stabilize tests

src/Zastava/AGENTS.md

@@ -15,8 +15,8 @@ Deliver runtime posture observation and admission enforcement for container work
 - `docs/modules/zastava/architecture.md`
 - `docs/modules/scanner/architecture.md`
 - `docs/modules/policy/architecture.md`
-- `docs/modules/airgap/airgap-mode.md`
-- `docs/modules/devops/runbooks/zastava-deployment.md`
+- `docs/modules/airgap/guides/airgap-mode.md`
+- `docs/operations/devops/runbooks/zastava-deployment.md`
 
 ## Working Directory & Boundaries
 - Primary scope: `src/Zastava/**`
@@ -35,3 +35,4 @@ Deliver runtime posture observation and admission enforcement for container work
 ## Workflow
 - Update sprint status on task transitions.
 - Record decisions/risks in sprint Execution Log and Decisions & Risks.
+

src/Zastava/StellaOps.Zastava.Agent/Backend/RuntimeEventsClient.cs

@@ -1,10 +1,11 @@
-using System.Net.Http.Json;
-using System.Text.Json;
+
 using Microsoft.Extensions.Logging;
 using Microsoft.Extensions.Options;
 using StellaOps.Determinism;
 using StellaOps.Zastava.Agent.Configuration;
 using StellaOps.Zastava.Core.Contracts;
+using System.Net.Http.Json;
+using System.Text.Json;
 
 namespace StellaOps.Zastava.Agent.Backend;
 

src/Zastava/StellaOps.Zastava.Agent/Configuration/ZastavaAgentOptions.cs

@@ -1,5 +1,6 @@
-using System.ComponentModel.DataAnnotations;
+
 using StellaOps.Zastava.Core.Configuration;
+using System.ComponentModel.DataAnnotations;
 
 namespace StellaOps.Zastava.Agent.Configuration;
 

src/Zastava/StellaOps.Zastava.Agent/Docker/DockerSocketClient.cs

@@ -1,12 +1,13 @@
+
+using Microsoft.Extensions.Logging;
+using Microsoft.Extensions.Options;
+using StellaOps.Zastava.Agent.Configuration;
 using System.IO.Pipes;
 using System.Net.Http;
 using System.Net.Sockets;
 using System.Runtime.CompilerServices;
 using System.Text;
 using System.Text.Json;
-using Microsoft.Extensions.Logging;
-using Microsoft.Extensions.Options;
-using StellaOps.Zastava.Agent.Configuration;
 
 namespace StellaOps.Zastava.Agent.Docker;
 

src/Zastava/StellaOps.Zastava.Agent/TASKS.md

@@ -0,0 +1,8 @@
+# StellaOps.Zastava.Agent Task Board
+This board mirrors active sprint tasks for this module.
+Source of truth: `docs/implplan/SPRINT_20260130_002_Tools_csproj_remediation_solid_review.md`.
+
+| Task ID | Status | Notes |
+| --- | --- | --- |
+| REMED-05 | TODO | Remediation checklist: docs/implplan/audits/csproj-standards/remediation/checklists/src/Zastava/StellaOps.Zastava.Agent/StellaOps.Zastava.Agent.md. |
+| REMED-06 | DONE | SOLID review notes captured for SPRINT_20260130_002. |

src/Zastava/StellaOps.Zastava.Agent/Worker/DockerEventHostedService.cs

@@ -1,10 +1,11 @@
+
 using Microsoft.Extensions.Hosting;
 using Microsoft.Extensions.Logging;
 using Microsoft.Extensions.Options;
 using StellaOps.Zastava.Agent.Configuration;
 using StellaOps.Zastava.Agent.Docker;
-using StellaOps.Zastava.Core.Contracts;
 using StellaOps.Zastava.Core.Configuration;
+using StellaOps.Zastava.Core.Contracts;
 
 namespace StellaOps.Zastava.Agent.Worker;
 

src/Zastava/StellaOps.Zastava.Agent/Worker/HealthCheckHostedService.cs

@@ -1,12 +1,13 @@
-using System.Net;
-using System.Text;
-using System.Text.Json;
+
 using Microsoft.Extensions.Hosting;
 using Microsoft.Extensions.Logging;
 using Microsoft.Extensions.Options;
 using StellaOps.Determinism;
 using StellaOps.Zastava.Agent.Configuration;
 using StellaOps.Zastava.Agent.Docker;
+using System.Net;
+using System.Text;
+using System.Text.Json;
 
 namespace StellaOps.Zastava.Agent.Worker;
 

src/Zastava/StellaOps.Zastava.Agent/Worker/RuntimeEventBuffer.cs

@@ -1,12 +1,13 @@
-using System.Collections.Concurrent;
-using System.Runtime.CompilerServices;
-using System.Threading.Channels;
+
 using Microsoft.Extensions.Logging;
 using Microsoft.Extensions.Options;
 using StellaOps.Determinism;
 using StellaOps.Zastava.Agent.Configuration;
 using StellaOps.Zastava.Core.Contracts;
 using StellaOps.Zastava.Core.Serialization;
+using System.Collections.Concurrent;
+using System.Runtime.CompilerServices;
+using System.Threading.Channels;
 
 namespace StellaOps.Zastava.Agent.Worker;
 

src/Zastava/StellaOps.Zastava.Agent/Worker/RuntimeEventDispatchService.cs

@@ -1,3 +1,4 @@
+
 using Microsoft.Extensions.Hosting;
 using Microsoft.Extensions.Logging;
 using Microsoft.Extensions.Options;

src/Zastava/StellaOps.Zastava.Observer/AGENTS.md

@@ -16,7 +16,7 @@ Implement the node-level observer that monitors running workloads, detects drift
 - `docs/modules/scanner/design/surface-secrets.md`
 - `docs/modules/scanner/design/surface-validation.md`
 - `docs/modules/scanner/architecture.md` (runtime posture sections)
-- `docs/modules/airgap/airgap-mode.md`
+- `docs/modules/airgap/guides/airgap-mode.md`
 
 ## Working Agreement
 1. **Status updates**: mark tasks `DOING`/`DONE` in both sprint file `/docs/implplan/SPRINT_*.md` when starting/finishing work.
@@ -26,3 +26,4 @@ Implement the node-level observer that monitors running workloads, detects drift
 5. **Offline readiness**: avoid external network calls; provide clear errors for missing bundles/secrets.
 6. **Testing**: maintain unit/integration/e2e tests for drift detection, event emission, and failure scenarios; support offline test runs.
 7. **Documentation**: update Zastava operations docs when behaviour changes; coordinate with DevOps on deployment manifests.
+

src/Zastava/StellaOps.Zastava.Observer/Backend/RuntimeEventsClient.cs

@@ -1,8 +1,4 @@
-using System.Linq;
-using System.Net;
-using System.Net.Http.Headers;
-using System.Text.Json;
-using System.Text.Json.Serialization;
+
 using Microsoft.Extensions.Logging;
 using Microsoft.Extensions.Options;
 using StellaOps.Zastava.Core.Configuration;
@@ -11,6 +7,11 @@ using StellaOps.Zastava.Core.Diagnostics;
 using StellaOps.Zastava.Core.Security;
 using StellaOps.Zastava.Core.Serialization;
 using StellaOps.Zastava.Observer.Configuration;
+using System.Linq;
+using System.Net;
+using System.Net.Http.Headers;
+using System.Text.Json;
+using System.Text.Json.Serialization;
 
 namespace StellaOps.Zastava.Observer.Backend;
 

src/Zastava/StellaOps.Zastava.Observer/Backend/RuntimeFactsClient.cs

@@ -1,10 +1,11 @@
-using System.Net.Http.Headers;
-using System.Text;
-using System.Text.Json;
+
 using Microsoft.Extensions.Logging;
 using Microsoft.Extensions.Options;
 using StellaOps.Zastava.Observer.Configuration;
 using StellaOps.Zastava.Observer.Runtime;
+using System.Net.Http.Headers;
+using System.Text;
+using System.Text.Json;
 
 namespace StellaOps.Zastava.Observer.Backend;
 

src/Zastava/StellaOps.Zastava.Observer/Backend/RuntimePolicyClient.cs

@@ -1,3 +1,10 @@
+
+using Microsoft.Extensions.Logging;
+using Microsoft.Extensions.Options;
+using StellaOps.Zastava.Core.Configuration;
+using StellaOps.Zastava.Core.Diagnostics;
+using StellaOps.Zastava.Core.Security;
+using StellaOps.Zastava.Observer.Configuration;
 using System;
 using System.Collections.Generic;
 using System.Diagnostics;
@@ -9,12 +16,6 @@ using System.Text.Json;
 using System.Text.Json.Serialization;
 using System.Threading;
 using System.Threading.Tasks;
-using Microsoft.Extensions.Logging;
-using Microsoft.Extensions.Options;
-using StellaOps.Zastava.Core.Configuration;
-using StellaOps.Zastava.Core.Diagnostics;
-using StellaOps.Zastava.Core.Security;
-using StellaOps.Zastava.Observer.Configuration;
 
 namespace StellaOps.Zastava.Observer.Backend;
 

src/Zastava/StellaOps.Zastava.Observer/Backend/RuntimePolicyContracts.cs

@@ -1,7 +1,8 @@
+
+using StellaOps.Zastava.Core.Contracts;
 using System;
 using System.Collections.Generic;
 using System.Text.Json.Serialization;
-using StellaOps.Zastava.Core.Contracts;
 
 namespace StellaOps.Zastava.Observer.Backend;
 

src/Zastava/StellaOps.Zastava.Observer/Configuration/ZastavaObserverOptions.cs

@@ -1,6 +1,7 @@
+
+using StellaOps.Zastava.Core.Configuration;
 using System.ComponentModel.DataAnnotations;
 using System.IO;
-using StellaOps.Zastava.Core.Configuration;
 
 namespace StellaOps.Zastava.Observer.Configuration;
 

src/Zastava/StellaOps.Zastava.Observer/ContainerRuntime/Cri/CriRuntimeClient.cs

@@ -1,12 +1,13 @@
-using System.IO;
-using System.Linq;
-using System.Net.Sockets;
-using System.Text.Json;
+
 using Grpc.Core;
 using Grpc.Net.Client;
 using Microsoft.Extensions.Logging;
 using StellaOps.Zastava.Observer.Configuration;
 using StellaOps.Zastava.Observer.Cri;
+using System.IO;
+using System.Linq;
+using System.Net.Sockets;
+using System.Text.Json;
 
 namespace StellaOps.Zastava.Observer.ContainerRuntime.Cri;
 

src/Zastava/StellaOps.Zastava.Observer/ContainerRuntime/Windows/DockerWindowsRuntimeClient.cs

@@ -1,10 +1,11 @@
+
+using Microsoft.Extensions.Logging;
 using System.IO.Pipes;
 using System.Net.Http;
 using System.Runtime.CompilerServices;
 using System.Runtime.Versioning;
 using System.Text;
 using System.Text.Json;
-using Microsoft.Extensions.Logging;
 
 namespace StellaOps.Zastava.Observer.ContainerRuntime.Windows;
 

src/Zastava/StellaOps.Zastava.Observer/ContainerRuntime/Windows/WindowsLibraryHashCollector.cs

@@ -1,8 +1,9 @@
+
+using Microsoft.Extensions.Logging;
 using System.Diagnostics;
 using System.Runtime.InteropServices;
 using System.Runtime.Versioning;
 using System.Security.Cryptography;
-using Microsoft.Extensions.Logging;
 
 namespace StellaOps.Zastava.Observer.ContainerRuntime.Windows;
 

src/Zastava/StellaOps.Zastava.Observer/DependencyInjection/ObserverServiceCollectionExtensions.cs

@@ -1,5 +1,4 @@
-using System;
-using System.IO;
+
 using Microsoft.Extensions.Configuration;
 using Microsoft.Extensions.DependencyInjection.Extensions;
 using Microsoft.Extensions.Options;
@@ -19,6 +18,8 @@ using StellaOps.Zastava.Observer.Runtime.ProcSnapshot;
 using StellaOps.Zastava.Observer.Secrets;
 using StellaOps.Zastava.Observer.Surface;
 using StellaOps.Zastava.Observer.Worker;
+using System;
+using System.IO;
 
 namespace Microsoft.Extensions.DependencyInjection;
 

src/Zastava/StellaOps.Zastava.Observer/Posture/IRuntimePostureCache.cs

@@ -1,6 +1,7 @@
-using System;
+
 
 using StellaOps.Zastava.Core.Contracts;
+using System;
 
 namespace StellaOps.Zastava.Observer.Posture;
 

src/Zastava/StellaOps.Zastava.Observer/Posture/IRuntimePostureEvaluator.cs

@@ -1,6 +1,7 @@
+
+using StellaOps.Zastava.Observer.ContainerRuntime.Cri;
 using System.Threading;
 using System.Threading.Tasks;
-using StellaOps.Zastava.Observer.ContainerRuntime.Cri;
 
 namespace StellaOps.Zastava.Observer.Posture;
 

src/Zastava/StellaOps.Zastava.Observer/Posture/RuntimePostureCache.cs

@@ -1,13 +1,14 @@
+
+using Microsoft.Extensions.Logging;
+using Microsoft.Extensions.Options;
+using StellaOps.Zastava.Core.Contracts;
+using StellaOps.Zastava.Observer.Configuration;
 using System;
 using System.Collections.Generic;
 using System.IO;
 using System.Linq;
 using System.Text.Json;
 using System.Text.Json.Serialization;
-using Microsoft.Extensions.Logging;
-using Microsoft.Extensions.Options;
-using StellaOps.Zastava.Core.Contracts;
-using StellaOps.Zastava.Observer.Configuration;
 
 namespace StellaOps.Zastava.Observer.Posture;
 

src/Zastava/StellaOps.Zastava.Observer/Posture/RuntimePostureCacheEntry.cs

@@ -1,5 +1,6 @@
-using System;
+
 using StellaOps.Zastava.Core.Contracts;
+using System;
 
 namespace StellaOps.Zastava.Observer.Posture;
 

src/Zastava/StellaOps.Zastava.Observer/Posture/RuntimePostureEvaluationResult.cs

@@ -1,5 +1,6 @@
-using System.Collections.Generic;
+
 using StellaOps.Zastava.Core.Contracts;
+using System.Collections.Generic;
 
 namespace StellaOps.Zastava.Observer.Posture;
 

src/Zastava/StellaOps.Zastava.Observer/Posture/RuntimePostureEvaluator.cs

@@ -1,10 +1,4 @@
-using System;
-using System.Collections.Generic;
-using System.Diagnostics.Metrics;
-using System.Globalization;
-using System.Linq;
-using System.Threading;
-using System.Threading.Tasks;
+
 using Microsoft.Extensions.Logging;
 using Microsoft.Extensions.Options;
 using StellaOps.Zastava.Core.Contracts;
@@ -12,6 +6,13 @@ using StellaOps.Zastava.Observer.Backend;
 using StellaOps.Zastava.Observer.Configuration;
 using StellaOps.Zastava.Observer.ContainerRuntime.Cri;
 using StellaOps.Zastava.Observer.Surface;
+using System;
+using System.Collections.Generic;
+using System.Diagnostics.Metrics;
+using System.Globalization;
+using System.Linq;
+using System.Threading;
+using System.Threading.Tasks;
 
 namespace StellaOps.Zastava.Observer.Posture;
 

src/Zastava/StellaOps.Zastava.Observer/Runtime/ElfBuildIdReader.cs

@@ -1,3 +1,4 @@
+
 using System.Buffers.Binary;
 using System.IO;
 using System.Text;

src/Zastava/StellaOps.Zastava.Observer/Runtime/ProcSnapshot/DotNetAssemblyCollector.cs

@@ -1,9 +1,10 @@
+
+using Microsoft.Extensions.Logging;
+using StellaOps.Signals.Models;
 using System.Globalization;
 using System.Security.Cryptography;
 using System.Text.Json;
 using System.Text.RegularExpressions;
-using Microsoft.Extensions.Logging;
-using StellaOps.Signals.Models;
 
 namespace StellaOps.Zastava.Observer.Runtime.ProcSnapshot;
 

src/Zastava/StellaOps.Zastava.Observer/Runtime/ProcSnapshot/JavaClasspathCollector.cs

@@ -1,10 +1,11 @@
+
+using Microsoft.Extensions.Logging;
+using StellaOps.Signals.Models;
 using System.Globalization;
 using System.IO.Compression;
 using System.Security.Cryptography;
 using System.Text;
 using System.Text.RegularExpressions;
-using Microsoft.Extensions.Logging;
-using StellaOps.Signals.Models;
 
 namespace StellaOps.Zastava.Observer.Runtime.ProcSnapshot;
 

src/Zastava/StellaOps.Zastava.Observer/Runtime/ProcSnapshot/PhpAutoloadCollector.cs

@@ -1,8 +1,9 @@
+
+using Microsoft.Extensions.Logging;
+using StellaOps.Signals.Models;
 using System.Globalization;
 using System.Text.Json;
 using System.Text.RegularExpressions;
-using Microsoft.Extensions.Logging;
-using StellaOps.Signals.Models;
 
 namespace StellaOps.Zastava.Observer.Runtime.ProcSnapshot;
 

src/Zastava/StellaOps.Zastava.Observer/Runtime/RuntimeEventBuffer.cs

@@ -1,13 +1,14 @@
-using System.Collections.Concurrent;
-using System.Linq;
-using System.Runtime.CompilerServices;
-using System.Threading.Channels;
+
 using Microsoft.Extensions.Logging;
 using Microsoft.Extensions.Options;
 using StellaOps.Determinism;
 using StellaOps.Zastava.Core.Contracts;
 using StellaOps.Zastava.Core.Serialization;
 using StellaOps.Zastava.Observer.Configuration;
+using System.Collections.Concurrent;
+using System.Linq;
+using System.Runtime.CompilerServices;
+using System.Threading.Channels;
 
 namespace StellaOps.Zastava.Observer.Runtime;
 

src/Zastava/StellaOps.Zastava.Observer/Runtime/RuntimeFactsBuilder.cs

@@ -1,10 +1,11 @@
-using System;
-using System.Security.Cryptography;
-using System.Text;
-using System.Linq;
-using System.Collections.Generic;
+
 using StellaOps.Zastava.Core.Contracts;
 using StellaOps.Zastava.Observer.Configuration;
+using System;
+using System.Collections.Generic;
+using System.Linq;
+using System.Security.Cryptography;
+using System.Text;
 
 namespace StellaOps.Zastava.Observer.Runtime;
 

src/Zastava/StellaOps.Zastava.Observer/Runtime/RuntimeProcessCollector.cs

@@ -1,16 +1,17 @@
-using System.Buffers;
-using System.Collections.Generic;
-using System.Globalization;
-using System.IO;
-using System.Security.Cryptography;
-using System.Text;
-using System.Text.RegularExpressions;
-using System.Runtime.CompilerServices;
+
 using Microsoft.Extensions.Logging;
 using Microsoft.Extensions.Options;
 using StellaOps.Zastava.Core.Contracts;
 using StellaOps.Zastava.Observer.Configuration;
 using StellaOps.Zastava.Observer.ContainerRuntime.Cri;
+using System.Buffers;
+using System.Collections.Generic;
+using System.Globalization;
+using System.IO;
+using System.Runtime.CompilerServices;
+using System.Security.Cryptography;
+using System.Text;
+using System.Text.RegularExpressions;
 
 namespace StellaOps.Zastava.Observer.Runtime;
 

src/Zastava/StellaOps.Zastava.Observer/TASKS.md

@@ -0,0 +1,8 @@
+# StellaOps.Zastava.Observer Task Board
+This board mirrors active sprint tasks for this module.
+Source of truth: `docs/implplan/SPRINT_20260130_002_Tools_csproj_remediation_solid_review.md`.
+
+| Task ID | Status | Notes |
+| --- | --- | --- |
+| REMED-05 | TODO | Remediation checklist: docs/implplan/audits/csproj-standards/remediation/checklists/src/Zastava/StellaOps.Zastava.Observer/StellaOps.Zastava.Observer.md. |
+| REMED-06 | DONE | SOLID review notes captured for SPRINT_20260130_002. |

src/Zastava/StellaOps.Zastava.Observer/Worker/ContainerLifecycleHostedService.cs

@@ -1,16 +1,17 @@
-using System.Collections.Generic;
-using System.Linq;
+
 using Microsoft.Extensions.Hosting;
 using Microsoft.Extensions.Logging;
 using Microsoft.Extensions.Options;
-using StellaOps.Zastava.Core.Contracts;
 using StellaOps.Zastava.Core.Configuration;
+using StellaOps.Zastava.Core.Contracts;
 using StellaOps.Zastava.Core.Diagnostics;
 using StellaOps.Zastava.Observer.Configuration;
 using StellaOps.Zastava.Observer.ContainerRuntime;
 using StellaOps.Zastava.Observer.ContainerRuntime.Cri;
 using StellaOps.Zastava.Observer.Runtime;
 using StellaOps.Zastava.Observer.Runtime.ProcSnapshot;
+using System.Collections.Generic;
+using System.Linq;
 
 namespace StellaOps.Zastava.Observer.Worker;
 

src/Zastava/StellaOps.Zastava.Observer/Worker/ObserverBootstrapService.cs

@@ -1,3 +1,4 @@
+
 using Microsoft.Extensions.Hosting;
 using Microsoft.Extensions.Logging;
 using Microsoft.Extensions.Options;

src/Zastava/StellaOps.Zastava.Observer/Worker/RuntimeEventDispatchService.cs

@@ -1,5 +1,4 @@
-using System.Linq;
-using System.Net;
+
 using Microsoft.Extensions.Hosting;
 using Microsoft.Extensions.Logging;
 using Microsoft.Extensions.Options;
@@ -8,6 +7,8 @@ using StellaOps.Zastava.Core.Contracts;
 using StellaOps.Zastava.Observer.Backend;
 using StellaOps.Zastava.Observer.Configuration;
 using StellaOps.Zastava.Observer.Runtime;
+using System.Linq;
+using System.Net;
 
 namespace StellaOps.Zastava.Observer.Worker;
 

src/Zastava/StellaOps.Zastava.Observer/Worker/RuntimeEventFactory.cs

@@ -1,13 +1,14 @@
-using System.Collections.Generic;
-using System.Security.Cryptography;
-using System.Text;
+
 using StellaOps.Signals.Models;
 using StellaOps.Zastava.Core.Contracts;
+using StellaOps.Zastava.Core.Security;
 using StellaOps.Zastava.Observer.Configuration;
 using StellaOps.Zastava.Observer.ContainerRuntime;
 using StellaOps.Zastava.Observer.ContainerRuntime.Cri;
 using StellaOps.Zastava.Observer.Runtime;
-using StellaOps.Zastava.Core.Security;
+using System.Collections.Generic;
+using System.Security.Cryptography;
+using System.Text;
 
 namespace StellaOps.Zastava.Observer.Worker;
 

src/Zastava/StellaOps.Zastava.Webhook/AGENTS.md

@@ -17,8 +17,8 @@ Operate the Kubernetes admission webhook enforcing image/SBOM/attestation polici
 - `docs/modules/scanner/design/surface-validation.md`
 - `docs/modules/scanner/architecture.md` (runtime posture/admission sections)
 - `docs/modules/policy/architecture.md`
-- `docs/modules/airgap/airgap-mode.md`
-- `docs/modules/devops/runbooks/zastava-deployment.md`
+- `docs/modules/airgap/guides/airgap-mode.md`
+- `docs/operations/devops/runbooks/zastava-deployment.md`
 
 ## Working Agreement
 1. **Task state**: update corresponding sprint file `docs/implplan/SPRINT_*.md` to `DOING`/`DONE` as you start or complete work.
@@ -28,3 +28,4 @@ Operate the Kubernetes admission webhook enforcing image/SBOM/attestation polici
 5. **Offline posture**: operate without external egress; surface actionable errors when cache/attestation data is missing.
 6. **Testing**: maintain unit/e2e tests (Kubernetes admission harness) covering pass/fail paths, error handling, and performance budgets.
 7. **Documentation**: update deployment guides, operator runbooks, and onboarding docs when webhook behaviour or configuration changes.
+

src/Zastava/StellaOps.Zastava.Webhook/Admission/AdmissionEndpoint.cs

@@ -1,7 +1,8 @@
-using System.Globalization;
-using System.Text.Json;
+
 using Microsoft.Extensions.Logging;
 using StellaOps.Zastava.Core.Diagnostics;
+using System.Globalization;
+using System.Text.Json;
 
 namespace StellaOps.Zastava.Webhook.Admission;
 

src/Zastava/StellaOps.Zastava.Webhook/Admission/AdmissionResponseBuilder.cs

@@ -1,11 +1,12 @@
+
+using StellaOps.Zastava.Core.Contracts;
+using StellaOps.Zastava.Core.Hashing;
+using StellaOps.Zastava.Core.Security;
+using StellaOps.Zastava.Core.Serialization;
 using System.Buffers;
 using System.Linq;
 using System.Text.Encodings.Web;
 using System.Text.Json;
-using StellaOps.Zastava.Core.Contracts;
-using StellaOps.Zastava.Core.Hashing;
-using StellaOps.Zastava.Core.Serialization;
-using StellaOps.Zastava.Core.Security;
 
 namespace StellaOps.Zastava.Webhook.Admission;
 

src/Zastava/StellaOps.Zastava.Webhook/Admission/FacetAdmissionValidator.cs

@@ -3,11 +3,12 @@
 // </copyright>
 // Sprint: SPRINT_20260105_002_004_CLI (ADM-001 through ADM-007)
 
-using System.Collections.Immutable;
+
 using Microsoft.Extensions.Logging;
 using Microsoft.Extensions.Logging.Abstractions;
 using StellaOps.Facet;
 using StellaOps.Zastava.Core.Contracts;
+using System.Collections.Immutable;
 
 namespace StellaOps.Zastava.Webhook.Admission;
 

src/Zastava/StellaOps.Zastava.Webhook/Admission/RuntimeAdmissionPolicyService.cs

@@ -1,5 +1,4 @@
-using System.Collections.Generic;
-using System.Linq;
+
 using Microsoft.Extensions.Logging;
 using Microsoft.Extensions.Options;
 using StellaOps.Scanner.Surface.Env;
@@ -8,6 +7,8 @@ using StellaOps.Zastava.Core.Diagnostics;
 using StellaOps.Zastava.Webhook.Backend;
 using StellaOps.Zastava.Webhook.Configuration;
 using StellaOps.Zastava.Webhook.Surface;
+using System.Collections.Generic;
+using System.Linq;
 
 namespace StellaOps.Zastava.Webhook.Admission;
 

src/Zastava/StellaOps.Zastava.Webhook/Admission/RuntimePolicyCache.cs

@@ -1,9 +1,10 @@
-using System.Collections.Concurrent;
-using System.Text.Json;
+
 using Microsoft.Extensions.Logging;
 using Microsoft.Extensions.Options;
 using StellaOps.Zastava.Webhook.Backend;
 using StellaOps.Zastava.Webhook.Configuration;
+using System.Collections.Concurrent;
+using System.Text.Json;
 
 namespace StellaOps.Zastava.Webhook.Admission;
 

src/Zastava/StellaOps.Zastava.Webhook/Authority/AuthorityTokenProvider.cs

@@ -1,12 +1,13 @@
+
+using Microsoft.Extensions.Diagnostics.HealthChecks;
+using Microsoft.Extensions.Logging;
+using Microsoft.Extensions.Options;
+using StellaOps.Zastava.Core.Configuration;
+using StellaOps.Zastava.Core.Security;
 using System;
 using System.Collections.Generic;
 using System.Globalization;
 using System.Linq;
-using Microsoft.Extensions.Diagnostics.HealthChecks;
-using Microsoft.Extensions.Options;
-using Microsoft.Extensions.Logging;
-using StellaOps.Zastava.Core.Configuration;
-using StellaOps.Zastava.Core.Security;
 
 namespace StellaOps.Zastava.Webhook.Authority;
 

src/Zastava/StellaOps.Zastava.Webhook/Backend/RuntimePolicyClient.cs

@@ -1,3 +1,10 @@
+
+using Microsoft.Extensions.Logging;
+using Microsoft.Extensions.Options;
+using StellaOps.Zastava.Core.Configuration;
+using StellaOps.Zastava.Core.Diagnostics;
+using StellaOps.Zastava.Core.Security;
+using StellaOps.Zastava.Webhook.Configuration;
 using System;
 using System.Collections.Generic;
 using System.Diagnostics;
@@ -9,12 +16,6 @@ using System.Text.Json;
 using System.Text.Json.Serialization;
 using System.Threading;
 using System.Threading.Tasks;
-using Microsoft.Extensions.Logging;
-using Microsoft.Extensions.Options;
-using StellaOps.Zastava.Core.Configuration;
-using StellaOps.Zastava.Core.Diagnostics;
-using StellaOps.Zastava.Core.Security;
-using StellaOps.Zastava.Webhook.Configuration;
 
 namespace StellaOps.Zastava.Webhook.Backend;
 

src/Zastava/StellaOps.Zastava.Webhook/Backend/RuntimePolicyResponse.cs

@@ -1,7 +1,8 @@
+
+using StellaOps.Zastava.Core.Contracts;
 using System;
 using System.Collections.Generic;
 using System.Text.Json.Serialization;
-using StellaOps.Zastava.Core.Contracts;
 
 namespace StellaOps.Zastava.Webhook.Backend;
 

src/Zastava/StellaOps.Zastava.Webhook/Certificates/CsrCertificateSource.cs

@@ -1,5 +1,6 @@
-using System.Security.Cryptography.X509Certificates;
+
 using StellaOps.Zastava.Webhook.Configuration;
+using System.Security.Cryptography.X509Certificates;
 
 namespace StellaOps.Zastava.Webhook.Certificates;
 

src/Zastava/StellaOps.Zastava.Webhook/Certificates/IWebhookCertificateProvider.cs

@@ -1,6 +1,7 @@
-using System.Security.Cryptography.X509Certificates;
+
 using Microsoft.Extensions.Options;
 using StellaOps.Zastava.Webhook.Configuration;
+using System.Security.Cryptography.X509Certificates;
 
 namespace StellaOps.Zastava.Webhook.Certificates;
 

src/Zastava/StellaOps.Zastava.Webhook/Certificates/SecretFileCertificateSource.cs

@@ -1,6 +1,7 @@
-using System.Security.Cryptography.X509Certificates;
+
 using Microsoft.Extensions.Logging;
 using StellaOps.Zastava.Webhook.Configuration;
+using System.Security.Cryptography.X509Certificates;
 
 namespace StellaOps.Zastava.Webhook.Certificates;
 

src/Zastava/StellaOps.Zastava.Webhook/Certificates/WebhookCertificateHealthCheck.cs

@@ -1,5 +1,6 @@
-using System.Globalization;
+
 using Microsoft.Extensions.Diagnostics.HealthChecks;
+using System.Globalization;
 
 namespace StellaOps.Zastava.Webhook.Certificates;
 

src/Zastava/StellaOps.Zastava.Webhook/Configuration/ZastavaWebhookOptions.cs

@@ -1,5 +1,6 @@
-using System.ComponentModel.DataAnnotations;
+
 using StellaOps.Zastava.Core.Configuration;
+using System.ComponentModel.DataAnnotations;
 
 namespace StellaOps.Zastava.Webhook.Configuration;
 

src/Zastava/StellaOps.Zastava.Webhook/DependencyInjection/ServiceCollectionExtensions.cs

@@ -1,5 +1,4 @@
-using System;
-using System.IO;
+
 using Microsoft.Extensions.DependencyInjection.Extensions;
 using Microsoft.Extensions.Options;
 using StellaOps.Cryptography.DependencyInjection;
@@ -17,6 +16,8 @@ using StellaOps.Zastava.Webhook.DependencyInjection;
 using StellaOps.Zastava.Webhook.Hosting;
 using StellaOps.Zastava.Webhook.Secrets;
 using StellaOps.Zastava.Webhook.Surface;
+using System;
+using System.IO;
 
 namespace Microsoft.Extensions.DependencyInjection;
 

src/Zastava/StellaOps.Zastava.Webhook/DependencyInjection/WebhookRuntimeOptionsPostConfigure.cs

@@ -1,7 +1,8 @@
-using System;
+
 using Microsoft.Extensions.Options;
 using StellaOps.Zastava.Core.Configuration;
 using StellaOps.Zastava.Webhook.Configuration;
+using System;
 
 namespace StellaOps.Zastava.Webhook.DependencyInjection;
 

src/Zastava/StellaOps.Zastava.Webhook/Hosting/StartupValidationHostedService.cs

@@ -1,8 +1,9 @@
-using System.Linq;
+
 using Microsoft.Extensions.Options;
 using StellaOps.Zastava.Core.Configuration;
 using StellaOps.Zastava.Core.Security;
 using StellaOps.Zastava.Webhook.Certificates;
+using System.Linq;
 
 namespace StellaOps.Zastava.Webhook.Hosting;
 

src/Zastava/StellaOps.Zastava.Webhook/Program.cs

@@ -1,4 +1,4 @@
-using System.Security.Authentication;
+
 using Microsoft.AspNetCore.Diagnostics.HealthChecks;
 using Serilog;
 using Serilog.Events;
@@ -6,6 +6,7 @@ using StellaOps.Zastava.Webhook.Admission;
 using StellaOps.Zastava.Webhook.Authority;
 using StellaOps.Zastava.Webhook.Certificates;
 using StellaOps.Zastava.Webhook.Configuration;
+using System.Security.Authentication;
 
 var builder = WebApplication.CreateBuilder(args);
 

src/Zastava/StellaOps.Zastava.Webhook/TASKS.md

@@ -0,0 +1,8 @@
+# StellaOps.Zastava.Webhook Task Board
+This board mirrors active sprint tasks for this module.
+Source of truth: `docs/implplan/SPRINT_20260130_002_Tools_csproj_remediation_solid_review.md`.
+
+| Task ID | Status | Notes |
+| --- | --- | --- |
+| REMED-05 | TODO | Remediation checklist: docs/implplan/audits/csproj-standards/remediation/checklists/src/Zastava/StellaOps.Zastava.Webhook/StellaOps.Zastava.Webhook.md. |
+| REMED-06 | DONE | SOLID review notes captured for SPRINT_20260130_002. |

src/Zastava/__Libraries/StellaOps.Zastava.Core/AGENTS.md

@@ -17,7 +17,7 @@ Maintain shared domain models, policy evaluation helpers, and event contracts us
 - `docs/modules/scanner/design/surface-secrets.md`
 - `docs/modules/scanner/design/surface-validation.md`
 - `docs/modules/policy/architecture.md`
-- `docs/modules/devops/runbooks/zastava-deployment.md`
+- `docs/operations/devops/runbooks/zastava-deployment.md`
 
 ## Working Agreement
 1. **Status alignment**: mark tasks `DOING`/`DONE` in both sprint file `/docs/implplan/SPRINT_*.md` at start/finish.
@@ -26,3 +26,4 @@ Maintain shared domain models, policy evaluation helpers, and event contracts us
 4. **Security & tenancy**: include tenant identifiers and audit fields where required; document contract changes for other guilds.
 5. **Testing**: keep unit/integration tests covering schema contracts, serialization, and validation; coordinate with downstream components when fixtures change.
 6. **Documentation**: update Zastava architecture docs or add design notes when shared contracts evolve; notify Docs/DevOps for release notes and deployment guidance.
+

src/Zastava/__Libraries/StellaOps.Zastava.Core/DependencyInjection/ZastavaServiceCollectionExtensions.cs

@@ -1,5 +1,4 @@
-using System.Collections.Generic;
-using System.Linq;
+
 using Microsoft.Extensions.Configuration;
 using Microsoft.Extensions.DependencyInjection.Extensions;
 using Microsoft.Extensions.Logging;
@@ -10,6 +9,8 @@ using StellaOps.Zastava.Core.Diagnostics;
 using StellaOps.Zastava.Core.Http;
 using StellaOps.Zastava.Core.Security;
 using StellaOps.Zastava.Core.Validation;
+using System.Collections.Generic;
+using System.Linq;
 
 namespace Microsoft.Extensions.DependencyInjection;
 

src/Zastava/__Libraries/StellaOps.Zastava.Core/Diagnostics/ZastavaLogScopeBuilder.cs

@@ -1,6 +1,7 @@
-using System.Linq;
+
 using Microsoft.Extensions.Options;
 using StellaOps.Zastava.Core.Configuration;
+using System.Linq;
 
 namespace StellaOps.Zastava.Core.Diagnostics;
 

src/Zastava/__Libraries/StellaOps.Zastava.Core/Diagnostics/ZastavaRuntimeMetrics.cs

@@ -1,6 +1,7 @@
-using System.Linq;
+
 using Microsoft.Extensions.Options;
 using StellaOps.Zastava.Core.Configuration;
+using System.Linq;
 
 namespace StellaOps.Zastava.Core.Diagnostics;
 

src/Zastava/__Libraries/StellaOps.Zastava.Core/Http/OfflineStrictModeHandler.cs

@@ -1,7 +1,8 @@
-using System.Net;
+
 using Microsoft.Extensions.Logging;
 using Microsoft.Extensions.Options;
 using StellaOps.Zastava.Core.Configuration;
+using System.Net;
 
 namespace StellaOps.Zastava.Core.Http;
 

src/Zastava/__Libraries/StellaOps.Zastava.Core/Security/ZastavaAuthorityTokenProvider.cs

@@ -1,12 +1,13 @@
-using System.Collections.Concurrent;
-using System.Globalization;
-using System.IO;
+
 using Microsoft.Extensions.Logging;
 using Microsoft.Extensions.Logging.Abstractions;
 using Microsoft.Extensions.Options;
 using StellaOps.Auth.Client;
 using StellaOps.Zastava.Core.Configuration;
 using StellaOps.Zastava.Core.Diagnostics;
+using System.Collections.Concurrent;
+using System.Globalization;
+using System.IO;
 
 namespace StellaOps.Zastava.Core.Security;
 

src/Zastava/__Libraries/StellaOps.Zastava.Core/Serialization/ZastavaCanonicalJsonSerializer.cs

@@ -1,3 +1,5 @@
+
+using StellaOps.Zastava.Core.Contracts;
 using System;
 using System.Collections.Generic;
 using System.Linq;
@@ -5,7 +7,6 @@ using System.Text.Encodings.Web;
 using System.Text.Json;
 using System.Text.Json.Serialization;
 using System.Text.Json.Serialization.Metadata;
-using StellaOps.Zastava.Core.Contracts;
 
 namespace StellaOps.Zastava.Core.Serialization;
 

src/Zastava/__Libraries/StellaOps.Zastava.Core/TASKS.md

@@ -0,0 +1,8 @@
+# StellaOps.Zastava.Core Task Board
+This board mirrors active sprint tasks for this module.
+Source of truth: `docs/implplan/SPRINT_20260130_002_Tools_csproj_remediation_solid_review.md`.
+
+| Task ID | Status | Notes |
+| --- | --- | --- |
+| REMED-05 | TODO | Remediation checklist: docs/implplan/audits/csproj-standards/remediation/checklists/src/Zastava/__Libraries/StellaOps.Zastava.Core/StellaOps.Zastava.Core.md. |
+| REMED-06 | DONE | SOLID review notes captured for SPRINT_20260130_002. |

src/Zastava/__Libraries/StellaOps.Zastava.Core/Validation/SurfaceCacheValidator.cs

@@ -1,8 +1,9 @@
-using System.IO;
+
 using Microsoft.Extensions.Hosting;
 using Microsoft.Extensions.Logging;
 using Microsoft.Extensions.Options;
 using StellaOps.Zastava.Core.Configuration;
+using System.IO;
 
 namespace StellaOps.Zastava.Core.Validation;
 

src/Zastava/__Tests/StellaOps.Zastava.Core.Tests/TASKS.md

@@ -0,0 +1,8 @@
+# StellaOps.Zastava.Core.Tests Task Board
+This board mirrors active sprint tasks for this module.
+Source of truth: `docs/implplan/SPRINT_20260130_002_Tools_csproj_remediation_solid_review.md`.
+
+| Task ID | Status | Notes |
+| --- | --- | --- |
+| REMED-05 | TODO | Remediation checklist: docs/implplan/audits/csproj-standards/remediation/checklists/src/Zastava/__Tests/StellaOps.Zastava.Core.Tests/StellaOps.Zastava.Core.Tests.md. |
+| REMED-06 | DONE | SOLID review notes captured for SPRINT_20260130_002. |

src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/TASKS.md

@@ -0,0 +1,8 @@
+# StellaOps.Zastava.Observer.Tests Task Board
+This board mirrors active sprint tasks for this module.
+Source of truth: `docs/implplan/SPRINT_20260130_002_Tools_csproj_remediation_solid_review.md`.
+
+| Task ID | Status | Notes |
+| --- | --- | --- |
+| REMED-05 | TODO | Remediation checklist: docs/implplan/audits/csproj-standards/remediation/checklists/src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/StellaOps.Zastava.Observer.Tests.md. |
+| REMED-06 | DONE | SOLID review notes captured for SPRINT_20260130_002. |

src/Zastava/__Tests/StellaOps.Zastava.Webhook.Tests/TASKS.md

@@ -0,0 +1,8 @@
+# StellaOps.Zastava.Webhook.Tests Task Board
+This board mirrors active sprint tasks for this module.
+Source of truth: `docs/implplan/SPRINT_20260130_002_Tools_csproj_remediation_solid_review.md`.
+
+| Task ID | Status | Notes |
+| --- | --- | --- |
+| REMED-05 | TODO | Remediation checklist: docs/implplan/audits/csproj-standards/remediation/checklists/src/Zastava/__Tests/StellaOps.Zastava.Webhook.Tests/StellaOps.Zastava.Webhook.Tests.md. |
+| REMED-06 | DONE | SOLID review notes captured for SPRINT_20260130_002. |