audit work, fixed StellaOps.sln warnings/errors, fixed tests, sprints work, new advisories

This commit is contained in:
master
2026-01-07 18:49:59 +02:00
parent 04ec098046
commit 608a7f85c0
866 changed files with 56323 additions and 6231 deletions

View File

@@ -0,0 +1,24 @@
# EvidenceLocker Export Tests Charter
## Mission
- Validate evidence bundle export behavior and determinism.
## Responsibilities
- Cover manifest/metadata serialization and checksum parsing/verification.
- Validate tar.gz export structure and verify script outputs.
## Required Reading
- docs/README.md
- docs/07_HIGH_LEVEL_ARCHITECTURE.md
- docs/modules/platform/architecture-overview.md
- docs/modules/evidence-locker/architecture.md
- docs/modules/evidence-locker/export-format.md
## Working Agreement
- Use fixed timestamps and IDs in tests (no DateTimeOffset.UtcNow or Guid.NewGuid).
- Avoid network dependencies in tests.
- Assert deterministic ordering and metadata in archives.
## Testing Strategy
- Unit tests for export path validation, checksum coverage, and merkle proofs.
- Deterministic tar/gzip metadata verification.

View File

@@ -10,12 +10,6 @@
</PropertyGroup>
<ItemGroup>
<PackageReference Include="Microsoft.NET.Test.Sdk" />
<PackageReference Include="xunit.v3" />
<PackageReference Include="xunit.runner.visualstudio">
<PrivateAssets>all</PrivateAssets>
<IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
</PackageReference>
<PackageReference Include="FluentAssertions" />
<PackageReference Include="Moq" />
</ItemGroup>

View File

@@ -0,0 +1,24 @@
# EvidenceLocker SchemaEvolution Tests Charter
## Mission
- Validate EvidenceLocker schema evolution and backward compatibility.
## Responsibilities
- Exercise migrations, seed data, and compatibility checks for evidence locker schemas.
## Required Reading
- docs/README.md
- docs/07_HIGH_LEVEL_ARCHITECTURE.md
- docs/modules/platform/architecture-overview.md
- docs/modules/evidence-locker/architecture.md
- docs/modules/evidence-locker/bundle-packaging.md
- docs/modules/evidence-locker/evidence-bundle-v1.md
## Working Agreement
- Use deterministic fixtures and fixed timestamps/IDs.
- Avoid network dependencies in tests.
- Exercise real migrations and rollback paths when available.
## Testing Strategy
- Schema upgrade and rollback tests with real migrations.
- Compatibility tests for bundle and evidence tables.