chore(docs+devops): cross-module doc sync + sprint archival moves + compose updates

Bundled pre-session doc + ops work:
- docs/modules/**: sync across advisory-ai, airgap, cli, excititor,
  export-center, findings-ledger, notifier, notify, platform, router,
  sbom-service, ui, web (architectural + operational updates)
- docs/features/**: updates to checked excititor vex pipeline,
  developer workspace, quick verify drawer
- docs top-level: README, quickstart, API_CLI_REFERENCE, UI_GUIDE,
  code-of-conduct/TESTING_PRACTICES updates
- docs/qa/feature-checks/: FLOW.md + excititor state update
- docs/implplan/: remaining sprint updates + new Concelier source
  credentials sprint (SPRINT_20260422_003)
- docs-archived/implplan/: 30 sprint archival moves (ElkSharp series,
  misc completed sprints)
- devops/compose: .env + services compose + env example + router gateway
  config updates

File-level granularity preserved.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This commit is contained in:
master
2026-04-22 16:06:39 +03:00
parent ad77711ac2
commit 7943cfb3af
121 changed files with 10483 additions and 387 deletions

View File

@@ -6,6 +6,18 @@
This reference describes the Export Center API introduced in Export Center Phase 1 (Epic 10) and extended in Phase 2. Use it alongside the [Export Center Architecture](architecture.md) and [Profiles](profiles.md) guides for service-level semantics.
> Status: The current ExportCenter host now uses PostgreSQL-backed canonical export profile/run/artifact repositories in non-testing runtime. Verification artifact readback, export/promotion attestation readback and verify, incident management, risk bundle jobs, simulation export, audit bundle generation, and exception report generation are still durable-backend gaps and currently return `501 problem+json` outside `Testing` instead of simulating in-memory persistence. Timeline publication also no longer silently routes through an in-memory sink outside `Testing`.
| Surface family | Runtime service outside `Testing` | Current API behavior |
| --- | --- | --- |
| Verification readback | `UnsupportedExportArtifactStore` | `501 problem+json` |
| Export attestation readback/verify | `UnsupportedExportAttestationService` | `501 problem+json` |
| Promotion attestation readback/verify | `UnsupportedPromotionAttestationAssembler` | `501 problem+json` |
| Incident management | `UnsupportedExportIncidentManager` | `501 problem+json` |
| Risk bundle jobs | `UnsupportedRiskBundleJobHandler` | `501 problem+json` |
| Simulation export | `UnsupportedSimulationReportExporter` | `501 problem+json` |
| Audit bundle generation | `UnsupportedAuditBundleJobHandler` | `501 problem+json` |
| Exception report generation | `UnsupportedExceptionReportGenerator` | `501 problem+json` |
| Timeline publication | `UnsupportedExportNotificationSink` | Truthful publish failure; no in-memory buffering |
## 1. Authentication and headers