consolidation of some of the modules, localization fixes, product advisories work, qa work
This commit is contained in:
@@ -59,6 +59,11 @@ The command performs the following verification checks:
|
||||
4. **Tool Version**: Verifies tool version metadata is present and valid.
|
||||
5. **Timestamp Validity**: Checks generation timestamp is within acceptable window.
|
||||
|
||||
### 2026-02-26 parity note
|
||||
|
||||
- `stella sbom verify` now follows verification-first behavior and no longer relies on structural placeholder checks.
|
||||
- Deterministic failure reasons are surfaced for missing trust roots, malformed signatures, and verification mismatch paths.
|
||||
|
||||
### Exit Codes
|
||||
|
||||
| Code | Meaning |
|
||||
|
||||
@@ -146,6 +146,11 @@ stella scan replay \
|
||||
--policy "sha256:policy321..."
|
||||
```
|
||||
|
||||
## 2026-02-26 parity note
|
||||
|
||||
- Replay commands in UI and evidence exports are backend-generated and should be executed without placeholder edits.
|
||||
- `scan replay`, `timeline query/export`, and score explain/replay flows are aligned with deterministic backend contracts and error taxonomy.
|
||||
|
||||
## Related Commands
|
||||
|
||||
| Command | Description |
|
||||
|
||||
Reference in New Issue
Block a user