Rename Vexer to Excititor
This commit is contained in:
		| @@ -42,7 +42,7 @@ Semantic core + calendar tag: | ||||
| A release is a **bundle** of image digests + charts + manifests. All services in a bundle are **wire‑compatible**. Mixed minor versions are allowed within a bounded skew: | ||||
|  | ||||
| * **Web UI ↔ backend**: `±1 minor`. | ||||
| * **Scanner ↔ Policy/Vexer/Feedser**: `±1 minor`. | ||||
| * **Scanner ↔ Policy/Excititor/Feedser**: `±1 minor`. | ||||
| * **Authority/Signer/Attestor triangle**: **must** be same minor (crypto and DPoP/mTLS binding rules). | ||||
|  | ||||
| At startup, services **self‑advertise** their semver & channel; the UI surfaces **mismatch warnings**. | ||||
| @@ -90,7 +90,7 @@ At startup, services **self‑advertise** their semver & channel; the UI surface | ||||
|  | ||||
| **Gating policy**: | ||||
|  | ||||
| * **Core images** (Authority, Scanner, Feedser, Vexer, Attestor, UI): public **read**. | ||||
| * **Core images** (Authority, Scanner, Feedser, Excititor, Attestor, UI): public **read**. | ||||
| * **Enterprise add‑ons** (if any) and **pre‑release**: private repos via OAuth2 token service. | ||||
|  | ||||
| > Monetization lever is **signing** (PoE gate), not image pulls, so the core remains simple to consume. | ||||
| @@ -115,7 +115,7 @@ At startup, services **self‑advertise** their semver & channel; the UI surface | ||||
|     /attest/   DSSE bundles + Rekor proofs | ||||
|     /charts/   Helm charts + values templates | ||||
|     /compose/  docker-compose.yml + .env template | ||||
|     /plugins/  Feedser/Vexer connectors (restart-time) | ||||
|     /plugins/  Feedser/Excititor connectors (restart-time) | ||||
|     /policy/   example policies | ||||
|     /manifest/ release.yaml  (see §6.1) | ||||
|   ``` | ||||
| @@ -170,7 +170,7 @@ helm install stella stellaops/platform \ | ||||
|   --set scanner.minio.endpoint=http://minio.stella.local:9000 \ | ||||
|   --set scanner.mongo.uri=mongodb://mongo/scanner \ | ||||
|   --set feedser.mongo.uri=mongodb://mongo/feedser \ | ||||
|   --set vexer.mongo.uri=mongodb://mongo/vexer | ||||
|   --set excititor.mongo.uri=mongodb://mongo/excititor | ||||
| ``` | ||||
|  | ||||
| * Post‑install job registers **Authority clients** (Scanner, Signer, Attestor, UI) and prints **bootstrap** URLs and client credentials (sealed secrets). | ||||
| @@ -185,7 +185,7 @@ helm install stella stellaops/platform \ | ||||
|   1. Authority (stateless, dual‑key rotation ready) | ||||
|   2. Signer/Attestor (same minor) | ||||
|   3. Scanner WebService & Workers | ||||
|   4. Feedser, then Vexer (schema migrations are expand/contract) | ||||
|   4. Feedser, then Excititor (schema migrations are expand/contract) | ||||
|   5. UI last | ||||
|  | ||||
| * **DB migrations** are **expand/contract**: | ||||
| @@ -266,7 +266,7 @@ s3://stellaops/ | ||||
|   feedser/ | ||||
|     json/<exportId>/... | ||||
|     trivy/<exportId>/... | ||||
|   vexer/ | ||||
|   excititor/ | ||||
|     exports/<exportId>/... | ||||
|   attestor/ | ||||
|     dsse/<bundleSha256>.json | ||||
| @@ -289,14 +289,14 @@ s3://stellaops/ | ||||
| ### 7.4 Mongo retention | ||||
|  | ||||
| * **Scanner**: `runtime.events` use TTL (e.g., 30–90 days); **catalog** permanent. | ||||
| * **Feedser/Vexer**: raw docs keep **last N windows**; canonical stores permanent. | ||||
| * **Feedser/Excititor**: raw docs keep **last N windows**; canonical stores permanent. | ||||
| * **Attestor**: `entries` permanent; `dedupe` TTL 24–48h. | ||||
|  | ||||
| --- | ||||
|  | ||||
| ## 8) Observability & SLOs (operations) | ||||
|  | ||||
| * **Uptime SLO**: 99.9% for Signer/Authority/Attestor; 99.5% for Scanner WebService; Vexer/Feedser 99.0%. | ||||
| * **Uptime SLO**: 99.9% for Signer/Authority/Attestor; 99.5% for Scanner WebService; Excititor/Feedser 99.0%. | ||||
| * **Error budgets**: tracked per month; dashboards show burn rates. | ||||
| * **Golden signals**: | ||||
|  | ||||
| @@ -410,8 +410,8 @@ services: | ||||
|     deploy: { replicas: 4 } | ||||
|   feedser: | ||||
|     image: registry.stella-ops.org/stellaops/feedser@sha256:... | ||||
|   vexer: | ||||
|     image: registry.stella-ops.org/stellaops/vexer@sha256:... | ||||
|   excititor: | ||||
|     image: registry.stella-ops.org/stellaops/excititor@sha256:... | ||||
|   web-ui: | ||||
|     image: registry.stella-ops.org/stellaops/web-ui@sha256:... | ||||
|   mongo: | ||||
| @@ -446,7 +446,7 @@ services: | ||||
| * `signer.requests_total{result="success"}/minute` > 0 (when scans occur). | ||||
| * `attestor.submit_latency_seconds{quantile=0.95}` < 0.3. | ||||
| * `scanner.scan_latency_seconds{quantile=0.95}` < target per image size. | ||||
| * `feedser.export.duration_seconds` stable; `vexer.consensus.conflicts_total` not exploding after policy changes. | ||||
| * `feedser.export.duration_seconds` stable; `excititor.consensus.conflicts_total` not exploding after policy changes. | ||||
| * MinIO `s3_requests_errors_total` near zero; Mongo `opcounters` hit expected baseline. | ||||
|  | ||||
| ### Appendix B — Upgrade safety checklist | ||||
|   | ||||
		Reference in New Issue
	
	Block a user