audit work, fixed StellaOps.sln warnings/errors, fixed tests, sprints work, new advisories

docs/operations/devops/README.md

@@ -0,0 +1,64 @@
+# StellaOps DevOps
+
+The DevOps module captures release, deployment, and migration playbooks that keep StellaOps deterministic across environments.
+
+## Responsibilities
+- Maintain CI pipelines, signing workflows, and release packaging steps.
+- Operate shared runbooks for launch readiness, upgrades, and NuGet previews.
+- Provide offline kit assembly instructions and tooling integration.
+- Wrap observability/telemetry bootstrap flows for platform teams.
+
+## Key components
+- Runbooks under ./runbooks/ (launch, deployment, nuget).
+- Migration guidance under ./migrations/.
+- Architecture overview bridging CI/CD & infrastructure concerns.
+
+## Integrations & dependencies
+- Ops pipelines (Gitea, GitHub Actions) and artifact registries.
+- Authority/Signer for supply chain signing.
+- Telemetry stack bootstrap scripts.
+
+## Operational notes
+- Offline bundle packaging guidance in docs/modules/export-center/operations/runbook.md.
+- Dashboards for launch cutover rehearsals.
+- Coordination with Security for enforced guardrails.
+
+## Related resources
+- ./runbooks/launch-readiness.md
+- ./runbooks/launch-cutover.md
+- ./runbooks/deployment-upgrade.md
+- ./runbooks/nuget-preview-bootstrap.md
+- ./migrations/semver-style.md
+- ./task-runner-simulation.md
+
+## Backlog references
+- DEVOPS-LAUNCH-18-001 / 18-900 runbooks in ../../TASKS.md.
+- Telemetry bootstrap automation tracked in `ops/devops/TASKS.md`.
+
+## Epic alignment
+- **Epic 1 – AOC enforcement:** bake AOC verifier steps, CI guards, and schema validation into pipelines.
+- **Epic 9 – Orchestrator Dashboard:** support operational dashboards, job recovery runbooks, and rate-limit governance.
+- **Epic 10 – Export Center:** manage signing workflows, Offline Kit packaging, and release promotion for exports.
+- **Epic 15 – Observability & Forensics:** coordinate telemetry deployment, evidence retention, and forensic automation.
+
+## Implementation Status
+
+### Objectives
+- Maintain deterministic behaviour and offline parity across releases
+- Keep documentation, telemetry, and runbooks aligned with the latest sprint outcomes
+
+### Key Milestones
+- **Epic 1 – AOC enforcement:** ensure CI/CD guardrails, schema validation, and verifier pipelines are enforced
+- **Epic 9 – Orchestrator Dashboard:** deliver dashboards, recovery runbooks, and rate-limit governance
+- **Epic 10 – Export Center:** manage signing/promotions and Offline Kit bundle publishing
+- **Epic 15 – Observability & Forensics:** coordinate telemetry deployments, evidence retention, and forensic automation
+
+### Workstreams
+- Backlog grooming: reconcile open stories with module roadmap
+- Implementation: collaborate with service owners to land feature work
+- Validation: extend tests/fixtures to preserve determinism and provenance requirements
+
+### Coordination
+- Review ./AGENTS.md before picking up new work
+- Sync with cross-cutting teams noted in sprint files
+- Update plan whenever scope, dependencies, or guardrails change