Tests fixes, audit progress, UI completions

This commit is contained in:
StellaOps Bot
2025-12-30 09:03:22 +02:00
parent 7a5210e2aa
commit 82e55c206a
318 changed files with 7232 additions and 1256 deletions

View File

@@ -0,0 +1,21 @@
# Attestor Bundle Tests Charter
## Working Directory
- `src/Attestor/__Tests/StellaOps.Attestor.Bundle.Tests`
## Scope
- Unit tests for Sigstore bundle builder, serializer, and verifier.
## Required Reading
- `docs/modules/attestor/README.md`
- `docs/modules/attestor/architecture.md`
- `docs/modules/platform/architecture-overview.md`
- `src/Attestor/AGENTS.md`
- `src/Attestor/__Libraries/StellaOps.Attestor.Bundle/AGENTS.md`
## Working Agreements
- Keep tests deterministic with fixed timestamps and key material.
- Update sprint tracker and local `TASKS.md`.
## Testing Rules
- Cover signature verification, inclusion proof checks, and invalid base64 inputs.

View File

@@ -0,0 +1,10 @@
# Attestor Bundle Tests Task Board
This board mirrors active sprint tasks for this module.
Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
| Task ID | Status | Notes |
| --- | --- | --- |
| AUDIT-0046-M | DONE | Maintainability audit for StellaOps.Attestor.Bundle.Tests. |
| AUDIT-0046-T | DONE | Test coverage audit for StellaOps.Attestor.Bundle.Tests. |
| AUDIT-0046-A | TODO | Pending approval for changes. |

View File

@@ -0,0 +1,21 @@
# Attestor Bundling Tests Charter
## Working Directory
- `src/Attestor/__Tests/StellaOps.Attestor.Bundling.Tests`
## Scope
- Unit and integration tests for bundle aggregation, signing, retention, and offline export.
## Required Reading
- `docs/modules/attestor/README.md`
- `docs/modules/attestor/architecture.md`
- `docs/modules/platform/architecture-overview.md`
- `src/Attestor/AGENTS.md`
- `src/Attestor/__Libraries/StellaOps.Attestor.Bundling/AGENTS.md`
## Working Agreements
- Keep tests deterministic with fixed time and key material.
- Update sprint tracker and local `TASKS.md`.
## Testing Rules
- Exercise retention policies, signing paths, and offline kit export.

View File

@@ -0,0 +1,10 @@
# Attestor Bundling Tests Task Board
This board mirrors active sprint tasks for this module.
Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
| Task ID | Status | Notes |
| --- | --- | --- |
| AUDIT-0048-M | DONE | Maintainability audit for StellaOps.Attestor.Bundling.Tests. |
| AUDIT-0048-T | DONE | Test coverage audit for StellaOps.Attestor.Bundling.Tests. |
| AUDIT-0048-A | TODO | Pending approval for changes. |

View File

@@ -0,0 +1,23 @@
# Attestor OCI Tests AGENTS
## Purpose & Scope
- Working directory: `src/Attestor/__Tests/StellaOps.Attestor.Oci.Tests/`.
- Roles: QA automation, backend engineer.
- Focus: unit and integration tests for OCI attestation attach/list/fetch/remove and reference parsing.
## Required Reading (treat as read before DOING)
- `docs/README.md`
- `docs/07_HIGH_LEVEL_ARCHITECTURE.md`
- `docs/modules/attestor/architecture.md`
- `docs/modules/platform/architecture-overview.md`
- Relevant sprint files.
## Working Agreements
- Keep tests deterministic (fixed time/IDs) and avoid network by default.
- Integration tests must be explicitly skipped or opt-in and document required containers.
- Ensure tests reflect current production behavior; update when APIs change.
- Update `docs/implplan/SPRINT_*.md` and the local `TASKS.md` when starting or completing work.
## Testing
- Use xUnit + FluentAssertions + Moq; keep fixtures reusable and deterministic.
- Cover negative paths, serialization, and digest/annotation behavior.

View File

@@ -0,0 +1,10 @@
# Attestor OCI Tests Task Board
This board mirrors active sprint tasks for this module.
Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
| Task ID | Status | Notes |
| --- | --- | --- |
| AUDIT-0057-M | DONE | Maintainability audit for StellaOps.Attestor.Oci.Tests. |
| AUDIT-0057-T | DONE | Test coverage audit for StellaOps.Attestor.Oci.Tests. |
| AUDIT-0057-A | TODO | Pending approval for changes. |

View File

@@ -0,0 +1,23 @@
# Attestor Offline Tests AGENTS
## Purpose & Scope
- Working directory: `src/Attestor/__Tests/StellaOps.Attestor.Offline.Tests/`.
- Roles: QA automation, backend engineer.
- Focus: offline verification tests for bundles, DSSE structure, Merkle validation, and root stores.
## Required Reading (treat as read before DOING)
- `docs/README.md`
- `docs/07_HIGH_LEVEL_ARCHITECTURE.md`
- `docs/modules/attestor/architecture.md`
- `docs/modules/platform/architecture-overview.md`
- Relevant sprint files.
## Working Agreements
- Keep tests deterministic (fixed time/IDs) and avoid wall-clock time.
- Avoid network calls by default; integration tests must be explicitly opt-in.
- Ensure negative-path coverage for verification failures.
- Update `docs/implplan/SPRINT_*.md` and the local `TASKS.md` when starting or completing work.
## Testing
- Use xUnit + FluentAssertions + Moq; prefer TestKit helpers for temp paths.
- Cover signature, merkle proof, cert chain, and root-store behaviors.

View File

@@ -0,0 +1,10 @@
# Attestor Offline Tests Task Board
This board mirrors active sprint tasks for this module.
Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
| Task ID | Status | Notes |
| --- | --- | --- |
| AUDIT-0059-M | DONE | Maintainability audit for StellaOps.Attestor.Offline.Tests. |
| AUDIT-0059-T | DONE | Test coverage audit for StellaOps.Attestor.Offline.Tests. |
| AUDIT-0059-A | TODO | Pending approval for changes. |

View File

@@ -0,0 +1,22 @@
# Attestor Persistence Tests AGENTS
## Purpose & Scope
- Working directory: `src/Attestor/__Tests/StellaOps.Attestor.Persistence.Tests/`.
- Roles: QA automation, backend engineer.
- Focus: trust anchor matching, EF Core persistence behaviors, and migration validation.
## Required Reading (treat as read before DOING)
- `docs/modules/attestor/architecture.md`
- `docs/db/SPECIFICATION.md`
- `docs/db/MIGRATION_STRATEGY.md`
- Relevant sprint files.
## Working Agreements
- Keep tests deterministic (fixed time/IDs) and avoid wall-clock time.
- Include coverage for repository behaviors and schema defaults.
- Perf harness updates should stay deterministic and documented.
- Update `docs/implplan/SPRINT_*.md` and the local `TASKS.md` when starting or completing work.
## Testing
- Use xUnit + FluentAssertions + NSubstitute; prefer TestKit helpers for temp paths.
- Cover trust anchor matcher specificity, active/inactive anchors, and predicate/key allowlists.

View File

@@ -0,0 +1,10 @@
# Attestor Persistence Tests Task Board
This board mirrors active sprint tasks for this module.
Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
| Task ID | Status | Notes |
| --- | --- | --- |
| AUDIT-0061-M | DONE | Maintainability audit for StellaOps.Attestor.Persistence.Tests. |
| AUDIT-0061-T | DONE | Test coverage audit for StellaOps.Attestor.Persistence.Tests. |
| AUDIT-0061-A | TODO | Pending approval for changes. |

View File

@@ -0,0 +1,22 @@
# Attestor ProofChain Tests AGENTS
## Purpose & Scope
- Working directory: `src/Attestor/__Tests/StellaOps.Attestor.ProofChain.Tests/`.
- Roles: QA automation, backend engineer.
- Focus: proof chain canonicalization, ID generation, Merkle proofs, schema validation, and signing.
## Required Reading (treat as read before DOING)
- `docs/modules/attestor/architecture.md`
- `docs/product-advisories/14-Dec-2025 - Proof and Evidence Chain Technical Reference.md`
- RFC 8785 (JSON Canonicalization Scheme)
- Relevant sprint files.
## Working Agreements
- Determinism is mandatory: stable ordering and fixed timestamps in tests.
- Separate unit vs integration/perf tests with explicit categories.
- Avoid wall-clock time; use fixed timestamps in fixtures.
- Update `docs/implplan/SPRINT_*.md` and the local `TASKS.md` when starting or completing work.
## Testing
- Use xUnit + FluentAssertions + TestKit; prefer deterministic data.
- Cover canonicalization numeric edge cases, schema validation, and proof signing/verification.

View File

@@ -0,0 +1,10 @@
# Attestor ProofChain Tests Task Board
This board mirrors active sprint tasks for this module.
Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
| Task ID | Status | Notes |
| --- | --- | --- |
| AUDIT-0063-M | DONE | Maintainability audit for StellaOps.Attestor.ProofChain.Tests. |
| AUDIT-0063-T | DONE | Test coverage audit for StellaOps.Attestor.ProofChain.Tests. |
| AUDIT-0063-A | TODO | Pending approval for changes. |

View File

@@ -0,0 +1,23 @@
# Attestor StandardPredicates Tests AGENTS
## Purpose & Scope
- Working directory: `src/Attestor/__Tests/StellaOps.Attestor.StandardPredicates.Tests/`.
- Roles: QA automation, backend engineer.
- Focus: predicate parsers, canonicalization, metadata extraction, and SBOM hashing.
## Required Reading (treat as read before DOING)
- `docs/modules/attestor/architecture.md`
- `docs/product-advisories/14-Dec-2025 - Proof and Evidence Chain Technical Reference.md`
- RFC 8785 (JSON Canonicalization Scheme)
- SPDX 3.0.1, CycloneDX 1.6/1.7, and SLSA provenance v1.0 references
- Relevant sprint files.
## Working Agreements
- Determinism is mandatory: stable ordering and fixed timestamps in tests.
- Separate unit vs integration/perf tests with explicit categories.
- Avoid wall-clock time; use fixed timestamps in fixtures.
- Update `docs/implplan/SPRINT_*.md` and the local `TASKS.md` when starting or completing work.
## Testing
- Use xUnit + FluentAssertions + TestKit; prefer deterministic data.
- Cover canonicalization numeric edge cases, parser warnings/errors, and SBOM hash determinism.

View File

@@ -0,0 +1,10 @@
# Attestor StandardPredicates Tests Task Board
This board mirrors active sprint tasks for this module.
Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
| Task ID | Status | Notes |
| --- | --- | --- |
| AUDIT-0065-M | DONE | Maintainability audit for StandardPredicates tests. |
| AUDIT-0065-T | DONE | Test coverage audit for StandardPredicates tests. |
| AUDIT-0065-A | TODO | Pending approval for changes. |

View File

@@ -0,0 +1,25 @@
# Attestor Types Tests AGENTS
## Purpose & Scope
- Working directory: `src/Attestor/__Tests/StellaOps.Attestor.Types.Tests/`.
- Roles: QA automation, backend engineer.
- Focus: schema validation, sample attestation validation, canonicalization/determinism, and Rekor receipt/proof tests for Attestor Types.
## Required Reading (treat as read before DOING)
- `docs/modules/attestor/architecture.md`
- `docs/modules/attestor/payloads.md`
- `docs/modules/attestor/bundle-format.md`
- `docs/modules/attestor/rekor-verification-design.md`
- `docs/modules/platform/architecture-overview.md`
- Relevant sprint files.
## Working Agreements
- Determinism is mandatory: fixed timestamps, stable IDs, and deterministic ordering in tests.
- Separate unit vs integration/perf tests with explicit categories.
- Avoid wall-clock time; prefer deterministic time providers or fakes.
- Keep tests offline-friendly.
- Update `docs/implplan/SPRINT_*.md` and local `TASKS.md` when starting or completing work.
## Testing
- Use xUnit + FluentAssertions + TestKit; prefer deterministic fixtures.
- Schema/sample tests should validate against the committed schemas and enforce canonicalization rules.

View File

@@ -0,0 +1,10 @@
# Attestor Types Tests Task Board
This board mirrors active sprint tasks for this module.
Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
| Task ID | Status | Notes |
| --- | --- | --- |
| AUDIT-0070-M | DONE | Maintainability audit for StellaOps.Attestor.Types.Tests. |
| AUDIT-0070-T | DONE | Test coverage audit for StellaOps.Attestor.Types.Tests. |
| AUDIT-0070-A | TODO | Pending approval for changes. |