consolidation of some of the modules, localization fixes, product advisories work, qa work
This commit is contained in:
@@ -1,13 +1,19 @@
|
||||
# IssuerDirectory
|
||||
|
||||
**Status:** Implemented
|
||||
**Source:** `src/IssuerDirectory/`
|
||||
**Owner:** VEX Guild
|
||||
**Status:** Implemented (source relocated by Sprint 216)
|
||||
**Source:** `src/Authority/StellaOps.IssuerDirectory/` (previously `src/IssuerDirectory/`)
|
||||
**Owner:** Authority domain (Identity & Trust)
|
||||
|
||||
## Purpose
|
||||
|
||||
IssuerDirectory maintains a trust registry of CSAF publishers and VEX statement issuers. Provides discovery, validation, and trust scoring for upstream vulnerability advisories and VEX statements.
|
||||
|
||||
## Domain ownership
|
||||
|
||||
As of Sprint 216, IssuerDirectory source is owned by the Authority domain. The runtime service identity, container, and database schema remain independent. Schema isolation from AuthorityDbContext is a deliberate security feature.
|
||||
|
||||
See `docs/modules/authority/architecture.md` (sections 21.1--21.4) for schema ownership and the no-merge ADR.
|
||||
|
||||
## Components
|
||||
|
||||
**Services:**
|
||||
@@ -34,11 +40,8 @@ Key settings:
|
||||
|
||||
## Related Documentation
|
||||
|
||||
- Architecture: `./architecture.md`
|
||||
- Architecture: `../authority/architecture.md` (sections 21.1--21.4)
|
||||
- Archived original: `docs-archived/modules/issuer-directory/`
|
||||
- Concelier: `../concelier/`
|
||||
- VexHub: `../vexhub/`
|
||||
- VexLens: `../vex-lens/`
|
||||
|
||||
## Current Status
|
||||
|
||||
Implemented with CSAF publisher discovery and validation. Supports issuer metadata storage and trust registry queries. Integrated with VEX ingestion pipeline.
|
||||
|
||||
Reference in New Issue
Block a user