audit work, fixed StellaOps.sln warnings/errors, fixed tests, sprints work, new advisories

This commit is contained in:
master
2026-01-07 18:49:59 +02:00
parent 04ec098046
commit 608a7f85c0
866 changed files with 56323 additions and 6231 deletions

29
src/Replay/AGENTS.md Normal file
View File

@@ -0,0 +1,29 @@
# Replay Module Charter
## Mission
- Capture and verify deterministic replay manifests and tokens for audit reproducibility.
## Responsibilities
- Maintain replay manifest schemas, hashing, and validation.
- Provide WebService APIs for token issuance and verification.
- Ensure content-addressed references to inputs and outputs.
- Keep replay logs and storage deterministic and auditable.
## Required Reading
- docs/README.md
- docs/07_HIGH_LEVEL_ARCHITECTURE.md
- docs/modules/platform/architecture-overview.md
- docs/modules/replay/architecture.md
- docs/modules/replay/replay-proof-schema.md
## Working Agreement
- Use TimeProvider and IGuidGenerator for timestamps and ids.
- UTC ISO-8601 timestamps with invariant formatting.
- Hash inputs with canonical JSON and shared hash helpers.
- No network calls in core logic; all external access via injected clients.
- Propagate CancellationToken.
## Testing Strategy
- Unit tests for manifest validation and hash determinism.
- Integration tests for WebService endpoints and token flows.
- Replay tests verifying identical inputs yield identical outputs.

View File

@@ -0,0 +1,26 @@
# Replay Anonymization Library Charter
## Mission
- Anonymize production traces for safe, deterministic replay.
## Responsibilities
- Redact PII consistently across trace spans, attributes, and events.
- Preserve determinism in anonymized IDs and manifests.
- Align behavior with Replay module architecture and replay proof schema.
## Required Reading
- docs/README.md
- docs/07_HIGH_LEVEL_ARCHITECTURE.md
- docs/modules/platform/architecture-overview.md
- docs/modules/replay/architecture.md
- docs/modules/replay/replay-proof-schema.md
## Working Agreement
- Use TimeProvider and deterministic hashing for IDs and timestamps.
- Validate PII detection coverage (IPs, emails, UUIDs, file paths, env, custom patterns).
- Avoid unsafe regex usage; guard against ReDoS with timeouts or precompiled patterns.
- Propagate CancellationToken for async operations.
## Testing Strategy
- Unit tests for each redaction category and deterministic ID hashing.
- Validation tests for PII detection coverage and allowlist behavior.

View File

@@ -0,0 +1,23 @@
# Replay Anonymization Tests Charter
## Mission
- Validate anonymization behavior and determinism for replay traces.
## Responsibilities
- Cover redaction rules, allowlists, and validation checks.
- Assert deterministic IDs and manifest metrics.
## Required Reading
- docs/README.md
- docs/07_HIGH_LEVEL_ARCHITECTURE.md
- docs/modules/platform/architecture-overview.md
- docs/modules/replay/architecture.md
- docs/modules/replay/replay-proof-schema.md
## Working Agreement
- Use FakeTimeProvider and fixed inputs for deterministic tests.
- Avoid network or external dependencies.
## Testing Strategy
- Unit tests for each PII type and validation coverage.
- Tests for deterministic hashing and time handling.

View File

@@ -10,12 +10,6 @@
</PropertyGroup>
<ItemGroup>
<PackageReference Include="FluentAssertions" />
<PackageReference Include="Microsoft.NET.Test.Sdk" />
<PackageReference Include="xunit.v3" />
<PackageReference Include="xunit.runner.visualstudio">
<PrivateAssets>all</PrivateAssets>
<IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
</PackageReference>
</ItemGroup>
<ItemGroup>
<ProjectReference Include="..\..\__Libraries\StellaOps.Replay.Anonymization\StellaOps.Replay.Anonymization.csproj" />

View File

@@ -13,10 +13,6 @@
<ItemGroup>
<PackageReference Include="FluentAssertions" />
<PackageReference Include="Moq" />
<PackageReference Include="xunit.runner.visualstudio" >
<PrivateAssets>all</PrivateAssets>
<IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
</PackageReference>
</ItemGroup>
<ItemGroup>
<ProjectReference Include="../../../__Libraries/StellaOps.Replay.Core/StellaOps.Replay.Core.csproj" />