documentation cleanse, sprints work and planning. remaining non EF DAL migration to EF

This commit is contained in:
master
2026-02-25 01:24:07 +02:00
parent b07d27772e
commit 4db038123b
9090 changed files with 4836 additions and 2909 deletions

View File

@@ -0,0 +1,16 @@
{
"feature": "pack-run-evidence-and-provenance",
"module": "taskrunner",
"runId": "run-001",
"tier": "tier1",
"check": "build-check",
"timestamp": "2026-02-13T08:00:00Z",
"result": "pass",
"project": "StellaOps.TaskRunner.Tests.csproj",
"totalTests": 227,
"passed": 227,
"failed": 0,
"skipped": 0,
"duration": "1.6s",
"notes": "Full test suite builds and passes."
}

View File

@@ -0,0 +1,26 @@
{
"feature": "pack-run-evidence-and-provenance",
"module": "taskrunner",
"runId": "run-001",
"tier": "tier1",
"check": "code-review",
"timestamp": "2026-02-13T08:00:00Z",
"result": "pass",
"sourceFiles": [
"src/TaskRunner/StellaOps.TaskRunner/StellaOps.TaskRunner.Core/Attestation/IPackRunAttestationService.cs",
"src/TaskRunner/StellaOps.TaskRunner/StellaOps.TaskRunner.Core/Attestation/PackRunAttestation.cs",
"src/TaskRunner/StellaOps.TaskRunner/StellaOps.TaskRunner.Core/Evidence/IPackRunEvidenceSnapshotService.cs",
"src/TaskRunner/StellaOps.TaskRunner/StellaOps.TaskRunner.Core/Evidence/PackRunEvidenceSnapshot.cs",
"src/TaskRunner/StellaOps.TaskRunner/StellaOps.TaskRunner.Core/Evidence/IPackRunEvidenceStore.cs",
"src/TaskRunner/StellaOps.TaskRunner/StellaOps.TaskRunner.Core/Evidence/IPackRunRedactionGuard.cs",
"src/TaskRunner/StellaOps.TaskRunner/StellaOps.TaskRunner.Core/Evidence/BundleImportEvidence.cs",
"src/TaskRunner/StellaOps.TaskRunner/StellaOps.TaskRunner.Core/Evidence/IBundleImportEvidenceService.cs",
"src/TaskRunner/StellaOps.TaskRunner/StellaOps.TaskRunner.Core/Execution/IPackRunProvenanceWriter.cs",
"src/TaskRunner/StellaOps.TaskRunner/StellaOps.TaskRunner.Core/Execution/ProvenanceManifestFactory.cs",
"src/TaskRunner/StellaOps.TaskRunner/StellaOps.TaskRunner.Infrastructure/Execution/FilesystemPackRunProvenanceWriter.cs",
"src/TaskRunner/__Libraries/StellaOps.TaskRunner.Persistence/Postgres/Repositories/PostgresPackRunEvidenceStore.cs"
],
"allFilesExist": true,
"codeMatchesDescription": true,
"notes": "Full evidence pipeline: DSSE attestation with signing/verification, evidence snapshot with Merkle root hashing, redaction guard for PII/secrets, provenance writer with SLSA-compatible manifest, bundle import evidence with hash chain. Deterministic hashing verified."
}

View File

@@ -0,0 +1,28 @@
{
"feature": "pack-run-evidence-and-provenance",
"module": "taskrunner",
"runId": "run-001",
"tier": "tier2",
"check": "integration-check",
"timestamp": "2026-02-13T08:00:00Z",
"result": "pass",
"testFiles": [
"src/TaskRunner/StellaOps.TaskRunner/StellaOps.TaskRunner.Tests/PackRunAttestationTests.cs",
"src/TaskRunner/StellaOps.TaskRunner/StellaOps.TaskRunner.Tests/PackRunEvidenceSnapshotTests.cs",
"src/TaskRunner/StellaOps.TaskRunner/StellaOps.TaskRunner.Tests/PackRunProvenanceWriterTests.cs",
"src/TaskRunner/StellaOps.TaskRunner/StellaOps.TaskRunner.Tests/BundleImportEvidenceTests.cs"
],
"testsRun": 48,
"testsPassed": 48,
"testsFailed": 0,
"behavioralCoverage": {
"dsseSignedAttestations": "Verified: GenerateAsync_CreatesAttestationWithSubjects confirms DSSE envelope with signatures; Status=Signed when signer present",
"evidenceSnapshotCapture": "Verified: Create_WithMaterials_ComputesMerkleRoot, CaptureRunCompletion_StoresSnapshot, CaptureStepExecution_CapturesTranscript cover full lifecycle",
"provenanceManifest": "Verified: Filesystem_writer_emits_manifest confirms SLSA-compatible JSON with runId/tenantId/planHash/completedAt",
"redactionGuard": "Verified: RedactTranscript_RedactsSensitiveOutput strips Bearer tokens; RedactIdentity_RedactsEmail hashes PII; RedactApproval_RedactsApproverAndComments strips comments",
"bundleImportEvidence": "Verified: BundleImportEvidenceService_CaptureAsync_CreatesCorrectMaterials creates 6 evidence materials; hash chain is deterministic",
"determinism": "Verified: Create_SameMaterials_ProducesDeterministicHash, Create_MaterialOrderDoesNotAffectHash, ComputeStatementDigest_IsDeterministic, ComputeDigest_IsDeterministic confirm deterministic hashing",
"attestationVerification": "Verified: VerifyAsync_ValidatesSubjectsMatch, VerifyAsync_DetectsMismatchedSubjects, VerifyAsync_DetectsRevokedAttestation cover full verification flow"
},
"notes": "Comprehensive behavioral verification. Attestation service supports generate/verify/list/revoke lifecycle. Evidence snapshots use Merkle root with canonical ordering. Redaction guard strips tokens, emails, and secret values. All evidence operations emit timeline events."
}