Align AOC tasks for Excititor and Concelier
This commit is contained in:
@@ -1,28 +1,28 @@
|
||||
# StellaOps VEX Consensus Lens
|
||||
|
||||
VEX Lens computes deterministic consensus across conflicting VEX statements while preserving raw provenance.
|
||||
|
||||
## Responsibilities
|
||||
- Ingest VEX evidence from Excititor and align it to SBOM inventory.
|
||||
- Apply issuer trust weights, freshness rules, and policy-defined tie breakers.
|
||||
- Publish consensus snapshots and disagreement metadata for Policy Engine and Explorer surfaces.
|
||||
- Expose APIs for explainability and offline bundle exports.
|
||||
|
||||
## Key components
|
||||
- Consensus computation service and job pipeline.
|
||||
- Consensus store with versioned snapshots.
|
||||
- Explain trace generator for disagreements.
|
||||
|
||||
## Integrations & dependencies
|
||||
- Excititor for raw VEX ingestion.
|
||||
- Policy Engine for applying consensus in suppression flows.
|
||||
- Vulnerability Explorer and Advisory AI for evidence overlays.
|
||||
|
||||
## Operational notes
|
||||
- Trust model configuration and issuer scoring dashboards.
|
||||
- Offline kit packaging of consensus snapshots.
|
||||
- Telemetry on issuer coverage and disagreement counts.
|
||||
|
||||
## Epic alignment
|
||||
- Epic 7: VEX Consensus Lens.
|
||||
- Lens implementation stories tracked in ../../TASKS.md.
|
||||
# StellaOps VEX Consensus Lens
|
||||
|
||||
VEX Lens computes deterministic consensus across conflicting VEX statements while preserving raw provenance.
|
||||
|
||||
## Responsibilities
|
||||
- Ingest VEX evidence from Excititor and align it to SBOM inventory.
|
||||
- Apply issuer trust weights, freshness rules, and policy-defined tie breakers.
|
||||
- Publish consensus snapshots and disagreement metadata for Policy Engine and Explorer surfaces.
|
||||
- Expose APIs for explainability and offline bundle exports.
|
||||
|
||||
## Key components
|
||||
- Consensus computation service and job pipeline.
|
||||
- Consensus store with versioned snapshots.
|
||||
- Explain trace generator for disagreements.
|
||||
|
||||
## Integrations & dependencies
|
||||
- Excititor for raw VEX ingestion.
|
||||
- Policy Engine for applying consensus in suppression flows.
|
||||
- Vulnerability Explorer and Advisory AI for evidence overlays.
|
||||
|
||||
## Operational notes
|
||||
- Trust model configuration and issuer scoring dashboards.
|
||||
- Offline kit packaging of consensus snapshots.
|
||||
- Telemetry on issuer coverage and disagreement counts.
|
||||
|
||||
## Epic alignment
|
||||
- Epic 7: VEX Consensus Lens.
|
||||
- Lens implementation stories tracked in ../../TASKS.md.
|
||||
|
||||
Reference in New Issue
Block a user