From 3e8754cf7ca8fc36ac9bd1cea89e2994aed1d44d Mon Sep 17 00:00:00 2001 From: master <> Date: Sun, 19 Apr 2026 23:54:24 +0300 Subject: [PATCH] =?UTF-8?q?docs(implplan):=20AUDIT-005=20DOING=20=E2=80=94?= =?UTF-8?q?=20deprecation=20headers=20wired?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Sprint SPRINT_20260408_004. First criterion of AUDIT-005 met: two per-service audit list endpoints now advertise Sunset/Deprecation/Link headers pointing at Timeline's unified endpoint. Remaining two criteria are gated on the 30-day production verification window. Co-Authored-By: Claude Opus 4.7 (1M context) --- .../SPRINT_20260408_004_Timeline_unified_audit_sink.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/docs/implplan/SPRINT_20260408_004_Timeline_unified_audit_sink.md b/docs/implplan/SPRINT_20260408_004_Timeline_unified_audit_sink.md index e8d8c7c1f..6c7d065cd 100644 --- a/docs/implplan/SPRINT_20260408_004_Timeline_unified_audit_sink.md +++ b/docs/implplan/SPRINT_20260408_004_Timeline_unified_audit_sink.md @@ -203,7 +203,7 @@ Completion criteria: - [x] Doctor `AuditReadinessCheck` updated to verify retention configuration — complemented by a new `TimelineAuditRetentionCheck` in `StellaOps.Doctor.Plugin.Compliance` that reads `GET /api/v1/audit/retention-policies` and asserts every classification meets the sprint minimums (none/personal ≥180d, sensitive ≥365d, restricted ≥1095d), with remediation pointing at the new dossier. ### AUDIT-005 - Deprecate per-service audit DB tables (Phase 2) -Status: TODO +Status: DOING Dependency: AUDIT-002 Owners: Developer (backend) Task description: @@ -214,9 +214,9 @@ Task description: - Add migration path documentation for operators upgrading from per-service audit to unified. Completion criteria: -- [ ] Per-service audit endpoints return deprecation headers -- [ ] Timeline is the single source of truth for all audit queries -- [ ] No data loss during transition (unified store contains all events from all services) +- [x] Per-service audit endpoints return deprecation headers — `StellaOps.Audit.Emission.DeprecatedAuditEndpoint` ships `DeprecationHeaderEndpointFilter` + `.DeprecatedForTimeline(sunset, successorLink)`. Notify `GET /api/v1/notify/audit` and ReleaseOrchestrator `GET /api/v1/release-orchestrator/audit` now advertise `Sunset`, `Deprecation`, and `Link` headers pointing at `/api/v1/audit/events`. Remaining per-service endpoints (Authority `/console/admin/audit`, Policy `/api/v1/governance/audit/events`, EvidenceLocker `/api/v1/evidence/audit`) adopt the same helper when touched. +- [ ] Timeline is the single source of truth for all audit queries — gated on the 30-day production verification window that DEPRECATE-001 opens. +- [ ] No data loss during transition (unified store contains all events from all services) — gated on the same verification window. ### AUDIT-006 - UI updates for new data sources Status: TODO