semi implemented and features implemented save checkpoint

docs/implplan-blocked/audits/csproj-standards/src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions.Tests/StellaOps.Auth.Abstractions.Tests.csproj

@@ -0,0 +1,91 @@
+# Audit - StellaOps.Auth.Abstractions.Tests
+
+## Project
+- Path: src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions.Tests/StellaOps.Auth.Abstractions.Tests.csproj
+- Module: Authority
+- Kind: Library
+- Audit date (UTC): 2026-01-30
+- Files scanned: 11
+- Files with issues: 11
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: inherited false
+- Deterministic: inherited true
+- 100-line rule violations: 3
+- Namespace violations: 11
+- Using directive violations: 0
+- Naming violations (interfaces/fields/const/async): 0
+- Service locator usage (BuildServiceProvider/GetService): 0
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions.Tests/AuthAbstractionsConstantsTests.cs (123 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions.Tests/NetworkMaskMatcherTests.cs (123 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions.Tests/StellaOpsScopesTests.cs (138 lines)
+- Namespace issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions.Tests/AuthAbstractionsConstantsTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions.Tests/NetworkMaskMatcherTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions.Tests/StellaOpsPrincipalBuilderTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions.Tests/StellaOpsProblemResultFactoryTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions.Tests/StellaOpsScopesTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions.Tests/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions.Tests/obj/Debug/net10.0/SelfRegisteredExtensions.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions.Tests/obj/Debug/net10.0/StellaOps.Auth.Abstractions.Tests.AssemblyInfo.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions.Tests/obj/Debug/net10.0/StellaOps.Auth.Abstractions.Tests.GlobalUsings.g.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions.Tests/obj/Debug/net10.0/XunitAutoGeneratedEntryPoint.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions.Tests/obj/Release/net10.0/StellaOps.Auth.Abstractions.Tests.GlobalUsings.g.cs: missing namespace
+- Using directive issues:
+  - none
+- Naming issues:
+  - none
+- Async issues:
+  - none
+- Service locator matches:
+  - none
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Normalize namespaces to file-scoped StellaOps.<Area>.
+- Remove overrides that disable TreatWarningsAsErrors.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 11
+- Files with issues: 11
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions.Tests/AuthAbstractionsConstantsTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions.Tests/NetworkMaskMatcherTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions.Tests/StellaOpsPrincipalBuilderTests.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions.Tests/StellaOpsProblemResultFactoryTests.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions.Tests/StellaOpsScopesTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions.Tests/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions.Tests/obj/Debug/net10.0/SelfRegisteredExtensions.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions.Tests/obj/Debug/net10.0/StellaOps.Auth.Abstractions.Tests.AssemblyInfo.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions.Tests/obj/Debug/net10.0/StellaOps.Auth.Abstractions.Tests.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions.Tests/obj/Debug/net10.0/XunitAutoGeneratedEntryPoint.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions.Tests/obj/Release/net10.0/StellaOps.Auth.Abstractions.Tests.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+
+## Testing Fullness Findings
+- Status: FAIL
+- Expected layers (heuristic): Unit
+- Detected test projects: none
+- Missing layers: Unit
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- Add or expand test projects to cover missing layers.
+- Ensure tests use deterministic fixtures and offline harnesses.

docs/implplan-blocked/audits/csproj-standards/src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions.Tests/StellaOps.Auth.Abstractions.Tests.md

@@ -0,0 +1,78 @@
+# Audit - StellaOps.Auth.Abstractions.Tests
+
+## Project
+- Path: src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions.Tests/StellaOps.Auth.Abstractions.Tests.csproj
+- Module: Authority
+- Kind: Test
+- Audit date (UTC): 2026-01-31
+- Files scanned: 5
+- Files with issues: 5
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: inherited false
+- Deterministic: inherited true
+- 100-line rule violations: 3
+- Namespace violations: 0
+- Using directive violations: 5
+- Naming violations (interfaces/fields/const/async): 0
+- Service locator usage (BuildServiceProvider/GetService): 0
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions.Tests/AuthAbstractionsConstantsTests.cs (123 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions.Tests/NetworkMaskMatcherTests.cs (123 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions.Tests/StellaOpsScopesTests.cs (138 lines)
+- Namespace issues:
+  - none
+- Using directive issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions.Tests/AuthAbstractionsConstantsTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions.Tests/NetworkMaskMatcherTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions.Tests/StellaOpsPrincipalBuilderTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions.Tests/StellaOpsProblemResultFactoryTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions.Tests/StellaOpsScopesTests.cs: using directives not sorted
+- Naming issues:
+  - none
+- Async issues:
+  - none
+- Service locator matches:
+  - none
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Move and sort using directives (outside namespace).
+- Remove overrides that disable TreatWarningsAsErrors.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 5
+- Files with issues: 5
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions.Tests/AuthAbstractionsConstantsTests.cs | FileLength>100; UsingNotSorted | Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions.Tests/NetworkMaskMatcherTests.cs | FileLength>100; UsingNotSorted | Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions.Tests/StellaOpsPrincipalBuilderTests.cs | UsingNotSorted | Sort using directives alphabetically. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions.Tests/StellaOpsProblemResultFactoryTests.cs | UsingNotSorted | Sort using directives alphabetically. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions.Tests/StellaOpsScopesTests.cs | FileLength>100; UsingNotSorted | Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+
+## Testing Fullness Findings
+- Status: PASS
+- Expected layers (heuristic): 
+- Detected test projects: none
+- Missing layers: none
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- None.

docs/implplan-blocked/audits/csproj-standards/src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/StellaOps.Auth.Abstractions.csproj

@@ -0,0 +1,104 @@
+# Audit - StellaOps.Auth.Abstractions
+
+## Project
+- Path: src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/StellaOps.Auth.Abstractions.csproj
+- Module: Authority
+- Kind: Library
+- Audit date (UTC): 2026-01-30
+- Files scanned: 17
+- Files with issues: 17
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true
+- Deterministic: inherited true
+- 100-line rule violations: 6
+- Namespace violations: 17
+- Using directive violations: 0
+- Naming violations (interfaces/fields/const/async): 0
+- Service locator usage (BuildServiceProvider/GetService): 0
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/NetworkMask.cs (182 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/NetworkMaskMatcher.cs (140 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/StellaOpsClaimTypes.cs (153 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/StellaOpsPrincipalBuilder.cs (288 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/StellaOpsProblemResultFactory.cs (115 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/StellaOpsScopes.cs (626 lines)
+- Namespace issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/AuthorityTelemetry.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/NetworkMask.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/NetworkMaskMatcher.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/StellaOpsAuthenticationDefaults.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/StellaOpsClaimTypes.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/StellaOpsHttpHeaderNames.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/StellaOpsPrincipalBuilder.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/StellaOpsProblemResultFactory.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/StellaOpsScopes.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/StellaOpsServiceIdentities.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/StellaOpsTenancyDefaults.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/obj/Debug/net10.0/StellaOps.Auth.Abstractions.AssemblyInfo.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/obj/Debug/net10.0/StellaOps.Auth.Abstractions.GlobalUsings.g.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/obj/Release/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/obj/Release/net10.0/StellaOps.Auth.Abstractions.AssemblyInfo.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/obj/Release/net10.0/StellaOps.Auth.Abstractions.GlobalUsings.g.cs: missing namespace
+- Using directive issues:
+  - none
+- Naming issues:
+  - none
+- Async issues:
+  - none
+- Service locator matches:
+  - none
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Normalize namespaces to file-scoped StellaOps.<Area>.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 17
+- Files with issues: 17
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/AuthorityTelemetry.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/NetworkMask.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/NetworkMaskMatcher.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/StellaOpsAuthenticationDefaults.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/StellaOpsClaimTypes.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/StellaOpsHttpHeaderNames.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/StellaOpsPrincipalBuilder.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/StellaOpsProblemResultFactory.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/StellaOpsScopes.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/StellaOpsServiceIdentities.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/StellaOpsTenancyDefaults.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/obj/Debug/net10.0/StellaOps.Auth.Abstractions.AssemblyInfo.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/obj/Debug/net10.0/StellaOps.Auth.Abstractions.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/obj/Release/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/obj/Release/net10.0/StellaOps.Auth.Abstractions.AssemblyInfo.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/obj/Release/net10.0/StellaOps.Auth.Abstractions.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+
+## Testing Fullness Findings
+- Status: PASS
+- Expected layers (heuristic): Unit
+- Detected test projects: src/__Libraries/__Tests/StellaOps.Configuration.Tests/StellaOps.Configuration.Tests.csproj [Unit]; src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions.Tests/StellaOps.Auth.Abstractions.Tests.csproj [Security]; src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/StellaOps.Auth.Client.Tests.csproj [CLI, Security]; src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/StellaOps.Auth.ServerIntegration.Tests.csproj [Integration, Security]; src/Findings/StellaOps.Findings.Ledger.Tests/StellaOps.Findings.Ledger.Tests.csproj [Unit]; src/Scanner/__Tests/StellaOps.Scanner.Core.Tests/StellaOps.Scanner.Core.Tests.csproj [Unit]
+- Missing layers: none
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- None.

docs/implplan-blocked/audits/csproj-standards/src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/StellaOps.Auth.Abstractions.md

@@ -0,0 +1,80 @@
+# Audit - StellaOps.Auth.Abstractions
+
+## Project
+- Path: src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/StellaOps.Auth.Abstractions.csproj
+- Module: Authority
+- Kind: Library
+- Audit date (UTC): 2026-01-31
+- Files scanned: 11
+- Files with issues: 6
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true
+- Deterministic: inherited true
+- 100-line rule violations: 6
+- Namespace violations: 0
+- Using directive violations: 0
+- Naming violations (interfaces/fields/const/async): 4
+- Service locator usage (BuildServiceProvider/GetService): 0
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/NetworkMask.cs (182 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/NetworkMaskMatcher.cs (140 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/StellaOpsClaimTypes.cs (153 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/StellaOpsPrincipalBuilder.cs (288 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/StellaOpsProblemResultFactory.cs (116 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/StellaOpsScopes.cs (626 lines)
+- Namespace issues:
+  - none
+- Using directive issues:
+  - none
+- Naming issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/NetworkMask.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/NetworkMaskMatcher.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/StellaOpsPrincipalBuilder.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/StellaOpsScopes.cs: private field naming
+- Async issues:
+  - none
+- Service locator matches:
+  - none
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Align interface/field/const naming to standards.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 11
+- Files with issues: 6
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/NetworkMask.cs | FileLength>100; PrivateFieldNaming | Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/NetworkMaskMatcher.cs | FileLength>100; PrivateFieldNaming | Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/StellaOpsClaimTypes.cs | FileLength>100 | Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/StellaOpsPrincipalBuilder.cs | FileLength>100; PrivateFieldNaming | Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/StellaOpsProblemResultFactory.cs | FileLength>100 | Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions/StellaOpsScopes.cs | FileLength>100; PrivateFieldNaming | Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+
+## Testing Fullness Findings
+- Status: PASS
+- Expected layers (heuristic): Unit
+- Detected test projects: src/__Libraries/__Tests/StellaOps.Configuration.Tests/StellaOps.Configuration.Tests.csproj [Unit]; src/Authority/StellaOps.Authority/StellaOps.Auth.Abstractions.Tests/StellaOps.Auth.Abstractions.Tests.csproj [Security]; src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/StellaOps.Auth.Client.Tests.csproj [CLI, Security]; src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/StellaOps.Auth.ServerIntegration.Tests.csproj [Integration, Security]; src/Findings/StellaOps.Findings.Ledger.Tests/StellaOps.Findings.Ledger.Tests.csproj [Unit]; src/Scanner/__Tests/StellaOps.Scanner.Core.Tests/StellaOps.Scanner.Core.Tests.csproj [Unit]
+- Missing layers: none
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- None.

docs/implplan-blocked/audits/csproj-standards/src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/StellaOps.Auth.Client.Tests.csproj

@@ -0,0 +1,103 @@
+# Audit - StellaOps.Auth.Client.Tests
+
+## Project
+- Path: src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/StellaOps.Auth.Client.Tests.csproj
+- Module: Authority
+- Kind: Library
+- Audit date (UTC): 2026-01-30
+- Files scanned: 13
+- Files with issues: 13
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: inherited false
+- Deterministic: inherited true
+- 100-line rule violations: 5
+- Namespace violations: 13
+- Using directive violations: 0
+- Naming violations (interfaces/fields/const/async): 0
+- Service locator usage (BuildServiceProvider/GetService): 6
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/MessagingTokenCacheTests.cs (163 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/ServiceCollectionExtensionsTests.cs (507 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/StellaOpsDiscoveryCacheTests.cs (131 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/StellaOpsJwksCacheTests.cs (124 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/StellaOpsTokenClientTests.cs (479 lines)
+- Namespace issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/MessagingTokenCacheTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/ServiceCollectionExtensionsTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/StellaOpsAuthClientOptionsTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/StellaOpsDiscoveryCacheTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/StellaOpsJwksCacheTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/StellaOpsTokenClientTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/TokenCacheTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/obj/Debug/net10.0/SelfRegisteredExtensions.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/obj/Debug/net10.0/StellaOps.Auth.Client.Tests.AssemblyInfo.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/obj/Debug/net10.0/StellaOps.Auth.Client.Tests.GlobalUsings.g.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/obj/Debug/net10.0/XunitAutoGeneratedEntryPoint.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/obj/Release/net10.0/StellaOps.Auth.Client.Tests.GlobalUsings.g.cs: missing namespace
+- Using directive issues:
+  - none
+- Naming issues:
+  - none
+- Async issues:
+  - none
+- Service locator matches:
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/ServiceCollectionExtensionsTests.cs:72 using var provider = services.BuildServiceProvider();
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/ServiceCollectionExtensionsTests.cs:91 using var provider = services.BuildServiceProvider();
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/ServiceCollectionExtensionsTests.cs:170 using var provider = services.BuildServiceProvider();
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/ServiceCollectionExtensionsTests.cs:230 using var provider = services.BuildServiceProvider();
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/ServiceCollectionExtensionsTests.cs:302 using var provider = services.BuildServiceProvider();
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/ServiceCollectionExtensionsTests.cs:342 using var provider = services.BuildServiceProvider();
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Normalize namespaces to file-scoped StellaOps.<Area>.
+- Remove overrides that disable TreatWarningsAsErrors.
+- Replace service locator usage with constructor injection.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 13
+- Files with issues: 13
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/MessagingTokenCacheTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/ServiceCollectionExtensionsTests.cs | FileLength>100; NamespaceMissing; ServiceLocator | Add file-scoped namespace: namespace StellaOps.<Area>;; Remove service locator usage; use constructor injection.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/StellaOpsAuthClientOptionsTests.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/StellaOpsDiscoveryCacheTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/StellaOpsJwksCacheTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/StellaOpsTokenClientTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/TokenCacheTests.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/obj/Debug/net10.0/SelfRegisteredExtensions.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/obj/Debug/net10.0/StellaOps.Auth.Client.Tests.AssemblyInfo.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/obj/Debug/net10.0/StellaOps.Auth.Client.Tests.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/obj/Debug/net10.0/XunitAutoGeneratedEntryPoint.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/obj/Release/net10.0/StellaOps.Auth.Client.Tests.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+
+## Testing Fullness Findings
+- Status: FAIL
+- Expected layers (heuristic): Unit
+- Detected test projects: none
+- Missing layers: Unit
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- Add or expand test projects to cover missing layers.
+- Ensure tests use deterministic fixtures and offline harnesses.

docs/implplan-blocked/audits/csproj-standards/src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/StellaOps.Auth.Client.Tests.md

@@ -0,0 +1,113 @@
+# Audit - StellaOps.Auth.Client.Tests
+
+## Project
+- Path: src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/StellaOps.Auth.Client.Tests.csproj
+- Module: Authority
+- Kind: Test
+- Audit date (UTC): 2026-01-31
+- Files scanned: 7
+- Files with issues: 7
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: inherited false
+- Deterministic: inherited true
+- 100-line rule violations: 5
+- Namespace violations: 0
+- Using directive violations: 9
+- Naming violations (interfaces/fields/const/async): 16
+- Service locator usage (BuildServiceProvider/GetService): 11
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/MessagingTokenCacheTests.cs (163 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/ServiceCollectionExtensionsTests.cs (507 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/StellaOpsDiscoveryCacheTests.cs (131 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/StellaOpsJwksCacheTests.cs (124 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/StellaOpsTokenClientTests.cs (479 lines)
+- Namespace issues:
+  - none
+- Using directive issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/MessagingTokenCacheTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/ServiceCollectionExtensionsTests.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/ServiceCollectionExtensionsTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/StellaOpsAuthClientOptionsTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/StellaOpsDiscoveryCacheTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/StellaOpsJwksCacheTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/StellaOpsTokenClientTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/TokenCacheTests.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/TokenCacheTests.cs: using directives not sorted
+- Naming issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/MessagingTokenCacheTests.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/ServiceCollectionExtensionsTests.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/StellaOpsDiscoveryCacheTests.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/StellaOpsJwksCacheTests.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/StellaOpsTokenClientTests.cs: private field naming
+- Async issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/MessagingTokenCacheTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/ServiceCollectionExtensionsTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/ServiceCollectionExtensionsTests.cs: missing ConfigureAwait(false)
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/StellaOpsDiscoveryCacheTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/StellaOpsDiscoveryCacheTests.cs: missing ConfigureAwait(false)
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/StellaOpsJwksCacheTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/StellaOpsJwksCacheTests.cs: missing ConfigureAwait(false)
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/StellaOpsTokenClientTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/StellaOpsTokenClientTests.cs: missing ConfigureAwait(false)
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/TokenCacheTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/TokenCacheTests.cs: missing ConfigureAwait(false)
+- Service locator matches:
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/ServiceCollectionExtensionsTests.cs:72 using var provider = services.BuildServiceProvider();
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/ServiceCollectionExtensionsTests.cs:74 var cache = provider.GetRequiredService<StellaOpsDiscoveryCache>();
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/ServiceCollectionExtensionsTests.cs:91 using var provider = services.BuildServiceProvider();
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/ServiceCollectionExtensionsTests.cs:170 using var provider = services.BuildServiceProvider();
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/ServiceCollectionExtensionsTests.cs:171 var client = provider.GetRequiredService<IHttpClientFactory>().CreateClient("notify");
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/ServiceCollectionExtensionsTests.cs:230 using var provider = services.BuildServiceProvider();
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/ServiceCollectionExtensionsTests.cs:231 var factory = provider.GetRequiredService<IHttpClientFactory>();
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/ServiceCollectionExtensionsTests.cs:302 using var provider = services.BuildServiceProvider();
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/ServiceCollectionExtensionsTests.cs:303 var client = provider.GetRequiredService<IHttpClientFactory>().CreateClient("vuln");
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/ServiceCollectionExtensionsTests.cs:342 using var provider = services.BuildServiceProvider();
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/ServiceCollectionExtensionsTests.cs:344 var cache = provider.GetRequiredService<StellaOpsDiscoveryCache>();
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Align interface/field/const naming to standards.
+- Move and sort using directives (outside namespace).
+- Remove overrides that disable TreatWarningsAsErrors.
+- Rename async methods and avoid blocking async calls.
+- Replace service locator usage with constructor injection.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 7
+- Files with issues: 7
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/MessagingTokenCacheTests.cs | AsyncNaming; FileLength>100; PrivateFieldNaming; UsingNotSorted | Rename async methods to end with Async.; Rename private fields to _camelCase.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/ServiceCollectionExtensionsTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; PrivateFieldNaming; ServiceLocator; UsingInsideNamespace; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Move using directives outside namespace.; Remove service locator usage; use constructor injection.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/StellaOpsAuthClientOptionsTests.cs | UsingNotSorted | Sort using directives alphabetically. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/StellaOpsDiscoveryCacheTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; PrivateFieldNaming; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/StellaOpsJwksCacheTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; PrivateFieldNaming; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/StellaOpsTokenClientTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; PrivateFieldNaming; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/TokenCacheTests.cs | AsyncNaming; ConfigureAwaitMissing; UsingInsideNamespace; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Move using directives outside namespace.; Rename async methods to end with Async.; Sort using directives alphabetically. |
+
+## Testing Fullness Findings
+- Status: PASS
+- Expected layers (heuristic): 
+- Detected test projects: none
+- Missing layers: none
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- None.

docs/implplan-blocked/audits/csproj-standards/src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOps.Auth.Client.csproj

@@ -0,0 +1,113 @@
+# Audit - StellaOps.Auth.Client
+
+## Project
+- Path: src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOps.Auth.Client.csproj
+- Module: Authority
+- Kind: Library
+- Audit date (UTC): 2026-01-30
+- Files scanned: 21
+- Files with issues: 21
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true
+- Deterministic: inherited true
+- 100-line rule violations: 7
+- Namespace violations: 21
+- Using directive violations: 0
+- Naming violations (interfaces/fields/const/async): 0
+- Service locator usage (BuildServiceProvider/GetService): 0
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/FileTokenCache.cs (167 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/ServiceCollectionExtensions.cs (152 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOpsAuthClientOptions.cs (206 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOpsBearerTokenHandler.cs (178 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOpsDiscoveryCache.cs (146 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOpsJwksCache.cs (120 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOpsTokenClient.cs (237 lines)
+- Namespace issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/FileTokenCache.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/InMemoryTokenCache.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/IStellaOpsTokenCache.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/IStellaOpsTokenClient.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/MessagingTokenCache.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/ServiceCollectionExtensions.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOpsApiAuthenticationOptions.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOpsApiAuthMode.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOpsAuthClientOptions.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOpsBearerTokenHandler.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOpsDiscoveryCache.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOpsJwksCache.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOpsTokenCacheEntry.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOpsTokenClient.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOpsTokenResult.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/obj/Debug/net10.0/StellaOps.Auth.Client.AssemblyInfo.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/obj/Debug/net10.0/StellaOps.Auth.Client.GlobalUsings.g.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/obj/Release/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/obj/Release/net10.0/StellaOps.Auth.Client.AssemblyInfo.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/obj/Release/net10.0/StellaOps.Auth.Client.GlobalUsings.g.cs: missing namespace
+- Using directive issues:
+  - none
+- Naming issues:
+  - none
+- Async issues:
+  - none
+- Service locator matches:
+  - none
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Normalize namespaces to file-scoped StellaOps.<Area>.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 21
+- Files with issues: 21
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Client/FileTokenCache.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Client/InMemoryTokenCache.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Client/IStellaOpsTokenCache.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Client/IStellaOpsTokenClient.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Client/MessagingTokenCache.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Client/ServiceCollectionExtensions.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOpsApiAuthenticationOptions.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOpsApiAuthMode.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOpsAuthClientOptions.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOpsBearerTokenHandler.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOpsDiscoveryCache.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOpsJwksCache.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOpsTokenCacheEntry.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOpsTokenClient.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOpsTokenResult.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Client/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Client/obj/Debug/net10.0/StellaOps.Auth.Client.AssemblyInfo.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Client/obj/Debug/net10.0/StellaOps.Auth.Client.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Client/obj/Release/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Client/obj/Release/net10.0/StellaOps.Auth.Client.AssemblyInfo.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Client/obj/Release/net10.0/StellaOps.Auth.Client.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+
+## Testing Fullness Findings
+- Status: PASS
+- Expected layers (heuristic): Unit
+- Detected test projects: src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/StellaOps.Auth.Client.Tests.csproj [CLI, Security]; src/Scanner/__Tests/StellaOps.Scanner.Core.Tests/StellaOps.Scanner.Core.Tests.csproj [Unit]
+- Missing layers: none
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- None.

docs/implplan-blocked/audits/csproj-standards/src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOps.Auth.Client.md

@@ -0,0 +1,112 @@
+# Audit - StellaOps.Auth.Client
+
+## Project
+- Path: src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOps.Auth.Client.csproj
+- Module: Authority
+- Kind: Tool
+- Audit date (UTC): 2026-01-31
+- Files scanned: 15
+- Files with issues: 10
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true
+- Deterministic: inherited true
+- 100-line rule violations: 7
+- Namespace violations: 0
+- Using directive violations: 4
+- Naming violations (interfaces/fields/const/async): 15
+- Service locator usage (BuildServiceProvider/GetService): 12
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/FileTokenCache.cs (168 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/ServiceCollectionExtensions.cs (153 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOpsAuthClientOptions.cs (207 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOpsBearerTokenHandler.cs (179 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOpsDiscoveryCache.cs (147 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOpsJwksCache.cs (121 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOpsTokenClient.cs (238 lines)
+- Namespace issues:
+  - none
+- Using directive issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/FileTokenCache.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOpsDiscoveryCache.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOpsJwksCache.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOpsTokenClient.cs: using directives inside namespace
+- Naming issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/FileTokenCache.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/InMemoryTokenCache.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOpsApiAuthenticationOptions.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOpsAuthClientOptions.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOpsBearerTokenHandler.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOpsDiscoveryCache.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOpsJwksCache.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOpsTokenClient.cs: private field naming
+- Async issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/FileTokenCache.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/MessagingTokenCache.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/ServiceCollectionExtensions.cs: blocking async usage
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOpsBearerTokenHandler.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOpsDiscoveryCache.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOpsJwksCache.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOpsTokenClient.cs: async method naming
+- Service locator matches:
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/ServiceCollectionExtensions.cs:36 var options = provider.GetRequiredService<IOptionsMonitor<StellaOpsAuthClientOptions>>().CurrentValue;
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/ServiceCollectionExtensions.cs:43 var options = provider.GetRequiredService<IOptionsMonitor<StellaOpsAuthClientOptions>>().CurrentValue;
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/ServiceCollectionExtensions.cs:50 var options = provider.GetRequiredService<IOptionsMonitor<StellaOpsAuthClientOptions>>().CurrentValue;
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/ServiceCollectionExtensions.cs:68 var logger = provider.GetService<Microsoft.Extensions.Logging.ILogger<FileTokenCache>>();
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/ServiceCollectionExtensions.cs:69 var options = provider.GetRequiredService<IOptionsMonitor<StellaOpsAuthClientOptions>>().CurrentValue;
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/ServiceCollectionExtensions.cs:70 var timeProvider = provider.GetService<TimeProvider>();
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/ServiceCollectionExtensions.cs:91 provider.GetRequiredService<IOptionsMonitor<StellaOpsApiAuthenticationOptions>>(),
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/ServiceCollectionExtensions.cs:92 provider.GetRequiredService<IOptionsMonitor<StellaOpsAuthClientOptions>>(),
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/ServiceCollectionExtensions.cs:93 provider.GetRequiredService<IStellaOpsTokenClient>(),
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/ServiceCollectionExtensions.cs:94 provider.GetService<TimeProvider>(),
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/ServiceCollectionExtensions.cs:95 provider.GetService<ILogger<StellaOpsBearerTokenHandler>>()));
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.Client/ServiceCollectionExtensions.cs:143 var policy = provider.GetService<IEgressPolicy>();
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Align interface/field/const naming to standards.
+- Move and sort using directives (outside namespace).
+- Rename async methods and avoid blocking async calls.
+- Replace service locator usage with constructor injection.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 15
+- Files with issues: 10
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Client/FileTokenCache.cs | AsyncNaming; FileLength>100; PrivateFieldNaming; UsingInsideNamespace | Move using directives outside namespace.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Client/InMemoryTokenCache.cs | PrivateFieldNaming | Rename private fields to _camelCase. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Client/MessagingTokenCache.cs | AsyncNaming | Rename async methods to end with Async. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Client/ServiceCollectionExtensions.cs | BlockingAsync; FileLength>100; ServiceLocator | Remove service locator usage; use constructor injection.; Replace .Result/.Wait/GetAwaiter().GetResult() with await.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOpsApiAuthenticationOptions.cs | PrivateFieldNaming | Rename private fields to _camelCase. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOpsAuthClientOptions.cs | FileLength>100; PrivateFieldNaming | Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOpsBearerTokenHandler.cs | AsyncNaming; FileLength>100; PrivateFieldNaming | Rename async methods to end with Async.; Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOpsDiscoveryCache.cs | AsyncNaming; FileLength>100; PrivateFieldNaming; UsingInsideNamespace | Move using directives outside namespace.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOpsJwksCache.cs | AsyncNaming; FileLength>100; PrivateFieldNaming; UsingInsideNamespace | Move using directives outside namespace.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.Client/StellaOpsTokenClient.cs | AsyncNaming; FileLength>100; PrivateFieldNaming; UsingInsideNamespace | Move using directives outside namespace.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+
+## Testing Fullness Findings
+- Status: PASS
+- Expected layers (heuristic): CLI, Unit
+- Detected test projects: src/Authority/StellaOps.Authority/StellaOps.Auth.Client.Tests/StellaOps.Auth.Client.Tests.csproj [CLI, Security]; src/Scanner/__Tests/StellaOps.Scanner.Core.Tests/StellaOps.Scanner.Core.Tests.csproj [Unit]
+- Missing layers: none
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- None.

docs/implplan-blocked/audits/csproj-standards/src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/StellaOps.Auth.ServerIntegration.Tests.csproj

@@ -0,0 +1,93 @@
+# Audit - StellaOps.Auth.ServerIntegration.Tests
+
+## Project
+- Path: src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/StellaOps.Auth.ServerIntegration.Tests.csproj
+- Module: Authority
+- Kind: Library
+- Audit date (UTC): 2026-01-30
+- Files scanned: 12
+- Files with issues: 12
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: inherited false
+- Deterministic: inherited true
+- 100-line rule violations: 2
+- Namespace violations: 12
+- Using directive violations: 0
+- Naming violations (interfaces/fields/const/async): 0
+- Service locator usage (BuildServiceProvider/GetService): 1
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/StellaOpsAuthorityConfigurationManagerTests.cs (278 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/StellaOpsScopeAuthorizationHandlerTests.cs (603 lines)
+- Namespace issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/ServiceCollectionExtensionsTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/StellaOpsAuthorityConfigurationManagerTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/StellaOpsBypassEvaluatorTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/StellaOpsResourceServerOptionsTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/StellaOpsResourceServerPoliciesTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/StellaOpsScopeAuthorizationHandlerTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/obj/Debug/net10.0/SelfRegisteredExtensions.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/obj/Debug/net10.0/StellaOps.Auth.ServerIntegration.Tests.AssemblyInfo.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/obj/Debug/net10.0/StellaOps.Auth.ServerIntegration.Tests.GlobalUsings.g.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/obj/Debug/net10.0/XunitAutoGeneratedEntryPoint.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/obj/Release/net10.0/StellaOps.Auth.ServerIntegration.Tests.GlobalUsings.g.cs: missing namespace
+- Using directive issues:
+  - none
+- Naming issues:
+  - none
+- Async issues:
+  - none
+- Service locator matches:
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/ServiceCollectionExtensionsTests.cs:35 using var provider = services.BuildServiceProvider();
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Normalize namespaces to file-scoped StellaOps.<Area>.
+- Remove overrides that disable TreatWarningsAsErrors.
+- Replace service locator usage with constructor injection.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 12
+- Files with issues: 12
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/ServiceCollectionExtensionsTests.cs | NamespaceMissing; ServiceLocator | Add file-scoped namespace: namespace StellaOps.<Area>;; Remove service locator usage; use constructor injection. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/StellaOpsAuthorityConfigurationManagerTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/StellaOpsBypassEvaluatorTests.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/StellaOpsResourceServerOptionsTests.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/StellaOpsResourceServerPoliciesTests.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/StellaOpsScopeAuthorizationHandlerTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/obj/Debug/net10.0/SelfRegisteredExtensions.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/obj/Debug/net10.0/StellaOps.Auth.ServerIntegration.Tests.AssemblyInfo.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/obj/Debug/net10.0/StellaOps.Auth.ServerIntegration.Tests.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/obj/Debug/net10.0/XunitAutoGeneratedEntryPoint.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/obj/Release/net10.0/StellaOps.Auth.ServerIntegration.Tests.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+
+## Testing Fullness Findings
+- Status: FAIL
+- Expected layers (heuristic): Unit
+- Detected test projects: none
+- Missing layers: Unit
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- Add or expand test projects to cover missing layers.
+- Ensure tests use deterministic fixtures and offline harnesses.

docs/implplan-blocked/audits/csproj-standards/src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/StellaOps.Auth.ServerIntegration.Tests.md

@@ -0,0 +1,91 @@
+# Audit - StellaOps.Auth.ServerIntegration.Tests
+
+## Project
+- Path: src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/StellaOps.Auth.ServerIntegration.Tests.csproj
+- Module: Authority
+- Kind: Test
+- Audit date (UTC): 2026-01-31
+- Files scanned: 6
+- Files with issues: 6
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: inherited false
+- Deterministic: inherited true
+- 100-line rule violations: 2
+- Namespace violations: 0
+- Using directive violations: 7
+- Naming violations (interfaces/fields/const/async): 8
+- Service locator usage (BuildServiceProvider/GetService): 3
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/StellaOpsAuthorityConfigurationManagerTests.cs (278 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/StellaOpsScopeAuthorizationHandlerTests.cs (603 lines)
+- Namespace issues:
+  - none
+- Using directive issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/ServiceCollectionExtensionsTests.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/ServiceCollectionExtensionsTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/StellaOpsAuthorityConfigurationManagerTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/StellaOpsBypassEvaluatorTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/StellaOpsResourceServerOptionsTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/StellaOpsResourceServerPoliciesTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/StellaOpsScopeAuthorizationHandlerTests.cs: using directives not sorted
+- Naming issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/StellaOpsAuthorityConfigurationManagerTests.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/StellaOpsBypassEvaluatorTests.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/StellaOpsScopeAuthorizationHandlerTests.cs: private field naming
+- Async issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/StellaOpsAuthorityConfigurationManagerTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/StellaOpsAuthorityConfigurationManagerTests.cs: blocking async usage
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/StellaOpsAuthorityConfigurationManagerTests.cs: missing ConfigureAwait(false)
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/StellaOpsScopeAuthorizationHandlerTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/StellaOpsScopeAuthorizationHandlerTests.cs: missing ConfigureAwait(false)
+- Service locator matches:
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/ServiceCollectionExtensionsTests.cs:35 using var provider = services.BuildServiceProvider();
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/ServiceCollectionExtensionsTests.cs:37 var resourceOptions = provider.GetRequiredService<IOptionsMonitor<StellaOpsResourceServerOptions>>().CurrentValue;
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/ServiceCollectionExtensionsTests.cs:38 var jwtOptions = provider.GetRequiredService<IOptionsMonitor<JwtBearerOptions>>().Get(StellaOpsAuthenticationDefaults.AuthenticationScheme);
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Align interface/field/const naming to standards.
+- Move and sort using directives (outside namespace).
+- Remove overrides that disable TreatWarningsAsErrors.
+- Rename async methods and avoid blocking async calls.
+- Replace service locator usage with constructor injection.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 6
+- Files with issues: 6
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/ServiceCollectionExtensionsTests.cs | ServiceLocator; UsingInsideNamespace; UsingNotSorted | Move using directives outside namespace.; Remove service locator usage; use constructor injection.; Sort using directives alphabetically. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/StellaOpsAuthorityConfigurationManagerTests.cs | AsyncNaming; BlockingAsync; ConfigureAwaitMissing; FileLength>100; PrivateFieldNaming; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Replace .Result/.Wait/GetAwaiter().GetResult() with await.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/StellaOpsBypassEvaluatorTests.cs | PrivateFieldNaming; UsingNotSorted | Rename private fields to _camelCase.; Sort using directives alphabetically. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/StellaOpsResourceServerOptionsTests.cs | UsingNotSorted | Sort using directives alphabetically. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/StellaOpsResourceServerPoliciesTests.cs | UsingNotSorted | Sort using directives alphabetically. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/StellaOpsScopeAuthorizationHandlerTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; PrivateFieldNaming; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+
+## Testing Fullness Findings
+- Status: PASS
+- Expected layers (heuristic): 
+- Detected test projects: none
+- Missing layers: none
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- None.

docs/implplan-blocked/audits/csproj-standards/src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration/StellaOps.Auth.ServerIntegration.csproj

@@ -0,0 +1,92 @@
+# Audit - StellaOps.Auth.ServerIntegration
+
+## Project
+- Path: src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration/StellaOps.Auth.ServerIntegration.csproj
+- Module: Authority
+- Kind: Library
+- Audit date (UTC): 2026-01-30
+- Files scanned: 12
+- Files with issues: 12
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true
+- Deterministic: inherited true
+- 100-line rule violations: 4
+- Namespace violations: 12
+- Using directive violations: 0
+- Naming violations (interfaces/fields/const/async): 0
+- Service locator usage (BuildServiceProvider/GetService): 0
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration/StellaOpsAuthorityConfigurationManager.cs (210 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration/StellaOpsResourceServerOptions.cs (194 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration/StellaOpsResourceServerPolicies.cs (121 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration/StellaOpsScopeAuthorizationHandler.cs (1084 lines)
+- Namespace issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration/ServiceCollectionExtensions.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration/StellaOpsAuthorityConfigurationManager.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration/StellaOpsAuthorizationPolicyBuilderExtensions.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration/StellaOpsBypassEvaluator.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration/StellaOpsResourceServerOptions.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration/StellaOpsResourceServerPolicies.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration/StellaOpsScopeAuthorizationHandler.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration/StellaOpsScopeRequirement.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration/obj/Debug/net10.0/StellaOps.Auth.ServerIntegration.AssemblyInfo.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration/obj/Debug/net10.0/StellaOps.Auth.ServerIntegration.GlobalUsings.g.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration/obj/Release/net10.0/StellaOps.Auth.ServerIntegration.GlobalUsings.g.cs: missing namespace
+- Using directive issues:
+  - none
+- Naming issues:
+  - none
+- Async issues:
+  - none
+- Service locator matches:
+  - none
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Normalize namespaces to file-scoped StellaOps.<Area>.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 12
+- Files with issues: 12
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration/ServiceCollectionExtensions.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration/StellaOpsAuthorityConfigurationManager.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration/StellaOpsAuthorizationPolicyBuilderExtensions.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration/StellaOpsBypassEvaluator.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration/StellaOpsResourceServerOptions.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration/StellaOpsResourceServerPolicies.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration/StellaOpsScopeAuthorizationHandler.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration/StellaOpsScopeRequirement.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration/obj/Debug/net10.0/StellaOps.Auth.ServerIntegration.AssemblyInfo.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration/obj/Debug/net10.0/StellaOps.Auth.ServerIntegration.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration/obj/Release/net10.0/StellaOps.Auth.ServerIntegration.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+
+## Testing Fullness Findings
+- Status: PASS
+- Expected layers (heuristic): Unit
+- Detected test projects: src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/StellaOps.Auth.ServerIntegration.Tests.csproj [Integration, Security]; src/Findings/StellaOps.Findings.Ledger.Tests/StellaOps.Findings.Ledger.Tests.csproj [Unit]
+- Missing layers: none
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- None.

docs/implplan-blocked/audits/csproj-standards/src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration/StellaOps.Auth.ServerIntegration.md

@@ -0,0 +1,80 @@
+# Audit - StellaOps.Auth.ServerIntegration
+
+## Project
+- Path: src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration/StellaOps.Auth.ServerIntegration.csproj
+- Module: Authority
+- Kind: Library
+- Audit date (UTC): 2026-01-31
+- Files scanned: 8
+- Files with issues: 6
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true
+- Deterministic: inherited true
+- 100-line rule violations: 4
+- Namespace violations: 0
+- Using directive violations: 0
+- Naming violations (interfaces/fields/const/async): 5
+- Service locator usage (BuildServiceProvider/GetService): 1
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration/StellaOpsAuthorityConfigurationManager.cs (211 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration/StellaOpsResourceServerOptions.cs (195 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration/StellaOpsResourceServerPolicies.cs (122 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration/StellaOpsScopeAuthorizationHandler.cs (1085 lines)
+- Namespace issues:
+  - none
+- Using directive issues:
+  - none
+- Naming issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration/StellaOpsAuthorityConfigurationManager.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration/StellaOpsBypassEvaluator.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration/StellaOpsResourceServerOptions.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration/StellaOpsScopeAuthorizationHandler.cs: private field naming
+- Async issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration/StellaOpsAuthorityConfigurationManager.cs: async method naming
+- Service locator matches:
+  - src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration/ServiceCollectionExtensions.cs:88 jwt.ConfigurationManager = provider.GetRequiredService<StellaOpsAuthorityConfigurationManager>();
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Align interface/field/const naming to standards.
+- Rename async methods and avoid blocking async calls.
+- Replace service locator usage with constructor injection.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 8
+- Files with issues: 6
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration/ServiceCollectionExtensions.cs | ServiceLocator | Remove service locator usage; use constructor injection. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration/StellaOpsAuthorityConfigurationManager.cs | AsyncNaming; FileLength>100; PrivateFieldNaming | Rename async methods to end with Async.; Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration/StellaOpsBypassEvaluator.cs | PrivateFieldNaming | Rename private fields to _camelCase. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration/StellaOpsResourceServerOptions.cs | FileLength>100; PrivateFieldNaming | Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration/StellaOpsResourceServerPolicies.cs | FileLength>100 | Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration/StellaOpsScopeAuthorizationHandler.cs | FileLength>100; PrivateFieldNaming | Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+
+## Testing Fullness Findings
+- Status: PASS
+- Expected layers (heuristic): Unit
+- Detected test projects: src/Authority/StellaOps.Authority/StellaOps.Auth.ServerIntegration.Tests/StellaOps.Auth.ServerIntegration.Tests.csproj [Integration, Security]; src/Findings/StellaOps.Findings.Ledger.Tests/StellaOps.Findings.Ledger.Tests.csproj [Unit]
+- Missing layers: none
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- None.

docs/implplan-blocked/audits/csproj-standards/src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/StellaOps.Authority.Plugin.Ldap.Tests.csproj

@@ -0,0 +1,118 @@
+# Audit - StellaOps.Authority.Plugin.Ldap.Tests
+
+## Project
+- Path: src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/StellaOps.Authority.Plugin.Ldap.Tests.csproj
+- Module: Authority
+- Kind: Library
+- Audit date (UTC): 2026-01-30
+- Files scanned: 22
+- Files with issues: 22
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: inherited false
+- Deterministic: inherited true
+- 100-line rule violations: 7
+- Namespace violations: 22
+- Using directive violations: 0
+- Naming violations (interfaces/fields/const/async): 0
+- Service locator usage (BuildServiceProvider/GetService): 1
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/LdapPluginOptionsTests.cs (410 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Claims/LdapClaimsEnricherTests.cs (194 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/ClientProvisioning/LdapClientProvisioningStoreTests.cs (204 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Credentials/LdapCredentialStoreTests.cs (311 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Resilience/LdapConnectorResilienceTests.cs (407 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Security/LdapConnectorSecurityTests.cs (400 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Snapshots/LdapConnectorSnapshotTests.cs (259 lines)
+- Namespace issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/LdapPluginOptionsTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Claims/LdapClaimsCacheTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Claims/LdapClaimsEnricherTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/ClientProvisioning/LdapCapabilityProbeTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/ClientProvisioning/LdapCapabilitySnapshotCacheTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/ClientProvisioning/LdapClientProvisioningStoreTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/ClientProvisioning/LdapDistinguishedNameHelperTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Credentials/LdapCredentialStoreTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Fakes/FakeLdapClaimsCache.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Fakes/FakeLdapConnectionFactory.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/obj/Debug/net10.0/SelfRegisteredExtensions.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/obj/Debug/net10.0/StellaOps.Authority.Plugin.Ldap.Tests.AssemblyInfo.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/obj/Debug/net10.0/StellaOps.Authority.Plugin.Ldap.Tests.GlobalUsings.g.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/obj/Debug/net10.0/XunitAutoGeneratedEntryPoint.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/obj/Release/net10.0/StellaOps.Authority.Plugin.Ldap.Tests.GlobalUsings.g.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Resilience/LdapConnectorResilienceTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Security/LdapConnectorSecurityTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Snapshots/LdapConnectorSnapshotTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/TestHelpers/TestAirgapAuditStore.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/TestHelpers/TestOptionsMonitor.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/TestHelpers/TestTimeProvider.cs: missing namespace
+- Using directive issues:
+  - none
+- Naming issues:
+  - none
+- Async issues:
+  - none
+- Service locator matches:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/LdapPluginOptionsTests.cs:291 var provider = services.BuildServiceProvider();
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Normalize namespaces to file-scoped StellaOps.<Area>.
+- Remove overrides that disable TreatWarningsAsErrors.
+- Replace service locator usage with constructor injection.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 22
+- Files with issues: 22
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/LdapPluginOptionsTests.cs | FileLength>100; NamespaceMissing; ServiceLocator | Add file-scoped namespace: namespace StellaOps.<Area>;; Remove service locator usage; use constructor injection.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Claims/LdapClaimsCacheTests.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Claims/LdapClaimsEnricherTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/ClientProvisioning/LdapCapabilityProbeTests.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/ClientProvisioning/LdapCapabilitySnapshotCacheTests.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/ClientProvisioning/LdapClientProvisioningStoreTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/ClientProvisioning/LdapDistinguishedNameHelperTests.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Credentials/LdapCredentialStoreTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Fakes/FakeLdapClaimsCache.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Fakes/FakeLdapConnectionFactory.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/obj/Debug/net10.0/SelfRegisteredExtensions.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/obj/Debug/net10.0/StellaOps.Authority.Plugin.Ldap.Tests.AssemblyInfo.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/obj/Debug/net10.0/StellaOps.Authority.Plugin.Ldap.Tests.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/obj/Debug/net10.0/XunitAutoGeneratedEntryPoint.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/obj/Release/net10.0/StellaOps.Authority.Plugin.Ldap.Tests.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Resilience/LdapConnectorResilienceTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Security/LdapConnectorSecurityTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Snapshots/LdapConnectorSnapshotTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/TestHelpers/TestAirgapAuditStore.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/TestHelpers/TestOptionsMonitor.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/TestHelpers/TestTimeProvider.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+
+## Testing Fullness Findings
+- Status: FAIL
+- Expected layers (heuristic): Unit
+- Detected test projects: none
+- Missing layers: Unit
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- Add or expand test projects to cover missing layers.
+- Ensure tests use deterministic fixtures and offline harnesses.

docs/implplan-blocked/audits/csproj-standards/src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/StellaOps.Authority.Plugin.Ldap.Tests.md

@@ -0,0 +1,128 @@
+# Audit - StellaOps.Authority.Plugin.Ldap.Tests
+
+## Project
+- Path: src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/StellaOps.Authority.Plugin.Ldap.Tests.csproj
+- Module: Authority
+- Kind: Test
+- Audit date (UTC): 2026-01-31
+- Files scanned: 16
+- Files with issues: 15
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: inherited false
+- Deterministic: inherited true
+- 100-line rule violations: 7
+- Namespace violations: 0
+- Using directive violations: 14
+- Naming violations (interfaces/fields/const/async): 25
+- Service locator usage (BuildServiceProvider/GetService): 2
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/LdapPluginOptionsTests.cs (410 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Claims/LdapClaimsEnricherTests.cs (194 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/ClientProvisioning/LdapClientProvisioningStoreTests.cs (204 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Credentials/LdapCredentialStoreTests.cs (311 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Resilience/LdapConnectorResilienceTests.cs (407 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Security/LdapConnectorSecurityTests.cs (400 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Snapshots/LdapConnectorSnapshotTests.cs (259 lines)
+- Namespace issues:
+  - none
+- Using directive issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/LdapPluginOptionsTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Claims/LdapClaimsCacheTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Claims/LdapClaimsEnricherTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/ClientProvisioning/LdapCapabilityProbeTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/ClientProvisioning/LdapCapabilitySnapshotCacheTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/ClientProvisioning/LdapClientProvisioningStoreTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Credentials/LdapCredentialStoreTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Fakes/FakeLdapClaimsCache.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Fakes/FakeLdapConnectionFactory.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Resilience/LdapConnectorResilienceTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Security/LdapConnectorSecurityTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Snapshots/LdapConnectorSnapshotTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/TestHelpers/TestAirgapAuditStore.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/TestHelpers/TestOptionsMonitor.cs: using directives not sorted
+- Naming issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/LdapPluginOptionsTests.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/ClientProvisioning/LdapClientProvisioningStoreTests.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Credentials/LdapCredentialStoreTests.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Fakes/FakeLdapConnectionFactory.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Resilience/LdapConnectorResilienceTests.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Security/LdapConnectorSecurityTests.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Snapshots/LdapConnectorSnapshotTests.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/TestHelpers/TestOptionsMonitor.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/TestHelpers/TestTimeProvider.cs: private field naming
+- Async issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Claims/LdapClaimsCacheTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Claims/LdapClaimsCacheTests.cs: missing ConfigureAwait(false)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Claims/LdapClaimsEnricherTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Claims/LdapClaimsEnricherTests.cs: missing ConfigureAwait(false)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/ClientProvisioning/LdapCapabilityProbeTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/ClientProvisioning/LdapCapabilityProbeTests.cs: missing ConfigureAwait(false)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/ClientProvisioning/LdapClientProvisioningStoreTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/ClientProvisioning/LdapClientProvisioningStoreTests.cs: missing ConfigureAwait(false)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Credentials/LdapCredentialStoreTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Credentials/LdapCredentialStoreTests.cs: missing ConfigureAwait(false)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Resilience/LdapConnectorResilienceTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Resilience/LdapConnectorResilienceTests.cs: missing ConfigureAwait(false)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Security/LdapConnectorSecurityTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Security/LdapConnectorSecurityTests.cs: missing ConfigureAwait(false)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Snapshots/LdapConnectorSnapshotTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Snapshots/LdapConnectorSnapshotTests.cs: missing ConfigureAwait(false)
+- Service locator matches:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/LdapPluginOptionsTests.cs:291 var provider = services.BuildServiceProvider();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/LdapPluginOptionsTests.cs:292 var monitor = provider.GetRequiredService<IOptionsMonitor<LdapPluginOptions>>();
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Align interface/field/const naming to standards.
+- Move and sort using directives (outside namespace).
+- Remove overrides that disable TreatWarningsAsErrors.
+- Rename async methods and avoid blocking async calls.
+- Replace service locator usage with constructor injection.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 16
+- Files with issues: 15
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/LdapPluginOptionsTests.cs | FileLength>100; PrivateFieldNaming; ServiceLocator; UsingNotSorted | Remove service locator usage; use constructor injection.; Rename private fields to _camelCase.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Claims/LdapClaimsCacheTests.cs | AsyncNaming; ConfigureAwaitMissing; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Rename async methods to end with Async.; Sort using directives alphabetically. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Claims/LdapClaimsEnricherTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Rename async methods to end with Async.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/ClientProvisioning/LdapCapabilityProbeTests.cs | AsyncNaming; ConfigureAwaitMissing; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Rename async methods to end with Async.; Sort using directives alphabetically. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/ClientProvisioning/LdapCapabilitySnapshotCacheTests.cs | UsingNotSorted | Sort using directives alphabetically. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/ClientProvisioning/LdapClientProvisioningStoreTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; PrivateFieldNaming; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Credentials/LdapCredentialStoreTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; PrivateFieldNaming; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Fakes/FakeLdapClaimsCache.cs | UsingNotSorted | Sort using directives alphabetically. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Fakes/FakeLdapConnectionFactory.cs | PrivateFieldNaming; UsingNotSorted | Rename private fields to _camelCase.; Sort using directives alphabetically. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Resilience/LdapConnectorResilienceTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; PrivateFieldNaming; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Security/LdapConnectorSecurityTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; PrivateFieldNaming; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/Snapshots/LdapConnectorSnapshotTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; PrivateFieldNaming; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/TestHelpers/TestAirgapAuditStore.cs | UsingNotSorted | Sort using directives alphabetically. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/TestHelpers/TestOptionsMonitor.cs | PrivateFieldNaming; UsingNotSorted | Rename private fields to _camelCase.; Sort using directives alphabetically. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/TestHelpers/TestTimeProvider.cs | PrivateFieldNaming | Rename private fields to _camelCase. |
+
+## Testing Fullness Findings
+- Status: PASS
+- Expected layers (heuristic): 
+- Detected test projects: none
+- Missing layers: none
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- None.

docs/implplan-blocked/audits/csproj-standards/src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/StellaOps.Authority.Plugin.Ldap.csproj

@@ -0,0 +1,121 @@
+# Audit - StellaOps.Authority.Plugin.Ldap
+
+## Project
+- Path: src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/StellaOps.Authority.Plugin.Ldap.csproj
+- Module: Authority
+- Kind: Library
+- Audit date (UTC): 2026-01-30
+- Files scanned: 24
+- Files with issues: 23
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true false
+- Deterministic: inherited true
+- 100-line rule violations: 9
+- Namespace violations: 23
+- Using directive violations: 0
+- Naming violations (interfaces/fields/const/async): 0
+- Service locator usage (BuildServiceProvider/GetService): 0
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/LdapIdentityProviderPlugin.cs (240 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/LdapPluginOptions.cs (784 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/LdapPluginRegistrar.cs (110 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/Claims/LdapClaimsEnricher.cs (249 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/ClientProvisioning/LdapCapabilityProbe.cs (162 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/ClientProvisioning/LdapClientProvisioningStore.cs (439 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/ClientProvisioning/LdapDistinguishedNameHelper.cs (114 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/Connections/DirectoryServicesLdapConnectionFactory.cs (398 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/Credentials/LdapCredentialStore.cs (668 lines)
+- Namespace issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/LdapIdentityProviderPlugin.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/LdapPluginOptions.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/LdapPluginRegistrar.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/Claims/ILdapClaimsCache.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/Claims/InMemoryLdapClaimsCache.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/Claims/LdapClaimsEnricher.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/Claims/MessagingLdapClaimsCache.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/ClientProvisioning/LdapCapabilityProbe.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/ClientProvisioning/LdapCapabilitySnapshotCache.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/ClientProvisioning/LdapClientProvisioningStore.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/ClientProvisioning/LdapDistinguishedNameHelper.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/Connections/DirectoryServicesLdapConnectionFactory.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/Connections/ILdapConnectionFactory.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/Connections/LdapExceptions.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/Credentials/LdapCredentialStore.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/Monitoring/LdapMetrics.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/obj/Debug/net10.0/StellaOps.Authority.Plugin.Ldap.AssemblyInfo.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/obj/Debug/net10.0/StellaOps.Authority.Plugin.Ldap.GlobalUsings.g.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/obj/Release/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/obj/Release/net10.0/StellaOps.Authority.Plugin.Ldap.AssemblyInfo.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/obj/Release/net10.0/StellaOps.Authority.Plugin.Ldap.GlobalUsings.g.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/Security/LdapSecretResolver.cs: missing namespace
+- Using directive issues:
+  - none
+- Naming issues:
+  - none
+- Async issues:
+  - none
+- Service locator matches:
+  - none
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Normalize namespaces to file-scoped StellaOps.<Area>.
+- Remove overrides that disable TreatWarningsAsErrors.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 24
+- Files with issues: 23
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/LdapIdentityProviderPlugin.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/LdapPluginOptions.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/LdapPluginRegistrar.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/Claims/ILdapClaimsCache.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/Claims/InMemoryLdapClaimsCache.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/Claims/LdapClaimsEnricher.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/Claims/MessagingLdapClaimsCache.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/ClientProvisioning/LdapCapabilityProbe.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/ClientProvisioning/LdapCapabilitySnapshotCache.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/ClientProvisioning/LdapClientProvisioningStore.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/ClientProvisioning/LdapDistinguishedNameHelper.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/Connections/DirectoryServicesLdapConnectionFactory.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/Connections/ILdapConnectionFactory.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/Connections/LdapExceptions.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/Credentials/LdapCredentialStore.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/Monitoring/LdapMetrics.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/obj/Debug/net10.0/StellaOps.Authority.Plugin.Ldap.AssemblyInfo.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/obj/Debug/net10.0/StellaOps.Authority.Plugin.Ldap.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/obj/Release/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/obj/Release/net10.0/StellaOps.Authority.Plugin.Ldap.AssemblyInfo.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/obj/Release/net10.0/StellaOps.Authority.Plugin.Ldap.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/Security/LdapSecretResolver.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+
+## Testing Fullness Findings
+- Status: FAIL
+- Expected layers (heuristic): Unit
+- Detected test projects: src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/StellaOps.Authority.Plugin.Ldap.Tests.csproj [Security]
+- Missing layers: Unit
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- Add or expand test projects to cover missing layers.
+- Ensure tests use deterministic fixtures and offline harnesses.

docs/implplan-blocked/audits/csproj-standards/src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/StellaOps.Authority.Plugin.Ldap.md

@@ -0,0 +1,134 @@
+# Audit - StellaOps.Authority.Plugin.Ldap
+
+## Project
+- Path: src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/StellaOps.Authority.Plugin.Ldap.csproj
+- Module: Authority
+- Kind: Plugin
+- Audit date (UTC): 2026-01-31
+- Files scanned: 18
+- Files with issues: 12
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true false
+- Deterministic: inherited true
+- 100-line rule violations: 9
+- Namespace violations: 0
+- Using directive violations: 2
+- Naming violations (interfaces/fields/const/async): 15
+- Service locator usage (BuildServiceProvider/GetService): 30
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/LdapIdentityProviderPlugin.cs (241 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/LdapPluginOptions.cs (784 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/LdapPluginRegistrar.cs (111 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/Claims/LdapClaimsEnricher.cs (250 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/ClientProvisioning/LdapCapabilityProbe.cs (163 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/ClientProvisioning/LdapClientProvisioningStore.cs (440 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/ClientProvisioning/LdapDistinguishedNameHelper.cs (114 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/Connections/DirectoryServicesLdapConnectionFactory.cs (399 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/Credentials/LdapCredentialStore.cs (669 lines)
+- Namespace issues:
+  - none
+- Using directive issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/ClientProvisioning/LdapCapabilityProbe.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/Connections/DirectoryServicesLdapConnectionFactory.cs: using directives inside namespace
+- Naming issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/LdapIdentityProviderPlugin.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/LdapPluginOptions.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/Claims/InMemoryLdapClaimsCache.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/Claims/LdapClaimsEnricher.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/ClientProvisioning/LdapCapabilityProbe.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/ClientProvisioning/LdapClientProvisioningStore.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/Connections/DirectoryServicesLdapConnectionFactory.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/Credentials/LdapCredentialStore.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/Monitoring/LdapMetrics.cs: private field naming
+- Async issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/LdapIdentityProviderPlugin.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/Claims/MessagingLdapClaimsCache.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/ClientProvisioning/LdapCapabilityProbe.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/ClientProvisioning/LdapClientProvisioningStore.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/Credentials/LdapCredentialStore.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/Credentials/LdapCredentialStore.cs: blocking async usage
+- Service locator matches:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/LdapPluginRegistrar.cs:44 sp.GetRequiredService<IOptionsMonitor<LdapPluginOptions>>(),
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/LdapPluginRegistrar.cs:45 sp.GetRequiredService<ILogger<DirectoryServicesLdapConnectionFactory>>(),
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/LdapPluginRegistrar.cs:46 sp.GetRequiredService<LdapMetrics>()));
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/LdapPluginRegistrar.cs:50 sp.GetRequiredService<IOptionsMonitor<LdapPluginOptions>>(),
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/LdapPluginRegistrar.cs:51 sp.GetRequiredService<ILdapConnectionFactory>(),
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/LdapPluginRegistrar.cs:52 sp.GetRequiredService<ILogger<LdapCredentialStore>>(),
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/LdapPluginRegistrar.cs:53 sp.GetRequiredService<LdapMetrics>(),
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/LdapPluginRegistrar.cs:54 sp.GetRequiredService<IAuthorityAirgapAuditStore>(),
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/LdapPluginRegistrar.cs:59 sp.GetRequiredService<IAuthorityClientStore>(),
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/LdapPluginRegistrar.cs:60 sp.GetRequiredService<IAuthorityRevocationStore>(),
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/LdapPluginRegistrar.cs:61 sp.GetRequiredService<ILdapConnectionFactory>(),
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/LdapPluginRegistrar.cs:62 sp.GetRequiredService<IOptionsMonitor<LdapPluginOptions>>(),
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/LdapPluginRegistrar.cs:63 sp.GetRequiredService<IAuthorityAirgapAuditStore>(),
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/LdapPluginRegistrar.cs:64 sp.GetRequiredService<TimeProvider>(),
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/LdapPluginRegistrar.cs:65 sp.GetRequiredService<ILogger<LdapClientProvisioningStore>>()));
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/LdapPluginRegistrar.cs:69 var optionsMonitor = sp.GetRequiredService<IOptionsMonitor<LdapPluginOptions>>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/LdapPluginRegistrar.cs:86 sp.GetRequiredService<ILdapConnectionFactory>(),
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/LdapPluginRegistrar.cs:87 sp.GetRequiredService<IOptionsMonitor<LdapPluginOptions>>(),
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/LdapPluginRegistrar.cs:88 sp.GetRequiredService<ILdapClaimsCache>(),
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/LdapPluginRegistrar.cs:90 sp.GetRequiredService<ILogger<LdapClaimsEnricher>>()));
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/LdapPluginRegistrar.cs:92 context.Services.AddScoped<IClaimsEnricher>(sp => sp.GetRequiredService<LdapClaimsEnricher>());
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/LdapPluginRegistrar.cs:94 context.Services.AddScoped<IUserCredentialStore>(sp => sp.GetRequiredService<LdapCredentialStore>());
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/LdapPluginRegistrar.cs:98 sp.GetRequiredService<LdapCredentialStore>(),
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/LdapPluginRegistrar.cs:99 sp.GetRequiredService<LdapClaimsEnricher>(),
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/LdapPluginRegistrar.cs:100 sp.GetRequiredService<ILdapConnectionFactory>(),
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/LdapPluginRegistrar.cs:101 sp.GetRequiredService<IOptionsMonitor<LdapPluginOptions>>(),
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/LdapPluginRegistrar.cs:102 sp.GetRequiredService<LdapClientProvisioningStore>(),
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/LdapPluginRegistrar.cs:103 sp.GetRequiredService<ILogger<LdapIdentityProviderPlugin>>()));
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/LdapPluginRegistrar.cs:105 context.Services.AddScoped<IClientProvisioningStore>(sp => sp.GetRequiredService<LdapClientProvisioningStore>());
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/LdapPluginRegistrar.cs:109 => services.GetService<TimeProvider>() ?? TimeProvider.System;
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Align interface/field/const naming to standards.
+- Move and sort using directives (outside namespace).
+- Remove overrides that disable TreatWarningsAsErrors.
+- Rename async methods and avoid blocking async calls.
+- Replace service locator usage with constructor injection.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 18
+- Files with issues: 12
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/LdapIdentityProviderPlugin.cs | AsyncNaming; FileLength>100; PrivateFieldNaming | Rename async methods to end with Async.; Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/LdapPluginOptions.cs | FileLength>100; PrivateFieldNaming | Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/LdapPluginRegistrar.cs | FileLength>100; ServiceLocator | Remove service locator usage; use constructor injection.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/Claims/InMemoryLdapClaimsCache.cs | PrivateFieldNaming | Rename private fields to _camelCase. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/Claims/LdapClaimsEnricher.cs | FileLength>100; PrivateFieldNaming | Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/Claims/MessagingLdapClaimsCache.cs | AsyncNaming | Rename async methods to end with Async. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/ClientProvisioning/LdapCapabilityProbe.cs | AsyncNaming; FileLength>100; PrivateFieldNaming; UsingInsideNamespace | Move using directives outside namespace.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/ClientProvisioning/LdapClientProvisioningStore.cs | AsyncNaming; FileLength>100; PrivateFieldNaming | Rename async methods to end with Async.; Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/ClientProvisioning/LdapDistinguishedNameHelper.cs | FileLength>100 | Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/Connections/DirectoryServicesLdapConnectionFactory.cs | FileLength>100; PrivateFieldNaming; UsingInsideNamespace | Move using directives outside namespace.; Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/Credentials/LdapCredentialStore.cs | AsyncNaming; BlockingAsync; FileLength>100; PrivateFieldNaming | Rename async methods to end with Async.; Rename private fields to _camelCase.; Replace .Result/.Wait/GetAwaiter().GetResult() with await.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap/Monitoring/LdapMetrics.cs | PrivateFieldNaming | Rename private fields to _camelCase. |
+
+## Testing Fullness Findings
+- Status: FAIL
+- Expected layers (heuristic): Unit
+- Detected test projects: src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/StellaOps.Authority.Plugin.Ldap.Tests.csproj [Security]
+- Missing layers: Unit
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- Add or expand test projects to cover missing layers.
+- Ensure tests use deterministic fixtures and offline harnesses.

docs/implplan-blocked/audits/csproj-standards/src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/StellaOps.Authority.Plugin.Oidc.Tests.csproj

@@ -0,0 +1,95 @@
+# Audit - StellaOps.Authority.Plugin.Oidc.Tests
+
+## Project
+- Path: src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/StellaOps.Authority.Plugin.Oidc.Tests.csproj
+- Module: Authority
+- Kind: Library
+- Audit date (UTC): 2026-01-30
+- Files scanned: 12
+- Files with issues: 12
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: inherited false
+- Deterministic: inherited true
+- 100-line rule violations: 5
+- Namespace violations: 12
+- Using directive violations: 0
+- Naming violations (interfaces/fields/const/async): 0
+- Service locator usage (BuildServiceProvider/GetService): 0
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/OidcIdentityProviderPluginTests.cs (149 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/Credentials/OidcCredentialStoreTests.cs (267 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/Resilience/OidcConnectorResilienceTests.cs (374 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/Security/OidcConnectorSecurityTests.cs (548 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/Snapshots/OidcConnectorSnapshotTests.cs (307 lines)
+- Namespace issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/OidcIdentityProviderPluginTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/OidcPluginOptionsTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/Credentials/OidcCredentialStoreTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/obj/Debug/net10.0/SelfRegisteredExtensions.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/obj/Debug/net10.0/StellaOps.Authority.Plugin.Oidc.Tests.AssemblyInfo.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/obj/Debug/net10.0/StellaOps.Authority.Plugin.Oidc.Tests.GlobalUsings.g.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/obj/Debug/net10.0/XunitAutoGeneratedEntryPoint.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/obj/Release/net10.0/StellaOps.Authority.Plugin.Oidc.Tests.GlobalUsings.g.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/Resilience/OidcConnectorResilienceTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/Security/OidcConnectorSecurityTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/Snapshots/OidcConnectorSnapshotTests.cs: missing namespace
+- Using directive issues:
+  - none
+- Naming issues:
+  - none
+- Async issues:
+  - none
+- Service locator matches:
+  - none
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Normalize namespaces to file-scoped StellaOps.<Area>.
+- Remove overrides that disable TreatWarningsAsErrors.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 12
+- Files with issues: 12
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/OidcIdentityProviderPluginTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/OidcPluginOptionsTests.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/Credentials/OidcCredentialStoreTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/obj/Debug/net10.0/SelfRegisteredExtensions.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/obj/Debug/net10.0/StellaOps.Authority.Plugin.Oidc.Tests.AssemblyInfo.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/obj/Debug/net10.0/StellaOps.Authority.Plugin.Oidc.Tests.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/obj/Debug/net10.0/XunitAutoGeneratedEntryPoint.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/obj/Release/net10.0/StellaOps.Authority.Plugin.Oidc.Tests.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/Resilience/OidcConnectorResilienceTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/Security/OidcConnectorSecurityTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/Snapshots/OidcConnectorSnapshotTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+
+## Testing Fullness Findings
+- Status: FAIL
+- Expected layers (heuristic): Unit
+- Detected test projects: none
+- Missing layers: Unit
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- Add or expand test projects to cover missing layers.
+- Ensure tests use deterministic fixtures and offline harnesses.

docs/implplan-blocked/audits/csproj-standards/src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/StellaOps.Authority.Plugin.Oidc.Tests.md

@@ -0,0 +1,96 @@
+# Audit - StellaOps.Authority.Plugin.Oidc.Tests
+
+## Project
+- Path: src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/StellaOps.Authority.Plugin.Oidc.Tests.csproj
+- Module: Authority
+- Kind: Test
+- Audit date (UTC): 2026-01-31
+- Files scanned: 6
+- Files with issues: 6
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: inherited false
+- Deterministic: inherited true
+- 100-line rule violations: 5
+- Namespace violations: 0
+- Using directive violations: 7
+- Naming violations (interfaces/fields/const/async): 13
+- Service locator usage (BuildServiceProvider/GetService): 0
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/OidcIdentityProviderPluginTests.cs (149 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/Credentials/OidcCredentialStoreTests.cs (267 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/Resilience/OidcConnectorResilienceTests.cs (374 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/Security/OidcConnectorSecurityTests.cs (548 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/Snapshots/OidcConnectorSnapshotTests.cs (307 lines)
+- Namespace issues:
+  - none
+- Using directive issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/OidcIdentityProviderPluginTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/OidcPluginOptionsTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/Credentials/OidcCredentialStoreTests.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/Credentials/OidcCredentialStoreTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/Resilience/OidcConnectorResilienceTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/Security/OidcConnectorSecurityTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/Snapshots/OidcConnectorSnapshotTests.cs: using directives not sorted
+- Naming issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/OidcIdentityProviderPluginTests.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/Credentials/OidcCredentialStoreTests.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/Snapshots/OidcConnectorSnapshotTests.cs: private field naming
+- Async issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/OidcIdentityProviderPluginTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/OidcIdentityProviderPluginTests.cs: missing ConfigureAwait(false)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/Credentials/OidcCredentialStoreTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/Credentials/OidcCredentialStoreTests.cs: missing ConfigureAwait(false)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/Resilience/OidcConnectorResilienceTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/Resilience/OidcConnectorResilienceTests.cs: missing ConfigureAwait(false)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/Security/OidcConnectorSecurityTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/Security/OidcConnectorSecurityTests.cs: missing ConfigureAwait(false)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/Snapshots/OidcConnectorSnapshotTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/Snapshots/OidcConnectorSnapshotTests.cs: missing ConfigureAwait(false)
+- Service locator matches:
+  - none
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Align interface/field/const naming to standards.
+- Move and sort using directives (outside namespace).
+- Remove overrides that disable TreatWarningsAsErrors.
+- Rename async methods and avoid blocking async calls.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 6
+- Files with issues: 6
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/OidcIdentityProviderPluginTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; PrivateFieldNaming; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/OidcPluginOptionsTests.cs | UsingNotSorted | Sort using directives alphabetically. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/Credentials/OidcCredentialStoreTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; PrivateFieldNaming; UsingInsideNamespace; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Move using directives outside namespace.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/Resilience/OidcConnectorResilienceTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Rename async methods to end with Async.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/Security/OidcConnectorSecurityTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Rename async methods to end with Async.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/Snapshots/OidcConnectorSnapshotTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; PrivateFieldNaming; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+
+## Testing Fullness Findings
+- Status: PASS
+- Expected layers (heuristic): 
+- Detected test projects: none
+- Missing layers: none
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- None.

docs/implplan-blocked/audits/csproj-standards/src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc/StellaOps.Authority.Plugin.Oidc.csproj

@@ -0,0 +1,91 @@
+# Audit - StellaOps.Authority.Plugin.Oidc
+
+## Project
+- Path: src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc/StellaOps.Authority.Plugin.Oidc.csproj
+- Module: Authority
+- Kind: Library
+- Audit date (UTC): 2026-01-30
+- Files scanned: 12
+- Files with issues: 11
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true false
+- Deterministic: inherited true
+- 100-line rule violations: 3
+- Namespace violations: 11
+- Using directive violations: 0
+- Naming violations (interfaces/fields/const/async): 0
+- Service locator usage (BuildServiceProvider/GetService): 0
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc/OidcIdentityProviderPlugin.cs (132 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc/OidcPluginOptions.cs (266 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc/Credentials/OidcCredentialStore.cs (303 lines)
+- Namespace issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc/OidcIdentityProviderPlugin.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc/OidcPluginOptions.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc/OidcPluginRegistrar.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc/Claims/OidcClaimsEnricher.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc/Credentials/OidcCredentialStore.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc/obj/Debug/net10.0/StellaOps.Authority.Plugin.Oidc.AssemblyInfo.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc/obj/Debug/net10.0/StellaOps.Authority.Plugin.Oidc.GlobalUsings.g.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc/obj/Release/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc/obj/Release/net10.0/StellaOps.Authority.Plugin.Oidc.AssemblyInfo.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc/obj/Release/net10.0/StellaOps.Authority.Plugin.Oidc.GlobalUsings.g.cs: missing namespace
+- Using directive issues:
+  - none
+- Naming issues:
+  - none
+- Async issues:
+  - none
+- Service locator matches:
+  - none
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Normalize namespaces to file-scoped StellaOps.<Area>.
+- Remove overrides that disable TreatWarningsAsErrors.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 12
+- Files with issues: 11
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc/OidcIdentityProviderPlugin.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc/OidcPluginOptions.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc/OidcPluginRegistrar.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc/Claims/OidcClaimsEnricher.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc/Credentials/OidcCredentialStore.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc/obj/Debug/net10.0/StellaOps.Authority.Plugin.Oidc.AssemblyInfo.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc/obj/Debug/net10.0/StellaOps.Authority.Plugin.Oidc.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc/obj/Release/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc/obj/Release/net10.0/StellaOps.Authority.Plugin.Oidc.AssemblyInfo.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc/obj/Release/net10.0/StellaOps.Authority.Plugin.Oidc.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+
+## Testing Fullness Findings
+- Status: FAIL
+- Expected layers (heuristic): Unit
+- Detected test projects: src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/StellaOps.Authority.Plugin.Oidc.Tests.csproj [Security]
+- Missing layers: Unit
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- Add or expand test projects to cover missing layers.
+- Ensure tests use deterministic fixtures and offline harnesses.

docs/implplan-blocked/audits/csproj-standards/src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc/StellaOps.Authority.Plugin.Oidc.md

@@ -0,0 +1,83 @@
+# Audit - StellaOps.Authority.Plugin.Oidc
+
+## Project
+- Path: src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc/StellaOps.Authority.Plugin.Oidc.csproj
+- Module: Authority
+- Kind: Plugin
+- Audit date (UTC): 2026-01-31
+- Files scanned: 6
+- Files with issues: 5
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true false
+- Deterministic: inherited true
+- 100-line rule violations: 3
+- Namespace violations: 0
+- Using directive violations: 1
+- Naming violations (interfaces/fields/const/async): 4
+- Service locator usage (BuildServiceProvider/GetService): 4
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc/OidcIdentityProviderPlugin.cs (133 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc/OidcPluginOptions.cs (266 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc/Credentials/OidcCredentialStore.cs (304 lines)
+- Namespace issues:
+  - none
+- Using directive issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc/OidcIdentityProviderPlugin.cs: using directives inside namespace
+- Naming issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc/OidcIdentityProviderPlugin.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc/Claims/OidcClaimsEnricher.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc/Credentials/OidcCredentialStore.cs: private field naming
+- Async issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc/OidcIdentityProviderPlugin.cs: async method naming
+- Service locator matches:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc/OidcPluginRegistrar.cs:44 var optionsMonitor = serviceProvider.GetRequiredService<IOptionsMonitor<OidcPluginOptions>>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc/OidcPluginRegistrar.cs:45 var loggerFactory = serviceProvider.GetRequiredService<ILoggerFactory>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc/OidcPluginRegistrar.cs:49 var sessionCache = serviceProvider.GetRequiredService<IMemoryCache>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc/OidcPluginRegistrar.cs:50 var httpClientFactory = serviceProvider.GetRequiredService<IHttpClientFactory>();
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Align interface/field/const naming to standards.
+- Move and sort using directives (outside namespace).
+- Remove overrides that disable TreatWarningsAsErrors.
+- Rename async methods and avoid blocking async calls.
+- Replace service locator usage with constructor injection.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 6
+- Files with issues: 5
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc/OidcIdentityProviderPlugin.cs | AsyncNaming; FileLength>100; PrivateFieldNaming; UsingInsideNamespace | Move using directives outside namespace.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc/OidcPluginOptions.cs | FileLength>100 | Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc/OidcPluginRegistrar.cs | ServiceLocator | Remove service locator usage; use constructor injection. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc/Claims/OidcClaimsEnricher.cs | PrivateFieldNaming | Rename private fields to _camelCase. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc/Credentials/OidcCredentialStore.cs | FileLength>100; PrivateFieldNaming | Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+
+## Testing Fullness Findings
+- Status: FAIL
+- Expected layers (heuristic): Unit
+- Detected test projects: src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/StellaOps.Authority.Plugin.Oidc.Tests.csproj [Security]
+- Missing layers: Unit
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- Add or expand test projects to cover missing layers.
+- Ensure tests use deterministic fixtures and offline harnesses.

docs/implplan-blocked/audits/csproj-standards/src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/StellaOps.Authority.Plugin.Saml.Tests.csproj

@@ -0,0 +1,96 @@
+# Audit - StellaOps.Authority.Plugin.Saml.Tests
+
+## Project
+- Path: src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/StellaOps.Authority.Plugin.Saml.Tests.csproj
+- Module: Authority
+- Kind: Library
+- Audit date (UTC): 2026-01-30
+- Files scanned: 13
+- Files with issues: 13
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: inherited false
+- Deterministic: inherited true
+- 100-line rule violations: 4
+- Namespace violations: 13
+- Using directive violations: 0
+- Naming violations (interfaces/fields/const/async): 0
+- Service locator usage (BuildServiceProvider/GetService): 0
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/SamlIdentityProviderPluginTests.cs (147 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/Resilience/SamlConnectorResilienceTests.cs (422 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/Security/SamlConnectorSecurityTests.cs (496 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/Snapshots/SamlConnectorSnapshotTests.cs (328 lines)
+- Namespace issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/SamlIdentityProviderPluginTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/SamlMetadataParserTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/SamlPluginOptionsTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/Credentials/SamlCredentialStoreTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/obj/Debug/net10.0/SelfRegisteredExtensions.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/obj/Debug/net10.0/StellaOps.Authority.Plugin.Saml.Tests.AssemblyInfo.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/obj/Debug/net10.0/StellaOps.Authority.Plugin.Saml.Tests.GlobalUsings.g.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/obj/Debug/net10.0/XunitAutoGeneratedEntryPoint.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/obj/Release/net10.0/StellaOps.Authority.Plugin.Saml.Tests.GlobalUsings.g.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/Resilience/SamlConnectorResilienceTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/Security/SamlConnectorSecurityTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/Snapshots/SamlConnectorSnapshotTests.cs: missing namespace
+- Using directive issues:
+  - none
+- Naming issues:
+  - none
+- Async issues:
+  - none
+- Service locator matches:
+  - none
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Normalize namespaces to file-scoped StellaOps.<Area>.
+- Remove overrides that disable TreatWarningsAsErrors.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 13
+- Files with issues: 13
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/SamlIdentityProviderPluginTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/SamlMetadataParserTests.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/SamlPluginOptionsTests.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/Credentials/SamlCredentialStoreTests.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/obj/Debug/net10.0/SelfRegisteredExtensions.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/obj/Debug/net10.0/StellaOps.Authority.Plugin.Saml.Tests.AssemblyInfo.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/obj/Debug/net10.0/StellaOps.Authority.Plugin.Saml.Tests.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/obj/Debug/net10.0/XunitAutoGeneratedEntryPoint.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/obj/Release/net10.0/StellaOps.Authority.Plugin.Saml.Tests.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/Resilience/SamlConnectorResilienceTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/Security/SamlConnectorSecurityTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/Snapshots/SamlConnectorSnapshotTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+
+## Testing Fullness Findings
+- Status: FAIL
+- Expected layers (heuristic): Unit
+- Detected test projects: none
+- Missing layers: Unit
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- Add or expand test projects to cover missing layers.
+- Ensure tests use deterministic fixtures and offline harnesses.

docs/implplan-blocked/audits/csproj-standards/src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/StellaOps.Authority.Plugin.Saml.Tests.md

@@ -0,0 +1,94 @@
+# Audit - StellaOps.Authority.Plugin.Saml.Tests
+
+## Project
+- Path: src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/StellaOps.Authority.Plugin.Saml.Tests.csproj
+- Module: Authority
+- Kind: Test
+- Audit date (UTC): 2026-01-31
+- Files scanned: 7
+- Files with issues: 6
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: inherited false
+- Deterministic: inherited true
+- 100-line rule violations: 4
+- Namespace violations: 0
+- Using directive violations: 9
+- Naming violations (interfaces/fields/const/async): 10
+- Service locator usage (BuildServiceProvider/GetService): 0
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/SamlIdentityProviderPluginTests.cs (147 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/Resilience/SamlConnectorResilienceTests.cs (422 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/Security/SamlConnectorSecurityTests.cs (496 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/Snapshots/SamlConnectorSnapshotTests.cs (328 lines)
+- Namespace issues:
+  - none
+- Using directive issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/SamlIdentityProviderPluginTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/SamlMetadataParserTests.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/SamlMetadataParserTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/SamlPluginOptionsTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/Resilience/SamlConnectorResilienceTests.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/Resilience/SamlConnectorResilienceTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/Security/SamlConnectorSecurityTests.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/Security/SamlConnectorSecurityTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/Snapshots/SamlConnectorSnapshotTests.cs: using directives not sorted
+- Naming issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/SamlIdentityProviderPluginTests.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/Snapshots/SamlConnectorSnapshotTests.cs: private field naming
+- Async issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/SamlIdentityProviderPluginTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/SamlIdentityProviderPluginTests.cs: missing ConfigureAwait(false)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/Resilience/SamlConnectorResilienceTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/Resilience/SamlConnectorResilienceTests.cs: missing ConfigureAwait(false)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/Security/SamlConnectorSecurityTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/Security/SamlConnectorSecurityTests.cs: missing ConfigureAwait(false)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/Snapshots/SamlConnectorSnapshotTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/Snapshots/SamlConnectorSnapshotTests.cs: missing ConfigureAwait(false)
+- Service locator matches:
+  - none
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Align interface/field/const naming to standards.
+- Move and sort using directives (outside namespace).
+- Remove overrides that disable TreatWarningsAsErrors.
+- Rename async methods and avoid blocking async calls.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 7
+- Files with issues: 6
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/SamlIdentityProviderPluginTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; PrivateFieldNaming; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/SamlMetadataParserTests.cs | UsingInsideNamespace; UsingNotSorted | Move using directives outside namespace.; Sort using directives alphabetically. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/SamlPluginOptionsTests.cs | UsingNotSorted | Sort using directives alphabetically. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/Resilience/SamlConnectorResilienceTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; UsingInsideNamespace; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Move using directives outside namespace.; Rename async methods to end with Async.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/Security/SamlConnectorSecurityTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; UsingInsideNamespace; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Move using directives outside namespace.; Rename async methods to end with Async.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/Snapshots/SamlConnectorSnapshotTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; PrivateFieldNaming; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+
+## Testing Fullness Findings
+- Status: PASS
+- Expected layers (heuristic): 
+- Detected test projects: none
+- Missing layers: none
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- None.

docs/implplan-blocked/audits/csproj-standards/src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/StellaOps.Authority.Plugin.Saml.csproj

@@ -0,0 +1,93 @@
+# Audit - StellaOps.Authority.Plugin.Saml
+
+## Project
+- Path: src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/StellaOps.Authority.Plugin.Saml.csproj
+- Module: Authority
+- Kind: Library
+- Audit date (UTC): 2026-01-30
+- Files scanned: 13
+- Files with issues: 12
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true false
+- Deterministic: inherited true
+- 100-line rule violations: 3
+- Namespace violations: 12
+- Using directive violations: 0
+- Naming violations (interfaces/fields/const/async): 0
+- Service locator usage (BuildServiceProvider/GetService): 0
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/SamlIdentityProviderPlugin.cs (135 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/SamlPluginOptions.cs (248 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/Credentials/SamlCredentialStore.cs (467 lines)
+- Namespace issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/SamlIdentityProviderPlugin.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/SamlMetadataParser.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/SamlPluginOptions.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/SamlPluginRegistrar.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/Claims/SamlClaimsEnricher.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/Credentials/SamlCredentialStore.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/obj/Debug/net10.0/StellaOps.Authority.Plugin.Saml.AssemblyInfo.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/obj/Debug/net10.0/StellaOps.Authority.Plugin.Saml.GlobalUsings.g.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/obj/Release/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/obj/Release/net10.0/StellaOps.Authority.Plugin.Saml.AssemblyInfo.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/obj/Release/net10.0/StellaOps.Authority.Plugin.Saml.GlobalUsings.g.cs: missing namespace
+- Using directive issues:
+  - none
+- Naming issues:
+  - none
+- Async issues:
+  - none
+- Service locator matches:
+  - none
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Normalize namespaces to file-scoped StellaOps.<Area>.
+- Remove overrides that disable TreatWarningsAsErrors.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 13
+- Files with issues: 12
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/SamlIdentityProviderPlugin.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/SamlMetadataParser.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/SamlPluginOptions.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/SamlPluginRegistrar.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/Claims/SamlClaimsEnricher.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/Credentials/SamlCredentialStore.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/obj/Debug/net10.0/StellaOps.Authority.Plugin.Saml.AssemblyInfo.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/obj/Debug/net10.0/StellaOps.Authority.Plugin.Saml.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/obj/Release/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/obj/Release/net10.0/StellaOps.Authority.Plugin.Saml.AssemblyInfo.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/obj/Release/net10.0/StellaOps.Authority.Plugin.Saml.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+
+## Testing Fullness Findings
+- Status: FAIL
+- Expected layers (heuristic): Unit
+- Detected test projects: src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/StellaOps.Authority.Plugin.Saml.Tests.csproj [Security]
+- Missing layers: Unit
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- Add or expand test projects to cover missing layers.
+- Ensure tests use deterministic fixtures and offline harnesses.

docs/implplan-blocked/audits/csproj-standards/src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/StellaOps.Authority.Plugin.Saml.md

@@ -0,0 +1,87 @@
+# Audit - StellaOps.Authority.Plugin.Saml
+
+## Project
+- Path: src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/StellaOps.Authority.Plugin.Saml.csproj
+- Module: Authority
+- Kind: Plugin
+- Audit date (UTC): 2026-01-31
+- Files scanned: 7
+- Files with issues: 6
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true false
+- Deterministic: inherited true
+- 100-line rule violations: 3
+- Namespace violations: 0
+- Using directive violations: 3
+- Naming violations (interfaces/fields/const/async): 5
+- Service locator usage (BuildServiceProvider/GetService): 4
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/SamlIdentityProviderPlugin.cs (136 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/SamlPluginOptions.cs (248 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/Credentials/SamlCredentialStore.cs (468 lines)
+- Namespace issues:
+  - none
+- Using directive issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/SamlIdentityProviderPlugin.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/SamlMetadataParser.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/Credentials/SamlCredentialStore.cs: using directives inside namespace
+- Naming issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/SamlIdentityProviderPlugin.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/Claims/SamlClaimsEnricher.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/Credentials/SamlCredentialStore.cs: private field naming
+- Async issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/SamlIdentityProviderPlugin.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/Credentials/SamlCredentialStore.cs: async method naming
+- Service locator matches:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/SamlPluginRegistrar.cs:44 var optionsMonitor = serviceProvider.GetRequiredService<IOptionsMonitor<SamlPluginOptions>>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/SamlPluginRegistrar.cs:45 var loggerFactory = serviceProvider.GetRequiredService<ILoggerFactory>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/SamlPluginRegistrar.cs:47 var sessionCache = serviceProvider.GetRequiredService<IMemoryCache>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/SamlPluginRegistrar.cs:48 var httpClientFactory = serviceProvider.GetRequiredService<IHttpClientFactory>();
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Align interface/field/const naming to standards.
+- Move and sort using directives (outside namespace).
+- Remove overrides that disable TreatWarningsAsErrors.
+- Rename async methods and avoid blocking async calls.
+- Replace service locator usage with constructor injection.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 7
+- Files with issues: 6
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/SamlIdentityProviderPlugin.cs | AsyncNaming; FileLength>100; PrivateFieldNaming; UsingInsideNamespace | Move using directives outside namespace.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/SamlMetadataParser.cs | UsingInsideNamespace | Move using directives outside namespace. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/SamlPluginOptions.cs | FileLength>100 | Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/SamlPluginRegistrar.cs | ServiceLocator | Remove service locator usage; use constructor injection. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/Claims/SamlClaimsEnricher.cs | PrivateFieldNaming | Rename private fields to _camelCase. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml/Credentials/SamlCredentialStore.cs | AsyncNaming; FileLength>100; PrivateFieldNaming; UsingInsideNamespace | Move using directives outside namespace.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+
+## Testing Fullness Findings
+- Status: FAIL
+- Expected layers (heuristic): Unit
+- Detected test projects: src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/StellaOps.Authority.Plugin.Saml.Tests.csproj [Security]
+- Missing layers: Unit
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- Add or expand test projects to cover missing layers.
+- Ensure tests use deterministic fixtures and offline harnesses.

docs/implplan-blocked/audits/csproj-standards/src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StellaOps.Authority.Plugin.Standard.Tests.csproj

@@ -0,0 +1,112 @@
+# Audit - StellaOps.Authority.Plugin.Standard.Tests
+
+## Project
+- Path: src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StellaOps.Authority.Plugin.Standard.Tests.csproj
+- Module: Authority
+- Kind: Library
+- Audit date (UTC): 2026-01-30
+- Files scanned: 16
+- Files with issues: 16
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: inherited false
+- Deterministic: inherited true
+- 100-line rule violations: 8
+- Namespace violations: 16
+- Using directive violations: 0
+- Naming violations (interfaces/fields/const/async): 0
+- Service locator usage (BuildServiceProvider/GetService): 6
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardClientProvisioningStoreTests.cs (233 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardPluginBootstrapperTests.cs (141 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardPluginOptionsTests.cs (189 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardPluginRegistrarTests.cs (424 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardUserCredentialStoreTests.cs (372 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/Security/CryptoPasswordHasherTests.cs (126 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/Security/StandardCredentialAuditLoggerTests.cs (261 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/TestDoubles/InMemoryUserRepository.cs (331 lines)
+- Namespace issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardClaimsEnricherTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardClientProvisioningStoreTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardIdentityProviderPluginTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardPluginBootstrapperTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardPluginOptionsTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardPluginRegistrarTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardUserCredentialStoreTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/obj/Debug/net10.0/SelfRegisteredExtensions.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/obj/Debug/net10.0/StellaOps.Authority.Plugin.Standard.Tests.AssemblyInfo.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/obj/Debug/net10.0/StellaOps.Authority.Plugin.Standard.Tests.GlobalUsings.g.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/obj/Debug/net10.0/XunitAutoGeneratedEntryPoint.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/obj/Release/net10.0/StellaOps.Authority.Plugin.Standard.Tests.GlobalUsings.g.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/Security/CryptoPasswordHasherTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/Security/StandardCredentialAuditLoggerTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/TestDoubles/InMemoryUserRepository.cs: missing namespace
+- Using directive issues:
+  - none
+- Naming issues:
+  - none
+- Async issues:
+  - none
+- Service locator matches:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardPluginBootstrapperTests.cs:67 using var provider = services.BuildServiceProvider();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardPluginRegistrarTests.cs:68 using var provider = services.BuildServiceProvider();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardPluginRegistrarTests.cs:129 using var provider = services.BuildServiceProvider();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardPluginRegistrarTests.cs:164 using var provider = services.BuildServiceProvider();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardPluginRegistrarTests.cs:204 using var provider = services.BuildServiceProvider();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardPluginRegistrarTests.cs:246 using var provider = services.BuildServiceProvider();
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Normalize namespaces to file-scoped StellaOps.<Area>.
+- Remove overrides that disable TreatWarningsAsErrors.
+- Replace service locator usage with constructor injection.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 16
+- Files with issues: 16
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardClaimsEnricherTests.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardClientProvisioningStoreTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardIdentityProviderPluginTests.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardPluginBootstrapperTests.cs | FileLength>100; NamespaceMissing; ServiceLocator | Add file-scoped namespace: namespace StellaOps.<Area>;; Remove service locator usage; use constructor injection.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardPluginOptionsTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardPluginRegistrarTests.cs | FileLength>100; NamespaceMissing; ServiceLocator | Add file-scoped namespace: namespace StellaOps.<Area>;; Remove service locator usage; use constructor injection.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardUserCredentialStoreTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/obj/Debug/net10.0/SelfRegisteredExtensions.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/obj/Debug/net10.0/StellaOps.Authority.Plugin.Standard.Tests.AssemblyInfo.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/obj/Debug/net10.0/StellaOps.Authority.Plugin.Standard.Tests.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/obj/Debug/net10.0/XunitAutoGeneratedEntryPoint.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/obj/Release/net10.0/StellaOps.Authority.Plugin.Standard.Tests.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/Security/CryptoPasswordHasherTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/Security/StandardCredentialAuditLoggerTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/TestDoubles/InMemoryUserRepository.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+
+## Testing Fullness Findings
+- Status: FAIL
+- Expected layers (heuristic): Unit
+- Detected test projects: none
+- Missing layers: Unit
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- Add or expand test projects to cover missing layers.
+- Ensure tests use deterministic fixtures and offline harnesses.

docs/implplan-blocked/audits/csproj-standards/src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StellaOps.Authority.Plugin.Standard.Tests.md

@@ -0,0 +1,136 @@
+# Audit - StellaOps.Authority.Plugin.Standard.Tests
+
+## Project
+- Path: src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StellaOps.Authority.Plugin.Standard.Tests.csproj
+- Module: Authority
+- Kind: Test
+- Audit date (UTC): 2026-01-31
+- Files scanned: 10
+- Files with issues: 10
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: inherited false
+- Deterministic: inherited true
+- 100-line rule violations: 8
+- Namespace violations: 0
+- Using directive violations: 14
+- Naming violations (interfaces/fields/const/async): 19
+- Service locator usage (BuildServiceProvider/GetService): 20
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardClientProvisioningStoreTests.cs (233 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardPluginBootstrapperTests.cs (141 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardPluginOptionsTests.cs (189 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardPluginRegistrarTests.cs (424 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardUserCredentialStoreTests.cs (372 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/Security/CryptoPasswordHasherTests.cs (126 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/Security/StandardCredentialAuditLoggerTests.cs (261 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/TestDoubles/InMemoryUserRepository.cs (331 lines)
+- Namespace issues:
+  - none
+- Using directive issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardClaimsEnricherTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardClientProvisioningStoreTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardIdentityProviderPluginTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardPluginBootstrapperTests.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardPluginBootstrapperTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardPluginOptionsTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardPluginRegistrarTests.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardPluginRegistrarTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardUserCredentialStoreTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/Security/CryptoPasswordHasherTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/Security/StandardCredentialAuditLoggerTests.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/Security/StandardCredentialAuditLoggerTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/TestDoubles/InMemoryUserRepository.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/TestDoubles/InMemoryUserRepository.cs: using directives not sorted
+- Naming issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardClientProvisioningStoreTests.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardPluginBootstrapperTests.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardPluginRegistrarTests.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardUserCredentialStoreTests.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/Security/StandardCredentialAuditLoggerTests.cs: private field naming
+- Async issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardClaimsEnricherTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardClaimsEnricherTests.cs: missing ConfigureAwait(false)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardClientProvisioningStoreTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardClientProvisioningStoreTests.cs: missing ConfigureAwait(false)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardIdentityProviderPluginTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardIdentityProviderPluginTests.cs: missing ConfigureAwait(false)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardPluginBootstrapperTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardPluginBootstrapperTests.cs: missing ConfigureAwait(false)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardPluginRegistrarTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardPluginRegistrarTests.cs: missing ConfigureAwait(false)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardUserCredentialStoreTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardUserCredentialStoreTests.cs: missing ConfigureAwait(false)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/Security/StandardCredentialAuditLoggerTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/Security/StandardCredentialAuditLoggerTests.cs: missing ConfigureAwait(false)
+- Service locator matches:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardPluginBootstrapperTests.cs:48 var optionsMonitor = sp.GetRequiredService<IOptionsMonitor<StandardPluginOptions>>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardPluginBootstrapperTests.cs:50 var cryptoProvider = sp.GetRequiredService<ICryptoProvider>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardPluginBootstrapperTests.cs:51 var auditLogger = sp.GetRequiredService<IStandardCredentialAuditLogger>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardPluginBootstrapperTests.cs:55 sp.GetRequiredService<IUserRepository>(),
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardPluginBootstrapperTests.cs:59 sp.GetRequiredService<TimeProvider>(),
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardPluginBootstrapperTests.cs:60 sp.GetRequiredService<IStandardIdGenerator>(),
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardPluginBootstrapperTests.cs:65 new StandardPluginBootstrapper("standard", sp.GetRequiredService<IServiceScopeFactory>(), NullLogger<StandardPluginBootstrapper>.Instance));
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardPluginBootstrapperTests.cs:67 using var provider = services.BuildServiceProvider();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardPluginBootstrapperTests.cs:68 var bootstrapper = provider.GetRequiredService<StandardPluginBootstrapper>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardPluginRegistrarTests.cs:68 using var provider = services.BuildServiceProvider();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardPluginRegistrarTests.cs:69 var hostedServices = provider.GetServices<IHostedService>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardPluginRegistrarTests.cs:79 var plugin = scope.ServiceProvider.GetRequiredService<IIdentityProviderPlugin>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardPluginRegistrarTests.cs:129 using var provider = services.BuildServiceProvider();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardPluginRegistrarTests.cs:131 _ = scope.ServiceProvider.GetRequiredService<StandardUserCredentialStore>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardPluginRegistrarTests.cs:164 using var provider = services.BuildServiceProvider();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardPluginRegistrarTests.cs:166 var plugin = scope.ServiceProvider.GetRequiredService<IIdentityProviderPlugin>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardPluginRegistrarTests.cs:204 using var provider = services.BuildServiceProvider();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardPluginRegistrarTests.cs:206 Assert.Throws<InvalidOperationException>(() => scope.ServiceProvider.GetRequiredService<IIdentityProviderPlugin>());
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardPluginRegistrarTests.cs:246 using var provider = services.BuildServiceProvider();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardPluginRegistrarTests.cs:247 var optionsMonitor = provider.GetRequiredService<IOptionsMonitor<StandardPluginOptions>>();
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Align interface/field/const naming to standards.
+- Move and sort using directives (outside namespace).
+- Remove overrides that disable TreatWarningsAsErrors.
+- Rename async methods and avoid blocking async calls.
+- Replace service locator usage with constructor injection.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 10
+- Files with issues: 10
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardClaimsEnricherTests.cs | AsyncNaming; ConfigureAwaitMissing; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Rename async methods to end with Async.; Sort using directives alphabetically. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardClientProvisioningStoreTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; PrivateFieldNaming; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardIdentityProviderPluginTests.cs | AsyncNaming; ConfigureAwaitMissing; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Rename async methods to end with Async.; Sort using directives alphabetically. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardPluginBootstrapperTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; PrivateFieldNaming; ServiceLocator; UsingInsideNamespace; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Move using directives outside namespace.; Remove service locator usage; use constructor injection.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardPluginOptionsTests.cs | FileLength>100; UsingNotSorted | Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardPluginRegistrarTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; PrivateFieldNaming; ServiceLocator; UsingInsideNamespace; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Move using directives outside namespace.; Remove service locator usage; use constructor injection.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StandardUserCredentialStoreTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; PrivateFieldNaming; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/Security/CryptoPasswordHasherTests.cs | FileLength>100; UsingNotSorted | Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/Security/StandardCredentialAuditLoggerTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; PrivateFieldNaming; UsingInsideNamespace; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Move using directives outside namespace.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/TestDoubles/InMemoryUserRepository.cs | FileLength>100; UsingInsideNamespace; UsingNotSorted | Move using directives outside namespace.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+
+## Testing Fullness Findings
+- Status: PASS
+- Expected layers (heuristic): 
+- Detected test projects: none
+- Missing layers: none
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- None.

docs/implplan-blocked/audits/csproj-standards/src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/StellaOps.Authority.Plugin.Standard.csproj

@@ -0,0 +1,100 @@
+# Audit - StellaOps.Authority.Plugin.Standard
+
+## Project
+- Path: src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/StellaOps.Authority.Plugin.Standard.csproj
+- Module: Authority
+- Kind: Library
+- Audit date (UTC): 2026-01-30
+- Files scanned: 16
+- Files with issues: 15
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true
+- Deterministic: inherited true
+- 100-line rule violations: 5
+- Namespace violations: 15
+- Using directive violations: 0
+- Naming violations (interfaces/fields/const/async): 0
+- Service locator usage (BuildServiceProvider/GetService): 0
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/StandardPluginOptions.cs (192 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/StandardPluginRegistrar.cs (128 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/Security/StandardCredentialAuditLogger.cs (179 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/Storage/StandardClientProvisioningStore.cs (249 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/Storage/StandardUserCredentialStore.cs (604 lines)
+- Namespace issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/StandardClaimsEnricher.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/StandardIdentityProviderPlugin.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/StandardPluginOptions.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/StandardPluginRegistrar.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/Bootstrap/StandardPluginBootstrapper.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/obj/Debug/net10.0/StellaOps.Authority.Plugin.Standard.AssemblyInfo.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/obj/Debug/net10.0/StellaOps.Authority.Plugin.Standard.GlobalUsings.g.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/obj/Release/net10.0/StellaOps.Authority.Plugin.Standard.GlobalUsings.g.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/Security/IPasswordHasher.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/Security/StandardCredentialAuditLogger.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/Storage/StandardClientProvisioningStore.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/Storage/StandardIdGenerator.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/Storage/StandardUserCredentialStore.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/Storage/StandardUserDocument.cs: missing namespace
+- Using directive issues:
+  - none
+- Naming issues:
+  - none
+- Async issues:
+  - none
+- Service locator matches:
+  - none
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Normalize namespaces to file-scoped StellaOps.<Area>.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 16
+- Files with issues: 15
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/StandardClaimsEnricher.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/StandardIdentityProviderPlugin.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/StandardPluginOptions.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/StandardPluginRegistrar.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/Bootstrap/StandardPluginBootstrapper.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/obj/Debug/net10.0/StellaOps.Authority.Plugin.Standard.AssemblyInfo.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/obj/Debug/net10.0/StellaOps.Authority.Plugin.Standard.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/obj/Release/net10.0/StellaOps.Authority.Plugin.Standard.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/Security/IPasswordHasher.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/Security/StandardCredentialAuditLogger.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/Storage/StandardClientProvisioningStore.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/Storage/StandardIdGenerator.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/Storage/StandardUserCredentialStore.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/Storage/StandardUserDocument.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+
+## Testing Fullness Findings
+- Status: FAIL
+- Expected layers (heuristic): Unit
+- Detected test projects: src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StellaOps.Authority.Plugin.Standard.Tests.csproj [Security]
+- Missing layers: Unit
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- Add or expand test projects to cover missing layers.
+- Ensure tests use deterministic fixtures and offline harnesses.

docs/implplan-blocked/audits/csproj-standards/src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/StellaOps.Authority.Plugin.Standard.md

@@ -0,0 +1,109 @@
+# Audit - StellaOps.Authority.Plugin.Standard
+
+## Project
+- Path: src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/StellaOps.Authority.Plugin.Standard.csproj
+- Module: Authority
+- Kind: Plugin
+- Audit date (UTC): 2026-01-31
+- Files scanned: 12
+- Files with issues: 8
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true
+- Deterministic: inherited true
+- 100-line rule violations: 5
+- Namespace violations: 0
+- Using directive violations: 1
+- Naming violations (interfaces/fields/const/async): 10
+- Service locator usage (BuildServiceProvider/GetService): 20
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/StandardPluginOptions.cs (193 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/StandardPluginRegistrar.cs (129 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/Security/StandardCredentialAuditLogger.cs (180 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/Storage/StandardClientProvisioningStore.cs (250 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/Storage/StandardUserCredentialStore.cs (605 lines)
+- Namespace issues:
+  - none
+- Using directive issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/Bootstrap/StandardPluginBootstrapper.cs: using directives inside namespace
+- Naming issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/StandardIdentityProviderPlugin.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/Bootstrap/StandardPluginBootstrapper.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/Security/IPasswordHasher.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/Security/StandardCredentialAuditLogger.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/Storage/StandardClientProvisioningStore.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/Storage/StandardUserCredentialStore.cs: private field naming
+- Async issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/StandardIdentityProviderPlugin.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/Bootstrap/StandardPluginBootstrapper.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/Storage/StandardClientProvisioningStore.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/Storage/StandardUserCredentialStore.cs: async method naming
+- Service locator matches:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/StandardPluginRegistrar.cs:34 context.Services.AddSingleton<IClaimsEnricher>(sp => sp.GetRequiredService<StandardClaimsEnricher>());
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/StandardPluginRegistrar.cs:54 var userRepository = sp.GetRequiredService<IUserRepository>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/StandardPluginRegistrar.cs:55 var optionsMonitor = sp.GetRequiredService<IOptionsMonitor<StandardPluginOptions>>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/StandardPluginRegistrar.cs:57 var cryptoProvider = sp.GetRequiredService<ICryptoProvider>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/StandardPluginRegistrar.cs:59 var loggerFactory = sp.GetRequiredService<ILoggerFactory>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/StandardPluginRegistrar.cs:61 var auditLogger = sp.GetRequiredService<IStandardCredentialAuditLogger>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/StandardPluginRegistrar.cs:62 var clock = sp.GetRequiredService<TimeProvider>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/StandardPluginRegistrar.cs:63 var idGenerator = sp.GetRequiredService<IStandardIdGenerator>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/StandardPluginRegistrar.cs:100 var clientStore = sp.GetRequiredService<IAuthorityClientStore>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/StandardPluginRegistrar.cs:101 var revocationStore = sp.GetRequiredService<IAuthorityRevocationStore>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/StandardPluginRegistrar.cs:102 var timeProvider = sp.GetRequiredService<TimeProvider>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/StandardPluginRegistrar.cs:108 var store = sp.GetRequiredService<StandardUserCredentialStore>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/StandardPluginRegistrar.cs:109 var clientProvisioningStore = sp.GetRequiredService<StandardClientProvisioningStore>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/StandardPluginRegistrar.cs:110 var loggerFactory = sp.GetRequiredService<ILoggerFactory>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/StandardPluginRegistrar.cs:115 sp.GetRequiredService<StandardClaimsEnricher>(),
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/StandardPluginRegistrar.cs:120 sp.GetRequiredService<StandardClientProvisioningStore>());
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/StandardPluginRegistrar.cs:125 sp.GetRequiredService<IServiceScopeFactory>(),
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/StandardPluginRegistrar.cs:126 sp.GetRequiredService<ILogger<StandardPluginBootstrapper>>()));
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/Bootstrap/StandardPluginBootstrapper.cs:31 var optionsMonitor = scope.ServiceProvider.GetRequiredService<IOptionsMonitor<StandardPluginOptions>>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/Bootstrap/StandardPluginBootstrapper.cs:32 var credentialStore = scope.ServiceProvider.GetRequiredService<StandardUserCredentialStore>();
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Align interface/field/const naming to standards.
+- Move and sort using directives (outside namespace).
+- Rename async methods and avoid blocking async calls.
+- Replace service locator usage with constructor injection.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 12
+- Files with issues: 8
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/StandardIdentityProviderPlugin.cs | AsyncNaming; PrivateFieldNaming | Rename async methods to end with Async.; Rename private fields to _camelCase. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/StandardPluginOptions.cs | FileLength>100 | Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/StandardPluginRegistrar.cs | FileLength>100; ServiceLocator | Remove service locator usage; use constructor injection.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/Bootstrap/StandardPluginBootstrapper.cs | AsyncNaming; PrivateFieldNaming; ServiceLocator; UsingInsideNamespace | Move using directives outside namespace.; Remove service locator usage; use constructor injection.; Rename async methods to end with Async.; Rename private fields to _camelCase. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/Security/IPasswordHasher.cs | PrivateFieldNaming | Rename private fields to _camelCase. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/Security/StandardCredentialAuditLogger.cs | FileLength>100; PrivateFieldNaming | Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/Storage/StandardClientProvisioningStore.cs | AsyncNaming; FileLength>100; PrivateFieldNaming | Rename async methods to end with Async.; Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/Storage/StandardUserCredentialStore.cs | AsyncNaming; FileLength>100; PrivateFieldNaming | Rename async methods to end with Async.; Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+
+## Testing Fullness Findings
+- Status: FAIL
+- Expected layers (heuristic): Unit
+- Detected test projects: src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StellaOps.Authority.Plugin.Standard.Tests.csproj [Security]
+- Missing layers: Unit
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- Add or expand test projects to cover missing layers.
+- Ensure tests use deterministic fixtures and offline harnesses.

docs/implplan-blocked/audits/csproj-standards/src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Unified/StellaOps.Authority.Plugin.Unified.csproj

@@ -0,0 +1,80 @@
+# Audit - StellaOps.Authority.Plugin.Unified
+
+## Project
+- Path: src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Unified/StellaOps.Authority.Plugin.Unified.csproj
+- Module: Authority
+- Kind: Library
+- Audit date (UTC): 2026-01-30
+- Files scanned: 7
+- Files with issues: 7
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true
+- Deterministic: inherited true
+- 100-line rule violations: 1
+- Namespace violations: 7
+- Using directive violations: 0
+- Naming violations (interfaces/fields/const/async): 0
+- Service locator usage (BuildServiceProvider/GetService): 0
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Unified/AuthPluginAdapter.cs (221 lines)
+- Namespace issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Unified/AuthPluginAdapter.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Unified/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Unified/obj/Debug/net10.0/StellaOps.Authority.Plugin.Unified.AssemblyInfo.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Unified/obj/Debug/net10.0/StellaOps.Authority.Plugin.Unified.GlobalUsings.g.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Unified/obj/Release/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Unified/obj/Release/net10.0/StellaOps.Authority.Plugin.Unified.AssemblyInfo.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Unified/obj/Release/net10.0/StellaOps.Authority.Plugin.Unified.GlobalUsings.g.cs: missing namespace
+- Using directive issues:
+  - none
+- Naming issues:
+  - none
+- Async issues:
+  - none
+- Service locator matches:
+  - none
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Normalize namespaces to file-scoped StellaOps.<Area>.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 7
+- Files with issues: 7
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Unified/AuthPluginAdapter.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Unified/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Unified/obj/Debug/net10.0/StellaOps.Authority.Plugin.Unified.AssemblyInfo.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Unified/obj/Debug/net10.0/StellaOps.Authority.Plugin.Unified.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Unified/obj/Release/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Unified/obj/Release/net10.0/StellaOps.Authority.Plugin.Unified.AssemblyInfo.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Unified/obj/Release/net10.0/StellaOps.Authority.Plugin.Unified.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+
+## Testing Fullness Findings
+- Status: FAIL
+- Expected layers (heuristic): Unit
+- Detected test projects: none
+- Missing layers: Unit
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- Add or expand test projects to cover missing layers.
+- Ensure tests use deterministic fixtures and offline harnesses.

docs/implplan-blocked/audits/csproj-standards/src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Unified/StellaOps.Authority.Plugin.Unified.md

@@ -0,0 +1,69 @@
+# Audit - StellaOps.Authority.Plugin.Unified
+
+## Project
+- Path: src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Unified/StellaOps.Authority.Plugin.Unified.csproj
+- Module: Authority
+- Kind: Plugin
+- Audit date (UTC): 2026-01-31
+- Files scanned: 1
+- Files with issues: 1
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true
+- Deterministic: inherited true
+- 100-line rule violations: 1
+- Namespace violations: 0
+- Using directive violations: 0
+- Naming violations (interfaces/fields/const/async): 2
+- Service locator usage (BuildServiceProvider/GetService): 0
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Unified/AuthPluginAdapter.cs (222 lines)
+- Namespace issues:
+  - none
+- Using directive issues:
+  - none
+- Naming issues:
+  - none
+- Async issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Unified/AuthPluginAdapter.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Unified/AuthPluginAdapter.cs: missing ConfigureAwait(false)
+- Service locator matches:
+  - none
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Rename async methods and avoid blocking async calls.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 1
+- Files with issues: 1
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Unified/AuthPluginAdapter.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100 | Add ConfigureAwait(false) to awaited calls in library-like code.; Rename async methods to end with Async.; Split file to stay <= 100 lines. |
+
+## Testing Fullness Findings
+- Status: FAIL
+- Expected layers (heuristic): Unit
+- Detected test projects: none
+- Missing layers: Unit
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- Add or expand test projects to cover missing layers.
+- Ensure tests use deterministic fixtures and offline harnesses.

docs/implplan-blocked/audits/csproj-standards/src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/StellaOps.Authority.Plugins.Abstractions.Tests.csproj

@@ -0,0 +1,102 @@
+# Audit - StellaOps.Authority.Plugins.Abstractions.Tests
+
+## Project
+- Path: src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/StellaOps.Authority.Plugins.Abstractions.Tests.csproj
+- Module: Authority
+- Kind: Library
+- Audit date (UTC): 2026-01-30
+- Files scanned: 17
+- Files with issues: 17
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: inherited false
+- Deterministic: inherited true
+- 100-line rule violations: 1
+- Namespace violations: 17
+- Using directive violations: 0
+- Naming violations (interfaces/fields/const/async): 0
+- Service locator usage (BuildServiceProvider/GetService): 1
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/AuthorityIdentityProviderHandleTests.cs (113 lines)
+- Namespace issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/AuthorityClientDescriptorNormalizationTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/AuthorityClientRegistrationTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/AuthorityCredentialVerificationResultTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/AuthorityIdentityProviderCapabilitiesTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/AuthorityIdentityProviderHandleTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/AuthorityPluginHealthResultTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/AuthorityPluginManifestTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/AuthorityPluginOperationResultTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/AuthoritySecretHasherTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/AuthorityUserDescriptorTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/AuthorityUserRegistrationTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/obj/Debug/net10.0/SelfRegisteredExtensions.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/obj/Debug/net10.0/StellaOps.Authority.Plugins.Abstractions.Tests.AssemblyInfo.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/obj/Debug/net10.0/StellaOps.Authority.Plugins.Abstractions.Tests.GlobalUsings.g.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/obj/Debug/net10.0/XunitAutoGeneratedEntryPoint.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/obj/Release/net10.0/StellaOps.Authority.Plugins.Abstractions.Tests.GlobalUsings.g.cs: missing namespace
+- Using directive issues:
+  - none
+- Naming issues:
+  - none
+- Async issues:
+  - none
+- Service locator matches:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/AuthorityIdentityProviderHandleTests.cs:55 public IServiceProvider ServiceProvider { get; } = new ServiceCollection().BuildServiceProvider();
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Normalize namespaces to file-scoped StellaOps.<Area>.
+- Remove overrides that disable TreatWarningsAsErrors.
+- Replace service locator usage with constructor injection.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 17
+- Files with issues: 17
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/AuthorityClientDescriptorNormalizationTests.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/AuthorityClientRegistrationTests.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/AuthorityCredentialVerificationResultTests.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/AuthorityIdentityProviderCapabilitiesTests.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/AuthorityIdentityProviderHandleTests.cs | FileLength>100; NamespaceMissing; ServiceLocator | Add file-scoped namespace: namespace StellaOps.<Area>;; Remove service locator usage; use constructor injection.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/AuthorityPluginHealthResultTests.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/AuthorityPluginManifestTests.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/AuthorityPluginOperationResultTests.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/AuthoritySecretHasherTests.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/AuthorityUserDescriptorTests.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/AuthorityUserRegistrationTests.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/obj/Debug/net10.0/SelfRegisteredExtensions.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/obj/Debug/net10.0/StellaOps.Authority.Plugins.Abstractions.Tests.AssemblyInfo.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/obj/Debug/net10.0/StellaOps.Authority.Plugins.Abstractions.Tests.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/obj/Debug/net10.0/XunitAutoGeneratedEntryPoint.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/obj/Release/net10.0/StellaOps.Authority.Plugins.Abstractions.Tests.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+
+## Testing Fullness Findings
+- Status: FAIL
+- Expected layers (heuristic): Unit
+- Detected test projects: none
+- Missing layers: Unit
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- Add or expand test projects to cover missing layers.
+- Ensure tests use deterministic fixtures and offline harnesses.

docs/implplan-blocked/audits/csproj-standards/src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/StellaOps.Authority.Plugins.Abstractions.Tests.md

@@ -0,0 +1,89 @@
+# Audit - StellaOps.Authority.Plugins.Abstractions.Tests
+
+## Project
+- Path: src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/StellaOps.Authority.Plugins.Abstractions.Tests.csproj
+- Module: Authority
+- Kind: Test
+- Audit date (UTC): 2026-01-31
+- Files scanned: 11
+- Files with issues: 10
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: inherited false
+- Deterministic: inherited true
+- 100-line rule violations: 1
+- Namespace violations: 0
+- Using directive violations: 11
+- Naming violations (interfaces/fields/const/async): 1
+- Service locator usage (BuildServiceProvider/GetService): 1
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/AuthorityIdentityProviderHandleTests.cs (113 lines)
+- Namespace issues:
+  - none
+- Using directive issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/AuthorityClientDescriptorNormalizationTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/AuthorityClientRegistrationTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/AuthorityCredentialVerificationResultTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/AuthorityIdentityProviderCapabilitiesTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/AuthorityIdentityProviderHandleTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/AuthorityPluginManifestTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/AuthorityPluginOperationResultTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/AuthoritySecretHasherTests.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/AuthoritySecretHasherTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/AuthorityUserDescriptorTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/AuthorityUserRegistrationTests.cs: using directives not sorted
+- Naming issues:
+  - none
+- Async issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/AuthorityIdentityProviderHandleTests.cs: missing ConfigureAwait(false)
+- Service locator matches:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/AuthorityIdentityProviderHandleTests.cs:55 public IServiceProvider ServiceProvider { get; } = new ServiceCollection().BuildServiceProvider();
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Move and sort using directives (outside namespace).
+- Remove overrides that disable TreatWarningsAsErrors.
+- Rename async methods and avoid blocking async calls.
+- Replace service locator usage with constructor injection.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 11
+- Files with issues: 10
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/AuthorityClientDescriptorNormalizationTests.cs | UsingNotSorted | Sort using directives alphabetically. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/AuthorityClientRegistrationTests.cs | UsingNotSorted | Sort using directives alphabetically. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/AuthorityCredentialVerificationResultTests.cs | UsingNotSorted | Sort using directives alphabetically. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/AuthorityIdentityProviderCapabilitiesTests.cs | UsingNotSorted | Sort using directives alphabetically. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/AuthorityIdentityProviderHandleTests.cs | ConfigureAwaitMissing; FileLength>100; ServiceLocator; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Remove service locator usage; use constructor injection.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/AuthorityPluginManifestTests.cs | UsingNotSorted | Sort using directives alphabetically. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/AuthorityPluginOperationResultTests.cs | UsingNotSorted | Sort using directives alphabetically. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/AuthoritySecretHasherTests.cs | UsingInsideNamespace; UsingNotSorted | Move using directives outside namespace.; Sort using directives alphabetically. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/AuthorityUserDescriptorTests.cs | UsingNotSorted | Sort using directives alphabetically. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/AuthorityUserRegistrationTests.cs | UsingNotSorted | Sort using directives alphabetically. |
+
+## Testing Fullness Findings
+- Status: PASS
+- Expected layers (heuristic): 
+- Detected test projects: none
+- Missing layers: none
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- None.

docs/implplan-blocked/audits/csproj-standards/src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions/StellaOps.Authority.Plugins.Abstractions.csproj

@@ -0,0 +1,92 @@
+# Audit - StellaOps.Authority.Plugins.Abstractions
+
+## Project
+- Path: src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions/StellaOps.Authority.Plugins.Abstractions.csproj
+- Module: Authority
+- Kind: Library
+- Audit date (UTC): 2026-01-30
+- Files scanned: 13
+- Files with issues: 12
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true
+- Deterministic: inherited true
+- 100-line rule violations: 3
+- Namespace violations: 12
+- Using directive violations: 0
+- Naming violations (interfaces/fields/const/async): 0
+- Service locator usage (BuildServiceProvider/GetService): 0
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions/AuthorityPluginContracts.cs (228 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions/AuthoritySecretHasher.cs (129 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions/IdentityProviderContracts.cs (901 lines)
+- Namespace issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions/AuthorityClientMetadataKeys.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions/AuthorityCredentialAuditContext.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions/AuthorityPluginContracts.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions/AuthorityPluginRegistrationContext.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions/AuthoritySecretHasher.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions/IdentityProviderContracts.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions/obj/Debug/net10.0/StellaOps.Authority.Plugins.Abstractions.AssemblyInfo.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions/obj/Debug/net10.0/StellaOps.Authority.Plugins.Abstractions.GlobalUsings.g.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions/obj/Release/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions/obj/Release/net10.0/StellaOps.Authority.Plugins.Abstractions.AssemblyInfo.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions/obj/Release/net10.0/StellaOps.Authority.Plugins.Abstractions.GlobalUsings.g.cs: missing namespace
+- Using directive issues:
+  - none
+- Naming issues:
+  - none
+- Async issues:
+  - none
+- Service locator matches:
+  - none
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Normalize namespaces to file-scoped StellaOps.<Area>.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 13
+- Files with issues: 12
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions/AuthorityClientMetadataKeys.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions/AuthorityCredentialAuditContext.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions/AuthorityPluginContracts.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions/AuthorityPluginRegistrationContext.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions/AuthoritySecretHasher.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions/IdentityProviderContracts.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions/obj/Debug/net10.0/StellaOps.Authority.Plugins.Abstractions.AssemblyInfo.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions/obj/Debug/net10.0/StellaOps.Authority.Plugins.Abstractions.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions/obj/Release/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions/obj/Release/net10.0/StellaOps.Authority.Plugins.Abstractions.AssemblyInfo.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions/obj/Release/net10.0/StellaOps.Authority.Plugins.Abstractions.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+
+## Testing Fullness Findings
+- Status: FAIL
+- Expected layers (heuristic): Unit
+- Detected test projects: src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/StellaOps.Authority.Plugin.Ldap.Tests.csproj [Security]; src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/StellaOps.Authority.Plugin.Oidc.Tests.csproj [Security]; src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/StellaOps.Authority.Plugin.Saml.Tests.csproj [Security]; src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StellaOps.Authority.Plugin.Standard.Tests.csproj [Security]; src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/StellaOps.Authority.Plugins.Abstractions.Tests.csproj [Security]; src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/StellaOps.Authority.Tests.csproj [Security]
+- Missing layers: Unit
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- Add or expand test projects to cover missing layers.
+- Ensure tests use deterministic fixtures and offline harnesses.

docs/implplan-blocked/audits/csproj-standards/src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions/StellaOps.Authority.Plugins.Abstractions.md

@@ -0,0 +1,74 @@
+# Audit - StellaOps.Authority.Plugins.Abstractions
+
+## Project
+- Path: src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions/StellaOps.Authority.Plugins.Abstractions.csproj
+- Module: Authority
+- Kind: Plugin
+- Audit date (UTC): 2026-01-31
+- Files scanned: 7
+- Files with issues: 3
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true
+- Deterministic: inherited true
+- 100-line rule violations: 3
+- Namespace violations: 0
+- Using directive violations: 1
+- Naming violations (interfaces/fields/const/async): 2
+- Service locator usage (BuildServiceProvider/GetService): 0
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions/AuthorityPluginContracts.cs (229 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions/AuthoritySecretHasher.cs (130 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions/IdentityProviderContracts.cs (902 lines)
+- Namespace issues:
+  - none
+- Using directive issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions/AuthoritySecretHasher.cs: using directives inside namespace
+- Naming issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions/AuthorityPluginContracts.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions/AuthoritySecretHasher.cs: private field naming
+- Async issues:
+  - none
+- Service locator matches:
+  - none
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Align interface/field/const naming to standards.
+- Move and sort using directives (outside namespace).
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 7
+- Files with issues: 3
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions/AuthorityPluginContracts.cs | FileLength>100; PrivateFieldNaming | Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions/AuthoritySecretHasher.cs | FileLength>100; PrivateFieldNaming; UsingInsideNamespace | Move using directives outside namespace.; Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions/IdentityProviderContracts.cs | FileLength>100 | Split file to stay <= 100 lines. |
+
+## Testing Fullness Findings
+- Status: FAIL
+- Expected layers (heuristic): Unit
+- Detected test projects: src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/StellaOps.Authority.Plugin.Ldap.Tests.csproj [Security]; src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Oidc.Tests/StellaOps.Authority.Plugin.Oidc.Tests.csproj [Security]; src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Saml.Tests/StellaOps.Authority.Plugin.Saml.Tests.csproj [Security]; src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StellaOps.Authority.Plugin.Standard.Tests.csproj [Security]; src/Authority/StellaOps.Authority/StellaOps.Authority.Plugins.Abstractions.Tests/StellaOps.Authority.Plugins.Abstractions.Tests.csproj [Security]; src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/StellaOps.Authority.Tests.csproj [Security]
+- Missing layers: Unit
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- Add or expand test projects to cover missing layers.
+- Ensure tests use deterministic fixtures and offline harnesses.

docs/implplan-blocked/audits/csproj-standards/src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/StellaOps.Authority.Tests.csproj

@@ -0,0 +1,216 @@
+# Audit - StellaOps.Authority.Tests
+
+## Project
+- Path: src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/StellaOps.Authority.Tests.csproj
+- Module: Authority
+- Kind: Library
+- Audit date (UTC): 2026-01-30
+- Files scanned: 51
+- Files with issues: 51
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: inherited false
+- Deterministic: inherited true
+- 100-line rule violations: 34
+- Namespace violations: 51
+- Using directive violations: 0
+- Naming violations (interfaces/fields/const/async): 0
+- Service locator usage (BuildServiceProvider/GetService): 14
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/AdvisoryAi/AdvisoryAiRemoteInferenceEndpointTests.cs (245 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/AdvisoryAi/AuthorityAdvisoryAiConsentEvaluatorTests.cs (144 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Airgap/AirgapAuditEndpointsTests.cs (253 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Airgap/AuthoritySealedModeEvidenceValidatorTests.cs (147 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Audit/AuthorityAuditSinkTests.cs (200 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Auth/AuthorityAuthBypassTests.cs (377 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Bootstrap/BootstrapInviteCleanupServiceTests.cs (102 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Bootstrap/ServiceAccountAdminEndpointsTests.cs (682 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Console/ConsoleEndpointsTests.cs (689 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Contract/AuthorityContractSnapshotTests.cs (359 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Errors/KeyErrorClassificationTests.cs (381 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Identity/AuthorityIdentityProviderRegistryTests.cs (222 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Identity/AuthorityIdentityProviderSelectorTests.cs (127 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Infrastructure/AuthorityWebApplicationFactory.cs (200 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/LocalPolicy/FallbackPolicyStoreIntegrationTests.cs (755 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/LocalPolicy/FileBasedPolicyStoreTests.cs (338 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Negative/AuthorityNegativeTests.cs (371 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Notifications/AuthorityAckTokenIssuerTests.cs (200 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Notifications/AuthorityAckTokenKeyManagerTests.cs (152 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Notifications/NotifyAckTokenRotationEndpointTests.cs (260 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Observability/AuthorityOTelTraceTests.cs (297 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenIddict/ClientCredentialsAndTokenHandlersTests.cs (5435 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenIddict/LegacyAuthDeprecationTests.cs (113 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenIddict/PasswordGrantHandlersTests.cs (1023 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Permalinks/VulnPermalinkServiceTests.cs (162 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Plugins/AuthorityPluginLoaderTests.cs (194 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/RateLimiting/AuthorityRateLimiterIntegrationTests.cs (149 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/RateLimiting/AuthorityRateLimiterMetadataMiddlewareTests.cs (101 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Signing/AuthorityJwksServiceTests.cs (366 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Signing/AuthoritySigningKeyManagerTests.cs (143 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Signing/TokenSignVerifyRoundtripTests.cs (408 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Storage/PostgresAdapterTests.cs (427 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Vulnerability/VulnTokenIssuerTests.cs (250 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Vulnerability/VulnWorkflowTokenEndpointTests.cs (458 lines)
+- Namespace issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/TestEnvironment.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/AdvisoryAi/AdvisoryAiRemoteInferenceEndpointTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/AdvisoryAi/AuthorityAdvisoryAiConsentEvaluatorTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Airgap/AirgapAuditEndpointsTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Airgap/AuthoritySealedModeEvidenceValidatorTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Audit/AuthorityAuditSinkTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Auth/AuthorityAuthBypassTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Bootstrap/BootstrapInviteCleanupServiceTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Bootstrap/ServiceAccountAdminEndpointsTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Console/ConsoleEndpointsTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Contract/AuthorityContractSnapshotTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Errors/KeyErrorClassificationTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Identity/AuthorityIdentityProviderRegistryTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Identity/AuthorityIdentityProviderSelectorTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Infrastructure/AuthorityWebApplicationFactory.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Infrastructure/EnvironmentVariableScope.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Infrastructure/TestAirgapAuditStore.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Infrastructure/TestAuthHandler.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/LocalPolicy/FallbackPolicyStoreIntegrationTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/LocalPolicy/FileBasedPolicyStoreTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Negative/AuthorityNegativeTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Notifications/AuthorityAckTokenIssuerTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Notifications/AuthorityAckTokenKeyManagerTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Notifications/AuthorityWebhookAllowlistEvaluatorTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Notifications/NotifyAckTokenRotationEndpointTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/obj/Debug/net10.0/SelfRegisteredExtensions.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/obj/Debug/net10.0/StellaOps.Authority.Tests.AssemblyInfo.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/obj/Debug/net10.0/StellaOps.Authority.Tests.GlobalUsings.g.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/obj/Debug/net10.0/XunitAutoGeneratedEntryPoint.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/obj/Release/net10.0/StellaOps.Authority.Tests.GlobalUsings.g.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Observability/AuthorityOTelTraceTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenApi/OpenApiDiscoveryEndpointTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenIddict/ClientCredentialsAndTokenHandlersTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenIddict/DiscoveryMetadataTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenIddict/LegacyAuthDeprecationTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenIddict/PasswordGrantHandlersTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenIddict/TokenPersistenceIntegrationTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Permalinks/VulnPermalinkServiceTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Plugins/AuthorityPluginLoaderTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/RateLimiting/AuthorityRateLimiterIntegrationTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/RateLimiting/AuthorityRateLimiterMetadataAccessorTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/RateLimiting/AuthorityRateLimiterMetadataMiddlewareTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/RateLimiting/AuthorityRateLimiterTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Signing/AuthorityJwksServiceTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Signing/AuthoritySigningKeyManagerTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Signing/KmsAuthoritySigningKeySourceTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Signing/TokenSignVerifyRoundtripTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Storage/PostgresAdapterTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Vulnerability/VulnTokenIssuerTests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Vulnerability/VulnWorkflowTokenEndpointTests.cs: missing namespace
+- Using directive issues:
+  - none
+- Naming issues:
+  - none
+- Async issues:
+  - none
+- Service locator matches:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Identity/AuthorityIdentityProviderRegistryTests.cs:25 using var serviceProvider = BuildServiceProvider(providers);
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Identity/AuthorityIdentityProviderRegistryTests.cs:54 using var serviceProvider = BuildServiceProvider(providers);
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Identity/AuthorityIdentityProviderRegistryTests.cs:84 using var serviceProvider = services.BuildServiceProvider();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Identity/AuthorityIdentityProviderRegistryTests.cs:95 private static ServiceProvider BuildServiceProvider(IEnumerable<IIdentityProviderPlugin> providers)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Identity/AuthorityIdentityProviderRegistryTests.cs:103 return services.BuildServiceProvider();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Identity/AuthorityIdentityProviderSelectorTests.cs:77 var serviceProvider = services.BuildServiceProvider();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Notifications/AuthorityAckTokenIssuerTests.cs:171 return services.BuildServiceProvider();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Notifications/AuthorityAckTokenKeyManagerTests.cs:122 return services.BuildServiceProvider();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenIddict/ClientCredentialsAndTokenHandlersTests.cs:5307 var provider = services.BuildServiceProvider();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenIddict/PasswordGrantHandlersTests.cs:735 var provider = services.BuildServiceProvider();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Permalinks/VulnPermalinkServiceTests.cs:131 return services.BuildServiceProvider();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Plugins/AuthorityPluginLoaderTests.cs:100 var provider = services.BuildServiceProvider();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Plugins/AuthorityPluginLoaderTests.cs:138 var provider = services.BuildServiceProvider();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Signing/AuthoritySigningKeyManagerTests.cs:113 return services.BuildServiceProvider();
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Normalize namespaces to file-scoped StellaOps.<Area>.
+- Remove overrides that disable TreatWarningsAsErrors.
+- Replace service locator usage with constructor injection.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 51
+- Files with issues: 51
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/TestEnvironment.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/AdvisoryAi/AdvisoryAiRemoteInferenceEndpointTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/AdvisoryAi/AuthorityAdvisoryAiConsentEvaluatorTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Airgap/AirgapAuditEndpointsTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Airgap/AuthoritySealedModeEvidenceValidatorTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Audit/AuthorityAuditSinkTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Auth/AuthorityAuthBypassTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Bootstrap/BootstrapInviteCleanupServiceTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Bootstrap/ServiceAccountAdminEndpointsTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Console/ConsoleEndpointsTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Contract/AuthorityContractSnapshotTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Errors/KeyErrorClassificationTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Identity/AuthorityIdentityProviderRegistryTests.cs | FileLength>100; NamespaceMissing; ServiceLocator | Add file-scoped namespace: namespace StellaOps.<Area>;; Remove service locator usage; use constructor injection.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Identity/AuthorityIdentityProviderSelectorTests.cs | FileLength>100; NamespaceMissing; ServiceLocator | Add file-scoped namespace: namespace StellaOps.<Area>;; Remove service locator usage; use constructor injection.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Infrastructure/AuthorityWebApplicationFactory.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Infrastructure/EnvironmentVariableScope.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Infrastructure/TestAirgapAuditStore.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Infrastructure/TestAuthHandler.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/LocalPolicy/FallbackPolicyStoreIntegrationTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/LocalPolicy/FileBasedPolicyStoreTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Negative/AuthorityNegativeTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Notifications/AuthorityAckTokenIssuerTests.cs | FileLength>100; NamespaceMissing; ServiceLocator | Add file-scoped namespace: namespace StellaOps.<Area>;; Remove service locator usage; use constructor injection.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Notifications/AuthorityAckTokenKeyManagerTests.cs | FileLength>100; NamespaceMissing; ServiceLocator | Add file-scoped namespace: namespace StellaOps.<Area>;; Remove service locator usage; use constructor injection.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Notifications/AuthorityWebhookAllowlistEvaluatorTests.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Notifications/NotifyAckTokenRotationEndpointTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/obj/Debug/net10.0/SelfRegisteredExtensions.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/obj/Debug/net10.0/StellaOps.Authority.Tests.AssemblyInfo.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/obj/Debug/net10.0/StellaOps.Authority.Tests.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/obj/Debug/net10.0/XunitAutoGeneratedEntryPoint.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/obj/Release/net10.0/StellaOps.Authority.Tests.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Observability/AuthorityOTelTraceTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenApi/OpenApiDiscoveryEndpointTests.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenIddict/ClientCredentialsAndTokenHandlersTests.cs | FileLength>100; NamespaceMissing; ServiceLocator | Add file-scoped namespace: namespace StellaOps.<Area>;; Remove service locator usage; use constructor injection.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenIddict/DiscoveryMetadataTests.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenIddict/LegacyAuthDeprecationTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenIddict/PasswordGrantHandlersTests.cs | FileLength>100; NamespaceMissing; ServiceLocator | Add file-scoped namespace: namespace StellaOps.<Area>;; Remove service locator usage; use constructor injection.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenIddict/TokenPersistenceIntegrationTests.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Permalinks/VulnPermalinkServiceTests.cs | FileLength>100; NamespaceMissing; ServiceLocator | Add file-scoped namespace: namespace StellaOps.<Area>;; Remove service locator usage; use constructor injection.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Plugins/AuthorityPluginLoaderTests.cs | FileLength>100; NamespaceMissing; ServiceLocator | Add file-scoped namespace: namespace StellaOps.<Area>;; Remove service locator usage; use constructor injection.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/RateLimiting/AuthorityRateLimiterIntegrationTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/RateLimiting/AuthorityRateLimiterMetadataAccessorTests.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/RateLimiting/AuthorityRateLimiterMetadataMiddlewareTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/RateLimiting/AuthorityRateLimiterTests.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Signing/AuthorityJwksServiceTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Signing/AuthoritySigningKeyManagerTests.cs | FileLength>100; NamespaceMissing; ServiceLocator | Add file-scoped namespace: namespace StellaOps.<Area>;; Remove service locator usage; use constructor injection.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Signing/KmsAuthoritySigningKeySourceTests.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Signing/TokenSignVerifyRoundtripTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Storage/PostgresAdapterTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Vulnerability/VulnTokenIssuerTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Vulnerability/VulnWorkflowTokenEndpointTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+
+## Testing Fullness Findings
+- Status: FAIL
+- Expected layers (heuristic): Unit
+- Detected test projects: none
+- Missing layers: Unit
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- Add or expand test projects to cover missing layers.
+- Ensure tests use deterministic fixtures and offline harnesses.

docs/implplan-blocked/audits/csproj-standards/src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/StellaOps.Authority.Tests.md

@@ -0,0 +1,351 @@
+# Audit - StellaOps.Authority.Tests
+
+## Project
+- Path: src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/StellaOps.Authority.Tests.csproj
+- Module: Authority
+- Kind: Test
+- Audit date (UTC): 2026-01-31
+- Files scanned: 45
+- Files with issues: 44
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: inherited false
+- Deterministic: inherited true
+- 100-line rule violations: 34
+- Namespace violations: 2
+- Using directive violations: 69
+- Naming violations (interfaces/fields/const/async): 80
+- Service locator usage (BuildServiceProvider/GetService): 57
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/AdvisoryAi/AdvisoryAiRemoteInferenceEndpointTests.cs (245 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/AdvisoryAi/AuthorityAdvisoryAiConsentEvaluatorTests.cs (144 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Airgap/AirgapAuditEndpointsTests.cs (253 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Airgap/AuthoritySealedModeEvidenceValidatorTests.cs (147 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Audit/AuthorityAuditSinkTests.cs (200 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Auth/AuthorityAuthBypassTests.cs (377 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Bootstrap/BootstrapInviteCleanupServiceTests.cs (102 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Bootstrap/ServiceAccountAdminEndpointsTests.cs (682 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Console/ConsoleEndpointsTests.cs (689 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Contract/AuthorityContractSnapshotTests.cs (359 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Errors/KeyErrorClassificationTests.cs (381 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Identity/AuthorityIdentityProviderRegistryTests.cs (222 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Identity/AuthorityIdentityProviderSelectorTests.cs (127 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Infrastructure/AuthorityWebApplicationFactory.cs (200 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/LocalPolicy/FallbackPolicyStoreIntegrationTests.cs (755 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/LocalPolicy/FileBasedPolicyStoreTests.cs (338 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Negative/AuthorityNegativeTests.cs (371 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Notifications/AuthorityAckTokenIssuerTests.cs (200 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Notifications/AuthorityAckTokenKeyManagerTests.cs (152 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Notifications/NotifyAckTokenRotationEndpointTests.cs (260 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Observability/AuthorityOTelTraceTests.cs (297 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenIddict/ClientCredentialsAndTokenHandlersTests.cs (5435 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenIddict/LegacyAuthDeprecationTests.cs (113 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenIddict/PasswordGrantHandlersTests.cs (1023 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Permalinks/VulnPermalinkServiceTests.cs (162 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Plugins/AuthorityPluginLoaderTests.cs (194 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/RateLimiting/AuthorityRateLimiterIntegrationTests.cs (149 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/RateLimiting/AuthorityRateLimiterMetadataMiddlewareTests.cs (101 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Signing/AuthorityJwksServiceTests.cs (366 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Signing/AuthoritySigningKeyManagerTests.cs (143 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Signing/TokenSignVerifyRoundtripTests.cs (408 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Storage/PostgresAdapterTests.cs (427 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Vulnerability/VulnTokenIssuerTests.cs (250 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Vulnerability/VulnWorkflowTokenEndpointTests.cs (458 lines)
+- Namespace issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/TestEnvironment.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/LocalPolicy/FallbackPolicyStoreIntegrationTests.cs: block-scoped namespace
+- Using directive issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/TestEnvironment.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/AdvisoryAi/AdvisoryAiRemoteInferenceEndpointTests.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/AdvisoryAi/AdvisoryAiRemoteInferenceEndpointTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/AdvisoryAi/AuthorityAdvisoryAiConsentEvaluatorTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Airgap/AirgapAuditEndpointsTests.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Airgap/AirgapAuditEndpointsTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Airgap/AuthoritySealedModeEvidenceValidatorTests.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Airgap/AuthoritySealedModeEvidenceValidatorTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Audit/AuthorityAuditSinkTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Auth/AuthorityAuthBypassTests.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Auth/AuthorityAuthBypassTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Bootstrap/BootstrapInviteCleanupServiceTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Bootstrap/ServiceAccountAdminEndpointsTests.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Bootstrap/ServiceAccountAdminEndpointsTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Console/ConsoleEndpointsTests.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Console/ConsoleEndpointsTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Contract/AuthorityContractSnapshotTests.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Contract/AuthorityContractSnapshotTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Errors/KeyErrorClassificationTests.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Errors/KeyErrorClassificationTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Identity/AuthorityIdentityProviderRegistryTests.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Identity/AuthorityIdentityProviderRegistryTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Infrastructure/AuthorityWebApplicationFactory.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Infrastructure/TestAirgapAuditStore.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Infrastructure/TestAuthHandler.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/LocalPolicy/FallbackPolicyStoreIntegrationTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/LocalPolicy/FileBasedPolicyStoreTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Negative/AuthorityNegativeTests.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Negative/AuthorityNegativeTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Notifications/AuthorityAckTokenIssuerTests.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Notifications/AuthorityAckTokenIssuerTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Notifications/AuthorityAckTokenKeyManagerTests.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Notifications/AuthorityAckTokenKeyManagerTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Notifications/AuthorityWebhookAllowlistEvaluatorTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Notifications/NotifyAckTokenRotationEndpointTests.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Notifications/NotifyAckTokenRotationEndpointTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Observability/AuthorityOTelTraceTests.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Observability/AuthorityOTelTraceTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenApi/OpenApiDiscoveryEndpointTests.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenApi/OpenApiDiscoveryEndpointTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenIddict/ClientCredentialsAndTokenHandlersTests.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenIddict/ClientCredentialsAndTokenHandlersTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenIddict/DiscoveryMetadataTests.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenIddict/DiscoveryMetadataTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenIddict/LegacyAuthDeprecationTests.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenIddict/LegacyAuthDeprecationTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenIddict/PasswordGrantHandlersTests.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenIddict/PasswordGrantHandlersTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenIddict/TokenPersistenceIntegrationTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Permalinks/VulnPermalinkServiceTests.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Permalinks/VulnPermalinkServiceTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Plugins/AuthorityPluginLoaderTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/RateLimiting/AuthorityRateLimiterIntegrationTests.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/RateLimiting/AuthorityRateLimiterIntegrationTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/RateLimiting/AuthorityRateLimiterMetadataMiddlewareTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/RateLimiting/AuthorityRateLimiterTests.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/RateLimiting/AuthorityRateLimiterTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Signing/AuthorityJwksServiceTests.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Signing/AuthorityJwksServiceTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Signing/AuthoritySigningKeyManagerTests.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Signing/AuthoritySigningKeyManagerTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Signing/KmsAuthoritySigningKeySourceTests.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Signing/KmsAuthoritySigningKeySourceTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Signing/TokenSignVerifyRoundtripTests.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Signing/TokenSignVerifyRoundtripTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Storage/PostgresAdapterTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Vulnerability/VulnTokenIssuerTests.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Vulnerability/VulnWorkflowTokenEndpointTests.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Vulnerability/VulnWorkflowTokenEndpointTests.cs: using directives not sorted
+- Naming issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/AdvisoryAi/AdvisoryAiRemoteInferenceEndpointTests.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/AdvisoryAi/AuthorityAdvisoryAiConsentEvaluatorTests.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Airgap/AirgapAuditEndpointsTests.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Bootstrap/BootstrapInviteCleanupServiceTests.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Bootstrap/ServiceAccountAdminEndpointsTests.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Console/ConsoleEndpointsTests.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Contract/AuthorityContractSnapshotTests.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Infrastructure/AuthorityWebApplicationFactory.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Infrastructure/EnvironmentVariableScope.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Infrastructure/TestAirgapAuditStore.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Notifications/NotifyAckTokenRotationEndpointTests.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Observability/AuthorityOTelTraceTests.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenApi/OpenApiDiscoveryEndpointTests.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenIddict/ClientCredentialsAndTokenHandlersTests.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenIddict/DiscoveryMetadataTests.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenIddict/LegacyAuthDeprecationTests.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenIddict/PasswordGrantHandlersTests.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenIddict/TokenPersistenceIntegrationTests.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Plugins/AuthorityPluginLoaderTests.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Signing/AuthorityJwksServiceTests.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Storage/PostgresAdapterTests.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Vulnerability/VulnTokenIssuerTests.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Vulnerability/VulnWorkflowTokenEndpointTests.cs: private field naming
+- Async issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/AdvisoryAi/AdvisoryAiRemoteInferenceEndpointTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/AdvisoryAi/AdvisoryAiRemoteInferenceEndpointTests.cs: missing ConfigureAwait(false)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Airgap/AirgapAuditEndpointsTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Airgap/AirgapAuditEndpointsTests.cs: missing ConfigureAwait(false)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Airgap/AuthoritySealedModeEvidenceValidatorTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Airgap/AuthoritySealedModeEvidenceValidatorTests.cs: missing ConfigureAwait(false)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Audit/AuthorityAuditSinkTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Audit/AuthorityAuditSinkTests.cs: missing ConfigureAwait(false)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Auth/AuthorityAuthBypassTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Auth/AuthorityAuthBypassTests.cs: missing ConfigureAwait(false)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Bootstrap/BootstrapInviteCleanupServiceTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Bootstrap/BootstrapInviteCleanupServiceTests.cs: missing ConfigureAwait(false)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Bootstrap/ServiceAccountAdminEndpointsTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Bootstrap/ServiceAccountAdminEndpointsTests.cs: missing ConfigureAwait(false)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Console/ConsoleEndpointsTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Console/ConsoleEndpointsTests.cs: missing ConfigureAwait(false)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Contract/AuthorityContractSnapshotTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Contract/AuthorityContractSnapshotTests.cs: missing ConfigureAwait(false)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Identity/AuthorityIdentityProviderRegistryTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Identity/AuthorityIdentityProviderRegistryTests.cs: missing ConfigureAwait(false)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Infrastructure/AuthorityWebApplicationFactory.cs: missing ConfigureAwait(false)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/LocalPolicy/FallbackPolicyStoreIntegrationTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/LocalPolicy/FallbackPolicyStoreIntegrationTests.cs: missing ConfigureAwait(false)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Negative/AuthorityNegativeTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Negative/AuthorityNegativeTests.cs: missing ConfigureAwait(false)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Notifications/AuthorityAckTokenIssuerTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Notifications/AuthorityAckTokenIssuerTests.cs: missing ConfigureAwait(false)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Notifications/NotifyAckTokenRotationEndpointTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Notifications/NotifyAckTokenRotationEndpointTests.cs: missing ConfigureAwait(false)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Observability/AuthorityOTelTraceTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Observability/AuthorityOTelTraceTests.cs: missing ConfigureAwait(false)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenApi/OpenApiDiscoveryEndpointTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenApi/OpenApiDiscoveryEndpointTests.cs: missing ConfigureAwait(false)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenIddict/ClientCredentialsAndTokenHandlersTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenIddict/ClientCredentialsAndTokenHandlersTests.cs: missing ConfigureAwait(false)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenIddict/DiscoveryMetadataTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenIddict/DiscoveryMetadataTests.cs: missing ConfigureAwait(false)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenIddict/LegacyAuthDeprecationTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenIddict/LegacyAuthDeprecationTests.cs: missing ConfigureAwait(false)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenIddict/PasswordGrantHandlersTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenIddict/PasswordGrantHandlersTests.cs: missing ConfigureAwait(false)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenIddict/TokenPersistenceIntegrationTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenIddict/TokenPersistenceIntegrationTests.cs: missing ConfigureAwait(false)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Permalinks/VulnPermalinkServiceTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Permalinks/VulnPermalinkServiceTests.cs: missing ConfigureAwait(false)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/RateLimiting/AuthorityRateLimiterIntegrationTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/RateLimiting/AuthorityRateLimiterIntegrationTests.cs: missing ConfigureAwait(false)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/RateLimiting/AuthorityRateLimiterMetadataMiddlewareTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/RateLimiting/AuthorityRateLimiterMetadataMiddlewareTests.cs: missing ConfigureAwait(false)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/RateLimiting/AuthorityRateLimiterTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/RateLimiting/AuthorityRateLimiterTests.cs: missing ConfigureAwait(false)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Storage/PostgresAdapterTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Storage/PostgresAdapterTests.cs: missing ConfigureAwait(false)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Vulnerability/VulnTokenIssuerTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Vulnerability/VulnTokenIssuerTests.cs: missing ConfigureAwait(false)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Vulnerability/VulnWorkflowTokenEndpointTests.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Vulnerability/VulnWorkflowTokenEndpointTests.cs: missing ConfigureAwait(false)
+- Service locator matches:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Bootstrap/ServiceAccountAdminEndpointsTests.cs:110 var options = scope.ServiceProvider.GetRequiredService<IOptions<StellaOpsAuthorityOptions>>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Bootstrap/ServiceAccountAdminEndpointsTests.cs:114 var accountStore = scope.ServiceProvider.GetRequiredService<IAuthorityServiceAccountStore>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Bootstrap/ServiceAccountAdminEndpointsTests.cs:130 var endpoints = scope.ServiceProvider.GetRequiredService<EndpointDataSource>().Endpoints;
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Bootstrap/ServiceAccountAdminEndpointsTests.cs:165 var accountStore = verificationScope.ServiceProvider.GetRequiredService<IAuthorityServiceAccountStore>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Bootstrap/ServiceAccountAdminEndpointsTests.cs:179 var tokenStore = scope.ServiceProvider.GetRequiredService<IAuthorityTokenStore>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Bootstrap/ServiceAccountAdminEndpointsTests.cs:264 var tokenStore = scope.ServiceProvider.GetRequiredService<IAuthorityTokenStore>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Bootstrap/ServiceAccountAdminEndpointsTests.cs:301 var tokenStore = scope.ServiceProvider.GetRequiredService<IAuthorityTokenStore>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Bootstrap/ServiceAccountAdminEndpointsTests.cs:305 var sessionAccessor = scope.ServiceProvider.GetRequiredService<IAuthoritySessionAccessor>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Bootstrap/ServiceAccountAdminEndpointsTests.cs:406 var tokenStore = scope.ServiceProvider.GetRequiredService<IAuthorityTokenStore>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Bootstrap/ServiceAccountAdminEndpointsTests.cs:462 var tokenStore = scope.ServiceProvider.GetRequiredService<IAuthorityTokenStore>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Bootstrap/ServiceAccountAdminEndpointsTests.cs:519 var store = scope.ServiceProvider.GetRequiredService<IAuthorityServiceAccountStore>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Bootstrap/ServiceAccountAdminEndpointsTests.cs:531 var store = scope.ServiceProvider.GetRequiredService<IAuthorityServiceAccountStore>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Console/ConsoleEndpointsTests.cs:38 var accessor = app.Services.GetRequiredService<TestPrincipalAccessor>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Console/ConsoleEndpointsTests.cs:74 var accessor = app.Services.GetRequiredService<TestPrincipalAccessor>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Console/ConsoleEndpointsTests.cs:98 var accessor = app.Services.GetRequiredService<TestPrincipalAccessor>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Console/ConsoleEndpointsTests.cs:134 var accessor = app.Services.GetRequiredService<TestPrincipalAccessor>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Console/ConsoleEndpointsTests.cs:173 var accessor = app.Services.GetRequiredService<TestPrincipalAccessor>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Console/ConsoleEndpointsTests.cs:204 var accessor = app.Services.GetRequiredService<TestPrincipalAccessor>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Console/ConsoleEndpointsTests.cs:230 var accessor = app.Services.GetRequiredService<TestPrincipalAccessor>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Console/ConsoleEndpointsTests.cs:258 var accessor = app.Services.GetRequiredService<TestPrincipalAccessor>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Console/ConsoleEndpointsTests.cs:288 var accessor = app.Services.GetRequiredService<TestPrincipalAccessor>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Console/ConsoleEndpointsTests.cs:314 var accessor = app.Services.GetRequiredService<TestPrincipalAccessor>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Console/ConsoleEndpointsTests.cs:349 var accessor = app.Services.GetRequiredService<TestPrincipalAccessor>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Console/ConsoleEndpointsTests.cs:369 var accessor = app.Services.GetRequiredService<TestPrincipalAccessor>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Console/ConsoleEndpointsTests.cs:395 var accessor = app.Services.GetRequiredService<TestPrincipalAccessor>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Console/ConsoleEndpointsTests.cs:427 var accessor = app.Services.GetRequiredService<TestPrincipalAccessor>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Console/ConsoleEndpointsTests.cs:460 var accessor = app.Services.GetRequiredService<TestPrincipalAccessor>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Console/ConsoleEndpointsTests.cs:486 var accessor = app.Services.GetRequiredService<TestPrincipalAccessor>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Console/ConsoleEndpointsTests.cs:506 var accessor = app.Services.GetRequiredService<TestPrincipalAccessor>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Console/ConsoleEndpointsTests.cs:664 var accessor = Context.RequestServices.GetRequiredService<TestPrincipalAccessor>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Console/ConsoleEndpointsTests.cs:680 var server = app.Services.GetRequiredService<IServer>() as TestServer
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Identity/AuthorityIdentityProviderRegistryTests.cs:25 using var serviceProvider = BuildServiceProvider(providers);
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Identity/AuthorityIdentityProviderRegistryTests.cs:54 using var serviceProvider = BuildServiceProvider(providers);
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Identity/AuthorityIdentityProviderRegistryTests.cs:84 using var serviceProvider = services.BuildServiceProvider();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Identity/AuthorityIdentityProviderRegistryTests.cs:95 private static ServiceProvider BuildServiceProvider(IEnumerable<IIdentityProviderPlugin> providers)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Identity/AuthorityIdentityProviderRegistryTests.cs:103 return services.BuildServiceProvider();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Identity/AuthorityIdentityProviderSelectorTests.cs:77 var serviceProvider = services.BuildServiceProvider();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Notifications/AuthorityAckTokenIssuerTests.cs:38 var issuer = provider.GetRequiredService<AuthorityAckTokenIssuer>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Notifications/AuthorityAckTokenIssuerTests.cs:39 var verifier = provider.GetRequiredService<AuthorityAckTokenVerifier>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Notifications/AuthorityAckTokenIssuerTests.cs:90 var issuer = provider.GetRequiredService<AuthorityAckTokenIssuer>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Notifications/AuthorityAckTokenIssuerTests.cs:91 var verifier = provider.GetRequiredService<AuthorityAckTokenVerifier>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Notifications/AuthorityAckTokenIssuerTests.cs:171 return services.BuildServiceProvider();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Notifications/AuthorityAckTokenKeyManagerTests.cs:36 var manager = provider.GetRequiredService<AuthorityAckTokenKeyManager>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Notifications/AuthorityAckTokenKeyManagerTests.cs:37 var jwksService = provider.GetRequiredService<AuthorityJwksService>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Notifications/AuthorityAckTokenKeyManagerTests.cs:122 return services.BuildServiceProvider();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenIddict/ClientCredentialsAndTokenHandlersTests.cs:5307 var provider = services.BuildServiceProvider();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenIddict/PasswordGrantHandlersTests.cs:735 var provider = services.BuildServiceProvider();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Permalinks/VulnPermalinkServiceTests.cs:60 provider.GetRequiredService<AuthoritySigningKeyManager>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Permalinks/VulnPermalinkServiceTests.cs:62 var service = provider.GetRequiredService<VulnPermalinkService>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Permalinks/VulnPermalinkServiceTests.cs:131 return services.BuildServiceProvider();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Plugins/AuthorityPluginLoaderTests.cs:100 var provider = services.BuildServiceProvider();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Plugins/AuthorityPluginLoaderTests.cs:101 Assert.NotNull(provider.GetRequiredService<TestMarkerService>());
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Plugins/AuthorityPluginLoaderTests.cs:138 var provider = services.BuildServiceProvider();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Plugins/AuthorityPluginLoaderTests.cs:139 var dependent = provider.GetRequiredService<DependentService>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Signing/AuthoritySigningKeyManagerTests.cs:50 var manager = provider.GetRequiredService<AuthoritySigningKeyManager>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Signing/AuthoritySigningKeyManagerTests.cs:51 var jwksService = provider.GetRequiredService<AuthorityJwksService>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Signing/AuthoritySigningKeyManagerTests.cs:113 return services.BuildServiceProvider();
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Align interface/field/const naming to standards.
+- Move and sort using directives (outside namespace).
+- Normalize namespaces to file-scoped StellaOps.<Area>.
+- Remove overrides that disable TreatWarningsAsErrors.
+- Rename async methods and avoid blocking async calls.
+- Replace service locator usage with constructor injection.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 45
+- Files with issues: 44
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/TestEnvironment.cs | NamespaceMissing; UsingNotSorted | Add file-scoped namespace: namespace StellaOps.<Area>;; Sort using directives alphabetically. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/AdvisoryAi/AdvisoryAiRemoteInferenceEndpointTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; PrivateFieldNaming; UsingInsideNamespace; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Move using directives outside namespace.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/AdvisoryAi/AuthorityAdvisoryAiConsentEvaluatorTests.cs | FileLength>100; PrivateFieldNaming; UsingNotSorted | Rename private fields to _camelCase.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Airgap/AirgapAuditEndpointsTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; PrivateFieldNaming; UsingInsideNamespace; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Move using directives outside namespace.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Airgap/AuthoritySealedModeEvidenceValidatorTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; UsingInsideNamespace; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Move using directives outside namespace.; Rename async methods to end with Async.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Audit/AuthorityAuditSinkTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Rename async methods to end with Async.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Auth/AuthorityAuthBypassTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; UsingInsideNamespace; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Move using directives outside namespace.; Rename async methods to end with Async.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Bootstrap/BootstrapInviteCleanupServiceTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; PrivateFieldNaming; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Bootstrap/ServiceAccountAdminEndpointsTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; PrivateFieldNaming; ServiceLocator; UsingInsideNamespace; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Move using directives outside namespace.; Remove service locator usage; use constructor injection.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Console/ConsoleEndpointsTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; PrivateFieldNaming; ServiceLocator; UsingInsideNamespace; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Move using directives outside namespace.; Remove service locator usage; use constructor injection.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Contract/AuthorityContractSnapshotTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; PrivateFieldNaming; UsingInsideNamespace; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Move using directives outside namespace.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Errors/KeyErrorClassificationTests.cs | FileLength>100; UsingInsideNamespace; UsingNotSorted | Move using directives outside namespace.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Identity/AuthorityIdentityProviderRegistryTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; ServiceLocator; UsingInsideNamespace; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Move using directives outside namespace.; Remove service locator usage; use constructor injection.; Rename async methods to end with Async.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Identity/AuthorityIdentityProviderSelectorTests.cs | FileLength>100; ServiceLocator | Remove service locator usage; use constructor injection.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Infrastructure/AuthorityWebApplicationFactory.cs | ConfigureAwaitMissing; FileLength>100; PrivateFieldNaming; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Rename private fields to _camelCase.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Infrastructure/EnvironmentVariableScope.cs | PrivateFieldNaming | Rename private fields to _camelCase. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Infrastructure/TestAirgapAuditStore.cs | PrivateFieldNaming; UsingNotSorted | Rename private fields to _camelCase.; Sort using directives alphabetically. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Infrastructure/TestAuthHandler.cs | UsingNotSorted | Sort using directives alphabetically. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/LocalPolicy/FallbackPolicyStoreIntegrationTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; NamespaceNotFileScoped; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Convert to file-scoped namespace.; Rename async methods to end with Async.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/LocalPolicy/FileBasedPolicyStoreTests.cs | FileLength>100; UsingNotSorted | Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Negative/AuthorityNegativeTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; UsingInsideNamespace; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Move using directives outside namespace.; Rename async methods to end with Async.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Notifications/AuthorityAckTokenIssuerTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; ServiceLocator; UsingInsideNamespace; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Move using directives outside namespace.; Remove service locator usage; use constructor injection.; Rename async methods to end with Async.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Notifications/AuthorityAckTokenKeyManagerTests.cs | FileLength>100; ServiceLocator; UsingInsideNamespace; UsingNotSorted | Move using directives outside namespace.; Remove service locator usage; use constructor injection.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Notifications/AuthorityWebhookAllowlistEvaluatorTests.cs | UsingNotSorted | Sort using directives alphabetically. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Notifications/NotifyAckTokenRotationEndpointTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; PrivateFieldNaming; UsingInsideNamespace; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Move using directives outside namespace.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Observability/AuthorityOTelTraceTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; PrivateFieldNaming; UsingInsideNamespace; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Move using directives outside namespace.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenApi/OpenApiDiscoveryEndpointTests.cs | AsyncNaming; ConfigureAwaitMissing; PrivateFieldNaming; UsingInsideNamespace; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Move using directives outside namespace.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Sort using directives alphabetically. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenIddict/ClientCredentialsAndTokenHandlersTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; PrivateFieldNaming; ServiceLocator; UsingInsideNamespace; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Move using directives outside namespace.; Remove service locator usage; use constructor injection.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenIddict/DiscoveryMetadataTests.cs | AsyncNaming; ConfigureAwaitMissing; PrivateFieldNaming; UsingInsideNamespace; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Move using directives outside namespace.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Sort using directives alphabetically. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenIddict/LegacyAuthDeprecationTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; PrivateFieldNaming; UsingInsideNamespace; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Move using directives outside namespace.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenIddict/PasswordGrantHandlersTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; PrivateFieldNaming; ServiceLocator; UsingInsideNamespace; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Move using directives outside namespace.; Remove service locator usage; use constructor injection.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/OpenIddict/TokenPersistenceIntegrationTests.cs | AsyncNaming; ConfigureAwaitMissing; PrivateFieldNaming; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Sort using directives alphabetically. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Permalinks/VulnPermalinkServiceTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; ServiceLocator; UsingInsideNamespace; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Move using directives outside namespace.; Remove service locator usage; use constructor injection.; Rename async methods to end with Async.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Plugins/AuthorityPluginLoaderTests.cs | FileLength>100; PrivateFieldNaming; ServiceLocator; UsingNotSorted | Remove service locator usage; use constructor injection.; Rename private fields to _camelCase.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/RateLimiting/AuthorityRateLimiterIntegrationTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; UsingInsideNamespace; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Move using directives outside namespace.; Rename async methods to end with Async.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/RateLimiting/AuthorityRateLimiterMetadataMiddlewareTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Rename async methods to end with Async.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/RateLimiting/AuthorityRateLimiterTests.cs | AsyncNaming; ConfigureAwaitMissing; UsingInsideNamespace; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Move using directives outside namespace.; Rename async methods to end with Async.; Sort using directives alphabetically. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Signing/AuthorityJwksServiceTests.cs | FileLength>100; PrivateFieldNaming; UsingInsideNamespace; UsingNotSorted | Move using directives outside namespace.; Rename private fields to _camelCase.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Signing/AuthoritySigningKeyManagerTests.cs | FileLength>100; ServiceLocator; UsingInsideNamespace; UsingNotSorted | Move using directives outside namespace.; Remove service locator usage; use constructor injection.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Signing/KmsAuthoritySigningKeySourceTests.cs | UsingInsideNamespace; UsingNotSorted | Move using directives outside namespace.; Sort using directives alphabetically. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Signing/TokenSignVerifyRoundtripTests.cs | FileLength>100; UsingInsideNamespace; UsingNotSorted | Move using directives outside namespace.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Storage/PostgresAdapterTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; PrivateFieldNaming; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Vulnerability/VulnTokenIssuerTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; PrivateFieldNaming; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/Vulnerability/VulnWorkflowTokenEndpointTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; PrivateFieldNaming; UsingInsideNamespace; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Move using directives outside namespace.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+
+## Testing Fullness Findings
+- Status: PASS
+- Expected layers (heuristic): 
+- Detected test projects: none
+- Missing layers: none
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- None.

docs/implplan-blocked/audits/csproj-standards/src/Authority/StellaOps.Authority/StellaOps.Authority/StellaOps.Authority.csproj

@@ -0,0 +1,357 @@
+# Audit - StellaOps.Authority
+
+## Project
+- Path: src/Authority/StellaOps.Authority/StellaOps.Authority/StellaOps.Authority.csproj
+- Module: Authority
+- Kind: Library
+- Audit date (UTC): 2026-01-30
+- Files scanned: 116
+- Files with issues: 115
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true
+- Deterministic: inherited true
+- 100-line rule violations: 62
+- Namespace violations: 114
+- Using directive violations: 0
+- Naming violations (interfaces/fields/const/async): 0
+- Service locator usage (BuildServiceProvider/GetService): 1
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/AuthorityIdentityProviderRegistry.cs (158 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/AuthorityRateLimiter.cs (118 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/LegacyAuthDeprecationMiddleware.cs (255 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Program.cs (3205 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/AdvisoryAi/AuthorityAdvisoryAiConsentEvaluator.cs (152 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Airgap/AirgapAuditEndpointExtensions.cs (322 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Airgap/AuthorityAirgapAuditService.cs (147 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Airgap/AuthoritySealedModeEvidenceValidator.cs (270 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Audit/AuthorityAuditSink.cs (238 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Bootstrap/BootstrapInviteCleanupService.cs (107 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Console/ConsoleEndpointExtensions.cs (941 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Console/ConsoleWorkspaceModels.cs (485 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Console/ConsoleWorkspaceSampleService.cs (624 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Console/Admin/ConsoleAdminEndpointExtensions.cs (747 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Console/Admin/ConsoleBrandingEndpointExtensions.cs (402 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/LocalPolicy/BreakGlassSessionManager.cs (552 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/LocalPolicy/FileBasedPolicyStore.cs (484 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/LocalPolicy/ILocalPolicyStore.cs (157 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/LocalPolicy/LocalPolicyModels.cs (320 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/LocalPolicy/LocalPolicyStoreOptions.cs (101 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/LocalPolicy/PolicyStoreFallback.cs (379 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Notifications/AuthorityWebhookAllowlistEvaluator.cs (108 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Notifications/Ack/AckTokenPayload.cs (254 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Notifications/Ack/AuthorityAckTokenIssuer.cs (211 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Notifications/Ack/AuthorityAckTokenKeyManager.cs (426 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Notifications/Ack/AuthorityAckTokenVerifier.cs (144 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Observability/IncidentAuditEndpointExtensions.cs (103 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenApi/AuthorityOpenApiDocumentProvider.cs (320 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenApi/OpenApiDiscoveryEndpointExtensions.cs (144 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/AuthoritySenderConstraintHelper.cs (103 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/TokenRequestTamperInspector.cs (128 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/ClientCredentialsAuditHelper.cs (270 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/ClientCredentialsHandlers.cs (2193 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/DpopHandlers.cs (763 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/PasswordGrantHandlers.cs (1784 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/RefreshTokenHandlers.cs (167 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/RevocationHandlers.cs (143 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/TokenPersistenceHandlers.cs (284 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/TokenValidationHandlers.cs (676 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Permalinks/VulnPermalinkService.cs (194 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Plugins/AuthorityPluginLoader.cs (343 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/RateLimiting/AuthorityRateLimiterMetadataAccessor.cs (130 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/RateLimiting/AuthorityRateLimiterMetadataMiddleware.cs (297 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Revocation/RevocationBundleBuilder.cs (221 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Revocation/RevocationBundleSigner.cs (123 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Security/AuthorityClientCertificateValidator.cs (320 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Signing/AuthorityDsseStatementSigner.cs (117 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Signing/AuthorityJwksService.cs (184 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Signing/AuthoritySigningKeyManager.cs (428 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Signing/FileAuthoritySigningKeySource.cs (141 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Signing/KmsAuthoritySigningKeySource.cs (118 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Storage/Postgres/PostgresAirgapAuditStore.cs (147 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Storage/Postgres/PostgresBootstrapInviteStore.cs (121 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Storage/Postgres/PostgresClientStore.cs (125 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Storage/Postgres/PostgresLoginAttemptStore.cs (137 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Storage/Postgres/PostgresTokenStore.cs (540 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Vulnerability/VulnTokenUtilities.cs (111 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Vulnerability/VulnTokenVerificationUtilities.cs (116 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Vulnerability/Attachments/VulnAttachmentTokenIssuer.cs (144 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Vulnerability/Attachments/VulnAttachmentTokenVerifier.cs (116 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Vulnerability/Workflow/VulnWorkflowAntiForgeryTokenIssuer.cs (235 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Vulnerability/Workflow/VulnWorkflowAntiForgeryTokenVerifier.cs (123 lines)
+- Namespace issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/AuthorityHttpHeaders.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/AuthorityIdentityProviderRegistry.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/AuthorityPluginRegistry.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/AuthorityRateLimiter.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/AuthorityTelemetryConfiguration.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/LegacyAuthDeprecationMiddleware.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Program.Partial.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/ServiceAccountAdminContracts.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/AdvisoryAi/AdvisoryAiRemoteInferenceLogRequest.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/AdvisoryAi/AuthorityAdvisoryAiConsentEvaluator.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Airgap/AirgapAuditEndpointExtensions.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Airgap/AuthorityAirgapAuditService.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Airgap/AuthoritySealedModeEvidenceValidator.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Audit/AuthorityAuditSink.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Audit/AuthorityCredentialAuditContextAccessor.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Bootstrap/BootstrapApiKeyFilter.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Bootstrap/BootstrapInviteCleanupService.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Bootstrap/BootstrapRequests.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Console/ConsoleEndpointExtensions.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Console/ConsoleWorkspaceModels.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Console/ConsoleWorkspaceSampleService.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Console/TenantHeaderFilter.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Console/Admin/ConsoleAdminEndpointExtensions.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Console/Admin/ConsoleBrandingEndpointExtensions.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/LocalPolicy/BreakGlassSessionManager.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/LocalPolicy/FileBasedPolicyStore.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/LocalPolicy/ILocalPolicyStore.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/LocalPolicy/LocalPolicyModels.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/LocalPolicy/LocalPolicyStoreOptions.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/LocalPolicy/PolicyStoreFallback.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Notifications/AuthorityWebhookAllowlistEvaluator.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Notifications/Ack/AckTokenModels.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Notifications/Ack/AckTokenPayload.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Notifications/Ack/AckTokenSigningUtilities.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Notifications/Ack/AuthorityAckTokenIssuer.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Notifications/Ack/AuthorityAckTokenKeyManager.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Notifications/Ack/AuthorityAckTokenVerifier.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/obj/Debug/net10.0/StellaOps.Authority.AssemblyInfo.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/obj/Debug/net10.0/StellaOps.Authority.GlobalUsings.g.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/obj/Release/net10.0/StellaOps.Authority.GlobalUsings.g.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Observability/IncidentAuditEndpointExtensions.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenApi/AuthorityOpenApiDocumentProvider.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenApi/OpenApiDiscoveryEndpointExtensions.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/AuthorityIdentityProviderSelector.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/AuthorityOpenIddictConstants.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/AuthoritySenderConstraintHelper.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/AuthorityTokenKinds.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/TokenRequestTamperInspector.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/ClientCredentialsAuditHelper.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/ClientCredentialsHandlers.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/DiscoveryHandlers.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/DpopHandlers.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/PasswordGrantHandlers.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/RefreshTokenHandlers.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/RevocationHandlers.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/TokenPersistenceHandlers.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/TokenValidationHandlers.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Permalinks/VulnPermalinkRequest.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Permalinks/VulnPermalinkResponse.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Permalinks/VulnPermalinkService.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Plugins/AuthorityPluginLoader.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Plugins/AuthorityPluginRegistrationSummary.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/RateLimiting/AuthorityRateLimiterFeature.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/RateLimiting/AuthorityRateLimiterMetadata.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/RateLimiting/AuthorityRateLimiterMetadataAccessor.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/RateLimiting/AuthorityRateLimiterMetadataMiddleware.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/RateLimiting/AuthorityRateLimiterPartitionKeyResolver.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/RateLimiting/AuthorityRateLimitingApplicationBuilderExtensions.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Revocation/AuthorityRevocationExportService.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Revocation/RevocationBundleBuilder.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Revocation/RevocationBundleBuildResult.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Revocation/RevocationBundleModel.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Revocation/RevocationBundleSignature.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Revocation/RevocationBundleSigner.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Revocation/RevocationEntryModel.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Revocation/RevocationExportPackage.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Revocation/RevocationExportResponse.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Security/AuthorityClientCertificateValidationResult.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Security/AuthorityClientCertificateValidator.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Security/AuthoritySecretHasherInitializer.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Security/AuthoritySenderConstraintKinds.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Security/IAuthorityClientCertificateValidator.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Signing/AuthorityDsseStatementSigner.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Signing/AuthorityJwksService.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Signing/AuthoritySignerAdapter.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Signing/AuthoritySigningKeyManager.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Signing/AuthoritySigningKeyRequest.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Signing/AuthoritySigningKeyStatus.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Signing/FileAuthoritySigningKeySource.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Signing/IAuthoritySigningKeySource.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Signing/KmsAuthoritySigningKeySource.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Signing/SigningRotationRequest.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Storage/AuthorityIdGenerator.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Storage/Postgres/PostgresAirgapAuditStore.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Storage/Postgres/PostgresBootstrapInviteStore.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Storage/Postgres/PostgresClientStore.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Storage/Postgres/PostgresLoginAttemptStore.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Storage/Postgres/PostgresRevocationExportStateStore.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Storage/Postgres/PostgresRevocationStore.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Storage/Postgres/PostgresServiceAccountStore.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Storage/Postgres/PostgresTokenStore.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Tenants/AuthorityTenantCatalog.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Vulnerability/VulnTokenSigner.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Vulnerability/VulnTokenUtilities.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Vulnerability/VulnTokenVerificationUtilities.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Vulnerability/Attachments/VulnAttachmentTokenIssuer.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Vulnerability/Attachments/VulnAttachmentTokenModels.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Vulnerability/Attachments/VulnAttachmentTokenPayload.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Vulnerability/Attachments/VulnAttachmentTokenVerifier.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Vulnerability/Workflow/VulnWorkflowAntiForgeryModels.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Vulnerability/Workflow/VulnWorkflowAntiForgeryPayload.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Vulnerability/Workflow/VulnWorkflowAntiForgeryTokenIssuer.cs: missing namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Vulnerability/Workflow/VulnWorkflowAntiForgeryTokenVerifier.cs: missing namespace
+- Using directive issues:
+  - none
+- Naming issues:
+  - none
+- Async issues:
+  - none
+- Service locator matches:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Plugins/AuthorityPluginLoader.cs:255 provider = services.BuildServiceProvider(new ServiceProviderOptions
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Normalize namespaces to file-scoped StellaOps.<Area>.
+- Replace service locator usage with constructor injection.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 116
+- Files with issues: 115
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/AuthorityHttpHeaders.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/AuthorityIdentityProviderRegistry.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/AuthorityPluginRegistry.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/AuthorityRateLimiter.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/AuthorityTelemetryConfiguration.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/LegacyAuthDeprecationMiddleware.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Program.cs | FileLength>100 | Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Program.Partial.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/ServiceAccountAdminContracts.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/AdvisoryAi/AdvisoryAiRemoteInferenceLogRequest.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/AdvisoryAi/AuthorityAdvisoryAiConsentEvaluator.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Airgap/AirgapAuditEndpointExtensions.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Airgap/AuthorityAirgapAuditService.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Airgap/AuthoritySealedModeEvidenceValidator.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Audit/AuthorityAuditSink.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Audit/AuthorityCredentialAuditContextAccessor.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Bootstrap/BootstrapApiKeyFilter.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Bootstrap/BootstrapInviteCleanupService.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Bootstrap/BootstrapRequests.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Console/ConsoleEndpointExtensions.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Console/ConsoleWorkspaceModels.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Console/ConsoleWorkspaceSampleService.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Console/TenantHeaderFilter.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Console/Admin/ConsoleAdminEndpointExtensions.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Console/Admin/ConsoleBrandingEndpointExtensions.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/LocalPolicy/BreakGlassSessionManager.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/LocalPolicy/FileBasedPolicyStore.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/LocalPolicy/ILocalPolicyStore.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/LocalPolicy/LocalPolicyModels.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/LocalPolicy/LocalPolicyStoreOptions.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/LocalPolicy/PolicyStoreFallback.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Notifications/AuthorityWebhookAllowlistEvaluator.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Notifications/Ack/AckTokenModels.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Notifications/Ack/AckTokenPayload.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Notifications/Ack/AckTokenSigningUtilities.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Notifications/Ack/AuthorityAckTokenIssuer.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Notifications/Ack/AuthorityAckTokenKeyManager.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Notifications/Ack/AuthorityAckTokenVerifier.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/obj/Debug/net10.0/StellaOps.Authority.AssemblyInfo.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/obj/Debug/net10.0/StellaOps.Authority.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/obj/Release/net10.0/StellaOps.Authority.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Observability/IncidentAuditEndpointExtensions.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/OpenApi/AuthorityOpenApiDocumentProvider.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/OpenApi/OpenApiDiscoveryEndpointExtensions.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/AuthorityIdentityProviderSelector.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/AuthorityOpenIddictConstants.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/AuthoritySenderConstraintHelper.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/AuthorityTokenKinds.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/TokenRequestTamperInspector.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/ClientCredentialsAuditHelper.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/ClientCredentialsHandlers.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/DiscoveryHandlers.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/DpopHandlers.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/PasswordGrantHandlers.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/RefreshTokenHandlers.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/RevocationHandlers.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/TokenPersistenceHandlers.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/TokenValidationHandlers.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Permalinks/VulnPermalinkRequest.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Permalinks/VulnPermalinkResponse.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Permalinks/VulnPermalinkService.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Plugins/AuthorityPluginLoader.cs | FileLength>100; NamespaceMissing; ServiceLocator | Add file-scoped namespace: namespace StellaOps.<Area>;; Remove service locator usage; use constructor injection.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Plugins/AuthorityPluginRegistrationSummary.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/RateLimiting/AuthorityRateLimiterFeature.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/RateLimiting/AuthorityRateLimiterMetadata.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/RateLimiting/AuthorityRateLimiterMetadataAccessor.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/RateLimiting/AuthorityRateLimiterMetadataMiddleware.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/RateLimiting/AuthorityRateLimiterPartitionKeyResolver.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/RateLimiting/AuthorityRateLimitingApplicationBuilderExtensions.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Revocation/AuthorityRevocationExportService.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Revocation/RevocationBundleBuilder.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Revocation/RevocationBundleBuildResult.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Revocation/RevocationBundleModel.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Revocation/RevocationBundleSignature.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Revocation/RevocationBundleSigner.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Revocation/RevocationEntryModel.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Revocation/RevocationExportPackage.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Revocation/RevocationExportResponse.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Security/AuthorityClientCertificateValidationResult.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Security/AuthorityClientCertificateValidator.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Security/AuthoritySecretHasherInitializer.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Security/AuthoritySenderConstraintKinds.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Security/IAuthorityClientCertificateValidator.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Signing/AuthorityDsseStatementSigner.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Signing/AuthorityJwksService.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Signing/AuthoritySignerAdapter.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Signing/AuthoritySigningKeyManager.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Signing/AuthoritySigningKeyRequest.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Signing/AuthoritySigningKeyStatus.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Signing/FileAuthoritySigningKeySource.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Signing/IAuthoritySigningKeySource.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Signing/KmsAuthoritySigningKeySource.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Signing/SigningRotationRequest.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Storage/AuthorityIdGenerator.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Storage/Postgres/PostgresAirgapAuditStore.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Storage/Postgres/PostgresBootstrapInviteStore.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Storage/Postgres/PostgresClientStore.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Storage/Postgres/PostgresLoginAttemptStore.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Storage/Postgres/PostgresRevocationExportStateStore.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Storage/Postgres/PostgresRevocationStore.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Storage/Postgres/PostgresServiceAccountStore.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Storage/Postgres/PostgresTokenStore.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Tenants/AuthorityTenantCatalog.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Vulnerability/VulnTokenSigner.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Vulnerability/VulnTokenUtilities.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Vulnerability/VulnTokenVerificationUtilities.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Vulnerability/Attachments/VulnAttachmentTokenIssuer.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Vulnerability/Attachments/VulnAttachmentTokenModels.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Vulnerability/Attachments/VulnAttachmentTokenPayload.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Vulnerability/Attachments/VulnAttachmentTokenVerifier.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Vulnerability/Workflow/VulnWorkflowAntiForgeryModels.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Vulnerability/Workflow/VulnWorkflowAntiForgeryPayload.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Vulnerability/Workflow/VulnWorkflowAntiForgeryTokenIssuer.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Vulnerability/Workflow/VulnWorkflowAntiForgeryTokenVerifier.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+
+## Testing Fullness Findings
+- Status: FAIL
+- Expected layers (heuristic): Unit
+- Detected test projects: src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/StellaOps.Authority.Tests.csproj [Security]
+- Missing layers: Unit
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- Add or expand test projects to cover missing layers.
+- Ensure tests use deterministic fixtures and offline harnesses.

docs/implplan-blocked/audits/csproj-standards/src/Authority/StellaOps.Authority/StellaOps.Authority/StellaOps.Authority.md

@@ -0,0 +1,337 @@
+# Audit - StellaOps.Authority
+
+## Project
+- Path: src/Authority/StellaOps.Authority/StellaOps.Authority/StellaOps.Authority.csproj
+- Module: Authority
+- Kind: Library
+- Audit date (UTC): 2026-01-31
+- Files scanned: 112
+- Files with issues: 76
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true
+- Deterministic: inherited true
+- 100-line rule violations: 62
+- Namespace violations: 1
+- Using directive violations: 18
+- Naming violations (interfaces/fields/const/async): 97
+- Service locator usage (BuildServiceProvider/GetService): 18
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/AuthorityIdentityProviderRegistry.cs (159 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/AuthorityRateLimiter.cs (119 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/LegacyAuthDeprecationMiddleware.cs (256 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Program.cs (3205 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/AdvisoryAi/AuthorityAdvisoryAiConsentEvaluator.cs (153 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Airgap/AirgapAuditEndpointExtensions.cs (323 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Airgap/AuthorityAirgapAuditService.cs (148 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Airgap/AuthoritySealedModeEvidenceValidator.cs (271 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Audit/AuthorityAuditSink.cs (239 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Bootstrap/BootstrapInviteCleanupService.cs (108 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Console/ConsoleEndpointExtensions.cs (942 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Console/ConsoleWorkspaceModels.cs (485 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Console/ConsoleWorkspaceSampleService.cs (625 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Console/Admin/ConsoleAdminEndpointExtensions.cs (748 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Console/Admin/ConsoleBrandingEndpointExtensions.cs (403 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/LocalPolicy/BreakGlassSessionManager.cs (553 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/LocalPolicy/FileBasedPolicyStore.cs (485 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/LocalPolicy/ILocalPolicyStore.cs (157 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/LocalPolicy/LocalPolicyModels.cs (320 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/LocalPolicy/LocalPolicyStoreOptions.cs (101 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/LocalPolicy/PolicyStoreFallback.cs (379 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Notifications/AuthorityWebhookAllowlistEvaluator.cs (109 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Notifications/Ack/AckTokenPayload.cs (255 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Notifications/Ack/AuthorityAckTokenIssuer.cs (212 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Notifications/Ack/AuthorityAckTokenKeyManager.cs (427 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Notifications/Ack/AuthorityAckTokenVerifier.cs (145 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Observability/IncidentAuditEndpointExtensions.cs (104 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenApi/AuthorityOpenApiDocumentProvider.cs (321 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenApi/OpenApiDiscoveryEndpointExtensions.cs (145 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/AuthoritySenderConstraintHelper.cs (104 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/TokenRequestTamperInspector.cs (129 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/ClientCredentialsAuditHelper.cs (271 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/ClientCredentialsHandlers.cs (2194 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/DpopHandlers.cs (764 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/PasswordGrantHandlers.cs (1785 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/RefreshTokenHandlers.cs (168 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/RevocationHandlers.cs (144 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/TokenPersistenceHandlers.cs (285 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/TokenValidationHandlers.cs (677 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Permalinks/VulnPermalinkService.cs (195 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Plugins/AuthorityPluginLoader.cs (344 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/RateLimiting/AuthorityRateLimiterMetadataAccessor.cs (131 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/RateLimiting/AuthorityRateLimiterMetadataMiddleware.cs (298 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Revocation/RevocationBundleBuilder.cs (222 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Revocation/RevocationBundleSigner.cs (124 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Security/AuthorityClientCertificateValidator.cs (321 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Signing/AuthorityDsseStatementSigner.cs (118 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Signing/AuthorityJwksService.cs (185 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Signing/AuthoritySigningKeyManager.cs (429 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Signing/FileAuthoritySigningKeySource.cs (142 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Signing/KmsAuthoritySigningKeySource.cs (119 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Storage/Postgres/PostgresAirgapAuditStore.cs (148 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Storage/Postgres/PostgresBootstrapInviteStore.cs (122 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Storage/Postgres/PostgresClientStore.cs (126 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Storage/Postgres/PostgresLoginAttemptStore.cs (138 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Storage/Postgres/PostgresTokenStore.cs (541 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Vulnerability/VulnTokenUtilities.cs (112 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Vulnerability/VulnTokenVerificationUtilities.cs (117 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Vulnerability/Attachments/VulnAttachmentTokenIssuer.cs (145 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Vulnerability/Attachments/VulnAttachmentTokenVerifier.cs (117 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Vulnerability/Workflow/VulnWorkflowAntiForgeryTokenIssuer.cs (236 lines)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Vulnerability/Workflow/VulnWorkflowAntiForgeryTokenVerifier.cs (124 lines)
+- Namespace issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Program.Partial.cs: missing namespace
+- Using directive issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/AuthorityIdentityProviderRegistry.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Program.cs: using directives not sorted
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Airgap/AuthoritySealedModeEvidenceValidator.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Audit/AuthorityAuditSink.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Console/ConsoleWorkspaceSampleService.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Notifications/Ack/AckTokenPayload.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Notifications/Ack/AckTokenSigningUtilities.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenApi/AuthorityOpenApiDocumentProvider.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/ClientCredentialsHandlers.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/DpopHandlers.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/PasswordGrantHandlers.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/RevocationHandlers.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/TokenPersistenceHandlers.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/TokenValidationHandlers.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Permalinks/VulnPermalinkService.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Signing/FileAuthoritySigningKeySource.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Vulnerability/VulnTokenVerificationUtilities.cs: using directives inside namespace
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Vulnerability/Workflow/VulnWorkflowAntiForgeryTokenIssuer.cs: using directives inside namespace
+- Naming issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/AuthorityIdentityProviderRegistry.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/AuthorityRateLimiter.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/LegacyAuthDeprecationMiddleware.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/AdvisoryAi/AuthorityAdvisoryAiConsentEvaluator.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Airgap/AirgapAuditEndpointExtensions.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Airgap/AuthorityAirgapAuditService.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Airgap/AuthoritySealedModeEvidenceValidator.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Audit/AuthorityAuditSink.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Audit/AuthorityCredentialAuditContextAccessor.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Bootstrap/BootstrapApiKeyFilter.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Bootstrap/BootstrapInviteCleanupService.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Console/ConsoleWorkspaceSampleService.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Notifications/AuthorityWebhookAllowlistEvaluator.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Notifications/Ack/AckTokenPayload.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Notifications/Ack/AckTokenSigningUtilities.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Notifications/Ack/AuthorityAckTokenIssuer.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Notifications/Ack/AuthorityAckTokenKeyManager.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Notifications/Ack/AuthorityAckTokenVerifier.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenApi/AuthorityOpenApiDocumentProvider.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenApi/OpenApiDiscoveryEndpointExtensions.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/TokenRequestTamperInspector.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/ClientCredentialsHandlers.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/DiscoveryHandlers.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/DpopHandlers.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/PasswordGrantHandlers.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/RefreshTokenHandlers.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/RevocationHandlers.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/TokenPersistenceHandlers.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/TokenValidationHandlers.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Permalinks/VulnPermalinkService.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Plugins/AuthorityPluginLoader.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/RateLimiting/AuthorityRateLimiterMetadata.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/RateLimiting/AuthorityRateLimiterMetadataAccessor.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/RateLimiting/AuthorityRateLimiterMetadataMiddleware.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Revocation/AuthorityRevocationExportService.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Revocation/RevocationBundleBuilder.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Revocation/RevocationBundleSigner.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Security/AuthorityClientCertificateValidator.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Security/AuthoritySecretHasherInitializer.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Signing/AuthorityDsseStatementSigner.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Signing/AuthorityJwksService.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Signing/AuthoritySignerAdapter.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Signing/AuthoritySigningKeyManager.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Signing/FileAuthoritySigningKeySource.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Storage/Postgres/PostgresAirgapAuditStore.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Storage/Postgres/PostgresBootstrapInviteStore.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Storage/Postgres/PostgresClientStore.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Storage/Postgres/PostgresLoginAttemptStore.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Storage/Postgres/PostgresRevocationExportStateStore.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Storage/Postgres/PostgresRevocationStore.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Storage/Postgres/PostgresServiceAccountStore.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Storage/Postgres/PostgresTokenStore.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Tenants/AuthorityTenantCatalog.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Vulnerability/VulnTokenSigner.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Vulnerability/VulnTokenVerificationUtilities.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Vulnerability/Attachments/VulnAttachmentTokenIssuer.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Vulnerability/Attachments/VulnAttachmentTokenVerifier.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Vulnerability/Workflow/VulnWorkflowAntiForgeryTokenIssuer.cs: private field naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Vulnerability/Workflow/VulnWorkflowAntiForgeryTokenVerifier.cs: private field naming
+- Async issues:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/AuthorityIdentityProviderRegistry.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/AuthorityRateLimiter.cs: missing ConfigureAwait(false)
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/LegacyAuthDeprecationMiddleware.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Airgap/AuthorityAirgapAuditService.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Airgap/AuthoritySealedModeEvidenceValidator.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Audit/AuthorityAuditSink.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Bootstrap/BootstrapApiKeyFilter.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Bootstrap/BootstrapInviteCleanupService.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Console/ConsoleEndpointExtensions.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Console/Admin/ConsoleAdminEndpointExtensions.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Console/Admin/ConsoleBrandingEndpointExtensions.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/LocalPolicy/FileBasedPolicyStore.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/LocalPolicy/PolicyStoreFallback.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenApi/AuthorityOpenApiDocumentProvider.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/ClientCredentialsHandlers.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/DpopHandlers.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/PasswordGrantHandlers.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/RefreshTokenHandlers.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/RevocationHandlers.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/TokenPersistenceHandlers.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/TokenValidationHandlers.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Permalinks/VulnPermalinkService.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/RateLimiting/AuthorityRateLimiterMetadataMiddleware.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Revocation/AuthorityRevocationExportService.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Revocation/RevocationBundleBuilder.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Revocation/RevocationBundleSigner.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Signing/AuthorityDsseStatementSigner.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Signing/AuthorityJwksService.cs: blocking async usage
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Signing/AuthoritySignerAdapter.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Signing/KmsAuthoritySigningKeySource.cs: blocking async usage
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Storage/Postgres/PostgresAirgapAuditStore.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Storage/Postgres/PostgresBootstrapInviteStore.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Storage/Postgres/PostgresClientStore.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Storage/Postgres/PostgresLoginAttemptStore.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Storage/Postgres/PostgresRevocationExportStateStore.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Storage/Postgres/PostgresRevocationStore.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Storage/Postgres/PostgresServiceAccountStore.cs: async method naming
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Storage/Postgres/PostgresTokenStore.cs: async method naming
+- Service locator matches:
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/AuthorityIdentityProviderRegistry.cs:30 using var scope = serviceProvider.CreateScope();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/AuthorityIdentityProviderRegistry.cs:31 var providerInstances = scope.ServiceProvider.GetServices<IIdentityProviderPlugin>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/AuthorityIdentityProviderRegistry.cs:136 var scope = serviceProvider.CreateAsyncScope();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/AuthorityIdentityProviderRegistry.cs:140 .GetServices<IIdentityProviderPlugin>()
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/AuthorityRateLimiter.cs:33 logger ??= httpContext.RequestServices.GetService(typeof(ILoggerFactory)) is ILoggerFactory loggerFactory
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/AuthorityRateLimiter.cs:109 ? serviceProvider.GetService(typeof(IAuthorityRateLimiterPartitionKeyResolver)) as IAuthorityRateLimiterPartitionKeyResolver ?? FallbackPartitionKeyResolver
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Program.cs:172 builder.Services.TryAddSingleton<IDpopReplayCache>(provider => new InMemoryDpopReplayCache(provider.GetService<TimeProvider>()));
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Program.cs:181 var multiplexer = provider.GetRequiredService<IConnectionMultiplexer>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Program.cs:182 var timeProvider = provider.GetService<TimeProvider>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Program.cs:190 var timeProvider = provider.GetService<TimeProvider>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Program.cs:191 var nonceLogger = provider.GetService<ILogger<InMemoryDpopNonceStore>>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Program.cs:419 var serviceAccountStore = app.Services.GetRequiredService<IAuthorityServiceAccountStore>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Program.cs:457 var registrationSummary = app.Services.GetRequiredService<AuthorityPluginRegistrationSummary>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Program.cs:480 var identityProviderRegistry = app.Services.GetRequiredService<IAuthorityIdentityProviderRegistry>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Program.cs:3142 app.Services.GetRequiredService<AuthorityAckTokenKeyManager>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Program.cs:3143 app.Services.GetRequiredService<AuthoritySigningKeyManager>();
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Plugins/AuthorityPluginLoader.cs:256 provider = services.BuildServiceProvider(new ServiceProviderOptions
+  - src/Authority/StellaOps.Authority/StellaOps.Authority/Plugins/AuthorityPluginLoader.cs:262 var registrar = (IAuthorityPluginRegistrar)ActivatorUtilities.GetServiceOrCreateInstance(scope.ServiceProvider, registrarType);
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Align interface/field/const naming to standards.
+- Move and sort using directives (outside namespace).
+- Normalize namespaces to file-scoped StellaOps.<Area>.
+- Rename async methods and avoid blocking async calls.
+- Replace service locator usage with constructor injection.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 112
+- Files with issues: 76
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/AuthorityIdentityProviderRegistry.cs | AsyncNaming; FileLength>100; PrivateFieldNaming; ServiceLocator; UsingInsideNamespace | Move using directives outside namespace.; Remove service locator usage; use constructor injection.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/AuthorityRateLimiter.cs | ConfigureAwaitMissing; FileLength>100; PrivateFieldNaming; ServiceLocator | Add ConfigureAwait(false) to awaited calls in library-like code.; Remove service locator usage; use constructor injection.; Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/LegacyAuthDeprecationMiddleware.cs | AsyncNaming; FileLength>100; PrivateFieldNaming | Rename async methods to end with Async.; Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Program.cs | FileLength>100; ServiceLocator; UsingNotSorted | Remove service locator usage; use constructor injection.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Program.Partial.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/AdvisoryAi/AuthorityAdvisoryAiConsentEvaluator.cs | FileLength>100; PrivateFieldNaming | Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Airgap/AirgapAuditEndpointExtensions.cs | FileLength>100; PrivateFieldNaming | Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Airgap/AuthorityAirgapAuditService.cs | AsyncNaming; FileLength>100; PrivateFieldNaming | Rename async methods to end with Async.; Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Airgap/AuthoritySealedModeEvidenceValidator.cs | AsyncNaming; FileLength>100; PrivateFieldNaming; UsingInsideNamespace | Move using directives outside namespace.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Audit/AuthorityAuditSink.cs | AsyncNaming; FileLength>100; PrivateFieldNaming; UsingInsideNamespace | Move using directives outside namespace.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Audit/AuthorityCredentialAuditContextAccessor.cs | PrivateFieldNaming | Rename private fields to _camelCase. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Bootstrap/BootstrapApiKeyFilter.cs | AsyncNaming; PrivateFieldNaming | Rename async methods to end with Async.; Rename private fields to _camelCase. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Bootstrap/BootstrapInviteCleanupService.cs | AsyncNaming; FileLength>100; PrivateFieldNaming | Rename async methods to end with Async.; Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Console/ConsoleEndpointExtensions.cs | AsyncNaming; FileLength>100 | Rename async methods to end with Async.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Console/ConsoleWorkspaceModels.cs | FileLength>100 | Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Console/ConsoleWorkspaceSampleService.cs | FileLength>100; PrivateFieldNaming; UsingInsideNamespace | Move using directives outside namespace.; Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Console/Admin/ConsoleAdminEndpointExtensions.cs | AsyncNaming; FileLength>100 | Rename async methods to end with Async.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Console/Admin/ConsoleBrandingEndpointExtensions.cs | AsyncNaming; FileLength>100 | Rename async methods to end with Async.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/LocalPolicy/BreakGlassSessionManager.cs | FileLength>100 | Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/LocalPolicy/FileBasedPolicyStore.cs | AsyncNaming; FileLength>100 | Rename async methods to end with Async.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/LocalPolicy/ILocalPolicyStore.cs | FileLength>100 | Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/LocalPolicy/LocalPolicyModels.cs | FileLength>100 | Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/LocalPolicy/LocalPolicyStoreOptions.cs | FileLength>100 | Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/LocalPolicy/PolicyStoreFallback.cs | AsyncNaming; FileLength>100 | Rename async methods to end with Async.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Notifications/AuthorityWebhookAllowlistEvaluator.cs | FileLength>100; PrivateFieldNaming | Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Notifications/Ack/AckTokenPayload.cs | FileLength>100; PrivateFieldNaming; UsingInsideNamespace | Move using directives outside namespace.; Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Notifications/Ack/AckTokenSigningUtilities.cs | PrivateFieldNaming; UsingInsideNamespace | Move using directives outside namespace.; Rename private fields to _camelCase. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Notifications/Ack/AuthorityAckTokenIssuer.cs | FileLength>100; PrivateFieldNaming | Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Notifications/Ack/AuthorityAckTokenKeyManager.cs | FileLength>100; PrivateFieldNaming | Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Notifications/Ack/AuthorityAckTokenVerifier.cs | FileLength>100; PrivateFieldNaming | Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Observability/IncidentAuditEndpointExtensions.cs | FileLength>100 | Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/OpenApi/AuthorityOpenApiDocumentProvider.cs | AsyncNaming; FileLength>100; PrivateFieldNaming; UsingInsideNamespace | Move using directives outside namespace.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/OpenApi/OpenApiDiscoveryEndpointExtensions.cs | FileLength>100; PrivateFieldNaming | Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/AuthoritySenderConstraintHelper.cs | FileLength>100 | Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/TokenRequestTamperInspector.cs | FileLength>100; PrivateFieldNaming | Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/ClientCredentialsAuditHelper.cs | FileLength>100 | Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/ClientCredentialsHandlers.cs | AsyncNaming; FileLength>100; PrivateFieldNaming; UsingInsideNamespace | Move using directives outside namespace.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/DiscoveryHandlers.cs | PrivateFieldNaming | Rename private fields to _camelCase. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/DpopHandlers.cs | AsyncNaming; FileLength>100; PrivateFieldNaming; UsingInsideNamespace | Move using directives outside namespace.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/PasswordGrantHandlers.cs | AsyncNaming; FileLength>100; PrivateFieldNaming; UsingInsideNamespace | Move using directives outside namespace.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/RefreshTokenHandlers.cs | AsyncNaming; FileLength>100; PrivateFieldNaming | Rename async methods to end with Async.; Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/RevocationHandlers.cs | AsyncNaming; FileLength>100; PrivateFieldNaming; UsingInsideNamespace | Move using directives outside namespace.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/TokenPersistenceHandlers.cs | AsyncNaming; FileLength>100; PrivateFieldNaming; UsingInsideNamespace | Move using directives outside namespace.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/OpenIddict/Handlers/TokenValidationHandlers.cs | AsyncNaming; FileLength>100; PrivateFieldNaming; UsingInsideNamespace | Move using directives outside namespace.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Permalinks/VulnPermalinkService.cs | AsyncNaming; FileLength>100; PrivateFieldNaming; UsingInsideNamespace | Move using directives outside namespace.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Plugins/AuthorityPluginLoader.cs | FileLength>100; PrivateFieldNaming; ServiceLocator | Remove service locator usage; use constructor injection.; Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/RateLimiting/AuthorityRateLimiterMetadata.cs | PrivateFieldNaming | Rename private fields to _camelCase. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/RateLimiting/AuthorityRateLimiterMetadataAccessor.cs | FileLength>100; PrivateFieldNaming | Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/RateLimiting/AuthorityRateLimiterMetadataMiddleware.cs | AsyncNaming; FileLength>100; PrivateFieldNaming | Rename async methods to end with Async.; Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Revocation/AuthorityRevocationExportService.cs | AsyncNaming; PrivateFieldNaming | Rename async methods to end with Async.; Rename private fields to _camelCase. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Revocation/RevocationBundleBuilder.cs | AsyncNaming; FileLength>100; PrivateFieldNaming | Rename async methods to end with Async.; Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Revocation/RevocationBundleSigner.cs | AsyncNaming; FileLength>100; PrivateFieldNaming | Rename async methods to end with Async.; Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Security/AuthorityClientCertificateValidator.cs | FileLength>100; PrivateFieldNaming | Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Security/AuthoritySecretHasherInitializer.cs | PrivateFieldNaming | Rename private fields to _camelCase. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Signing/AuthorityDsseStatementSigner.cs | AsyncNaming; FileLength>100; PrivateFieldNaming | Rename async methods to end with Async.; Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Signing/AuthorityJwksService.cs | BlockingAsync; FileLength>100; PrivateFieldNaming | Rename private fields to _camelCase.; Replace .Result/.Wait/GetAwaiter().GetResult() with await.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Signing/AuthoritySignerAdapter.cs | AsyncNaming; PrivateFieldNaming | Rename async methods to end with Async.; Rename private fields to _camelCase. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Signing/AuthoritySigningKeyManager.cs | FileLength>100; PrivateFieldNaming | Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Signing/FileAuthoritySigningKeySource.cs | FileLength>100; PrivateFieldNaming; UsingInsideNamespace | Move using directives outside namespace.; Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Signing/KmsAuthoritySigningKeySource.cs | BlockingAsync; FileLength>100 | Replace .Result/.Wait/GetAwaiter().GetResult() with await.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Storage/Postgres/PostgresAirgapAuditStore.cs | AsyncNaming; FileLength>100; PrivateFieldNaming | Rename async methods to end with Async.; Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Storage/Postgres/PostgresBootstrapInviteStore.cs | AsyncNaming; FileLength>100; PrivateFieldNaming | Rename async methods to end with Async.; Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Storage/Postgres/PostgresClientStore.cs | AsyncNaming; FileLength>100; PrivateFieldNaming | Rename async methods to end with Async.; Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Storage/Postgres/PostgresLoginAttemptStore.cs | AsyncNaming; FileLength>100; PrivateFieldNaming | Rename async methods to end with Async.; Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Storage/Postgres/PostgresRevocationExportStateStore.cs | AsyncNaming; PrivateFieldNaming | Rename async methods to end with Async.; Rename private fields to _camelCase. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Storage/Postgres/PostgresRevocationStore.cs | AsyncNaming; PrivateFieldNaming | Rename async methods to end with Async.; Rename private fields to _camelCase. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Storage/Postgres/PostgresServiceAccountStore.cs | AsyncNaming; PrivateFieldNaming | Rename async methods to end with Async.; Rename private fields to _camelCase. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Storage/Postgres/PostgresTokenStore.cs | AsyncNaming; FileLength>100; PrivateFieldNaming | Rename async methods to end with Async.; Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Tenants/AuthorityTenantCatalog.cs | PrivateFieldNaming | Rename private fields to _camelCase. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Vulnerability/VulnTokenSigner.cs | PrivateFieldNaming | Rename private fields to _camelCase. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Vulnerability/VulnTokenUtilities.cs | FileLength>100 | Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Vulnerability/VulnTokenVerificationUtilities.cs | FileLength>100; PrivateFieldNaming; UsingInsideNamespace | Move using directives outside namespace.; Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Vulnerability/Attachments/VulnAttachmentTokenIssuer.cs | FileLength>100; PrivateFieldNaming | Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Vulnerability/Attachments/VulnAttachmentTokenVerifier.cs | FileLength>100; PrivateFieldNaming | Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Vulnerability/Workflow/VulnWorkflowAntiForgeryTokenIssuer.cs | FileLength>100; PrivateFieldNaming; UsingInsideNamespace | Move using directives outside namespace.; Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/StellaOps.Authority/StellaOps.Authority/Vulnerability/Workflow/VulnWorkflowAntiForgeryTokenVerifier.cs | FileLength>100; PrivateFieldNaming | Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+
+## Testing Fullness Findings
+- Status: FAIL
+- Expected layers (heuristic): Unit
+- Detected test projects: src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/StellaOps.Authority.Tests.csproj [Security]
+- Missing layers: Unit
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- Add or expand test projects to cover missing layers.
+- Ensure tests use deterministic fixtures and offline harnesses.

docs/implplan-blocked/audits/csproj-standards/src/Authority/__Libraries/StellaOps.Authority.Core/StellaOps.Authority.Core.csproj

@@ -0,0 +1,94 @@
+# Audit - StellaOps.Authority.Core
+
+## Project
+- Path: src/Authority/__Libraries/StellaOps.Authority.Core/StellaOps.Authority.Core.csproj
+- Module: Authority
+- Kind: Library
+- Audit date (UTC): 2026-01-30
+- Files scanned: 12
+- Files with issues: 12
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true
+- Deterministic: inherited true
+- 100-line rule violations: 5
+- Namespace violations: 12
+- Using directive violations: 0
+- Naming violations (interfaces/fields/const/async): 0
+- Service locator usage (BuildServiceProvider/GetService): 0
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - src/Authority/__Libraries/StellaOps.Authority.Core/Verdicts/InMemoryVerdictManifestStore.cs (156 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Core/Verdicts/IVerdictManifestStore.cs (103 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Core/Verdicts/VerdictManifest.cs (200 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Core/Verdicts/VerdictManifestBuilder.cs (228 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Core/Verdicts/VerdictReplayVerifier.cs (235 lines)
+- Namespace issues:
+  - src/Authority/__Libraries/StellaOps.Authority.Core/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Core/obj/Debug/net10.0/StellaOps.Authority.Core.AssemblyInfo.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Core/obj/Debug/net10.0/StellaOps.Authority.Core.GlobalUsings.g.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Core/obj/Release/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Core/obj/Release/net10.0/StellaOps.Authority.Core.AssemblyInfo.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Core/obj/Release/net10.0/StellaOps.Authority.Core.GlobalUsings.g.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Core/Verdicts/InMemoryVerdictManifestStore.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Core/Verdicts/IVerdictManifestSigner.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Core/Verdicts/IVerdictManifestStore.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Core/Verdicts/VerdictManifest.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Core/Verdicts/VerdictManifestBuilder.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Core/Verdicts/VerdictReplayVerifier.cs: missing namespace
+- Using directive issues:
+  - none
+- Naming issues:
+  - none
+- Async issues:
+  - none
+- Service locator matches:
+  - none
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Normalize namespaces to file-scoped StellaOps.<Area>.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 12
+- Files with issues: 12
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| src/Authority/__Libraries/StellaOps.Authority.Core/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Core/obj/Debug/net10.0/StellaOps.Authority.Core.AssemblyInfo.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Core/obj/Debug/net10.0/StellaOps.Authority.Core.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Core/obj/Release/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Core/obj/Release/net10.0/StellaOps.Authority.Core.AssemblyInfo.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Core/obj/Release/net10.0/StellaOps.Authority.Core.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Core/Verdicts/InMemoryVerdictManifestStore.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Core/Verdicts/IVerdictManifestSigner.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Core/Verdicts/IVerdictManifestStore.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Core/Verdicts/VerdictManifest.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Core/Verdicts/VerdictManifestBuilder.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Core/Verdicts/VerdictReplayVerifier.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+
+## Testing Fullness Findings
+- Status: FAIL
+- Expected layers (heuristic): Unit
+- Detected test projects: src/Authority/__Tests/StellaOps.Authority.ConfigDiff.Tests/StellaOps.Authority.ConfigDiff.Tests.csproj [Security]; src/Authority/__Tests/StellaOps.Authority.Core.Tests/StellaOps.Authority.Core.Tests.csproj [Security]; src/Scanner/__Tests/StellaOps.Scanner.Integration.Tests/StellaOps.Scanner.Integration.Tests.csproj [Integration]
+- Missing layers: Unit
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- Add or expand test projects to cover missing layers.
+- Ensure tests use deterministic fixtures and offline harnesses.

docs/implplan-blocked/audits/csproj-standards/src/Authority/__Libraries/StellaOps.Authority.Core/StellaOps.Authority.Core.md

@@ -0,0 +1,78 @@
+# Audit - StellaOps.Authority.Core
+
+## Project
+- Path: src/Authority/__Libraries/StellaOps.Authority.Core/StellaOps.Authority.Core.csproj
+- Module: Authority
+- Kind: Library
+- Audit date (UTC): 2026-01-31
+- Files scanned: 6
+- Files with issues: 5
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true
+- Deterministic: inherited true
+- 100-line rule violations: 5
+- Namespace violations: 0
+- Using directive violations: 0
+- Naming violations (interfaces/fields/const/async): 3
+- Service locator usage (BuildServiceProvider/GetService): 0
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - src/Authority/__Libraries/StellaOps.Authority.Core/Verdicts/InMemoryVerdictManifestStore.cs (156 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Core/Verdicts/IVerdictManifestStore.cs (103 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Core/Verdicts/VerdictManifest.cs (200 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Core/Verdicts/VerdictManifestBuilder.cs (228 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Core/Verdicts/VerdictReplayVerifier.cs (235 lines)
+- Namespace issues:
+  - none
+- Using directive issues:
+  - none
+- Naming issues:
+  - src/Authority/__Libraries/StellaOps.Authority.Core/Verdicts/VerdictManifest.cs: private field naming
+- Async issues:
+  - src/Authority/__Libraries/StellaOps.Authority.Core/Verdicts/VerdictReplayVerifier.cs: async method naming
+  - src/Authority/__Libraries/StellaOps.Authority.Core/Verdicts/VerdictReplayVerifier.cs: blocking async usage
+- Service locator matches:
+  - none
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Align interface/field/const naming to standards.
+- Rename async methods and avoid blocking async calls.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 6
+- Files with issues: 5
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| src/Authority/__Libraries/StellaOps.Authority.Core/Verdicts/InMemoryVerdictManifestStore.cs | FileLength>100 | Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Core/Verdicts/IVerdictManifestStore.cs | FileLength>100 | Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Core/Verdicts/VerdictManifest.cs | FileLength>100; PrivateFieldNaming | Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Core/Verdicts/VerdictManifestBuilder.cs | FileLength>100 | Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Core/Verdicts/VerdictReplayVerifier.cs | AsyncNaming; BlockingAsync; FileLength>100 | Rename async methods to end with Async.; Replace .Result/.Wait/GetAwaiter().GetResult() with await.; Split file to stay <= 100 lines. |
+
+## Testing Fullness Findings
+- Status: FAIL
+- Expected layers (heuristic): Unit
+- Detected test projects: src/Authority/__Tests/StellaOps.Authority.ConfigDiff.Tests/StellaOps.Authority.ConfigDiff.Tests.csproj [Security]; src/Authority/__Tests/StellaOps.Authority.Core.Tests/StellaOps.Authority.Core.Tests.csproj [Security]; src/Scanner/__Tests/StellaOps.Scanner.Integration.Tests/StellaOps.Scanner.Integration.Tests.csproj [Integration]
+- Missing layers: Unit
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- Add or expand test projects to cover missing layers.
+- Ensure tests use deterministic fixtures and offline harnesses.

docs/implplan-blocked/audits/csproj-standards/src/Authority/__Libraries/StellaOps.Authority.Persistence/StellaOps.Authority.Persistence.csproj

@@ -0,0 +1,227 @@
+# Audit - StellaOps.Authority.Persistence
+
+## Project
+- Path: src/Authority/__Libraries/StellaOps.Authority.Persistence/StellaOps.Authority.Persistence.csproj
+- Module: Authority
+- Kind: Library
+- Audit date (UTC): 2026-01-30
+- Files scanned: 71
+- Files with issues: 71
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true
+- Deterministic: inherited true
+- 100-line rule violations: 20
+- Namespace violations: 71
+- Using directive violations: 0
+- Naming violations (interfaces/fields/const/async): 0
+- Service locator usage (BuildServiceProvider/GetService): 0
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/InMemory/Documents/AuthorityDocuments.cs (288 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/InMemory/Driver/InMemoryDriverShim.cs (154 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/InMemory/Stores/IAuthorityStores.cs (111 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/InMemory/Stores/InMemoryStores.cs (720 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/VerdictManifestStore.cs (357 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Models/UserEntity.cs (113 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/ApiKeyRepository.cs (140 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/AuditRepository.cs (140 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/BootstrapInviteRepository.cs (195 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/ClientRepository.cs (163 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/OfflineKitAuditRepository.cs (104 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/OidcTokenRepository.cs (411 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/PermissionRepository.cs (159 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/RevocationRepository.cs (122 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/RoleRepository.cs (157 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/ServiceAccountRepository.cs (142 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/SessionRepository.cs (139 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/TenantRepository.cs (195 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/TokenRepository.cs (253 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/UserRepository.cs (379 lines)
+- Namespace issues:
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/EfCore/Context/AuthorityDbContext.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Extensions/AuthorityPersistenceExtensions.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/InMemory/Documents/AuthorityDocuments.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/InMemory/Documents/TokenUsage.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/InMemory/Driver/InMemoryDriverShim.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/InMemory/Extensions/ServiceCollectionExtensions.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/InMemory/Initialization/AuthorityStorageInitializer.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/InMemory/Serialization/SerializationAttributes.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/InMemory/Serialization/SerializationTypes.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/InMemory/Sessions/IClientSessionHandle.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/InMemory/Stores/AuthorityInMemoryIdGenerator.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/InMemory/Stores/IAuthorityStores.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/InMemory/Stores/InMemoryStores.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/obj/Debug/net10.0/StellaOps.Authority.Persistence.AssemblyInfo.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/obj/Debug/net10.0/StellaOps.Authority.Persistence.GlobalUsings.g.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/obj/Release/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/obj/Release/net10.0/StellaOps.Authority.Persistence.AssemblyInfo.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/obj/Release/net10.0/StellaOps.Authority.Persistence.GlobalUsings.g.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/AuthorityDataSource.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/ServiceCollectionExtensions.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/VerdictManifestStore.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Models/AirgapAuditEntity.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Models/BootstrapInviteEntity.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Models/ClientEntity.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Models/LoginAttemptEntity.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Models/OfflineKitAuditEntity.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Models/OidcTokenEntity.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Models/RevocationEntity.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Models/RevocationExportStateEntity.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Models/RoleEntity.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Models/ServiceAccountEntity.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Models/SessionEntity.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Models/TenantEntity.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Models/TokenEntity.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Models/UserEntity.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/AirgapAuditRepository.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/ApiKeyRepository.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/AuditRepository.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/BootstrapInviteRepository.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/ClientRepository.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/IAirgapAuditRepository.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/IApiKeyRepository.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/IAuditRepository.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/IBootstrapInviteRepository.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/IClientRepository.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/ILoginAttemptRepository.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/IOfflineKitAuditEmitter.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/IOfflineKitAuditRepository.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/IOidcTokenRepository.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/IPermissionRepository.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/IRevocationRepository.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/IRoleRepository.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/IServiceAccountRepository.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/ISessionRepository.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/ITenantRepository.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/ITokenRepository.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/IUserRepository.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/LoginAttemptRepository.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/OfflineKitAuditEmitter.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/OfflineKitAuditRepository.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/OidcTokenRepository.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/PermissionRepository.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/RevocationExportStateRepository.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/RevocationRepository.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/RoleRepository.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/ServiceAccountRepository.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/SessionRepository.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/TenantRepository.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/TokenRepository.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/UserRepository.cs: missing namespace
+- Using directive issues:
+  - none
+- Naming issues:
+  - none
+- Async issues:
+  - none
+- Service locator matches:
+  - none
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Normalize namespaces to file-scoped StellaOps.<Area>.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 71
+- Files with issues: 71
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/EfCore/Context/AuthorityDbContext.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Extensions/AuthorityPersistenceExtensions.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/InMemory/Documents/AuthorityDocuments.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/InMemory/Documents/TokenUsage.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/InMemory/Driver/InMemoryDriverShim.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/InMemory/Extensions/ServiceCollectionExtensions.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/InMemory/Initialization/AuthorityStorageInitializer.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/InMemory/Serialization/SerializationAttributes.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/InMemory/Serialization/SerializationTypes.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/InMemory/Sessions/IClientSessionHandle.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/InMemory/Stores/AuthorityInMemoryIdGenerator.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/InMemory/Stores/IAuthorityStores.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/InMemory/Stores/InMemoryStores.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/obj/Debug/net10.0/StellaOps.Authority.Persistence.AssemblyInfo.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/obj/Debug/net10.0/StellaOps.Authority.Persistence.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/obj/Release/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/obj/Release/net10.0/StellaOps.Authority.Persistence.AssemblyInfo.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/obj/Release/net10.0/StellaOps.Authority.Persistence.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/AuthorityDataSource.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/ServiceCollectionExtensions.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/VerdictManifestStore.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Models/AirgapAuditEntity.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Models/BootstrapInviteEntity.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Models/ClientEntity.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Models/LoginAttemptEntity.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Models/OfflineKitAuditEntity.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Models/OidcTokenEntity.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Models/RevocationEntity.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Models/RevocationExportStateEntity.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Models/RoleEntity.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Models/ServiceAccountEntity.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Models/SessionEntity.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Models/TenantEntity.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Models/TokenEntity.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Models/UserEntity.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/AirgapAuditRepository.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/ApiKeyRepository.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/AuditRepository.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/BootstrapInviteRepository.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/ClientRepository.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/IAirgapAuditRepository.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/IApiKeyRepository.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/IAuditRepository.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/IBootstrapInviteRepository.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/IClientRepository.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/ILoginAttemptRepository.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/IOfflineKitAuditEmitter.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/IOfflineKitAuditRepository.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/IOidcTokenRepository.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/IPermissionRepository.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/IRevocationRepository.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/IRoleRepository.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/IServiceAccountRepository.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/ISessionRepository.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/ITenantRepository.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/ITokenRepository.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/IUserRepository.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/LoginAttemptRepository.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/OfflineKitAuditEmitter.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/OfflineKitAuditRepository.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/OidcTokenRepository.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/PermissionRepository.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/RevocationExportStateRepository.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/RevocationRepository.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/RoleRepository.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/ServiceAccountRepository.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/SessionRepository.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/TenantRepository.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/TokenRepository.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/UserRepository.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+
+## Testing Fullness Findings
+- Status: FAIL
+- Expected layers (heuristic): Integration, Unit
+- Detected test projects: src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/StellaOps.Authority.Persistence.Tests.csproj [Security]; src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/StellaOps.Authority.Plugin.Ldap.Tests.csproj [Security]; src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/StellaOps.Authority.Tests.csproj [Security]; src/Scanner/__Tests/StellaOps.Scanner.WebService.Tests/StellaOps.Scanner.WebService.Tests.csproj [Unit]
+- Missing layers: Integration
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- Add or expand test projects to cover missing layers.
+- Ensure tests use deterministic fixtures and offline harnesses.

docs/implplan-blocked/audits/csproj-standards/src/Authority/__Libraries/StellaOps.Authority.Persistence/StellaOps.Authority.Persistence.md

@@ -0,0 +1,167 @@
+# Audit - StellaOps.Authority.Persistence
+
+## Project
+- Path: src/Authority/__Libraries/StellaOps.Authority.Persistence/StellaOps.Authority.Persistence.csproj
+- Module: Authority
+- Kind: Library
+- Audit date (UTC): 2026-01-31
+- Files scanned: 65
+- Files with issues: 26
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true
+- Deterministic: inherited true
+- 100-line rule violations: 20
+- Namespace violations: 0
+- Using directive violations: 0
+- Naming violations (interfaces/fields/const/async): 31
+- Service locator usage (BuildServiceProvider/GetService): 25
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/InMemory/Documents/AuthorityDocuments.cs (288 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/InMemory/Driver/InMemoryDriverShim.cs (154 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/InMemory/Stores/IAuthorityStores.cs (111 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/InMemory/Stores/InMemoryStores.cs (721 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/VerdictManifestStore.cs (358 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Models/UserEntity.cs (113 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/ApiKeyRepository.cs (140 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/AuditRepository.cs (140 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/BootstrapInviteRepository.cs (196 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/ClientRepository.cs (164 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/OfflineKitAuditRepository.cs (104 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/OidcTokenRepository.cs (412 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/PermissionRepository.cs (159 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/RevocationRepository.cs (123 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/RoleRepository.cs (157 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/ServiceAccountRepository.cs (143 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/SessionRepository.cs (139 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/TenantRepository.cs (195 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/TokenRepository.cs (253 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/UserRepository.cs (379 lines)
+- Namespace issues:
+  - none
+- Using directive issues:
+  - none
+- Naming issues:
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/InMemory/Stores/InMemoryStores.cs: private field naming
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/VerdictManifestStore.cs: private field naming
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/AirgapAuditRepository.cs: private field naming
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/BootstrapInviteRepository.cs: private field naming
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/ClientRepository.cs: private field naming
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/LoginAttemptRepository.cs: private field naming
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/OidcTokenRepository.cs: private field naming
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/RevocationRepository.cs: private field naming
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/ServiceAccountRepository.cs: private field naming
+- Async issues:
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/InMemory/Stores/InMemoryStores.cs: async method naming
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/VerdictManifestStore.cs: async method naming
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/VerdictManifestStore.cs: blocking async usage
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/AirgapAuditRepository.cs: async method naming
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/ApiKeyRepository.cs: async method naming
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/AuditRepository.cs: async method naming
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/BootstrapInviteRepository.cs: async method naming
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/ClientRepository.cs: async method naming
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/LoginAttemptRepository.cs: async method naming
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/OfflineKitAuditEmitter.cs: async method naming
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/OfflineKitAuditRepository.cs: async method naming
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/OfflineKitAuditRepository.cs: blocking async usage
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/OidcTokenRepository.cs: async method naming
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/PermissionRepository.cs: async method naming
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/RevocationExportStateRepository.cs: async method naming
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/RevocationRepository.cs: async method naming
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/RoleRepository.cs: async method naming
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/ServiceAccountRepository.cs: async method naming
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/SessionRepository.cs: async method naming
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/TenantRepository.cs: async method naming
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/TokenRepository.cs: async method naming
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/UserRepository.cs: async method naming
+- Service locator matches:
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/InMemory/Extensions/ServiceCollectionExtensions.cs:63 new InMemoryBootstrapInviteStore(sp.GetRequiredService<TimeProvider>(), sp.GetRequiredService<IAuthorityInMemoryIdGenerator>()));
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/InMemory/Extensions/ServiceCollectionExtensions.cs:65 new InMemoryServiceAccountStore(sp.GetRequiredService<TimeProvider>(), sp.GetRequiredService<IAuthorityInMemoryIdGenerator>()));
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/InMemory/Extensions/ServiceCollectionExtensions.cs:67 new InMemoryClientStore(sp.GetRequiredService<TimeProvider>(), sp.GetRequiredService<IAuthorityInMemoryIdGenerator>()));
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/InMemory/Extensions/ServiceCollectionExtensions.cs:69 new InMemoryRevocationStore(sp.GetRequiredService<IAuthorityInMemoryIdGenerator>()));
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/InMemory/Extensions/ServiceCollectionExtensions.cs:71 new InMemoryLoginAttemptStore(sp.GetRequiredService<TimeProvider>(), sp.GetRequiredService<IAuthorityInMemoryIdGenerator>()));
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/InMemory/Extensions/ServiceCollectionExtensions.cs:73 new InMemoryTokenStore(sp.GetRequiredService<TimeProvider>(), sp.GetRequiredService<IAuthorityInMemoryIdGenerator>()));
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/InMemory/Extensions/ServiceCollectionExtensions.cs:75 new InMemoryRefreshTokenStore(sp.GetRequiredService<TimeProvider>(), sp.GetRequiredService<IAuthorityInMemoryIdGenerator>()));
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/InMemory/Extensions/ServiceCollectionExtensions.cs:77 new InMemoryAirgapAuditStore(sp.GetRequiredService<TimeProvider>(), sp.GetRequiredService<IAuthorityInMemoryIdGenerator>()));
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/ServiceCollectionExtensions.cs:60 services.AddScoped<ITenantRepository>(sp => sp.GetRequiredService<TenantRepository>());
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/ServiceCollectionExtensions.cs:61 services.AddScoped<IUserRepository>(sp => sp.GetRequiredService<UserRepository>());
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/ServiceCollectionExtensions.cs:62 services.AddScoped<IRoleRepository>(sp => sp.GetRequiredService<RoleRepository>());
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/ServiceCollectionExtensions.cs:63 services.AddScoped<IPermissionRepository>(sp => sp.GetRequiredService<PermissionRepository>());
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/ServiceCollectionExtensions.cs:64 services.AddScoped<IApiKeyRepository>(sp => sp.GetRequiredService<ApiKeyRepository>());
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/ServiceCollectionExtensions.cs:65 services.AddScoped<ISessionRepository>(sp => sp.GetRequiredService<SessionRepository>());
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/ServiceCollectionExtensions.cs:66 services.AddScoped<IAuditRepository>(sp => sp.GetRequiredService<AuditRepository>());
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/ServiceCollectionExtensions.cs:67 services.AddScoped<ITokenRepository>(sp => sp.GetRequiredService<TokenRepository>());
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/ServiceCollectionExtensions.cs:68 services.AddScoped<IRefreshTokenRepository>(sp => sp.GetRequiredService<RefreshTokenRepository>());
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/ServiceCollectionExtensions.cs:79 services.AddScoped<IOfflineKitAuditRepository>(sp => sp.GetRequiredService<OfflineKitAuditRepository>());
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/ServiceCollectionExtensions.cs:83 services.AddScoped<IBootstrapInviteRepository>(sp => sp.GetRequiredService<BootstrapInviteRepository>());
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/ServiceCollectionExtensions.cs:84 services.AddScoped<IServiceAccountRepository>(sp => sp.GetRequiredService<ServiceAccountRepository>());
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/ServiceCollectionExtensions.cs:85 services.AddScoped<IClientRepository>(sp => sp.GetRequiredService<ClientRepository>());
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/ServiceCollectionExtensions.cs:86 services.AddScoped<IRevocationRepository>(sp => sp.GetRequiredService<RevocationRepository>());
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/ServiceCollectionExtensions.cs:87 services.AddScoped<ILoginAttemptRepository>(sp => sp.GetRequiredService<LoginAttemptRepository>());
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/ServiceCollectionExtensions.cs:88 services.AddScoped<IOidcTokenRepository>(sp => sp.GetRequiredService<OidcTokenRepository>());
+  - src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/ServiceCollectionExtensions.cs:89 services.AddScoped<IAirgapAuditRepository>(sp => sp.GetRequiredService<AirgapAuditRepository>());
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Align interface/field/const naming to standards.
+- Rename async methods and avoid blocking async calls.
+- Replace service locator usage with constructor injection.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 65
+- Files with issues: 26
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/InMemory/Documents/AuthorityDocuments.cs | FileLength>100 | Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/InMemory/Driver/InMemoryDriverShim.cs | FileLength>100 | Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/InMemory/Extensions/ServiceCollectionExtensions.cs | ServiceLocator | Remove service locator usage; use constructor injection. |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/InMemory/Stores/IAuthorityStores.cs | FileLength>100 | Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/InMemory/Stores/InMemoryStores.cs | AsyncNaming; FileLength>100; PrivateFieldNaming | Rename async methods to end with Async.; Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/ServiceCollectionExtensions.cs | ServiceLocator | Remove service locator usage; use constructor injection. |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/VerdictManifestStore.cs | AsyncNaming; BlockingAsync; FileLength>100; PrivateFieldNaming | Rename async methods to end with Async.; Rename private fields to _camelCase.; Replace .Result/.Wait/GetAwaiter().GetResult() with await.; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Models/UserEntity.cs | FileLength>100 | Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/AirgapAuditRepository.cs | AsyncNaming; PrivateFieldNaming | Rename async methods to end with Async.; Rename private fields to _camelCase. |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/ApiKeyRepository.cs | AsyncNaming; FileLength>100 | Rename async methods to end with Async.; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/AuditRepository.cs | AsyncNaming; FileLength>100 | Rename async methods to end with Async.; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/BootstrapInviteRepository.cs | AsyncNaming; FileLength>100; PrivateFieldNaming | Rename async methods to end with Async.; Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/ClientRepository.cs | AsyncNaming; FileLength>100; PrivateFieldNaming | Rename async methods to end with Async.; Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/LoginAttemptRepository.cs | AsyncNaming; PrivateFieldNaming | Rename async methods to end with Async.; Rename private fields to _camelCase. |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/OfflineKitAuditEmitter.cs | AsyncNaming | Rename async methods to end with Async. |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/OfflineKitAuditRepository.cs | AsyncNaming; BlockingAsync; FileLength>100 | Rename async methods to end with Async.; Replace .Result/.Wait/GetAwaiter().GetResult() with await.; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/OidcTokenRepository.cs | AsyncNaming; FileLength>100; PrivateFieldNaming | Rename async methods to end with Async.; Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/PermissionRepository.cs | AsyncNaming; FileLength>100 | Rename async methods to end with Async.; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/RevocationExportStateRepository.cs | AsyncNaming | Rename async methods to end with Async. |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/RevocationRepository.cs | AsyncNaming; FileLength>100; PrivateFieldNaming | Rename async methods to end with Async.; Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/RoleRepository.cs | AsyncNaming; FileLength>100 | Rename async methods to end with Async.; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/ServiceAccountRepository.cs | AsyncNaming; FileLength>100; PrivateFieldNaming | Rename async methods to end with Async.; Rename private fields to _camelCase.; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/SessionRepository.cs | AsyncNaming; FileLength>100 | Rename async methods to end with Async.; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/TenantRepository.cs | AsyncNaming; FileLength>100 | Rename async methods to end with Async.; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/TokenRepository.cs | AsyncNaming; FileLength>100 | Rename async methods to end with Async.; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Persistence/Postgres/Repositories/UserRepository.cs | AsyncNaming; FileLength>100 | Rename async methods to end with Async.; Split file to stay <= 100 lines. |
+
+## Testing Fullness Findings
+- Status: FAIL
+- Expected layers (heuristic): Integration, Unit
+- Detected test projects: src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/StellaOps.Authority.Persistence.Tests.csproj [Security]; src/Authority/StellaOps.Authority/StellaOps.Authority.Plugin.Ldap.Tests/StellaOps.Authority.Plugin.Ldap.Tests.csproj [Security]; src/Authority/StellaOps.Authority/StellaOps.Authority.Tests/StellaOps.Authority.Tests.csproj [Security]; src/Scanner/__Tests/StellaOps.Scanner.WebService.Tests/StellaOps.Scanner.WebService.Tests.csproj [Unit]
+- Missing layers: Integration
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- Add or expand test projects to cover missing layers.
+- Ensure tests use deterministic fixtures and offline harnesses.

docs/implplan-blocked/audits/csproj-standards/src/Authority/__Libraries/StellaOps.Authority.Timestamping.Abstractions/StellaOps.Authority.Timestamping.Abstractions.csproj

@@ -0,0 +1,97 @@
+# Audit - StellaOps.Authority.Timestamping.Abstractions
+
+## Project
+- Path: src/Authority/__Libraries/StellaOps.Authority.Timestamping.Abstractions/StellaOps.Authority.Timestamping.Abstractions.csproj
+- Module: Authority
+- Kind: Library
+- Audit date (UTC): 2026-01-30
+- Files scanned: 13
+- Files with issues: 13
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: inherited false
+- Deterministic: inherited true
+- 100-line rule violations: 5
+- Namespace violations: 13
+- Using directive violations: 0
+- Naming violations (interfaces/fields/const/async): 0
+- Service locator usage (BuildServiceProvider/GetService): 0
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping.Abstractions/TimeStampRequest.cs (124 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping.Abstractions/TimeStampResponse.cs (156 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping.Abstractions/TimeStampToken.cs (165 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping.Abstractions/TimeStampVerificationResult.cs (248 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping.Abstractions/TsaClientOptions.cs (143 lines)
+- Namespace issues:
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping.Abstractions/ITimeStampAuthorityClient.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping.Abstractions/TimeStampRequest.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping.Abstractions/TimeStampResponse.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping.Abstractions/TimeStampToken.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping.Abstractions/TimeStampVerificationOptions.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping.Abstractions/TimeStampVerificationResult.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping.Abstractions/TsaClientOptions.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping.Abstractions/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping.Abstractions/obj/Debug/net10.0/StellaOps.Authority.Timestamping.Abstractions.AssemblyInfo.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping.Abstractions/obj/Debug/net10.0/StellaOps.Authority.Timestamping.Abstractions.GlobalUsings.g.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping.Abstractions/obj/Release/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping.Abstractions/obj/Release/net10.0/StellaOps.Authority.Timestamping.Abstractions.AssemblyInfo.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping.Abstractions/obj/Release/net10.0/StellaOps.Authority.Timestamping.Abstractions.GlobalUsings.g.cs: missing namespace
+- Using directive issues:
+  - none
+- Naming issues:
+  - none
+- Async issues:
+  - none
+- Service locator matches:
+  - none
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Normalize namespaces to file-scoped StellaOps.<Area>.
+- Remove overrides that disable TreatWarningsAsErrors.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 13
+- Files with issues: 13
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| src/Authority/__Libraries/StellaOps.Authority.Timestamping.Abstractions/ITimeStampAuthorityClient.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Timestamping.Abstractions/TimeStampRequest.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Timestamping.Abstractions/TimeStampResponse.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Timestamping.Abstractions/TimeStampToken.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Timestamping.Abstractions/TimeStampVerificationOptions.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Timestamping.Abstractions/TimeStampVerificationResult.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Timestamping.Abstractions/TsaClientOptions.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Timestamping.Abstractions/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Timestamping.Abstractions/obj/Debug/net10.0/StellaOps.Authority.Timestamping.Abstractions.AssemblyInfo.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Timestamping.Abstractions/obj/Debug/net10.0/StellaOps.Authority.Timestamping.Abstractions.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Timestamping.Abstractions/obj/Release/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Timestamping.Abstractions/obj/Release/net10.0/StellaOps.Authority.Timestamping.Abstractions.AssemblyInfo.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Timestamping.Abstractions/obj/Release/net10.0/StellaOps.Authority.Timestamping.Abstractions.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+
+## Testing Fullness Findings
+- Status: FAIL
+- Expected layers (heuristic): Unit
+- Detected test projects: none
+- Missing layers: Unit
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- Add or expand test projects to cover missing layers.
+- Ensure tests use deterministic fixtures and offline harnesses.

docs/implplan-blocked/audits/csproj-standards/src/Authority/__Libraries/StellaOps.Authority.Timestamping.Abstractions/StellaOps.Authority.Timestamping.Abstractions.md

@@ -0,0 +1,77 @@
+# Audit - StellaOps.Authority.Timestamping.Abstractions
+
+## Project
+- Path: src/Authority/__Libraries/StellaOps.Authority.Timestamping.Abstractions/StellaOps.Authority.Timestamping.Abstractions.csproj
+- Module: Authority
+- Kind: Library
+- Audit date (UTC): 2026-01-31
+- Files scanned: 7
+- Files with issues: 5
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: inherited false
+- Deterministic: inherited true
+- 100-line rule violations: 5
+- Namespace violations: 0
+- Using directive violations: 1
+- Naming violations (interfaces/fields/const/async): 0
+- Service locator usage (BuildServiceProvider/GetService): 0
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping.Abstractions/TimeStampRequest.cs (125 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping.Abstractions/TimeStampResponse.cs (156 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping.Abstractions/TimeStampToken.cs (165 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping.Abstractions/TimeStampVerificationResult.cs (248 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping.Abstractions/TsaClientOptions.cs (143 lines)
+- Namespace issues:
+  - none
+- Using directive issues:
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping.Abstractions/TimeStampRequest.cs: using directives inside namespace
+- Naming issues:
+  - none
+- Async issues:
+  - none
+- Service locator matches:
+  - none
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Move and sort using directives (outside namespace).
+- Remove overrides that disable TreatWarningsAsErrors.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 7
+- Files with issues: 5
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| src/Authority/__Libraries/StellaOps.Authority.Timestamping.Abstractions/TimeStampRequest.cs | FileLength>100; UsingInsideNamespace | Move using directives outside namespace.; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Timestamping.Abstractions/TimeStampResponse.cs | FileLength>100 | Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Timestamping.Abstractions/TimeStampToken.cs | FileLength>100 | Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Timestamping.Abstractions/TimeStampVerificationResult.cs | FileLength>100 | Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Timestamping.Abstractions/TsaClientOptions.cs | FileLength>100 | Split file to stay <= 100 lines. |
+
+## Testing Fullness Findings
+- Status: FAIL
+- Expected layers (heuristic): Unit
+- Detected test projects: none
+- Missing layers: Unit
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- Add or expand test projects to cover missing layers.
+- Ensure tests use deterministic fixtures and offline harnesses.

docs/implplan-blocked/audits/csproj-standards/src/Authority/__Libraries/StellaOps.Authority.Timestamping/StellaOps.Authority.Timestamping.csproj

@@ -0,0 +1,104 @@
+# Audit - StellaOps.Authority.Timestamping
+
+## Project
+- Path: src/Authority/__Libraries/StellaOps.Authority.Timestamping/StellaOps.Authority.Timestamping.csproj
+- Module: Authority
+- Kind: Library
+- Audit date (UTC): 2026-01-30
+- Files scanned: 15
+- Files with issues: 15
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: inherited false
+- Deterministic: inherited true
+- 100-line rule violations: 8
+- Namespace violations: 15
+- Using directive violations: 0
+- Naming violations (interfaces/fields/const/async): 0
+- Service locator usage (BuildServiceProvider/GetService): 0
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping/HttpTsaClient.cs (218 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping/ITsaProviderRegistry.cs (220 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping/TimestampingServiceCollectionExtensions.cs (108 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping/TimeStampTokenVerifier.cs (224 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping/TsaProviderRegistry.cs (263 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping/Asn1/TimeStampReqEncoder.cs (166 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping/Asn1/TimeStampRespDecoder.cs (363 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping/Caching/InMemoryTsaCacheStore.cs (121 lines)
+- Namespace issues:
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping/HttpTsaClient.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping/ITsaProviderRegistry.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping/TimestampingServiceCollectionExtensions.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping/TimeStampTokenVerifier.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping/TsaProviderRegistry.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping/Asn1/TimeStampReqEncoder.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping/Asn1/TimeStampRespDecoder.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping/Caching/InMemoryTsaCacheStore.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping/Caching/ITsaCacheStore.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping/obj/Debug/net10.0/StellaOps.Authority.Timestamping.AssemblyInfo.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping/obj/Debug/net10.0/StellaOps.Authority.Timestamping.GlobalUsings.g.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping/obj/Release/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping/obj/Release/net10.0/StellaOps.Authority.Timestamping.AssemblyInfo.cs: missing namespace
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping/obj/Release/net10.0/StellaOps.Authority.Timestamping.GlobalUsings.g.cs: missing namespace
+- Using directive issues:
+  - none
+- Naming issues:
+  - none
+- Async issues:
+  - none
+- Service locator matches:
+  - none
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Normalize namespaces to file-scoped StellaOps.<Area>.
+- Remove overrides that disable TreatWarningsAsErrors.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 15
+- Files with issues: 15
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| src/Authority/__Libraries/StellaOps.Authority.Timestamping/HttpTsaClient.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Timestamping/ITsaProviderRegistry.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Timestamping/TimestampingServiceCollectionExtensions.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Timestamping/TimeStampTokenVerifier.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Timestamping/TsaProviderRegistry.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Timestamping/Asn1/TimeStampReqEncoder.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Timestamping/Asn1/TimeStampRespDecoder.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Timestamping/Caching/InMemoryTsaCacheStore.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Timestamping/Caching/ITsaCacheStore.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Timestamping/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Timestamping/obj/Debug/net10.0/StellaOps.Authority.Timestamping.AssemblyInfo.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Timestamping/obj/Debug/net10.0/StellaOps.Authority.Timestamping.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Timestamping/obj/Release/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Timestamping/obj/Release/net10.0/StellaOps.Authority.Timestamping.AssemblyInfo.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| src/Authority/__Libraries/StellaOps.Authority.Timestamping/obj/Release/net10.0/StellaOps.Authority.Timestamping.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+
+## Testing Fullness Findings
+- Status: FAIL
+- Expected layers (heuristic): Unit
+- Detected test projects: none
+- Missing layers: Unit
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- Add or expand test projects to cover missing layers.
+- Ensure tests use deterministic fixtures and offline harnesses.

docs/implplan-blocked/audits/csproj-standards/src/Authority/__Libraries/StellaOps.Authority.Timestamping/StellaOps.Authority.Timestamping.md

@@ -0,0 +1,85 @@
+# Audit - StellaOps.Authority.Timestamping
+
+## Project
+- Path: src/Authority/__Libraries/StellaOps.Authority.Timestamping/StellaOps.Authority.Timestamping.csproj
+- Module: Authority
+- Kind: Library
+- Audit date (UTC): 2026-01-31
+- Files scanned: 9
+- Files with issues: 8
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: inherited false
+- Deterministic: inherited true
+- 100-line rule violations: 8
+- Namespace violations: 0
+- Using directive violations: 1
+- Naming violations (interfaces/fields/const/async): 2
+- Service locator usage (BuildServiceProvider/GetService): 0
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping/HttpTsaClient.cs (219 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping/ITsaProviderRegistry.cs (220 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping/TimestampingServiceCollectionExtensions.cs (108 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping/TimeStampTokenVerifier.cs (225 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping/TsaProviderRegistry.cs (264 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping/Asn1/TimeStampReqEncoder.cs (167 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping/Asn1/TimeStampRespDecoder.cs (364 lines)
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping/Caching/InMemoryTsaCacheStore.cs (122 lines)
+- Namespace issues:
+  - none
+- Using directive issues:
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping/Asn1/TimeStampReqEncoder.cs: using directives inside namespace
+- Naming issues:
+  - none
+- Async issues:
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping/HttpTsaClient.cs: missing ConfigureAwait(false)
+  - src/Authority/__Libraries/StellaOps.Authority.Timestamping/TsaProviderRegistry.cs: missing ConfigureAwait(false)
+- Service locator matches:
+  - none
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Move and sort using directives (outside namespace).
+- Remove overrides that disable TreatWarningsAsErrors.
+- Rename async methods and avoid blocking async calls.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 9
+- Files with issues: 8
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| src/Authority/__Libraries/StellaOps.Authority.Timestamping/HttpTsaClient.cs | ConfigureAwaitMissing; FileLength>100 | Add ConfigureAwait(false) to awaited calls in library-like code.; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Timestamping/ITsaProviderRegistry.cs | FileLength>100 | Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Timestamping/TimestampingServiceCollectionExtensions.cs | FileLength>100 | Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Timestamping/TimeStampTokenVerifier.cs | FileLength>100 | Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Timestamping/TsaProviderRegistry.cs | ConfigureAwaitMissing; FileLength>100 | Add ConfigureAwait(false) to awaited calls in library-like code.; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Timestamping/Asn1/TimeStampReqEncoder.cs | FileLength>100; UsingInsideNamespace | Move using directives outside namespace.; Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Timestamping/Asn1/TimeStampRespDecoder.cs | FileLength>100 | Split file to stay <= 100 lines. |
+| src/Authority/__Libraries/StellaOps.Authority.Timestamping/Caching/InMemoryTsaCacheStore.cs | FileLength>100 | Split file to stay <= 100 lines. |
+
+## Testing Fullness Findings
+- Status: FAIL
+- Expected layers (heuristic): Unit
+- Detected test projects: none
+- Missing layers: Unit
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- Add or expand test projects to cover missing layers.
+- Ensure tests use deterministic fixtures and offline harnesses.

docs/implplan-blocked/audits/csproj-standards/src/Authority/__Tests/StellaOps.Authority.ConfigDiff.Tests/StellaOps.Authority.ConfigDiff.Tests.md

@@ -0,0 +1,70 @@
+# Audit - StellaOps.Authority.ConfigDiff.Tests
+
+## Project
+- Path: src/Authority/__Tests/StellaOps.Authority.ConfigDiff.Tests/StellaOps.Authority.ConfigDiff.Tests.csproj
+- Module: Authority
+- Kind: Test
+- Audit date (UTC): 2026-01-31
+- Files scanned: 1
+- Files with issues: 1
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true
+- Deterministic: inherited true
+- 100-line rule violations: 1
+- Namespace violations: 0
+- Using directive violations: 1
+- Naming violations (interfaces/fields/const/async): 3
+- Service locator usage (BuildServiceProvider/GetService): 0
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - src/Authority/__Tests/StellaOps.Authority.ConfigDiff.Tests/AuthorityConfigDiffTests.cs (265 lines)
+- Namespace issues:
+  - none
+- Using directive issues:
+  - src/Authority/__Tests/StellaOps.Authority.ConfigDiff.Tests/AuthorityConfigDiffTests.cs: using directives not sorted
+- Naming issues:
+  - src/Authority/__Tests/StellaOps.Authority.ConfigDiff.Tests/AuthorityConfigDiffTests.cs: private field naming
+- Async issues:
+  - src/Authority/__Tests/StellaOps.Authority.ConfigDiff.Tests/AuthorityConfigDiffTests.cs: async method naming
+  - src/Authority/__Tests/StellaOps.Authority.ConfigDiff.Tests/AuthorityConfigDiffTests.cs: missing ConfigureAwait(false)
+- Service locator matches:
+  - none
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Align interface/field/const naming to standards.
+- Move and sort using directives (outside namespace).
+- Rename async methods and avoid blocking async calls.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 1
+- Files with issues: 1
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| src/Authority/__Tests/StellaOps.Authority.ConfigDiff.Tests/AuthorityConfigDiffTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; PrivateFieldNaming; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+
+## Testing Fullness Findings
+- Status: PASS
+- Expected layers (heuristic): 
+- Detected test projects: none
+- Missing layers: none
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- None.

docs/implplan-blocked/audits/csproj-standards/src/Authority/__Tests/StellaOps.Authority.Core.Tests/StellaOps.Authority.Core.Tests.md

@@ -0,0 +1,92 @@
+# Audit - StellaOps.Authority.Core.Tests
+
+## Project
+- Path: src/Authority/__Tests/StellaOps.Authority.Core.Tests/StellaOps.Authority.Core.Tests.csproj
+- Module: Authority
+- Kind: Test
+- Audit date (UTC): 2026-01-31
+- Files scanned: 6
+- Files with issues: 6
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit false
+- Deterministic: inherited true
+- 100-line rule violations: 5
+- Namespace violations: 0
+- Using directive violations: 5
+- Naming violations (interfaces/fields/const/async): 11
+- Service locator usage (BuildServiceProvider/GetService): 0
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - src/Authority/__Tests/StellaOps.Authority.Core.Tests/Verdicts/InMemoryVerdictManifestStoreTests.cs (157 lines)
+  - src/Authority/__Tests/StellaOps.Authority.Core.Tests/Verdicts/TemporalVerdictTests.cs (297 lines)
+  - src/Authority/__Tests/StellaOps.Authority.Core.Tests/Verdicts/VerdictManifestBuilderTests.cs (169 lines)
+  - src/Authority/__Tests/StellaOps.Authority.Core.Tests/Verdicts/VerdictManifestSerializerTests.cs (123 lines)
+  - src/Authority/__Tests/StellaOps.Authority.Core.Tests/Verdicts/VerdictReplayVerifierTests.cs (126 lines)
+- Namespace issues:
+  - none
+- Using directive issues:
+  - src/Authority/__Tests/StellaOps.Authority.Core.Tests/Verdicts/InMemoryVerdictManifestStoreTests.cs: using directives not sorted
+  - src/Authority/__Tests/StellaOps.Authority.Core.Tests/Verdicts/NullVerdictManifestSignerTests.cs: using directives not sorted
+  - src/Authority/__Tests/StellaOps.Authority.Core.Tests/Verdicts/VerdictManifestBuilderTests.cs: using directives not sorted
+  - src/Authority/__Tests/StellaOps.Authority.Core.Tests/Verdicts/VerdictManifestSerializerTests.cs: using directives not sorted
+  - src/Authority/__Tests/StellaOps.Authority.Core.Tests/Verdicts/VerdictReplayVerifierTests.cs: using directives not sorted
+- Naming issues:
+  - src/Authority/__Tests/StellaOps.Authority.Core.Tests/Verdicts/InMemoryVerdictManifestStoreTests.cs: private field naming
+  - src/Authority/__Tests/StellaOps.Authority.Core.Tests/Verdicts/TemporalVerdictTests.cs: private field naming
+- Async issues:
+  - src/Authority/__Tests/StellaOps.Authority.Core.Tests/Verdicts/InMemoryVerdictManifestStoreTests.cs: async method naming
+  - src/Authority/__Tests/StellaOps.Authority.Core.Tests/Verdicts/InMemoryVerdictManifestStoreTests.cs: missing ConfigureAwait(false)
+  - src/Authority/__Tests/StellaOps.Authority.Core.Tests/Verdicts/NullVerdictManifestSignerTests.cs: async method naming
+  - src/Authority/__Tests/StellaOps.Authority.Core.Tests/Verdicts/NullVerdictManifestSignerTests.cs: missing ConfigureAwait(false)
+  - src/Authority/__Tests/StellaOps.Authority.Core.Tests/Verdicts/TemporalVerdictTests.cs: blocking async usage
+  - src/Authority/__Tests/StellaOps.Authority.Core.Tests/Verdicts/VerdictManifestBuilderTests.cs: blocking async usage
+  - src/Authority/__Tests/StellaOps.Authority.Core.Tests/Verdicts/VerdictManifestSerializerTests.cs: blocking async usage
+  - src/Authority/__Tests/StellaOps.Authority.Core.Tests/Verdicts/VerdictReplayVerifierTests.cs: async method naming
+  - src/Authority/__Tests/StellaOps.Authority.Core.Tests/Verdicts/VerdictReplayVerifierTests.cs: missing ConfigureAwait(false)
+- Service locator matches:
+  - none
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Align interface/field/const naming to standards.
+- Move and sort using directives (outside namespace).
+- Remove overrides that disable TreatWarningsAsErrors.
+- Rename async methods and avoid blocking async calls.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 6
+- Files with issues: 6
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| src/Authority/__Tests/StellaOps.Authority.Core.Tests/Verdicts/InMemoryVerdictManifestStoreTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; PrivateFieldNaming; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Rename async methods to end with Async.; Rename private fields to _camelCase.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/__Tests/StellaOps.Authority.Core.Tests/Verdicts/NullVerdictManifestSignerTests.cs | AsyncNaming; ConfigureAwaitMissing; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Rename async methods to end with Async.; Sort using directives alphabetically. |
+| src/Authority/__Tests/StellaOps.Authority.Core.Tests/Verdicts/TemporalVerdictTests.cs | BlockingAsync; FileLength>100; PrivateFieldNaming | Rename private fields to _camelCase.; Replace .Result/.Wait/GetAwaiter().GetResult() with await.; Split file to stay <= 100 lines. |
+| src/Authority/__Tests/StellaOps.Authority.Core.Tests/Verdicts/VerdictManifestBuilderTests.cs | BlockingAsync; FileLength>100; UsingNotSorted | Replace .Result/.Wait/GetAwaiter().GetResult() with await.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/__Tests/StellaOps.Authority.Core.Tests/Verdicts/VerdictManifestSerializerTests.cs | BlockingAsync; FileLength>100; UsingNotSorted | Replace .Result/.Wait/GetAwaiter().GetResult() with await.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/__Tests/StellaOps.Authority.Core.Tests/Verdicts/VerdictReplayVerifierTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Rename async methods to end with Async.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+
+## Testing Fullness Findings
+- Status: PASS
+- Expected layers (heuristic): 
+- Detected test projects: none
+- Missing layers: none
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- None.

docs/implplan-blocked/audits/csproj-standards/src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/StellaOps.Authority.Persistence.Tests.md

@@ -0,0 +1,136 @@
+# Audit - StellaOps.Authority.Persistence.Tests
+
+## Project
+- Path: src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/StellaOps.Authority.Persistence.Tests.csproj
+- Module: Authority
+- Kind: Test
+- Audit date (UTC): 2026-01-31
+- Files scanned: 16
+- Files with issues: 16
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: inherited false
+- Deterministic: inherited true
+- 100-line rule violations: 15
+- Namespace violations: 0
+- Using directive violations: 9
+- Naming violations (interfaces/fields/const/async): 31
+- Service locator usage (BuildServiceProvider/GetService): 0
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/ApiKeyConcurrencyTests.cs (289 lines)
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/ApiKeyIdempotencyTests.cs (253 lines)
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/ApiKeyRepositoryTests.cs (169 lines)
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/AuditRepositoryTests.cs (204 lines)
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/AuthorityPostgresFixture.cs (122 lines)
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/InMemoryStoreTests.cs (104 lines)
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/OfflineKitAuditRepositoryTests.cs (135 lines)
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/PermissionRepositoryTests.cs (132 lines)
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/RefreshTokenRepositoryTests.cs (223 lines)
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/RoleBasedAccessTests.cs (469 lines)
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/RoleRepositoryTests.cs (132 lines)
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/SessionRepositoryTests.cs (112 lines)
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/TokenRepositoryTests.cs (237 lines)
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/VerdictManifestStoreTests.cs (140 lines)
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/TestDoubles/InMemoryAuthorityRepositories.cs (314 lines)
+- Namespace issues:
+  - none
+- Using directive issues:
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/AuthorityMigrationTests.cs: using directives not sorted
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/AuthorityPostgresFixture.cs: using directives not sorted
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/InMemoryStoreTests.cs: using directives not sorted
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/RefreshTokenRepositoryTests.cs: using directives not sorted
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/RoleBasedAccessTests.cs: using directives not sorted
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/TokenRepositoryTests.cs: using directives not sorted
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/VerdictManifestStoreTests.cs: using directives inside namespace
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/VerdictManifestStoreTests.cs: using directives not sorted
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/TestDoubles/InMemoryAuthorityRepositories.cs: using directives inside namespace
+- Naming issues:
+  - none
+- Async issues:
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/ApiKeyConcurrencyTests.cs: async method naming
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/ApiKeyConcurrencyTests.cs: missing ConfigureAwait(false)
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/ApiKeyIdempotencyTests.cs: async method naming
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/ApiKeyIdempotencyTests.cs: missing ConfigureAwait(false)
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/ApiKeyRepositoryTests.cs: async method naming
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/ApiKeyRepositoryTests.cs: missing ConfigureAwait(false)
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/AuditRepositoryTests.cs: async method naming
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/AuditRepositoryTests.cs: missing ConfigureAwait(false)
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/AuthorityMigrationTests.cs: async method naming
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/AuthorityMigrationTests.cs: missing ConfigureAwait(false)
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/AuthorityPostgresFixture.cs: missing ConfigureAwait(false)
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/InMemoryStoreTests.cs: async method naming
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/InMemoryStoreTests.cs: missing ConfigureAwait(false)
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/OfflineKitAuditRepositoryTests.cs: async method naming
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/OfflineKitAuditRepositoryTests.cs: blocking async usage
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/OfflineKitAuditRepositoryTests.cs: missing ConfigureAwait(false)
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/PermissionRepositoryTests.cs: async method naming
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/PermissionRepositoryTests.cs: missing ConfigureAwait(false)
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/RefreshTokenRepositoryTests.cs: async method naming
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/RefreshTokenRepositoryTests.cs: missing ConfigureAwait(false)
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/RoleBasedAccessTests.cs: async method naming
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/RoleBasedAccessTests.cs: missing ConfigureAwait(false)
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/RoleRepositoryTests.cs: async method naming
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/RoleRepositoryTests.cs: missing ConfigureAwait(false)
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/SessionRepositoryTests.cs: async method naming
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/SessionRepositoryTests.cs: missing ConfigureAwait(false)
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/TokenRepositoryTests.cs: async method naming
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/TokenRepositoryTests.cs: missing ConfigureAwait(false)
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/VerdictManifestStoreTests.cs: async method naming
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/VerdictManifestStoreTests.cs: blocking async usage
+  - src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/VerdictManifestStoreTests.cs: missing ConfigureAwait(false)
+- Service locator matches:
+  - none
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Move and sort using directives (outside namespace).
+- Remove overrides that disable TreatWarningsAsErrors.
+- Rename async methods and avoid blocking async calls.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 16
+- Files with issues: 16
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/ApiKeyConcurrencyTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100 | Add ConfigureAwait(false) to awaited calls in library-like code.; Rename async methods to end with Async.; Split file to stay <= 100 lines. |
+| src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/ApiKeyIdempotencyTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100 | Add ConfigureAwait(false) to awaited calls in library-like code.; Rename async methods to end with Async.; Split file to stay <= 100 lines. |
+| src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/ApiKeyRepositoryTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100 | Add ConfigureAwait(false) to awaited calls in library-like code.; Rename async methods to end with Async.; Split file to stay <= 100 lines. |
+| src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/AuditRepositoryTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100 | Add ConfigureAwait(false) to awaited calls in library-like code.; Rename async methods to end with Async.; Split file to stay <= 100 lines. |
+| src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/AuthorityMigrationTests.cs | AsyncNaming; ConfigureAwaitMissing; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Rename async methods to end with Async.; Sort using directives alphabetically. |
+| src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/AuthorityPostgresFixture.cs | ConfigureAwaitMissing; FileLength>100; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/InMemoryStoreTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Rename async methods to end with Async.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/OfflineKitAuditRepositoryTests.cs | AsyncNaming; BlockingAsync; ConfigureAwaitMissing; FileLength>100 | Add ConfigureAwait(false) to awaited calls in library-like code.; Rename async methods to end with Async.; Replace .Result/.Wait/GetAwaiter().GetResult() with await.; Split file to stay <= 100 lines. |
+| src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/PermissionRepositoryTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100 | Add ConfigureAwait(false) to awaited calls in library-like code.; Rename async methods to end with Async.; Split file to stay <= 100 lines. |
+| src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/RefreshTokenRepositoryTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Rename async methods to end with Async.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/RoleBasedAccessTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Rename async methods to end with Async.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/RoleRepositoryTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100 | Add ConfigureAwait(false) to awaited calls in library-like code.; Rename async methods to end with Async.; Split file to stay <= 100 lines. |
+| src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/SessionRepositoryTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100 | Add ConfigureAwait(false) to awaited calls in library-like code.; Rename async methods to end with Async.; Split file to stay <= 100 lines. |
+| src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/TokenRepositoryTests.cs | AsyncNaming; ConfigureAwaitMissing; FileLength>100; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Rename async methods to end with Async.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/VerdictManifestStoreTests.cs | AsyncNaming; BlockingAsync; ConfigureAwaitMissing; FileLength>100; UsingInsideNamespace; UsingNotSorted | Add ConfigureAwait(false) to awaited calls in library-like code.; Move using directives outside namespace.; Rename async methods to end with Async.; Replace .Result/.Wait/GetAwaiter().GetResult() with await.; Sort using directives alphabetically.; Split file to stay <= 100 lines. |
+| src/Authority/__Tests/StellaOps.Authority.Persistence.Tests/TestDoubles/InMemoryAuthorityRepositories.cs | FileLength>100; UsingInsideNamespace | Move using directives outside namespace.; Split file to stay <= 100 lines. |
+
+## Testing Fullness Findings
+- Status: PASS
+- Expected layers (heuristic): 
+- Detected test projects: none
+- Missing layers: none
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- None.