semi implemented and features implemented save checkpoint

docs/implplan-blocked/audits/csproj-standards/Excititor/StellaOps.Excititor.WebService/StellaOps.Excititor.WebService.md

@@ -0,0 +1,78 @@
+# Audit - StellaOps.Excititor.WebService
+
+## Project
+- Path: `src/Excititor/StellaOps.Excititor.WebService/StellaOps.Excititor.WebService.csproj`
+- Module: `Excititor`
+- Kind: `WebService`
+- SDK: `Microsoft.NET.Sdk.Web`
+- TargetFramework: `net10.0`
+- Audit date (UTC): 2026-01-30
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true
+- Deterministic: inherited true
+- 100-line rule violations: 35
+- Service locator usage (BuildServiceProvider/GetService): 2
+- Analyzer enforcement: missing repo-wide (see summary).
+
+### Details
+- 100-line files:
+  - `src/Excititor/StellaOps.Excititor.WebService/Program.cs` (2388 lines)
+  - `src/Excititor/StellaOps.Excititor.WebService/Services/VexIngestOrchestrator.cs` (589 lines)
+  - `src/Excititor/StellaOps.Excititor.WebService/Endpoints/ResolveEndpoint.cs` (582 lines)
+  - `src/Excititor/StellaOps.Excititor.WebService/Services/ExcititorHealthService.cs` (556 lines)
+  - `src/Excititor/StellaOps.Excititor.WebService/Endpoints/MirrorEndpoints.cs` (391 lines)
+  - `src/Excititor/StellaOps.Excititor.WebService/Endpoints/LinksetEndpoints.cs` (385 lines)
+  - `src/Excititor/StellaOps.Excititor.WebService/Endpoints/EvidenceEndpoints.cs` (384 lines)
+  - `src/Excititor/StellaOps.Excititor.WebService/Telemetry/NormalizationTelemetry.cs` (318 lines)
+  - `src/Excititor/StellaOps.Excititor.WebService/Endpoints/ObservationEndpoints.cs` (310 lines)
+  - `src/Excititor/StellaOps.Excititor.WebService/Endpoints/RekorAttestationEndpoints.cs` (309 lines)
+  - `src/Excititor/StellaOps.Excititor.WebService/Endpoints/RiskFeedEndpoints.cs` (303 lines)
+  - `src/Excititor/StellaOps.Excititor.WebService/Endpoints/IngestEndpoints.cs` (287 lines)
+  - `src/Excititor/StellaOps.Excititor.WebService/Endpoints/PolicyEndpoints.cs` (277 lines)
+  - `src/Excititor/StellaOps.Excititor.WebService/Endpoints/MirrorRegistrationEndpoints.cs` (270 lines)
+  - `src/Excititor/StellaOps.Excititor.WebService/Program.Helpers.cs` (251 lines)
+  - `src/Excititor/StellaOps.Excititor.WebService/Telemetry/LinksetTelemetry.cs` (250 lines)
+  - `src/Excititor/StellaOps.Excititor.WebService/Graph/GraphOverlayFactory.cs` (246 lines)
+  - `src/Excititor/StellaOps.Excititor.WebService/Telemetry/EvidenceTelemetry.cs` (245 lines)
+  - `src/Excititor/StellaOps.Excititor.WebService/Services/PostgresGraphOverlayStore.cs` (244 lines)
+  - `src/Excititor/StellaOps.Excititor.WebService/Contracts/AirgapMirrorContracts.cs` (199 lines)
+  - `src/Excititor/StellaOps.Excititor.WebService/Endpoints/AttestationEndpoints.cs` (171 lines)
+  - `src/Excititor/StellaOps.Excititor.WebService/Contracts/VexEvidenceContracts.cs` (171 lines)
+  - `src/Excititor/StellaOps.Excititor.WebService/Services/OverlayRiskFeedService.cs` (170 lines)
+  - `src/Excititor/StellaOps.Excititor.WebService/Services/VexObservationProjectionService.cs` (162 lines)
+  - `src/Excititor/StellaOps.Excititor.WebService/Services/IGraphOverlayStore.cs` (154 lines)
+  - `src/Excititor/StellaOps.Excititor.WebService/Extensions/VexRawRequestMapper.cs` (151 lines)
+  - `src/Excititor/StellaOps.Excititor.WebService/Extensions/TelemetryExtensions.cs` (144 lines)
+  - `src/Excititor/StellaOps.Excititor.WebService/Contracts/VexCandidateContracts.cs` (142 lines)
+  - `src/Excititor/StellaOps.Excititor.WebService/Services/VexSignatureVerifierV1Adapter.cs` (141 lines)
+  - `src/Excititor/StellaOps.Excititor.WebService/Services/VexEvidenceChunkService.cs` (130 lines)
+  - `src/Excititor/StellaOps.Excititor.WebService/Graph/GraphTooltipFactory.cs` (127 lines)
+  - `src/Excititor/StellaOps.Excititor.WebService/Contracts/VexRawContracts.cs` (114 lines)
+  - `src/Excititor/StellaOps.Excititor.WebService/Services/VexHashingService.cs` (112 lines)
+  - `src/Excititor/StellaOps.Excititor.WebService/Services/AirgapImportValidator.cs` (107 lines)
+  - `src/Excititor/StellaOps.Excititor.WebService/Graph/GraphStatusFactory.cs` (102 lines)
+- Service locator matches:
+  - `src/Excititor/StellaOps.Excititor.WebService/Endpoints/ResolveEndpoint.cs`:61 var signer = httpContext.RequestServices.GetService<IVexSigner>();
+  - `src/Excititor/StellaOps.Excititor.WebService/Program.cs`:137 var registry = sp.GetService<StellaOps.Cryptography.ICryptoProviderRegistry>();
+
+### Fix Guidance
+- Split files over 100 lines into smaller types or partials.
+- Replace service locator usage with constructor injection.
+
+## Testing Fullness Findings
+- Status: FAIL
+- Expected layers: Unit, Integration, Security, Offline
+- Detected test projects: src/Excititor/__Tests/StellaOps.Excititor.WebService.Tests/StellaOps.Excititor.WebService.Tests.csproj [Unit]
+- Missing layers: Integration, Security, Offline
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Offline execution (tests must run without network access).
+
+### Fix Guidance
+- Add integration tests for cross-component flows.
+- Add security tests for authn/authz or input validation.
+- Add offline/airgap coverage with fixtures only.

docs/implplan-blocked/audits/csproj-standards/Excititor/StellaOps.Excititor.Worker/StellaOps.Excititor.Worker.md

@@ -0,0 +1,60 @@
+# Audit - StellaOps.Excititor.Worker
+
+## Project
+- Path: `src/Excititor/StellaOps.Excititor.Worker/StellaOps.Excititor.Worker.csproj`
+- Module: `Excititor`
+- Kind: `Worker`
+- SDK: `Microsoft.NET.Sdk.Worker`
+- TargetFramework: `net10.0`
+- Audit date (UTC): 2026-01-30
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true
+- Deterministic: inherited true
+- 100-line rule violations: 9
+- Service locator usage (BuildServiceProvider/GetService): 10
+- Analyzer enforcement: missing repo-wide (see summary).
+
+### Details
+- 100-line files:
+  - `src/Excititor/StellaOps.Excititor.Worker/Orchestration/VexWorkerOrchestratorClient.cs` (848 lines)
+  - `src/Excititor/StellaOps.Excititor.Worker/Scheduling/VexConsensusRefreshService.cs` (674 lines)
+  - `src/Excititor/StellaOps.Excititor.Worker/Signature/WorkerSignatureVerifier.cs` (535 lines)
+  - `src/Excititor/StellaOps.Excititor.Worker/Scheduling/DefaultVexProviderRunner.cs` (397 lines)
+  - `src/Excititor/StellaOps.Excititor.Worker/Orchestration/VexConnectorMetadata.cs` (156 lines)
+  - `src/Excititor/StellaOps.Excititor.Worker/Orchestration/VexWorkerHeartbeatService.cs` (152 lines)
+  - `src/Excititor/StellaOps.Excititor.Worker/Orchestration/OrchestratorVexProviderRunner.cs` (140 lines)
+  - `src/Excititor/StellaOps.Excititor.Worker/Program.cs` (133 lines)
+  - `src/Excititor/StellaOps.Excititor.Worker/Scheduling/VexWorkerHostedService.cs` (110 lines)
+- Service locator matches:
+  - `src/Excititor/StellaOps.Excititor.Worker/Scheduling/DefaultVexProviderRunner.cs`:80 var connectors = scope.ServiceProvider.GetServices<IVexConnector>();
+  - `src/Excititor/StellaOps.Excititor.Worker/Scheduling/VexConsensusRefreshService.cs`:200 var holdStore = scope.ServiceProvider.GetRequiredService<IVexConsensusHoldStore>();
+  - `src/Excititor/StellaOps.Excititor.Worker/Scheduling/VexConsensusRefreshService.cs`:201 var consensusStore = scope.ServiceProvider.GetRequiredService<IVexConsensusStore>();
+  - `src/Excititor/StellaOps.Excititor.Worker/Scheduling/VexConsensusRefreshService.cs`:244 var consensusStore = scope.ServiceProvider.GetRequiredService<IVexConsensusStore>();
+  - `src/Excititor/StellaOps.Excititor.Worker/Scheduling/VexConsensusRefreshService.cs`:281 var consensusStore = scope.ServiceProvider.GetRequiredService<IVexConsensusStore>();
+  - `src/Excititor/StellaOps.Excititor.Worker/Scheduling/VexConsensusRefreshService.cs`:282 var holdStore = scope.ServiceProvider.GetRequiredService<IVexConsensusHoldStore>();
+  - `src/Excititor/StellaOps.Excititor.Worker/Scheduling/VexConsensusRefreshService.cs`:283 var claimStore = scope.ServiceProvider.GetRequiredService<IVexClaimStore>();
+  - `src/Excititor/StellaOps.Excititor.Worker/Scheduling/VexConsensusRefreshService.cs`:284 var policyProvider = scope.ServiceProvider.GetRequiredService<IVexPolicyProvider>();
+  - `src/Excititor/StellaOps.Excititor.Worker/Scheduling/VexConsensusRefreshService.cs`:285 var merger = scope.ServiceProvider.GetRequiredService<OpenVexStatementMerger>();
+  - `src/Excititor/StellaOps.Excititor.Worker/Scheduling/VexConsensusRefreshService.cs`:286 var lattice = scope.ServiceProvider.GetRequiredService<IVexLatticeProvider>();
+
+### Fix Guidance
+- Split files over 100 lines into smaller types or partials.
+- Replace service locator usage with constructor injection.
+
+## Testing Fullness Findings
+- Status: FAIL
+- Expected layers: Unit, Integration, E2E, Offline
+- Detected test projects: src/Excititor/__Tests/StellaOps.Excititor.Worker.Tests/StellaOps.Excititor.Worker.Tests.csproj [Unit]
+- Missing layers: Integration, E2E, Offline
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Offline execution (tests must run without network access).
+
+### Fix Guidance
+- Add integration tests for cross-component flows.
+- Add E2E coverage for user-visible workflows.
+- Add offline/airgap coverage with fixtures only.

docs/implplan-blocked/audits/csproj-standards/Excititor/__Libraries/StellaOps.Excititor.ArtifactStores.S3/StellaOps.Excititor.ArtifactStores.S3.md

@@ -0,0 +1,40 @@
+# Audit - StellaOps.Excititor.ArtifactStores.S3
+
+## Project
+- Path: `src/Excititor/__Libraries/StellaOps.Excititor.ArtifactStores.S3/StellaOps.Excititor.ArtifactStores.S3.csproj`
+- Module: `Excititor`
+- Kind: `Library`
+- SDK: `Microsoft.NET.Sdk`
+- TargetFramework: `net10.0`
+- Audit date (UTC): 2026-01-30
+
+## Coding Standards Findings
+- Status: PASS
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true
+- Deterministic: inherited true
+- 100-line rule violations: 0
+- Service locator usage (BuildServiceProvider/GetService): 0
+- Analyzer enforcement: missing repo-wide (see summary).
+
+### Details
+- 100-line files:
+  - none
+- Service locator matches:
+  - none
+
+### Fix Guidance
+- None.
+
+## Testing Fullness Findings
+- Status: PASS
+- Expected layers: Unit
+- Detected test projects: src/Excititor/__Tests/StellaOps.Excititor.ArtifactStores.S3.Tests/StellaOps.Excititor.ArtifactStores.S3.Tests.csproj [Unit]
+- Missing layers: none
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Offline execution (tests must run without network access).
+
+### Fix Guidance
+- None.

docs/implplan-blocked/audits/csproj-standards/Excititor/__Libraries/StellaOps.Excititor.Attestation/StellaOps.Excititor.Attestation.md

@@ -0,0 +1,42 @@
+# Audit - StellaOps.Excititor.Attestation
+
+## Project
+- Path: `src/Excititor/__Libraries/StellaOps.Excititor.Attestation/StellaOps.Excititor.Attestation.csproj`
+- Module: `Excititor`
+- Kind: `Library`
+- SDK: `Microsoft.NET.Sdk`
+- TargetFramework: `net10.0`
+- Audit date (UTC): 2026-01-30
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true
+- Deterministic: inherited true
+- 100-line rule violations: 3
+- Service locator usage (BuildServiceProvider/GetService): 0
+- Analyzer enforcement: missing repo-wide (see summary).
+
+### Details
+- 100-line files:
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Attestation/Verification/VexAttestationVerifier.cs` (632 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Attestation/Evidence/VexEvidenceAttestor.cs` (248 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Attestation/VexAttestationClient.cs` (111 lines)
+- Service locator matches:
+  - none
+
+### Fix Guidance
+- Split files over 100 lines into smaller types or partials.
+
+## Testing Fullness Findings
+- Status: PASS
+- Expected layers: Unit
+- Detected test projects: src/Excititor/__Tests/StellaOps.Excititor.Attestation.Tests/StellaOps.Excititor.Attestation.Tests.csproj [Unit]
+- Missing layers: none
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Offline execution (tests must run without network access).
+
+### Fix Guidance
+- None.

docs/implplan-blocked/audits/csproj-standards/Excititor/__Libraries/StellaOps.Excititor.Connectors.Abstractions/StellaOps.Excititor.Connectors.Abstractions.md

@@ -0,0 +1,41 @@
+# Audit - StellaOps.Excititor.Connectors.Abstractions
+
+## Project
+- Path: `src/Excititor/__Libraries/StellaOps.Excititor.Connectors.Abstractions/StellaOps.Excititor.Connectors.Abstractions.csproj`
+- Module: `Excititor`
+- Kind: `Library`
+- SDK: `Microsoft.NET.Sdk`
+- TargetFramework: `net10.0`
+- Audit date (UTC): 2026-01-30
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true
+- Deterministic: inherited true
+- 100-line rule violations: 2
+- Service locator usage (BuildServiceProvider/GetService): 0
+- Analyzer enforcement: missing repo-wide (see summary).
+
+### Details
+- 100-line files:
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Connectors.Abstractions/Trust/ConnectorSignerMetadata.cs` (204 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Connectors.Abstractions/VexConnectorOptionsBinder.cs` (157 lines)
+- Service locator matches:
+  - none
+
+### Fix Guidance
+- Split files over 100 lines into smaller types or partials.
+
+## Testing Fullness Findings
+- Status: FAIL
+- Expected layers: Unit
+- Detected test projects: none
+- Missing layers: Unit
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Offline execution (tests must run without network access).
+
+### Fix Guidance
+- Add a unit test project named `<Project>.Tests` (or document exception).

docs/implplan-blocked/audits/csproj-standards/Excititor/__Libraries/StellaOps.Excititor.Connectors.Cisco.CSAF/StellaOps.Excititor.Connectors.Cisco.CSAF.md

@@ -0,0 +1,42 @@
+# Audit - StellaOps.Excititor.Connectors.Cisco.CSAF
+
+## Project
+- Path: `src/Excititor/__Libraries/StellaOps.Excititor.Connectors.Cisco.CSAF/StellaOps.Excititor.Connectors.Cisco.CSAF.csproj`
+- Module: `Excititor`
+- Kind: `Library`
+- SDK: `Microsoft.NET.Sdk`
+- TargetFramework: `net10.0`
+- Audit date (UTC): 2026-01-30
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true
+- Deterministic: inherited true
+- 100-line rule violations: 2
+- Service locator usage (BuildServiceProvider/GetService): 1
+- Analyzer enforcement: missing repo-wide (see summary).
+
+### Details
+- 100-line files:
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Connectors.Cisco.CSAF/Metadata/CiscoProviderMetadataLoader.cs` (337 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Connectors.Cisco.CSAF/CiscoCsafConnector.cs` (308 lines)
+- Service locator matches:
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Connectors.Cisco.CSAF/CiscoCsafConnector.cs`:276 var store = services.GetService<IVexProviderStore>();
+
+### Fix Guidance
+- Split files over 100 lines into smaller types or partials.
+- Replace service locator usage with constructor injection.
+
+## Testing Fullness Findings
+- Status: PASS
+- Expected layers: Unit
+- Detected test projects: src/Excititor/__Tests/StellaOps.Excititor.Connectors.Cisco.CSAF.Tests/StellaOps.Excititor.Connectors.Cisco.CSAF.Tests.csproj [Unit]
+- Missing layers: none
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Offline execution (tests must run without network access).
+
+### Fix Guidance
+- None.

docs/implplan-blocked/audits/csproj-standards/Excititor/__Libraries/StellaOps.Excititor.Connectors.MSRC.CSAF/StellaOps.Excititor.Connectors.MSRC.CSAF.md

@@ -0,0 +1,42 @@
+# Audit - StellaOps.Excititor.Connectors.MSRC.CSAF
+
+## Project
+- Path: `src/Excititor/__Libraries/StellaOps.Excititor.Connectors.MSRC.CSAF/StellaOps.Excititor.Connectors.MSRC.CSAF.csproj`
+- Module: `Excititor`
+- Kind: `Library`
+- SDK: `Microsoft.NET.Sdk`
+- TargetFramework: `net10.0`
+- Audit date (UTC): 2026-01-30
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true
+- Deterministic: inherited true
+- 100-line rule violations: 3
+- Service locator usage (BuildServiceProvider/GetService): 0
+- Analyzer enforcement: missing repo-wide (see summary).
+
+### Details
+- 100-line files:
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Connectors.MSRC.CSAF/MsrcCsafConnector.cs` (589 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Connectors.MSRC.CSAF/Configuration/MsrcConnectorOptions.cs` (211 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Connectors.MSRC.CSAF/Authentication/MsrcTokenProvider.cs` (185 lines)
+- Service locator matches:
+  - none
+
+### Fix Guidance
+- Split files over 100 lines into smaller types or partials.
+
+## Testing Fullness Findings
+- Status: PASS
+- Expected layers: Unit
+- Detected test projects: src/Excititor/__Tests/StellaOps.Excititor.Connectors.MSRC.CSAF.Tests/StellaOps.Excititor.Connectors.MSRC.CSAF.Tests.csproj [Unit]
+- Missing layers: none
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Offline execution (tests must run without network access).
+
+### Fix Guidance
+- None.

docs/implplan-blocked/audits/csproj-standards/Excititor/__Libraries/StellaOps.Excititor.Connectors.OCI.OpenVEX.Attest/StellaOps.Excititor.Connectors.OCI.OpenVEX.Attest.md

@@ -0,0 +1,46 @@
+# Audit - StellaOps.Excititor.Connectors.OCI.OpenVEX.Attest
+
+## Project
+- Path: `src/Excititor/__Libraries/StellaOps.Excititor.Connectors.OCI.OpenVEX.Attest/StellaOps.Excititor.Connectors.OCI.OpenVEX.Attest.csproj`
+- Module: `Excititor`
+- Kind: `Library`
+- SDK: `Microsoft.NET.Sdk`
+- TargetFramework: `net10.0`
+- Audit date (UTC): 2026-01-30
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true
+- Deterministic: inherited true
+- 100-line rule violations: 7
+- Service locator usage (BuildServiceProvider/GetService): 0
+- Analyzer enforcement: missing repo-wide (see summary).
+
+### Details
+- 100-line files:
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Connectors.OCI.OpenVEX.Attest/Fetch/OciRegistryClient.cs` (362 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Connectors.OCI.OpenVEX.Attest/Configuration/OciOpenVexAttestationConnectorOptions.cs` (321 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Connectors.OCI.OpenVEX.Attest/Fetch/OciAttestationFetcher.cs` (258 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Connectors.OCI.OpenVEX.Attest/OciOpenVexAttestationConnector.cs` (232 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Connectors.OCI.OpenVEX.Attest/Discovery/OciAttestationDiscoveryService.cs` (188 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Connectors.OCI.OpenVEX.Attest/Discovery/OciImageReferenceParser.cs` (129 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Connectors.OCI.OpenVEX.Attest/Authentication/OciCosignAuthority.cs` (110 lines)
+- Service locator matches:
+  - none
+
+### Fix Guidance
+- Split files over 100 lines into smaller types or partials.
+
+## Testing Fullness Findings
+- Status: PASS
+- Expected layers: Unit
+- Detected test projects: src/Excititor/__Tests/StellaOps.Excititor.Connectors.OCI.OpenVEX.Attest.Tests/StellaOps.Excititor.Connectors.OCI.OpenVEX.Attest.Tests.csproj [Unit]
+- Missing layers: none
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Offline execution (tests must run without network access).
+
+### Fix Guidance
+- None.

docs/implplan-blocked/audits/csproj-standards/Excititor/__Libraries/StellaOps.Excititor.Connectors.Oracle.CSAF/StellaOps.Excititor.Connectors.Oracle.CSAF.md

@@ -0,0 +1,41 @@
+# Audit - StellaOps.Excititor.Connectors.Oracle.CSAF
+
+## Project
+- Path: `src/Excititor/__Libraries/StellaOps.Excititor.Connectors.Oracle.CSAF/StellaOps.Excititor.Connectors.Oracle.CSAF.csproj`
+- Module: `Excititor`
+- Kind: `Library`
+- SDK: `Microsoft.NET.Sdk`
+- TargetFramework: `net10.0`
+- Audit date (UTC): 2026-01-30
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true
+- Deterministic: inherited true
+- 100-line rule violations: 2
+- Service locator usage (BuildServiceProvider/GetService): 0
+- Analyzer enforcement: missing repo-wide (see summary).
+
+### Details
+- 100-line files:
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Connectors.Oracle.CSAF/Metadata/OracleCatalogLoader.cs` (418 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Connectors.Oracle.CSAF/OracleCsafConnector.cs` (363 lines)
+- Service locator matches:
+  - none
+
+### Fix Guidance
+- Split files over 100 lines into smaller types or partials.
+
+## Testing Fullness Findings
+- Status: PASS
+- Expected layers: Unit
+- Detected test projects: src/Excititor/__Tests/StellaOps.Excititor.Connectors.Oracle.CSAF.Tests/StellaOps.Excititor.Connectors.Oracle.CSAF.Tests.csproj [Unit]
+- Missing layers: none
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Offline execution (tests must run without network access).
+
+### Fix Guidance
+- None.

docs/implplan-blocked/audits/csproj-standards/Excititor/__Libraries/StellaOps.Excititor.Connectors.RedHat.CSAF/StellaOps.Excititor.Connectors.RedHat.CSAF.md

@@ -0,0 +1,42 @@
+# Audit - StellaOps.Excititor.Connectors.RedHat.CSAF
+
+## Project
+- Path: `src/Excititor/__Libraries/StellaOps.Excititor.Connectors.RedHat.CSAF/StellaOps.Excititor.Connectors.RedHat.CSAF.csproj`
+- Module: `Excititor`
+- Kind: `Library`
+- SDK: `Microsoft.NET.Sdk`
+- TargetFramework: `net10.0`
+- Audit date (UTC): 2026-01-30
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true
+- Deterministic: inherited true
+- 100-line rule violations: 3
+- Service locator usage (BuildServiceProvider/GetService): 0
+- Analyzer enforcement: missing repo-wide (see summary).
+
+### Details
+- 100-line files:
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Connectors.RedHat.CSAF/Metadata/RedHatProviderMetadataLoader.cs` (312 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Connectors.RedHat.CSAF/RedHatCsafConnector.cs` (197 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Connectors.RedHat.CSAF/Configuration/RedHatConnectorOptions.cs` (104 lines)
+- Service locator matches:
+  - none
+
+### Fix Guidance
+- Split files over 100 lines into smaller types or partials.
+
+## Testing Fullness Findings
+- Status: PASS
+- Expected layers: Unit
+- Detected test projects: src/Excititor/__Tests/StellaOps.Excititor.Connectors.RedHat.CSAF.Tests/StellaOps.Excititor.Connectors.RedHat.CSAF.Tests.csproj [Unit]
+- Missing layers: none
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Offline execution (tests must run without network access).
+
+### Fix Guidance
+- None.

docs/implplan-blocked/audits/csproj-standards/Excititor/__Libraries/StellaOps.Excititor.Connectors.SUSE.RancherVEXHub/StellaOps.Excititor.Connectors.SUSE.RancherVEXHub.md

@@ -0,0 +1,45 @@
+# Audit - StellaOps.Excititor.Connectors.SUSE.RancherVEXHub
+
+## Project
+- Path: `src/Excititor/__Libraries/StellaOps.Excititor.Connectors.SUSE.RancherVEXHub/StellaOps.Excititor.Connectors.SUSE.RancherVEXHub.csproj`
+- Module: `Excititor`
+- Kind: `Library`
+- SDK: `Microsoft.NET.Sdk`
+- TargetFramework: `net10.0`
+- Audit date (UTC): 2026-01-30
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true
+- Deterministic: inherited true
+- 100-line rule violations: 5
+- Service locator usage (BuildServiceProvider/GetService): 1
+- Analyzer enforcement: missing repo-wide (see summary).
+
+### Details
+- 100-line files:
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Connectors.SUSE.RancherVEXHub/Metadata/RancherHubMetadataLoader.cs` (458 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Connectors.SUSE.RancherVEXHub/RancherHubConnector.cs` (435 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Connectors.SUSE.RancherVEXHub/Events/RancherHubEventClient.cs` (312 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Connectors.SUSE.RancherVEXHub/Configuration/RancherHubConnectorOptions.cs` (186 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Connectors.SUSE.RancherVEXHub/Authentication/RancherHubTokenProvider.cs` (171 lines)
+- Service locator matches:
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Connectors.SUSE.RancherVEXHub/RancherHubConnector.cs`:331 var store = services.GetService<IVexProviderStore>();
+
+### Fix Guidance
+- Split files over 100 lines into smaller types or partials.
+- Replace service locator usage with constructor injection.
+
+## Testing Fullness Findings
+- Status: PASS
+- Expected layers: Unit
+- Detected test projects: src/Excititor/__Tests/StellaOps.Excititor.Connectors.SUSE.RancherVEXHub.Tests/StellaOps.Excititor.Connectors.SUSE.RancherVEXHub.Tests.csproj [Unit]
+- Missing layers: none
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Offline execution (tests must run without network access).
+
+### Fix Guidance
+- None.

docs/implplan-blocked/audits/csproj-standards/Excititor/__Libraries/StellaOps.Excititor.Connectors.Ubuntu.CSAF/StellaOps.Excititor.Connectors.Ubuntu.CSAF.md

@@ -0,0 +1,43 @@
+# Audit - StellaOps.Excititor.Connectors.Ubuntu.CSAF
+
+## Project
+- Path: `src/Excititor/__Libraries/StellaOps.Excititor.Connectors.Ubuntu.CSAF/StellaOps.Excititor.Connectors.Ubuntu.CSAF.csproj`
+- Module: `Excititor`
+- Kind: `Library`
+- SDK: `Microsoft.NET.Sdk`
+- TargetFramework: `net10.0`
+- Audit date (UTC): 2026-01-30
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true
+- Deterministic: inherited true
+- 100-line rule violations: 3
+- Service locator usage (BuildServiceProvider/GetService): 1
+- Analyzer enforcement: missing repo-wide (see summary).
+
+### Details
+- 100-line files:
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Connectors.Ubuntu.CSAF/UbuntuCsafConnector.cs` (610 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Connectors.Ubuntu.CSAF/Metadata/UbuntuCatalogLoader.cs` (248 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Connectors.Ubuntu.CSAF/Configuration/UbuntuConnectorOptions.cs` (146 lines)
+- Service locator matches:
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Connectors.Ubuntu.CSAF/UbuntuCsafConnector.cs`:474 var store = services.GetService<IVexProviderStore>();
+
+### Fix Guidance
+- Split files over 100 lines into smaller types or partials.
+- Replace service locator usage with constructor injection.
+
+## Testing Fullness Findings
+- Status: PASS
+- Expected layers: Unit
+- Detected test projects: src/Excititor/__Tests/StellaOps.Excititor.Connectors.Ubuntu.CSAF.Tests/StellaOps.Excititor.Connectors.Ubuntu.CSAF.Tests.csproj [Unit]
+- Missing layers: none
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Offline execution (tests must run without network access).
+
+### Fix Guidance
+- None.

docs/implplan-blocked/audits/csproj-standards/Excititor/__Libraries/StellaOps.Excititor.Core/StellaOps.Excititor.Core.md

@@ -0,0 +1,104 @@
+# Audit - StellaOps.Excititor.Core
+
+## Project
+- Path: `src/Excititor/__Libraries/StellaOps.Excititor.Core/StellaOps.Excititor.Core.csproj`
+- Module: `Excititor`
+- Kind: `Library`
+- SDK: `Microsoft.NET.Sdk`
+- TargetFramework: `net10.0`
+- Audit date (UTC): 2026-01-30
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true
+- Deterministic: inherited true
+- 100-line rule violations: 64
+- Service locator usage (BuildServiceProvider/GetService): 1
+- Analyzer enforcement: missing repo-wide (see summary).
+
+### Details
+- 100-line files:
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/Storage/InMemoryVexStores.cs` (887 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/Verification/ProductionVexSignatureVerifier.cs` (817 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/AutoVex/VexNotReachableJustification.cs` (716 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/VexCanonicalJsonSerializer.cs` (681 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/Observations/VexObservation.cs` (661 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/AutoVex/AutoVexDowngradeService.cs` (650 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/AutoVex/TimeBoxedConfidence.cs` (575 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/AutoVex/DriftGateIntegration.cs` (513 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/Storage/IAppendOnlyCheckpointStore.cs` (498 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/Evidence/PortableEvidenceBundleBuilder.cs` (497 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/Canonicalization/VexProductKeyCanonicalizer.cs` (479 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/Observations/VexDeltaModels.cs` (448 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/Orchestration/IVexWorkerOrchestratorClient.cs` (441 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/Verification/IssuerDirectoryClient.cs` (390 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/Observations/AppendOnlyLinksetExtractionService.cs` (382 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/VexClaim.cs` (361 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/Evidence/VexEvidenceLinker.cs` (346 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/AutoVex/ReachabilityLatticeUpdater.cs` (340 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/Verification/VexVerificationModels.cs` (340 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/VexConsensusResolver.cs` (331 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/Observations/VexStatementChangeEvent.cs` (330 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/Evidence/VexTimelineEventRecorder.cs` (324 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/Calibration/TrustCalibrationService.cs` (319 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/Canonicalization/VexAdvisoryKeyCanonicalizer.cs` (314 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/RiskFeed/RiskFeedService.cs` (312 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/Observations/VexObservationQueryService.cs` (311 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/Observations/VexLinkset.cs` (306 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/Evidence/VexEvidenceSnapshot.cs` (299 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/VexExportManifest.cs` (294 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/RiskFeed/RiskFeedContracts.cs` (293 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/Observations/RekorLinkage.cs` (293 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/Testing/AuthorityTenantSeeder.cs` (264 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/AutoVex/VexDowngradeGenerator.cs` (262 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/PortableEvidenceBundle.cs` (251 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/Observations/IAppendOnlyLinksetStore.cs` (250 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/Lattice/PolicyLatticeAdapter.cs` (244 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/TrustVector/SourceClassificationService.cs` (239 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/Observations/IVexObservationAttestationService.cs` (222 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/Observations/VexLinksetDisagreementService.cs` (221 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/VexProvider.cs` (220 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/VexConsensus.cs` (215 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/Lattice/ClaimScoreMerger.cs` (200 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/Evidence/IVexEvidenceAttestor.cs` (187 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/Calibration/CalibrationComparisonEngine.cs` (183 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/Reachability/SliceVerdictConsumer.cs` (182 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/Verification/CryptoProfileSelector.cs` (178 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/Evidence/VexAttestationStoreAbstractions.cs` (178 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/Justification/ReachabilityJustificationGenerator.cs` (176 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/Verification/VerificationCacheService.cs` (175 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/Observations/VexLinksetUpdatedEvent.cs` (168 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/Reachability/ISliceVerdictConsumer.cs` (165 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/Verification/IVexSignatureVerifierV2.cs` (165 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/Verification/VexSignatureVerifierOptions.cs` (162 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/VexScoreEnvelope.cs` (158 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/VexConsensusPolicyOptions.cs` (155 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/Verification/VexVerificationServiceCollectionExtensions.cs` (154 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/Observations/IVexTimelineEventEmitter.cs` (151 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/VexQuery.cs` (145 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/Evidence/IVexEvidenceLockerService.cs` (127 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/Evidence/VexEvidenceLinkerAbstractions.cs` (122 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/Observations/VexLinksetExtractionService.cs` (117 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/Observations/IVexObservationStore.cs` (111 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/MirrorDistributionOptions.cs` (110 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/Lattice/TrustWeightRegistry.cs` (101 lines)
+- Service locator matches:
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Core/Aoc/AocServiceCollectionExtensions.cs`:32 var options = sp.GetService<IOptions<AocGuardOptions>>();
+
+### Fix Guidance
+- Split files over 100 lines into smaller types or partials.
+- Replace service locator usage with constructor injection.
+
+## Testing Fullness Findings
+- Status: PASS
+- Expected layers: Unit
+- Detected test projects: src/Excititor/__Tests/StellaOps.Excititor.Core.UnitTests/StellaOps.Excititor.Core.UnitTests.csproj [Unit], src/Excititor/__Tests/StellaOps.Excititor.Core.Tests/StellaOps.Excititor.Core.Tests.csproj [Unit]
+- Missing layers: none
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Offline execution (tests must run without network access).
+
+### Fix Guidance
+- None.

docs/implplan-blocked/audits/csproj-standards/Excititor/__Libraries/StellaOps.Excititor.Export/StellaOps.Excititor.Export.md

@@ -0,0 +1,47 @@
+# Audit - StellaOps.Excititor.Export
+
+## Project
+- Path: `src/Excititor/__Libraries/StellaOps.Excititor.Export/StellaOps.Excititor.Export.csproj`
+- Module: `Excititor`
+- Kind: `Library`
+- SDK: `Microsoft.NET.Sdk`
+- TargetFramework: `net10.0`
+- Audit date (UTC): 2026-01-30
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true
+- Deterministic: inherited true
+- 100-line rule violations: 8
+- Service locator usage (BuildServiceProvider/GetService): 0
+- Analyzer enforcement: missing repo-wide (see summary).
+
+### Details
+- 100-line files:
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Export/VexMirrorBundlePublisher.cs` (721 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Export/ExportEngine.cs` (331 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Export/PortableEvidenceBundleBuilder.cs` (277 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Export/OfflineBundleArtifactStore.cs` (244 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Export/S3ArtifactStore.cs` (183 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Export/FileSystemArtifactStore.cs` (160 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Export/VexExportEnvelopeBuilder.cs` (142 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Export/ReachabilityEvidenceEnricher.cs` (132 lines)
+- Service locator matches:
+  - none
+
+### Fix Guidance
+- Split files over 100 lines into smaller types or partials.
+
+## Testing Fullness Findings
+- Status: PASS
+- Expected layers: Unit
+- Detected test projects: src/Excititor/__Tests/StellaOps.Excititor.Export.Tests/StellaOps.Excititor.Export.Tests.csproj [Unit]
+- Missing layers: none
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Offline execution (tests must run without network access).
+
+### Fix Guidance
+- None.

docs/implplan-blocked/audits/csproj-standards/Excititor/__Libraries/StellaOps.Excititor.Formats.CSAF/StellaOps.Excititor.Formats.CSAF.md

@@ -0,0 +1,41 @@
+# Audit - StellaOps.Excititor.Formats.CSAF
+
+## Project
+- Path: `src/Excititor/__Libraries/StellaOps.Excititor.Formats.CSAF/StellaOps.Excititor.Formats.CSAF.csproj`
+- Module: `Excititor`
+- Kind: `Library`
+- SDK: `Microsoft.NET.Sdk`
+- TargetFramework: `net10.0`
+- Audit date (UTC): 2026-01-30
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true
+- Deterministic: inherited true
+- 100-line rule violations: 2
+- Service locator usage (BuildServiceProvider/GetService): 0
+- Analyzer enforcement: missing repo-wide (see summary).
+
+### Details
+- 100-line files:
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Formats.CSAF/CsafNormalizer.cs` (899 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Formats.CSAF/CsafExporter.cs` (512 lines)
+- Service locator matches:
+  - none
+
+### Fix Guidance
+- Split files over 100 lines into smaller types or partials.
+
+## Testing Fullness Findings
+- Status: PASS
+- Expected layers: Unit
+- Detected test projects: src/Excititor/__Tests/StellaOps.Excititor.Formats.CSAF.Tests/StellaOps.Excititor.Formats.CSAF.Tests.csproj [Unit]
+- Missing layers: none
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Offline execution (tests must run without network access).
+
+### Fix Guidance
+- None.

docs/implplan-blocked/audits/csproj-standards/Excititor/__Libraries/StellaOps.Excititor.Formats.CycloneDX/StellaOps.Excititor.Formats.CycloneDX.md

@@ -0,0 +1,42 @@
+# Audit - StellaOps.Excititor.Formats.CycloneDX
+
+## Project
+- Path: `src/Excititor/__Libraries/StellaOps.Excititor.Formats.CycloneDX/StellaOps.Excititor.Formats.CycloneDX.csproj`
+- Module: `Excititor`
+- Kind: `Library`
+- SDK: `Microsoft.NET.Sdk`
+- TargetFramework: `net10.0`
+- Audit date (UTC): 2026-01-30
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true
+- Deterministic: inherited true
+- 100-line rule violations: 3
+- Service locator usage (BuildServiceProvider/GetService): 0
+- Analyzer enforcement: missing repo-wide (see summary).
+
+### Details
+- 100-line files:
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Formats.CycloneDX/CycloneDxNormalizer.cs` (476 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Formats.CycloneDX/CycloneDxExporter.cs` (368 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Formats.CycloneDX/CycloneDxComponentReconciler.cs` (242 lines)
+- Service locator matches:
+  - none
+
+### Fix Guidance
+- Split files over 100 lines into smaller types or partials.
+
+## Testing Fullness Findings
+- Status: PASS
+- Expected layers: Unit
+- Detected test projects: src/Excititor/__Tests/StellaOps.Excititor.Formats.CycloneDX.Tests/StellaOps.Excititor.Formats.CycloneDX.Tests.csproj [Unit]
+- Missing layers: none
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Offline execution (tests must run without network access).
+
+### Fix Guidance
+- None.

docs/implplan-blocked/audits/csproj-standards/Excititor/__Libraries/StellaOps.Excititor.Formats.OpenVEX/StellaOps.Excititor.Formats.OpenVEX.md

@@ -0,0 +1,42 @@
+# Audit - StellaOps.Excititor.Formats.OpenVEX
+
+## Project
+- Path: `src/Excititor/__Libraries/StellaOps.Excititor.Formats.OpenVEX/StellaOps.Excititor.Formats.OpenVEX.csproj`
+- Module: `Excititor`
+- Kind: `Library`
+- SDK: `Microsoft.NET.Sdk`
+- TargetFramework: `net10.0`
+- Audit date (UTC): 2026-01-30
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true
+- Deterministic: inherited true
+- 100-line rule violations: 3
+- Service locator usage (BuildServiceProvider/GetService): 0
+- Analyzer enforcement: missing repo-wide (see summary).
+
+### Details
+- 100-line files:
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Formats.OpenVEX/OpenVexStatementMerger.cs` (499 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Formats.OpenVEX/OpenVexNormalizer.cs` (367 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Formats.OpenVEX/OpenVexExporter.cs` (273 lines)
+- Service locator matches:
+  - none
+
+### Fix Guidance
+- Split files over 100 lines into smaller types or partials.
+
+## Testing Fullness Findings
+- Status: PASS
+- Expected layers: Unit
+- Detected test projects: src/Excititor/__Tests/StellaOps.Excititor.Formats.OpenVEX.Tests/StellaOps.Excititor.Formats.OpenVEX.Tests.csproj [Unit]
+- Missing layers: none
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Offline execution (tests must run without network access).
+
+### Fix Guidance
+- None.

docs/implplan-blocked/audits/csproj-standards/Excititor/__Libraries/StellaOps.Excititor.Persistence/StellaOps.Excititor.Persistence.md

@@ -0,0 +1,51 @@
+# Audit - StellaOps.Excititor.Persistence
+
+## Project
+- Path: `src/Excititor/__Libraries/StellaOps.Excititor.Persistence/StellaOps.Excititor.Persistence.csproj`
+- Module: `Excititor`
+- Kind: `Library`
+- SDK: `Microsoft.NET.Sdk`
+- TargetFramework: `net10.0`
+- Audit date (UTC): 2026-01-30
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true
+- Deterministic: inherited true
+- 100-line rule violations: 12
+- Service locator usage (BuildServiceProvider/GetService): 0
+- Analyzer enforcement: missing repo-wide (see summary).
+
+### Details
+- 100-line files:
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Persistence/Postgres/Repositories/PostgresVexObservationStore.cs` (877 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Persistence/Postgres/Repositories/PostgresAppendOnlyLinksetStore.cs` (858 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Persistence/Postgres/Repositories/PostgresAppendOnlyCheckpointStore.cs` (478 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Persistence/Postgres/Repositories/PostgresVexRawStore.cs` (449 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Persistence/Postgres/Repositories/PostgresVexTimelineEventStore.cs` (442 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Persistence/Postgres/Repositories/PostgresVexDeltaRepository.cs` (407 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Persistence/Postgres/Repositories/VexStatementRepository.cs` (385 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Persistence/Postgres/Repositories/PostgresVexAttestationStore.cs` (338 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Persistence/Postgres/Repositories/PostgresVexProviderStore.cs` (329 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Persistence/Postgres/Repositories/PostgresConnectorStateRepository.cs` (206 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Persistence/Repositories/IVexDeltaRepository.cs` (177 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Persistence/Postgres/Models/VexStatementEntity.cs` (134 lines)
+- Service locator matches:
+  - none
+
+### Fix Guidance
+- Split files over 100 lines into smaller types or partials.
+
+## Testing Fullness Findings
+- Status: PASS
+- Expected layers: Unit
+- Detected test projects: src/Excititor/__Tests/StellaOps.Excititor.Persistence.Tests/StellaOps.Excititor.Persistence.Tests.csproj [Unit]
+- Missing layers: none
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Offline execution (tests must run without network access).
+
+### Fix Guidance
+- None.

docs/implplan-blocked/audits/csproj-standards/Excititor/__Libraries/StellaOps.Excititor.Policy/StellaOps.Excititor.Policy.md

@@ -0,0 +1,41 @@
+# Audit - StellaOps.Excititor.Policy
+
+## Project
+- Path: `src/Excititor/__Libraries/StellaOps.Excititor.Policy/StellaOps.Excititor.Policy.csproj`
+- Module: `Excititor`
+- Kind: `Library`
+- SDK: `Microsoft.NET.Sdk`
+- TargetFramework: `net10.0`
+- Audit date (UTC): 2026-01-30
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true
+- Deterministic: inherited true
+- 100-line rule violations: 2
+- Service locator usage (BuildServiceProvider/GetService): 0
+- Analyzer enforcement: missing repo-wide (see summary).
+
+### Details
+- 100-line files:
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Policy/VexPolicyProcessing.cs` (284 lines)
+  - `src/Excititor/__Libraries/StellaOps.Excititor.Policy/IVexPolicyProvider.cs` (163 lines)
+- Service locator matches:
+  - none
+
+### Fix Guidance
+- Split files over 100 lines into smaller types or partials.
+
+## Testing Fullness Findings
+- Status: PASS
+- Expected layers: Unit
+- Detected test projects: src/Excititor/__Tests/StellaOps.Excititor.Policy.Tests/StellaOps.Excititor.Policy.Tests.csproj [Unit]
+- Missing layers: none
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Offline execution (tests must run without network access).
+
+### Fix Guidance
+- None.