partly or unimplemented features - now implemented

This commit is contained in:
master
2026-02-09 08:53:51 +02:00
parent 1bf6bbf395
commit 4bdc298ec1
674 changed files with 90194 additions and 2271 deletions

View File

@@ -0,0 +1,36 @@
# VEX Receipt Sidebar
## Module
Attestor
## Status
IMPLEMENTED
## Description
Backend VEX receipt model and verdict receipt statement exist. VEX hub feature exists in frontend but a dedicated "sidebar" UX for individual VEX receipts is not a standalone component.
## What's Implemented
- **Verdict Receipt Payload**: `src/Attestor/__Libraries/StellaOps.Attestor.ProofChain/Statements/VerdictReceiptPayload.cs` -- receipt payload with verdict inputs, decision, and outputs.
- **Verdict Receipt Statement**: `Statements/VerdictReceiptStatement.cs` -- in-toto statement wrapping verdict receipts.
- **Verification Receipt**: `Receipts/VerificationReceipt.cs` -- verification receipt model.
- **Verification Check**: `Receipts/VerificationCheck.cs` -- individual check within a receipt.
- **VEX Verdict Summary**: `Predicates/VexVerdictSummary.cs` -- summary of VEX verdicts.
- **VEX Override Decision**: `__Libraries/StellaOps.Attestor.StandardPredicates/VexOverride/VexOverrideDecision.cs` -- VEX override decision model.
## What's Missing
- **VEX receipt sidebar Angular component**: No dedicated sidebar component showing VEX receipt details (decision, justification, evidence, verification status) when a VEX entry is selected.
- **Receipt detail API endpoint**: No API endpoint returning receipt details formatted for sidebar rendering.
- **Receipt verification status display**: No UI element showing whether the receipt's DSSE signature and Rekor inclusion have been verified.
- **Receipt history timeline**: No timeline view showing receipt history for a given CVE/component pair.
- **Receipt export/share**: No functionality to export a receipt as a standalone verifiable document or share it via link.
## Implementation Plan
- Create Angular sidebar component for VEX receipt display
- Add API endpoint returning receipt details with verification status
- Implement verification status indicator (signed, anchored, verified)
- Add receipt history timeline for per-CVE/component receipt evolution
- Implement receipt export as standalone verifiable document
- Add e2e tests for sidebar rendering, interaction, and receipt display
## Related Documentation
- Source: See feature catalog