blockers 2

This commit is contained in:
StellaOps Bot
2025-11-23 16:57:18 +02:00
parent cce96f3596
commit 7768555f2d
17 changed files with 220 additions and 69 deletions

View File

@@ -8,15 +8,15 @@
- MIRROR-CRT-57-002 (depends on 56-002 and AIRGAP-TIME-57-001)
- MIRROR-CRT-58-001/002 (depend on 56-002, EXPORT-OBS-54-001, CLI-AIRGAP-56-001)
- PROV-OBS-53-001 (DONE; observer doc + verifier script)
- AIRGAP-TIME-57-001 (needs production trust roots + signing; schema + draft trust-roots bundle published)
- EXPORT-OBS-51-001 / 54-001 (waiting on DSSE/TUF profile to stabilize manifest)
- AIRGAP-TIME-57-001 (DEV-UNBLOCKED: schema + trust-roots bundle + service config present; production trust roots/signing still needed)
- EXPORT-OBS-51-001 / 54-001 (DEV-UNBLOCKED: DSSE/TUF profile + test-signed bundle available; production signing still blocked on MIRROR_SIGN_KEY_B64)
- CLI-AIRGAP-56-001 (needs 56-002 signing + 58-001 CLI path)
- CONCELIER-AIRGAP-56-001..58-001 <- PREP-ART-56-001, PREP-EVIDENCE-BDL-01
- CONCELIER-CONSOLE-23-001..003 <- PREP-CONSOLE-FIXTURES-29; PREP-EVIDENCE-BDL-01
- FEEDCONN-ICSCISA-02-012 / KISA-02-008 <- PREP-FEEDCONN-ICS-KISA-PLAN
- SBOM Service (Link-Not-Merge consumers)
- SBOM-SERVICE-21-001 (projection read API) UNBLOCKED/DOING: AirGap review completed 2025-11-23; fixtures + hash recorded in `docs/modules/sbomservice/fixtures/lnm-v1/`; implementing `/sboms/{snapshotId}/projection`.
- SBOM-SERVICE-21-001 (projection read API) DONE (2025-11-23): WAF aligned with fixtures + in-memory repo fallback; `ProjectionEndpointTests` pass.
- SBOM-SERVICE-21-002..004 TODO: depend on 21-001 implementation; proceed after projection API lands.
- Concelier orchestrator / policy / risk chain
@@ -83,7 +83,7 @@
- DEVOPS-AOC-19-001 -> 19-002 -> 19-003
- DEVOPS-AIRGAP-57-002 <- DEVOPS-AIRGAP-57-001
- DEVOPS-OFFLINE-17-004 (waits for next release pipeline `out/release/debug`)
- DEVOPS-REL-17-004 (release workflow must publish debug artifacts)
- DEVOPS-REL-17-004 (release workflow now uploads `out/release/debug` artefact)
- DEVOPS-CONSOLE-23-001 (no upstream CI contract yet)
- DEVOPS-EXPORT-35-001 (needs object storage fixtures + dashboards)
@@ -100,7 +100,7 @@
- EXCITITOR-DOCS-0001 (awaits Excititor chunk API CI + console contracts)
- Provenance / Observability
- PROV-OBS-53-002 (DOING: Attestation.Tests cleaned; canonical JSON/Merkle tests fixed, restore warning cleared; awaiting full suite/CI pass) -> PROV-OBS-53-003
- PROV-OBS-53-002 -> PROV-OBS-53-003
- CLI/Advisory AI handoff
- SBOM-AIAI-31-003 <- CLI-VULN-29-001; CLI-VEX-30-001