save checkpoint. addition features and their state. check some ofthem
This commit is contained in:
@@ -229,7 +229,20 @@ stella replay srm.yaml --assert-digest sha256:abc123...
|
||||
|
||||
**Modules:** `AirGap.Controller`, `TrustStore`
|
||||
|
||||
### 13. Controlled Conversational Advisor
|
||||
### 13. Reproducible Build Evidence Bundles (Planned)
|
||||
|
||||
**Every released binary should carry verifiable build evidence.** Stella defines a Repro Bundle profile that combines SLSA v1 provenance, in-toto link metadata, DSSE signatures, and optional Rekor anchoring with offline parity.
|
||||
|
||||
Fail-closed controls:
|
||||
- Reject non-canonical paths, JSON ordering, and archive metadata outside policy.
|
||||
- Require pinned toolchain digests (`@sha256:...`) and deterministic build settings.
|
||||
- Require DSSE-signed provenance and in-toto link evidence before promotion.
|
||||
|
||||
**Modules:** `Attestor`, `ReleaseOrchestrator`, `EvidenceLocker`, `AirGap`, `Policy`
|
||||
|
||||
**Docs:** `docs/modules/attestor/repro-bundle-profile.md`
|
||||
|
||||
### 14. Controlled Conversational Advisor
|
||||
|
||||
**Ask Stella with guardrails.** Operators can query evidence and receive cited answers while tool actions remain policy-gated and audited.
|
||||
|
||||
@@ -240,7 +253,7 @@ Key controls:
|
||||
|
||||
**Modules:** `AdvisoryAI`, `Policy`, `Authority`, `CLI`, `Web`, `Gateway`
|
||||
|
||||
### 14. AI Code Guard for AI-Assisted Code
|
||||
### 15. AI Code Guard for AI-Assisted Code
|
||||
|
||||
**Catch security, IP, and license risks in AI-assisted changes.** Fast guard checks run on code diffs and produce evidence for deterministic policy gates.
|
||||
|
||||
@@ -258,7 +271,7 @@ Key controls:
|
||||
|
||||
## Competitive Moats Summary
|
||||
|
||||
**Eight capabilities no competitor offers together:**
|
||||
**Nine capabilities no competitor offers together:**
|
||||
|
||||
| # | Capability | Category |
|
||||
|---|-----------|----------|
|
||||
@@ -268,8 +281,9 @@ Key controls:
|
||||
| 4 | **Signed Reachability Proofs** | Security |
|
||||
| 5 | **Deterministic Replay** | Security |
|
||||
| 6 | **Sovereign + Offline Operation** | Operations |
|
||||
| 7 | **Controlled Conversational Advisor** | Security |
|
||||
| 8 | **AI Code Guard for AI-Assisted Code** | Security |
|
||||
| 7 | **Reproducible Build Evidence Bundles** | Security |
|
||||
| 8 | **Controlled Conversational Advisor** | Security |
|
||||
| 9 | **AI Code Guard for AI-Assisted Code** | Security |
|
||||
|
||||
**Pricing moat:** No per-seat, per-project, or per-deployment tax. Limits are environments + new digests/day.
|
||||
|
||||
|
||||
Reference in New Issue
Block a user