semi implemented and features implemented save checkpoint

docs/implplan-blocked/audits/csproj-standards/__Libraries/StellaOps.Cryptography/StellaOps.Cryptography.md

@@ -0,0 +1,57 @@
+# Audit - StellaOps.Cryptography
+
+## Project
+- Path: `src/__Libraries/StellaOps.Cryptography/StellaOps.Cryptography.csproj`
+- Module: `__Libraries`
+- Kind: `Library`
+- SDK: `Microsoft.NET.Sdk`
+- TargetFramework: `net10.0`
+- Audit date (UTC): 2026-01-30
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true
+- Deterministic: inherited true
+- 100-line rule violations: 18
+- Service locator usage (BuildServiceProvider/GetService): 0
+- Analyzer enforcement: missing repo-wide (see summary).
+
+### Details
+- 100-line files:
+  - `src/__Libraries/StellaOps.Cryptography/DefaultCryptoHash.cs` (367 lines)
+  - `src/__Libraries/StellaOps.Cryptography/DefaultCryptoHmac.cs` (323 lines)
+  - `src/__Libraries/StellaOps.Cryptography/ComplianceProfiles.cs` (288 lines)
+  - `src/__Libraries/StellaOps.Cryptography/CompliancePolicyCryptoProviders.cs` (285 lines)
+  - `src/__Libraries/StellaOps.Cryptography/Audit/AuthEventRecord.cs` (278 lines)
+  - `src/__Libraries/StellaOps.Cryptography/CryptoSigningKey.cs` (223 lines)
+  - `src/__Libraries/StellaOps.Cryptography/DefaultCryptoProvider.cs` (192 lines)
+  - `src/__Libraries/StellaOps.Cryptography/Argon2idPasswordHasher.cs` (173 lines)
+  - `src/__Libraries/StellaOps.Cryptography/CryptoComplianceService.cs` (165 lines)
+  - `src/__Libraries/StellaOps.Cryptography/CryptoProviderRegistry.cs` (154 lines)
+  - `src/__Libraries/StellaOps.Cryptography/Pbkdf2PasswordHasher.cs` (137 lines)
+  - `src/__Libraries/StellaOps.Cryptography/CryptoProvider.cs` (135 lines)
+  - `src/__Libraries/StellaOps.Cryptography/LibsodiumCryptoProvider.cs` (128 lines)
+  - `src/__Libraries/StellaOps.Cryptography/GostSignatureEncoding.cs` (126 lines)
+  - `src/__Libraries/StellaOps.Cryptography/ComplianceProfile.cs` (125 lines)
+  - `src/__Libraries/StellaOps.Cryptography/CryptoComplianceDiagnostics.cs` (117 lines)
+  - `src/__Libraries/StellaOps.Cryptography/ICryptoHash.cs` (116 lines)
+  - `src/__Libraries/StellaOps.Cryptography/ICryptoHmac.cs` (115 lines)
+- Service locator matches:
+  - none
+
+### Fix Guidance
+- Split files over 100 lines into smaller types or partials.
+
+## Testing Fullness Findings
+- Status: PASS
+- Expected layers: Unit
+- Detected test projects: src/__Libraries/__Tests/StellaOps.Cryptography.Tests/StellaOps.Cryptography.Tests.csproj [Unit], src/__Libraries/__Tests/StellaOps.Cryptography.Plugin.OfflineVerification.Tests/StellaOps.Cryptography.Plugin.OfflineVerification.Tests.csproj [Offline], src/__Libraries/__Tests/StellaOps.Cryptography.Kms.Tests/StellaOps.Cryptography.Kms.Tests.csproj [Unit], src/Cryptography/__Tests/StellaOps.Cryptography.Tests/StellaOps.Cryptography.Tests.csproj [Unit], src/__Libraries/StellaOps.Cryptography.Tests/StellaOps.Cryptography.Tests.csproj [Unit], src/__Libraries/StellaOps.Cryptography.PluginLoader.Tests/StellaOps.Cryptography.PluginLoader.Tests.csproj [Unit], src/__Libraries/StellaOps.Cryptography.Plugin.SmSoft.Tests/StellaOps.Cryptography.Plugin.SmSoft.Tests.csproj [Unit], src/__Libraries/StellaOps.Cryptography.Plugin.SmRemote.Tests/StellaOps.Cryptography.Plugin.SmRemote.Tests.csproj [Unit], src/__Libraries/StellaOps.Cryptography.Plugin.EIDAS.Tests/StellaOps.Cryptography.Plugin.EIDAS.Tests.csproj [Unit]
+- Missing layers: none
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Offline execution (tests must run without network access).
+
+### Fix Guidance
+- None.