stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 2 Releases Wiki Activity

consolidation of some of the modules, localization fixes, product advisories work, qa work

Browse Source
This commit is contained in:
master
2026-03-05 03:54:22 +02:00
parent 7bafcc3eef
commit 8e1cb9448d
3878 changed files with 72600 additions and 46861 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
docs/ARCHITECTURE_OVERVIEW.md
View File

@@ -47,10 +47,10 @@ Stella Ops Suite organizes capabilities into **themes** (functional areas):
| **SCANENG** | Scanning and SBOM | Scanner, SBOM Service, Reachability |
| **EVIDENCE** | Evidence and attestation | Evidence Locker, Attestor, Export Center |
| **RUNTIME** | Runtime signals | Signals, Graph, Zastava |
| **JOBCTRL** | Job orchestration | Scheduler, Orchestrator, TaskRunner |
| **JOBCTRL** | Job orchestration | JobEngine (includes Scheduler, TaskRunner, PacksRegistry) |
| **OBSERVE** | Observability | Notifier, Telemetry |
| **REPLAY** | Deterministic replay | Replay Engine |
| **DEVEXP** | Developer experience | CLI, Web UI, SDK |
| **DEVEXP** | Developer experience | CLI, Web UI, Tools (includes SDK) |
#### Planned Themes (Release Orchestration)
@@ -74,7 +74,7 @@ Stella Ops Suite organizes capabilities into **themes** (functional areas):
| **Edge / Identity** | `StellaOps.Authority` | Issues short-lived tokens (DPoP + mTLS), exposes OIDC flows, rotates JWKS |
| **Release Control** | `StellaOps.ReleaseManager`, `StellaOps.PromotionManager`, `StellaOps.WorkflowEngine` | Release bundles, promotion workflows, gate evaluation (planned) |
| **Integration Hub** | `StellaOps.IntegrationManager`, `StellaOps.ConnectorRuntime` | SCM/CI/Registry/Vault connectors (planned) |
| **Scan & Attest** | `StellaOps.Scanner`, `StellaOps.Signer`, `StellaOps.Attestor` | Accept SBOMs/images, produce DSSE bundles, transparency logging |
| **Scan & Attest** | `StellaOps.Scanner`, `StellaOps.Attestor` (includes Signer) | Accept SBOMs/images, produce DSSE bundles, transparency logging |
| **Evidence Graph** | `StellaOps.Concelier`, `StellaOps.Excititor`, `StellaOps.Policy.Engine` | Advisories/VEX, linksets, lattice policy |
| **Deployment** | `StellaOps.DeployOrchestrator`, `StellaOps.Agent.*` | Deployment execution to Docker/Compose/ECS/Nomad (planned) |
| **Experience** | `StellaOps.Web`, `StellaOps.Cli`, `StellaOps.Notify`, `StellaOps.ExportCenter` | Operator UX, automation, notifications |
@@ -82,18 +82,18 @@ Stella Ops Suite organizes capabilities into **themes** (functional areas):
### Ownership Clarifications
- **Ingress/routing**: Gateway is the single HTTP ingress and Router is the
internal service transport.
- **Ingress/routing**: Router owns both the HTTP ingress gateway (`StellaOps.Gateway.WebService`) and the
internal binary protocol transport. The standalone `src/Gateway/` was deleted (Sprint 200).
- **Promotion policy gates**: Policy Engine owns PASS/FAIL decision semantics;
Concelier remains ingestion/linkset only.
- **Environment topology and promotion lanes**: owned by Release Orchestrator
ENVMGR/PROMOT tracks (not Cartographer).
See:
- `docs/modules/gateway/architecture.md`
- `docs/modules/router/architecture.md`
- `docs/modules/router/README.md`
- `docs/modules/policy/promotion-gate-ownership-contract.md`
- `docs/modules/release-orchestrator/promotion-runtime-gap-closure-plan.md`
- `docs/modules/release-jobengine/promotion-runtime-gap-closure-plan.md`
## Infrastructure (What Is Required)
@@ -176,7 +176,7 @@ Plugin types:
## References
- `docs/ARCHITECTURE_REFERENCE.md` — Full reference map
- `docs/modules/release-orchestrator/architecture.md` — Release orchestrator design (planned)
- `docs/modules/release-jobengine/architecture.md` — Release orchestrator design (planned)
- `docs/OFFLINE_KIT.md` — Air-gap operations
- `docs/API_CLI_REFERENCE.md` — API and CLI contracts
- `docs/modules/platform/architecture-overview.md` — Platform service design