chore(docs+devops): cross-module doc sync + sprint archival moves + compose updates

Bundled pre-session doc + ops work:
- docs/modules/**: sync across advisory-ai, airgap, cli, excititor,
  export-center, findings-ledger, notifier, notify, platform, router,
  sbom-service, ui, web (architectural + operational updates)
- docs/features/**: updates to checked excititor vex pipeline,
  developer workspace, quick verify drawer
- docs top-level: README, quickstart, API_CLI_REFERENCE, UI_GUIDE,
  code-of-conduct/TESTING_PRACTICES updates
- docs/qa/feature-checks/: FLOW.md + excititor state update
- docs/implplan/: remaining sprint updates + new Concelier source
  credentials sprint (SPRINT_20260422_003)
- docs-archived/implplan/: 30 sprint archival moves (ElkSharp series,
  misc completed sprints)
- devops/compose: .env + services compose + env example + router gateway
  config updates

File-level granularity preserved.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This commit is contained in:
master
2026-04-22 16:06:39 +03:00
parent ad77711ac2
commit 7943cfb3af
121 changed files with 10483 additions and 387 deletions

View File

@@ -114,7 +114,7 @@ stella system migrations-run --module all --category release --force
- If consolidated history exists but legacy backfill is partial, CLI/API paths automatically backfill missing legacy rows before source-set execution.
- This is a one-per-service bootstrap execution mode, not a permanent single-row migration history model.
- Registry ownership is platform-level so the same module catalog is reused by CLI and Platform migration admin APIs.
- Current registry coverage includes: `AirGap`, `Authority`, `Concelier`, `Excititor`, `Notify`, `Platform`, `Policy`, `Scanner`, `Scheduler`, `TimelineIndexer`.
- Current registry coverage includes: `AdvisoryAI`, `AirGap`, `Attestor`, `Authority`, `BinaryIndex`, `Concelier`, `Eventing`, `Evidence`, `EvidenceLocker`, `Excititor`, `ExportCenter`, `FindingsLedger`, `Graph`, `Integrations`, `IssuerDirectory`, `Notify`, `OpsMemory`, `PacksRegistry`, `Platform`, `PluginRegistry`, `Policy`, `ReachGraph`, `ReleaseOrchestrator`, `Remediation`, `Replay`, `RiskEngine`, `SbomLineage`, `Scanner`, `Scheduler`, `Signals`, `Signer`, `TimelineIndexer`, `Unknowns`, `Verdict`, `VexHub`, `VexLens`, `Workflow`.
- Not all migration folders in the repository are currently wired to runtime execution.
- Use `docs/db/MIGRATION_INVENTORY.md` for the current full matrix of migration locations, counts, and runner entrypoints.
- Consolidation target policy and cutover waves are defined in `docs/db/MIGRATION_CONSOLIDATION_PLAN.md`.