stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 3 Releases Wiki Activity

consolidation of some of the modules, localization fixes, product advisories work, qa work

Browse Source
This commit is contained in:
master
2026-03-05 03:54:22 +02:00
parent 7bafcc3eef
commit 8e1cb9448d
3878 changed files with 72600 additions and 46861 deletions
Download Patch File Download Diff File Expand all files Collapse all files

24
docs/modules/policy/architecture.md
View File

@@ -889,6 +889,8 @@ stella exception status <request-id>
- **Integration tests:** Joiners with sample SBOM/advisory/VEX data; materialisation with deterministic ordering; API contract tests generated from OpenAPI.
- **Property tests:** Ensure rule evaluation deterministic across permutations.
- **Golden tests:** Replay recorded runs, compare determinism hash.
- **Snapshot contract (Policy Engine tests):** Snapshot assertions resolve to source-controlled `src/Policy/__Tests/StellaOps.Policy.Engine.Tests/Snapshots/` via caller-file path. Regenerate with `UPDATE_SNAPSHOTS=1` only when intentional fixture changes are reviewed.
- **API auth fixture contract (PolicyEngineApiHostTests):** Test auth overrides run in fixture scope only, with deterministic in-memory resource-server settings (`Authority`, `RequireHttpsMetadata=false`) and canonical tenant claim `stellaops:tenant` so tenancy middleware and scope policies both evaluate in tests.
- **Performance tests:** Evaluate 100k component / 1M advisory dataset under warmed caches (<30 s full run).
- **Chaos hooks:** Optional toggles to simulate upstream latency/failures; used in staging.
@@ -1288,3 +1290,25 @@ services.AddVerdictExplainability();
- `ProofGraphBuilderTests.cs` — 18 tests (graph construction, determinism, depth hierarchy, critical paths, counterfactual overlay, edge cases)
- `ProofStudioServiceTests.cs` — 10 tests (compose, score breakdown, guardrails, counterfactual, DI resolution)
## 15 · Advisory Gap Status (2026-03-04 Batch)
Status: implementation delivered in Sprint 306.
- `ScorePolicy` runtime contract now includes required `PolicyId`; `ScorePolicy.Default` emits deterministic ID `score-policy.default.v1`.
- Loader and validator behavior is aligned:
- `ScorePolicyLoader` enforces `policyVersion`, required `policyId`, schema validation, and deterministic load failures.
- Missing `policyId` now fails predictably with explicit error text.
- Schema ownership is canonicalized:
- runtime validator loads one canonical schema resource (`Schemas/score-policy.v1.schema.json`) embedded in `StellaOps.Policy`.
- source schema and embedded resource parity are guarded by tests.
- Section naming drift was removed; schema keys align with runtime serialization (`reachability`, `evidence`, `provenance`, `scoringProfile`).
- Existing policy tests and fixtures that build `ScorePolicy` were updated to include deterministic `policyId`.
Legacy fixture note:
- Older YAML fixtures without `policyId` are no longer valid and must be migrated by adding deterministic `policyId` values.
Closure sprint:
- `docs/implplan/SPRINT_20260304_306_Policy_score_policy_contract_consistency.md`

4
docs/modules/policy/promotion-gate-ownership-contract.md
View File

@@ -62,5 +62,5 @@ Policy side:
## Integration References
- Evidence contract: `docs/modules/evidence-locker/promotion-evidence-contract.md`
- Promotion APIs: `docs/modules/release-orchestrator/api/promotions.md`
- Runtime closure plan: `docs/modules/release-orchestrator/promotion-runtime-gap-closure-plan.md`
- Promotion APIs: `docs/modules/release-jobengine/api/promotions.md`
- Runtime closure plan: `docs/modules/release-jobengine/promotion-runtime-gap-closure-plan.md`