save checkpoint. addition features and their state. check some ofthem

This commit is contained in:
master
2026-02-10 07:54:44 +02:00
parent 4bdc298ec1
commit 5593212b41
211 changed files with 10248 additions and 1208 deletions

View File

@@ -229,7 +229,20 @@ stella replay srm.yaml --assert-digest sha256:abc123...
**Modules:** `AirGap.Controller`, `TrustStore`
### 13. Controlled Conversational Advisor
### 13. Reproducible Build Evidence Bundles (Planned)
**Every released binary should carry verifiable build evidence.** Stella defines a Repro Bundle profile that combines SLSA v1 provenance, in-toto link metadata, DSSE signatures, and optional Rekor anchoring with offline parity.
Fail-closed controls:
- Reject non-canonical paths, JSON ordering, and archive metadata outside policy.
- Require pinned toolchain digests (`@sha256:...`) and deterministic build settings.
- Require DSSE-signed provenance and in-toto link evidence before promotion.
**Modules:** `Attestor`, `ReleaseOrchestrator`, `EvidenceLocker`, `AirGap`, `Policy`
**Docs:** `docs/modules/attestor/repro-bundle-profile.md`
### 14. Controlled Conversational Advisor
**Ask Stella with guardrails.** Operators can query evidence and receive cited answers while tool actions remain policy-gated and audited.
@@ -240,7 +253,7 @@ Key controls:
**Modules:** `AdvisoryAI`, `Policy`, `Authority`, `CLI`, `Web`, `Gateway`
### 14. AI Code Guard for AI-Assisted Code
### 15. AI Code Guard for AI-Assisted Code
**Catch security, IP, and license risks in AI-assisted changes.** Fast guard checks run on code diffs and produce evidence for deterministic policy gates.
@@ -258,7 +271,7 @@ Key controls:
## Competitive Moats Summary
**Eight capabilities no competitor offers together:**
**Nine capabilities no competitor offers together:**
| # | Capability | Category |
|---|-----------|----------|
@@ -268,8 +281,9 @@ Key controls:
| 4 | **Signed Reachability Proofs** | Security |
| 5 | **Deterministic Replay** | Security |
| 6 | **Sovereign + Offline Operation** | Operations |
| 7 | **Controlled Conversational Advisor** | Security |
| 8 | **AI Code Guard for AI-Assisted Code** | Security |
| 7 | **Reproducible Build Evidence Bundles** | Security |
| 8 | **Controlled Conversational Advisor** | Security |
| 9 | **AI Code Guard for AI-Assisted Code** | Security |
**Pricing moat:** No per-seat, per-project, or per-deployment tax. Limits are environments + new digests/day.