Add tests for SBOM generation determinism across multiple formats

- Created `StellaOps.TestKit.Tests` project for unit tests related to determinism.
- Implemented `DeterminismManifestTests` to validate deterministic output for canonical bytes and strings, file read/write operations, and error handling for invalid schema versions.
- Added `SbomDeterminismTests` to ensure identical inputs produce consistent SBOMs across SPDX 3.0.1 and CycloneDX 1.6/1.7 formats, including parallel execution tests.
- Updated project references in `StellaOps.Integration.Determinism` to include the new determinism testing library.

docs/observability/observability.md

@@ -86,7 +86,7 @@ This guide captures the canonical signals emitted by Concelier and Excititor onc
 
 ### 2.2 Trace usage
 
-- Correlate UI dashboard entries with traces via `traceId` surfaced in violation drawers (`docs/ui/console.md`).
+- Correlate UI dashboard entries with traces via `traceId` surfaced in violation drawers (`docs/15_UI_GUIDE.md`).
 - Use `aoc.guard` spans to inspect guard payload snapshots. Sensitive fields are redacted automatically; raw JSON lives in secure logs only.
 - For scheduled verification, filter traces by `initiator="scheduled"` to compare runtimes pre/post change.
 
@@ -217,7 +217,7 @@ Update `docs/assets/dashboards/` with screenshots when Grafana capture pipeline
 
 - [Aggregation-Only Contract reference](../ingestion/aggregation-only-contract.md)
 - [Architecture overview](../modules/platform/architecture-overview.md)
-- [Console AOC dashboard](../ui/console.md)
+- [Console guide](../15_UI_GUIDE.md)
 - [CLI AOC commands](../modules/cli/guides/cli-reference.md)
 - [Concelier architecture](../modules/concelier/architecture.md)
 - [Excititor architecture](../modules/excititor/architecture.md)

docs/observability/ui-telemetry.md

@@ -78,7 +78,7 @@
   - `ui.api.fetch` – HTTP fetch to backend; attributes: `service`, `endpoint`, `status`, `networkTime`.  
   - `ui.sse.stream` – Server-sent event subscriptions (status ticker, runs); attributes: `channel`, `connectedMillis`, `reconnects`.  
   - `ui.telemetry.batch` – Browser OTLP flush; attributes: `batchSize`, `success`, `retryCount`.  
-  - `ui.policy.action` – Policy workspace actions (simulate, approve, activate) per `docs/ui/policy-editor.md`.  
+  - `ui.policy.action` – Policy workspace actions (simulate, approve, activate) per `docs/15_UI_GUIDE.md`.  
 - **Propagation:** Spans use W3C `traceparent`; gateway echoes header to backend APIs so traces stitch across UI → gateway → service.  
 - **Sampling controls:** `OTEL_TRACES_SAMPLER_ARG` (ratio) and feature flag `telemetry.forceSampling` (sets to 100 % for incident debugging).  
 - **Viewing traces:** Grafana Tempo or Jaeger via collector. Filter by `service.name = stellaops-console`. For cross-service debugging, filter on `correlationId` and `tenant`.
@@ -147,7 +147,7 @@ Integrate alerts with Notifier (`ui.alerts`) or existing Ops channels. Tag incid
 | `OTEL_SERVICE_NAME` | Service tag for traces/logs. Set to `stellaops-console`. | auto |
 | `CONSOLE_TELEMETRY_SSE_ENABLED` | Enables `/console/telemetry` SSE feed for dashboards. | `true` |
 
-Feature flag changes should be tracked in release notes and mirrored in `/docs/ui/navigation.md` (shortcuts may change when modules toggle).
+Feature flag changes should be tracked in release notes and mirrored in `docs/15_UI_GUIDE.md` (navigation and workflow expectations).
 
 ---
 
@@ -171,7 +171,7 @@ Feature flag changes should be tracked in release notes and mirrored in `/docs/u
 - [ ] DPoP/fresh-auth anomalies correlated with Authority audit logs during drill.  
 - [ ] Offline capture workflow exercised; evidence stored in audit vault.  
 - [ ] Screenshots of Grafana dashboards committed once they stabilise (update references).  
-- [ ] Cross-links verified (`docs/deploy/console.md`, `docs/security/console-security.md`, `docs/ui/downloads.md`, `docs/ui/console-overview.md`).
+- [ ] Cross-links verified (`docs/deploy/console.md`, `docs/security/console-security.md`, `docs/15_UI_GUIDE.md`).
 
 ---
 
@@ -179,8 +179,7 @@ Feature flag changes should be tracked in release notes and mirrored in `/docs/u
 
 - `/docs/deploy/console.md` – Metrics endpoint, OTLP config, health checks.  
 - `/docs/security/console-security.md` – Security metrics & alert hints.  
-- `/docs/ui/console-overview.md` – Telemetry primitives and performance budgets.  
-- `/docs/ui/downloads.md` – Downloads metrics and parity workflow.  
+- `docs/15_UI_GUIDE.md` – Console workflows and offline posture.  
 - `/docs/observability/observability.md` – Platform-wide practices.  
 - `/ops/telemetry-collector.md` & `/ops/telemetry-storage.md` – Collector deployment.  
 - `/docs/install/docker.md` – Compose/Helm environment variables.