Add LDAP Distinguished Name Helper and Credential Audit Context
Some checks failed
Docs CI / lint-and-preview (push) Has been cancelled
Some checks failed
Docs CI / lint-and-preview (push) Has been cancelled
- Implemented LdapDistinguishedNameHelper for escaping RDN and filter values. - Created AuthorityCredentialAuditContext and IAuthorityCredentialAuditContextAccessor for managing credential audit context. - Developed StandardCredentialAuditLogger with tests for success, failure, and lockout events. - Introduced AuthorityAuditSink for persisting audit records with structured logging. - Added CryptoPro related classes for certificate resolution and signing operations.
This commit is contained in:
master
@@ -10,18 +10,18 @@ Focus: Policy & Reasoning focus on Findings (phase II).
|
||||
|
||||
| # | Task ID & handle | State | Key dependency / next step | Owners |
|
||||
| --- | --- | --- | --- | --- |
|
||||
| 1 | LEDGER-ATTEST-73-002 | TODO | Enable search/filter in findings projections by verification result and attestation status (Deps: LEDGER-ATTEST-73-001) | Findings Ledger Guild / src/Findings/StellaOps.Findings.Ledger/TASKS.md |
|
||||
| 2 | LEDGER-EXPORT-35-001 | TODO | Provide paginated streaming endpoints for advisories, VEX, SBOMs, and findings aligned with export filters, including deterministic ordering and provenance metadata | Findings Ledger Guild / src/Findings/StellaOps.Findings.Ledger/TASKS.md |
|
||||
| 3 | LEDGER-OAS-61-001 | TODO | Expand Findings Ledger OAS to include projections, evidence lookups, and filter parameters with examples | Findings Ledger Guild, API Contracts Guild / src/Findings/StellaOps.Findings.Ledger/TASKS.md |
|
||||
| 4 | LEDGER-OAS-61-002 | TODO | Implement `/.well-known/openapi` endpoint and ensure version metadata matches release (Deps: LEDGER-OAS-61-001) | Findings Ledger Guild / src/Findings/StellaOps.Findings.Ledger/TASKS.md |
|
||||
| 5 | LEDGER-OAS-62-001 | TODO | Provide SDK test cases for findings pagination, filtering, evidence links; ensure typed models expose provenance (Deps: LEDGER-OAS-61-002) | Findings Ledger Guild, SDK Generator Guild / src/Findings/StellaOps.Findings.Ledger/TASKS.md |
|
||||
| 6 | LEDGER-OAS-63-001 | TODO | Support deprecation headers and Notifications for retiring finding endpoints (Deps: LEDGER-OAS-62-001) | Findings Ledger Guild, API Governance Guild / src/Findings/StellaOps.Findings.Ledger/TASKS.md |
|
||||
| 7 | LEDGER-OBS-50-001 | TODO | Integrate telemetry core within ledger writer/projector services, emitting structured logs and trace spans for ledger append, projector replay, and query APIs with tenant context | Findings Ledger Guild, Observability Guild / src/Findings/StellaOps.Findings.Ledger/TASKS.md |
|
||||
| 8 | LEDGER-OBS-51-001 | TODO | Publish metrics for ledger latency, projector lag, event throughput, and policy evaluation linkage. Define SLOs (ledger append P95 < 1s, replay lag < 30s) with burn-rate alerts and dashboards (Deps: LEDGER-OBS-50-001) | Findings Ledger Guild, DevOps Guild / src/Findings/StellaOps.Findings.Ledger/TASKS.md |
|
||||
| 9 | LEDGER-OBS-52-001 | TODO | Emit timeline events for ledger writes and projector commits (`ledger.event.appended`, `ledger.projection.updated`) with trace ID, policy version, evidence bundle reference placeholders (Deps: LEDGER-OBS-51-001) | Findings Ledger Guild / src/Findings/StellaOps.Findings.Ledger/TASKS.md |
|
||||
| 10 | LEDGER-OBS-53-001 | TODO | Persist evidence bundle references (evaluation/job capsules) alongside ledger entries, exposing lookup API linking findings to evidence manifests and timeline (Deps: LEDGER-OBS-52-001) | Findings Ledger Guild, Evidence Locker Guild / src/Findings/StellaOps.Findings.Ledger/TASKS.md |
|
||||
| 11 | LEDGER-OBS-54-001 | TODO | Verify attestation references for ledger-derived exports; expose `/ledger/attestations` endpoint returning DSSE verification state and chain-of-custody summary (Deps: LEDGER-OBS-53-001) | Findings Ledger Guild, Provenance Guild / src/Findings/StellaOps.Findings.Ledger/TASKS.md |
|
||||
| 12 | LEDGER-OBS-55-001 | TODO | Enhance incident mode to record additional replay diagnostics (lag traces, conflict snapshots) and extend retention while active. Emit activation events to timeline + notifier (Deps: LEDGER-OBS-54-001) | Findings Ledger Guild, DevOps Guild / src/Findings/StellaOps.Findings.Ledger/TASKS.md |
|
||||
| 13 | LEDGER-PACKS-42-001 | TODO | Provide snapshot/time-travel APIs and digestable exports for task pack simulation and CLI offline mode | Findings Ledger Guild / src/Findings/StellaOps.Findings.Ledger/TASKS.md |
|
||||
| 14 | LEDGER-RISK-66-001 | TODO | Add schema migrations for `risk_score`, `risk_severity`, `profile_version`, `explanation_id`, and supporting indexes | Findings Ledger Guild, Risk Engine Guild / src/Findings/StellaOps.Findings.Ledger/TASKS.md |
|
||||
| 15 | LEDGER-RISK-66-002 | TODO | Implement deterministic upsert of scoring results keyed by finding hash/profile version with history audit (Deps: LEDGER-RISK-66-001) | Findings Ledger Guild / src/Findings/StellaOps.Findings.Ledger/TASKS.md |
|
||||
| 1 | LEDGER-ATTEST-73-002 | TODO | Enable search/filter in findings projections by verification result and attestation status (Deps: LEDGER-ATTEST-73-001) | Findings Ledger Guild / src/Findings/StellaOps.Findings.Ledger |
|
||||
| 2 | LEDGER-EXPORT-35-001 | TODO | Provide paginated streaming endpoints for advisories, VEX, SBOMs, and findings aligned with export filters, including deterministic ordering and provenance metadata | Findings Ledger Guild / src/Findings/StellaOps.Findings.Ledger |
|
||||
| 3 | LEDGER-OAS-61-001 | TODO | Expand Findings Ledger OAS to include projections, evidence lookups, and filter parameters with examples | Findings Ledger Guild, API Contracts Guild / src/Findings/StellaOps.Findings.Ledger |
|
||||
| 4 | LEDGER-OAS-61-002 | TODO | Implement `/.well-known/openapi` endpoint and ensure version metadata matches release (Deps: LEDGER-OAS-61-001) | Findings Ledger Guild / src/Findings/StellaOps.Findings.Ledger |
|
||||
| 5 | LEDGER-OAS-62-001 | TODO | Provide SDK test cases for findings pagination, filtering, evidence links; ensure typed models expose provenance (Deps: LEDGER-OAS-61-002) | Findings Ledger Guild, SDK Generator Guild / src/Findings/StellaOps.Findings.Ledger |
|
||||
| 6 | LEDGER-OAS-63-001 | TODO | Support deprecation headers and Notifications for retiring finding endpoints (Deps: LEDGER-OAS-62-001) | Findings Ledger Guild, API Governance Guild / src/Findings/StellaOps.Findings.Ledger |
|
||||
| 7 | LEDGER-OBS-50-001 | TODO | Integrate telemetry core within ledger writer/projector services, emitting structured logs and trace spans for ledger append, projector replay, and query APIs with tenant context | Findings Ledger Guild, Observability Guild / src/Findings/StellaOps.Findings.Ledger |
|
||||
| 8 | LEDGER-OBS-51-001 | TODO | Publish metrics for ledger latency, projector lag, event throughput, and policy evaluation linkage. Define SLOs (ledger append P95 < 1s, replay lag < 30s) with burn-rate alerts and dashboards (Deps: LEDGER-OBS-50-001) | Findings Ledger Guild, DevOps Guild / src/Findings/StellaOps.Findings.Ledger |
|
||||
| 9 | LEDGER-OBS-52-001 | TODO | Emit timeline events for ledger writes and projector commits (`ledger.event.appended`, `ledger.projection.updated`) with trace ID, policy version, evidence bundle reference placeholders (Deps: LEDGER-OBS-51-001) | Findings Ledger Guild / src/Findings/StellaOps.Findings.Ledger |
|
||||
| 10 | LEDGER-OBS-53-001 | TODO | Persist evidence bundle references (evaluation/job capsules) alongside ledger entries, exposing lookup API linking findings to evidence manifests and timeline (Deps: LEDGER-OBS-52-001) | Findings Ledger Guild, Evidence Locker Guild / src/Findings/StellaOps.Findings.Ledger |
|
||||
| 11 | LEDGER-OBS-54-001 | TODO | Verify attestation references for ledger-derived exports; expose `/ledger/attestations` endpoint returning DSSE verification state and chain-of-custody summary (Deps: LEDGER-OBS-53-001) | Findings Ledger Guild, Provenance Guild / src/Findings/StellaOps.Findings.Ledger |
|
||||
| 12 | LEDGER-OBS-55-001 | TODO | Enhance incident mode to record additional replay diagnostics (lag traces, conflict snapshots) and extend retention while active. Emit activation events to timeline + notifier (Deps: LEDGER-OBS-54-001) | Findings Ledger Guild, DevOps Guild / src/Findings/StellaOps.Findings.Ledger |
|
||||
| 13 | LEDGER-PACKS-42-001 | TODO | Provide snapshot/time-travel APIs and digestable exports for task pack simulation and CLI offline mode | Findings Ledger Guild / src/Findings/StellaOps.Findings.Ledger |
|
||||
| 14 | LEDGER-RISK-66-001 | TODO | Add schema migrations for `risk_score`, `risk_severity`, `profile_version`, `explanation_id`, and supporting indexes | Findings Ledger Guild, Risk Engine Guild / src/Findings/StellaOps.Findings.Ledger |
|
||||
| 15 | LEDGER-RISK-66-002 | TODO | Implement deterministic upsert of scoring results keyed by finding hash/profile version with history audit (Deps: LEDGER-RISK-66-001) | Findings Ledger Guild / src/Findings/StellaOps.Findings.Ledger |
|
||||
|
||||
Reference in New Issue
Block a user