semi implemented and features implemented save checkpoint

docs/implplan-blocked/audits/csproj-standards/Plugin/Samples/StellaOps.Plugin.Samples.HelloWorld/StellaOps.Plugin.Samples.HelloWorld.md

@@ -0,0 +1,42 @@
+# Audit - StellaOps.Plugin.Samples.HelloWorld
+
+## Project
+- Path: `src/Plugin/Samples/StellaOps.Plugin.Samples.HelloWorld/StellaOps.Plugin.Samples.HelloWorld.csproj`
+- Module: `Plugin`
+- Kind: `Plugin`
+- SDK: `Microsoft.NET.Sdk`
+- TargetFramework: `net10.0`
+- Audit date (UTC): 2026-01-30
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true
+- Deterministic: inherited true
+- 100-line rule violations: 1
+- Service locator usage (BuildServiceProvider/GetService): 0
+- Analyzer enforcement: missing repo-wide (see summary).
+
+### Details
+- 100-line files:
+  - `src/Plugin/Samples/StellaOps.Plugin.Samples.HelloWorld/HelloWorldPlugin.cs` (122 lines)
+- Service locator matches:
+  - none
+
+### Fix Guidance
+- Split files over 100 lines into smaller types or partials.
+
+## Testing Fullness Findings
+- Status: FAIL
+- Expected layers: Unit, Integration, Security, Offline
+- Detected test projects: src/Plugin/Samples/StellaOps.Plugin.Samples.HelloWorld.Tests/StellaOps.Plugin.Samples.HelloWorld.Tests.csproj [Unit]
+- Missing layers: Integration, Security, Offline
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Offline execution (tests must run without network access).
+
+### Fix Guidance
+- Add integration tests for cross-component flows.
+- Add security tests for authn/authz or input validation.
+- Add offline/airgap coverage with fixtures only.

docs/implplan-blocked/audits/csproj-standards/Plugin/StellaOps.Plugin.Abstractions/StellaOps.Plugin.Abstractions.md

@@ -0,0 +1,55 @@
+# Audit - StellaOps.Plugin.Abstractions
+
+## Project
+- Path: `src/Plugin/StellaOps.Plugin.Abstractions/StellaOps.Plugin.Abstractions.csproj`
+- Module: `Plugin`
+- Kind: `Plugin`
+- SDK: `Microsoft.NET.Sdk`
+- TargetFramework: `net10.0`
+- Audit date (UTC): 2026-01-30
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true
+- Deterministic: inherited true
+- 100-line rule violations: 13
+- Service locator usage (BuildServiceProvider/GetService): 1
+- Analyzer enforcement: missing repo-wide (see summary).
+
+### Details
+- 100-line files:
+  - `src/Plugin/StellaOps.Plugin.Abstractions/Capabilities/ITransportCapability.cs` (287 lines)
+  - `src/Plugin/StellaOps.Plugin.Abstractions/Capabilities/IAnalysisCapability.cs` (221 lines)
+  - `src/Plugin/StellaOps.Plugin.Abstractions/Capabilities/IAuthCapability.cs` (220 lines)
+  - `src/Plugin/StellaOps.Plugin.Abstractions/Manifest/PluginManifest.cs` (216 lines)
+  - `src/Plugin/StellaOps.Plugin.Abstractions/Capabilities/IFeedCapability.cs` (197 lines)
+  - `src/Plugin/StellaOps.Plugin.Abstractions/Capabilities/IScmCapability.cs` (194 lines)
+  - `src/Plugin/StellaOps.Plugin.Abstractions/Attributes/PluginAttribute.cs` (185 lines)
+  - `src/Plugin/StellaOps.Plugin.Abstractions/PluginCapabilities.cs` (159 lines)
+  - `src/Plugin/StellaOps.Plugin.Abstractions/Capabilities/ICryptoCapability.cs` (141 lines)
+  - `src/Plugin/StellaOps.Plugin.Abstractions/Capabilities/ILlmCapability.cs` (140 lines)
+  - `src/Plugin/StellaOps.Plugin.Abstractions/Lifecycle/PluginLifecycleException.cs` (134 lines)
+  - `src/Plugin/StellaOps.Plugin.Abstractions/Execution/LoadedPlugin.cs` (133 lines)
+  - `src/Plugin/StellaOps.Plugin.Abstractions/Context/IPluginContext.cs` (120 lines)
+- Service locator matches:
+  - `src/Plugin/StellaOps.Plugin.Abstractions/Context/IPluginContext.cs`:104 T? GetService<T>() where T : class;
+
+### Fix Guidance
+- Split files over 100 lines into smaller types or partials.
+- Replace service locator usage with constructor injection.
+
+## Testing Fullness Findings
+- Status: FAIL
+- Expected layers: Unit, Integration, Security, Offline
+- Detected test projects: src/Plugin/__Tests/StellaOps.Plugin.Abstractions.Tests/StellaOps.Plugin.Abstractions.Tests.csproj [Unit]
+- Missing layers: Integration, Security, Offline
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Offline execution (tests must run without network access).
+
+### Fix Guidance
+- Add integration tests for cross-component flows.
+- Add security tests for authn/authz or input validation.
+- Add offline/airgap coverage with fixtures only.

docs/implplan-blocked/audits/csproj-standards/Plugin/StellaOps.Plugin.Host/StellaOps.Plugin.Host.md

@@ -0,0 +1,61 @@
+# Audit - StellaOps.Plugin.Host
+
+## Project
+- Path: `src/Plugin/StellaOps.Plugin.Host/StellaOps.Plugin.Host.csproj`
+- Module: `Plugin`
+- Kind: `Plugin`
+- SDK: `Microsoft.NET.Sdk`
+- TargetFramework: `net10.0`
+- Audit date (UTC): 2026-01-30
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true
+- Deterministic: inherited true
+- 100-line rule violations: 18
+- Service locator usage (BuildServiceProvider/GetService): 2
+- Analyzer enforcement: missing repo-wide (see summary).
+
+### Details
+- 100-line files:
+  - `src/Plugin/StellaOps.Plugin.Host/PluginHost.cs` (418 lines)
+  - `src/Plugin/StellaOps.Plugin.Host/Dependencies/PluginDependencyResolver.cs` (320 lines)
+  - `src/Plugin/StellaOps.Plugin.Host/Discovery/FileSystemPluginDiscovery.cs` (287 lines)
+  - `src/Plugin/StellaOps.Plugin.Host/Health/PluginHealthMonitor.cs` (253 lines)
+  - `src/Plugin/StellaOps.Plugin.Host/Dependencies/DependencyGraph.cs` (225 lines)
+  - `src/Plugin/StellaOps.Plugin.Host/Context/PluginConfiguration.cs` (221 lines)
+  - `src/Plugin/StellaOps.Plugin.Host/Loading/AssemblyPluginLoader.cs` (213 lines)
+  - `src/Plugin/StellaOps.Plugin.Host/IPluginHost.cs` (174 lines)
+  - `src/Plugin/StellaOps.Plugin.Host/Lifecycle/PluginLifecycleManager.cs` (173 lines)
+  - `src/Plugin/StellaOps.Plugin.Host/Extensions/ServiceCollectionExtensions.cs` (165 lines)
+  - `src/Plugin/StellaOps.Plugin.Host/Discovery/EmbeddedPluginDiscovery.cs` (153 lines)
+  - `src/Plugin/StellaOps.Plugin.Host/Lifecycle/PluginStateMachine.cs` (150 lines)
+  - `src/Plugin/StellaOps.Plugin.Host/Context/PluginContext.cs` (130 lines)
+  - `src/Plugin/StellaOps.Plugin.Host/Context/PluginServices.cs` (120 lines)
+  - `src/Plugin/StellaOps.Plugin.Host/PluginHostOptions.cs` (118 lines)
+  - `src/Plugin/StellaOps.Plugin.Host/Loading/PluginAssemblyLoadContext.cs` (115 lines)
+  - `src/Plugin/StellaOps.Plugin.Host/Context/PluginLogger.cs` (112 lines)
+  - `src/Plugin/StellaOps.Plugin.Host/Discovery/CompositePluginDiscovery.cs` (103 lines)
+- Service locator matches:
+  - `src/Plugin/StellaOps.Plugin.Host/Context/PluginServices.cs`:36 public T? GetService<T>() where T : class
+  - `src/Plugin/StellaOps.Plugin.Host/Context/PluginServices.cs`:39 return _serviceProvider.GetService<T>();
+
+### Fix Guidance
+- Split files over 100 lines into smaller types or partials.
+- Replace service locator usage with constructor injection.
+
+## Testing Fullness Findings
+- Status: FAIL
+- Expected layers: Unit, Integration, Security, Offline
+- Detected test projects: src/Plugin/__Tests/StellaOps.Plugin.Host.Tests/StellaOps.Plugin.Host.Tests.csproj [Unit]
+- Missing layers: Integration, Security, Offline
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Offline execution (tests must run without network access).
+
+### Fix Guidance
+- Add integration tests for cross-component flows.
+- Add security tests for authn/authz or input validation.
+- Add offline/airgap coverage with fixtures only.

docs/implplan-blocked/audits/csproj-standards/Plugin/StellaOps.Plugin.Registry/StellaOps.Plugin.Registry.md

@@ -0,0 +1,47 @@
+# Audit - StellaOps.Plugin.Registry
+
+## Project
+- Path: `src/Plugin/StellaOps.Plugin.Registry/StellaOps.Plugin.Registry.csproj`
+- Module: `Plugin`
+- Kind: `Plugin`
+- SDK: `Microsoft.NET.Sdk`
+- TargetFramework: `net10.0`
+- Audit date (UTC): 2026-01-30
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true
+- Deterministic: inherited true
+- 100-line rule violations: 6
+- Service locator usage (BuildServiceProvider/GetService): 0
+- Analyzer enforcement: missing repo-wide (see summary).
+
+### Details
+- 100-line files:
+  - `src/Plugin/StellaOps.Plugin.Registry/PostgresPluginRegistry.cs` (734 lines)
+  - `src/Plugin/StellaOps.Plugin.Registry/InMemoryPluginRegistry.cs` (425 lines)
+  - `src/Plugin/StellaOps.Plugin.Registry/PluginRegistryMigrationRunner.cs` (158 lines)
+  - `src/Plugin/StellaOps.Plugin.Registry/IPluginRegistry.cs` (143 lines)
+  - `src/Plugin/StellaOps.Plugin.Registry/Models/PluginRecord.cs` (122 lines)
+  - `src/Plugin/StellaOps.Plugin.Registry/Extensions/ServiceCollectionExtensions.cs` (105 lines)
+- Service locator matches:
+  - none
+
+### Fix Guidance
+- Split files over 100 lines into smaller types or partials.
+
+## Testing Fullness Findings
+- Status: FAIL
+- Expected layers: Unit, Integration, Security, Offline
+- Detected test projects: src/Plugin/__Tests/StellaOps.Plugin.Registry.Tests/StellaOps.Plugin.Registry.Tests.csproj [Unit]
+- Missing layers: Integration, Security, Offline
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Offline execution (tests must run without network access).
+
+### Fix Guidance
+- Add integration tests for cross-component flows.
+- Add security tests for authn/authz or input validation.
+- Add offline/airgap coverage with fixtures only.

docs/implplan-blocked/audits/csproj-standards/Plugin/StellaOps.Plugin.Sandbox/StellaOps.Plugin.Sandbox.md

@@ -0,0 +1,52 @@
+# Audit - StellaOps.Plugin.Sandbox
+
+## Project
+- Path: `src/Plugin/StellaOps.Plugin.Sandbox/StellaOps.Plugin.Sandbox.csproj`
+- Module: `Plugin`
+- Kind: `Plugin`
+- SDK: `Microsoft.NET.Sdk`
+- TargetFramework: `net10.0`
+- Audit date (UTC): 2026-01-30
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true
+- Deterministic: inherited true
+- 100-line rule violations: 11
+- Service locator usage (BuildServiceProvider/GetService): 0
+- Analyzer enforcement: missing repo-wide (see summary).
+
+### Details
+- 100-line files:
+  - `src/Plugin/StellaOps.Plugin.Sandbox/ProcessSandbox.cs` (473 lines)
+  - `src/Plugin/StellaOps.Plugin.Sandbox/Network/NetworkPolicyEnforcer.cs` (378 lines)
+  - `src/Plugin/StellaOps.Plugin.Sandbox/Resources/WindowsResourceLimiter.cs` (353 lines)
+  - `src/Plugin/StellaOps.Plugin.Sandbox/Resources/LinuxResourceLimiter.cs` (300 lines)
+  - `src/Plugin/StellaOps.Plugin.Sandbox/Communication/GrpcPluginBridge.cs` (282 lines)
+  - `src/Plugin/StellaOps.Plugin.Sandbox/Process/PluginProcessManager.cs` (251 lines)
+  - `src/Plugin/StellaOps.Plugin.Sandbox/SandboxConfiguration.cs` (243 lines)
+  - `src/Plugin/StellaOps.Plugin.Sandbox/Filesystem/IFilesystemPolicy.cs` (169 lines)
+  - `src/Plugin/StellaOps.Plugin.Sandbox/SandboxFactory.cs` (167 lines)
+  - `src/Plugin/StellaOps.Plugin.Sandbox/SandboxState.cs` (110 lines)
+  - `src/Plugin/StellaOps.Plugin.Sandbox/Extensions/ServiceCollectionExtensions.cs` (106 lines)
+- Service locator matches:
+  - none
+
+### Fix Guidance
+- Split files over 100 lines into smaller types or partials.
+
+## Testing Fullness Findings
+- Status: FAIL
+- Expected layers: Unit, Integration, Security, Offline
+- Detected test projects: src/Plugin/__Tests/StellaOps.Plugin.Sandbox.Tests/StellaOps.Plugin.Sandbox.Tests.csproj [Unit]
+- Missing layers: Integration, Security, Offline
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Offline execution (tests must run without network access).
+
+### Fix Guidance
+- Add integration tests for cross-component flows.
+- Add security tests for authn/authz or input validation.
+- Add offline/airgap coverage with fixtures only.

docs/implplan-blocked/audits/csproj-standards/Plugin/StellaOps.Plugin.Sdk/StellaOps.Plugin.Sdk.md

@@ -0,0 +1,43 @@
+# Audit - StellaOps.Plugin.Sdk
+
+## Project
+- Path: `src/Plugin/StellaOps.Plugin.Sdk/StellaOps.Plugin.Sdk.csproj`
+- Module: `Plugin`
+- Kind: `Plugin`
+- SDK: `Microsoft.NET.Sdk`
+- TargetFramework: `net10.0`
+- Audit date (UTC): 2026-01-30
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true
+- Deterministic: inherited true
+- 100-line rule violations: 2
+- Service locator usage (BuildServiceProvider/GetService): 0
+- Analyzer enforcement: missing repo-wide (see summary).
+
+### Details
+- 100-line files:
+  - `src/Plugin/StellaOps.Plugin.Sdk/PluginBase.cs` (157 lines)
+  - `src/Plugin/StellaOps.Plugin.Sdk/PluginInfoBuilder.cs` (120 lines)
+- Service locator matches:
+  - none
+
+### Fix Guidance
+- Split files over 100 lines into smaller types or partials.
+
+## Testing Fullness Findings
+- Status: FAIL
+- Expected layers: Unit, Integration, Security, Offline
+- Detected test projects: src/Plugin/__Tests/StellaOps.Plugin.Sdk.Tests/StellaOps.Plugin.Sdk.Tests.csproj [Unit]
+- Missing layers: Integration, Security, Offline
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Offline execution (tests must run without network access).
+
+### Fix Guidance
+- Add integration tests for cross-component flows.
+- Add security tests for authn/authz or input validation.
+- Add offline/airgap coverage with fixtures only.

docs/implplan-blocked/audits/csproj-standards/Plugin/StellaOps.Plugin.Testing/StellaOps.Plugin.Testing.md

@@ -0,0 +1,46 @@
+# Audit - StellaOps.Plugin.Testing
+
+## Project
+- Path: `src/Plugin/StellaOps.Plugin.Testing/StellaOps.Plugin.Testing.csproj`
+- Module: `Plugin`
+- Kind: `Plugin`
+- SDK: `Microsoft.NET.Sdk`
+- TargetFramework: `net10.0`
+- Audit date (UTC): 2026-01-30
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true
+- Deterministic: inherited true
+- 100-line rule violations: 3
+- Service locator usage (BuildServiceProvider/GetService): 1
+- Analyzer enforcement: missing repo-wide (see summary).
+
+### Details
+- 100-line files:
+  - `src/Plugin/StellaOps.Plugin.Testing/TestHttpClientFactory.cs` (224 lines)
+  - `src/Plugin/StellaOps.Plugin.Testing/TestPluginLogger.cs` (200 lines)
+  - `src/Plugin/StellaOps.Plugin.Testing/TestPluginConfiguration.cs` (124 lines)
+- Service locator matches:
+  - `src/Plugin/StellaOps.Plugin.Testing/TestPluginServices.cs`:42 public T? GetService<T>() where T : class
+
+### Fix Guidance
+- Split files over 100 lines into smaller types or partials.
+- Replace service locator usage with constructor injection.
+
+## Testing Fullness Findings
+- Status: FAIL
+- Expected layers: Unit, Integration, Security, Offline
+- Detected test projects: none
+- Missing layers: Unit, Integration, Security, Offline
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Offline execution (tests must run without network access).
+
+### Fix Guidance
+- Add a unit test project named `<Project>.Tests` (or document exception).
+- Add integration tests for cross-component flows.
+- Add security tests for authn/authz or input validation.
+- Add offline/airgap coverage with fixtures only.