audit work, fixed StellaOps.sln warnings/errors, fixed tests, sprints work, new advisories

This commit is contained in:
master
2026-01-07 18:49:59 +02:00
parent 04ec098046
commit 608a7f85c0
866 changed files with 56323 additions and 6231 deletions

View File

@@ -0,0 +1,26 @@
# EvidenceLocker Export Library Charter
## Mission
- Export deterministic evidence bundles for offline verification.
## Responsibilities
- Implement tar.gz export, manifest/metadata serialization, and checksum generation.
- Enforce deterministic ordering, timestamps, permissions, and offline-friendly outputs.
- Keep export behavior aligned with docs/modules/evidence-locker/export-format.md.
## Required Reading
- docs/README.md
- docs/07_HIGH_LEVEL_ARCHITECTURE.md
- docs/modules/platform/architecture-overview.md
- docs/modules/evidence-locker/architecture.md
- docs/modules/evidence-locker/export-format.md
## Working Agreement
- Use TimeProvider and injected ID generators for timestamps and identifiers.
- Validate file paths to prevent traversal in tar entries and output paths.
- Keep outputs deterministic (ordering, metadata, invariant formatting).
- Propagate CancellationToken for async operations.
## Testing Strategy
- Unit tests for checksum coverage, manifest ordering, and export determinism.
- Tests for tar/gzip metadata (permissions, timestamps) and path validation.