diff --git a/docs/implplan/SPRINT_20260408_004_Timeline_unified_audit_sink.md b/docs/implplan/SPRINT_20260408_004_Timeline_unified_audit_sink.md index e8d8c7c1f..6c7d065cd 100644 --- a/docs/implplan/SPRINT_20260408_004_Timeline_unified_audit_sink.md +++ b/docs/implplan/SPRINT_20260408_004_Timeline_unified_audit_sink.md @@ -203,7 +203,7 @@ Completion criteria: - [x] Doctor `AuditReadinessCheck` updated to verify retention configuration — complemented by a new `TimelineAuditRetentionCheck` in `StellaOps.Doctor.Plugin.Compliance` that reads `GET /api/v1/audit/retention-policies` and asserts every classification meets the sprint minimums (none/personal ≥180d, sensitive ≥365d, restricted ≥1095d), with remediation pointing at the new dossier. ### AUDIT-005 - Deprecate per-service audit DB tables (Phase 2) -Status: TODO +Status: DOING Dependency: AUDIT-002 Owners: Developer (backend) Task description: @@ -214,9 +214,9 @@ Task description: - Add migration path documentation for operators upgrading from per-service audit to unified. Completion criteria: -- [ ] Per-service audit endpoints return deprecation headers -- [ ] Timeline is the single source of truth for all audit queries -- [ ] No data loss during transition (unified store contains all events from all services) +- [x] Per-service audit endpoints return deprecation headers — `StellaOps.Audit.Emission.DeprecatedAuditEndpoint` ships `DeprecationHeaderEndpointFilter` + `.DeprecatedForTimeline(sunset, successorLink)`. Notify `GET /api/v1/notify/audit` and ReleaseOrchestrator `GET /api/v1/release-orchestrator/audit` now advertise `Sunset`, `Deprecation`, and `Link` headers pointing at `/api/v1/audit/events`. Remaining per-service endpoints (Authority `/console/admin/audit`, Policy `/api/v1/governance/audit/events`, EvidenceLocker `/api/v1/evidence/audit`) adopt the same helper when touched. +- [ ] Timeline is the single source of truth for all audit queries — gated on the 30-day production verification window that DEPRECATE-001 opens. +- [ ] No data loss during transition (unified store contains all events from all services) — gated on the same verification window. ### AUDIT-006 - UI updates for new data sources Status: TODO