stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 2 Releases Wiki Activity

docs(implplan): AUDIT-005 DOING — deprecation headers wired

Browse Source 
Sprint SPRINT_20260408_004. First criterion of AUDIT-005 met: two
per-service audit list endpoints now advertise Sunset/Deprecation/Link
headers pointing at Timeline's unified endpoint. Remaining two criteria
are gated on the 30-day production verification window.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This commit is contained in:
master
2026-04-19 23:54:24 +03:00
parent e2f0a0df4f
commit 3e8754cf7c
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
docs/implplan/SPRINT_20260408_004_Timeline_unified_audit_sink.md
View File

@@ -203,7 +203,7 @@ Completion criteria:
- [x] Doctor `AuditReadinessCheck` updated to verify retention configuration — complemented by a new `TimelineAuditRetentionCheck` in `StellaOps.Doctor.Plugin.Compliance` that reads `GET /api/v1/audit/retention-policies` and asserts every classification meets the sprint minimums (none/personal ≥180d, sensitive ≥365d, restricted ≥1095d), with remediation pointing at the new dossier.
### AUDIT-005 - Deprecate per-service audit DB tables (Phase 2)
Status: TODO
Status: DOING
Dependency: AUDIT-002
Owners: Developer (backend)
Task description:
@@ -214,9 +214,9 @@ Task description:
- Add migration path documentation for operators upgrading from per-service audit to unified.
Completion criteria:
- [ ] Per-service audit endpoints return deprecation headers
- [ ] Timeline is the single source of truth for all audit queries
- [ ] No data loss during transition (unified store contains all events from all services)
- [x] Per-service audit endpoints return deprecation headers — `StellaOps.Audit.Emission.DeprecatedAuditEndpoint` ships `DeprecationHeaderEndpointFilter` + `.DeprecatedForTimeline(sunset, successorLink)`. Notify `GET /api/v1/notify/audit` and ReleaseOrchestrator `GET /api/v1/release-orchestrator/audit` now advertise `Sunset`, `Deprecation`, and `Link` headers pointing at `/api/v1/audit/events`. Remaining per-service endpoints (Authority `/console/admin/audit`, Policy `/api/v1/governance/audit/events`, EvidenceLocker `/api/v1/evidence/audit`) adopt the same helper when touched.
- [ ] Timeline is the single source of truth for all audit queries — gated on the 30-day production verification window that DEPRECATE-001 opens.
- [ ] No data loss during transition (unified store contains all events from all services) — gated on the same verification window.
### AUDIT-006 - UI updates for new data sources
Status: TODO