audit work, fixed StellaOps.sln warnings/errors, fixed tests, sprints work, new advisories
This commit is contained in:
@@ -0,0 +1,26 @@
|
||||
# EvidenceLocker Export Library Charter
|
||||
|
||||
## Mission
|
||||
- Export deterministic evidence bundles for offline verification.
|
||||
|
||||
## Responsibilities
|
||||
- Implement tar.gz export, manifest/metadata serialization, and checksum generation.
|
||||
- Enforce deterministic ordering, timestamps, permissions, and offline-friendly outputs.
|
||||
- Keep export behavior aligned with docs/modules/evidence-locker/export-format.md.
|
||||
|
||||
## Required Reading
|
||||
- docs/README.md
|
||||
- docs/07_HIGH_LEVEL_ARCHITECTURE.md
|
||||
- docs/modules/platform/architecture-overview.md
|
||||
- docs/modules/evidence-locker/architecture.md
|
||||
- docs/modules/evidence-locker/export-format.md
|
||||
|
||||
## Working Agreement
|
||||
- Use TimeProvider and injected ID generators for timestamps and identifiers.
|
||||
- Validate file paths to prevent traversal in tar entries and output paths.
|
||||
- Keep outputs deterministic (ordering, metadata, invariant formatting).
|
||||
- Propagate CancellationToken for async operations.
|
||||
|
||||
## Testing Strategy
|
||||
- Unit tests for checksum coverage, manifest ordering, and export determinism.
|
||||
- Tests for tar/gzip metadata (permissions, timestamps) and path validation.
|
||||
Reference in New Issue
Block a user