT_135_scanner_surface
239 SPRINT_135_scanner_surface SCANNER-ANALYZERS-RUBY-28-007 TODO SCANNER-ANALYZERS-RUBY-28-006 TODO SPRINT_135_scanner_surface
240 SPRINT_135_scanner_surface SCANNER-ANALYZERS-RUBY-28-008 TODO SCANNER-ANALYZERS-RUBY-28-007 TODO SPRINT_135_scanner_surface
241 SPRINT_135_scanner_surface SCANNER-ANALYZERS-RUBY-28-009 TODO SCANNER-ANALYZERS-RUBY-28-008 TODO SPRINT_135_scanner_surface
242 SPRINT_135_scanner_surface SCANNER-ANALYZERS-RUBY-28-010 TODO SCANNER-ANALYZERS-RUBY-28-009 TODO SPRINT_135_scanner_surface
243 SPRINT_135_scanner_surface SCANNER-ANALYZERS-RUBY-28-011 TODO SCANNER-ANALYZERS-RUBY-28-010 TODO SPRINT_135_scanner_surface
244 SPRINT_135_scanner_surface SCANNER-ANALYZERS-RUBY-28-012 TODO SCANNER-ANALYZERS-RUBY-28-011 TODO SPRINT_135_scanner_surface
245 SPRINT_135_scanner_surface SCANNER-ENTRYTRACE-18-503 TODO SCANNER-ENTRYTRACE-18-502 TODO SPRINT_135_scanner_surface
246 SPRINT_136_scanner_surface SCANNER-EMIT-15-001 TODO SCANNER-SURFACE-04 TODO SPRINT_136_scanner_surface
247 SPRINT_136_scanner_surface SCANNER-ENTRYTRACE-18-504 TODO SCANNER-ENTRYTRACE-18-503 TODO SPRINT_135_scanner_surface
248 SPRINT_136_scanner_surface SCANNER-ENTRYTRACE-18-505 TODO SCANNER-ENTRYTRACE-18-504 TODO SPRINT_136_scanner_surface
249 SPRINT_136_scanner_surface SCANNER-ENTRYTRACE-18-506 TODO SCANNER-ENTRYTRACE-18-505 TODO SPRINT_136_scanner_surface
250 SPRINT_136_scanner_surface SCANNER-ENV-02 TODO SCANNER-ENV-01 TODO SPRINT_136_scanner_surface
251 SPRINT_136_scanner_surface SCANNER-ENV-03 TODO SCANNER-ENV-02 TODO SPRINT_136_scanner_surface
252 SPRINT_136_scanner_surface SCANNER-LNM-21-002 TODO SCANNER-LNM-21-001 TODO SPRINT_136_scanner_surface
253 SPRINT_136_scanner_surface SCANNER-SORT-02 TODO SCANNER-EMIT-15-001 TODO SPRINT_136_scanner_surface
254 SPRINT_136_scanner_surface SCANNER-SURFACE-04 TODO SURFACE-FS-03 TODO SPRINT_136_scanner_surface
255 SPRINT_136_scanner_surface SCHED-SURFACE-02 TODO SCHED-SURFACE-01 TODO SPRINT_155_scheduler_i
256 SPRINT_136_scanner_surface SURFACE-ENV-03 TODO SURFACE-ENV-02 DOING SPRINT_136_scanner_surface
257 SPRINT_136_scanner_surface SURFACE-ENV-04 TODO SURFACE-ENV-02 DOING SPRINT_136_scanner_surface
258 SPRINT_136_scanner_surface SURFACE-ENV-05 TODO SURFACE-ENV-03 TODO SPRINT_136_scanner_surface
259 SPRINT_136_scanner_surface SURFACE-ENV-05 TODO SURFACE-ENV-04 TODO SPRINT_136_scanner_surface
260 SPRINT_136_scanner_surface SURFACE-FS-05 TODO SURFACE-FS-03 TODO SPRINT_136_scanner_surface
261 SPRINT_136_scanner_surface SURFACE-FS-07 TODO SCANNER-SURFACE-04 TODO SPRINT_136_scanner_surface
262 SPRINT_136_scanner_surface SURFACE-SECRETS-02 DOING SURFACE-SECRETS-01 DOING SPRINT_136_scanner_surface
263 SPRINT_136_scanner_surface SURFACE-SECRETS-03 TODO SURFACE-SECRETS-02 DOING SPRINT_136_scanner_surface
264 SPRINT_136_scanner_surface SURFACE-SECRETS-04 TODO SURFACE-SECRETS-02 DOING SPRINT_136_scanner_surface
265 SPRINT_136_scanner_surface SURFACE-SECRETS-05 TODO SURFACE-SECRETS-02 DOING SPRINT_136_scanner_surface
266 SPRINT_136_scanner_surface SURFACE-SECRETS-06 TODO SURFACE-SECRETS-03 TODO SPRINT_136_scanner_surface
267 SPRINT_136_scanner_surface SURFACE-VAL-02 TODO SURFACE-ENV-02 DOING SPRINT_136_scanner_surface
268 SPRINT_136_scanner_surface SURFACE-VAL-02 TODO SURFACE-VAL-01 DOING SPRINT_136_scanner_surface
269 SPRINT_136_scanner_surface SURFACE-VAL-03 TODO SURFACE-VAL-02 TODO SPRINT_136_scanner_surface
270 SPRINT_136_scanner_surface SURFACE-VAL-04 TODO SURFACE-VAL-02 TODO SPRINT_136_scanner_surface
271 SPRINT_136_scanner_surface SURFACE-VAL-05 TODO SURFACE-VAL-02 TODO SPRINT_136_scanner_surface
272 SPRINT_136_scanner_surface ZASTAVA-SURFACE-02 TODO ZASTAVA-SURFACE-01 TODO SPRINT_140_runtime_signals
273 SPRINT_301_docs_tasks_md_i DOCS-AIAI-31-004 DOING CONSOLE-VEX-30-001 DOING SPRINT_212_web_i
274 SPRINT_301_docs_tasks_md_i DOCS-AIAI-31-004 DOING CONSOLE-VULN-29-001 DOING SPRINT_212_web_i
275 SPRINT_301_docs_tasks_md_i DOCS-AIAI-31-004 DOING EXCITITOR-CONSOLE-23-001 TODO SPRINT_120_excititor_ii
276 SPRINT_301_docs_tasks_md_i DOCS-AIAI-31-005 BLOCKED CLI-VEX-30-001 TODO SPRINT_205_cli_v
277 SPRINT_301_docs_tasks_md_i DOCS-AIAI-31-005 BLOCKED CLI-VULN-29-001 TODO SPRINT_205_cli_v
278 SPRINT_301_docs_tasks_md_i DOCS-AIAI-31-005 BLOCKED DOCS-AIAI-31-004 DOING SPRINT_110_ingestion_evidence
279 SPRINT_301_docs_tasks_md_i DOCS-AIAI-31-006 BLOCKED DOCS-AIAI-31-005 BLOCKED SPRINT_110_ingestion_evidence
280 SPRINT_301_docs_tasks_md_i DOCS-AIAI-31-006 BLOCKED POLICY-ENGINE-31-001 TODO SPRINT_125_policy_reasoning
281 SPRINT_301_docs_tasks_md_i DOCS-AIAI-31-008 BLOCKED SBOM-AIAI-31-001 TODO SPRINT_140_runtime_signals
282 SPRINT_301_docs_tasks_md_i DOCS-AIAI-31-009 BLOCKED DEVOPS-AIAI-31-001 TODO SPRINT_503_ops_devops_i
283 SPRINT_301_docs_tasks_md_i DOCS-AIAI-31-009 BLOCKED DOCS-AIAI-31-008 BLOCKED SPRINT_111_advisoryai
284 SPRINT_301_docs_tasks_md_i DOCS-AIRGAP-56-002 TODO DOCS-AIRGAP-56-001 TODO SPRINT_301_docs_tasks_md_i
285 SPRINT_301_docs_tasks_md_i DOCS-AIRGAP-56-003 TODO DOCS-AIRGAP-56-002 TODO SPRINT_301_docs_tasks_md_i
286 SPRINT_301_docs_tasks_md_i DOCS-AIRGAP-56-004 TODO DOCS-AIRGAP-56-003 TODO SPRINT_301_docs_tasks_md_i
287 SPRINT_301_docs_tasks_md_i DOCS-AIRGAP-57-001 TODO DOCS-AIRGAP-56-004 TODO SPRINT_301_docs_tasks_md_i
288 SPRINT_301_docs_tasks_md_i DOCS-AIRGAP-57-002 TODO DOCS-AIRGAP-57-001 TODO SPRINT_301_docs_tasks_md_i
289 SPRINT_301_docs_tasks_md_i DOCS-CLI-DET-01 TODO CLI-SBOM-60-001 TODO SPRINT_203_cli_iii
290 SPRINT_301_docs_tasks_md_i DOCS-CLI-DET-01 TODO CLI-SBOM-60-002 TODO SPRINT_203_cli_iii

View File

@@ -1,560 +0,0 @@
# Execution Waves
_Generated on 2025-11-09 after scanning docs/implplan/SPRINT_*.md._
Each wave groups sprints that declare the same leading dependency. Start waves only when their shared prerequisites are satisfied; if a prerequisite references another sprint, treat the wave as sequential until that sprint is DONE.
## Wave 1 — Foundational / No explicit dependency
- Shared prerequisite(s): None (explicit)
- Parallelism guidance: No upstream sprint recorded; confirm module AGENTS and readiness gates before parallel execution.
- Sprints:
- SPRINT_138_scanner_ruby_parity.md — Sprint 138 - Scanner & Surface. In progress.
- SPRINT_140_runtime_signals.md — Sprint 140 - Runtime & Signals. In progress.
- SPRINT_150_scheduling_automation.md — Sprint 150 - Scheduling & Automation
- SPRINT_160_export_evidence.md — Sprint 160 - Export & Evidence
- SPRINT_170_notifications_telemetry.md — Sprint 170 - Notifications & Telemetry
- SPRINT_200_experience_sdks.md — Sprint 200 - Experience & SDKs
- SPRINT_300_documentation_process.md — Sprint 300 - Documentation & Process
- SPRINT_401_reachability_evidence_chain.md — Sprint 401 Reachability Evidence Chain
- SPRINT_500_ops_offline.md — Sprint 500 - Ops & Offline
## Wave 2 — Sprint 100.A - Attestor
- Shared prerequisite(s): Sprint 100.A - Attestor
- Parallelism guidance: Prerequisite Sprint 100.A (Attestor) closed on 2025-11-09; these sprints may run together once module blockers clear.
- Sprints:
- SPRINT_111_advisoryai.md — Sprint 111 - Ingestion & Evidence · 110.A) AdvisoryAI
- SPRINT_112_concelier_i.md — Sprint 112 - Ingestion & Evidence · 110.B) Concelier.I
- SPRINT_119_excititor_i.md — Sprint 119 - Ingestion & Evidence · 110.C) Excititor.I
- SPRINT_125_mirror.md — Sprint 125 - Ingestion & Evidence · 110.D) Mirror
## Wave 3 — Sprint 110.B - Concelier.I
- Shared prerequisite(s): Sprint 110.B - Concelier.I
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_113_concelier_ii.md — Sprint 113 - Ingestion & Evidence · 110.B) Concelier.II
## Wave 4 — Sprint 110.B - Concelier.II
- Shared prerequisite(s): Sprint 110.B - Concelier.II
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_114_concelier_iii.md — Sprint 114 - Ingestion & Evidence · 110.B) Concelier.III
## Wave 5 — Sprint 110.B - Concelier.III
- Shared prerequisite(s): Sprint 110.B - Concelier.III
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_115_concelier_iv.md — Sprint 115 - Ingestion & Evidence · 110.B) Concelier.IV
## Wave 6 — Sprint 110.B - Concelier.IV
- Shared prerequisite(s): Sprint 110.B - Concelier.IV
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_116_concelier_v.md — Sprint 116 - Ingestion & Evidence · 110.B) Concelier.V
## Wave 7 — Sprint 110.B - Concelier.V
- Shared prerequisite(s): Sprint 110.B - Concelier.V
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_117_concelier_vi.md — Sprint 117 - Ingestion & Evidence · 110.B) Concelier.VI
## Wave 8 — Sprint 110.C - Excititor.I
- Shared prerequisite(s): Sprint 110.C - Excititor.I
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_120_excititor_ii.md — Sprint 120 - Ingestion & Evidence · 110.C) Excititor.II
## Wave 9 — Sprint 110.A - AdvisoryAI (must land before this track).
- Shared prerequisite(s): Sprint 110.A - AdvisoryAI (must land before this track).
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_120_policy_reasoning.md — Sprint 120 - Policy & Reasoning
- SPRINT_123_policy_reasoning.md — Sprint 123 - Policy & Reasoning
## Wave 10 — Sprint 110.C - Excititor.II
- Shared prerequisite(s): Sprint 110.C - Excititor.II
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_121_excititor_iii.md — Sprint 121 - Ingestion & Evidence · 110.C) Excititor.III
## Wave 11 — Sprint 120.B - Findings.I (must land before this track).
- Shared prerequisite(s): Sprint 120.B - Findings.I (must land before this track).
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_121_policy_reasoning.md — Sprint 121 - Policy & Reasoning
## Wave 12 — Sprint 110.C - Excititor.III
- Shared prerequisite(s): Sprint 110.C - Excititor.III
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_122_excititor_iv.md — Sprint 122 - Ingestion & Evidence · 110.C) Excititor.IV
## Wave 13 — Sprint 120.B - Findings.II (must land before this track).
- Shared prerequisite(s): Sprint 120.B - Findings.II (must land before this track).
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_122_policy_reasoning.md — Sprint 122 - Policy & Reasoning
## Wave 14 — Sprint 110.C - Excititor.IV
- Shared prerequisite(s): Sprint 110.C - Excititor.IV
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_123_excititor_v.md — Sprint 123 - Ingestion & Evidence · 110.C) Excititor.V
## Wave 15 — Sprint 110.C - Excititor.V
- Shared prerequisite(s): Sprint 110.C - Excititor.V
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_124_excititor_vi.md — Sprint 124 - Ingestion & Evidence · 110.C) Excititor.VI
## Wave 16 — Sprint 120.C - Policy.I (must land before this track).
- Shared prerequisite(s): Sprint 120.C - Policy.I (must land before this track).
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_124_policy_reasoning.md — Sprint 124 - Policy & Reasoning
## Wave 17 — Sprint 120.C - Policy.II (must land before this track).
- Shared prerequisite(s): Sprint 120.C - Policy.II (must land before this track).
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_125_policy_reasoning.md — Sprint 125 - Policy & Reasoning
## Wave 18 — Sprint 120.C - Policy.III (must land before this track).
- Shared prerequisite(s): Sprint 120.C - Policy.III (must land before this track).
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_126_policy_reasoning.md — Sprint 126 - Policy & Reasoning
## Wave 19 — Sprint 120.C - Policy.IV (must land before this track).
- Shared prerequisite(s): Sprint 120.C - Policy.IV (must land before this track).
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_127_policy_reasoning.md — Sprint 127 - Policy & Reasoning
## Wave 20 — Sprint 120.C - Policy.V (must land before this track).
- Shared prerequisite(s): Sprint 120.C - Policy.V (must land before this track).
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_128_policy_reasoning.md — Sprint 128 - Policy & Reasoning
## Wave 21 — Sprint 120.C - Policy.VI (must land before this track).
- Shared prerequisite(s): Sprint 120.C - Policy.VI (must land before this track).
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_129_policy_reasoning.md — Sprint 129 - Policy & Reasoning
## Wave 22 — Sprint 130 - 1. Scanner.I — Scanner & Surface focus on Scanner (phase I).
- Shared prerequisite(s): Sprint 130 - 1. Scanner.I — Scanner & Surface focus on Scanner (phase I).
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_131_scanner_surface.md — Sprint 131 - Scanner & Surface
## Wave 23 — Sprint 131 - 2. Scanner.II — Scanner & Surface focus on Scanner (phase II).
- Shared prerequisite(s): Sprint 131 - 2. Scanner.II — Scanner & Surface focus on Scanner (phase II).
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_132_scanner_surface.md — Sprint 132 - Scanner & Surface
## Wave 24 — Sprint 132 - 3. Scanner.III — Scanner & Surface focus on Scanner (phase III).
- Shared prerequisite(s): Sprint 132 - 3. Scanner.III — Scanner & Surface focus on Scanner (phase III).
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_133_scanner_surface.md — Sprint 133 - Scanner & Surface
## Wave 25 — Sprint 133 - 4. Scanner.IV — Scanner & Surface focus on Scanner (phase IV).
- Shared prerequisite(s): Sprint 133 - 4. Scanner.IV — Scanner & Surface focus on Scanner (phase IV).
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_134_scanner_surface.md — Sprint 134 - Scanner & Surface
## Wave 26 — Sprint 134 - 5. Scanner.V — Scanner & Surface focus on Scanner (phase V).
- Shared prerequisite(s): Sprint 134 - 5. Scanner.V — Scanner & Surface focus on Scanner (phase V).
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_135_scanner_surface.md — Sprint 135 - Scanner & Surface
## Wave 27 — Sprint 135 - 6. Scanner.VI — Scanner & Surface focus on Scanner (phase VI).
- Shared prerequisite(s): Sprint 135 - 6. Scanner.VI — Scanner & Surface focus on Scanner (phase VI).
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_136_scanner_surface.md — Sprint 136 - Scanner & Surface
## Wave 28 — Sprint 120.A - AirGap, Sprint 130.A - Scanner
- Shared prerequisite(s): Sprint 120.A - AirGap, Sprint 130.A - Scanner
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_141_graph.md — Sprint 141 - Runtime & Signals · 140.A) Graph
- SPRINT_142_sbomservice.md — Sprint 142 - Runtime & Signals · 140.B) SbomService
- SPRINT_143_signals.md — Sprint 143 - Runtime & Signals · 140.C) Signals
- SPRINT_144_zastava.md — Sprint 144 - Runtime & Signals · 140.D) Zastava
## Wave 29 — Sprint 120.A - AirGap, Sprint 130.A - Scanner, Sprint 140.A - Graph
- Shared prerequisite(s): Sprint 120.A - AirGap, Sprint 130.A - Scanner, Sprint 140.A - Graph
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_151_orchestrator_i.md — Sprint 151 - Scheduling & Automation · 150.A) Orchestrator.I
- SPRINT_154_packsregistry.md — Sprint 154 - Scheduling & Automation · 150.B) PacksRegistry
- SPRINT_155_scheduler_i.md — Sprint 155 - Scheduling & Automation · 150.C) Scheduler.I
- SPRINT_157_taskrunner_i.md — Sprint 157 - Scheduling & Automation · 150.D) TaskRunner.I
## Wave 30 — Sprint 150.A - Orchestrator.I
- Shared prerequisite(s): Sprint 150.A - Orchestrator.I
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_152_orchestrator_ii.md — Sprint 152 - Scheduling & Automation · 150.A) Orchestrator.II
## Wave 31 — Sprint 150.A - Orchestrator.II
- Shared prerequisite(s): Sprint 150.A - Orchestrator.II
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_153_orchestrator_iii.md — Sprint 153 - Scheduling & Automation · 150.A) Orchestrator.III
## Wave 32 — Sprint 150.C - Scheduler.I
- Shared prerequisite(s): Sprint 150.C - Scheduler.I
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_156_scheduler_ii.md — Sprint 156 - Scheduling & Automation · 150.C) Scheduler.II
## Wave 33 — Sprint 150.D - TaskRunner.I
- Shared prerequisite(s): Sprint 150.D - TaskRunner.I
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_158_taskrunner_ii.md — Sprint 158 - Scheduling & Automation · 150.D) TaskRunner.II
## Wave 34 — Sprint 110.A - AdvisoryAI, Sprint 120.A - AirGap, Sprint 130.A - Scanner, Sprint 150.A - Orchestrator
- Shared prerequisite(s): Sprint 110.A - AdvisoryAI, Sprint 120.A - AirGap, Sprint 130.A - Scanner, Sprint 150.A - Orchestrator
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_161_evidencelocker.md — Sprint 161 - Export & Evidence · 160.A) EvidenceLocker
- SPRINT_162_exportcenter_i.md — Sprint 162 - Export & Evidence · 160.B) ExportCenter.I
- SPRINT_165_timelineindexer.md — Sprint 165 - Export & Evidence · 160.C) TimelineIndexer
## Wave 35 — Sprint 160.B - ExportCenter.I
- Shared prerequisite(s): Sprint 160.B - ExportCenter.I
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_163_exportcenter_ii.md — Sprint 163 - Export & Evidence · 160.B) ExportCenter.II
## Wave 36 — Sprint 160.B - ExportCenter.II
- Shared prerequisite(s): Sprint 160.B - ExportCenter.II
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_164_exportcenter_iii.md — Sprint 164 - Export & Evidence · 160.B) ExportCenter.III
## Wave 37 — Sprint 150.A - Orchestrator
- Shared prerequisite(s): Sprint 150.A - Orchestrator
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_171_notifier_i.md — Sprint 171 - Notifications & Telemetry · 170.A) Notifier.I
- SPRINT_174_telemetry.md — Sprint 174 - Notifications & Telemetry · 170.B) Telemetry
## Wave 38 — Sprint 170.A - Notifier.I
- Shared prerequisite(s): Sprint 170.A - Notifier.I
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_172_notifier_ii.md — Sprint 172 - Notifications & Telemetry · 170.A) Notifier.II
## Wave 39 — Sprint 170.A - Notifier.II
- Shared prerequisite(s): Sprint 170.A - Notifier.II
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_173_notifier_iii.md — Sprint 173 - Notifications & Telemetry · 170.A) Notifier.III
## Wave 40 — Sprint 160 Export & Evidence
- Shared prerequisite(s): Sprint 160 Export & Evidence
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_185_shared_replay_primitives.md — Sprint 185 - Replay Core · 185.A) Shared Replay Primitives
## Wave 41 — Sprint 185 Replay Core Foundations, Sprint 130 Scanner & Surface
- Shared prerequisite(s): Sprint 185 Replay Core Foundations, Sprint 130 Scanner & Surface
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_186_record_deterministic_execution.md — Sprint 186 - Scanner Replay · 186.A) Record & Deterministic Execution
## Wave 42 — Sprint 186 Scanner Record Mode, Sprint 160 Export & Evidence, Sprint 180 Experience & SDKs
- Shared prerequisite(s): Sprint 186 Scanner Record Mode, Sprint 160 Export & Evidence, Sprint 180 Experience & SDKs
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_187_evidence_locker_cli_integration.md — Sprint 187 - Replay Delivery · 187.A) Evidence Locker & CLI Integration
## Wave 43 — Sprint 120.A - AirGap, Sprint 130.A - Scanner, Sprint 150.A - Orchestrator, Sprint 170.A - Notifier
- Shared prerequisite(s): Sprint 120.A - AirGap, Sprint 130.A - Scanner, Sprint 150.A - Orchestrator, Sprint 170.A - Notifier
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_201_cli_i.md — Sprint 201 - Experience & SDKs · 180.A) Cli.I
- SPRINT_206_devportal.md — Sprint 206 - Experience & SDKs · 180.B) DevPortal
- SPRINT_207_graph.md — Sprint 207 - Experience & SDKs · 180.C) Graph
- SPRINT_208_sdk.md — Sprint 208 - Experience & SDKs · 180.D) Sdk
- SPRINT_209_ui_i.md — Sprint 209 - Experience & SDKs · 180.E) UI.I
- SPRINT_212_web_i.md — Sprint 212 - Experience & SDKs · 180.F) Web.I
## Wave 44 — Sprint 180.A - Cli.I
- Shared prerequisite(s): Sprint 180.A - Cli.I
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_202_cli_ii.md — Sprint 202 - Experience & SDKs · 180.A) Cli.II
## Wave 45 — Sprint 180.A - Cli.II
- Shared prerequisite(s): Sprint 180.A - Cli.II
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_203_cli_iii.md — Sprint 203 - Experience & SDKs · 180.A) Cli.III
## Wave 46 — Sprint 180.A - Cli.III
- Shared prerequisite(s): Sprint 180.A - Cli.III
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_204_cli_iv.md — Sprint 204 - Experience & SDKs · 180.A) Cli.IV
## Wave 47 — Sprint 180.A - Cli.IV
- Shared prerequisite(s): Sprint 180.A - Cli.IV
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_205_cli_v.md — Sprint 205 - Experience & SDKs · 180.A) Cli.V
## Wave 48 — Sprint 180.E - UI.I
- Shared prerequisite(s): Sprint 180.E - UI.I
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_210_ui_ii.md — Sprint 210 - Experience & SDKs · 180.E) UI.II
## Wave 49 — Sprint 180.E - UI.II
- Shared prerequisite(s): Sprint 180.E - UI.II
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_211_ui_iii.md — Sprint 211 - Experience & SDKs · 180.E) UI.III
## Wave 50 — Sprint 180.F - Web.I
- Shared prerequisite(s): Sprint 180.F - Web.I
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_213_web_ii.md — Sprint 213 - Experience & SDKs · 180.F) Web.II
## Wave 51 — Sprint 180.F - Web.II
- Shared prerequisite(s): Sprint 180.F - Web.II
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_214_web_iii.md — Sprint 214 - Experience & SDKs · 180.F) Web.III
## Wave 52 — Sprint 180.F - Web.III
- Shared prerequisite(s): Sprint 180.F - Web.III
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_215_web_iv.md — Sprint 215 - Experience & SDKs · 180.F) Web.IV
## Wave 53 — Sprint 180.F - Web.IV
- Shared prerequisite(s): Sprint 180.F - Web.IV
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_216_web_v.md — Sprint 216 - Experience & SDKs · 180.F) Web.V
## Wave 54 — Sprint 100.A - Attestor, Sprint 110.A - AdvisoryAI, Sprint 120.A - AirGap, Sprint 130.A - Scanner, Sprint 140.A - Graph, Sprint 150.A - Orchestrator, Sprint 160.A - EvidenceLocker, Sprint 170.A - Notifier, Sprint 180.A - Cli, Sprint 190.A - Ops Deployment
- Shared prerequisite(s): Sprint 100.A - Attestor, Sprint 110.A - AdvisoryAI, Sprint 120.A - AirGap, Sprint 130.A - Scanner, Sprint 140.A - Graph, Sprint 150.A - Orchestrator, Sprint 160.A - EvidenceLocker, Sprint 170.A - Notifier, Sprint 180.A - Cli, Sprint 190.A - Ops Deployment
- Parallelism guidance: Prerequisite Sprint 100.A (Attestor) closed on 2025-11-09; these sprints may run together once module blockers clear.
- Sprints:
- SPRINT_301_docs_tasks_md_i.md — Sprint 301 - Documentation & Process · 200.A) Docs Tasks.Md.I
- SPRINT_312_docs_modules_advisory_ai.md — Sprint 312 - Documentation & Process · 200.B) Docs Modules Advisory Ai
- SPRINT_313_docs_modules_attestor.md — Sprint 313 - Documentation & Process · 200.C) Docs Modules Attestor
- SPRINT_314_docs_modules_authority.md — Sprint 314 - Documentation & Process · 200.D) Docs Modules Authority
- SPRINT_315_docs_modules_ci.md — Sprint 315 - Documentation & Process · 200.E) Docs Modules Ci
- SPRINT_316_docs_modules_cli.md — Sprint 316 - Documentation & Process · 200.F) Docs Modules Cli
- SPRINT_317_docs_modules_concelier.md — Sprint 317 - Documentation & Process · 200.G) Docs Modules Concelier
- SPRINT_318_docs_modules_devops.md — Sprint 318 - Documentation & Process · 200.H) Docs Modules Devops
- SPRINT_319_docs_modules_excititor.md — Sprint 319 - Documentation & Process · 200.I) Docs Modules Excititor
- SPRINT_320_docs_modules_export_center.md — Sprint 320 - Documentation & Process · 200.J) Docs Modules Export Center
- SPRINT_321_docs_modules_graph.md — Sprint 321 - Documentation & Process · 200.K) Docs Modules Graph
- SPRINT_322_docs_modules_notify.md — Sprint 322 - Documentation & Process · 200.L) Docs Modules Notify
- SPRINT_323_docs_modules_orchestrator.md — Sprint 323 - Documentation & Process · 200.M) Docs Modules Orchestrator
- SPRINT_324_docs_modules_platform.md — Sprint 324 - Documentation & Process · 200.N) Docs Modules Platform
- SPRINT_325_docs_modules_policy.md — Sprint 325 - Documentation & Process · 200.O) Docs Modules Policy
- SPRINT_326_docs_modules_registry.md — Sprint 326 - Documentation & Process · 200.P) Docs Modules Registry
- SPRINT_327_docs_modules_scanner.md — Sprint 327 - Documentation & Process · 200.Q) Docs Modules Scanner
- SPRINT_328_docs_modules_scheduler.md — Sprint 328 - Documentation & Process · 200.R) Docs Modules Scheduler
- SPRINT_329_docs_modules_signer.md — Sprint 329 - Documentation & Process · 200.S) Docs Modules Signer
- SPRINT_330_docs_modules_telemetry.md — Sprint 330 - Documentation & Process · 200.T) Docs Modules Telemetry
- SPRINT_331_docs_modules_ui.md — Sprint 331 - Documentation & Process · 200.U) Docs Modules Ui
- SPRINT_332_docs_modules_vex_lens.md — Sprint 332 - Documentation & Process · 200.V) Docs Modules Vex Lens
- SPRINT_333_docs_modules_excititor.md — Sprint 333 - Documentation & Process · 200.W) Docs Modules Excititor
- SPRINT_334_docs_modules_vuln_explorer.md — Sprint 334 - Documentation & Process · 200.X) Docs Modules Vuln Explorer
- SPRINT_335_docs_modules_zastava.md — Sprint 335 - Documentation & Process · 200.Y) Docs Modules Zastava
## Wave 55 — Sprint 200.A - Docs Tasks.Md.I
- Shared prerequisite(s): Sprint 200.A - Docs Tasks.Md.I
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_302_docs_tasks_md_ii.md — Sprint 302 - Documentation & Process · 200.A) Docs Tasks.Md.II
## Wave 56 — Sprint 200.A - Docs Tasks.Md.II
- Shared prerequisite(s): Sprint 200.A - Docs Tasks.Md.II
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_303_docs_tasks_md_iii.md — Sprint 303 - Documentation & Process · 200.A) Docs Tasks.Md.III
## Wave 57 — Sprint 200.A - Docs Tasks.Md.III
- Shared prerequisite(s): Sprint 200.A - Docs Tasks.Md.III
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_304_docs_tasks_md_iv.md — Sprint 304 - Documentation & Process · 200.A) Docs Tasks.Md.IV
## Wave 58 — Sprint 200.A - Docs Tasks.Md.IV
- Shared prerequisite(s): Sprint 200.A - Docs Tasks.Md.IV
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_305_docs_tasks_md_v.md — Sprint 305 - Documentation & Process · 200.A) Docs Tasks.Md.V
## Wave 59 — Sprint 200.A - Docs Tasks.Md.V
- Shared prerequisite(s): Sprint 200.A - Docs Tasks.Md.V
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_306_docs_tasks_md_vi.md — Sprint 306 - Documentation & Process · 200.A) Docs Tasks.Md.VI
## Wave 60 — Sprint 200.A - Docs Tasks.Md.VI
- Shared prerequisite(s): Sprint 200.A - Docs Tasks.Md.VI
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_307_docs_tasks_md_vii.md — Sprint 307 - Documentation & Process · 200.A) Docs Tasks.Md.VII
## Wave 61 — Sprint 200.A - Docs Tasks.Md.VII
- Shared prerequisite(s): Sprint 200.A - Docs Tasks.Md.VII
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_308_docs_tasks_md_viii.md — Sprint 308 - Documentation & Process · 200.A) Docs Tasks.Md.VIII
## Wave 62 — Sprint 200.A - Docs Tasks.Md.VIII
- Shared prerequisite(s): Sprint 200.A - Docs Tasks.Md.VIII
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_309_docs_tasks_md_ix.md — Sprint 309 - Documentation & Process · 200.A) Docs Tasks.Md.IX
## Wave 63 — Sprint 200.A - Docs Tasks.Md.IX
- Shared prerequisite(s): Sprint 200.A - Docs Tasks.Md.IX
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_310_docs_tasks_md_x.md — Sprint 310 - Documentation & Process · 200.A) Docs Tasks.Md.X
## Wave 64 — Sprint 200.A - Docs Tasks.Md.X
- Shared prerequisite(s): Sprint 200.A - Docs Tasks.Md.X
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_311_docs_tasks_md_xi.md — Sprint 311 - Documentation & Process · 200.A) Docs Tasks.Md.XI
## Wave 65 — Sprint 140 Runtime Signals, Sprint 185 Replay Core, Sprint 186 Scanner Record Mode, Sprint 187 Evidence & CLI Replay
- Shared prerequisite(s): Sprint 140 Runtime Signals, Sprint 185 Replay Core, Sprint 186 Scanner Record Mode, Sprint 187 Evidence & CLI Replay
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_400_runtime_facts_static_callgraph_union.md — Sprint 400 - Reachability Delivery · 201.A) Runtime facts + static callgraph union
## Wave 66 — Sprint 100.A - Attestor, Sprint 110.A - AdvisoryAI, Sprint 120.A - AirGap, Sprint 130.A - Scanner, Sprint 140.A - Graph, Sprint 150.A - Orchestrator, Sprint 160.A - EvidenceLocker, Sprint 170.A - Notifier, Sprint 180.A - Cli
- Shared prerequisite(s): Sprint 100.A - Attestor, Sprint 110.A - AdvisoryAI, Sprint 120.A - AirGap, Sprint 130.A - Scanner, Sprint 140.A - Graph, Sprint 150.A - Orchestrator, Sprint 160.A - EvidenceLocker, Sprint 170.A - Notifier, Sprint 180.A - Cli
- Parallelism guidance: Prerequisite Sprint 100.A (Attestor) closed on 2025-11-09; these sprints may run together once module blockers clear.
- Sprints:
- SPRINT_501_ops_deployment_i.md — Sprint 501 - Ops & Offline · 190.A) Ops Deployment.I
- SPRINT_503_ops_devops_i.md — Sprint 503 - Ops & Offline · 190.B) Ops Devops.I
- SPRINT_508_ops_offline_kit.md — Sprint 508 - Ops & Offline · 190.C) Ops Offline Kit
- SPRINT_509_samples.md — Sprint 509 - Ops & Offline · 190.D) Samples
- SPRINT_510_airgap.md — Sprint 510 - Ops & Offline · 190.E) AirGap
- SPRINT_511_api.md — Sprint 511 - Ops & Offline · 190.F) Api
- SPRINT_512_bench.md — Sprint 512 - Ops & Offline · 190.G) Bench
- SPRINT_513_provenance.md — Sprint 513 - Ops & Offline · 190.H) Provenance
- SPRINT_514_sovereign_crypto_enablement.md — Sprint 514 - Ops & Offline · 190.K) Sovereign Crypto Enablement
## Wave 67 — Sprint 190.A - Ops Deployment.I
- Shared prerequisite(s): Sprint 190.A - Ops Deployment.I
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_502_ops_deployment_ii.md — Sprint 502 - Ops & Offline · 190.A) Ops Deployment.II
## Wave 68 — Sprint 190.B - Ops Devops.I
- Shared prerequisite(s): Sprint 190.B - Ops Devops.I
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_504_ops_devops_ii.md — Sprint 504 - Ops & Offline · 190.B) Ops Devops.II
## Wave 69 — Sprint 190.B - Ops Devops.II
- Shared prerequisite(s): Sprint 190.B - Ops Devops.II
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_505_ops_devops_iii.md — Sprint 505 - Ops & Offline · 190.B) Ops Devops.III
## Wave 70 — Sprint 190.B - Ops Devops.III
- Shared prerequisite(s): Sprint 190.B - Ops Devops.III
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_506_ops_devops_iv.md — Sprint 506 - Ops & Offline · 190.B) Ops Devops.IV
## Wave 71 — Sprint 190.B - Ops Devops.IV
- Shared prerequisite(s): Sprint 190.B - Ops Devops.IV
- Parallelism guidance: Sequential: wait until every referenced sprint is DONE before starting items in this wave.
- Sprints:
- SPRINT_507_ops_devops_v.md — Sprint 507 - Ops & Offline · 190.B) Ops Devops.V

File diff suppressed because it is too large Load Diff

View File

@@ -1,448 +0,0 @@
| Sprint | Task ID | Status | Guild | Working directory | Known pre-requisites |
| --- | --- | --- | --- | --- | --- |
| SPRINT_110_ingestion_evidence | AIAI-31-008 | TODO | Advisory AI Guild | | AIAI-31-006; AIAI-31-007 |
| SPRINT_110_ingestion_evidence | CONCELIER-AIAI-31-002 | DOING | Concelier Core · Concelier WebService Guilds | | CONCELIER-GRAPH-21-001/002; CARTO-GRAPH-21-002 |
| SPRINT_110_ingestion_evidence | CONCELIER-AIRGAP-56-001..58-001 | TODO | Concelier Core · AirGap Guilds | | Link-Not-Merge schema; Evidence Locker attestation contract |
| SPRINT_110_ingestion_evidence | CONCELIER-ATTEST-73-001/002 | TODO | Concelier Core · Evidence Locker Guild | | CONCELIER-AIAI-31-002; Evidence Locker contract |
| SPRINT_110_ingestion_evidence | CONCELIER-CONSOLE-23-001..003 | TODO | Concelier Console Guild | | Link-Not-Merge schema |
| SPRINT_110_ingestion_evidence | DOCS-AIAI-31-004 | DOING | Docs Guild · Console Guild | | CONSOLE-VULN-29-001; CONSOLE-VEX-30-001; SBOM-AIAI-31-001/003 |
| SPRINT_110_ingestion_evidence | DOCS-AIAI-31-005/006/008/009 | BLOCKED | Docs Guild | | DOCS-AIAI-31-004; CLI-VULN-29-001; CLI-VEX-30-001; POLICY-ENGINE-31-001; DEVOPS-AIAI-31-001 |
| SPRINT_110_ingestion_evidence | EXCITITOR-AIAI-31-002 | TODO | Excititor Web/Core Guilds | | Link-Not-Merge schema; Evidence Locker contract |
| SPRINT_110_ingestion_evidence | EXCITITOR-AIAI-31-003 | TODO | Excititor Observability Guild | | EXCITITOR-AIAI-31-002 |
| SPRINT_110_ingestion_evidence | EXCITITOR-AIAI-31-004 | TODO | Docs Guild · Excititor Guild | | EXCITITOR-AIAI-31-002 |
| SPRINT_110_ingestion_evidence | EXCITITOR-AIRGAP-56/57/58 · EXCITITOR-CONN-TRUST-01-001 | TODO | Excititor Guild · AirGap Guilds | | Link-Not-Merge schema; attestation plan |
| SPRINT_110_ingestion_evidence | EXCITITOR-ATTEST-01-003 / 73-001 / 73-002 | TODO | Excititor Guild · Evidence Locker Guild | | EXCITITOR-AIAI-31-002; Evidence Locker contract |
| SPRINT_110_ingestion_evidence | EXPORT-OBS-51-001 / 54-001 · AIRGAP-TIME-57-001 · CLI-AIRGAP-56-001 · PROV-OBS-53-001 | TODO | Exporter Guild · AirGap Time Guild · CLI Guild | | MIRROR-CRT-56-001 staffing |
| SPRINT_110_ingestion_evidence | FEEDCONN-ICSCISA-02-012 / FEEDCONN-KISA-02-008 | BLOCKED | Concelier Feed Owners | | Feed owner remediation plan |
| SPRINT_110_ingestion_evidence | MIRROR-CRT-56-001 | TODO | Mirror Creator Guild | | Staffing decision |
| SPRINT_110_ingestion_evidence | MIRROR-CRT-56-002 | TODO | Mirror Creator · Security Guilds | | MIRROR-CRT-56-001; PROV-OBS-53-001 |
| SPRINT_110_ingestion_evidence | MIRROR-CRT-57-001/002 | TODO | Mirror Creator Guild · AirGap Time Guild | | MIRROR-CRT-56-001; AIRGAP-TIME-57-001 |
| SPRINT_110_ingestion_evidence | MIRROR-CRT-58-001/002 | TODO | Mirror Creator Guild · CLI Guild · Exporter Guild | | MIRROR-CRT-56-001; EXPORT-OBS-54-001; CLI-AIRGAP-56-001 |
| SPRINT_110_ingestion_evidence | SBOM-AIAI-31-003 | BLOCKED | SBOM Service Guild | | SBOM-AIAI-31-001; CLI-VULN-29-001; CLI-VEX-30-001 |
| SPRINT_120_policy_reasoning | LEDGER-29-007 | TODO | Findings Ledger Guild, Observability Guild | src/Findings/StellaOps.Findings.Ledger | Instrument metrics (`ledger_write_latency`, `projection_lag_seconds`, `ledger_events_total`), structured logs, and Merkle anchoring alerts; publish dashboards (Deps: LEDGER-29-006) |
| SPRINT_120_policy_reasoning | LEDGER-29-007/008 | TODO | Findings Ledger Guild · Observability Guild · QA Guild | | |
| SPRINT_120_policy_reasoning | LEDGER-29-008 | TODO | Findings Ledger Guild, QA Guild | src/Findings/StellaOps.Findings.Ledger | Develop unit/property/integration tests, replay/restore tooling, determinism harness, and load tests at 5M findings/tenant (Deps: LEDGER-29-007) |
| SPRINT_120_policy_reasoning | LEDGER-29-009 | TODO | Findings Ledger Guild, DevOps Guild | src/Findings/StellaOps.Findings.Ledger | Provide deployment manifests (Helm/Compose), backup/restore guidance, Merkle anchor externalization (optional), and offline kit instructions (Deps: LEDGER-29-008) |
| SPRINT_120_policy_reasoning | LEDGER-29-009 | TODO | Findings Ledger Guild · DevOps Guild | | |
| SPRINT_120_policy_reasoning | LEDGER-34-101 | TODO | Findings Ledger Guild | src/Findings/StellaOps.Findings.Ledger | Link orchestrator run ledger exports into Findings Ledger provenance chain, index by artifact hash, and expose audit queries (Deps: LEDGER-29-009) |
| SPRINT_120_policy_reasoning | LEDGER-34-101 | TODO | Findings Ledger Guild | | |
| SPRINT_120_policy_reasoning | LEDGER-AIRGAP-56-001 | TODO | Findings Ledger Guild | src/Findings/StellaOps.Findings.Ledger | Record bundle provenance (`bundle_id`, `merkle_root`, `time_anchor`) on ledger events for advisories/VEX/policies imported via Mirror Bundles |
| SPRINT_120_policy_reasoning | LEDGER-AIRGAP-56-002 | TODO | Findings Ledger Guild, AirGap Time Guild | src/Findings/StellaOps.Findings.Ledger | Surface staleness metrics for findings and block risk-critical exports when stale beyond thresholds; provide remediation messaging (Deps: LEDGER-AIRGAP-56-001) |
| SPRINT_120_policy_reasoning | LEDGER-AIRGAP-56/57/58 series | TODO | Findings Ledger Guild · AirGap Guilds · Evidence Locker Guild | | |
| SPRINT_120_policy_reasoning | LEDGER-AIRGAP-57-001 | TODO | Findings Ledger Guild, Evidence Locker Guild | src/Findings/StellaOps.Findings.Ledger | Link findings evidence snapshots to portable evidence bundles and ensure cross-enclave verification works (Deps: LEDGER-AIRGAP-56-002) |
| SPRINT_120_policy_reasoning | LEDGER-AIRGAP-58-001 | TODO | Findings Ledger Guild, AirGap Controller Guild | src/Findings/StellaOps.Findings.Ledger | Emit timeline events for bundle import impacts (new findings, remediation changes) with sealed-mode context (Deps: LEDGER-AIRGAP-57-001) |
| SPRINT_120_policy_reasoning | LEDGER-ATTEST-73-001 | TODO | Findings Ledger Guild, Attestor Service Guild | src/Findings/StellaOps.Findings.Ledger | Persist pointers from findings to verification reports and attestation envelopes for explainability |
| SPRINT_120_policy_reasoning | LEDGER-ATTEST-73-001 | TODO | Findings Ledger Guild · Attestor Service Guild | | |
| SPRINT_121_policy_reasoning | LEDGER-ATTEST-73-002 | TODO | Findings Ledger Guild | src/Findings/StellaOps.Findings.Ledger | Enable search/filter in findings projections by verification result and attestation status (Deps: LEDGER-ATTEST-73-001) |
| SPRINT_121_policy_reasoning | LEDGER-EXPORT-35-001 | TODO | Findings Ledger Guild | src/Findings/StellaOps.Findings.Ledger | Provide paginated streaming endpoints for advisories, VEX, SBOMs, and findings aligned with export filters, including deterministic ordering and provenance metadata |
| SPRINT_121_policy_reasoning | LEDGER-OAS-61-001 | TODO | Findings Ledger Guild, API Contracts Guild | src/Findings/StellaOps.Findings.Ledger | Expand Findings Ledger OAS to include projections, evidence lookups, and filter parameters with examples |
| SPRINT_121_policy_reasoning | LEDGER-OAS-61-002 | TODO | Findings Ledger Guild | src/Findings/StellaOps.Findings.Ledger | Implement `/.well-known/openapi` endpoint and ensure version metadata matches release (Deps: LEDGER-OAS-61-001) |
| SPRINT_121_policy_reasoning | LEDGER-OAS-62-001 | TODO | Findings Ledger Guild, SDK Generator Guild | src/Findings/StellaOps.Findings.Ledger | Provide SDK test cases for findings pagination, filtering, evidence links; ensure typed models expose provenance (Deps: LEDGER-OAS-61-002) |
| SPRINT_121_policy_reasoning | LEDGER-OAS-63-001 | TODO | Findings Ledger Guild, API Governance Guild | src/Findings/StellaOps.Findings.Ledger | Support deprecation headers and Notifications for retiring finding endpoints (Deps: LEDGER-OAS-62-001) |
| SPRINT_121_policy_reasoning | LEDGER-OBS-50-001 | TODO | Findings Ledger Guild, Observability Guild | src/Findings/StellaOps.Findings.Ledger | Integrate telemetry core within ledger writer/projector services, emitting structured logs and trace spans for ledger append, projector replay, and query APIs with tenant context |
| SPRINT_121_policy_reasoning | LEDGER-OBS-51-001 | TODO | Findings Ledger Guild, DevOps Guild | src/Findings/StellaOps.Findings.Ledger | Publish metrics for ledger latency, projector lag, event throughput, and policy evaluation linkage. Define SLOs (ledger append P95 < 1s, replay lag < 30s) with burn-rate alerts and dashboards (Deps: LEDGER-OBS-50-001) |
| SPRINT_121_policy_reasoning | LEDGER-OBS-52-001 | TODO | Findings Ledger Guild | src/Findings/StellaOps.Findings.Ledger | Emit timeline events for ledger writes and projector commits (`ledger.event.appended`, `ledger.projection.updated`) with trace ID, policy version, evidence bundle reference placeholders (Deps: LEDGER-OBS-51-001) |
| SPRINT_121_policy_reasoning | LEDGER-OBS-53-001 | TODO | Findings Ledger Guild, Evidence Locker Guild | src/Findings/StellaOps.Findings.Ledger | Persist evidence bundle references (evaluation/job capsules) alongside ledger entries, exposing lookup API linking findings to evidence manifests and timeline (Deps: LEDGER-OBS-52-001) |
| SPRINT_121_policy_reasoning | LEDGER-OBS-54-001 | TODO | Findings Ledger Guild, Provenance Guild | src/Findings/StellaOps.Findings.Ledger | Verify attestation references for ledger-derived exports; expose `/ledger/attestations` endpoint returning DSSE verification state and chain-of-custody summary (Deps: LEDGER-OBS-53-001) |
| SPRINT_121_policy_reasoning | LEDGER-OBS-55-001 | TODO | Findings Ledger Guild, DevOps Guild | src/Findings/StellaOps.Findings.Ledger | Enhance incident mode to record additional replay diagnostics (lag traces, conflict snapshots) and extend retention while active. Emit activation events to timeline + notifier (Deps: LEDGER-OBS-54-001) |
| SPRINT_121_policy_reasoning | LEDGER-PACKS-42-001 | TODO | Findings Ledger Guild | src/Findings/StellaOps.Findings.Ledger | Provide snapshot/time-travel APIs and digestable exports for task pack simulation and CLI offline mode |
| SPRINT_121_policy_reasoning | LEDGER-RISK-66-001 | TODO | Findings Ledger Guild, Risk Engine Guild | src/Findings/StellaOps.Findings.Ledger | Add schema migrations for `risk_score`, `risk_severity`, `profile_version`, `explanation_id`, and supporting indexes |
| SPRINT_121_policy_reasoning | LEDGER-RISK-66-002 | TODO | Findings Ledger Guild | src/Findings/StellaOps.Findings.Ledger | Implement deterministic upsert of scoring results keyed by finding hash/profile version with history audit (Deps: LEDGER-RISK-66-001) |
| SPRINT_122_policy_reasoning | LEDGER-RISK-67-001 | TODO | Findings Ledger Guild, Risk Engine Guild | src/Findings/StellaOps.Findings.Ledger | Expose query APIs for scored findings with score/severity filters, pagination, and explainability links (Deps: LEDGER-RISK-66-002) |
| SPRINT_122_policy_reasoning | LEDGER-RISK-68-001 | TODO | Findings Ledger Guild, Export Guild | src/Findings/StellaOps.Findings.Ledger | Enable export of scored findings and simulation results via Export Center integration (Deps: LEDGER-RISK-67-001) |
| SPRINT_122_policy_reasoning | LEDGER-RISK-69-001 | TODO | Findings Ledger Guild, Observability Guild | src/Findings/StellaOps.Findings.Ledger | Emit metrics/dashboards for scoring latency, result freshness, severity distribution, provider gaps (Deps: LEDGER-RISK-68-001) |
| SPRINT_122_policy_reasoning | LEDGER-TEN-48-001 | TODO | Findings Ledger Guild | src/Findings/StellaOps.Findings.Ledger | Partition ledger tables by tenant/project, enable RLS, update queries/events, and stamp audit metadata |
| SPRINT_123_policy_reasoning | EXPORT-CONSOLE-23-001 | TODO | Policy Guild, Scheduler Guild, Observability Guild | src/Policy/StellaOps.Policy.Engine | Build evidence bundle/export generator producing signed manifests, CSV/JSON replay endpoints, and trace attachments; integrate with scheduler jobs and expose progress telemetry |
| SPRINT_123_policy_reasoning | POLICY-AIRGAP-56-001 | TODO | Policy Guild | src/Policy/StellaOps.Policy.Engine | Support policy pack imports from Mirror Bundles, track `bundle_id` metadata, and ensure deterministic caching |
| SPRINT_123_policy_reasoning | POLICY-AIRGAP-56-002 | TODO | Policy Guild, Policy Studio Guild | src/Policy/StellaOps.Policy.Engine | Export policy sub-bundles (`stella policy bundle export`) with DSSE signatures for outbound transfer (Deps: POLICY-AIRGAP-56-001) |
| SPRINT_123_policy_reasoning | POLICY-AIRGAP-57-001 | TODO | Policy Guild, AirGap Policy Guild | src/Policy/StellaOps.Policy.Engine | Enforce sealed-mode guardrails in evaluation (no outbound fetch), surface `AIRGAP_EGRESS_BLOCKED` errors with remediation (Deps: POLICY-AIRGAP-56-002) |
| SPRINT_123_policy_reasoning | POLICY-AIRGAP-57-002 | TODO | Policy Guild, AirGap Time Guild | src/Policy/StellaOps.Policy.Engine | Annotate rule explanations with staleness information and fallback data (cached EPSS, vendor risk) (Deps: POLICY-AIRGAP-57-001) |
| SPRINT_123_policy_reasoning | POLICY-AIRGAP-58-001 | TODO | Policy Guild, Notifications Guild | src/Policy/StellaOps.Policy.Engine | Emit notifications when policy packs near staleness thresholds or missing required bundles (Deps: POLICY-AIRGAP-57-002) |
| SPRINT_123_policy_reasoning | POLICY-AOC-19-001 | TODO | Policy Guild | src/Policy/__Libraries/StellaOps.Policy | Add Roslyn/CI lint preventing ingestion projects from referencing Policy merge/severity helpers; block forbidden writes at compile time |
| SPRINT_123_policy_reasoning | POLICY-AOC-19-002 | TODO | Policy Guild, Platform Security | src/Policy/__Libraries/StellaOps.Policy | Enforce `effective_finding_*` write gate ensuring only Policy Engine identity can create/update materializations (Deps: POLICY-AOC-19-001) |
| SPRINT_123_policy_reasoning | POLICY-AOC-19-003 | TODO | Policy Guild | src/Policy/__Libraries/StellaOps.Policy | Update readers/processors to consume only `content.raw`, `identifiers`, and `linkset`. Remove dependencies on legacy normalized fields and refresh fixtures (Deps: POLICY-AOC-19-002) |
| SPRINT_123_policy_reasoning | POLICY-AOC-19-004 | TODO | Policy Guild, QA Guild | src/Policy/__Libraries/StellaOps.Policy | Add regression tests ensuring policy derived outputs remain deterministic when ingesting revised raw docs (supersedes) and when violations occur (Deps: POLICY-AOC-19-003) |
| SPRINT_123_policy_reasoning | POLICY-ATTEST-73-001 | TODO | Policy Guild, Attestor Service Guild | src/Policy/StellaOps.Policy.Engine | Introduce VerificationPolicy object: schema, persistence, versioning, and lifecycle |
| SPRINT_123_policy_reasoning | POLICY-ATTEST-73-002 | TODO | Policy Guild | src/Policy/StellaOps.Policy.Engine | Provide Policy Studio editor with validation, dry-run simulation, and version diff (Deps: POLICY-ATTEST-73-001) |
| SPRINT_123_policy_reasoning | POLICY-ATTEST-74-001 | TODO | Policy Guild, Attestor Service Guild | src/Policy/StellaOps.Policy.Engine | Integrate verification policies into attestor verification pipeline with caching and waiver support (Deps: POLICY-ATTEST-73-002) |
| SPRINT_123_policy_reasoning | POLICY-ATTEST-74-002 | TODO | Policy Guild, Console Guild | src/Policy/StellaOps.Policy.Engine | Surface policy evaluations in Console verification reports with rule explanations (Deps: POLICY-ATTEST-74-001) |
| SPRINT_123_policy_reasoning | POLICY-CONSOLE-23-001 | TODO | Policy Guild, BE-Base Platform Guild | src/Policy/StellaOps.Policy.Engine | Optimize findings/explain APIs for Console: cursor-based pagination at scale, global filter parameters (severity bands, policy version, time window), rule trace summarization, and aggregation hints for dashboard cards. Ensure deterministic ordering and expose provenance refs |
| SPRINT_124_policy_reasoning | POLICY-CONSOLE-23-002 | TODO | Policy Guild, Product Ops | src/Policy/StellaOps.Policy.Engine | Produce simulation diff metadata (before/after counts, severity deltas, rule impact summaries) and approval state endpoints consumed by Console policy workspace; expose RBAC-aware status transitions (Deps: POLICY-CONSOLE-23-001) |
| SPRINT_124_policy_reasoning | POLICY-ENGINE-20-002 | BLOCKED (2025-10-26) | Policy Guild | src/Policy/StellaOps.Policy.Engine | Build deterministic evaluator honoring lexical/priority order, first-match semantics, and safe value types (no wall-clock/network access) |
| SPRINT_124_policy_reasoning | POLICY-ENGINE-20-003 | TODO | Policy Guild, Concelier Core Guild, Excititor Core Guild | src/Policy/StellaOps.Policy.Engine | Implement selection joiners resolving SBOMadvisoryVEX tuples using linksets and PURL equivalence tables, with deterministic batching (Deps: POLICY-ENGINE-20-002) |
| SPRINT_124_policy_reasoning | POLICY-ENGINE-20-004 | TODO | Policy Guild, Platform Storage Guild | src/Policy/StellaOps.Policy.Engine | Ship materialization writer that upserts into `effective_finding_{policyId}` with append-only history, tenant scoping, and trace references (Deps: POLICY-ENGINE-20-003) |
| SPRINT_124_policy_reasoning | POLICY-ENGINE-20-005 | TODO | Policy Guild, Security Engineering | src/Policy/StellaOps.Policy.Engine | Enforce determinism guard banning wall-clock, RNG, and network usage during evaluation via static analysis + runtime sandbox (Deps: POLICY-ENGINE-20-004) |
| SPRINT_124_policy_reasoning | POLICY-ENGINE-20-006 | TODO | Policy Guild, Scheduler Worker Guild | src/Policy/StellaOps.Policy.Engine | Implement incremental orchestrator reacting to advisory/vex/SBOM change streams and scheduling partial policy re-evaluations (Deps: POLICY-ENGINE-20-005) |
| SPRINT_124_policy_reasoning | POLICY-ENGINE-20-007 | TODO | Policy Guild, Observability Guild | src/Policy/StellaOps.Policy.Engine | Emit structured traces/logs of rule hits with sampling controls, metrics (`rules_fired_total`, `vex_overrides_total`), and expose explain trace exports (Deps: POLICY-ENGINE-20-006) |
| SPRINT_124_policy_reasoning | POLICY-ENGINE-20-008 | TODO | Policy Guild, QA Guild | src/Policy/StellaOps.Policy.Engine | Add unit/property/golden/perf suites covering policy compilation, evaluation correctness, determinism, and SLA targets (Deps: POLICY-ENGINE-20-007) |
| SPRINT_124_policy_reasoning | POLICY-ENGINE-20-009 | TODO | Policy Guild, Storage Guild | src/Policy/StellaOps.Policy.Engine | Define Mongo schemas/indexes for `policies`, `policy_runs`, and `effective_finding_*`; implement migrations and tenant enforcement (Deps: POLICY-ENGINE-20-008) |
| SPRINT_124_policy_reasoning | POLICY-ENGINE-27-001 | TODO | Policy Guild | src/Policy/StellaOps.Policy.Engine | Extend compile outputs to include rule coverage metadata, symbol table, inline documentation, and rule index for editor autocomplete; persist deterministic hashes (Deps: POLICY-ENGINE-20-009) |
| SPRINT_124_policy_reasoning | POLICY-ENGINE-27-002 | TODO | Policy Guild, Observability Guild | src/Policy/StellaOps.Policy.Engine | Enhance simulate endpoints to emit rule firing counts, heatmap aggregates, sampled explain traces with deterministic ordering, and delta summaries for quick/batch sims (Deps: POLICY-ENGINE-27-001) |
| SPRINT_124_policy_reasoning | POLICY-ENGINE-29-001 | TODO | Policy Guild | src/Policy/StellaOps.Policy.Engine | Implement batch evaluation endpoint (`POST /policy/eval/batch`) returning determinations + rationale chain for sets of `(artifact,purl,version,advisory)` tuples; support pagination and cost budgets (Deps: POLICY-ENGINE-27-004) |
| SPRINT_124_policy_reasoning | POLICY-ENGINE-29-002 | TODO | Policy Guild, Findings Ledger Guild | src/Policy/StellaOps.Policy.Engine | Provide streaming simulation API comparing two policy versions, returning per-finding deltas without writes; align determinism with Vuln Explorer simulation (Deps: POLICY-ENGINE-29-001) |
| SPRINT_125_mirror | AIRGAP-TIME-57-001 | TODO | AirGap Time Guild | | MIRROR-CRT-56-001; MIRROR-CRT-57-002 |
| SPRINT_125_mirror | CLI-AIRGAP-56-001 | TODO | CLI Guild | | MIRROR-CRT-56-002; MIRROR-CRT-58-001 |
| SPRINT_125_mirror | EXPORT-OBS-51-001 / 54-001 | TODO | Exporter Guild | | MIRROR-CRT-56-001 staffing |
| SPRINT_125_mirror | MIRROR-CRT-56-001 | TODO | Mirror Creator Guild | | Staffing decision |
| SPRINT_125_mirror | MIRROR-CRT-56-002 | TODO | Mirror Creator · Security Guilds | | MIRROR-CRT-56-001; PROV-OBS-53-001 |
| SPRINT_125_mirror | MIRROR-CRT-57-001 | TODO | Mirror Creator · DevOps Guild | | MIRROR-CRT-56-001 |
| SPRINT_125_mirror | MIRROR-CRT-57-002 | TODO | Mirror Creator · AirGap Time Guild | | MIRROR-CRT-56-002; AIRGAP-TIME-57-001 |
| SPRINT_125_mirror | MIRROR-CRT-58-001 | TODO | Mirror Creator · CLI Guild | | MIRROR-CRT-56-002; CLI-AIRGAP-56-001 |
| SPRINT_125_mirror | MIRROR-CRT-58-002 | TODO | Mirror Creator · Exporter Guild | | MIRROR-CRT-56-002; EXPORT-OBS-54-001 |
| SPRINT_125_mirror | PROV-OBS-53-001 | TODO | Security Guild | | MIRROR-CRT-56-001 |
| SPRINT_125_policy_reasoning | POLICY-ENGINE-29-003 | TODO | Policy Guild, SBOM Service Guild | src/Policy/StellaOps.Policy.Engine | Surface path/scope awareness in determinations (signal optional/dev/test downgrade, runtime boost) for Vuln Explorer display (Deps: POLICY-ENGINE-29-002) |
| SPRINT_125_policy_reasoning | POLICY-ENGINE-29-004 | TODO | Policy Guild, Observability Guild | src/Policy/StellaOps.Policy.Engine | Add metrics/logs for batch evaluation (latency, queue depth) and simulation diff counts; update dashboards (Deps: POLICY-ENGINE-29-003) |
| SPRINT_125_policy_reasoning | POLICY-ENGINE-30-001 | TODO | Policy Guild, Cartographer Guild | src/Policy/StellaOps.Policy.Engine | Define overlay contract for graph nodes/edges (status, severity, rationale refs, path relevance), expose projection API for Cartographer, and document schema versioning (Deps: POLICY-ENGINE-29-004) |
| SPRINT_125_policy_reasoning | POLICY-ENGINE-30-002 | TODO | Policy Guild, Cartographer Guild | src/Policy/StellaOps.Policy.Engine | Implement simulation bridge returning on-the-fly overlays for Cartographer/Graph Explorer when invoking Policy Engine simulate; ensure no writes and deterministic outputs (Deps: POLICY-ENGINE-30-001) |
| SPRINT_125_policy_reasoning | POLICY-ENGINE-30-003 | TODO | Policy Guild, Scheduler Guild, Cartographer Guild | src/Policy/StellaOps.Policy.Engine | Emit change events (`policy.effective.updated`) with graph-friendly payloads so Cartographer overlay worker refreshes nodes/edges within 2 minutes (Deps: POLICY-ENGINE-30-002) |
| SPRINT_125_policy_reasoning | POLICY-ENGINE-30-101 | TODO | Policy Guild | src/Policy/StellaOps.Policy.Engine | Surface trust weighting configuration (issuer base weights, signature modifiers, recency decay, scope adjustments) for VEX Lens via Policy Studio + API; ensure deterministic evaluation (Deps: POLICY-ENGINE-30-003) |
| SPRINT_125_policy_reasoning | POLICY-ENGINE-31-001 | TODO | Policy Guild | src/Policy/StellaOps.Policy.Engine | Expose policy knobs for Advisory AI (trust presets, temperature, token limits, plan ranking weights, TTLs) via Policy Studio and config APIs (Deps: POLICY-ENGINE-30-101) |
| SPRINT_125_policy_reasoning | POLICY-ENGINE-31-002 | TODO | Policy Guild | src/Policy/StellaOps.Policy.Engine | Provide batch endpoint delivering policy context (thresholds, obligations) consumed by Advisory AI remediation planner (Deps: POLICY-ENGINE-31-001) |
| SPRINT_125_policy_reasoning | POLICY-ENGINE-32-101 | TODO | Policy Guild | src/Policy/StellaOps.Policy.Engine | Define orchestrator `policy_eval` job schema, idempotency keys, and enqueue hooks triggered by advisory/VEX/SBOM events (Deps: POLICY-ENGINE-31-002) |
| SPRINT_125_policy_reasoning | POLICY-ENGINE-33-101 | TODO | Policy Guild | src/Policy/StellaOps.Policy.Engine | Implement orchestrator-driven policy evaluation workers using SDK heartbeats, respecting throttles, and emitting SLO metrics (Deps: POLICY-ENGINE-32-101) |
| SPRINT_125_policy_reasoning | POLICY-ENGINE-34-101 | TODO | Policy Guild | src/Policy/StellaOps.Policy.Engine | Publish policy run ledger exports + SLO burn-rate metrics to orchestrator; ensure provenance chain links to Findings Ledger (Deps: POLICY-ENGINE-33-101) |
| SPRINT_125_policy_reasoning | POLICY-ENGINE-35-201 | TODO | Policy Guild | src/Policy/StellaOps.Policy.Engine | Expose deterministic policy snapshot API and evaluated findings stream keyed by policy version for exporter consumption (Deps: POLICY-ENGINE-34-101) |
| SPRINT_125_policy_reasoning | POLICY-ENGINE-38-201 | TODO | Policy Guild | src/Policy/StellaOps.Policy.Engine | Emit enriched policy violation events (decision rationale ids, risk bands) via orchestrator event bus for Notifications Studio (Deps: POLICY-ENGINE-35-201) |
| SPRINT_125_policy_reasoning | POLICY-ENGINE-40-001 | TODO | Policy Guild, Concelier Guild | src/Policy/StellaOps.Policy.Engine | Update severity/status evaluation pipelines to consume multiple source severities per linkset, supporting selection strategies (max, preferred source, policy-defined) (Deps: POLICY-ENGINE-38-201) |
| SPRINT_125_policy_reasoning | POLICY-ENGINE-40-002 | TODO | Policy Guild, Excititor Guild | src/Policy/StellaOps.Policy.Engine | Accept VEX linkset conflicts and provide rationale references in effective findings; ensure explain traces cite observation IDs (Deps: POLICY-ENGINE-40-001) |
| SPRINT_126_policy_reasoning | POLICY-ENGINE-40-003 | TODO | Policy Guild, Web Scanner Guild | src/Policy/StellaOps.Policy.Engine | Provide API/SDK utilities for consumers (Web Scanner, Graph Explorer) to request policy decisions with source evidence summaries (top severity sources, conflict counts) (Deps: POLICY-ENGINE-40-002) |
| SPRINT_126_policy_reasoning | POLICY-ENGINE-50-001 | TODO | Policy Guild, Platform Security | src/Policy/StellaOps.Policy.Engine | Implement SPL compiler: validate YAML, canonicalize, produce signed bundle, store artifact in object storage, write `policy_revisions` with AOC metadata (Deps: POLICY-ENGINE-40-003) |
| SPRINT_126_policy_reasoning | POLICY-ENGINE-50-002 | TODO | Policy Guild, Runtime Guild | src/Policy/StellaOps.Policy.Engine | Build runtime evaluator executing compiled plans over advisory/vex linksets + SBOM asset metadata with deterministic caching (Redis) and fallback path (Deps: POLICY-ENGINE-50-001) |
| SPRINT_126_policy_reasoning | POLICY-ENGINE-50-003 | TODO | Policy Guild, Observability Guild | src/Policy/StellaOps.Policy.Engine | Implement evaluation/compilation metrics, tracing, and structured logs (`policy_eval_seconds`, `policy_compiles_total`, explanation sampling) (Deps: POLICY-ENGINE-50-002) |
| SPRINT_126_policy_reasoning | POLICY-ENGINE-50-004 | TODO | Policy Guild, Platform Events Guild | src/Policy/StellaOps.Policy.Engine | Build event pipeline: subscribe to linkset/SBOM updates, schedule re-eval jobs, emit `policy.effective.updated` events with diff metadata (Deps: POLICY-ENGINE-50-003) |
| SPRINT_126_policy_reasoning | POLICY-ENGINE-50-005 | TODO | Policy Guild, Storage Guild | src/Policy/StellaOps.Policy.Engine | Design and implement `policy_packs`, `policy_revisions`, `policy_runs`, `policy_artifacts` collections with indexes, TTL, and tenant scoping (Deps: POLICY-ENGINE-50-004) |
| SPRINT_126_policy_reasoning | POLICY-ENGINE-50-006 | TODO | Policy Guild, QA Guild | src/Policy/StellaOps.Policy.Engine | Implement explainer persistence + retrieval APIs linking decisions to explanation tree and AOC chain (Deps: POLICY-ENGINE-50-005) |
| SPRINT_126_policy_reasoning | POLICY-ENGINE-50-007 | TODO | Policy Guild, Scheduler Worker Guild | src/Policy/StellaOps.Policy.Engine | Provide evaluation worker host/DI wiring and job orchestration hooks for batch re-evaluations after policy activation (Deps: POLICY-ENGINE-50-006) |
| SPRINT_126_policy_reasoning | POLICY-ENGINE-60-001 | TODO | Policy Guild, SBOM Service Guild | src/Policy/StellaOps.Policy.Engine | Maintain Redis effective decision maps per asset/snapshot for Graph overlays; implement versioning and eviction strategy (Deps: POLICY-ENGINE-50-007) |
| SPRINT_126_policy_reasoning | POLICY-ENGINE-60-002 | TODO | Policy Guild, BE-Base Platform Guild | src/Policy/StellaOps.Policy.Engine | Expose simulation bridge for Graph What-if APIs, supporting hypothetical SBOM diffs and draft policies without persisting results (Deps: POLICY-ENGINE-60-001) |
| SPRINT_126_policy_reasoning | POLICY-ENGINE-70-002 | TODO | Policy Guild, Storage Guild | src/Policy/StellaOps.Policy.Engine | Design and create Mongo collections (`exceptions`, `exception_reviews`, `exception_bindings`) with indexes and migrations; expose repository APIs (Deps: POLICY-ENGINE-60-002) |
| SPRINT_126_policy_reasoning | POLICY-ENGINE-70-003 | TODO | Policy Guild, Runtime Guild | src/Policy/StellaOps.Policy.Engine | Build Redis exception decision cache (`exceptions_effective_map`) with warm/invalidation logic reacting to `exception.*` events (Deps: POLICY-ENGINE-70-002) |
| SPRINT_126_policy_reasoning | POLICY-ENGINE-70-004 | TODO | Policy Guild, Observability Guild | src/Policy/StellaOps.Policy.Engine | Extend metrics/tracing/logging for exception application (latency, counts, expiring events) and include AOC references in logs (Deps: POLICY-ENGINE-70-003) |
| SPRINT_126_policy_reasoning | POLICY-ENGINE-70-005 | TODO | Policy Guild, Scheduler Worker Guild | src/Policy/StellaOps.Policy.Engine | Provide APIs/workers hook for exception activation/expiry (auto start/end) and event emission (`exception.activated/expired`) (Deps: POLICY-ENGINE-70-004) |
| SPRINT_126_policy_reasoning | POLICY-ENGINE-80-001 | TODO | Policy Guild, Signals Guild | src/Policy/StellaOps.Policy.Engine | Integrate reachability/exploitability inputs into evaluation pipeline (state/score/confidence) with caching and explain support (Deps: POLICY-ENGINE-70-005) |
| SPRINT_126_policy_reasoning | POLICY-RISK-90-001 | TODO | Policy Guild, Scanner Guild | src/Policy/StellaOps.Policy.Engine | Ingest entropy penalty inputs from Scanner (`entropy.report.json`, `layer_summary.json`), extend trust algebra with configurable weights/caps, and expose explanations/metrics for opaque ratio penalties (`docs/modules/scanner/entropy.md`). |
| SPRINT_127_policy_reasoning | POLICY-ENGINE-80-002 | TODO | Policy Guild, Storage Guild | src/Policy/StellaOps.Policy.Engine | Create joining layer to read `reachability_facts` efficiently (indexes, projections) and populate Redis overlay caches (Deps: POLICY-ENGINE-80-001) |
| SPRINT_127_policy_reasoning | POLICY-ENGINE-80-003 | TODO | Policy Guild, Policy Editor Guild | src/Policy/StellaOps.Policy.Engine | Extend SPL predicates/actions to reference reachability state/score/confidence; update compiler validation (Deps: POLICY-ENGINE-80-002) |
| SPRINT_127_policy_reasoning | POLICY-ENGINE-80-004 | TODO | Policy Guild, Observability Guild | src/Policy/StellaOps.Policy.Engine | Emit metrics (`policy_reachability_applied_total`, `policy_reachability_cache_hit_ratio`) and traces for signals usage (Deps: POLICY-ENGINE-80-003) |
| SPRINT_127_policy_reasoning | POLICY-OBS-50-001 | TODO | Policy Guild, Observability Guild | src/Policy/StellaOps.Policy.Engine | Integrate telemetry core into policy API + worker hosts, ensuring spans/logs cover compile/evaluate flows with `tenant_id`, `policy_version`, `decision_effect`, and trace IDs |
| SPRINT_127_policy_reasoning | POLICY-OBS-51-001 | TODO | Policy Guild, DevOps Guild | src/Policy/StellaOps.Policy.Engine | Emit golden-signal metrics (compile latency, evaluate latency, rule hits, override counts) and define SLOs (evaluation P95 <2s). Publish Grafana dashboards + burn-rate alert rules (Deps: POLICY-OBS-50-001) |
| SPRINT_127_policy_reasoning | POLICY-OBS-52-001 | TODO | Policy Guild | src/Policy/StellaOps.Policy.Engine | Emit timeline events `policy.evaluate.started`, `policy.evaluate.completed`, `policy.decision.recorded` with trace IDs, input digests, and rule summary. Provide contract tests and retry semantics (Deps: POLICY-OBS-51-001) |
| SPRINT_127_policy_reasoning | POLICY-OBS-53-001 | TODO | Policy Guild, Evidence Locker Guild | src/Policy/StellaOps.Policy.Engine | Produce evaluation evidence bundles (inputs slice, rule trace, engine version, config snapshot) through evidence locker integration; ensure redaction + deterministic manifests (Deps: POLICY-OBS-52-001) |
| SPRINT_127_policy_reasoning | POLICY-OBS-54-001 | TODO | Policy Guild, Provenance Guild | src/Policy/StellaOps.Policy.Engine | Generate DSSE attestations for evaluation outputs, expose `/evaluations/{id}/attestation`, and link attestation IDs in timeline + console. Provide verification harness (Deps: POLICY-OBS-53-001) |
| SPRINT_127_policy_reasoning | POLICY-OBS-55-001 | TODO | Policy Guild, DevOps Guild | src/Policy/StellaOps.Policy.Engine | Implement incident mode sampling overrides (full rule trace capture, extended retention) with auto-activation on SLO breach and manual override API. Emit activation events to timeline + notifier (Deps: POLICY-OBS-54-001) |
| SPRINT_127_policy_reasoning | POLICY-RISK-66-001 | TODO | Risk Profile Schema Guild | src/Policy/StellaOps.Policy.RiskProfile | Develop initial JSON Schema for RiskProfile (signals, transforms, weights, severity, overrides) with validator stubs |
| SPRINT_127_policy_reasoning | POLICY-RISK-66-002 | TODO | Risk Profile Schema Guild | src/Policy/StellaOps.Policy.RiskProfile | Implement inheritance/merge logic with conflict detection and deterministic content hashing (Deps: POLICY-RISK-66-001) |
| SPRINT_127_policy_reasoning | POLICY-RISK-66-003 | TODO | Policy Guild, Risk Profile Schema Guild | src/Policy/StellaOps.Policy.Engine | Integrate RiskProfile schema into Policy Engine configuration, ensuring validation and default profile deployment (Deps: POLICY-RISK-66-002) |
| SPRINT_127_policy_reasoning | POLICY-RISK-66-004 | TODO | Policy Guild, Risk Profile Schema Guild | src/Policy/__Libraries/StellaOps.Policy | Extend Policy libraries to load/save RiskProfile documents, compute content hashes, and surface validation diagnostics (Deps: POLICY-RISK-66-003) |
| SPRINT_127_policy_reasoning | POLICY-RISK-67-001 | TODO | Policy Guild, Risk Engine Guild | src/Policy/StellaOps.Policy.Engine | Trigger scoring jobs on new/updated findings via Policy Engine orchestration hooks (Deps: POLICY-RISK-66-004) |
| SPRINT_127_policy_reasoning | POLICY-RISK-67-001 | TODO | Risk Profile Schema Guild, Policy Engine Guild | src/Policy/StellaOps.Policy.RiskProfile | Integrate profile storage and versioning into Policy Store with lifecycle states (draft/publish/deprecate) (Deps: POLICY-RISK-67-001) |
| SPRINT_128_policy_reasoning | POLICY-RISK-67-002 | TODO | Policy Guild | src/Policy/StellaOps.Policy.Engine | Implement profile lifecycle APIs (`/risk/profiles` create/publish/deprecate) and scope attachment logic (Deps: POLICY-RISK-67-001) |
| SPRINT_128_policy_reasoning | POLICY-RISK-67-002 | TODO | Risk Profile Schema Guild | src/Policy/StellaOps.Policy.RiskProfile | Publish `.well-known/risk-profile-schema` endpoint and CLI validation tooling (Deps: POLICY-RISK-67-002) |
| SPRINT_128_policy_reasoning | POLICY-RISK-67-003 | TODO | Policy Guild, Risk Engine Guild | src/Policy/__Libraries/StellaOps.Policy | Provide policy-layer APIs to trigger risk simulations and return distributions/contribution breakdowns (Deps: POLICY-RISK-67-002) |
| SPRINT_128_policy_reasoning | POLICY-RISK-68-001 | TODO | Policy Guild, Policy Studio Guild | src/Policy/StellaOps.Policy.Engine | Provide simulation API bridging Policy Studio with risk engine; returns distributions and top movers (Deps: POLICY-RISK-67-003) |
| SPRINT_128_policy_reasoning | POLICY-RISK-68-001 | TODO | Risk Profile Schema Guild, Authority Guild | src/Policy/StellaOps.Policy.RiskProfile | Implement scope selectors, precedence rules, and Authority attachment APIs (Deps: POLICY-RISK-68-001) |
| SPRINT_128_policy_reasoning | POLICY-RISK-68-002 | TODO | Risk Profile Schema Guild | src/Policy/StellaOps.Policy.RiskProfile | Add override/adjustment support with audit metadata and validation for conflicting rules (Deps: POLICY-RISK-68-001) |
| SPRINT_128_policy_reasoning | POLICY-RISK-68-002 | TODO | Policy Guild, Export Guild | src/Policy/__Libraries/StellaOps.Policy | Enable exporting/importing RiskProfiles with signatures via policy tooling (CLI + API) (Deps: POLICY-RISK-68-002) |
| SPRINT_128_policy_reasoning | POLICY-RISK-69-001 | TODO | Policy Guild, Notifications Guild | src/Policy/StellaOps.Policy.Engine | Emit events/notifications on profile publish, deprecate, and severity threshold changes (Deps: POLICY-RISK-68-002) |
| SPRINT_128_policy_reasoning | POLICY-RISK-70-001 | TODO | Policy Guild, Export Guild | src/Policy/StellaOps.Policy.Engine | Support exporting/importing profiles with signatures for air-gapped bundles (Deps: POLICY-RISK-69-001) |
| SPRINT_128_policy_reasoning | POLICY-SPL-23-001 | TODO | Policy Guild, Language Infrastructure Guild | src/Policy/__Libraries/StellaOps.Policy | Define SPL v1 YAML + JSON Schema, including advisory rules, VEX precedence, severity mapping, exceptions, and layering metadata. Publish schema resources and validation fixtures |
| SPRINT_128_policy_reasoning | POLICY-SPL-23-002 | TODO | Policy Guild | src/Policy/__Libraries/StellaOps.Policy | Implement canonicalizer that normalizes policy packs (ordering, defaults), computes content hash, and prepares bundle metadata for AOC/signing (Deps: POLICY-SPL-23-001) |
| SPRINT_128_policy_reasoning | POLICY-SPL-23-003 | TODO | Policy Guild | src/Policy/__Libraries/StellaOps.Policy | Build policy layering/override engine (global/org/project/env/exception) with field-level precedence matrices; add unit/property tests (Deps: POLICY-SPL-23-002) |
| SPRINT_128_policy_reasoning | POLICY-SPL-23-004 | TODO | Policy Guild, Audit Guild | src/Policy/__Libraries/StellaOps.Policy | Design explanation tree model (rule hits, inputs, decisions) and persistence structures reused by runtime, UI, and CLI (Deps: POLICY-SPL-23-003) |
| SPRINT_128_policy_reasoning | POLICY-SPL-23-005 | TODO | Policy Guild, DevEx Guild | src/Policy/__Libraries/StellaOps.Policy | Create migration tool to snapshot existing behavior into baseline SPL packs (`org.core.baseline`), including policy docs and sample bundles (Deps: POLICY-SPL-23-004) |
| SPRINT_128_policy_reasoning | POLICY-SPL-24-001 | TODO | Policy Guild, Signals Guild | src/Policy/__Libraries/StellaOps.Policy | Extend SPL schema to expose reachability/exploitability predicates and weighting functions; update documentation and fixtures (Deps: POLICY-SPL-23-005) |
| SPRINT_129_policy_reasoning | POLICY-TEN-48-001 | TODO | Policy Guild | src/Policy/StellaOps.Policy.Engine | Add `tenant_id`/`project_id` columns, enable RLS, update evaluators to require tenant context, and emit rationale IDs including tenant metadata |
| SPRINT_129_policy_reasoning | REGISTRY-API-27-001 | TODO | Policy Registry Guild | src/Policy/StellaOps.Policy.Registry | Define OpenAPI specification covering workspaces, versions, reviews, simulations, promotions, and attestations; publish typed clients for Console/CLI |
| SPRINT_129_policy_reasoning | REGISTRY-API-27-002 | TODO | Policy Registry Guild | src/Policy/StellaOps.Policy.Registry | Implement workspace storage (Mongo collections, object storage buckets) with CRUD endpoints, diff history, and retention policies (Deps: REGISTRY-API-27-001) |
| SPRINT_129_policy_reasoning | REGISTRY-API-27-003 | TODO | Policy Registry Guild | src/Policy/StellaOps.Policy.Registry | Integrate compile endpoint: forward source bundle to Policy Engine, persist diagnostics, symbol table, rule index, and complexity metrics (Deps: REGISTRY-API-27-002) |
| SPRINT_129_policy_reasoning | REGISTRY-API-27-004 | TODO | Policy Registry Guild | src/Policy/StellaOps.Policy.Registry | Implement quick simulation API with request limits (sample size, timeouts), returning counts, heatmap, sampled explains (Deps: REGISTRY-API-27-003) |
| SPRINT_129_policy_reasoning | REGISTRY-API-27-005 | TODO | Policy Registry Guild, Scheduler Guild | src/Policy/StellaOps.Policy.Registry | Build batch simulation orchestration: enqueue shards, collect partials, reduce deltas, produce evidence bundles + signed manifest (Deps: REGISTRY-API-27-004) |
| SPRINT_129_policy_reasoning | REGISTRY-API-27-006 | TODO | Policy Registry Guild | src/Policy/StellaOps.Policy.Registry | Implement review workflow (comments, votes, required approvers, status transitions) with audit trails and webhooks (Deps: REGISTRY-API-27-005) |
| SPRINT_129_policy_reasoning | REGISTRY-API-27-007 | TODO | Policy Registry Guild, Security Guild | src/Policy/StellaOps.Policy.Registry | Implement publish pipeline: sign source/compiled digests, create attestations, mark version immutable, emit events (Deps: REGISTRY-API-27-006) |
| SPRINT_129_policy_reasoning | REGISTRY-API-27-008 | TODO | Policy Registry Guild | src/Policy/StellaOps.Policy.Registry | Implement promotion bindings per tenant/environment with canary subsets, rollback path, and environment history (Deps: REGISTRY-API-27-007) |
| SPRINT_129_policy_reasoning | REGISTRY-API-27-009 | TODO | Policy Registry Guild, Observability Guild | src/Policy/StellaOps.Policy.Registry | Instrument metrics/logs/traces (compile time, diagnostics rate, sim queue depth, approval latency) and expose dashboards (Deps: REGISTRY-API-27-008) |
| SPRINT_129_policy_reasoning | REGISTRY-API-27-010 | TODO | Policy Registry Guild, QA Guild | src/Policy/StellaOps.Policy.Registry | Build unit/integration/load test suites for compile/sim/review/publish/promote flows; provide seeded fixtures for CI (Deps: REGISTRY-API-27-009) |
| SPRINT_129_policy_reasoning | RISK-ENGINE-66-001 | TODO | Risk Engine Guild | src/RiskEngine/StellaOps.RiskEngine | Scaffold scoring service (job queue, worker loop, provider registry) with deterministic execution harness |
| SPRINT_129_policy_reasoning | RISK-ENGINE-66-002 | TODO | Risk Engine Guild | src/RiskEngine/StellaOps.RiskEngine | Implement default transforms (linear, minmax, logistic, piecewise), clamping, gating, and contribution calculator (Deps: RISK-ENGINE-66-001) |
| SPRINT_129_policy_reasoning | RISK-ENGINE-67-001 | TODO | Risk Engine Guild, Concelier Guild | src/RiskEngine/StellaOps.RiskEngine | Integrate CVSS and KEV providers pulling data from Conseiller; implement reducers (`max`, `any`, `consensus`) (Deps: RISK-ENGINE-66-002) |
| SPRINT_129_policy_reasoning | RISK-ENGINE-67-002 | TODO | Risk Engine Guild, Excitor Guild | src/RiskEngine/StellaOps.RiskEngine | Integrate VEX gate provider and ensure gating short-circuits scoring as configured (Deps: RISK-ENGINE-67-001) |
| SPRINT_129_policy_reasoning | RISK-ENGINE-67-003 | TODO | Risk Engine Guild, Policy Engine Guild | src/RiskEngine/StellaOps.RiskEngine | Add fix availability, asset criticality, and internet exposure providers with caching + TTL enforcement (Deps: RISK-ENGINE-67-002) |
| SPRINT_129_policy_reasoning | RISK-ENGINE-68-001 | TODO | Risk Engine Guild, Findings Ledger Guild | src/RiskEngine/StellaOps.RiskEngine | Persist scoring results + explanation pointers to Findings Ledger; handle incremental updates via input hash (Deps: RISK-ENGINE-67-003) |
| SPRINT_129_policy_reasoning | RISK-ENGINE-68-002 | TODO | Risk Engine Guild, API Guild | src/RiskEngine/StellaOps.RiskEngine | Expose APIs (`/risk/jobs`, `/risk/results`, `/risk/results/{id}/explanation`); include pagination, filtering, error codes (Deps: RISK-ENGINE-68-001) |
| SPRINT_129_policy_reasoning | RISK-ENGINE-69-001 | TODO | Risk Engine Guild, Policy Studio Guild | src/RiskEngine/StellaOps.RiskEngine | Implement simulation mode producing distributions and top movers without mutating ledger (Deps: RISK-ENGINE-68-002) |
| SPRINT_129_policy_reasoning | RISK-ENGINE-69-002 | TODO | Risk Engine Guild, Observability Guild | src/RiskEngine/StellaOps.RiskEngine | Add telemetry (spans, metrics, logs) for provider latency, job throughput, cache hits; define SLO dashboards (Deps: RISK-ENGINE-69-001) |
| SPRINT_129_policy_reasoning | RISK-ENGINE-70-001 | TODO | Risk Engine Guild, Export Guild | src/RiskEngine/StellaOps.RiskEngine | Support offline provider bundles with manifest verification and missing-data reporting (Deps: RISK-ENGINE-69-002) |
| SPRINT_129_policy_reasoning | RISK-ENGINE-70-002 | TODO | Risk Engine Guild, Observability Guild | src/RiskEngine/StellaOps.RiskEngine | Integrate runtime evidence provider and reachability provider outputs with caching + TTL (Deps: RISK-ENGINE-70-001) |
| SPRINT_129_policy_reasoning | VEXLENS-30-001 | TODO | VEX Lens Guild | src/VexLens/StellaOps.VexLens | Implement normalization pipeline for CSAF VEX, OpenVEX, CycloneDX VEX (status mapping, justification mapping, product tree parsing) |
| SPRINT_129_policy_reasoning | VEXLENS-30-002 | TODO | VEX Lens Guild | src/VexLens/StellaOps.VexLens | Build product mapping library (CPE/CPE2.3/vendor tokens purl/version) with scope quality scoring and path metadata (Deps: VEXLENS-30-001) |
| SPRINT_129_policy_reasoning | VEXLENS-30-003 | TODO | VEX Lens Guild, Issuer Directory Guild | src/VexLens/StellaOps.VexLens | Integrate signature verification (Ed25519, DSSE, PKIX) using issuer keys, annotate evidence with verification state and failure reasons (Deps: VEXLENS-30-002) |
| SPRINT_129_policy_reasoning | VEXLENS-30-004 | TODO | VEX Lens Guild, Policy Guild | src/VexLens/StellaOps.VexLens | Implement trust weighting engine (issuer base weights, signature modifiers, recency decay, justification modifiers, scope score adjustments) controlled by policy config (Deps: VEXLENS-30-003) |
| SPRINT_129_policy_reasoning | VEXLENS-30-005 | TODO | VEX Lens Guild | src/VexLens/StellaOps.VexLens | Implement consensus algorithm producing `consensus_state`, `confidence`, `weights`, `quorum`, `rationale`; support states: NOT_AFFECTED, AFFECTED, FIXED, UNDER_INVESTIGATION, DISPUTED, INCONCLUSIVE (Deps: VEXLENS-30-004) |
| SPRINT_129_policy_reasoning | VEXLENS-30-006 | TODO | VEX Lens Guild, Findings Ledger Guild | src/VexLens/StellaOps.VexLens | Materialize consensus projection storage with idempotent workers triggered by VEX/Policy changes; expose change events for downstream consumers (Deps: VEXLENS-30-005) |
| SPRINT_129_policy_reasoning | VEXLENS-30-007 | TODO | VEX Lens Guild | src/VexLens/StellaOps.VexLens | Expose APIs (`/vex/consensus`, `/vex/consensus/query`, `/vex/consensus/{id}`, `/vex/consensus/simulate`, `/vex/consensus/export`) with pagination, cost budgets, and OpenAPI docs (Deps: VEXLENS-30-006) |
| SPRINT_129_policy_reasoning | VEXLENS-30-008 | TODO | VEX Lens Guild, Policy Guild | src/VexLens/StellaOps.VexLens | Integrate consensus signals with Policy Engine (thresholds, suppression, simulation inputs) and Vuln Explorer detail view (Deps: VEXLENS-30-007) |
| SPRINT_129_policy_reasoning | VEXLENS-30-009 | TODO | VEX Lens Guild, Observability Guild | src/VexLens/StellaOps.VexLens | Instrument metrics (`vex_consensus_compute_latency`, `vex_consensus_disputed_total`, `vex_signature_verification_rate`), structured logs, and traces; publish dashboards/alerts (Deps: VEXLENS-30-008) |
| SPRINT_129_policy_reasoning | VEXLENS-30-010 | TODO | VEX Lens Guild, QA Guild | src/VexLens/StellaOps.VexLens | Develop unit/property/integration/load tests (10M records), determinism harness, fuzz testing for malformed product trees (Deps: VEXLENS-30-009) |
| SPRINT_129_policy_reasoning | VEXLENS-30-011 | TODO | VEX Lens Guild, DevOps Guild | src/VexLens/StellaOps.VexLens | Provide deployment manifests, caching configuration, scaling guides, offline kit seeds, and runbooks (Deps: VEXLENS-30-010) |
| SPRINT_129_policy_reasoning | VEXLENS-AIAI-31-001 | TODO | VEX Lens Guild | src/VexLens/StellaOps.VexLens | Expose consensus rationale API enhancements (policy factors, issuer details, mapping issues) for Advisory AI conflict explanations |
| SPRINT_129_policy_reasoning | VEXLENS-AIAI-31-002 | TODO | VEX Lens Guild | src/VexLens/StellaOps.VexLens | Provide caching hooks for consensus lookups used by Advisory AI (batch endpoints, TTL hints) (Deps: VEXLENS-AIAI-31-001) |
| SPRINT_129_policy_reasoning | VEXLENS-EXPORT-35-001 | TODO | VEX Lens Guild | src/VexLens/StellaOps.VexLens | Provide consensus snapshot API delivering deterministic JSONL (state, confidence, provenance) for exporter mirror bundles |
| SPRINT_129_policy_reasoning | VEXLENS-ORCH-33-001 | TODO | VEX Lens Guild | src/VexLens/StellaOps.VexLens | Register `consensus_compute` job type with orchestrator, integrate worker SDK, and expose job planning hooks for consensus batches |
| SPRINT_129_policy_reasoning | VEXLENS-ORCH-34-001 | TODO | VEX Lens Guild | src/VexLens/StellaOps.VexLens | Emit consensus completion events into orchestrator run ledger and provenance chain, including confidence metadata (Deps: VEXLENS-ORCH-33-001) |
| SPRINT_129_policy_reasoning | VULN-API-29-001 | TODO | Vuln Explorer API Guild | src/VulnExplorer/StellaOps.VulnExplorer.Api | Define OpenAPI spec (list/detail/query/simulation/workflow/export), query JSON schema, pagination/grouping contracts, and error codes |
| SPRINT_129_policy_reasoning | VULN-API-29-002 | TODO | Vuln Explorer API Guild | src/VulnExplorer/StellaOps.VulnExplorer.Api | Implement list/query endpoints with policy parameter, grouping, server paging, caching, and cost budgets (Deps: VULN-API-29-001) |
| SPRINT_129_policy_reasoning | VULN-API-29-003 | TODO | Vuln Explorer API Guild | src/VulnExplorer/StellaOps.VulnExplorer.Api | Implement detail endpoint aggregating evidence, policy rationale, paths (Graph Explorer deep link), and workflow summary (Deps: VULN-API-29-002) |
| SPRINT_129_policy_reasoning | VULN-API-29-004 | TODO | Vuln Explorer API Guild, Findings Ledger Guild | src/VulnExplorer/StellaOps.VulnExplorer.Api | Expose workflow endpoints (assign, comment, accept-risk, verify-fix, target-fix, reopen) that write ledger events with idempotency + validation (Deps: VULN-API-29-003) |
| SPRINT_129_policy_reasoning | VULN-API-29-005 | TODO | Vuln Explorer API Guild, Policy Guild | src/VulnExplorer/StellaOps.VulnExplorer.Api | Implement simulation endpoint comparing `policy_from` vs `policy_to`, returning diffs without side effects; hook into Policy Engine batch eval (Deps: VULN-API-29-004) |
| SPRINT_129_policy_reasoning | VULN-API-29-006 | TODO | Vuln Explorer API Guild | src/VulnExplorer/StellaOps.VulnExplorer.Api | Integrate resolver results with Graph Explorer: include shortest path metadata, line up deep-link parameters, expose `paths` array in details (Deps: VULN-API-29-005) |
| SPRINT_129_policy_reasoning | VULN-API-29-007 | TODO | Vuln Explorer API Guild, Security Guild | src/VulnExplorer/StellaOps.VulnExplorer.Api | Enforce RBAC/ABAC scopes; implement CSRF/anti-forgery checks for Console; secure attachment URLs; audit logging (Deps: VULN-API-29-006) |
| SPRINT_129_policy_reasoning | VULN-API-29-008 | TODO | Vuln Explorer API Guild | src/VulnExplorer/StellaOps.VulnExplorer.Api | Build export orchestrator producing signed bundles (manifest, NDJSON, checksums, signature). Integrate with Findings Ledger for evidence and Policy Engine metadata (Deps: VULN-API-29-007) |
| SPRINT_129_policy_reasoning | VULN-API-29-009 | TODO | Vuln Explorer API Guild, Observability Guild | src/VulnExplorer/StellaOps.VulnExplorer.Api | Instrument metrics (`vuln_list_latency`, `vuln_simulation_latency`, `vuln_export_duration`, `vuln_workflow_events_total`), structured logs, and traces; publish dashboards/alerts (Deps: VULN-API-29-008) |
| SPRINT_129_policy_reasoning | VULN-API-29-010 | TODO | Vuln Explorer API Guild, QA Guild | src/VulnExplorer/StellaOps.VulnExplorer.Api | Provide unit/integration/perf tests (5M findings), fuzz query validation, determinism harness comparing repeated queries (Deps: VULN-API-29-009) |
| SPRINT_129_policy_reasoning | VULN-API-29-011 | TODO | Vuln Explorer API Guild, DevOps Guild | src/VulnExplorer/StellaOps.VulnExplorer.Api | Package deployment (Helm/Compose), health checks, CI smoke, offline kit steps, and scaling guidance (Deps: VULN-API-29-010) |
| SPRINT_131_scanner_surface | `SCANNER-ANALYZERS-DENO-26-009` | TODO | Deno Analyzer Guild, Signals Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Deno) | | SCANNER-ANALYZERS-DENO-26-008 |
| SPRINT_131_scanner_surface | `SCANNER-ANALYZERS-DENO-26-010` | TODO | Deno Analyzer Guild, DevOps Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Deno) | | SCANNER-ANALYZERS-DENO-26-009 |
| SPRINT_131_scanner_surface | `SCANNER-ANALYZERS-DENO-26-011` | TODO | Deno Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Deno) | | SCANNER-ANALYZERS-DENO-26-010 |
| SPRINT_131_scanner_surface | `SCANNER-ANALYZERS-JAVA-21-005` | TODO | Java Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Java) | | |
| SPRINT_131_scanner_surface | `SCANNER-ANALYZERS-JAVA-21-006` | TODO | Java Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Java) | | SCANNER-ANALYZERS-JAVA-21-005 |
| SPRINT_131_scanner_surface | `SCANNER-ANALYZERS-JAVA-21-007` | TODO | Java Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Java) | | SCANNER-ANALYZERS-JAVA-21-006 |
| SPRINT_131_scanner_surface | `SCANNER-ANALYZERS-JAVA-21-008` | BLOCKED (2025-10-27) | Java Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Java) | | SCANNER-ANALYZERS-JAVA-21-007 |
| SPRINT_131_scanner_surface | `SCANNER-ANALYZERS-JAVA-21-009` | TODO | Java Analyzer Guild, QA Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Java) | | SCANNER-ANALYZERS-JAVA-21-008 |
| SPRINT_131_scanner_surface | `SCANNER-ANALYZERS-JAVA-21-010` | TODO | Java Analyzer Guild, Signals Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Java) | | SCANNER-ANALYZERS-JAVA-21-009 |
| SPRINT_131_scanner_surface | `SCANNER-ANALYZERS-JAVA-21-011` | TODO | Java Analyzer Guild, DevOps Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Java) | | SCANNER-ANALYZERS-JAVA-21-010 |
| SPRINT_131_scanner_surface | `SCANNER-ANALYZERS-LANG-11-001` | TODO | StellaOps.Scanner EPDR Guild, Language Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.DotNet) | | SCANNER-ANALYZERS-LANG-10-309R |
| SPRINT_132_scanner_surface | `SCANNER-ANALYZERS-LANG-11-002` | TODO | StellaOps.Scanner EPDR Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.DotNet) | | SCANNER-ANALYZERS-LANG-11-001 |
| SPRINT_132_scanner_surface | `SCANNER-ANALYZERS-LANG-11-003` | TODO | StellaOps.Scanner EPDR Guild, Signals Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.DotNet) | | SCANNER-ANALYZERS-LANG-11-002 |
| SPRINT_132_scanner_surface | `SCANNER-ANALYZERS-LANG-11-004` | TODO | StellaOps.Scanner EPDR Guild, SBOM Service Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.DotNet) | | SCANNER-ANALYZERS-LANG-11-003 |
| SPRINT_132_scanner_surface | `SCANNER-ANALYZERS-LANG-11-005` | TODO | StellaOps.Scanner EPDR Guild, QA Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.DotNet) | | SCANNER-ANALYZERS-LANG-11-004 |
| SPRINT_132_scanner_surface | `SCANNER-ANALYZERS-NATIVE-20-001` | TODO | Native Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Native) | | |
| SPRINT_132_scanner_surface | `SCANNER-ANALYZERS-NATIVE-20-002` | TODO | Native Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Native) | | SCANNER-ANALYZERS-NATIVE-20-001 |
| SPRINT_132_scanner_surface | `SCANNER-ANALYZERS-NATIVE-20-003` | TODO | Native Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Native) | | SCANNER-ANALYZERS-NATIVE-20-002 |
| SPRINT_132_scanner_surface | `SCANNER-ANALYZERS-NATIVE-20-004` | TODO | Native Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Native) | | SCANNER-ANALYZERS-NATIVE-20-003 |
| SPRINT_132_scanner_surface | `SCANNER-ANALYZERS-NATIVE-20-005` | TODO | Native Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Native) | | SCANNER-ANALYZERS-NATIVE-20-004 |
| SPRINT_132_scanner_surface | `SCANNER-ANALYZERS-NATIVE-20-006` | TODO | Native Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Native) | | SCANNER-ANALYZERS-NATIVE-20-005 |
| SPRINT_132_scanner_surface | `SCANNER-ANALYZERS-NATIVE-20-007` | TODO | Native Analyzer Guild, SBOM Service Guild (src/Scanner/StellaOps.Scanner.Analyzers.Native) | | SCANNER-ANALYZERS-NATIVE-20-006 |
| SPRINT_132_scanner_surface | `SCANNER-ANALYZERS-NATIVE-20-008` | TODO | Native Analyzer Guild, QA Guild (src/Scanner/StellaOps.Scanner.Analyzers.Native) | | SCANNER-ANALYZERS-NATIVE-20-007 |
| SPRINT_132_scanner_surface | `SCANNER-ANALYZERS-NATIVE-20-009` | TODO | Native Analyzer Guild, Signals Guild (src/Scanner/StellaOps.Scanner.Analyzers.Native) | | SCANNER-ANALYZERS-NATIVE-20-008 |
| SPRINT_132_scanner_surface | `SCANNER-ANALYZERS-NATIVE-20-010` | TODO | Native Analyzer Guild, DevOps Guild (src/Scanner/StellaOps.Scanner.Analyzers.Native) | | SCANNER-ANALYZERS-NATIVE-20-009 |
| SPRINT_132_scanner_surface | `SCANNER-ANALYZERS-NODE-22-001` | TODO | Node Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Node) | | |
| SPRINT_132_scanner_surface | `SCANNER-ANALYZERS-NODE-22-002` | TODO | Node Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Node) | | SCANNER-ANALYZERS-NODE-22-001 |
| SPRINT_132_scanner_surface | `SCANNER-ANALYZERS-NODE-22-003` | TODO | Node Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Node) | | SCANNER-ANALYZERS-NODE-22-002 |
| SPRINT_132_scanner_surface | `SCANNER-ANALYZERS-NODE-22-004` | TODO | Node Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Node) | | SCANNER-ANALYZERS-NODE-22-003 |
| SPRINT_132_scanner_surface | `SCANNER-ANALYZERS-NODE-22-005` | TODO | Node Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Node) | | SCANNER-ANALYZERS-NODE-22-004 |
| SPRINT_133_scanner_surface | `SCANNER-ANALYZERS-NODE-22-006` | TODO | Node Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Node) | | SCANNER-ANALYZERS-NODE-22-005 |
| SPRINT_133_scanner_surface | `SCANNER-ANALYZERS-NODE-22-007` | TODO | Node Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Node) | | SCANNER-ANALYZERS-NODE-22-006 |
| SPRINT_133_scanner_surface | `SCANNER-ANALYZERS-NODE-22-008` | TODO | Node Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Node) | | SCANNER-ANALYZERS-NODE-22-007 |
| SPRINT_133_scanner_surface | `SCANNER-ANALYZERS-NODE-22-009` | TODO | Node Analyzer Guild, QA Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Node) | | SCANNER-ANALYZERS-NODE-22-008 |
| SPRINT_133_scanner_surface | `SCANNER-ANALYZERS-NODE-22-010` | TODO | Node Analyzer Guild, Signals Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Node) | | SCANNER-ANALYZERS-NODE-22-009 |
| SPRINT_133_scanner_surface | `SCANNER-ANALYZERS-NODE-22-011` | TODO | Node Analyzer Guild, DevOps Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Node) | | SCANNER-ANALYZERS-NODE-22-010 |
| SPRINT_133_scanner_surface | `SCANNER-ANALYZERS-NODE-22-012` | TODO | Node Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Node) | | SCANNER-ANALYZERS-NODE-22-011 |
| SPRINT_133_scanner_surface | `SCANNER-ANALYZERS-PHP-27-001` | TODO | PHP Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Php) | | |
| SPRINT_133_scanner_surface | `SCANNER-ANALYZERS-PHP-27-002` | TODO | PHP Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Php) | | SCANNER-ANALYZERS-PHP-27-001 |
| SPRINT_133_scanner_surface | `SCANNER-ANALYZERS-PHP-27-003` | TODO | PHP Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Php) | | SCANNER-ANALYZERS-PHP-27-002 |
| SPRINT_133_scanner_surface | `SCANNER-ANALYZERS-PHP-27-004` | TODO | PHP Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Php) | | SCANNER-ANALYZERS-PHP-27-003 |
| SPRINT_133_scanner_surface | `SCANNER-ANALYZERS-PHP-27-005` | TODO | PHP Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Php) | | SCANNER-ANALYZERS-PHP-27-004 |
| SPRINT_133_scanner_surface | `SCANNER-ANALYZERS-PHP-27-006` | TODO | PHP Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Php) | | SCANNER-ANALYZERS-PHP-27-005 |
| SPRINT_133_scanner_surface | `SCANNER-ANALYZERS-PHP-27-007` | TODO | PHP Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Php) | | SCANNER-ANALYZERS-PHP-27-006 |
| SPRINT_134_scanner_surface | `SCANNER-ANALYZERS-PHP-27-008` | TODO | PHP Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Php) | | SCANNER-ANALYZERS-PHP-27-002 |
| SPRINT_134_scanner_surface | `SCANNER-ANALYZERS-PHP-27-009` | TODO | PHP Analyzer Guild, QA Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Php) | | SCANNER-ANALYZERS-PHP-27-007 |
| SPRINT_134_scanner_surface | `SCANNER-ANALYZERS-PHP-27-010` | TODO | PHP Analyzer Guild, Signals Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Php) | | SCANNER-ANALYZERS-PHP-27-009 |
| SPRINT_134_scanner_surface | `SCANNER-ANALYZERS-PHP-27-011` | TODO | PHP Analyzer Guild, DevOps Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Php) | | SCANNER-ANALYZERS-PHP-27-010 |
| SPRINT_134_scanner_surface | `SCANNER-ANALYZERS-PHP-27-012` | TODO | PHP Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Php) | | SCANNER-ANALYZERS-PHP-27-011 |
| SPRINT_134_scanner_surface | `SCANNER-ANALYZERS-PYTHON-23-001` | TODO | Python Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Python) | | |
| SPRINT_134_scanner_surface | `SCANNER-ANALYZERS-PYTHON-23-002` | TODO | Python Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Python) | | SCANNER-ANALYZERS-PYTHON-23-001 |
| SPRINT_134_scanner_surface | `SCANNER-ANALYZERS-PYTHON-23-003` | TODO | Python Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Python) | | SCANNER-ANALYZERS-PYTHON-23-002 |
| SPRINT_134_scanner_surface | `SCANNER-ANALYZERS-PYTHON-23-004` | TODO | Python Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Python) | | SCANNER-ANALYZERS-PYTHON-23-003 |
| SPRINT_134_scanner_surface | `SCANNER-ANALYZERS-PYTHON-23-005` | TODO | Python Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Python) | | SCANNER-ANALYZERS-PYTHON-23-004 |
| SPRINT_134_scanner_surface | `SCANNER-ANALYZERS-PYTHON-23-006` | TODO | Python Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Python) | | SCANNER-ANALYZERS-PYTHON-23-005 |
| SPRINT_134_scanner_surface | `SCANNER-ANALYZERS-PYTHON-23-007` | TODO | Python Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Python) | | SCANNER-ANALYZERS-PYTHON-23-006 |
| SPRINT_134_scanner_surface | `SCANNER-ANALYZERS-PYTHON-23-008` | TODO | Python Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Python) | | SCANNER-ANALYZERS-PYTHON-23-007 |
| SPRINT_134_scanner_surface | `SCANNER-ANALYZERS-PYTHON-23-009` | TODO | Python Analyzer Guild, QA Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Python) | | SCANNER-ANALYZERS-PYTHON-23-008 |
| SPRINT_134_scanner_surface | `SCANNER-ANALYZERS-PYTHON-23-010` | TODO | Python Analyzer Guild, Signals Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Python) | | SCANNER-ANALYZERS-PYTHON-23-009 |
| SPRINT_134_scanner_surface | `SCANNER-ANALYZERS-PYTHON-23-011` | TODO | Python Analyzer Guild, DevOps Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Python) | | SCANNER-ANALYZERS-PYTHON-23-010 |
| SPRINT_135_scanner_surface | `SCANNER-ANALYZERS-PYTHON-23-012` | TODO | Python Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Python) | | SCANNER-ANALYZERS-PYTHON-23-011 |
| SPRINT_135_scanner_surface | `SCANNER-ANALYZERS-RUBY-28-001` | TODO | Ruby Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Ruby) | | |
| SPRINT_135_scanner_surface | `SCANNER-ANALYZERS-RUBY-28-002` | TODO | Ruby Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Ruby) | | SCANNER-ANALYZERS-RUBY-28-001 |
| SPRINT_135_scanner_surface | `SCANNER-ANALYZERS-RUBY-28-003` | TODO | Ruby Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Ruby) | | SCANNER-ANALYZERS-RUBY-28-002 |
| SPRINT_135_scanner_surface | `SCANNER-ANALYZERS-RUBY-28-004` | TODO | Ruby Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Ruby) | | SCANNER-ANALYZERS-RUBY-28-003 |
| SPRINT_135_scanner_surface | `SCANNER-ANALYZERS-RUBY-28-005` | TODO | Ruby Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Ruby) | | SCANNER-ANALYZERS-RUBY-28-004 |
| SPRINT_135_scanner_surface | `SCANNER-ANALYZERS-RUBY-28-006` | TODO | Ruby Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Ruby) | | SCANNER-ANALYZERS-RUBY-28-005 |
| SPRINT_135_scanner_surface | `SCANNER-ANALYZERS-RUBY-28-007` | TODO | Ruby Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Ruby) | | SCANNER-ANALYZERS-RUBY-28-006 |
| SPRINT_135_scanner_surface | `SCANNER-ANALYZERS-RUBY-28-008` | TODO | Ruby Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Ruby) | | SCANNER-ANALYZERS-RUBY-28-007 |
| SPRINT_135_scanner_surface | `SCANNER-ANALYZERS-RUBY-28-009` | TODO | Ruby Analyzer Guild, QA Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Ruby) | | SCANNER-ANALYZERS-RUBY-28-008 |
| SPRINT_135_scanner_surface | `SCANNER-ANALYZERS-RUBY-28-010` | TODO | Ruby Analyzer Guild, Signals Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Ruby) | | SCANNER-ANALYZERS-RUBY-28-009 |
| SPRINT_135_scanner_surface | `SCANNER-ANALYZERS-RUBY-28-011` | TODO | Ruby Analyzer Guild, DevOps Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Ruby) | | SCANNER-ANALYZERS-RUBY-28-010 |
| SPRINT_135_scanner_surface | `SCANNER-ANALYZERS-RUBY-28-012` | TODO | Ruby Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Ruby) | | SCANNER-ANALYZERS-RUBY-28-011 |
| SPRINT_135_scanner_surface | `SCANNER-ENTRYTRACE-18-502` | TODO | EntryTrace Guild (src/Scanner/__Libraries/StellaOps.Scanner.EntryTrace) | | SCANNER-ENTRYTRACE-18-508 |
| SPRINT_135_scanner_surface | `SCANNER-ENTRYTRACE-18-503` | TODO | EntryTrace Guild (src/Scanner/__Libraries/StellaOps.Scanner.EntryTrace) | | SCANNER-ENTRYTRACE-18-502 |
| SPRINT_136_scanner_surface | `SCANNER-EMIT-15-001` | TODO | Scanner Emit Guild (src/Scanner/__Libraries/StellaOps.Scanner.Emit) | | SCANNER-SURFACE-04 |
| SPRINT_136_scanner_surface | `SCANNER-ENG-0020` | TODO | Scanner Guild (docs/modules/scanner) | | |
| SPRINT_136_scanner_surface | `SCANNER-ENG-0021` | TODO | Scanner Guild (docs/modules/scanner) | | |
| SPRINT_136_scanner_surface | `SCANNER-ENG-0022` | TODO | Scanner Guild, Policy Guild (docs/modules/scanner) | | |
| SPRINT_136_scanner_surface | `SCANNER-ENG-0023` | TODO | Scanner Guild, Offline Kit Guild, Policy Guild (docs/modules/scanner) | | |
| SPRINT_136_scanner_surface | `SCANNER-ENG-0024` | TODO | Scanner Guild (docs/modules/scanner) | | |
| SPRINT_136_scanner_surface | `SCANNER-ENG-0025` | TODO | Scanner Guild (docs/modules/scanner) | | |
| SPRINT_136_scanner_surface | `SCANNER-ENG-0026` | TODO | Scanner Guild (docs/modules/scanner) | | |
| SPRINT_136_scanner_surface | `SCANNER-ENG-0027` | TODO | Scanner Guild, Policy Guild, Offline Kit Guild (docs/modules/scanner) | | |
| SPRINT_136_scanner_surface | `SCANNER-ENTRYTRACE-18-504` | TODO | EntryTrace Guild (src/Scanner/__Libraries/StellaOps.Scanner.EntryTrace) | | SCANNER-ENTRYTRACE-18-503 |
| SPRINT_136_scanner_surface | `SCANNER-ENTRYTRACE-18-505` | TODO | EntryTrace Guild (src/Scanner/__Libraries/StellaOps.Scanner.EntryTrace) | | SCANNER-ENTRYTRACE-18-504 |
| SPRINT_136_scanner_surface | `SCANNER-ENTRYTRACE-18-506` | TODO | EntryTrace Guild, Scanner WebService Guild (src/Scanner/__Libraries/StellaOps.Scanner.EntryTrace) | | SCANNER-ENTRYTRACE-18-505 |
| SPRINT_136_scanner_surface | `SCANNER-ENV-01` | TODO (2025-11-06) | Scanner Worker Guild (src/Scanner/StellaOps.Scanner.Worker) | | |
| SPRINT_136_scanner_surface | `SCANNER-ENV-02` | TODO (2025-11-06) | Scanner WebService Guild, Ops Guild (src/Scanner/StellaOps.Scanner.WebService) | | SCANNER-ENV-01 |
| SPRINT_136_scanner_surface | `SCANNER-ENV-03` | TODO | BuildX Plugin Guild (src/Scanner/StellaOps.Scanner.Sbomer.BuildXPlugin) | | SCANNER-ENV-02 |
| SPRINT_136_scanner_surface | `SCANNER-EVENTS-16-301` | BLOCKED (2025-10-26) | Scanner WebService Guild (src/Scanner/StellaOps.Scanner.WebService) | | |
| SPRINT_136_scanner_surface | `SCANNER-GRAPH-21-001` | TODO | Scanner WebService Guild, Cartographer Guild (src/Scanner/StellaOps.Scanner.WebService) | | |
| SPRINT_136_scanner_surface | `SCANNER-LNM-21-001` | TODO | Scanner WebService Guild, Policy Guild (src/Scanner/StellaOps.Scanner.WebService) | | |
| SPRINT_136_scanner_surface | `SCANNER-LNM-21-002` | TODO | Scanner WebService Guild, UI Guild (src/Scanner/StellaOps.Scanner.WebService) | | SCANNER-LNM-21-001 |
| SPRINT_136_scanner_surface | `SCANNER-SECRETS-03` | TODO | BuildX Plugin Guild, Security Guild (src/Scanner/StellaOps.Scanner.Sbomer.BuildXPlugin) | | SCANNER-SECRETS-02 |
| SPRINT_136_scanner_surface | `SCANNER-SORT-02` | TODO | Scanner Core Guild (src/Scanner/__Libraries/StellaOps.Scanner.Core) | | SCANNER-EMIT-15-001 |
| SPRINT_136_scanner_surface | `SCANNER-SURFACE-04` | TODO | Scanner Worker Guild (src/Scanner/StellaOps.Scanner.Worker) | | SCANNER-SURFACE-01, SURFACE-FS-03 |
| SPRINT_136_scanner_surface | `SCHED-SURFACE-02` | TODO | Scheduler Worker Guild (src/Scheduler/__Libraries/StellaOps.Scheduler.Worker) | | SURFACE-FS-02, SCHED-SURFACE-01. Reference `docs/modules/scanner/design/surface-fs-consumers.md` §3 for implementation checklist |
| SPRINT_136_scanner_surface | `SURFACE-ENV-02` | DOING (2025-11-02) | Scanner Guild (src/Scanner/__Libraries/StellaOps.Scanner.Surface.Env) | | SURFACE-ENV-01 |
| SPRINT_136_scanner_surface | `SURFACE-ENV-03` | TODO | Scanner Guild (src/Scanner/__Libraries/StellaOps.Scanner.Surface.Env) | | SURFACE-ENV-02 |
| SPRINT_136_scanner_surface | `SURFACE-ENV-04` | TODO | Zastava Guild (src/Scanner/__Libraries/StellaOps.Scanner.Surface.Env) | | SURFACE-ENV-02 |
| SPRINT_136_scanner_surface | `SURFACE-ENV-05` | TODO | Ops Guild (src/Scanner/__Libraries/StellaOps.Scanner.Surface.Env) | | SURFACE-ENV-03, SURFACE-ENV-04 |
| SPRINT_136_scanner_surface | `SURFACE-FS-03` | TODO | Scanner Guild (src/Scanner/__Libraries/StellaOps.Scanner.Surface.FS) | | SURFACE-FS-02 |
| SPRINT_136_scanner_surface | `SURFACE-FS-04` | TODO | Zastava Guild (src/Scanner/__Libraries/StellaOps.Scanner.Surface.FS) | | SURFACE-FS-02 |
| SPRINT_136_scanner_surface | `SURFACE-FS-05` | TODO | Scanner Guild, Scheduler Guild (src/Scanner/__Libraries/StellaOps.Scanner.Surface.FS) | | SURFACE-FS-03 |
| SPRINT_136_scanner_surface | `SURFACE-FS-06` | TODO | Docs Guild (src/Scanner/__Libraries/StellaOps.Scanner.Surface.FS) | | SURFACE-FS-02..05 |
| SPRINT_136_scanner_surface | `SURFACE-FS-07` | TODO | Scanner Guild (src/Scanner/__Libraries/StellaOps.Scanner.Surface.FS) | | SCANNER-SURFACE-04 |
| SPRINT_136_scanner_surface | `SURFACE-SECRETS-01` | DOING (2025-11-02) | Scanner Guild, Security Guild (src/Scanner/__Libraries/StellaOps.Scanner.Surface.Secrets) | | |
| SPRINT_136_scanner_surface | `SURFACE-SECRETS-02` | DOING (2025-11-02) | Scanner Guild (src/Scanner/__Libraries/StellaOps.Scanner.Surface.Secrets) | | SURFACE-SECRETS-01 |
| SPRINT_136_scanner_surface | `SURFACE-SECRETS-03` | TODO | Scanner Guild (src/Scanner/__Libraries/StellaOps.Scanner.Surface.Secrets) | | SURFACE-SECRETS-02 |
| SPRINT_136_scanner_surface | `SURFACE-SECRETS-04` | TODO | Scanner Guild (src/Scanner/__Libraries/StellaOps.Scanner.Surface.Secrets) | | SURFACE-SECRETS-02 |
| SPRINT_136_scanner_surface | `SURFACE-SECRETS-05` | TODO | Zastava Guild (src/Scanner/__Libraries/StellaOps.Scanner.Surface.Secrets) | | SURFACE-SECRETS-02 |
| SPRINT_136_scanner_surface | `SURFACE-SECRETS-06` | TODO | Ops Guild (src/Scanner/__Libraries/StellaOps.Scanner.Surface.Secrets) | | SURFACE-SECRETS-03 |
| SPRINT_136_scanner_surface | `SURFACE-VAL-01` | DOING (2025-11-01) | Scanner Guild, Security Guild (src/Scanner/__Libraries/StellaOps.Scanner.Surface.Validation) | | SURFACE-FS-01, SURFACE-ENV-01 |
| SPRINT_136_scanner_surface | `SURFACE-VAL-02` | TODO | Scanner Guild (src/Scanner/__Libraries/StellaOps.Scanner.Surface.Validation) | | SURFACE-VAL-01, SURFACE-ENV-02, SURFACE-FS-02 |
| SPRINT_136_scanner_surface | `SURFACE-VAL-03` | TODO | Scanner Guild, Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Surface.Validation) | | SURFACE-VAL-02 |
| SPRINT_136_scanner_surface | `SURFACE-VAL-04` | TODO | Scanner Guild, Zastava Guild (src/Scanner/__Libraries/StellaOps.Scanner.Surface.Validation) | | SURFACE-VAL-02 |
| SPRINT_136_scanner_surface | `SURFACE-VAL-05` | TODO | Docs Guild (src/Scanner/__Libraries/StellaOps.Scanner.Surface.Validation) | | SURFACE-VAL-02 |
| SPRINT_136_scanner_surface | `ZASTAVA-SURFACE-02` | TODO | Zastava Observer Guild (src/Zastava/StellaOps.Zastava.Observer) | | SURFACE-FS-02, ZASTAVA-SURFACE-01. Reference `docs/modules/scanner/design/surface-fs-consumers.md` §4 for integration steps |
| SPRINT_138_scanner_ruby_parity | `SCANNER-ENG-0008` | TODO | EntryTrace Guild, QA Guild (src/Scanner/__Libraries/StellaOps.Scanner.EntryTrace) | | |
| SPRINT_138_scanner_ruby_parity | `SCANNER-ENG-0010` | TODO | PHP Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Php) | | SCANNER-ANALYZERS-PHP-27-001..012 |
| SPRINT_138_scanner_ruby_parity | `SCANNER-ENG-0011` | TODO | Language Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Deno) | | |
| SPRINT_138_scanner_ruby_parity | `SCANNER-ENG-0012` | TODO | Language Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Dart) | | |
| SPRINT_138_scanner_ruby_parity | `SCANNER-ENG-0013` | TODO | Swift Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Swift) | | |
| SPRINT_138_scanner_ruby_parity | `SCANNER-ENG-0014` | TODO | Runtime Guild, Zastava Guild (docs/modules/scanner) | | |
| SPRINT_140_runtime_signals | GRAPH-INDEX-28-007 | TODO | | | |
| SPRINT_140_runtime_signals | GRAPH-INDEX-28-008 | TODO | | | |
| SPRINT_140_runtime_signals | GRAPH-INDEX-28-009 | TODO | | | |
| SPRINT_140_runtime_signals | GRAPH-INDEX-28-010 | TODO | | | |
| SPRINT_140_runtime_signals | SBOM-AIAI-31-001 | TODO | | | |
| SPRINT_140_runtime_signals | SBOM-AIAI-31-002 | TODO | | | |
| SPRINT_140_runtime_signals | SBOM-CONSOLE-23-001 | TODO | | | |
| SPRINT_140_runtime_signals | SBOM-CONSOLE-23-002 | TODO | | | |
| SPRINT_140_runtime_signals | SBOM-ORCH-32-001 | TODO | | | |
| SPRINT_140_runtime_signals | SBOM-ORCH-33-001 | TODO | | | |
| SPRINT_140_runtime_signals | SBOM-ORCH-34-001 | TODO | | | |
| SPRINT_140_runtime_signals | SBOM-SERVICE-21-001 | BLOCKED | | | |
| SPRINT_140_runtime_signals | SBOM-SERVICE-21-002 | BLOCKED | | | |
| SPRINT_140_runtime_signals | SBOM-SERVICE-21-003 | BLOCKED | | | |
| SPRINT_140_runtime_signals | SBOM-SERVICE-21-004 | BLOCKED | | | |
| SPRINT_140_runtime_signals | SBOM-SERVICE-23-001 | TODO | | | |
| SPRINT_140_runtime_signals | SBOM-SERVICE-23-002 | TODO | | | |
| SPRINT_140_runtime_signals | SBOM-VULN-29-001 | TODO | | | |
| SPRINT_140_runtime_signals | SBOM-VULN-29-002 | TODO | | | |
| SPRINT_140_runtime_signals | SIGNALS-24-002 | DOING (2025-11-07) | | | |
| SPRINT_140_runtime_signals | SIGNALS-24-003 | DOING (2025-11-09) | | | |
| SPRINT_140_runtime_signals | SIGNALS-24-004 | BLOCKED (2025-10-27) | | | |
| SPRINT_140_runtime_signals | SIGNALS-24-005 | BLOCKED (2025-10-27) | | | |
| SPRINT_140_runtime_signals | ZASTAVA-ENV-01 | TODO | | | |
| SPRINT_140_runtime_signals | ZASTAVA-ENV-02 | TODO | | | |
| SPRINT_140_runtime_signals | ZASTAVA-SECRETS-01 | TODO | | | |
| SPRINT_140_runtime_signals | ZASTAVA-SECRETS-02 | TODO | | | |
| SPRINT_140_runtime_signals | ZASTAVA-SURFACE-01 | TODO | | | |
| SPRINT_140_runtime_signals | ZASTAVA-SURFACE-02 | TODO | | | |
| SPRINT_160_export_evidence | CLI-REPLAY-187-002 | TODO | CLI Guild · `docs/modules/cli/architecture.md` | | |
| SPRINT_160_export_evidence | DVOFF-64-002 | TODO | DevPortal Offline + AirGap Controller Guilds | | |
| SPRINT_160_export_evidence | EVID-CRYPTO-90-001 | TODO | Evidence Locker + Security Guilds · `ICryptoProviderRegistry` integration | | |
| SPRINT_160_export_evidence | EVID-REPLAY-187-001 | TODO | Evidence Locker Guild · docs/modules/evidence-locker/architecture.md | | |
| SPRINT_160_export_evidence | EXPORT-AIRGAP-56-001/002 | TODO | Exporter + Mirror Creator + DevOps Guilds | | |
| SPRINT_160_export_evidence | EXPORT-AIRGAP-57-001 | TODO | Exporter Service + Evidence Locker Guild | | |
| SPRINT_160_export_evidence | EXPORT-ATTEST-74-001/002 | TODO | Attestation Bundle + Exporter Guilds | | |
| SPRINT_160_export_evidence | EXPORT-ATTEST-75-001/002 | TODO | Attestation Bundle + CLI + Exporter Guilds | | |
| SPRINT_160_export_evidence | EXPORT-CRYPTO-90-001 | TODO | Exporter Service + Security Guilds | | |
| SPRINT_160_export_evidence | EXPORT-OAS-61/62/63 | TODO | Exporter Service + API Governance + SDK Guilds | | |
| SPRINT_160_export_evidence | RUNBOOK-REPLAY-187-004 | TODO | Docs/Ops Guild · `/docs/runbooks/replay_ops.md` | | |
| SPRINT_160_export_evidence | TIMELINE-OBS-52-001 | TODO | Timeline Indexer Guild | | |
| SPRINT_160_export_evidence | TIMELINE-OBS-52-002 | TODO | Timeline Indexer Guild | | |
| SPRINT_160_export_evidence | TIMELINE-OBS-52-003 | TODO | Timeline Indexer Guild | | |
| SPRINT_160_export_evidence | TIMELINE-OBS-52-004 | TODO | Timeline Indexer + Security Guilds | | |
| SPRINT_160_export_evidence | TIMELINE-OBS-53-001 | TODO | Timeline Indexer + Evidence Locker Guilds | | |
| SPRINT_161_evidencelocker | CLI-REPLAY-187-002 | TODO | CLI Guild (`src/Cli/StellaOps.Cli`) | | |
| SPRINT_161_evidencelocker | EVID-CRYPTO-90-001 | TODO | Evidence Locker Guild · Security Guild | | |
| SPRINT_161_evidencelocker | EVID-OBS-54-002 | TODO | Evidence Locker Guild (`src/EvidenceLocker/StellaOps.EvidenceLocker`) | | |
| SPRINT_161_evidencelocker | EVID-REPLAY-187-001 | TODO | Evidence Locker Guild · Replay Delivery Guild | | |
| SPRINT_161_evidencelocker | RUNBOOK-REPLAY-187-004 | TODO | Docs Guild · Ops Guild | | |
| SPRINT_170_notifications_telemetry | NOTIFY-ATTEST-74-001/002 | **DOING / TODO** | | | |
| SPRINT_170_notifications_telemetry | NOTIFY-ATTEST-74-001/74-002 | TODO DOING (prep) | Notifications Service Guild · Attestor Service Guild | | |
| SPRINT_170_notifications_telemetry | NOTIFY-OAS-61-001 63-001 | **DOING / TODO** | | | |
| SPRINT_170_notifications_telemetry | NOTIFY-OAS-61-001 NOTIFY-OAS-63-001 | TODO | Notifications Service Guild · API Contracts Guild · SDK Generator Guild | | |
| SPRINT_170_notifications_telemetry | NOTIFY-OBS-51-001/55-001 | TODO | Notifications Service Guild · Observability Guild | | |
| SPRINT_170_notifications_telemetry | NOTIFY-OBS-51-001/55-001 | TODO | | | |
| SPRINT_170_notifications_telemetry | NOTIFY-RISK-66-001 68-001 | TODO | | | |
| SPRINT_170_notifications_telemetry | NOTIFY-RISK-66-001 NOTIFY-RISK-68-001 | TODO | Notifications Service Guild · Risk Engine Guild · Policy Guild | | |
| SPRINT_170_notifications_telemetry | TELEMETRY-OBS-50-001/002 | **DOING / TODO** | | | |
| SPRINT_170_notifications_telemetry | TELEMETRY-OBS-50-001/50-002 | TODO DOING (scaffolding) | Telemetry Core Guild | | |
| SPRINT_170_notifications_telemetry | TELEMETRY-OBS-51-001/002 | TODO | | | |
| SPRINT_170_notifications_telemetry | TELEMETRY-OBS-51-001/51-002 | TODO | Telemetry Core Guild · Observability Guild · Security Guild | | |
| SPRINT_170_notifications_telemetry | TELEMETRY-OBS-55-001/56-001 | TODO | Telemetry Core Guild · Observability Guild | | |
| SPRINT_170_notifications_telemetry | TELEMETRY-OBS-55-001/56-001 | TODO | | | |
| SPRINT_301_docs_tasks_md_i | DOCS-AIAI-31-004 | DOING (2025-11-07) | Docs Guild · Console Guild | | DOCS-AIAI-31-003; CONSOLE-VULN-29-001; CONSOLE-VEX-30-001; EXCITITOR-CONSOLE-23-001 |
| SPRINT_301_docs_tasks_md_i | DOCS-AIAI-31-005 | BLOCKED (2025-11-03) | Docs Guild · DevEx/CLI Guild | | DOCS-AIAI-31-004; CLI-VULN-29-001; CLI-VEX-30-001 |
| SPRINT_301_docs_tasks_md_i | DOCS-AIAI-31-006 | BLOCKED (2025-11-03) | Docs Guild · Policy Guild | | DOCS-AIAI-31-005; POLICY-ENGINE-31-001 |
| SPRINT_301_docs_tasks_md_i | DOCS-AIAI-31-008 | BLOCKED (2025-11-03) | Docs Guild · SBOM Service Guild | | DOCS-AIAI-31-007; SBOM-AIAI-31-001 |
| SPRINT_301_docs_tasks_md_i | DOCS-AIAI-31-009 | BLOCKED (2025-11-03) | Docs Guild · DevOps Guild | | DOCS-AIAI-31-008; DEVOPS-AIAI-31-001 |
| SPRINT_301_docs_tasks_md_i | DOCS-AIRGAP-56-001 | TODO | Docs Guild · AirGap Controller Guild | | |
| SPRINT_301_docs_tasks_md_i | DOCS-AIRGAP-56-002 | TODO | Docs Guild · DevOps Guild | | DOCS-AIRGAP-56-001 |
| SPRINT_301_docs_tasks_md_i | DOCS-AIRGAP-56-003 | TODO | Docs Guild · Exporter Guild | | DOCS-AIRGAP-56-002 |
| SPRINT_301_docs_tasks_md_i | DOCS-AIRGAP-56-004 | TODO | Docs Guild · Deployment Guild | | DOCS-AIRGAP-56-003 |
| SPRINT_301_docs_tasks_md_i | DOCS-AIRGAP-57-001 | TODO | Docs Guild · AirGap Time Guild | | DOCS-AIRGAP-56-004 |
| SPRINT_301_docs_tasks_md_i | DOCS-AIRGAP-57-002 | TODO | Docs Guild · Console Guild | | DOCS-AIRGAP-57-001 |
| SPRINT_301_docs_tasks_md_i | DOCS-CLI-DET-01 | TODO | Docs Guild · DevEx/CLI Guild | | CLI-SBOM-60-001; CLI-SBOM-60-002 |
| SPRINT_301_docs_tasks_md_i | DOCS-POLICY-DET-01 | TODO | Docs Guild · Policy Guild | | POLICY-DET backlog |
| SPRINT_301_docs_tasks_md_i | DOCS-SCANNER-DET-01 | DOING (2025-11-09) | Docs Guild · Scanner Guild | | Sprint 136 outputs; scanner determinism fixtures |
| SPRINT_401_reachability_evidence_chain | AUTH-REACH-401-005 | TODO | Authority & Signer Guilds (`src/Authority/StellaOps.Authority`, `src/Signer/StellaOps.Signer`) | | |
| SPRINT_401_reachability_evidence_chain | BENCH-AUTO-401-019 | TODO | Benchmarks Guild (`docs/benchmarks/vex-evidence-playbook.md`, `scripts/bench/**`) | | |
| SPRINT_401_reachability_evidence_chain | CLI-EDITOR-401-004 | TODO | CLI Guild (`src/Cli/StellaOps.Cli`, `docs/policy/lifecycle.md`) | | |
| SPRINT_401_reachability_evidence_chain | CLI-VEX-401-011 | TODO | verify | | |
| SPRINT_401_reachability_evidence_chain | DOCS-DSL-401-005 | TODO | Docs Guild (`docs/policy/dsl.md`, `docs/policy/lifecycle.md`) | | |
| SPRINT_401_reachability_evidence_chain | DOCS-RUNBOOK-401-017 | TODO | Docs Guild · Ops Guild (`docs/runbooks/reachability-runtime.md`, `docs/reachability/DELIVERY_GUIDE.md`) | | |
| SPRINT_401_reachability_evidence_chain | DOCS-VEX-401-012 | TODO | Docs Guild (`docs/benchmarks/vex-evidence-playbook.md`, `bench/README.md`) | | |
| SPRINT_401_reachability_evidence_chain | DSSE-CLI-401-021 | TODO | CLI Guild · DevOps Guild (`src/Cli/StellaOps.Cli`, `scripts/ci/attest-*`, `docs/modules/attestor/architecture.md`) | | |
| SPRINT_401_reachability_evidence_chain | DSSE-DOCS-401-022 | TODO | Docs Guild · Attestor Guild (`docs/ci/dsse-build-flow.md`, `docs/modules/attestor/architecture.md`) | | |
| SPRINT_401_reachability_evidence_chain | DSSE-LIB-401-020 | TODO | Attestor Guild · Platform Guild (`src/Attestor/StellaOps.Attestation`, `src/Attestor/StellaOps.Attestor.Envelope`) | | |
| SPRINT_401_reachability_evidence_chain | GAP-DOC-008 | TODO | Docs Guild (`docs/reachability/function-level-evidence.md`, `docs/09_API_CLI_REFERENCE.md`, `docs/api/policy.md`) | | |
| SPRINT_401_reachability_evidence_chain | GAP-POL-005 | TODO | Policy Guild (`src/Policy/StellaOps.Policy.Engine`, `docs/modules/policy/architecture.md`, `docs/reachability/function-level-evidence.md`) | | |
| SPRINT_401_reachability_evidence_chain | GAP-REP-004 | TODO | BE-Base Platform Guild (`src/__Libraries/StellaOps.Replay.Core`, `docs/replay/DETERMINISTIC_REPLAY.md`) | | |
| SPRINT_401_reachability_evidence_chain | GAP-SIG-003 | TODO | Signals Guild (`src/Signals/StellaOps.Signals`, `docs/reachability/function-level-evidence.md`) | | |
| SPRINT_401_reachability_evidence_chain | GAP-SYM-007 | TODO | Scanner Worker Guild & Docs Guild (`src/Scanner/StellaOps.Scanner.Models`, `docs/modules/scanner/architecture.md`, `docs/reachability/function-level-evidence.md`) | | |
| SPRINT_401_reachability_evidence_chain | GAP-VEX-006 | TODO | Policy, Excititor, UI, CLI & Notify Guilds (`docs/modules/excititor/architecture.md`, `src/Cli/StellaOps.Cli`, `src/UI/StellaOps.UI`, `docs/09_API_CLI_REFERENCE.md`) | | |
| SPRINT_401_reachability_evidence_chain | GRAPH-CAS-401-001 | TODO | Scanner Worker Guild (`src/Scanner/StellaOps.Scanner.Worker`) | | |
| SPRINT_401_reachability_evidence_chain | POLICY-ENGINE-401-003 | TODO | Policy Guild (`src/Policy/StellaOps.Policy.Engine`, `docs/modules/policy/architecture.md`) | | |
| SPRINT_401_reachability_evidence_chain | POLICY-LIB-401-001 | TODO | Policy Guild (`src/Policy/StellaOps.PolicyDsl`, `docs/policy/dsl.md`) | | |
| SPRINT_401_reachability_evidence_chain | POLICY-LIB-401-002 | TODO | Policy Guild, CLI Guild (`tests/Policy/StellaOps.PolicyDsl.Tests`, `policy/default.dsl`, `docs/policy/lifecycle.md`) | | |
| SPRINT_401_reachability_evidence_chain | POLICY-VEX-401-006 | TODO | Policy Guild (`src/Policy/StellaOps.Policy.Engine`, `src/Policy/__Libraries/StellaOps.Policy`) | | |
| SPRINT_401_reachability_evidence_chain | POLICY-VEX-401-010 | TODO | Policy Guild (`src/Policy/StellaOps.Policy.Engine/Vex`, `docs/modules/policy/architecture.md`, `docs/benchmarks/vex-evidence-playbook.md`) | | |
| SPRINT_401_reachability_evidence_chain | PROV-BACKFILL-401-029 | DOING | Platform Guild (`docs/provenance/inline-dsse.md`, `scripts/publish_attestation_with_provenance.sh`) | | |
| SPRINT_401_reachability_evidence_chain | PROV-INDEX-401-030 | TODO | Platform Guild · Ops Guild (`docs/provenance/inline-dsse.md`, `ops/mongo/indices/events_provenance_indices.js`) | | |
| SPRINT_401_reachability_evidence_chain | QA-DOCS-401-008 | TODO | QA & Docs Guilds (`docs`, `tests/README.md`) | | |
| SPRINT_401_reachability_evidence_chain | REACH-LATTICE-401-023 | TODO | Scanner Guild · Policy Guild (`docs/reachability/lattice.md`, `docs/modules/scanner/architecture.md`, `src/Scanner/StellaOps.Scanner.WebService`) | | |
| SPRINT_401_reachability_evidence_chain | REPLAY-401-004 | TODO | BE-Base Platform Guild (`src/__Libraries/StellaOps.Replay.Core`) | | |
| SPRINT_401_reachability_evidence_chain | RUNTIME-PROBE-401-010 | TODO | Runtime Signals Guild (`src/Signals/StellaOps.Signals.Runtime`, `ops/probes`) | | |
| SPRINT_401_reachability_evidence_chain | SCAN-REACH-401-009 | TODO | Scanner Worker Guild (`src/Scanner/StellaOps.Scanner.Worker`, `src/Scanner/__Libraries`) | | |
| SPRINT_401_reachability_evidence_chain | SCANNER-NATIVE-401-015 | TODO | Scanner Worker Guild (`src/Scanner/__Libraries/StellaOps.Scanner.Symbols.Native`, `src/Scanner/__Libraries/StellaOps.Scanner.CallGraph.Native`) | | |
| SPRINT_401_reachability_evidence_chain | SIG-STORE-401-016 | TODO | Signals Guild · BE-Base Platform Guild (`src/Signals/StellaOps.Signals`, `src/__Libraries/StellaOps.Replay.Core`) | | |
| SPRINT_401_reachability_evidence_chain | SIGN-VEX-401-018 | TODO | Signing Guild (`src/Signer/StellaOps.Signer`, `docs/modules/signer/architecture.md`) | | |
| SPRINT_401_reachability_evidence_chain | SIGNALS-RUNTIME-401-002 | TODO | Signals Guild (`src/Signals/StellaOps.Signals`) | | |
| SPRINT_401_reachability_evidence_chain | SIGNALS-SCORING-401-003 | TODO | Signals Guild (`src/Signals/StellaOps.Signals`) | | |
| SPRINT_401_reachability_evidence_chain | SYMS-BUNDLE-401-014 | TODO | verify | | |
| SPRINT_401_reachability_evidence_chain | SYMS-CLIENT-401-012 | TODO | Symbols Guild (`src/Symbols/StellaOps.Symbols.Client`, `src/Scanner/StellaOps.Scanner.Symbolizer`) | | |
| SPRINT_401_reachability_evidence_chain | SYMS-INGEST-401-013 | TODO | Symbols Guild, DevOps Guild (`src/Symbols/StellaOps.Symbols.Ingestor.Cli`, `docs/specs/SYMBOL_MANIFEST_v1.md`) | | |
| SPRINT_401_reachability_evidence_chain | SYMS-SERVER-401-011 | TODO | Symbols Guild (`src/Symbols/StellaOps.Symbols.Server`) | | |
| SPRINT_401_reachability_evidence_chain | UI-CLI-401-007 | TODO | UI & CLI Guilds (`src/Cli/StellaOps.Cli`, `src/UI/StellaOps.UI`) | | |
| SPRINT_401_reachability_evidence_chain | UNCERTAINTY-POLICY-401-026 | TODO | Policy Guild · Concelier Guild (`docs/policy/dsl.md`, `docs/uncertainty/README.md`) | | |
| SPRINT_401_reachability_evidence_chain | UNCERTAINTY-SCHEMA-401-024 | TODO | Signals Guild (`src/Signals/StellaOps.Signals`, `docs/uncertainty/README.md`) | | |
| SPRINT_401_reachability_evidence_chain | UNCERTAINTY-SCORER-401-025 | TODO | Signals Guild (`src/Signals/StellaOps.Signals.Application`, `docs/uncertainty/README.md`) | | |
| SPRINT_401_reachability_evidence_chain | UNCERTAINTY-UI-401-027 | TODO | UI Guild · CLI Guild (`src/UI/StellaOps.UI`, `src/Cli/StellaOps.Cli`, `docs/uncertainty/README.md`) | | |

View File

@@ -1,28 +0,0 @@
# Sprint <ID> · <Stream/Topic>
## Topic & Scope
- Replace with a 25 bullet summary of what this sprint delivers and why it matters.
## Dependencies & Concurrency
- Upstream sprints or artefacts that must land first.
- Confirm peers in the same decade (e.g. 120129) remain independent.
## Documentation Prerequisites
- List onboarding docs, architecture dossiers, runbooks, ADRs, or experiment notes that contributors must read before flipping any task to `DOING`.
## Task Board
| Task ID | Status | Owner(s) | Dependencies | Notes |
| --- | --- | --- | --- | --- |
| EXAMPLE-00-001 | TODO | Guild · Team | Upstream contract or sprint | Replace with the real backlog. |
## Execution Log
| Date (UTC) | Update | Owner |
| --- | --- | --- |
| 2025-11-13 | Example entry describing what moved. | Guild |
## Decisions & Risks
- Pending approvals, blocked schema reviews, or risks with a mitigation plan.
## Next Checkpoints
- Dated meetings, demos, or cross-team alignment calls with the accountable owners.