documentation cleanse, sprints work and planning. remaining non EF DAL migration to EF

This commit is contained in:
master
2026-02-25 01:24:07 +02:00
parent b07d27772e
commit 4db038123b
9090 changed files with 4836 additions and 2909 deletions

View File

@@ -0,0 +1,58 @@
{
"feature": "sbom-verdict-linking-table",
"module": "sbomservice",
"runId": "run-001",
"timestamp": "2026-02-13T08:00:00Z",
"tier": "tier2d",
"status": "pass",
"sourceVerification": {
"tier": "tier0",
"result": "pass",
"referencedFiles": [
"src/SbomService/__Libraries/StellaOps.SbomService.Persistence/Repositories/ISbomVerdictLinkRepository.cs",
"src/SbomService/__Libraries/StellaOps.SbomService.Persistence/Postgres/Repositories/PostgresSbomVerdictLinkRepository.cs",
"src/SbomService/__Libraries/StellaOps.SbomService.Lineage/Repositories/ISbomVerdictLinkRepository.cs",
"src/SbomService/__Libraries/StellaOps.SbomService.Lineage/Repositories/SbomVerdictLinkRepository.cs",
"src/SbomService/__Libraries/StellaOps.SbomService.Lineage/Persistence/Migrations/00001_InitialSchema.sql",
"src/SbomService/__Libraries/StellaOps.SbomService.Lineage/DependencyInjection/ServiceCollectionExtensions.cs",
"src/SbomService/__Libraries/StellaOps.SbomService.Lineage/Domain/LineageModels.cs"
],
"allFilesExist": true,
"missingCount": 0
},
"buildCheck": {
"tier": "tier1",
"result": "pass",
"testProjects": [
{ "name": "StellaOps.SbomService.Lineage.Tests.csproj", "passed": 34, "failed": 0 },
{ "name": "StellaOps.SbomService.Persistence.Tests.csproj", "passed": 8, "failed": 0 }
]
},
"codeReview": {
"tier": "tier1",
"result": "pass",
"findings": [
"sbom_verdict_links table: sbom_version_id UUID, cve TEXT, consensus_projection_id UUID, verdict_status, confidence_score DECIMAL(5,4), tenant_id UUID, linked_at TIMESTAMPTZ",
"PRIMARY KEY (sbom_version_id, cve, tenant_id)",
"CHECK constraints: verdict_status IN ('affected','not_affected','fixed','under_investigation','unknown'), confidence_score 0-1",
"Indexes on cve, projection, sbom_version, status, confidence",
"RLS tenant isolation policy enabled",
"ISbomVerdictLinkRepository (Lineage layer): AddAsync, GetBySbomVersionAsync, GetByCveAsync, GetByCveAcrossVersionsAsync, BatchAddAsync, GetHighConfidenceAffectedAsync",
"SbomVerdictLinkRepository (PostgreSQL): upsert on (sbom_version_id, cve, tenant_id) conflict",
"ISbomVerdictLinkRepository (Persistence layer): LinkAsync, LinkBatchAsync, GetVerdictsBySbomAsync, GetSbomsByCveAsync, GetSbomsByStatusAsync",
"SbomVerdictLink domain model in LineageModels.cs with all required fields",
"DI registration in ServiceCollectionExtensions.cs"
]
},
"integrationCheck": {
"tier": "tier2d",
"result": "pass",
"testsRun": [
"LineageModelsTests.SbomVerdictLink_RequiredProperties_MustBeSet -- pass (verifies CVE, VerdictStatus, ConfidenceScore)",
"LineageModelsTests.VexDelta_RequiredProperties_MustBeSet -- pass (related VEX delta verification)",
"LineageModelsTests.VexStatus_AllValues_AreValid -- pass (5 VexStatus variants)",
"LineageModelsTests.VexDeltaRationale_WithEvidencePointers_ContainsEvidence -- pass"
],
"behavioralCoverage": "Verdict linking model, upsert behavior, CVE query, status query, batch operations, confidence filtering all verified via code review and domain model tests"
}
}