stabilize tests

src/Cli/AGENTS.md

@@ -1,4 +1,4 @@
-# AGENTS · StellaOps CLI
+# AGENTS ?? StellaOps CLI
 
 ## Roles
 - **CLI engineer**: implement/maintain CLI verbs, wiring, migration tooling.
@@ -14,7 +14,7 @@
 - `docs/modules/cli/architecture.md`
 - `docs/implplan/AGENTS.md` (global planning rules)
 - `docs/db/MIGRATION_STRATEGY.md` (for migration-related work)
-- Sprint-specific file (e.g., `docs/implplan/SPRINT_3408_0001_0001_postgres_migration_lifecycle.md`)
+- Sprint-specific file (e.g., `docs-archived/implplan/SPRINT_3408_0001_0001_postgres_migration_lifecycle.md`)
 
 ## Coding standards
 - Target **.NET 10**; prefer Native AOT where configured.
@@ -31,7 +31,7 @@
 - Packaging scripts must support offline kits (use pinned digests/checksums).
 
 ## Sprint/status discipline
-- Mirror task state in the relevant `SPRINT_*` doc (TODO → DOING → DONE/BLOCKED).
+- Mirror task state in the relevant `SPRINT_*` doc (TODO ??? DOING ??? DONE/BLOCKED).
 - If scope/blocker is unclear, mark task BLOCKED in the sprint doc with a note; do not seek ad-hoc approvals.
 
 ## Determinism checklist for CLI changes
@@ -42,3 +42,4 @@
 ## Contacts/ownership
 - Module owner: CLI Guild
 - Sprint owner (migration lifecycle): see `SPRINT_3408_0001_0001_postgres_migration_lifecycle.md` Action Tracker.
+

src/Cli/StellaOps.Cli/AGENTS.md

@@ -1,4 +1,4 @@
-# StellaOps.Cli — Agent Brief
+# StellaOps.Cli ??? Agent Brief
 
 ## Mission
 - Deliver an offline-capable command-line interface that drives StellaOps back-end operations: scanner distribution, scan execution, result uploads, and Concelier database lifecycle calls (init/resume/export).
@@ -24,15 +24,15 @@
 - Command verbs (`scanner`, `scan`, `db`, `config`) are wired through System.CommandLine 2.0; keep handlers composable, cancellation-aware, and unit-testable.
 - `scanner download` must verify digests/signatures, install containers locally (docker load), and log artefact metadata.
 - `scan run` must execute the container against a directory, materialise artefacts in `ResultsDirectory`, and auto-upload them on success; `scan upload` is the manual retry path.
-- Emit structured console logs (single line, UTC timestamps) and honour offline-first expectations—no hidden network calls.
+- Emit structured console logs (single line, UTC timestamps) and honour offline-first expectations???no hidden network calls.
 - Mirror repository guidance: stay within `src/Cli/StellaOps.Cli` unless collaborating via documented handshakes.
-- Update `TASKS.md` as states change (TODO → DOING → DONE/BLOCKED) and record added tests/fixtures alongside implementation notes.
+- Update `TASKS.md` as states change (TODO ??? DOING ??? DONE/BLOCKED) and record added tests/fixtures alongside implementation notes.
 
 ## Reference Materials
 - `docs/modules/concelier/ARCHITECTURE.md` for database operations surface area.
 - Backend OpenAPI/contract docs (once available) for job triggers and scanner endpoints.
 - Existing module AGENTS/TASKS files for style and coordination cues.
-- `docs/09_API_CLI_REFERENCE.md` (section 3) for the user-facing synopsis of the CLI verbs and flags.
+- `docs/API_CLI_REFERENCE.md` (section 3) for the user-facing synopsis of the CLI verbs and flags.
 
 ### Attestor Command Guild
 - Owns the `stella attest` verb family (sign, verify, list, fetch) plus key lifecycle helpers (create, import, rotate, revoke).
@@ -42,3 +42,4 @@
 ## Required Reading
 - `docs/modules/cli/architecture.md`
 - `docs/modules/platform/architecture-overview.md`
+

src/Cli/StellaOps.Cli/Audit/AuditBundleService.cs

@@ -5,13 +5,14 @@
 // Description: Generates self-contained audit bundles for artifacts
 // -----------------------------------------------------------------------------
 
+
+using Microsoft.Extensions.Logging;
 using System.Globalization;
 using System.IO.Compression;
 using System.Security.Cryptography;
 using System.Text;
 using System.Text.Json;
 using System.Text.Json.Serialization;
-using Microsoft.Extensions.Logging;
 
 namespace StellaOps.Cli.Audit;
 

src/Cli/StellaOps.Cli/CliApplication.cs

@@ -5,12 +5,13 @@
 // Description: Core CLI structure with command parsing and execution
 // -----------------------------------------------------------------------------
 
+
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.Logging;
 using System.CommandLine;
 using System.CommandLine.Binding;
 using System.CommandLine.Parsing;
 using System.Text.Json;
-using Microsoft.Extensions.DependencyInjection;
-using Microsoft.Extensions.Logging;
 
 namespace StellaOps.Cli;
 

src/Cli/StellaOps.Cli/Commands/Admin/AdminCommandHandlers.cs

@@ -1,10 +1,11 @@
 // SPDX-License-Identifier: BUSL-1.1
 // Sprint: SPRINT_4100_0006_0005 - Admin Utility Integration
 
-using System.Net.Http.Json;
-using System.Text.Json;
+
 using Microsoft.Extensions.DependencyInjection;
 using Spectre.Console;
+using System.Net.Http.Json;
+using System.Text.Json;
 
 namespace StellaOps.Cli.Commands.Admin;
 

src/Cli/StellaOps.Cli/Commands/Advise/AdviseChatCommandGroup.cs

@@ -1,15 +1,16 @@
 // Copyright (c) StellaOps. All rights reserved.
 // Licensed under the BUSL-1.1 license.
 
+
+using Microsoft.Extensions.DependencyInjection;
+using StellaOps.Cli.Configuration;
+using StellaOps.Cli.Services.Chat;
+using StellaOps.Cli.Services.Models.Chat;
 using System;
 using System.CommandLine;
 using System.IO;
 using System.Threading;
 using System.Threading.Tasks;
-using Microsoft.Extensions.DependencyInjection;
-using StellaOps.Cli.Configuration;
-using StellaOps.Cli.Services.Chat;
-using StellaOps.Cli.Services.Models.Chat;
 
 namespace StellaOps.Cli.Commands.Advise;
 

src/Cli/StellaOps.Cli/Commands/Advise/ChatRenderer.cs

@@ -1,6 +1,8 @@
 // Copyright (c) StellaOps. All rights reserved.
 // Licensed under the BUSL-1.1 license.
 
+
+using StellaOps.Cli.Services.Models.Chat;
 using System;
 using System.IO;
 using System.Linq;
@@ -8,7 +10,6 @@ using System.Text;
 using System.Text.Json;
 using System.Threading;
 using System.Threading.Tasks;
-using StellaOps.Cli.Services.Models.Chat;
 
 namespace StellaOps.Cli.Commands.Advise;
 

src/Cli/StellaOps.Cli/Commands/Agent/BootstrapCommands.cs

@@ -1,7 +1,8 @@
 // Copyright (c) Stella Ops. All rights reserved. SPDX-License-Identifier: BUSL-1.1
 
-using System.CommandLine;
+
 using StellaOps.Agent.Core.Bootstrap;
+using System.CommandLine;
 
 namespace StellaOps.Cli.Commands.Agent;
 

src/Cli/StellaOps.Cli/Commands/AirGapCommandGroup.cs

@@ -5,8 +5,9 @@
 // Description: CLI commands for knowledge snapshot export, import, and diff.
 // -----------------------------------------------------------------------------
 
-using System.CommandLine;
+
 using StellaOps.Cli.Extensions;
+using System.CommandLine;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/AnalyticsCommandGroup.cs

@@ -2,6 +2,12 @@
 // AnalyticsCommandGroup.cs
 // Sprint: SPRINT_20260120_032_Cli_sbom_analytics_cli
 // -----------------------------------------------------------------------------
+
+using Microsoft.Extensions.DependencyInjection;
+using StellaOps.Cli.Extensions;
+using StellaOps.Cli.Output;
+using StellaOps.Cli.Services;
+using StellaOps.Cli.Services.Models;
 using System;
 using System.CommandLine;
 using System.Globalization;
@@ -11,11 +17,6 @@ using System.Text;
 using System.Text.Json;
 using System.Threading;
 using System.Threading.Tasks;
-using Microsoft.Extensions.DependencyInjection;
-using StellaOps.Cli.Extensions;
-using StellaOps.Cli.Output;
-using StellaOps.Cli.Services;
-using StellaOps.Cli.Services.Models;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/AttestCommandGroup.cs

@@ -6,16 +6,17 @@
 // Task: Add offline attestation verification subcommand
 // -----------------------------------------------------------------------------
 
+
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.Logging;
+using StellaOps.Attestor.Envelope;
+using StellaOps.Attestor.Oci.Services;
 using System.CommandLine;
 using System.CommandLine.Parsing;
 using System.IO.Compression;
 using System.Security.Cryptography;
 using System.Text;
 using System.Text.Json;
-using Microsoft.Extensions.DependencyInjection;
-using Microsoft.Extensions.Logging;
-using StellaOps.Attestor.Envelope;
-using StellaOps.Attestor.Oci.Services;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/AuditCommandGroup.cs

@@ -4,8 +4,9 @@
 // Description: CLI commands for audit pack export and replay.
 // -----------------------------------------------------------------------------
 
-using System.CommandLine;
+
 using StellaOps.Cli.Extensions;
+using System.CommandLine;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/AuditVerifyCommand.cs

@@ -5,11 +5,12 @@
 // Description: Verifies audit bundle integrity and optionally signatures
 // -----------------------------------------------------------------------------
 
+
+using Spectre.Console;
 using System.Security.Cryptography;
 using System.Text;
 using System.Text.Json;
 using System.Text.Json.Serialization;
-using Spectre.Console;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/AuthCommandGroup.cs

@@ -5,12 +5,13 @@
 // Description: CLI commands for auth and access control administration
 // -----------------------------------------------------------------------------
 
+
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.Logging;
 using System.CommandLine;
 using System.Text;
 using System.Text.Json;
 using System.Text.Json.Serialization;
-using Microsoft.Extensions.DependencyInjection;
-using Microsoft.Extensions.Logging;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/BenchCommandBuilder.cs

@@ -7,10 +7,11 @@
 // Description: CLI commands for running and managing reachability benchmarks
 // -----------------------------------------------------------------------------
 
-using System.CommandLine;
-using System.Text.Json;
+
 using Microsoft.Extensions.DependencyInjection;
 using StellaOps.Scanner.Benchmarks;
+using System.CommandLine;
+using System.Text.Json;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/Binary/BinaryCommandGroup.cs

@@ -5,9 +5,10 @@
 // Description: CLI command group for binary reachability operations.
 // -----------------------------------------------------------------------------
 
-using System.CommandLine;
+
 using Microsoft.Extensions.DependencyInjection;
 using StellaOps.Cli.Extensions;
+using System.CommandLine;
 
 namespace StellaOps.Cli.Commands.Binary;
 

src/Cli/StellaOps.Cli/Commands/Binary/BinaryCommandHandlers.cs

@@ -5,15 +5,16 @@
 // Description: Command handlers for binary reachability operations.
 // -----------------------------------------------------------------------------
 
-using System.Globalization;
-using System.Text.Json;
-using System.Text.Json.Nodes;
+
 using Microsoft.Extensions.DependencyInjection;
 using Microsoft.Extensions.Logging;
 using Spectre.Console;
 using StellaOps.Scanner.CallGraph;
 using StellaOps.Scanner.CallGraph.Binary;
 using StellaOps.Scanner.Contracts;
+using System.Globalization;
+using System.Text.Json;
+using System.Text.Json.Nodes;
 
 namespace StellaOps.Cli.Commands.Binary;
 

src/Cli/StellaOps.Cli/Commands/Binary/BinaryIndexOpsCommandGroup.cs

@@ -5,12 +5,13 @@
 // Description: CLI command group for BinaryIndex ops (health, bench, cache, config).
 // -----------------------------------------------------------------------------
 
-using System.CommandLine;
-using System.Globalization;
-using System.Text.Json;
+
 using Microsoft.Extensions.Configuration;
 using Microsoft.Extensions.DependencyInjection;
 using StellaOps.Cli.Extensions;
+using System.CommandLine;
+using System.Globalization;
+using System.Text.Json;
 
 namespace StellaOps.Cli.Commands.Binary;
 

src/Cli/StellaOps.Cli/Commands/Binary/DeltaSigCommandGroup.cs

@@ -5,10 +5,7 @@
 // Description: CLI commands for delta-sig diff, attest, verify, and gate operations
 // -----------------------------------------------------------------------------
 
-using System.CommandLine;
-using System.Security.Cryptography;
-using System.Text;
-using System.Text.Json;
+
 using Microsoft.Extensions.DependencyInjection;
 using StellaOps.Attestor.Core.Rekor;
 using StellaOps.Attestor.Core.Submission;
@@ -16,6 +13,10 @@ using StellaOps.BinaryIndex.DeltaSig;
 using StellaOps.BinaryIndex.DeltaSig.Attestation;
 using StellaOps.BinaryIndex.DeltaSig.Policy;
 using StellaOps.Cli.Extensions;
+using System.CommandLine;
+using System.Security.Cryptography;
+using System.Text;
+using System.Text.Json;
 
 namespace StellaOps.Cli.Commands.Binary;
 

src/Cli/StellaOps.Cli/Commands/Budget/RiskBudgetCommandGroup.cs

@@ -5,12 +5,13 @@
 // Description: CLI commands for risk budget status and consumption management
 // -----------------------------------------------------------------------------
 
+
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.Logging;
 using System.CommandLine;
 using System.Net.Http.Json;
 using System.Text.Json;
 using System.Text.Json.Serialization;
-using Microsoft.Extensions.DependencyInjection;
-using Microsoft.Extensions.Logging;
 
 namespace StellaOps.Cli.Commands.Budget;
 

src/Cli/StellaOps.Cli/Commands/BundleExportCommand.cs

@@ -5,13 +5,14 @@
 // Description: Enhanced CLI command for advisory-compliant bundle export
 // -----------------------------------------------------------------------------
 
+
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.Logging;
 using System.CommandLine;
 using System.IO.Compression;
 using System.Security.Cryptography;
 using System.Text.Json;
 using System.Text.Json.Serialization;
-using Microsoft.Extensions.DependencyInjection;
-using Microsoft.Extensions.Logging;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/BundleVerifyCommand.cs

@@ -5,12 +5,7 @@
 // Description: Offline bundle verification command with full cryptographic verification
 // -----------------------------------------------------------------------------
 
-using System.CommandLine;
-using System.IO.Compression;
-using System.Security.Cryptography;
-using System.Text;
-using System.Text.Json;
-using System.Text.Json.Serialization;
+
 using Microsoft.Extensions.DependencyInjection;
 using Microsoft.Extensions.Logging;
 using StellaOps.Attestor.Core.Predicates;
@@ -18,6 +13,12 @@ using StellaOps.Attestor.Core.Signing;
 using StellaOps.Attestor.Envelope;
 using StellaOps.Attestor.Serialization;
 using StellaOps.Cryptography;
+using System.CommandLine;
+using System.IO.Compression;
+using System.Security.Cryptography;
+using System.Text;
+using System.Text.Json;
+using System.Text.Json.Serialization;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/Chain/ChainCommandGroup.cs

@@ -5,6 +5,7 @@
 // Description: CLI commands for attestation chain operations.
 // -----------------------------------------------------------------------------
 
+
 using System.CommandLine;
 using System.Text.Json;
 using System.Text.Json.Serialization;

src/Cli/StellaOps.Cli/Commands/ChangeTraceCommandGroup.cs

@@ -4,16 +4,17 @@
 // Description: CLI commands for building, exporting, and verifying change traces.
 // -----------------------------------------------------------------------------
 
-using System.CommandLine;
-using System.Text.Json;
-using System.Text.Json.Serialization;
+
+
+using ChangeTraceModel = StellaOps.Scanner.ChangeTrace.Models.ChangeTrace;
 using Microsoft.Extensions.Logging.Abstractions;
 using StellaOps.Scanner.ChangeTrace.Builder;
 using StellaOps.Scanner.ChangeTrace.CycloneDx;
 using StellaOps.Scanner.ChangeTrace.Models;
 using StellaOps.Scanner.ChangeTrace.Validation;
-
-using ChangeTraceModel = StellaOps.Scanner.ChangeTrace.Models.ChangeTrace;
+using System.CommandLine;
+using System.Text.Json;
+using System.Text.Json.Serialization;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/CheckpointCommands.cs

@@ -5,13 +5,14 @@
 // Description: CLI commands for Rekor checkpoint export and import
 // -----------------------------------------------------------------------------
 
+
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.Logging;
 using System.CommandLine;
 using System.Net.Http.Json;
 using System.Security.Cryptography;
 using System.Text.Json;
 using System.Text.Json.Serialization;
-using Microsoft.Extensions.DependencyInjection;
-using Microsoft.Extensions.Logging;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/CiCommandGroup.cs

@@ -1,11 +1,12 @@
+
+using Microsoft.Extensions.Logging;
+using Spectre.Console;
 using System;
 using System.CommandLine;
 using System.IO;
 using System.Text.Json;
 using System.Threading;
 using System.Threading.Tasks;
-using Microsoft.Extensions.Logging;
-using Spectre.Console;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/CommandFactory.cs

@@ -1,17 +1,9 @@
-using System;
-using System.CommandLine;
-using System.Globalization;
-using System.Net.Http;
-using System.Net.Http.Json;
-using System.Threading;
-using System.Threading.Tasks;
-using System.Text;
-using System.Text.Json;
-using System.Text.Json.Serialization;
+
 using Microsoft.Extensions.DependencyInjection;
 using Microsoft.Extensions.Logging;
 using Spectre.Console;
 using StellaOps.Cli.Commands.Admin;
+using StellaOps.Cli.Commands.Advise;
 using StellaOps.Cli.Commands.Budget;
 using StellaOps.Cli.Commands.Chain;
 using StellaOps.Cli.Commands.DeltaSig;
@@ -19,14 +11,23 @@ using StellaOps.Cli.Commands.FunctionMap;
 using StellaOps.Cli.Commands.Observations;
 using StellaOps.Cli.Commands.Proof;
 using StellaOps.Cli.Commands.Scan;
-using StellaOps.Cli.Configuration;
-using StellaOps.Cli.Extensions;
-using StellaOps.Cli.Plugins;
-using StellaOps.Cli.Commands.Advise;
 using StellaOps.Cli.Commands.Watchlist;
 using StellaOps.Cli.Commands.Witness;
+using StellaOps.Cli.Configuration;
+using StellaOps.Cli.Extensions;
 using StellaOps.Cli.Infrastructure;
+using StellaOps.Cli.Plugins;
 using StellaOps.Cli.Services.Models.AdvisoryAi;
+using System;
+using System.CommandLine;
+using System.Globalization;
+using System.Net.Http;
+using System.Net.Http.Json;
+using System.Text;
+using System.Text.Json;
+using System.Text.Json.Serialization;
+using System.Threading;
+using System.Threading.Tasks;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/CommandHandlers.AirGap.cs

@@ -5,14 +5,15 @@
 // Description: Command handlers for airgap operations.
 // -----------------------------------------------------------------------------
 
-using System.Text.Json;
-using System.Text.Json.Serialization;
+
 using Microsoft.Extensions.DependencyInjection;
 using Spectre.Console;
 using StellaOps.AirGap.Sync;
 using StellaOps.AirGap.Sync.Models;
 using StellaOps.AirGap.Sync.Services;
 using StellaOps.AirGap.Sync.Transport;
+using System.Text.Json;
+using System.Text.Json.Serialization;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/CommandHandlers.Audit.cs

@@ -4,17 +4,18 @@
 // Description: Command handlers for audit pack export, replay, and verification.
 // -----------------------------------------------------------------------------
 
-using System.Diagnostics;
-using System.Text.Json;
-using System.Text.Json.Serialization;
+
 using Microsoft.Extensions.DependencyInjection;
 using Microsoft.Extensions.Logging;
+using Spectre.Console;
 using StellaOps.AuditPack.Models;
 using StellaOps.AuditPack.Services;
 using StellaOps.Cli.Configuration;
 using StellaOps.Cli.Services;
 using StellaOps.Cli.Telemetry;
-using Spectre.Console;
+using System.Diagnostics;
+using System.Text.Json;
+using System.Text.Json.Serialization;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/CommandHandlers.Config.cs

@@ -3,9 +3,10 @@
 // Sprint: SPRINT_20260112_014_CLI_config_viewer (CLI-CONFIG-010, CLI-CONFIG-011, CLI-CONFIG-012, CLI-CONFIG-013)
 // </copyright>
 
+
+using StellaOps.Cli.Services;
 using System.Globalization;
 using System.Text.Json;
-using StellaOps.Cli.Services;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/CommandHandlers.Crypto.cs

@@ -4,14 +4,15 @@
 // Description: Command handlers for cryptographic signing and verification.
 // -----------------------------------------------------------------------------
 
-using System.Globalization;
-using System.Text;
-using System.Text.Json;
+
 using Microsoft.Extensions.DependencyInjection;
 using Microsoft.Extensions.Logging;
 using Spectre.Console;
 using StellaOps.Cryptography;
 using StellaOps.Cryptography.Kms;
+using System.Globalization;
+using System.Text;
+using System.Text.Json;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/CommandHandlers.Drift.cs

@@ -5,9 +5,10 @@
 // Description: Command handlers for reachability drift CLI.
 // -----------------------------------------------------------------------------
 
+
+using Spectre.Console;
 using System.Globalization;
 using System.Text.Json;
-using Spectre.Console;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/CommandHandlers.ExportCache.cs

@@ -1,8 +1,9 @@
-using System.Globalization;
-using System.Text.Json;
+
 using Microsoft.Extensions.DependencyInjection;
 using Spectre.Console;
 using StellaOps.ExportCenter.Core.EvidenceCache;
+using System.Globalization;
+using System.Text.Json;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/CommandHandlers.Federation.cs

@@ -4,10 +4,11 @@
 // Description: Command handlers for federation bundle export and import operations.
 // -----------------------------------------------------------------------------
 
-using System.Net.Http.Headers;
-using System.Text.Json;
+
 using Microsoft.Extensions.DependencyInjection;
 using Spectre.Console;
+using System.Net.Http.Headers;
+using System.Text.Json;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/CommandHandlers.Feeds.cs

@@ -5,9 +5,10 @@
 // Description: Command handlers for feed snapshot operations.
 // -----------------------------------------------------------------------------
 
-using System.Text.Json;
+
 using Microsoft.Extensions.DependencyInjection;
 using Spectre.Console;
+using System.Text.Json;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/CommandHandlers.Image.cs

@@ -1,4 +1,4 @@
-using System.Globalization;
+
 using Microsoft.Extensions.DependencyInjection;
 using Microsoft.Extensions.Logging;
 using Spectre.Console;
@@ -7,6 +7,7 @@ using StellaOps.Cli.Configuration;
 using StellaOps.Cli.Services;
 using StellaOps.Scanner.Contracts;
 using StellaOps.Scanner.Storage.Oci;
+using System.Globalization;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/CommandHandlers.Model.cs

@@ -1,6 +1,7 @@
-using System.Text.Json;
+
 using Microsoft.Extensions.DependencyInjection;
 using StellaOps.Cli.Output;
+using System.Text.Json;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/CommandHandlers.Offline.cs

@@ -1,10 +1,4 @@
-using System.Buffers;
-using System.Diagnostics;
-using System.Globalization;
-using System.Security.Cryptography;
-using System.Text;
-using System.Text.Json;
-using System.Text.Json.Serialization;
+
 using Microsoft.Extensions.DependencyInjection;
 using Microsoft.Extensions.Logging;
 using Microsoft.Extensions.Options;
@@ -16,6 +10,13 @@ using StellaOps.AirGap.Importer.Versioning;
 using StellaOps.Cli.Configuration;
 using StellaOps.Cli.Services;
 using StellaOps.Cli.Telemetry;
+using System.Buffers;
+using System.Diagnostics;
+using System.Globalization;
+using System.Security.Cryptography;
+using System.Text;
+using System.Text.Json;
+using System.Text.Json.Serialization;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/CommandHandlers.Secrets.cs

@@ -5,12 +5,13 @@
 // Description: Implements bundle create, verify, and info commands.
 // -----------------------------------------------------------------------------
 
-using System.Globalization;
-using System.Text.Json;
+
 using Microsoft.Extensions.DependencyInjection;
 using Microsoft.Extensions.Logging;
 using Spectre.Console;
 using StellaOps.Scanner.Analyzers.Secrets.Bundles;
+using System.Globalization;
+using System.Text.Json;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/CommandHandlers.Sign.cs

@@ -2,11 +2,12 @@
 // Sprint: SPRINT_20251226_007_BE_determinism_gaps
 // Task: DET-GAP-08 - CLI handlers for keyless signing
 
-using System.Text.Json;
+
 using Microsoft.Extensions.DependencyInjection;
 using Spectre.Console;
 using StellaOps.Cli.Output;
 using StellaOps.Signer.Infrastructure.Sigstore;
+using System.Text.Json;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/CommandHandlers.VerdictRationale.cs

@@ -5,16 +5,17 @@
 // Description: Command handler for verdict rationale operations.
 // -----------------------------------------------------------------------------
 
-using System.Diagnostics;
-using System.Text.Json;
-using System.Text.Json.Serialization;
+
 using Microsoft.Extensions.DependencyInjection;
 using Microsoft.Extensions.Logging;
+using Spectre.Console;
 using StellaOps.Cli.Configuration;
 using StellaOps.Cli.Services;
 using StellaOps.Cli.Services.Models;
 using StellaOps.Cli.Telemetry;
-using Spectre.Console;
+using System.Diagnostics;
+using System.Text.Json;
+using System.Text.Json.Serialization;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/CommandHandlers.VerdictVerify.cs

@@ -4,15 +4,16 @@
 // Description: Command handlers for verdict verification operations.
 // -----------------------------------------------------------------------------
 
-using System.Diagnostics;
-using System.Text.Json;
-using System.Text.Json.Serialization;
+
 using Microsoft.Extensions.DependencyInjection;
 using Microsoft.Extensions.Logging;
+using Spectre.Console;
 using StellaOps.Cli.Configuration;
 using StellaOps.Cli.Services;
 using StellaOps.Cli.Telemetry;
-using Spectre.Console;
+using System.Diagnostics;
+using System.Text.Json;
+using System.Text.Json.Serialization;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/CommandHandlers.VerifyBundle.cs

@@ -2,19 +2,20 @@
 // Copyright (c) Stella Operations. Licensed under BUSL-1.1.
 // </copyright>
 
+
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.Logging;
+using Spectre.Console;
+using StellaOps.Attestation;
+using StellaOps.Cli.Telemetry;
+using StellaOps.Replay.Core.Models;
+using StellaOps.Verdict;
 using System.Collections.Immutable;
 using System.Diagnostics;
 using System.Globalization;
 using System.Security.Cryptography;
 using System.Text;
 using System.Text.Json;
-using Microsoft.Extensions.DependencyInjection;
-using Microsoft.Extensions.Logging;
-using StellaOps.Attestation;
-using StellaOps.Cli.Telemetry;
-using StellaOps.Replay.Core.Models;
-using StellaOps.Verdict;
-using Spectre.Console;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/CommandHandlers.VerifyImage.cs

@@ -1,13 +1,14 @@
-using System.Diagnostics;
-using System.Text.Json;
-using System.Text.Json.Serialization;
+
 using Microsoft.Extensions.DependencyInjection;
 using Microsoft.Extensions.Logging;
+using Spectre.Console;
 using StellaOps.Cli.Configuration;
 using StellaOps.Cli.Services;
 using StellaOps.Cli.Services.Models;
 using StellaOps.Cli.Telemetry;
-using Spectre.Console;
+using System.Diagnostics;
+using System.Text.Json;
+using System.Text.Json.Serialization;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/CommandHandlers.VerifyOffline.cs

@@ -1,14 +1,15 @@
-using System.Diagnostics;
-using System.Text;
-using System.Text.Json;
+
 using Microsoft.Extensions.DependencyInjection;
 using Microsoft.Extensions.Logging;
+using Spectre.Console;
 using StellaOps.AirGap.Importer.Contracts;
 using StellaOps.AirGap.Importer.Policy;
 using StellaOps.AirGap.Importer.Reconciliation;
 using StellaOps.AirGap.Importer.Reconciliation.Parsers;
 using StellaOps.Cli.Telemetry;
-using Spectre.Console;
+using System.Diagnostics;
+using System.Text;
+using System.Text.Json;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/CommandHandlers.Witness.cs

@@ -6,12 +6,13 @@
 // Description: Command handlers for reachability witness CLI.
 // -----------------------------------------------------------------------------
 
-using System.Globalization;
-using System.Text.Json;
+
 using Microsoft.Extensions.DependencyInjection;
 using Spectre.Console;
 using StellaOps.Cli.Services;
 using StellaOps.Cli.Services.Models;
+using System.Globalization;
+using System.Text.Json;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/CommandHandlers.cs

@@ -1,3 +1,43 @@
+
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.Logging;
+using Microsoft.Extensions.Logging.Abstractions;
+using Microsoft.Extensions.Options;
+using Spectre.Console;
+using Spectre.Console.Rendering;
+using StellaOps.AirGap.Importer.Contracts;
+using StellaOps.AirGap.Importer.Quarantine;
+using StellaOps.AirGap.Importer.Validation;
+using StellaOps.AirGap.Importer.Versioning;
+using StellaOps.Attestor.Envelope;
+using StellaOps.Attestor.Timestamping;
+using StellaOps.Auth.Client;
+using StellaOps.Cli.Configuration;
+using StellaOps.Cli.Output;
+using StellaOps.Cli.Prompts;
+using StellaOps.Cli.Services;
+using StellaOps.Cli.Services.Models;
+using StellaOps.Cli.Services.Models.AdvisoryAi;
+using StellaOps.Cli.Services.Models.Bun;
+using StellaOps.Cli.Services.Models.Ruby;
+using StellaOps.Cli.Telemetry;
+using StellaOps.Cryptography;
+using StellaOps.Cryptography.DependencyInjection;
+using StellaOps.Cryptography.Kms;
+using StellaOps.ExportCenter.Client;
+using StellaOps.ExportCenter.Client.Models;
+using StellaOps.Policy;
+using StellaOps.Policy.Scoring;
+using StellaOps.Policy.Scoring.Engine;
+using StellaOps.Policy.Scoring.Policies;
+using StellaOps.PolicyDsl;
+using StellaOps.Scanner.Analyzers.Lang;
+using StellaOps.Scanner.Analyzers.Lang.Bun;
+using StellaOps.Scanner.Analyzers.Lang.Java;
+using StellaOps.Scanner.Analyzers.Lang.Node;
+using StellaOps.Scanner.Analyzers.Lang.Php;
+using StellaOps.Scanner.Analyzers.Lang.Python;
+using StellaOps.Scanner.Analyzers.Lang.Ruby;
 using System;
 using System.Buffers;
 using System.Collections.Generic;
@@ -11,51 +51,12 @@ using System.Net;
 using System.Net.Http;
 using System.Net.Http.Headers;
 using System.Security.Cryptography;
+using System.Text;
 using System.Text.Json;
 using System.Text.Json.Nodes;
 using System.Text.Json.Serialization;
-using System.Text;
 using System.Threading;
 using System.Threading.Tasks;
-using Microsoft.Extensions.DependencyInjection;
-using Microsoft.Extensions.Logging;
-using Microsoft.Extensions.Logging.Abstractions;
-using Microsoft.Extensions.Options;
-using Spectre.Console;
-using Spectre.Console.Rendering;
-using StellaOps.Auth.Client;
-using StellaOps.ExportCenter.Client;
-using StellaOps.ExportCenter.Client.Models;
-using StellaOps.Cli.Configuration;
-using StellaOps.Cli.Output;
-using StellaOps.Cli.Prompts;
-using StellaOps.Cli.Services;
-using StellaOps.Cli.Services.Models;
-using StellaOps.Cli.Services.Models.AdvisoryAi;
-using StellaOps.Cli.Services.Models.Bun;
-using StellaOps.Cli.Services.Models.Ruby;
-using StellaOps.Cli.Telemetry;
-using StellaOps.Attestor.Envelope;
-using StellaOps.Attestor.Timestamping;
-using StellaOps.Cryptography;
-using StellaOps.Cryptography.DependencyInjection;
-using StellaOps.Cryptography.Kms;
-using StellaOps.Policy.Scoring;
-using StellaOps.Policy.Scoring.Engine;
-using StellaOps.Policy.Scoring.Policies;
-using StellaOps.Scanner.Analyzers.Lang;
-using StellaOps.Scanner.Analyzers.Lang.Java;
-using StellaOps.Scanner.Analyzers.Lang.Node;
-using StellaOps.Scanner.Analyzers.Lang.Python;
-using StellaOps.Scanner.Analyzers.Lang.Ruby;
-using StellaOps.Scanner.Analyzers.Lang.Php;
-using StellaOps.Scanner.Analyzers.Lang.Bun;
-using StellaOps.Policy;
-using StellaOps.PolicyDsl;
-using StellaOps.AirGap.Importer.Contracts;
-using StellaOps.AirGap.Importer.Quarantine;
-using StellaOps.AirGap.Importer.Validation;
-using StellaOps.AirGap.Importer.Versioning;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/Compare/CompareCommandBuilder.cs

@@ -4,11 +4,12 @@
 // Description: CLI commands for comparing scan snapshots.
 // -----------------------------------------------------------------------------
 
+
+using Microsoft.Extensions.DependencyInjection;
+using StellaOps.Cli.Output;
 using System.CommandLine;
 using System.Text.Json;
 using System.Text.Json.Serialization;
-using Microsoft.Extensions.DependencyInjection;
-using StellaOps.Cli.Output;
 
 namespace StellaOps.Cli.Commands.Compare;
 

src/Cli/StellaOps.Cli/Commands/ConfigCommandGroup.cs

@@ -3,8 +3,9 @@
 // Sprint: SPRINT_20260112_014_CLI_config_viewer (CLI-CONFIG-010, CLI-CONFIG-011)
 // </copyright>
 
-using System.CommandLine;
+
 using StellaOps.Cli.Services;
+using System.CommandLine;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/CryptoCommandGroup.cs

@@ -5,10 +5,11 @@
 // Task: RCR-001 - Add stella crypto profiles list/select commands
 // Task: RCR-002 - Add stella crypto plugins status command
 
-using System.CommandLine;
-using System.Text.Json;
+
 using Microsoft.Extensions.DependencyInjection;
 using StellaOps.Cryptography;
+using System.CommandLine;
+using System.Text.Json;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/DbCommandGroup.cs

@@ -5,12 +5,13 @@
 // Description: CLI commands for database and connector status operations
 // -----------------------------------------------------------------------------
 
+
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.Logging;
 using System.CommandLine;
 using System.Net.Http.Json;
 using System.Text.Json;
 using System.Text.Json.Serialization;
-using Microsoft.Extensions.DependencyInjection;
-using Microsoft.Extensions.Logging;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/DeltaCommandGroup.cs

@@ -1,18 +1,19 @@
-// -----------------------------------------------------------------------------
+// -----------------------------------------------------------------------------
 // DeltaCommandGroup.cs
 // Sprint: SPRINT_5100_0002_0003_delta_verdict_generator
 // Description: CLI commands for delta verdict operations
 // -----------------------------------------------------------------------------
 
-using System.CommandLine;
-using System.Text.Json;
-using System.Text.Json.Serialization;
+
 using StellaOps.DeltaVerdict.Engine;
 using StellaOps.DeltaVerdict.Models;
 using StellaOps.DeltaVerdict.Oci;
 using StellaOps.DeltaVerdict.Policy;
 using StellaOps.DeltaVerdict.Serialization;
 using StellaOps.DeltaVerdict.Signing;
+using System.CommandLine;
+using System.Text.Json;
+using System.Text.Json.Serialization;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/DeltaSig/DeltaSigCommandHandlers.cs

@@ -2,15 +2,16 @@
 // Licensed under BUSL-1.1. See LICENSE in the project root.
 // Sprint: SPRINT_20260102_001_BE - Tasks: DS-025 through DS-032
 
-using System.Collections.Immutable;
-using System.IO.Compression;
-using System.Text.Json;
+
 using Microsoft.Extensions.DependencyInjection;
 using Microsoft.Extensions.Logging;
 using Spectre.Console;
 using StellaOps.BinaryIndex.DeltaSig;
 using StellaOps.BinaryIndex.Disassembly;
 using StellaOps.BinaryIndex.Normalization;
+using System.Collections.Immutable;
+using System.IO.Compression;
+using System.Text.Json;
 
 namespace StellaOps.Cli.Commands.DeltaSig;
 

src/Cli/StellaOps.Cli/Commands/DoctorCommandGroup.cs

@@ -1,14 +1,4 @@
-using System;
-using System.Collections.Generic;
-using System.CommandLine;
-using System.CommandLine.Parsing;
-using System.Globalization;
-using System.IO;
-using System.Linq;
-using System.Text.Json;
-using System.Text.RegularExpressions;
-using System.Threading;
-using System.Threading.Tasks;
+
 using Microsoft.Extensions.Configuration;
 using Microsoft.Extensions.DependencyInjection;
 using Microsoft.Extensions.Hosting;
@@ -20,6 +10,17 @@ using StellaOps.Doctor.Models;
 using StellaOps.Doctor.Output;
 using StellaOps.Doctor.Packs;
 using StellaOps.Doctor.Plugins;
+using System;
+using System.Collections.Generic;
+using System.CommandLine;
+using System.CommandLine.Parsing;
+using System.Globalization;
+using System.IO;
+using System.Linq;
+using System.Text.Json;
+using System.Text.RegularExpressions;
+using System.Threading;
+using System.Threading.Tasks;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/DriftCommandGroup.cs

@@ -3,14 +3,15 @@
 // </copyright>
 // Sprint: SPRINT_20260105_002_004_CLI (CLI-007 through CLI-010)
 
-using System.CommandLine;
-using System.Text;
-using System.Text.Json;
+
 using Microsoft.Extensions.DependencyInjection;
 using Microsoft.Extensions.Logging;
 using Microsoft.Extensions.Logging.Abstractions;
 using Spectre.Console;
 using StellaOps.Facet;
+using System.CommandLine;
+using System.Text;
+using System.Text.Json;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/EvidenceCommandGroup.cs

@@ -5,6 +5,11 @@
 // Description: CLI commands for exporting and verifying evidence bundles.
 // -----------------------------------------------------------------------------
 
+
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.Logging;
+using Spectre.Console;
+using StellaOps.Cli.Configuration;
 using System.CommandLine;
 using System.Formats.Tar;
 using System.IO.Compression;
@@ -14,10 +19,6 @@ using System.Security.Cryptography;
 using System.Text;
 using System.Text.Json;
 using System.Text.Json.Serialization;
-using Microsoft.Extensions.DependencyInjection;
-using Microsoft.Extensions.Logging;
-using StellaOps.Cli.Configuration;
-using Spectre.Console;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/ExceptionCommandGroup.cs

@@ -5,16 +5,17 @@
 // Description: CLI commands for exception approval workflow
 // -----------------------------------------------------------------------------
 
+
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.Logging;
+using Spectre.Console;
+using StellaOps.Cli.Configuration;
 using System.CommandLine;
 using System.Globalization;
 using System.Net.Http.Headers;
 using System.Net.Http.Json;
 using System.Text.Json;
 using System.Text.Json.Serialization;
-using Microsoft.Extensions.DependencyInjection;
-using Microsoft.Extensions.Logging;
-using StellaOps.Cli.Configuration;
-using Spectre.Console;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/ExplainCommandGroup.cs

@@ -5,16 +5,17 @@
 // Description: CLI commands for explaining why artifacts were blocked
 // -----------------------------------------------------------------------------
 
-using System.CommandLine;
-using System.Net.Http.Json;
-using System.Text.Json;
-using System.Text.Json.Serialization;
+
 using Microsoft.Extensions.DependencyInjection;
 using Microsoft.Extensions.Logging;
 using Spectre.Console;
 using StellaOps.Cli.Configuration;
 using StellaOps.Cli.Extensions;
 using StellaOps.Cli.Output;
+using System.CommandLine;
+using System.Net.Http.Json;
+using System.Text.Json;
+using System.Text.Json.Serialization;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/ExportCommandGroup.cs

@@ -5,11 +5,12 @@
 // Description: CLI commands for evidence and findings export
 // -----------------------------------------------------------------------------
 
+
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.Logging;
 using System.CommandLine;
 using System.Text.Json;
 using System.Text.Json.Serialization;
-using Microsoft.Extensions.DependencyInjection;
-using Microsoft.Extensions.Logging;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/FederationCommandGroup.cs

@@ -5,8 +5,9 @@
 // Description: CLI commands for federation bundle export and import for air-gapped sync.
 // -----------------------------------------------------------------------------
 
-using System.CommandLine;
+
 using StellaOps.Cli.Extensions;
+using System.CommandLine;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/FeedsCommandGroup.cs

@@ -5,8 +5,9 @@
 // Description: CLI commands for feed snapshot operations for offline/deterministic replay.
 // -----------------------------------------------------------------------------
 
-using System.CommandLine;
+
 using StellaOps.Cli.Extensions;
+using System.CommandLine;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/FunctionMap/FunctionMapCommandGroup.cs

@@ -3,15 +3,16 @@
 // Sprint: SPRINT_20260122_039_Scanner_runtime_linkage_verification
 // Task: RLV-006, RLV-007 - CLI: stella function-map generate/verify
 
+
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.Logging;
+using StellaOps.Scanner.Reachability.FunctionMap;
+using StellaOps.Scanner.Reachability.FunctionMap.Verification;
 using System.CommandLine;
 using System.Globalization;
 using System.Security.Cryptography;
 using System.Text.Json;
 using System.Text.Json.Serialization;
-using Microsoft.Extensions.DependencyInjection;
-using Microsoft.Extensions.Logging;
-using StellaOps.Scanner.Reachability.FunctionMap;
-using StellaOps.Scanner.Reachability.FunctionMap.Verification;
 
 namespace StellaOps.Cli.Commands.FunctionMap;
 

src/Cli/StellaOps.Cli/Commands/GateCommandGroup.cs

@@ -5,16 +5,17 @@
 // Description: CLI commands for CI/CD gate evaluation
 // -----------------------------------------------------------------------------
 
+
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.Logging;
+using Spectre.Console;
+using StellaOps.Cli.Configuration;
 using System.CommandLine;
 using System.Globalization;
 using System.Net.Http.Headers;
 using System.Net.Http.Json;
 using System.Text.Json;
 using System.Text.Json.Serialization;
-using Microsoft.Extensions.DependencyInjection;
-using Microsoft.Extensions.Logging;
-using StellaOps.Cli.Configuration;
-using Spectre.Console;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/GitHubCommandGroup.cs

@@ -2,13 +2,14 @@
 // Copyright (c) StellaOps. Licensed under the BUSL-1.1.
 // </copyright>
 
-using System.CommandLine;
-using System.Globalization;
-using System.Text.Json;
+
 using Microsoft.Extensions.DependencyInjection;
 using Microsoft.Extensions.Logging;
 using Spectre.Console;
 using StellaOps.Integrations.Plugin.GitHubApp.CodeScanning;
+using System.CommandLine;
+using System.Globalization;
+using System.Text.Json;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/GoldenSet/GoldenSetCommandGroup.cs

@@ -2,12 +2,13 @@
 // Sprint: SPRINT_20260110_012_006_CLI
 // Task: GSC-001 through GSC-004 - Golden Set CLI Commands
 
-using System.CommandLine;
-using System.CommandLine.Parsing;
-using System.Text.Json;
+
 using Microsoft.Extensions.DependencyInjection;
 using Microsoft.Extensions.Logging;
 using StellaOps.Cli.Extensions;
+using System.CommandLine;
+using System.CommandLine.Parsing;
+using System.Text.Json;
 
 namespace StellaOps.Cli.Commands.GoldenSet;
 

src/Cli/StellaOps.Cli/Commands/GoldenSet/VerifyFixCommandGroup.cs

@@ -2,12 +2,13 @@
 // Sprint: SPRINT_20260110_012_006_CLI
 // Task: GSC-003 - verify-fix Command
 
-using System.CommandLine;
-using System.CommandLine.Parsing;
-using System.Text.Json;
+
 using Microsoft.Extensions.DependencyInjection;
 using Microsoft.Extensions.Logging;
 using StellaOps.Cli.Extensions;
+using System.CommandLine;
+using System.CommandLine.Parsing;
+using System.Text.Json;
 
 namespace StellaOps.Cli.Commands.GoldenSet;
 

src/Cli/StellaOps.Cli/Commands/GroundTruthCommandGroup.cs

@@ -7,9 +7,7 @@
 // Task: GCB-002 - CLI command for corpus bundle import and verification
 // -----------------------------------------------------------------------------
 
-using System.Collections.Immutable;
-using System.CommandLine;
-using System.Text.Json;
+
 using Microsoft.Extensions.DependencyInjection;
 using Microsoft.Extensions.Logging;
 using StellaOps.BinaryIndex.GroundTruth.Reproducible;
@@ -17,6 +15,9 @@ using StellaOps.BinaryIndex.GroundTruth.Reproducible.Models;
 using StellaOps.BinaryIndex.GroundTruth.Reproducible.Services;
 using StellaOps.Cli.Extensions;
 using StellaOps.Cli.Output;
+using System.Collections.Immutable;
+using System.CommandLine;
+using System.Text.Json;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/GuardCommandGroup.cs

@@ -5,6 +5,10 @@
 // Description: CLI commands for AI Code Guard analysis
 // -----------------------------------------------------------------------------
 
+
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.Logging;
+using Spectre.Console;
 using System.CommandLine;
 using System.Globalization;
 using System.Net.Http.Headers;
@@ -12,9 +16,6 @@ using System.Net.Http.Json;
 using System.Text;
 using System.Text.Json;
 using System.Text.Json.Serialization;
-using Microsoft.Extensions.DependencyInjection;
-using Microsoft.Extensions.Logging;
-using Spectre.Console;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/HlcCommandGroup.cs

@@ -5,11 +5,12 @@
 // Description: CLI commands for Hybrid Logical Clock (HLC) operations
 // -----------------------------------------------------------------------------
 
+
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.Logging;
 using System.CommandLine;
 using System.Text.Json;
 using System.Text.Json.Serialization;
-using Microsoft.Extensions.DependencyInjection;
-using Microsoft.Extensions.Logging;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/ImageCommandGroup.cs

@@ -1,5 +1,6 @@
-using System.CommandLine;
+
 using StellaOps.Cli.Configuration;
+using System.CommandLine;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/KeysCommandGroup.cs

@@ -5,11 +5,12 @@
 // Description: CLI commands for signing key management
 // -----------------------------------------------------------------------------
 
+
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.Logging;
 using System.CommandLine;
 using System.Text.Json;
 using System.Text.Json.Serialization;
-using Microsoft.Extensions.DependencyInjection;
-using Microsoft.Extensions.Logging;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/LayerSbomCommandGroup.cs

@@ -5,6 +5,11 @@
 // Description: CLI commands for per-layer SBOM export and composition recipe
 // -----------------------------------------------------------------------------
 
+
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.Logging;
+using Spectre.Console;
+using StellaOps.Cli.Configuration;
 using System.CommandLine;
 using System.Globalization;
 using System.Net.Http.Headers;
@@ -12,10 +17,6 @@ using System.Net.Http.Json;
 using System.Security.Cryptography;
 using System.Text.Json;
 using System.Text.Json.Serialization;
-using Microsoft.Extensions.DependencyInjection;
-using Microsoft.Extensions.Logging;
-using StellaOps.Cli.Configuration;
-using Spectre.Console;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/LicenseCommandGroup.cs

@@ -5,11 +5,12 @@
 // Description: CLI commands for license detection, categorization, and validation
 // -----------------------------------------------------------------------------
 
+
+using Spectre.Console;
+using StellaOps.Scanner.Analyzers.Lang.Core.Licensing;
 using System.CommandLine;
 using System.Text.Json;
 using System.Text.Json.Serialization;
-using Spectre.Console;
-using StellaOps.Scanner.Analyzers.Lang.Core.Licensing;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/MigrateArtifactsCommand.cs

@@ -5,9 +5,10 @@
 // Description: CLI command for migrating legacy artifacts to unified store
 // -----------------------------------------------------------------------------
 
-using System.CommandLine;
+
 using Microsoft.Extensions.DependencyInjection;
 using Microsoft.Extensions.Logging;
+using System.CommandLine;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/ModelCommandGroup.cs

@@ -1,5 +1,6 @@
-using System.CommandLine;
+
 using StellaOps.Cli.Extensions;
+using System.CommandLine;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/NotifyCommandGroup.cs

@@ -5,11 +5,12 @@
 // Description: CLI commands for notifications and integrations
 // -----------------------------------------------------------------------------
 
+
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.Logging;
 using System.CommandLine;
 using System.Text.Json;
 using System.Text.Json.Serialization;
-using Microsoft.Extensions.DependencyInjection;
-using Microsoft.Extensions.Logging;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/Observations/ObservationsCommandGroup.cs

@@ -3,16 +3,17 @@
 // Sprint: SPRINT_20260122_039_Scanner_runtime_linkage_verification
 // Task: RLV-008 - CLI: stella observations query
 
+
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.Logging;
+using StellaOps.Scanner.Reachability.FunctionMap.ObservationStore;
+using StellaOps.Scanner.Reachability.FunctionMap.Verification;
 using System.CommandLine;
 using System.Globalization;
 using System.Text;
 using System.Text.Json;
 using System.Text.Json.Serialization;
 using System.Text.RegularExpressions;
-using Microsoft.Extensions.DependencyInjection;
-using Microsoft.Extensions.Logging;
-using StellaOps.Scanner.Reachability.FunctionMap.ObservationStore;
-using StellaOps.Scanner.Reachability.FunctionMap.Verification;
 
 namespace StellaOps.Cli.Commands.Observations;
 

src/Cli/StellaOps.Cli/Commands/OfflineCommandGroup.cs

@@ -1,5 +1,6 @@
-using System.CommandLine;
+
 using StellaOps.Cli.Extensions;
+using System.CommandLine;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/OrchestratorCommandGroup.cs

@@ -5,11 +5,12 @@
 // Description: CLI commands for orchestrator and scheduler operations
 // -----------------------------------------------------------------------------
 
+
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.Logging;
 using System.CommandLine;
 using System.Text.Json;
 using System.Text.Json.Serialization;
-using Microsoft.Extensions.DependencyInjection;
-using Microsoft.Extensions.Logging;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/PatchAttestCommandGroup.cs

@@ -4,13 +4,14 @@
 // Task: Patch attestation command for creating DSSE-signed patch evidence
 // -----------------------------------------------------------------------------
 
+
+using StellaOps.Feedser.BinaryAnalysis.Models;
 using System.CommandLine;
 using System.Globalization;
 using System.Security.Cryptography;
 using System.Text;
 using System.Text.Json;
 using System.Text.Json.Serialization;
-using StellaOps.Feedser.BinaryAnalysis.Models;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/PatchVerifyCommandGroup.cs

@@ -5,15 +5,16 @@
 // Description: CLI commands for patch verification under scan command
 // -----------------------------------------------------------------------------
 
+
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.Logging;
+using Spectre.Console;
+using StellaOps.Scanner.PatchVerification;
+using StellaOps.Scanner.PatchVerification.Models;
 using System.CommandLine;
 using System.Globalization;
 using System.Text.Json;
 using System.Text.Json.Serialization;
-using Microsoft.Extensions.DependencyInjection;
-using Microsoft.Extensions.Logging;
-using StellaOps.Scanner.PatchVerification;
-using StellaOps.Scanner.PatchVerification.Models;
-using Spectre.Console;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/PoE/ExportCommand.cs

@@ -1,5 +1,6 @@
 // Copyright (c) StellaOps. Licensed under BUSL-1.1.
 
+
 using System.CommandLine;
 using System.Globalization;
 using System.IO.Compression;

src/Cli/StellaOps.Cli/Commands/PoE/VerifyCommand.cs

@@ -1,5 +1,6 @@
 // Copyright (c) StellaOps. Licensed under BUSL-1.1.
 
+
 using System.CommandLine;
 using System.Security.Cryptography;
 using System.Text;

src/Cli/StellaOps.Cli/Commands/Policy/PolicyInteropCommandGroup.cs

@@ -3,16 +3,17 @@
 // Sprint: SPRINT_20260122_041_Policy_interop_import_export_rego
 // Task: TASK-06 - CLI commands (stella policy export/import/validate/evaluate)
 
-using System.CommandLine;
-using System.Text.Json;
-using System.Text.Json.Serialization;
+
+using Spectre.Console;
 using StellaOps.Policy.Interop.Abstractions;
 using StellaOps.Policy.Interop.Contracts;
 using StellaOps.Policy.Interop.Evaluation;
 using StellaOps.Policy.Interop.Export;
 using StellaOps.Policy.Interop.Import;
 using StellaOps.Policy.Interop.Rego;
-using Spectre.Console;
+using System.CommandLine;
+using System.Text.Json;
+using System.Text.Json.Serialization;
 
 namespace StellaOps.Cli.Commands.Policy;
 

src/Cli/StellaOps.Cli/Commands/PolicyCommandGroup.cs

@@ -2,10 +2,11 @@
 // Sprint: SPRINT_5200_0001_0001 - Starter Policy Template
 // Task: T4 - Policy Validation CLI Command
 
+
+using Json.Schema;
 using System.CommandLine;
 using System.Text.Json;
 using System.Text.Json.Nodes;
-using Json.Schema;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/Proof/AnchorCommandGroup.cs

@@ -1,5 +1,6 @@
-using System.CommandLine;
+
 using Microsoft.Extensions.Logging;
+using System.CommandLine;
 
 namespace StellaOps.Cli.Commands.Proof;
 

src/Cli/StellaOps.Cli/Commands/Proof/FuncProofCommandGroup.cs

@@ -5,8 +5,9 @@
 // Description: CLI commands for function-level proof generation and verification.
 // -----------------------------------------------------------------------------
 
-using System.CommandLine;
+
 using StellaOps.Cli.Extensions;
+using System.CommandLine;
 
 namespace StellaOps.Cli.Commands.Proof;
 

src/Cli/StellaOps.Cli/Commands/Proof/FuncProofCommandHandlers.cs

@@ -5,11 +5,12 @@
 // Description: CLI command handlers for function-level proof operations.
 // -----------------------------------------------------------------------------
 
+
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.Logging;
 using System.Globalization;
 using System.Text.Json;
 using System.Text.Json.Serialization;
-using Microsoft.Extensions.DependencyInjection;
-using Microsoft.Extensions.Logging;
 
 namespace StellaOps.Cli.Commands.Proof;
 

src/Cli/StellaOps.Cli/Commands/Proof/KeyRotationCommandGroup.cs

@@ -1,7 +1,8 @@
-using System.CommandLine;
-using System.Text.Json;
+
 using Microsoft.Extensions.Logging;
 using StellaOps.Cli.Extensions;
+using System.CommandLine;
+using System.Text.Json;
 
 namespace StellaOps.Cli.Commands.Proof;
 

src/Cli/StellaOps.Cli/Commands/Proof/ProofCommandGroup.cs

@@ -5,13 +5,14 @@
 // Description: CLI commands for proof chain verification
 // -----------------------------------------------------------------------------
 
-using System.CommandLine;
-using System.Text.Json;
-using System.Text.Json.Serialization;
+
 using Microsoft.Extensions.DependencyInjection;
 using Microsoft.Extensions.Logging;
 using StellaOps.Cli.Services;
 using StellaOps.Cli.Services.Models;
+using System.CommandLine;
+using System.Text.Json;
+using System.Text.Json.Serialization;
 
 namespace StellaOps.Cli.Commands.Proof;
 

src/Cli/StellaOps.Cli/Commands/Proof/ReceiptCommandGroup.cs

@@ -1,5 +1,6 @@
-using System.CommandLine;
+
 using Microsoft.Extensions.Logging;
+using System.CommandLine;
 
 namespace StellaOps.Cli.Commands.Proof;
 

src/Cli/StellaOps.Cli/Commands/ProvCommandGroup.cs

@@ -5,11 +5,12 @@
 // Description: CLI commands for minimal proof export, import, and verification.
 // -----------------------------------------------------------------------------
 
-using System.CommandLine;
+
 using Microsoft.Extensions.DependencyInjection;
 using Microsoft.Extensions.Logging;
 using StellaOps.Cli.Extensions;
 using StellaOps.Provcache;
+using System.CommandLine;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/ProveCommandGroup.cs

@@ -9,17 +9,18 @@
 // Description: CLI command for generating replay proofs for image verdicts.
 // -----------------------------------------------------------------------------
 
-using System.CommandLine;
-using System.Collections.Immutable;
-using System.Globalization;
-using System.Text.Json;
-using System.Text.Json.Serialization;
+
 using Microsoft.Extensions.DependencyInjection;
 using Microsoft.Extensions.Logging;
+using Spectre.Console;
 using StellaOps.Cli.Replay;
 using StellaOps.Replay.Core.Models;
 using StellaOps.Verdict;
-using Spectre.Console;
+using System.Collections.Immutable;
+using System.CommandLine;
+using System.Globalization;
+using System.Text.Json;
+using System.Text.Json.Serialization;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/ReachGraph/ReachGraphCommandHandlers.cs

@@ -1,5 +1,6 @@
 // Licensed to StellaOps under the BUSL-1.1 license.
 
+
 using System.Net.Http.Json;
 using System.Text;
 using System.Text.Json;

src/Cli/StellaOps.Cli/Commands/ReachabilityCommandGroup.cs

@@ -4,12 +4,13 @@
 // Description: CLI commands for reachability subgraph visualization
 // -----------------------------------------------------------------------------
 
+
+using Microsoft.Extensions.DependencyInjection;
+using Microsoft.Extensions.Logging;
 using System.CommandLine;
 using System.Text;
 using System.Text.Json;
 using System.Text.Json.Serialization;
-using Microsoft.Extensions.DependencyInjection;
-using Microsoft.Extensions.Logging;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/ReplayCommandGroup.cs

@@ -5,17 +5,18 @@
 // Description: CLI commands for replay operations
 // -----------------------------------------------------------------------------
 
-using System.CommandLine;
-using System.Text.Json;
-using System.Text.Json.Serialization;
+
 using Microsoft.Extensions.DependencyInjection;
 using Microsoft.Extensions.Logging;
-using StellaOps.Cli.Replay;
 using StellaOps.Canonicalization.Json;
 using StellaOps.Canonicalization.Verification;
+using StellaOps.Cli.Replay;
 using StellaOps.Policy.Replay;
 using StellaOps.Replay.Core;
 using StellaOps.Replay.Core.Export;
+using System.CommandLine;
+using System.Text.Json;
+using System.Text.Json.Serialization;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/Sbom/SbomGenerateCommand.cs

@@ -5,6 +5,7 @@
 // Description: CLI command for deterministic SBOM generation
 // -----------------------------------------------------------------------------
 
+
 using System.CommandLine;
 
 namespace StellaOps.Cli.Commands.Sbom;

src/Cli/StellaOps.Cli/Commands/SbomCommandGroup.cs

@@ -6,6 +6,15 @@
 // Description: CLI commands for SBOM verification, conversion, and management
 // -----------------------------------------------------------------------------
 
+// Sprint: SPRINT_20260119_022_Scanner_dependency_reachability (TASK-022-009)
+
+using Microsoft.Extensions.Logging.Abstractions;
+using ReachabilityDependencies = StellaOps.Scanner.Reachability.Dependencies;
+using StellaOps.Canonical.Json;
+using StellaOps.Concelier.SbomIntegration.Models;
+using StellaOps.Concelier.SbomIntegration.Parsing;
+using StellaOps.Policy.Licensing;
+using StellaOps.Policy.NtiaCompliance;
 using System.Collections.Immutable;
 using System.CommandLine;
 using System.CommandLine.Parsing;
@@ -14,14 +23,6 @@ using System.Security.Cryptography;
 using System.Text;
 using System.Text.Json;
 using System.Text.Json.Serialization;
-using Microsoft.Extensions.Logging.Abstractions;
-using StellaOps.Canonical.Json;
-using StellaOps.Concelier.SbomIntegration.Models;
-using StellaOps.Concelier.SbomIntegration.Parsing;
-using StellaOps.Policy.Licensing;
-using StellaOps.Policy.NtiaCompliance;
-// Sprint: SPRINT_20260119_022_Scanner_dependency_reachability (TASK-022-009)
-using ReachabilityDependencies = StellaOps.Scanner.Reachability.Dependencies;
 
 namespace StellaOps.Cli.Commands;
 

src/Cli/StellaOps.Cli/Commands/Scan/BinaryDiffCommandGroup.cs

@@ -1,10 +1,11 @@
+
+using Microsoft.Extensions.DependencyInjection;
+using StellaOps.Attestor.StandardPredicates.BinaryDiff;
+using StellaOps.Cli.Extensions;
 using System.Collections.Immutable;
 using System.CommandLine;
 using System.Globalization;
 using System.Net.Http;
-using Microsoft.Extensions.DependencyInjection;
-using StellaOps.Attestor.StandardPredicates.BinaryDiff;
-using StellaOps.Cli.Extensions;
 
 namespace StellaOps.Cli.Commands.Scan;
 

src/Cli/StellaOps.Cli/Commands/Scan/BinaryDiffDsseOutput.cs

@@ -1,5 +1,6 @@
-using System.Text;
+
 using StellaOps.Attestor.StandardPredicates.BinaryDiff;
+using System.Text;
 
 namespace StellaOps.Cli.Commands.Scan;