feat(docs): Add comprehensive documentation for Vexer, Vulnerability Explorer, and Zastava modules
- Introduced AGENTS.md, README.md, TASKS.md, and implementation_plan.md for Vexer, detailing mission, responsibilities, key components, and operational notes. - Established similar documentation structure for Vulnerability Explorer and Zastava modules, including their respective workflows, integrations, and observability notes. - Created risk scoring profiles documentation outlining the core workflow, factor model, governance, and deliverables. - Ensured all modules adhere to the Aggregation-Only Contract and maintain determinism and provenance in outputs.
This commit is contained in:
		
							
								
								
									
										41
									
								
								docs/modules/devops/README.md
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										41
									
								
								docs/modules/devops/README.md
									
									
									
									
									
										Normal file
									
								
							| @@ -0,0 +1,41 @@ | ||||
| # StellaOps DevOps | ||||
|  | ||||
| The DevOps module captures release, deployment, and migration playbooks that keep StellaOps deterministic across environments. | ||||
|  | ||||
| ## Responsibilities | ||||
| - Maintain CI pipelines, signing workflows, and release packaging steps. | ||||
| - Operate shared runbooks for launch readiness, upgrades, and NuGet previews. | ||||
| - Provide offline kit assembly instructions and tooling integration. | ||||
| - Wrap observability/telemetry bootstrap flows for platform teams. | ||||
|  | ||||
| ## Key components | ||||
| - Runbooks under ./runbooks/ (launch, deployment, nuget). | ||||
| - Migration guidance under ./migrations/. | ||||
| - Architecture overview bridging CI/CD & infrastructure concerns. | ||||
|  | ||||
| ## Integrations & dependencies | ||||
| - Ops pipelines (Gitea, GitHub Actions) and artifact registries. | ||||
| - Authority/Signer for supply chain signing. | ||||
| - Telemetry stack bootstrap scripts. | ||||
|  | ||||
| ## Operational notes | ||||
| - Offline bundle packaging guidance in docs/modules/export-center/operations/runbook.md. | ||||
| - Dashboards for launch cutover rehearsals. | ||||
| - Coordination with Security for enforced guardrails. | ||||
|  | ||||
| ## Related resources | ||||
| - ./runbooks/launch-readiness.md | ||||
| - ./runbooks/launch-cutover.md | ||||
| - ./runbooks/deployment-upgrade.md | ||||
| - ./runbooks/nuget-preview-bootstrap.md | ||||
| - ./migrations/semver-style.md | ||||
|  | ||||
| ## Backlog references | ||||
| - DEVOPS-LAUNCH-18-001 / 18-900 runbooks in ../../TASKS.md. | ||||
| - Telemetry bootstrap automation tracked in `ops/devops/TASKS.md`. | ||||
|  | ||||
| ## Epic alignment | ||||
| - **Epic 1 – AOC enforcement:** bake AOC verifier steps, CI guards, and schema validation into pipelines. | ||||
| - **Epic 9 – Orchestrator Dashboard:** support operational dashboards, job recovery runbooks, and rate-limit governance. | ||||
| - **Epic 10 – Export Center:** manage signing workflows, Offline Kit packaging, and release promotion for exports. | ||||
| - **Epic 15 – Observability & Forensics:** coordinate telemetry deployment, evidence retention, and forensic automation. | ||||
		Reference in New Issue
	
	Block a user