From 8f0320edd57ca8a4e3899468d6c18c875aa606bc Mon Sep 17 00:00:00 2001 From: Codex Assistant Date: Thu, 8 Jan 2026 09:06:03 +0200 Subject: [PATCH] product advisories add change contiang folder --- AGENTS.md | 8 +- CLAUDE.md | 4 +- ...600_0001_0001_reachability_drift_master.md | 14 +- ...NT_3600_0001_0001_trust_algebra_lattice.md | 2 +- ...SPRINT_3700_0006_0001_incremental_cache.md | 2 +- ...800_0000_0000_explainable_triage_master.md | 2 +- ...0000_0000_attestation_ecosystem_interop.md | 4 +- .../SPRINT_3200_IMPLEMENTATION_STATUS.md | 2 +- ...SPRINT_7100_0001_0001_COMPLETION_REPORT.md | 2 +- ...SPRINT_7100_0002_0001_COMPLETION_REPORT.md | 2 +- ...T_4100_0002_0003_snapshot_export_import.md | 2 +- ...3_0001_snapshot_merge_preview_replay_ui.md | 2 +- ...0251226_010_FE_visual_diff_enhancements.md | 6 +- ...RINT_20251226_010_SIGNALS_runtime_stack.md | 2 +- ...RINT_20251226_011_BE_auto_vex_downgrade.md | 2 +- ...20251226_011_BINIDX_known_build_catalog.md | 2 +- ...RINT_20251226_012_FE_smart_diff_compare.md | 4 +- .../SPRINT_20251226_013_FE_triage_canvas.md | 2 +- ..._20251226_014_DOCS_triage_consolidation.md | 2 +- .../SPRINT_20251229_001_002_BE_vex_delta.md | 2 +- ..._20251229_001_005_FE_explainer_timeline.md | 2 +- ...INT_20251229_001_006_FE_node_diff_table.md | 2 +- ...20260102_001_BE_binary_delta_signatures.md | 6 +- ..._20260102_002_BE_intoto_link_generation.md | 4 +- ...PRINT_20260102_003_BE_vex_proof_objects.md | 4 +- ...RINT_20260102_004_BE_polish_and_testing.md | 2 +- ..._004_001_FE_quiet_triage_ux_integration.md | 4 +- .../ADVISORY_PROCESSING_REPORT_20251220.md | 8 +- .../implplan/HANDOFF_VERDICT_ATTESTATIONS.md | 2 +- .../implplan/IMPLEMENTATION_INDEX.md | 2 +- ...determinism_reproducibility_master_plan.md | 2 +- ...PL_3410_epss_v4_integration_master_plan.md | 8 +- ...3420_postgresql_patterns_implementation.md | 4 +- .../implplan/README_VERDICT_ATTESTATIONS.md | 2 +- .../SPRINT_0115_0001_0004_concelier_iv.md | 2 +- .../SPRINT_0121_0001_0001_policy_reasoning.md | 6 +- .../implplan/SPRINT_0125_0001_0001_mirror.md | 6 +- .../SPRINT_0140_0001_0001_runtime_signals.md | 4 +- ...RINT_0157_0001_0002_taskrunner_blockers.md | 4 +- .../SPRINT_0158_0001_0002_taskrunner_ii.md | 2 +- .../SPRINT_0161_0001_0001_evidencelocker.md | 4 +- .../SPRINT_0162_0001_0001_exportcenter_i.md | 4 +- .../SPRINT_0171_0001_0001_notifier_i.md | 2 +- ...001_0001_record_deterministic_execution.md | 2 +- .../SPRINT_0190_0001_0001_cvss_v4_receipts.md | 8 +- .../implplan/SPRINT_0201_0001_0001_cli_i.md | 2 +- .../implplan/SPRINT_0207_0001_0001_graph.md | 2 +- .../implplan/SPRINT_0209_0001_0001_ui_i.md | 2 +- .../SPRINT_0215_0001_0001_vuln_triage_ux.md | 8 +- ...ct_advisories_14_dec_2025_thematic_refs.md | 20 +- ...337_0001_0001_cvss_advisory_enhancement.md | 6 +- ...INT_0338_0001_0001_airgap_importer_core.md | 4 +- ...NT_0338_0001_0001_cvss_epss_development.md | 2 +- .../SPRINT_0338_0001_0001_ttfs_foundation.md | 2 +- ...INT_0339_0001_0001_cli_offline_commands.md | 8 +- ...0001_0001_competitive_benchmarking_docs.md | 2 +- ...RINT_0341_0001_0001_observability_audit.md | 4 +- ..._0342_0001_0001_evidence_reconciliation.md | 2 +- ...0_0001_0001_ci_quality_gates_foundation.md | 2 +- ...1_0001_sca_failure_catalogue_completion.md | 4 +- ...52_0001_0001_security_testing_framework.md | 2 +- ..._0001_0001_mutation_testing_integration.md | 2 +- ...1_0001_testing_quality_guardrails_index.md | 4 +- ...1_0001_0001_reachability_evidence_chain.md | 8 +- ...1_0001_0001_proof_evidence_chain_master.md | 4 +- ..._0001_proof_chain_content_addressed_ids.md | 2 +- ...1_0003_0001_proof_chain_dsse_predicates.md | 2 +- ...01_0004_0001_proof_chain_spine_assembly.md | 2 +- ..._0501_0005_0001_proof_chain_api_surface.md | 2 +- ...1_0006_0001_proof_chain_database_schema.md | 2 +- ...1_0007_0001_proof_chain_cli_integration.md | 2 +- ...0501_0008_0001_proof_chain_key_rotation.md | 2 +- .../implplan/SPRINT_0510_0001_0001_airgap.md | 6 +- ...0001_0001_public_reachability_benchmark.md | 12 +- ...200_001_000_router_rate_limiting_master.md | 4 +- .../SPRINT_1200_001_IMPLEMENTATION_GUIDE.md | 2 +- .../implplan/SPRINT_1200_001_README.md | 6 +- .../SPRINT_2000_0003_0001_alpine_connector.md | 4 +- ...INT_2000_0003_0002_distro_version_tests.md | 4 +- ...T_20251226_002_ATTESTOR_bundle_rotation.md | 2 +- ...RINT_20251226_002_BE_budget_enforcement.md | 2 +- ...51226_003_ATTESTOR_offline_verification.md | 2 +- ...226_005_SCANNER_reachability_extractors.md | 4 +- ...0251226_006_DOCS_advisory_consolidation.md | 2 +- ...SPRINT_20251226_007_BE_determinism_gaps.md | 4 +- ...1226_008_DOCS_determinism_consolidation.md | 2 +- .../SPRINT_20251226_009_SCANNER_funcproof.md | 4 +- ...NT_20251228_005_BE_sbom_lineage_graph_i.md | 2 +- ...NT_20251228_006_FE_sbom_lineage_graph_i.md | 2 +- ...T_20251228_007_BE_sbom_lineage_graph_ii.md | 2 +- ...T_20251228_008_FE_sbom_lineage_graph_ii.md | 2 +- ..._20251229_001_001_BE_cgs_infrastructure.md | 2 +- ...PRINT_20251229_001_003_FE_lineage_graph.md | 2 +- ...SPRINT_20251229_001_004_FE_proof_studio.md | 2 +- ...20251229_001_007_FE_pinned_explanations.md | 2 +- ...51229_001_008_FE_reachability_gate_diff.md | 2 +- ...T_20251229_001_009_FE_audit_pack_export.md | 2 +- ...01_0001_rekor_merkle_proof_verification.md | 8 +- ...000_0001_0002_rekor_retry_queue_metrics.md | 4 +- ...00_0001_0003_rekor_time_skew_validation.md | 4 +- ...01_0001_determinism_scoring_foundations.md | 2 +- ...401_0002_0001_score_replay_proof_bundle.md | 6 +- ...SPRINT_3402_0001_0001_score_policy_yaml.md | 2 +- .../SPRINT_3403_0001_0001_fidelity_metrics.md | 2 +- ...SPRINT_3404_0001_0001_fn_drift_tracking.md | 2 +- .../SPRINT_3405_0001_0001_gate_multipliers.md | 2 +- .../SPRINT_3406_0001_0001_metrics_tables.md | 2 +- ...INT_3407_0001_0001_configurable_scoring.md | 2 +- ...T_3410_0001_0001_epss_ingestion_storage.md | 2 +- ...3410_0002_0001_epss_scanner_integration.md | 2 +- ...20_0001_0001_bitemporal_unknowns_schema.md | 8 +- .../SPRINT_3421_0001_0001_rls_expansion.md | 2 +- ..._3422_0001_0001_time_based_partitioning.md | 6 +- ...SPRINT_3423_0001_0001_generated_columns.md | 4 +- ...00_0000_binary_sbom_reachability_master.md | 4 +- ...PRINT_3500_0001_0001_deeper_moat_master.md | 18 +- ...NT_3500_0001_0001_proof_of_exposure_mvp.md | 2 +- ...SPRINT_3500_0001_0001_smart_diff_master.md | 8 +- ...NT_3500_0002_0001_smart_diff_foundation.md | 2 +- ..._0003_0001_ground_truth_corpus_ci_gates.md | 4 +- ...INT_3500_0003_0001_smart_diff_detection.md | 2 +- ...3500_0004_0001_smart_diff_binary_output.md | 2 +- ...NT_3500_0011_0001_buildid_mapping_index.md | 2 +- ...0_0014_0001_native_analyzer_integration.md | 2 +- .../implplan/SPRINT_3500_9999_0000_summary.md | 6 +- ...00_0000_0000_reference_arch_gap_summary.md | 4 +- ...riage_unknowns_implementation_reference.md | 2 +- ...PRINT_3600_0001_0001_gateway_webservice.md | 2 +- ...600_0001_0001_reachability_drift_master.md | 14 +- ...T_3600_0001_0001_triage_unknowns_master.md | 6 +- ...600_0002_0001_call_graph_infrastructure.md | 4 +- ..._0002_0001_unknowns_ranking_containment.md | 6 +- ...T_3600_0003_0001_drift_detection_engine.md | 2 +- ...3600_0004_0001_nodejs_babel_integration.md | 2 +- ...SPRINT_3600_0004_0001_ui_evidence_chain.md | 2 +- ...00_0005_0001_policy_ci_gate_integration.md | 2 +- ...00_0006_0001_documentation_finalization.md | 4 +- .../SPRINT_3700_0001_0001_triage_db_schema.md | 2 +- ...PRINT_3700_0001_0001_witness_foundation.md | 4 +- ...PRINT_3700_0002_0001_vuln_surfaces_core.md | 4 +- ...PRINT_3700_0003_0001_trigger_extraction.md | 2 +- ...3700_0004_0001_reachability_integration.md | 2 +- .../SPRINT_3700_0005_0001_witness_ui_cli.md | 2 +- ...SPRINT_3700_0006_0001_incremental_cache.md | 2 +- .../implplan/SPRINT_3800_0000_0000_summary.md | 2 +- ..._0001_0001_binary_call_edge_enhancement.md | 2 +- ...01_0001_cve_symbol_mapping_slice_format.md | 2 +- ..._3850_0001_0001_competitive_gap_closure.md | 6 +- ...001_0001_exception_objects_schema_model.md | 2 +- ...3_0001_exploit_path_inbox_proof_bundles.md | 2 +- ...0003_0002_recheck_policy_evidence_hooks.md | 2 +- ...4000_0001_0001_unknowns_decay_algorithm.md | 2 +- ..._0002_unknowns_blast_radius_containment.md | 2 +- .../SPRINT_4000_0002_0001_backport_ux.md | 6 +- ...NT_4100_0001_0001_reason_coded_unknowns.md | 4 +- .../SPRINT_4100_0001_0002_unknown_budgets.md | 2 +- ...NT_4100_0001_0003_unknowns_attestations.md | 2 +- ...0_0002_0001_knowledge_snapshot_manifest.md | 4 +- .../SPRINT_4100_0002_0002_replay_engine.md | 4 +- ...4100_0003_0001_risk_verdict_attestation.md | 4 +- ...SPRINT_4100_0003_0002_oci_referrer_push.md | 2 +- ...INT_4100_0004_0001_security_state_delta.md | 4 +- ...PRINT_4100_0004_0002_risk_budgets_gates.md | 2 +- ...0_0001_0001_proof_chain_verification_ui.md | 2 +- .../SPRINT_4200_0001_0001_triage_rest_api.md | 4 +- ...4200_0001_0002_excititor_policy_lattice.md | 2 +- ...SPRINT_4200_0002_0001_can_i_ship_header.md | 4 +- .../SPRINT_4200_0002_0002_verdict_ladder.md | 4 +- ...PRINT_4200_0002_0003_delta_compare_view.md | 4 +- .../SPRINT_4200_0002_0004_cli_compare.md | 2 +- .../SPRINT_4200_0002_0005_counterfactuals.md | 2 +- ...SPRINT_4200_0002_0006_delta_compare_api.md | 4 +- docs-archived/implplan/SPRINT_4300_SUMMARY.md | 4 +- ...RINT_4400_0001_0001_poe_ui_policy_hooks.md | 2 +- ...INT_4400_0001_0001_signed_delta_verdict.md | 2 +- ...PRINT_4500_0001_0003_binary_evidence_db.md | 2 +- ...RINT_4500_0002_0001_vex_conflict_studio.md | 2 +- ...NT_4500_0003_0001_operator_auditor_mode.md | 2 +- ...PRINT_4601_0001_0001_keyboard_shortcuts.md | 2 +- .../SPRINT_5100_0000_0000_epic_summary.md | 4 +- ...T_5100_0003_0001_sbom_interop_roundtrip.md | 2 +- ...NT_5100_0003_0002_no_egress_enforcement.md | 2 +- ...5100_0004_0001_unknowns_budget_ci_gates.md | 4 +- ...PRINT_5100_0005_0001_router_chaos_suite.md | 4 +- ...5100_0006_0001_audit_pack_export_import.md | 2 +- ...NT_5100_0007_0001_testing_strategy_2026.md | 4 +- ...RINT_5100_0007_0002_testkit_foundations.md | 2 +- .../SPRINT_5100_0007_0003_determinism_gate.md | 2 +- .../SPRINT_5100_0007_0004_storage_harness.md | 2 +- ...PRINT_5100_0007_0005_connector_fixtures.md | 2 +- ...RINT_5100_0007_0006_webservice_contract.md | 2 +- ...PRINT_5100_0007_0007_architecture_tests.md | 2 +- ...SPRINT_5100_0008_0001_competitor_parity.md | 2 +- .../SPRINT_5100_0009_0001_scanner_tests.md | 2 +- .../SPRINT_5100_0009_0002_concelier_tests.md | 2 +- .../SPRINT_5100_0009_0003_excititor_tests.md | 2 +- .../SPRINT_5100_0009_0004_policy_tests.md | 2 +- .../SPRINT_5100_0009_0005_authority_tests.md | 2 +- .../SPRINT_5100_0009_0006_signer_tests.md | 2 +- .../SPRINT_5100_0009_0007_attestor_tests.md | 2 +- .../SPRINT_5100_0009_0008_scheduler_tests.md | 2 +- .../SPRINT_5100_0009_0009_notify_tests.md | 2 +- .../SPRINT_5100_0009_0010_cli_tests.md | 2 +- .../SPRINT_5100_0009_0011_ui_tests.md | 2 +- ...INT_5100_0010_0001_evidencelocker_tests.md | 2 +- ...INT_5100_0010_0002_graph_timeline_tests.md | 2 +- ...T_5100_0010_0003_router_messaging_tests.md | 2 +- .../SPRINT_5100_0010_0004_airgap_tests.md | 2 +- ..._5200_0001_0001_starter_policy_template.md | 2 +- ...002_0003_version_comparator_integration.md | 6 +- docs-archived/implplan/SPRINT_6000_SUMMARY.md | 4 +- ...7000_0001_0001_competitive_benchmarking.md | 2 +- .../SPRINT_7000_0001_0003_explainability.md | 2 +- ...7000_0001_0004_three_layer_reachability.md | 2 +- ...7000_0002_0001_unified_confidence_model.md | 2 +- ...00_0002_0002_vulnerability_first_ux_api.md | 2 +- ...PRINT_7000_0003_0001_evidence_graph_api.md | 2 +- ...7000_0003_0002_reachability_minimap_api.md | 2 +- ...INT_7000_0003_0003_runtime_timeline_api.md | 2 +- ...INT_7000_0004_0001_progressive_fidelity.md | 2 +- ...NT_7000_0004_0002_evidence_size_budgets.md | 2 +- ...NT_7000_0005_0001_quality_kpis_tracking.md | 2 +- docs-archived/implplan/SPRINT_7000_SUMMARY.md | 4 +- ..._7100_0001_0001_trust_vector_foundation.md | 2 +- ..._7100_0001_0002_verdict_manifest_replay.md | 2 +- ...PRINT_7100_0002_0001_policy_gates_merge.md | 2 +- ...0_0002_0002_source_defaults_calibration.md | 2 +- .../SPRINT_7100_0003_0001_ui_trust_algebra.md | 2 +- ...100_0003_0002_integration_documentation.md | 4 +- docs-archived/implplan/SPRINT_7100_SUMMARY.md | 4 +- ...NT_7200_0001_0001_proof_moat_foundation.md | 2 +- ..._0012_0001_evidence_weighted_score_core.md | 2 +- ...PRINT_8200_REPRODUCIBILITY_EPIC_SUMMARY.md | 2 +- ..._0000_0000_deterministic_resolver_index.md | 2 +- .../SPRINT_9100_0001_0001_LB_resolver_core.md | 2 +- ...PRINT_9100_0001_0002_LB_cycle_cut_edges.md | 2 +- ...00_0001_0003_LB_edge_content_addressing.md | 2 +- ...NT_9100_0002_0001_ATTESTOR_final_digest.md | 2 +- ...SPRINT_9100_0002_0002_LB_verdict_digest.md | 2 +- ...NT_9100_0003_0001_POLICY_runtime_purity.md | 2 +- ...SPRINT_9100_0003_0002_LB_validation_nfc.md | 2 +- docs-archived/implplan/sprint_3200/README.md | 2 +- ...0000_0000_attestation_ecosystem_interop.md | 4 +- .../SPRINT_3200_IMPLEMENTATION_STATUS.md | 2 +- ...RINT_5100_0001_0001_run_manifest_schema.md | 2 +- ...NT_5100_0001_0002_evidence_index_schema.md | 4 +- ..._5100_0001_0003_offline_bundle_manifest.md | 2 +- ..._5100_0001_0004_golden_corpus_expansion.md | 2 +- ...00_0002_0001_canonicalization_utilities.md | 4 +- ...NT_5100_0002_0002_replay_runner_service.md | 4 +- ..._5100_0002_0003_delta_verdict_generator.md | 6 +- ...251226_001_SIGNER_fulcio_keyless_client.md | 4 +- ...RINT_20251226_003_BE_exception_approval.md | 2 +- ..._20251226_004_BE_cicd_signing_templates.md | 2 +- .../SPRINT_20251226_004_FE_risk_dashboard.md | 4 +- ...ing offline DSSE + in‑toto attestations.md | 0 ...5 - Handle RPM versions with EVR tuples.md | 0 ...shot advisories for time‑aware verdicts.md | 0 ... Building a Binary Fingerprint Database.md | 0 ...sassembly with Deterministic Signatures.md | 0 ...New Testing Enhancements for Stella Ops.md | 0 ...Default Triage with Attested Exceptions.md | 0 ...Benchmarks for a Testable Security Moat.md | 0 ...01-Dec-2025 - Common Developers guides.md | 0 ... - DSSE‑Signed Offline Scanner Updates.md | 0 ...eSQL Patterns for Each StellaOps Module.md | 0 ...2025 - Proof-Linked VEX User Interface.md | 0 ...racking UX Health with Time‑to‑Evidence.md | 0 ...urning SBOM Data Into Verifiable Proofs.md | 0 ...- Benchmarking a Testable Security Moat.md | 0 ... Converting SBOM Data into Proof Chains.md | 0 ...Designing Deterministic Reachability UX.md | 0 ...paring Proof‑Linked VEX UX Across Tools.md | 0 ...Scanner Differentiators and Evidence Moat.md | 0 ...eachability Benchmarks and Moat Metrics.md | 0 ...gning Traceable Evidence in Security UX.md | 0 ...Ranking Unknowns in Reachability Graphs.md | 0 ...Ranking Unknowns in Reachability Graphs.md | 0 ...nistic, Reachability‑First Architecture.md | 0 ...s on Smart‑Diff and Call‑Stack Analysis.md | 0 ...g Triage UX That Stays Quiet on Purpose.md | 0 ...ow to Build a Verifiable SBOM→VEX Chain.md | 0 ...ability Methods Worth Testing This Week.md | 0 ...ning Deterministic Vulnerability Scores.md | 0 ...Reliable Air‑Gap Verification Workflows.md | 0 ...ning Stella Ops’ Proof‑Linked Advantage.md | 0 ...Designing UX for Signed Evidence Trails.md | 0 ...25 - Caching Reachability the Smart Way.md | 0 ...Smart‑Diff and Provenance‑Rich Binaries.md | 0 ...- Stella DevOps UX Implementation Guide.md | 0 ...erministic Vulnerability Scoring Matrix.md | 0 ...25 - Measure UX Efficiency Through TTFS.md | 0 ...025 - Replay Fidelity as a Proof Metric.md | 0 ...art‑Diff Detects Meaningful Risk Shifts.md | 0 ...5 - Define a north star metric for TTFS.md | 0 ...ning the Call‑Stack Reachability Engine.md | 0 ...‑Diff - Defining Meaningful Risk Change.md | 0 ... - Add a dedicated “first_signal” event.md | 0 ...25 - Create a small ground‑truth corpus.md | 0 ...- Dissect triage and evidence workflows.md | 0 ...ate PostgreSQL vs MongoDB for StellaOps.md | 0 ...lding a Deeper Moat Beyond Reachability.md | 0 ... - Acceptance Tests Pack and Guardrails.md | 0 ....0 Momentum in Vulnerability Management.md | 2 +- ... - SBOM to VEX Proof Pipeline Blueprint.md | 0 ...A Failure Catalogue for StellaOps Tests.md | 0 ... Mid-Level .NET Onboarding (Quick Start).md | 0 ...rative Evidence Patterns for Stella Ops.md | 0 ...system Reality Test Cases for StellaOps.md | 0 ...- Implementor Guidelines for Stella Ops.md | 0 ... Rekor Receipt Checklist for Stella Ops.md | 0 ...-Nov-2025 - Standup Sprint Kickstarters.md | 0 ...5 - UI Micro-Interactions for StellaOps.md | 2 +- ...25 - Unknowns Decay & Triage Heuristics.md | 0 ... 202 + Retry‑After Backpressure Control.md | 0 ...odeling StellaRouter Performance Curves.md | 0 ...g Progress with Tiered Precision Curves.md | 0 ...Dec-2025 - Reachability Drift Detection.md | 4 +- ...lding a Deeper Moat Beyond Reachability.md | 6 +- ...ary Mapping and Call‑Stack Reachability.md | 0 ...crete Advances in Reachability Analysis.md | 0 ... - Designing a Layered EPSS v4 Database.md | 0 ...didate features mapped to moat strength.md | 0 ...lgebra and Lattice Engine Specification.md | 0 ...g Container Scanners Against Stella Ops.md | 0 ...pping Evidence Within Compiled Binaries.md | Bin .../2025-12-21-binaryindex/README.md | 0 ...ompetitive Analysis Technical Reference.md | 0 ...and Reproducibility Technical Reference.md | 2 +- ...eveloper Onboarding Technical Reference.md | 0 ...Offline and Air-Gap Technical Reference.md | 0 ...PostgreSQL Patterns Technical Reference.md | 0 ... and Evidence Chain Technical Reference.md | 0 ...achability Analysis Technical Reference.md | 0 ...- Rekor Integration Technical Reference.md | 0 ...c-2025 - Smart-Diff Technical Reference.md | 0 ... Quality Guardrails Technical Reference.md | 0 ...Triage and Unknowns Technical Reference.md | 0 ...nd Time-to-Evidence Technical Reference.md | 0 .../ARCHIVE_MANIFEST.md | 0 .../19-Dec-2025 - Moat #1.md | 0 .../19-Dec-2025 - Moat #2.md | 0 .../19-Dec-2025 - Moat #3.md | 0 .../19-Dec-2025 - Moat #4.md | 0 .../19-Dec-2025 - Moat #5.md | 0 .../19-Dec-2025 - Moat #6.md | 0 .../19-Dec-2025 - Moat #7.md | 0 ...ception management as auditable objects.md | 0 ...gers - Signed, Replayable Risk Verdicts.md | 0 ...wledge Snapshots and Time‑Travel Replay.md | 0 ...sk Budgets and Diff-Aware Release Gates.md | 0 .../ARCHIVE_MANIFEST.md | 0 ...025 - Stella Ops Reference Architecture.md | 0 .../20-Dec-2025 - Testing strategy.md | 0 .../2025-12-21-testing-strategy/README.md | 2 +- ...ayered binary + call‑stack reachability.md | 0 ...pping Evidence Within Compiled Binaries.md | 0 ...inable Triage and Proof-Linked Evidence.md | 0 ...g Proof‑Linked UX in Security Workflows.md | 4 +- ...tterns worth borrowing from top scanners.md | 0 ...ow Top Scanners Shape Evidence‑First UX.md | 0 ...-2026 - Competitor Scanner UI Breakdown.md | 0 .../2025-12-23-sprint-4200/README.md | 0 .../SPRINT_4200_SIGN_OFF.md | 8 +- ... - Distinctive Edge for Docker Scanning.md | 0 ...- Hybrid Binary and Call‑Graph Analysis.md | 0 ...- Implementing Diff‑Aware Release Gates.md | 0 ...Aware Releases and Auditable Exceptions.md | 0 ...6 - Reachability as Cryptographic Proof.md | 0 ...Smart‑Diff as a Core Evidence Primitive.md | 0 .../2025-12-26-superseded/README.md | 0 ...25 - Triage UI Lessons from Competitors.md | 0 ...5 - Visual Diffs for Explainable Triage.md | 0 ...-Dec-2026 - Visualizing the Risk Budget.md | 0 .../2025-12-26-triage-advisories/README.md | 0 ...6 - Weighted Confidence for VEX Sources.md | 0 .../2025-12-26-vex-scoring/README.md | 0 ...dence_first_container_security_analysis.md | 0 ...deterministic_verdicts_and_sbom_lineage.md | 6 +- ... Designing Explainable Triage Workflows.md | 0 ...5 - Getting Distro Backport Logic Right.md | 0 ...g Container Scanners Against Stella Ops.md | 0 ...art Diff - Reproducibility as a Feature.md | 0 .../22-Dec-2026 - Better testing strategy.md | 2 +- ...uilding a Trust Lattice for VEX Sources.md | 0 ...026 - UI Patterns for Triage and Replay.md | 0 .../PROOF_MOATS_ARCHIVAL_SUMMARY.md | 4 +- ...26 - Binary Mapping as Attestable Proof.md | 0 ...Designing Replayable Verdict Interfaces.md | 0 ...tation Summary - Competitor Gap Closure.md | 2 +- ... Proof‑Driven Moats Stella Ops Can Ship.md | 0 ...5 - Deterministic Resolver Architecture.md | 0 ...ec-2025 - Evidence-Weighted Score Model.md | 0 ...Building a Deterministic Verdict Engine.md | 0 ...cing Canonical JSON for Stable Verdicts.md | 0 ...olving Evidence Models for Reachability.md | 0 ...- Planning Keyless Signing for Verdicts.md | 0 ...stant as Proof-Carrying Evidence Engine.md | 0 .../26-Dec-2025 - AI Surfacing UX Patterns.md | 0 ...- SBOM Spine and Deterministic Evidence.md | 0 ...ext - SBOM Spine and Deterministic Evidence.md | 0 ...6 - Mapping a Binary Intelligence Graph.md | 0 ...ns Gap Analysis and Implementation Plan.md | 0 ...5 - DSSE-Signed Offline Scanner Updates.md | 0 ...roof-Linked VEX UI Developer Guidelines.md | 0 ...torage Blueprint for PostgreSQL Modules.md | 0 ...ec-2025 - Time-to-Evidence (TTE) Metric.md | 0 ...ble Proof Spine Receipts and Benchmarks.md | 0 ...25 - embedded in-toto provenance events.md | 0 ...025 - function-level vex explainability.md | 0 ...l serdica census excel import blueprint.md | 0 ...roof spine for explainable quiet alerts.md | 0 ...p with deterministic diff-aware rescans.md | 0 ...-Nov-2025 - layer-sbom cache hash reuse.md | 0 ...025 - multi-runtime reachability corpus.md | 0 ...nical persistence cyclonedx interchange.md | 0 ...plan for quiet scans provenance diff-ci.md | 0 .../17-Nov-2025 - SBOM-Provenance-Spine.md | 0 ...17-Nov-2025 - Stripped-ELF-Reachability.md | 0 ...8-Nov-2025 - Binary-Reachability-Engine.md | 0 .../18-Nov-2025 - CSharp-Binary-Analyzer.md | 0 .../18-Nov-2025 - Patch-Oracles.md | 0 .../18-Nov-2025 - SBOM-Provenance-Spine.md | 0 .../18-Nov-2025 - Unknowns-Registry.md | 0 ...ch ELF Build‑IDs for Stable PURL Mapping.md | 0 ...array Constructors as Reachability Roots.md | 0 ...ity & Moat Watch — Verified 2025 Updates.md | 0 ...y Reachability with PURL‑Resolved Edges.md | 0 ...2025 - Where Stella Ops Can Truly Lead.md | 0 ...ng Determinism in Vulnerability Scoring.md | 0 ...ishing a Reachability Benchmark Dataset.md | 0 ...23-Nov-2025 - Stella Ops vs Competitors.md | 0 ... Binary Reachability via DSSE Envelopes.md | 0 ...Bridging OpenVEX and CycloneDX for .NET.md | 0 ... a Deterministic Reachability Benchmark.md | 0 ...SS v4.0 Score Receipts for Transparency.md | 0 ...r‑gap deployment playbook for StellaOps.md | 0 ...e VEX 'Not Affected' Claims with Proofs.md | 0 ...Half-Life Confidence Decay for Unknowns.md | 0 ...h‑Stable Graph Revisions Across Systems.md | 0 ...ne‑kit attestation essentials checklist.md | 0 ...siting Determinism in SBOM→VEX Pipeline.md | 0 ...M to VEX - Building a Transparent Chain.md | 0 ...ndling Rekor v2 and DSSE Air‑Gap Limits.md | 0 ...025 - Opening Up a Reachability Dataset.md | 0 ...ph Revision IDs as Public Trust Anchors.md | 0 ...25 - Blueprint for a 2026‑Ready Scanner.md | 0 ... DSSE and Rekor Envelope Size Heuristic.md | 0 ...ure Brief - SBOM‑First, VEX‑Ready Spine.md | 0 ...bility Layer for Vulnerability Verdicts.md | 0 ...5 - Late‑November SBOM & VEX competitor.md | 0 ... Making Graphs Understandable to Humans.md | 0 ... Ambiguity Through an Unknowns Registry.md | 0 ...g DSSE Batch Sizes for Reliable Logging.md | 0 ...ov-2025 - Rekor Envelope Size Heuristic.md | 0 ... Binary Reachability via DSSE Envelopes.md | 0 ...tication and Authorization Architecture.md | 0 ...CLI Developer Experience and Command UX.md | 0 ...25 - Concelier Advisory Ingestion Model.md | 0 ... - Evidence Bundle and Replay Contracts.md | 0 ... - Export Center and Reporting Strategy.md | 0 ...ndings Ledger and Immutable Audit Trail.md | 0 ...Graph Analytics and Dependency Insights.md | 0 ...-2025 - Mirror and Offline Kit Strategy.md | 0 ... Notification Rules and Alerting Engine.md | 0 ...hestrator Event Model and Job Lifecycle.md | 0 ...n Architecture & Extensibility Patterns.md | 0 ...25 - Policy Simulation and Shadow Gates.md | 0 ...me Posture and Observation with Zastava.md | 0 ...overeign Crypto for Regional Compliance.md | 0 ... Task Pack Orchestration and Automation.md | 0 ... - Telemetry and Observability Patterns.md | 0 ...ility Triage UX & VEX-First Decisioning.md | 0 ...nce Tests Pack for StellaOps Guardrails.md | 0 ....0 Momentum in Vulnerability Management.md | 0 ... - SBOM to VEX Proof Pipeline Blueprint.md | 0 ...A Failure Catalogue for StellaOps Tests.md | 0 ... Mid-Level .NET Onboarding (Quick Start).md | 0 ...rative Evidence Patterns for Stella Ops.md | 0 ...Nov-2025 - Ecosystem Reality Test Cases.md | 0 ...- Implementor Guidelines for Stella Ops.md | 0 ...eachability Benchmark Fixtures Snapshot.md | 0 ... Rekor Receipt Checklist for Stella Ops.md | 0 ...-Nov-2025 - Standup Sprint Kickstarters.md | 0 ...5 - UI Micro-Interactions for StellaOps.md | 0 ...25 - Unknowns Decay & Triage Heuristics.md | 0 ...ary Diff Signatures for Patch Detection.md | 0 ...lding a Golden Set for Patch Validation.md | 0 ... Designing a Deterministic VEX Resolver.md | 0 ...c-2025 - Evidence‑Gated AI Explanations.md | 0 ...ISORY_20251229_SBOM_LINEAGE_AND_TESTING.md | 0 .../ADVISORY_SBOM_LINEAGE_GRAPH.md | 0 ...ALYSIS_20251229_lineage_crossdistro_gap.md | 0 ...istic Evidence and Verdict Architecture.md | 0 ...ff-Aware Release Gates and Risk Budgets.md | 0 docs/api/score-replay-api.md | 2 +- docs/api/smart-diff-types.md | 2 +- docs/api/unknowns-api.md | 2 +- .../competitive-implementation-milestones.md | 4 +- docs/benchmarks/fidelity-metrics.md | 2 +- docs/benchmarks/ground-truth-corpus.md | 4 +- docs/benchmarks/signals/bench-determinism.md | 2 +- docs/benchmarks/smart-diff-wii.md | 2 +- .../better-testing-strategy-samples.md | 2 +- docs/benchmarks/tiered-precision-curves.md | 2 +- docs/db/schemas/scan-metrics.md | 2 +- .../contributing/corpus-contribution-guide.md | 2 +- docs/dev/onboarding/dev-quickstart.md | 2 +- docs/dev/performance-testing-playbook.md | 2 +- docs/implplan/AGENTS.md | 4 +- .../guides/advisory-implementation-roadmap.md | 2 +- .../guides/offline-parity-verification.md | 4 +- .../attestor/proof-chain-specification.md | 2 +- .../modules/attestor/proof-spine-algorithm.md | 2 +- .../attestor/rekor-verification-design.md | 2 +- docs/modules/attestor/transparency.md | 6 +- .../gaps/2025-12-04-auth-gaps-au1-au10.md | 2 +- .../2025-12-04-rekor-receipt-gaps-rr1-rr10.md | 2 +- docs/modules/authority/verdict-manifest.md | 2 +- docs/modules/binary-index/architecture.md | 2 +- .../evidence-locker/bundle-packaging.md | 2 +- .../evidence-locker/eb-gaps-161-007-plan.md | 2 +- docs/modules/excititor/trust-lattice.md | 2 +- docs/modules/export-center/architecture.md | 4 +- docs/modules/export-center/determinism.md | 2 +- docs/modules/findings-ledger/gaps-FL1-FL10.md | 2 +- docs/modules/gateway/architecture.md | 2 +- docs/modules/notify/gaps-nr1-nr10.md | 2 +- .../modules/platform/architecture-overview.md | 16 +- .../explainable-triage-implementation-plan.md | 2 +- docs/modules/platform/moat-gap-analysis.md | 2 +- .../proof-driven-moats-architecture.md | 6 +- docs/modules/policy/architecture.md | 6 +- .../policy/contracts/spine-versioning-plan.md | 2 +- docs/modules/policy/cvss-v4.md | 2 +- .../policy/guides/score-policy-yaml.md | 2 +- docs/modules/reach-graph/guides/gates.md | 2 +- docs/modules/reach-graph/guides/lead.md | 2 +- docs/modules/scanner/AGENTS.md | 8 +- .../design/competitor-ingest-normalization.md | 2 +- .../design/standards-convergence-roadmap.md | 2 +- docs/modules/scanner/epss-integration.md | 2 +- docs/modules/scanner/reachability-drift.md | 2 +- docs/modules/scheduler/hlc-migration-guide.md | 2 +- docs/modules/signals/architecture.md | 2 +- .../decay/2025-12-01-confidence-decay.md | 2 +- .../2025-12-01-heuristic-catalog.md | 2 +- .../unknowns/2025-12-01-unknowns-registry.md | 2 +- docs/modules/taskrunner/architecture.md | 2 +- .../contracts/telemetry-gaps-remediation.md | 2 +- docs/modules/telemetry/guides/fn-drift.md | 2 +- docs/modules/telemetry/ttfs-architecture.md | 2 +- docs/modules/ui/architecture.md | 2 +- docs/modules/ui/micro-interactions-map.md | 2 +- docs/modules/vuln-explorer/architecture.md | 2 +- .../zastava/gaps/2025-12-02-zr-gaps.md | 2 +- .../router-chaos-testing-runbook.md | 4 +- docs/operations/unknowns-queue-runbook.md | 2 +- docs/product/PROOF_MOATS_FINAL_SIGNOFF.md | 2 +- .../advisories/08-Jan-2026 - AI moats.md | 545 ++++++++++++++++++ docs/product/claims-citation-index.md | 6 +- docs/product/competitive-landscape.md | 4 +- .../adr/0044-binary-delta-signatures.md | 2 +- .../architecture/determinism-specification.md | 2 +- docs/technical/testing/TESTING_MASTER_PLAN.md | 2 +- .../testing-enhancements-architecture.md | 2 +- ...sting-quality-guardrails-implementation.md | 4 +- .../testing/testing-strategy-models.md | 4 +- .../StellaOps.AirGap.Importer/AGENTS.md | 2 +- src/Attestor/AGENTS.md | 2 +- src/Attestor/POE_PREDICATE_SPEC.md | 2 +- .../StellaOps.Attestor.ProofChain/AGENTS.md | 2 +- .../AGENTS.md | 2 +- .../AGENTS.md | 2 +- .../StellaOps.Attestor.TrustVerdict/AGENTS.md | 2 +- .../AGENTS.md | 2 +- .../AGENTS.md | 2 +- src/BinaryIndex/AGENTS.md | 2 +- .../StellaOps.BinaryIndex.DeltaSig/AGENTS.md | 2 +- src/Cli/OFFLINE_POE_VERIFICATION.md | 2 +- src/Cli/StellaOps.Cli/AGENTS.md | 2 +- src/Concelier/AGENTS.md | 4 +- .../AGENTS.md | 2 +- .../AGENTS.md | 2 +- src/Excititor/AGENTS.md | 2 +- src/Gateway/AGENTS.md | 2 +- src/Policy/AGENTS.md | 2 +- src/Policy/StellaOps.Policy.Gateway/AGENTS.md | 2 +- .../StellaOps.Policy.Exceptions/AGENTS.md | 4 +- .../StellaOps.Policy.Unknowns/AGENTS.md | 2 +- src/Scanner/AGENTS.md | 2 +- src/Scanner/AGENTS_SCORE_PROOFS.md | 2 +- .../SUBGRAPH_EXTRACTION.md | 2 +- .../StellaOps.Scanner.SmartDiff/AGENTS.md | 2 +- .../StellaOps.Scanner.Triage/AGENTS.md | 4 +- src/TaskRunner/StellaOps.TaskRunner/AGENTS.md | 2 +- .../StellaOps.Integration.Unknowns/AGENTS.md | 2 +- .../__Benchmarks/proof-chain/README.md | 2 +- .../reachability-benchmark/AGENTS.md | 6 +- 599 files changed, 1110 insertions(+), 565 deletions(-) rename docs-archived/{product-advisories => product/advisories}/02-Dec-2025 - Designing offline DSSE + in‑toto attestations.md (100%) rename docs-archived/{product-advisories => product/advisories}/02-Dec-2025 - Handle RPM versions with EVR tuples.md (100%) rename docs-archived/{product-advisories => product/advisories}/02-Dec-2025 - Snapshot advisories for time‑aware verdicts.md (100%) rename docs-archived/{product-advisories => product/advisories}/03-Dec-2026 - Building a Binary Fingerprint Database.md (100%) rename docs-archived/{product-advisories => product/advisories}/03-Dec-2026 - C# Disassembly with Deterministic Signatures.md (100%) rename docs-archived/{product-advisories => product/advisories}/05-Dec-2026 - New Testing Enhancements for Stella Ops.md (100%) rename docs-archived/{product-advisories => product/advisories}/06-Jan-2026 - Quiet-by-Default Triage with Attested Exceptions.md (100%) rename docs-archived/{product-advisories => product/advisories}/14-Dec-2025/01-Dec-2025 - Benchmarks for a Testable Security Moat.md (100%) rename docs-archived/{product-advisories => product/advisories}/14-Dec-2025/01-Dec-2025 - Common Developers guides.md (100%) rename docs-archived/{product-advisories => product/advisories}/14-Dec-2025/01-Dec-2025 - DSSE‑Signed Offline Scanner Updates.md (100%) rename docs-archived/{product-advisories => product/advisories}/14-Dec-2025/01-Dec-2025 - PostgreSQL Patterns for Each StellaOps Module.md (100%) rename docs-archived/{product-advisories => product/advisories}/14-Dec-2025/01-Dec-2025 - Proof-Linked VEX User Interface.md (100%) rename docs-archived/{product-advisories => product/advisories}/14-Dec-2025/01-Dec-2025 - Tracking UX Health with Time‑to‑Evidence.md (100%) rename docs-archived/{product-advisories => product/advisories}/14-Dec-2025/01-Dec-2025 - Turning SBOM Data Into Verifiable Proofs.md (100%) rename docs-archived/{product-advisories => product/advisories}/14-Dec-2025/02-Dec-2025 - Benchmarking a Testable Security Moat.md (100%) rename docs-archived/{product-advisories => product/advisories}/14-Dec-2025/02-Dec-2025 - Converting SBOM Data into Proof Chains.md (100%) rename docs-archived/{product-advisories => product/advisories}/14-Dec-2025/02-Dec-2025 - Designing Deterministic Reachability UX.md (100%) rename docs-archived/{product-advisories => product/advisories}/14-Dec-2025/03-Dec-2025 - Comparing Proof‑Linked VEX UX Across Tools.md (100%) rename docs-archived/{product-advisories => product/advisories}/14-Dec-2025/03-Dec-2025 - Next‑Gen Scanner Differentiators and Evidence Moat.md (100%) rename docs-archived/{product-advisories => product/advisories}/14-Dec-2025/03-Dec-2025 - Reachability Benchmarks and Moat Metrics.md (100%) rename docs-archived/{product-advisories => product/advisories}/14-Dec-2025/04-Dec-2025 - Designing Traceable Evidence in Security UX.md (100%) rename docs-archived/{product-advisories => product/advisories}/14-Dec-2025/04-Dec-2025 - Ranking Unknowns in Reachability Graphs.md (100%) rename docs-archived/{product-advisories => product/advisories}/14-Dec-2025/04-Dec-2025- Ranking Unknowns in Reachability Graphs.md (100%) rename docs-archived/{product-advisories => product/advisories}/14-Dec-2025/05-Dec-2025 - Building a Deterministic, Reachability‑First Architecture.md (100%) rename docs-archived/{product-advisories => product/advisories}/14-Dec-2025/05-Dec-2025 - Design Notes on Smart‑Diff and Call‑Stack Analysis.md (100%) rename docs-archived/{product-advisories => product/advisories}/14-Dec-2025/05-Dec-2025 - Designing Triage UX That Stays Quiet on Purpose.md (100%) rename docs-archived/{product-advisories => product/advisories}/14-Dec-2025/06-Dec-2025 - How to Build a Verifiable SBOM→VEX Chain.md (100%) rename docs-archived/{product-advisories => product/advisories}/14-Dec-2025/06-Dec-2025 - Reachability Methods Worth Testing This Week.md (100%) rename docs-archived/{product-advisories => product/advisories}/14-Dec-2025/07-Dec-2025 - Designing Deterministic Vulnerability Scores.md (100%) rename docs-archived/{product-advisories => product/advisories}/14-Dec-2025/07-Dec-2025 - Reliable Air‑Gap Verification Workflows.md (100%) rename docs-archived/{product-advisories => product/advisories}/14-Dec-2025/08-Dec-2025 - Defining Stella Ops’ Proof‑Linked Advantage.md (100%) rename docs-archived/{product-advisories => product/advisories}/14-Dec-2025/08-Dec-2025 - Designing UX for Signed Evidence Trails.md (100%) rename docs-archived/{product-advisories => product/advisories}/14-Dec-2025/09-Dec-2025 - Caching Reachability the Smart Way.md (100%) rename docs-archived/{product-advisories => product/advisories}/14-Dec-2025/09-Dec-2025 - Smart‑Diff and Provenance‑Rich Binaries.md (100%) rename docs-archived/{product-advisories => product/advisories}/14-Dec-2025/11-Dec-2025 - Stella DevOps UX Implementation Guide.md (100%) rename docs-archived/{product-advisories => product/advisories}/14-Dec-2025/12-Dec-2025 - Designing a Deterministic Vulnerability Scoring Matrix.md (100%) rename docs-archived/{product-advisories => product/advisories}/14-Dec-2025/12-Dec-2025 - Measure UX Efficiency Through TTFS.md (100%) rename docs-archived/{product-advisories => product/advisories}/14-Dec-2025/12-Dec-2025 - Replay Fidelity as a Proof Metric.md (100%) rename docs-archived/{product-advisories => product/advisories}/14-Dec-2025/12-Dec-2025 - Smart‑Diff Detects Meaningful Risk Shifts.md (100%) rename docs-archived/{product-advisories => product/advisories}/14-Dec-2025/13-Dec-2025 - Define a north star metric for TTFS.md (100%) rename docs-archived/{product-advisories => product/advisories}/14-Dec-2025/13-Dec-2025 - Designing the Call‑Stack Reachability Engine.md (100%) rename docs-archived/{product-advisories => product/advisories}/14-Dec-2025/13-Dec-2025 - Smart‑Diff - Defining Meaningful Risk Change.md (100%) rename docs-archived/{product-advisories => product/advisories}/14-Dec-2025/14-Dec-2025 - Add a dedicated “first_signal” event.md (100%) rename docs-archived/{product-advisories => product/advisories}/14-Dec-2025/14-Dec-2025 - Create a small ground‑truth corpus.md (100%) rename docs-archived/{product-advisories => product/advisories}/14-Dec-2025/14-Dec-2025 - Dissect triage and evidence workflows.md (100%) rename docs-archived/{product-advisories => product/advisories}/14-Dec-2025/14-Dec-2025 - Evaluate PostgreSQL vs MongoDB for StellaOps.md (100%) rename docs-archived/{product-advisories => product/advisories}/14-Dec-2025/16-Dec-2025 - Building a Deeper Moat Beyond Reachability.md (100%) rename docs-archived/{product-advisories => product/advisories}/14-Dec-2025/29-Nov-2025 - Acceptance Tests Pack and Guardrails.md (100%) rename docs-archived/{product-advisories => product/advisories}/14-Dec-2025/29-Nov-2025 - CVSS v4.0 Momentum in Vulnerability Management.md (93%) rename docs-archived/{product-advisories => product/advisories}/14-Dec-2025/29-Nov-2025 - SBOM to VEX Proof Pipeline Blueprint.md (100%) rename docs-archived/{product-advisories => product/advisories}/14-Dec-2025/29-Nov-2025 - SCA Failure Catalogue for StellaOps Tests.md (100%) rename docs-archived/{product-advisories => product/advisories}/14-Dec-2025/29-Nov-2025 - StellaOps – Mid-Level .NET Onboarding (Quick Start).md (100%) rename docs-archived/{product-advisories => product/advisories}/14-Dec-2025/30-Nov-2025 - Comparative Evidence Patterns for Stella Ops.md (100%) rename docs-archived/{product-advisories => product/advisories}/14-Dec-2025/30-Nov-2025 - Ecosystem Reality Test Cases for StellaOps.md (100%) rename docs-archived/{product-advisories => product/advisories}/14-Dec-2025/30-Nov-2025 - Implementor Guidelines for Stella Ops.md (100%) rename docs-archived/{product-advisories => product/advisories}/14-Dec-2025/30-Nov-2025 - Rekor Receipt Checklist for Stella Ops.md (100%) rename docs-archived/{product-advisories => product/advisories}/14-Dec-2025/30-Nov-2025 - Standup Sprint Kickstarters.md (100%) rename docs-archived/{product-advisories => product/advisories}/14-Dec-2025/30-Nov-2025 - UI Micro-Interactions for StellaOps.md (98%) rename docs-archived/{product-advisories => product/advisories}/14-Dec-2025/30-Nov-2025 - Unknowns Decay & Triage Heuristics.md (100%) rename docs-archived/{product-advisories => product/advisories}/15-Dec-2025 - Designing 202 + Retry‑After Backpressure Control.md (100%) rename docs-archived/{product-advisories => product/advisories}/15-Dec-2025 - Modeling StellaRouter Performance Curves.md (100%) rename docs-archived/{product-advisories => product/advisories}/16-Dec-2025 - Measuring Progress with Tiered Precision Curves.md (100%) rename docs-archived/{product-advisories => product/advisories}/17-Dec-2025 - Reachability Drift Detection.md (99%) rename docs-archived/{product-advisories => product/advisories}/17-Dec-2025/16-Dec-2025 - Building a Deeper Moat Beyond Reachability.md (96%) rename docs-archived/{product-advisories => product/advisories}/18-Dec-2025 - Building Better Binary Mapping and Call‑Stack Reachability.md (100%) rename docs-archived/{product-advisories => product/advisories}/18-Dec-2025 - Concrete Advances in Reachability Analysis.md (100%) rename docs-archived/{product-advisories => product/advisories}/18-Dec-2025/18-Dec-2025 - Designing a Layered EPSS v4 Database.md (100%) rename docs-archived/{product-advisories => product/advisories}/19-Dec-2025 - Stella Ops candidate features mapped to moat strength.md (100%) rename docs-archived/{product-advisories => product/advisories}/19-Dec-2025 - Trust Algebra and Lattice Engine Specification.md (100%) rename docs-archived/{product-advisories => product/advisories}/19-Dec-2025/19-Dec-2025 - Benchmarking Container Scanners Against Stella Ops.md (100%) rename docs-archived/{product-advisories => product/advisories}/2025-12-21-binaryindex/21-Dec-2025 - Mapping Evidence Within Compiled Binaries.md (100%) rename docs-archived/{product-advisories => product/advisories}/2025-12-21-binaryindex/README.md (100%) rename docs-archived/{product-advisories => product/advisories}/2025-12-21-moat-gap-closure/14-Dec-2025 - CVSS and Competitive Analysis Technical Reference.md (100%) rename docs-archived/{product-advisories => product/advisories}/2025-12-21-moat-gap-closure/14-Dec-2025 - Determinism and Reproducibility Technical Reference.md (99%) rename docs-archived/{product-advisories => product/advisories}/2025-12-21-moat-gap-closure/14-Dec-2025 - Developer Onboarding Technical Reference.md (100%) rename docs-archived/{product-advisories => product/advisories}/2025-12-21-moat-gap-closure/14-Dec-2025 - Offline and Air-Gap Technical Reference.md (100%) rename docs-archived/{product-advisories => product/advisories}/2025-12-21-moat-gap-closure/14-Dec-2025 - PostgreSQL Patterns Technical Reference.md (100%) rename docs-archived/{product-advisories => product/advisories}/2025-12-21-moat-gap-closure/14-Dec-2025 - Proof and Evidence Chain Technical Reference.md (100%) rename docs-archived/{product-advisories => product/advisories}/2025-12-21-moat-gap-closure/14-Dec-2025 - Reachability Analysis Technical Reference.md (100%) rename docs-archived/{product-advisories => product/advisories}/2025-12-21-moat-gap-closure/14-Dec-2025 - Rekor Integration Technical Reference.md (100%) rename docs-archived/{product-advisories => product/advisories}/2025-12-21-moat-gap-closure/14-Dec-2025 - Smart-Diff Technical Reference.md (100%) rename docs-archived/{product-advisories => product/advisories}/2025-12-21-moat-gap-closure/14-Dec-2025 - Testing and Quality Guardrails Technical Reference.md (100%) rename docs-archived/{product-advisories => product/advisories}/2025-12-21-moat-gap-closure/14-Dec-2025 - Triage and Unknowns Technical Reference.md (100%) rename docs-archived/{product-advisories => product/advisories}/2025-12-21-moat-gap-closure/14-Dec-2025 - UX and Time-to-Evidence Technical Reference.md (100%) rename docs-archived/{product-advisories => product/advisories}/2025-12-21-moat-gap-closure/ARCHIVE_MANIFEST.md (100%) rename docs-archived/{product-advisories => product/advisories}/2025-12-21-moat-phase2/19-Dec-2025 - Moat #1.md (100%) rename docs-archived/{product-advisories => product/advisories}/2025-12-21-moat-phase2/19-Dec-2025 - Moat #2.md (100%) rename docs-archived/{product-advisories => product/advisories}/2025-12-21-moat-phase2/19-Dec-2025 - Moat #3.md (100%) rename docs-archived/{product-advisories => product/advisories}/2025-12-21-moat-phase2/19-Dec-2025 - Moat #4.md (100%) rename docs-archived/{product-advisories => product/advisories}/2025-12-21-moat-phase2/19-Dec-2025 - Moat #5.md (100%) rename docs-archived/{product-advisories => product/advisories}/2025-12-21-moat-phase2/19-Dec-2025 - Moat #6.md (100%) rename docs-archived/{product-advisories => product/advisories}/2025-12-21-moat-phase2/19-Dec-2025 - Moat #7.md (100%) rename docs-archived/{product-advisories => product/advisories}/2025-12-21-moat-phase2/20-Dec-2025 - Moat Explanation - Exception management as auditable objects.md (100%) rename docs-archived/{product-advisories => product/advisories}/2025-12-21-moat-phase2/20-Dec-2025 - Moat Explanation - Guidelines for Product and Development Managers - Signed, Replayable Risk Verdicts.md (100%) rename docs-archived/{product-advisories => product/advisories}/2025-12-21-moat-phase2/20-Dec-2025 - Moat Explanation - Knowledge Snapshots and Time‑Travel Replay.md (100%) rename docs-archived/{product-advisories => product/advisories}/2025-12-21-moat-phase2/20-Dec-2025 - Moat Explanation - Risk Budgets and Diff-Aware Release Gates.md (100%) rename docs-archived/{product-advisories => product/advisories}/2025-12-21-moat-phase2/ARCHIVE_MANIFEST.md (100%) rename docs-archived/{product-advisories => product/advisories}/2025-12-21-reference-architecture/20-Dec-2025 - Stella Ops Reference Architecture.md (100%) rename docs-archived/{product-advisories => product/advisories}/2025-12-21-testing-strategy/20-Dec-2025 - Testing strategy.md (100%) rename docs-archived/{product-advisories => product/advisories}/2025-12-21-testing-strategy/README.md (97%) rename docs-archived/{product-advisories => product/advisories}/2025-12-22-binary-reachability/20-Dec-2025 - Layered binary + call‑stack reachability.md (100%) rename docs-archived/{product-advisories => product/advisories}/2025-12-22-binaryindex/21-Dec-2025 - Mapping Evidence Within Compiled Binaries.md (100%) rename docs-archived/{product-advisories => product/advisories}/2025-12-22-explainable-triage/18-Dec-2025 - Designing Explainable Triage and Proof-Linked Evidence.md (100%) rename docs-archived/{product-advisories => product/advisories}/2025-12-22-ux-sprints/16-Dec-2025 - Reimagining Proof‑Linked UX in Security Workflows.md (96%) rename docs-archived/{product-advisories => product/advisories}/2025-12-22-ux-sprints/20-Dec-2025 - Branch · UX patterns worth borrowing from top scanners.md (100%) rename docs-archived/{product-advisories => product/advisories}/2025-12-22-ux-sprints/21-Dec-2025 - How Top Scanners Shape Evidence‑First UX.md (100%) rename docs-archived/{product-advisories => product/advisories}/2025-12-23-sprint-4200/23-Dec-2026 - Competitor Scanner UI Breakdown.md (100%) rename docs-archived/{product-advisories => product/advisories}/2025-12-23-sprint-4200/README.md (100%) rename docs-archived/{product-advisories => product/advisories}/2025-12-23-sprint-4200/SPRINT_4200_SIGN_OFF.md (98%) rename docs-archived/{product-advisories => product/advisories}/2025-12-23-testing-attestation-strategy/23-Dec-2026 - Distinctive Edge for Docker Scanning.md (100%) rename docs-archived/{product-advisories => product/advisories}/2025-12-26-empty-advisories/25-Dec-2025 - Hybrid Binary and Call‑Graph Analysis.md (100%) rename docs-archived/{product-advisories => product/advisories}/2025-12-26-superseded/25-Dec-2025 - Implementing Diff‑Aware Release Gates.md (100%) rename docs-archived/{product-advisories => product/advisories}/2025-12-26-superseded/26-Dec-2026 - Diff‑Aware Releases and Auditable Exceptions.md (100%) rename docs-archived/{product-advisories => product/advisories}/2025-12-26-superseded/26-Dec-2026 - Reachability as Cryptographic Proof.md (100%) rename docs-archived/{product-advisories => product/advisories}/2025-12-26-superseded/26-Dec-2026 - Smart‑Diff as a Core Evidence Primitive.md (100%) rename docs-archived/{product-advisories => product/advisories}/2025-12-26-superseded/README.md (100%) rename docs-archived/{product-advisories => product/advisories}/2025-12-26-triage-advisories/25-Dec-2025 - Triage UI Lessons from Competitors.md (100%) rename docs-archived/{product-advisories => product/advisories}/2025-12-26-triage-advisories/25-Dec-2025 - Visual Diffs for Explainable Triage.md (100%) rename docs-archived/{product-advisories => product/advisories}/2025-12-26-triage-advisories/26-Dec-2026 - Visualizing the Risk Budget.md (100%) rename docs-archived/{product-advisories => product/advisories}/2025-12-26-triage-advisories/README.md (100%) rename docs-archived/{product-advisories => product/advisories}/2025-12-26-vex-scoring/26-Dec-2026 - Weighted Confidence for VEX Sources.md (100%) rename docs-archived/{product-advisories => product/advisories}/2025-12-26-vex-scoring/README.md (100%) rename docs-archived/{product-advisories => product/advisories}/2025-12-28_evidence_first_container_security_analysis.md (100%) rename docs-archived/{product-advisories => product/advisories}/2025-12-29_deterministic_verdicts_and_sbom_lineage.md (96%) rename docs-archived/{product-advisories => product/advisories}/21-Dec-2025 - Designing Explainable Triage Workflows.md (100%) rename docs-archived/{product-advisories => product/advisories}/22-Dec-2025 - Getting Distro Backport Logic Right.md (100%) rename docs-archived/{product-advisories => product/advisories}/22-Dec-2025/19-Dec-2025 - Benchmarking Container Scanners Against Stella Ops.md (100%) rename docs-archived/{product-advisories => product/advisories}/22-Dec-2025/21-Dec-2025 - Smart Diff - Reproducibility as a Feature.md (100%) rename docs-archived/{product-advisories => product/advisories}/22-Dec-2026 - Better testing strategy.md (99%) rename docs-archived/{product-advisories => product/advisories}/22-Dec-2026 - Building a Trust Lattice for VEX Sources.md (100%) rename docs-archived/{product-advisories => product/advisories}/22-Dec-2026 - UI Patterns for Triage and Replay.md (100%) rename docs-archived/{product-advisories => product/advisories}/23-Dec-2025/PROOF_MOATS_ARCHIVAL_SUMMARY.md (98%) rename docs-archived/{product-advisories => product/advisories}/23-Dec-2026 - Binary Mapping as Attestable Proof.md (100%) rename docs-archived/{product-advisories => product/advisories}/23-Dec-2026 - Designing Replayable Verdict Interfaces.md (100%) rename docs-archived/{product-advisories => product/advisories}/23-Dec-2026 - Implementation Summary - Competitor Gap Closure.md (99%) rename docs-archived/{product-advisories => product/advisories}/23-Dec-2026 - Proof‑Driven Moats Stella Ops Can Ship.md (100%) rename docs-archived/{product-advisories => product/advisories}/24-Dec-2025 - Deterministic Resolver Architecture.md (100%) rename docs-archived/{product-advisories => product/advisories}/24-Dec-2025 - Evidence-Weighted Score Model.md (100%) rename docs-archived/{product-advisories => product/advisories}/25-Dec-2025 - Building a Deterministic Verdict Engine.md (100%) rename docs-archived/{product-advisories => product/advisories}/25-Dec-2025 - Enforcing Canonical JSON for Stable Verdicts.md (100%) rename docs-archived/{product-advisories => product/advisories}/25-Dec-2025 - Evolving Evidence Models for Reachability.md (100%) rename docs-archived/{product-advisories => product/advisories}/25-Dec-2025 - Planning Keyless Signing for Verdicts.md (100%) rename docs-archived/{product-advisories => product/advisories}/26-Dec-2025 - AI Assistant as Proof-Carrying Evidence Engine.md (100%) rename docs-archived/{product-advisories => product/advisories}/26-Dec-2025 - AI Surfacing UX Patterns.md (100%) rename docs-archived/{product-advisories => product/advisories}/26-Dec-2025 - Stella Ops vNext - SBOM Spine and Deterministic Evidence.md (100%) rename docs-archived/{product-advisories => product/advisories}/26-Dec-2025 - Stella Ops vNext - SBOM Spine and Deterministic Evidence.md (100%) rename docs-archived/{product-advisories => product/advisories}/26-Dec-2026 - Mapping a Binary Intelligence Graph.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Dec-2025 - Advisory Lens Gap Analysis and Implementation Plan.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/01-Dec-2025 - DSSE-Signed Offline Scanner Updates.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/01-Dec-2025 - Proof-Linked VEX UI Developer Guidelines.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/01-Dec-2025 - Storage Blueprint for PostgreSQL Modules.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/01-Dec-2025 - Time-to-Evidence (TTE) Metric.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/01-Dec-2025 - Verifiable Proof Spine Receipts and Benchmarks.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/15-Nov-2025 - embedded in-toto provenance events.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/15-Nov-2025 - function-level vex explainability.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/15-Nov-2025 - ipal serdica census excel import blueprint.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/15-Nov-2025 - proof spine for explainable quiet alerts.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/15-Nov-2025 - scanner roadmap with deterministic diff-aware rescans.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/16-Nov-2025 - layer-sbom cache hash reuse.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/16-Nov-2025 - multi-runtime reachability corpus.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/16-Nov-2025 - spdx canonical persistence cyclonedx interchange.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/16-Nov-2025 - validation plan for quiet scans provenance diff-ci.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/17-Nov-2025 - SBOM-Provenance-Spine.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/17-Nov-2025 - Stripped-ELF-Reachability.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/18-Nov-2025 - Binary-Reachability-Engine.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/18-Nov-2025 - CSharp-Binary-Analyzer.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/18-Nov-2025 - Patch-Oracles.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/18-Nov-2025 - SBOM-Provenance-Spine.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/18-Nov-2025 - Unknowns-Registry.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/20-Nov-2025 - Branch · Attach ELF Build‑IDs for Stable PURL Mapping.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/20-Nov-2025 - Branch · Model .init_array Constructors as Reachability Roots.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/20-Nov-2025 - Branch · Reachability & Moat Watch — Verified 2025 Updates.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/20-Nov-2025 - Encoding Binary Reachability with PURL‑Resolved Edges.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/23-Nov-2025 - Where Stella Ops Can Truly Lead.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/23-Nov-2025 - Benchmarking Determinism in Vulnerability Scoring.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/23-Nov-2025 - Publishing a Reachability Benchmark Dataset.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/23-Nov-2025 - Stella Ops vs Competitors.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/23-Nov-2025 - Verifying Binary Reachability via DSSE Envelopes.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/24-Nov-2025 - Bridging OpenVEX and CycloneDX for .NET.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/24-Nov-2025 - Designing a Deterministic Reachability Benchmark.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/25-Nov-2025 - Add CVSS v4.0 Score Receipts for Transparency.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/25-Nov-2025 - Air‑gap deployment playbook for StellaOps.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/25-Nov-2025 - Define Safe VEX 'Not Affected' Claims with Proofs.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/25-Nov-2025 - Half-Life Confidence Decay for Unknowns.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/25-Nov-2025 - Hash‑Stable Graph Revisions Across Systems.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/25-Nov-2025 - Offline‑kit attestation essentials checklist.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/25-Nov-2025 - Revisiting Determinism in SBOM→VEX Pipeline.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/26-Nov-2025 - From SBOM to VEX - Building a Transparent Chain.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/26-Nov-2025 - Handling Rekor v2 and DSSE Air‑Gap Limits.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/26-Nov-2025 - Opening Up a Reachability Dataset.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/26-Nov-2025 - Use Graph Revision IDs as Public Trust Anchors.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/27-Nov-2025 - Blueprint for a 2026‑Ready Scanner.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/27-Nov-2025 - DSSE and Rekor Envelope Size Heuristic.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/27-Nov-2025 - Deep Architecture Brief - SBOM‑First, VEX‑Ready Spine.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/27-Nov-2025 - Explainability Layer for Vulnerability Verdicts.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/27-Nov-2025 - Late‑November SBOM & VEX competitor.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/27-Nov-2025 - Making Graphs Understandable to Humans.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/27-Nov-2025 - Managing Ambiguity Through an Unknowns Registry.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/27-Nov-2025 - Optimizing DSSE Batch Sizes for Reliable Logging.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/27-Nov-2025 - Rekor Envelope Size Heuristic.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/27-Nov-2025 - Verifying Binary Reachability via DSSE Envelopes.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/28-Nov-2025 - Authentication and Authorization Architecture.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/28-Nov-2025 - CLI Developer Experience and Command UX.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/28-Nov-2025 - Concelier Advisory Ingestion Model.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/28-Nov-2025 - Evidence Bundle and Replay Contracts.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/28-Nov-2025 - Export Center and Reporting Strategy.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/28-Nov-2025 - Findings Ledger and Immutable Audit Trail.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/28-Nov-2025 - Graph Analytics and Dependency Insights.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/28-Nov-2025 - Mirror and Offline Kit Strategy.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/28-Nov-2025 - Notification Rules and Alerting Engine.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/28-Nov-2025 - Orchestrator Event Model and Job Lifecycle.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/28-Nov-2025 - Plugin Architecture & Extensibility Patterns.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/28-Nov-2025 - Policy Simulation and Shadow Gates.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/28-Nov-2025 - Runtime Posture and Observation with Zastava.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/28-Nov-2025 - Sovereign Crypto for Regional Compliance.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/28-Nov-2025 - Task Pack Orchestration and Automation.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/28-Nov-2025 - Telemetry and Observability Patterns.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/28-Nov-2025 - Vulnerability Triage UX & VEX-First Decisioning.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/29-Nov-2025 - Acceptance Tests Pack for StellaOps Guardrails.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/29-Nov-2025 - CVSS v4.0 Momentum in Vulnerability Management.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/29-Nov-2025 - SBOM to VEX Proof Pipeline Blueprint.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/29-Nov-2025 - SCA Failure Catalogue for StellaOps Tests.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/29-Nov-2025 - StellaOps – Mid-Level .NET Onboarding (Quick Start).md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/30-Nov-2025 - Comparative Evidence Patterns for Stella Ops.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/30-Nov-2025 - Ecosystem Reality Test Cases.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/30-Nov-2025 - Implementor Guidelines for Stella Ops.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/30-Nov-2025 - Reachability Benchmark Fixtures Snapshot.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/30-Nov-2025 - Rekor Receipt Checklist for Stella Ops.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/30-Nov-2025 - Standup Sprint Kickstarters.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/30-Nov-2025 - UI Micro-Interactions for StellaOps.md (100%) rename docs-archived/{product-advisories => product/advisories}/27-Nov-2025-superseded/30-Nov-2025 - Unknowns Decay & Triage Heuristics.md (100%) rename docs-archived/{product-advisories => product/advisories}/30-Dec-2025 - Binary Diff Signatures for Patch Detection.md (100%) rename docs-archived/{product-advisories => product/advisories}/30-Dec-2025 - Building a Golden Set for Patch Validation.md (100%) rename docs-archived/{product-advisories => product/advisories}/30-Dec-2025 - Designing a Deterministic VEX Resolver.md (100%) rename docs-archived/{product-advisories => product/advisories}/30-Dec-2025 - Evidence‑Gated AI Explanations.md (100%) rename docs-archived/{product-advisories => product/advisories}/ADVISORY_20251229_SBOM_LINEAGE_AND_TESTING.md (100%) rename docs-archived/{product-advisories => product/advisories}/ADVISORY_SBOM_LINEAGE_GRAPH.md (100%) rename docs-archived/{product-advisories => product/advisories}/ANALYSIS_20251229_lineage_crossdistro_gap.md (100%) rename docs-archived/{product-advisories => product/advisories}/CONSOLIDATED - Deterministic Evidence and Verdict Architecture.md (100%) rename docs-archived/{product-advisories => product/advisories}/CONSOLIDATED - Diff-Aware Release Gates and Risk Budgets.md (100%) create mode 100644 docs/product/advisories/08-Jan-2026 - AI moats.md diff --git a/AGENTS.md b/AGENTS.md index 35b2d8998..be402f746 100644 --- a/AGENTS.md +++ b/AGENTS.md @@ -180,7 +180,7 @@ Your goals: * Whenever advisories, platform choices, or other design decisions are made or updated, you must ensure they are reflected in the appropriate `docs/` locations (for example: - * `docs/product-advisories/*.md` or `docs/product-advisories/archive/*.md`, + * `docs/product/advisories/*.md` or `docs/product/advisories/archive/*.md`, * module architecture docs under `docs/modules//architecture*.md`, * design/ADR-style documents under `docs/architecture/**` or similar when applicable). * Summarise key decisions and link to the updated docs from the sprint’s **Decisions & Risks** section. @@ -364,7 +364,7 @@ If no design decision is required, you proceed autonomously, implementing the ch ### 7) Advisory Handling (do this every time a new advisory lands) -**Trigger:** Any new or updated file under `docs/product-advisories/` (including archived) automatically starts this workflow. No chat approval required. +**Trigger:** Any new or updated file under `docs/product/advisories/` (including archived) automatically starts this workflow. No chat approval required. 1) **Doc sync (must happen for every advisory):** - Create/update **two layers**: @@ -381,14 +381,14 @@ If no design decision is required, you proceed autonomously, implementing the ch - If code/bench/dataset work is implied, create tasks and point to the new benchmark/test paths; add risks/interlocks for schema/feed freeze or transparency caps as needed. 3) **De-duplication:** - - Check `docs/product-advisories/archived/` for overlaps. If similar, mark “supersedes/extends ` in the new doc and avoid duplicate tasks. + - Check `docs/product/advisories/archived/` for overlaps. If similar, mark “supersedes/extends ` in the new doc and avoid duplicate tasks. 4) **Defaults to apply (unless advisory overrides):** - Hybrid reachability posture: graph DSSE mandatory; edge-bundle DSSE optional/targeted; deterministic outputs only. - Offline-friendly benches/tests; frozen feeds; deterministic ordering/hashes. 5) **Do not defer:** Execute steps 1–4 immediately; reporting is after the fact, not a gating step. -6) **Archive processed advisories**. After sprints / task / comprehensive documention is created or advisory is fully rejected move it to `docs-archived/product-advisories/` +6) **Archive processed advisories**. After sprints / task / comprehensive documention is created or advisory is fully rejected move it to `docs-archived/product/advisories/` **Lessons baked in:** Past delays came from missing code carry-over and missing sprint tasks. Always move advisory code into benchmarks/tests and open the corresponding sprint rows the same session you read the advisory. diff --git a/CLAUDE.md b/CLAUDE.md index 3738b476a..b59dd10e1 100644 --- a/CLAUDE.md +++ b/CLAUDE.md @@ -711,8 +711,8 @@ Create implementation sprint files under `docs/implplan/` using the **mandatory* ### As Product Manager -- Review advisories in `docs/product-advisories/` -- Check for overlaps with `docs-archived/product-advisories/` +- Review advisories in `docs/product/advisories/` +- Check for overlaps with `docs-archived/product/advisories/` - Validate against module docs and existing implementations - Hand over to project manager role for sprint/task definition diff --git a/docs-archived/implplan/2025-12-20/SPRINT_3600_0001_0001_reachability_drift_master.md b/docs-archived/implplan/2025-12-20/SPRINT_3600_0001_0001_reachability_drift_master.md index a15acb5cf..2a5700ee8 100644 --- a/docs-archived/implplan/2025-12-20/SPRINT_3600_0001_0001_reachability_drift_master.md +++ b/docs-archived/implplan/2025-12-20/SPRINT_3600_0001_0001_reachability_drift_master.md @@ -11,7 +11,7 @@ ## Topic & Scope -Implementation of Reachability Drift Detection as specified in `docs/product-advisories/17-Dec-2025 - Reachability Drift Detection.md`. This extends Smart-Diff to detect when vulnerable code paths become reachable/unreachable between container image versions, with causal attribution and UI visualization. +Implementation of Reachability Drift Detection as specified in `docs/product/advisories/17-Dec-2025 - Reachability Drift Detection.md`. This extends Smart-Diff to detect when vulnerable code paths become reachable/unreachable between container image versions, with causal attribution and UI visualization. **Business Value:** - Transform from "all vulnerabilities" to "material reachability changes" @@ -38,9 +38,9 @@ Implementation of Reachability Drift Detection as specified in `docs/product-adv ## Documentation Prerequisites Before starting implementation, read: -- `docs/product-advisories/17-Dec-2025 - Reachability Drift Detection.md` -- `docs/product-advisories/14-Dec-2025 - Smart-Diff Technical Reference.md` -- `docs/product-advisories/14-Dec-2025 - Reachability Analysis Technical Reference.md` +- `docs/product/advisories/17-Dec-2025 - Reachability Drift Detection.md` +- `docs/product/advisories/14-Dec-2025 - Smart-Diff Technical Reference.md` +- `docs/product/advisories/14-Dec-2025 - Reachability Analysis Technical Reference.md` - `docs/modules/scanner/architecture.md` - `docs/reachability/lattice.md` - `bench/reachability-benchmark/README.md` @@ -364,7 +364,7 @@ SPRINT_3600_0004 (UI) Integration ## 9. REFERENCES -- **Source Advisory**: `docs/product-advisories/17-Dec-2025 - Reachability Drift Detection.md` -- **Smart-Diff Reference**: `docs/product-advisories/14-Dec-2025 - Smart-Diff Technical Reference.md` -- **Reachability Reference**: `docs/product-advisories/14-Dec-2025 - Reachability Analysis Technical Reference.md` +- **Source Advisory**: `docs/product/advisories/17-Dec-2025 - Reachability Drift Detection.md` +- **Smart-Diff Reference**: `docs/product/advisories/14-Dec-2025 - Smart-Diff Technical Reference.md` +- **Reachability Reference**: `docs/product/advisories/14-Dec-2025 - Reachability Analysis Technical Reference.md` - **Benchmark**: `bench/reachability-benchmark/README.md` diff --git a/docs-archived/implplan/2025-12-20/SPRINT_3600_0001_0001_trust_algebra_lattice.md b/docs-archived/implplan/2025-12-20/SPRINT_3600_0001_0001_trust_algebra_lattice.md index ca1e0320d..937cce1a8 100644 --- a/docs-archived/implplan/2025-12-20/SPRINT_3600_0001_0001_trust_algebra_lattice.md +++ b/docs-archived/implplan/2025-12-20/SPRINT_3600_0001_0001_trust_algebra_lattice.md @@ -23,7 +23,7 @@ ## Documentation Prerequisites -- `docs/product-advisories/archived/19-Dec-2025 - Trust Algebra and Lattice Engine Specification.md` +- `docs/product/advisories/archived/19-Dec-2025 - Trust Algebra and Lattice Engine Specification.md` - `docs/modules/policy/architecture.md` - `docs/reachability/lattice.md` diff --git a/docs-archived/implplan/2025-12-20/SPRINT_3700_0006_0001_incremental_cache.md b/docs-archived/implplan/2025-12-20/SPRINT_3700_0006_0001_incremental_cache.md index 28361397c..c68925e0e 100644 --- a/docs-archived/implplan/2025-12-20/SPRINT_3700_0006_0001_incremental_cache.md +++ b/docs-archived/implplan/2025-12-20/SPRINT_3700_0006_0001_incremental_cache.md @@ -6,7 +6,7 @@ **Working Directory:** `src/Scanner/__Libraries/StellaOps.Scanner.Reachability/` **Estimated Effort:** Medium (1 sprint) **Dependencies:** SPRINT_3700_0004 -**Source Advisory:** `docs/product-advisories/18-Dec-2025 - Concrete Advances in Reachability Analysis.md` +**Source Advisory:** `docs/product/advisories/18-Dec-2025 - Concrete Advances in Reachability Analysis.md` --- diff --git a/docs-archived/implplan/2025-12-20/SPRINT_3800_0000_0000_explainable_triage_master.md b/docs-archived/implplan/2025-12-20/SPRINT_3800_0000_0000_explainable_triage_master.md index 527a091e4..79d4f7a8a 100644 --- a/docs-archived/implplan/2025-12-20/SPRINT_3800_0000_0000_explainable_triage_master.md +++ b/docs-archived/implplan/2025-12-20/SPRINT_3800_0000_0000_explainable_triage_master.md @@ -4,7 +4,7 @@ This master plan implements the product advisory "Designing Explainable Triage and Proof-Linked Evidence" which transforms StellaOps's triage experience by making every risk score **explainable** and every approval **provably evidence-linked**. -**Source Advisory:** `docs/product-advisories/18-Dec-2025 - Designing Explainable Triage and Proof‑Linked Evidence.md` +**Source Advisory:** `docs/product/advisories/18-Dec-2025 - Designing Explainable Triage and Proof‑Linked Evidence.md` ## Objectives diff --git a/docs-archived/implplan/2025-12-23-sprint-3200/SPRINT_3200_0000_0000_attestation_ecosystem_interop.md b/docs-archived/implplan/2025-12-23-sprint-3200/SPRINT_3200_0000_0000_attestation_ecosystem_interop.md index 097a4614d..324524e9f 100644 --- a/docs-archived/implplan/2025-12-23-sprint-3200/SPRINT_3200_0000_0000_attestation_ecosystem_interop.md +++ b/docs-archived/implplan/2025-12-23-sprint-3200/SPRINT_3200_0000_0000_attestation_ecosystem_interop.md @@ -5,7 +5,7 @@ > **Epic:** Attestor + Scanner + CLI Integration > **Priority:** CRITICAL > **Owner:** Attestor, Scanner, CLI & Docs Guilds -> **Advisory Origin:** `docs/product-advisories/23-Dec-2026 - Distinctive Edge for Docker Scanning.md` +> **Advisory Origin:** `docs/product/advisories/23-Dec-2026 - Distinctive Edge for Docker Scanning.md` --- @@ -399,7 +399,7 @@ All attestation operations include structured logging: ## References ### Advisory -- `docs/product-advisories/23-Dec-2026 - Distinctive Edge for Docker Scanning.md` +- `docs/product/advisories/23-Dec-2026 - Distinctive Edge for Docker Scanning.md` ### Gap Analysis - `docs/implplan/analysis/3200_attestation_ecosystem_gap_analysis.md` diff --git a/docs-archived/implplan/2025-12-23-sprint-3200/SPRINT_3200_IMPLEMENTATION_STATUS.md b/docs-archived/implplan/2025-12-23-sprint-3200/SPRINT_3200_IMPLEMENTATION_STATUS.md index af0b302a3..c245defbc 100644 --- a/docs-archived/implplan/2025-12-23-sprint-3200/SPRINT_3200_IMPLEMENTATION_STATUS.md +++ b/docs-archived/implplan/2025-12-23-sprint-3200/SPRINT_3200_IMPLEMENTATION_STATUS.md @@ -492,7 +492,7 @@ attestations/ - [Sigstore Documentation](https://docs.sigstore.dev/) ### Advisory -- [Original Advisory](../product-advisories/23-Dec-2026 - Distinctive Edge for Docker Scanning.md) +- [Original Advisory](../product/advisories/23-Dec-2026 - Distinctive Edge for Docker Scanning.md) --- diff --git a/docs-archived/implplan/2025-12-23-sprint-7100-proof-moats/SPRINT_7100_0001_0001_COMPLETION_REPORT.md b/docs-archived/implplan/2025-12-23-sprint-7100-proof-moats/SPRINT_7100_0001_0001_COMPLETION_REPORT.md index c6c24fe1e..e6bd95d50 100644 --- a/docs-archived/implplan/2025-12-23-sprint-7100-proof-moats/SPRINT_7100_0001_0001_COMPLETION_REPORT.md +++ b/docs-archived/implplan/2025-12-23-sprint-7100-proof-moats/SPRINT_7100_0001_0001_COMPLETION_REPORT.md @@ -549,7 +549,7 @@ The following items were **intentionally out of scope** for Sprint 7100.0001.000 **Sprint Duration:** Multi-session implementation **Velocity:** 100% of planned work completed -**Advisory Reference:** `docs/product-advisories/23-Dec-2026 - Proof-Driven Moats Stella Ops Can Ship.md` (archived) +**Advisory Reference:** `docs/product/advisories/23-Dec-2026 - Proof-Driven Moats Stella Ops Can Ship.md` (archived) --- diff --git a/docs-archived/implplan/2025-12-23-sprint-7100-proof-moats/SPRINT_7100_0002_0001_COMPLETION_REPORT.md b/docs-archived/implplan/2025-12-23-sprint-7100-proof-moats/SPRINT_7100_0002_0001_COMPLETION_REPORT.md index f2b26643c..bb955cf44 100644 --- a/docs-archived/implplan/2025-12-23-sprint-7100-proof-moats/SPRINT_7100_0002_0001_COMPLETION_REPORT.md +++ b/docs-archived/implplan/2025-12-23-sprint-7100-proof-moats/SPRINT_7100_0002_0001_COMPLETION_REPORT.md @@ -494,7 +494,7 @@ services.AddSingleton(sp => **Sprint Duration:** Single session implementation **Velocity:** 100% of planned work completed -**Advisory Reference:** `docs/product-advisories/23-Dec-2026 - Proof-Driven Moats Stella Ops Can Ship.md` (archived) +**Advisory Reference:** `docs/product/advisories/23-Dec-2026 - Proof-Driven Moats Stella Ops Can Ship.md` (archived) **Parent Sprint:** SPRINT_7100_0001_0001 (Proof-Driven Moats Core) --- diff --git a/docs-archived/implplan/2025-12-23/SPRINT_4100_0002_0003_snapshot_export_import.md b/docs-archived/implplan/2025-12-23/SPRINT_4100_0002_0003_snapshot_export_import.md index d068ceb9c..e96b507a0 100644 --- a/docs-archived/implplan/2025-12-23/SPRINT_4100_0002_0003_snapshot_export_import.md +++ b/docs-archived/implplan/2025-12-23/SPRINT_4100_0002_0003_snapshot_export_import.md @@ -17,7 +17,7 @@ ## Documentation Prerequisites - Sprint 4100.0002.0001 completion (KnowledgeSnapshotManifest, KnowledgeSourceDescriptor) -- `docs/product-advisories/20-Dec-2025 - Moat Explanation - Knowledge Snapshots and Time‑Travel Replay.md` +- `docs/product/advisories/20-Dec-2025 - Moat Explanation - Knowledge Snapshots and Time‑Travel Replay.md` - `docs/24_OFFLINE_KIT.md` --- diff --git a/docs-archived/implplan/2025-12-23/SPRINT_4100_0003_0001_snapshot_merge_preview_replay_ui.md b/docs-archived/implplan/2025-12-23/SPRINT_4100_0003_0001_snapshot_merge_preview_replay_ui.md index 2b53cbb29..4264ac29f 100644 --- a/docs-archived/implplan/2025-12-23/SPRINT_4100_0003_0001_snapshot_merge_preview_replay_ui.md +++ b/docs-archived/implplan/2025-12-23/SPRINT_4100_0003_0001_snapshot_merge_preview_replay_ui.md @@ -20,7 +20,7 @@ ## Documentation Prerequisites -- `docs/product-advisories/22-Dec-2026 - UI Patterns for Triage and Replay.md` (source advisory) +- `docs/product/advisories/22-Dec-2026 - UI Patterns for Triage and Replay.md` (source advisory) - `src/__Libraries/StellaOps.Replay.Core/AGENTS.md` - `docs/modules/snapshot/replay-yaml.md` (created with this sprint) - `docs/modules/snapshot/merge-preview.md` (created with this sprint) diff --git a/docs-archived/implplan/2025-12-26-completed/SPRINT_20251226_010_FE_visual_diff_enhancements.md b/docs-archived/implplan/2025-12-26-completed/SPRINT_20251226_010_FE_visual_diff_enhancements.md index 46a33428f..b6ccd2510 100644 --- a/docs-archived/implplan/2025-12-26-completed/SPRINT_20251226_010_FE_visual_diff_enhancements.md +++ b/docs-archived/implplan/2025-12-26-completed/SPRINT_20251226_010_FE_visual_diff_enhancements.md @@ -4,7 +4,7 @@ > **Priority:** P2 > **Module:** Frontend (Web) > **Created:** 2025-12-26 -> **Advisory:** [`25-Dec-2025 - Visual Diffs for Explainable Triage.md`](../product-advisories/25-Dec-2025%20-%20Visual%20Diffs%20for%20Explainable%20Triage.md) +> **Advisory:** [`25-Dec-2025 - Visual Diffs for Explainable Triage.md`](../product/advisories/25-Dec-2025%20-%20Visual%20Diffs%20for%20Explainable%20Triage.md) --- @@ -357,5 +357,5 @@ export class PlainLanguageService { ## Related Documentation - [Smart-Diff UI Architecture](../modules/web/smart-diff-ui-architecture.md) -- [Triage UI Lessons from Competitors](../product-advisories/25-Dec-2025%20-%20Triage%20UI%20Lessons%20from%20Competitors.md) -- [Implementing Diff-Aware Release Gates](../product-advisories/25-Dec-2025%20-%20Implementing%20Diff%E2%80%91Aware%20Release%20Gates.md) +- [Triage UI Lessons from Competitors](../product/advisories/25-Dec-2025%20-%20Triage%20UI%20Lessons%20from%20Competitors.md) +- [Implementing Diff-Aware Release Gates](../product/advisories/25-Dec-2025%20-%20Implementing%20Diff%E2%80%91Aware%20Release%20Gates.md) diff --git a/docs-archived/implplan/2025-12-26-completed/SPRINT_20251226_010_SIGNALS_runtime_stack.md b/docs-archived/implplan/2025-12-26-completed/SPRINT_20251226_010_SIGNALS_runtime_stack.md index 21bb32502..f5d43c9ef 100644 --- a/docs-archived/implplan/2025-12-26-completed/SPRINT_20251226_010_SIGNALS_runtime_stack.md +++ b/docs-archived/implplan/2025-12-26-completed/SPRINT_20251226_010_SIGNALS_runtime_stack.md @@ -16,7 +16,7 @@ ## Documentation Prerequisites - `docs/modules/scanner/runtime-evidence.md` - `docs/modules/signals/architecture.md` -- `docs/product-advisories/25-Dec-2025 - Evolving Evidence Models for Reachability.md` +- `docs/product/advisories/25-Dec-2025 - Evolving Evidence Models for Reachability.md` ## Context: What Already Exists diff --git a/docs-archived/implplan/2025-12-26-completed/SPRINT_20251226_011_BE_auto_vex_downgrade.md b/docs-archived/implplan/2025-12-26-completed/SPRINT_20251226_011_BE_auto_vex_downgrade.md index b81027e53..6b6acd61a 100644 --- a/docs-archived/implplan/2025-12-26-completed/SPRINT_20251226_011_BE_auto_vex_downgrade.md +++ b/docs-archived/implplan/2025-12-26-completed/SPRINT_20251226_011_BE_auto_vex_downgrade.md @@ -15,7 +15,7 @@ - `docs/modules/signals/architecture.md` - `docs/modules/policy/architecture.md` - `docs/modules/excititor/architecture.md` -- `docs/product-advisories/25-Dec-2025 - Evolving Evidence Models for Reachability.md` +- `docs/product/advisories/25-Dec-2025 - Evolving Evidence Models for Reachability.md` ## Context: What Already Exists diff --git a/docs-archived/implplan/2025-12-26-completed/SPRINT_20251226_011_BINIDX_known_build_catalog.md b/docs-archived/implplan/2025-12-26-completed/SPRINT_20251226_011_BINIDX_known_build_catalog.md index a00f7651c..fb96bf88d 100644 --- a/docs-archived/implplan/2025-12-26-completed/SPRINT_20251226_011_BINIDX_known_build_catalog.md +++ b/docs-archived/implplan/2025-12-26-completed/SPRINT_20251226_011_BINIDX_known_build_catalog.md @@ -5,7 +5,7 @@ > **Module:** BinaryIndex > **Created:** 2025-12-26 > **Architecture:** [`docs/modules/binaryindex/architecture.md`](../modules/binaryindex/architecture.md) -> **Advisory:** [`26-Dec-2026 - Mapping a Binary Intelligence Graph.md`](../product-advisories/26-Dec-2026%20-%20Mapping%20a%20Binary%20Intelligence%20Graph.md) (SUPERSEDED) +> **Advisory:** [`26-Dec-2026 - Mapping a Binary Intelligence Graph.md`](../product/advisories/26-Dec-2026%20-%20Mapping%20a%20Binary%20Intelligence%20Graph.md) (SUPERSEDED) --- diff --git a/docs-archived/implplan/2025-12-26-completed/SPRINT_20251226_012_FE_smart_diff_compare.md b/docs-archived/implplan/2025-12-26-completed/SPRINT_20251226_012_FE_smart_diff_compare.md index 67e50a606..cddf775b7 100644 --- a/docs-archived/implplan/2025-12-26-completed/SPRINT_20251226_012_FE_smart_diff_compare.md +++ b/docs-archived/implplan/2025-12-26-completed/SPRINT_20251226_012_FE_smart_diff_compare.md @@ -20,8 +20,8 @@ ## Documentation Prerequisites - `docs/modules/web/smart-diff-ui-architecture.md` (REQUIRED - primary design reference) -- `docs/product-advisories/25-Dec-2025 - Visual Diffs for Explainable Triage.md` -- `docs/product-advisories/25-Dec-2025 - Triage UI Lessons from Competitors.md` +- `docs/product/advisories/25-Dec-2025 - Visual Diffs for Explainable Triage.md` +- `docs/product/advisories/25-Dec-2025 - Triage UI Lessons from Competitors.md` - Angular 17 patterns in existing codebase ## Context: What Already Exists diff --git a/docs-archived/implplan/2025-12-26-completed/SPRINT_20251226_013_FE_triage_canvas.md b/docs-archived/implplan/2025-12-26-completed/SPRINT_20251226_013_FE_triage_canvas.md index 83a15d057..4bf2aa0c5 100644 --- a/docs-archived/implplan/2025-12-26-completed/SPRINT_20251226_013_FE_triage_canvas.md +++ b/docs-archived/implplan/2025-12-26-completed/SPRINT_20251226_013_FE_triage_canvas.md @@ -19,7 +19,7 @@ - Can run in parallel with: Backend API work. ## Documentation Prerequisites -- `docs/product-advisories/25-Dec-2025 - Triage UI Lessons from Competitors.md` +- `docs/product/advisories/25-Dec-2025 - Triage UI Lessons from Competitors.md` - `docs/modules/advisoryai/architecture.md` - `src/VulnExplorer/StellaOps.VulnExplorer.Api/Models/` (existing models) - Angular 17 component patterns diff --git a/docs-archived/implplan/2025-12-26-completed/SPRINT_20251226_014_DOCS_triage_consolidation.md b/docs-archived/implplan/2025-12-26-completed/SPRINT_20251226_014_DOCS_triage_consolidation.md index 1796fd90b..55de50759 100644 --- a/docs-archived/implplan/2025-12-26-completed/SPRINT_20251226_014_DOCS_triage_consolidation.md +++ b/docs-archived/implplan/2025-12-26-completed/SPRINT_20251226_014_DOCS_triage_consolidation.md @@ -12,7 +12,7 @@ - Create authoritative "Unified Triage Experience" specification. - Update smart-diff-ui-architecture.md to reflect current sprint structure. - Archive original advisories with cross-reference preservation. -- **Working directory:** `docs/product-advisories/`, `docs/modules/web/` +- **Working directory:** `docs/product/advisories/`, `docs/modules/web/` ## Dependencies & Concurrency - No technical dependencies; documentation-only sprint. diff --git a/docs-archived/implplan/2025-12-29-completed-sprints/SPRINT_20251229_001_002_BE_vex_delta.md b/docs-archived/implplan/2025-12-29-completed-sprints/SPRINT_20251229_001_002_BE_vex_delta.md index 05e479db3..081176808 100644 --- a/docs-archived/implplan/2025-12-29-completed-sprints/SPRINT_20251229_001_002_BE_vex_delta.md +++ b/docs-archived/implplan/2025-12-29-completed-sprints/SPRINT_20251229_001_002_BE_vex_delta.md @@ -20,7 +20,7 @@ The VEX delta schema is designed in `ADVISORY_SBOM_LINEAGE_GRAPH.md` but not mig ## Related Documentation -- `docs/product-advisories/archived/ADVISORY_SBOM_LINEAGE_GRAPH.md` (Gap Analysis section) +- `docs/product/advisories/archived/ADVISORY_SBOM_LINEAGE_GRAPH.md` (Gap Analysis section) - `docs/modules/sbomservice/lineage/architecture.md` - `docs/modules/vex-lens/architecture.md` - `docs/modules/excititor/architecture.md` diff --git a/docs-archived/implplan/2025-12-29-completed-sprints/SPRINT_20251229_001_005_FE_explainer_timeline.md b/docs-archived/implplan/2025-12-29-completed-sprints/SPRINT_20251229_001_005_FE_explainer_timeline.md index 3c9a1f88a..e18c098a8 100644 --- a/docs-archived/implplan/2025-12-29-completed-sprints/SPRINT_20251229_001_005_FE_explainer_timeline.md +++ b/docs-archived/implplan/2025-12-29-completed-sprints/SPRINT_20251229_001_005_FE_explainer_timeline.md @@ -28,7 +28,7 @@ This component does NOT exist in the current codebase and must be built from scr ## Related Documentation -- `docs/product-advisories/archived/ADVISORY_SBOM_LINEAGE_GRAPH.md` (Explainer section) +- `docs/product/advisories/archived/ADVISORY_SBOM_LINEAGE_GRAPH.md` (Explainer section) - `docs/modules/policy/architecture.md` (ProofTrace format) - `docs/modules/vexlens/architecture.md` (Consensus Engine) - Existing: `src/app/features/lineage/components/why-safe-panel/` (similar concept, simpler) diff --git a/docs-archived/implplan/2025-12-29-completed-sprints/SPRINT_20251229_001_006_FE_node_diff_table.md b/docs-archived/implplan/2025-12-29-completed-sprints/SPRINT_20251229_001_006_FE_node_diff_table.md index abdc7ddf1..411d94f97 100644 --- a/docs-archived/implplan/2025-12-29-completed-sprints/SPRINT_20251229_001_006_FE_node_diff_table.md +++ b/docs-archived/implplan/2025-12-29-completed-sprints/SPRINT_20251229_001_006_FE_node_diff_table.md @@ -30,7 +30,7 @@ The existing `DataTableComponent` in shared components provides a base, but need ## Related Documentation -- `docs/product-advisories/archived/ADVISORY_SBOM_LINEAGE_GRAPH.md` (Diff section) +- `docs/product/advisories/archived/ADVISORY_SBOM_LINEAGE_GRAPH.md` (Diff section) - Existing: `src/app/features/lineage/components/lineage-sbom-diff/` - Existing: `src/app/shared/components/data-table/` - API: `GET /api/v1/lineage/{from}/compare?to={to}` diff --git a/docs-archived/implplan/2026-01-02-completed-sprints/SPRINT_20260102_001_BE_binary_delta_signatures.md b/docs-archived/implplan/2026-01-02-completed-sprints/SPRINT_20260102_001_BE_binary_delta_signatures.md index f62076271..031fc6f76 100644 --- a/docs-archived/implplan/2026-01-02-completed-sprints/SPRINT_20260102_001_BE_binary_delta_signatures.md +++ b/docs-archived/implplan/2026-01-02-completed-sprints/SPRINT_20260102_001_BE_binary_delta_signatures.md @@ -9,7 +9,7 @@ | **Working Directory** | `src/BinaryIndex/` | | **Duration** | 4-6 weeks | | **Dependencies** | None (foundational sprint) | -| **Advisory Source** | `docs/product-advisories/30-Dec-2025 - Binary Diff Signatures for Patch Detection.md` | +| **Advisory Source** | `docs/product/advisories/30-Dec-2025 - Binary Diff Signatures for Patch Detection.md` | ## Problem Statement @@ -587,5 +587,5 @@ stella deltasig inspect - [B2R2 GitHub](https://github.com/B2R2-org/B2R2) - [B2R2 NuGet](https://www.nuget.org/packages/B2R2.FrontEnd.API/) -- [Product Advisory: Binary Diff Signatures](../product-advisories/30-Dec-2025%20-%20Binary%20Diff%20Signatures%20for%20Patch%20Detection.md) -- [Product Advisory: Golden Set for Patch Validation](../product-advisories/30-Dec-2025%20-%20Building%20a%20Golden%20Set%20for%20Patch%20Validation.md) +- [Product Advisory: Binary Diff Signatures](../product/advisories/30-Dec-2025%20-%20Binary%20Diff%20Signatures%20for%20Patch%20Detection.md) +- [Product Advisory: Golden Set for Patch Validation](../product/advisories/30-Dec-2025%20-%20Building%20a%20Golden%20Set%20for%20Patch%20Validation.md) diff --git a/docs-archived/implplan/2026-01-02-completed-sprints/SPRINT_20260102_002_BE_intoto_link_generation.md b/docs-archived/implplan/2026-01-02-completed-sprints/SPRINT_20260102_002_BE_intoto_link_generation.md index a3ae13509..f278e4afb 100644 --- a/docs-archived/implplan/2026-01-02-completed-sprints/SPRINT_20260102_002_BE_intoto_link_generation.md +++ b/docs-archived/implplan/2026-01-02-completed-sprints/SPRINT_20260102_002_BE_intoto_link_generation.md @@ -9,7 +9,7 @@ | **Working Directory** | `src/Attestor/` | | **Duration** | 2-3 weeks | | **Dependencies** | Existing DSSE infrastructure (complete) | -| **Advisory Source** | `docs/product-advisories/02-Dec-2025 - Designing offline DSSE + in‑toto attestations.md` | +| **Advisory Source** | `docs/product/advisories/02-Dec-2025 - Designing offline DSSE + in‑toto attestations.md` | ## Problem Statement @@ -479,4 +479,4 @@ Response: - [in-toto Specification](https://github.com/in-toto/attestation) - [in-toto Link Predicate](https://github.com/in-toto/attestation/blob/main/spec/predicates/link.md) - [SLSA Provenance](https://slsa.dev/provenance/v1) -- [Product Advisory: Offline DSSE + in-toto](../product-advisories/02-Dec-2025%20-%20Designing%20offline%20DSSE%20+%20in‑toto%20attestations.md) +- [Product Advisory: Offline DSSE + in-toto](../product/advisories/02-Dec-2025%20-%20Designing%20offline%20DSSE%20+%20in‑toto%20attestations.md) diff --git a/docs-archived/implplan/2026-01-02-completed-sprints/SPRINT_20260102_003_BE_vex_proof_objects.md b/docs-archived/implplan/2026-01-02-completed-sprints/SPRINT_20260102_003_BE_vex_proof_objects.md index 0733c5a2a..a75c1cd67 100644 --- a/docs-archived/implplan/2026-01-02-completed-sprints/SPRINT_20260102_003_BE_vex_proof_objects.md +++ b/docs-archived/implplan/2026-01-02-completed-sprints/SPRINT_20260102_003_BE_vex_proof_objects.md @@ -9,7 +9,7 @@ | **Working Directory** | `src/VexLens/`, `src/Policy/` | | **Duration** | 2-3 weeks | | **Dependencies** | VexLens consensus engine (complete) | -| **Advisory Source** | `docs/product-advisories/30-Dec-2025 - Designing a Deterministic VEX Resolver.md` | +| **Advisory Source** | `docs/product/advisories/30-Dec-2025 - Designing a Deterministic VEX Resolver.md` | ## Problem Statement @@ -593,6 +593,6 @@ public enum ConditionOutcome ## References -- [Product Advisory: Deterministic VEX Resolver](../product-advisories/30-Dec-2025%20-%20Designing%20a%20Deterministic%20VEX%20Resolver.md) +- [Product Advisory: Deterministic VEX Resolver](../product/advisories/30-Dec-2025%20-%20Designing%20a%20Deterministic%20VEX%20Resolver.md) - [CycloneDX VEX](https://cyclonedx.org/use-cases/vulnerability-exploitability/) - [OpenVEX Spec](https://github.com/openvex/spec) diff --git a/docs-archived/implplan/2026-01-02-completed-sprints/SPRINT_20260102_004_BE_polish_and_testing.md b/docs-archived/implplan/2026-01-02-completed-sprints/SPRINT_20260102_004_BE_polish_and_testing.md index 4d1a6539e..59ad92407 100644 --- a/docs-archived/implplan/2026-01-02-completed-sprints/SPRINT_20260102_004_BE_polish_and_testing.md +++ b/docs-archived/implplan/2026-01-02-completed-sprints/SPRINT_20260102_004_BE_polish_and_testing.md @@ -355,6 +355,6 @@ public async Task FullPipeline_IsDeterministic(RegressionTestCase testCase) ## References -- [Product Advisory: Golden Set for Patch Validation](../product-advisories/30-Dec-2025%20-%20Building%20a%20Golden%20Set%20for%20Patch%20Validation.md) +- [Product Advisory: Golden Set for Patch Validation](../product/advisories/30-Dec-2025%20-%20Building%20a%20Golden%20Set%20for%20Patch%20Validation.md) - [CycloneDX 1.7 Schema](https://cyclonedx.org/docs/1.7/) - [Existing VexLens Truth Table Tests](../../src/VexLens/__Tests/StellaOps.VexLens.Tests/Consensus/VexLensTruthTableTests.cs) diff --git a/docs-archived/implplan/2026-01-07-completed-sprints/SPRINT_20260106_004_001_FE_quiet_triage_ux_integration.md b/docs-archived/implplan/2026-01-07-completed-sprints/SPRINT_20260106_004_001_FE_quiet_triage_ux_integration.md index 544b47fa0..52fc40fd4 100644 --- a/docs-archived/implplan/2026-01-07-completed-sprints/SPRINT_20260106_004_001_FE_quiet_triage_ux_integration.md +++ b/docs-archived/implplan/2026-01-07-completed-sprints/SPRINT_20260106_004_001_FE_quiet_triage_ux_integration.md @@ -10,7 +10,7 @@ | Working Directory | `src/Web/StellaOps.Web/` | | Dependencies | None (backend APIs complete) | | Blocking | None | -| Advisory | `docs-archived/product-advisories/06-Jan-2026 - Quiet-by-Default Triage with Attested Exceptions.md` | +| Advisory | `docs-archived/product/advisories/06-Jan-2026 - Quiet-by-Default Triage with Attested Exceptions.md` | ## Objective @@ -274,7 +274,7 @@ Per `docs/ux/TRIAGE_UX_GUIDE.md`: - **UX Guide**: `docs/ux/TRIAGE_UX_GUIDE.md` - **Backend Contracts**: `src/Scanner/StellaOps.Scanner.WebService/Contracts/GatingContracts.cs` - **Approval API**: `src/Scanner/StellaOps.Scanner.WebService/Endpoints/ApprovalEndpoints.cs` -- **Archived Advisory**: `docs-archived/product-advisories/06-Jan-2026 - Quiet-by-Default Triage with Attested Exceptions.md` +- **Archived Advisory**: `docs-archived/product/advisories/06-Jan-2026 - Quiet-by-Default Triage with Attested Exceptions.md` ## Execution Log diff --git a/docs-archived/implplan/ADVISORY_PROCESSING_REPORT_20251220.md b/docs-archived/implplan/ADVISORY_PROCESSING_REPORT_20251220.md index d920037b7..e112c0aba 100644 --- a/docs-archived/implplan/ADVISORY_PROCESSING_REPORT_20251220.md +++ b/docs-archived/implplan/ADVISORY_PROCESSING_REPORT_20251220.md @@ -8,7 +8,7 @@ ## Executive Summary -Reviewed **7 unprocessed advisories** and **12 moat documents** from `docs/product-advisories/unprocessed/`. After cross-referencing with existing sprints, archived advisories, and implemented code, identified **3 new epic-level initiatives** and **5 enhancement opportunities** for existing features. +Reviewed **7 unprocessed advisories** and **12 moat documents** from `docs/product/advisories/unprocessed/`. After cross-referencing with existing sprints, archived advisories, and implemented code, identified **3 new epic-level initiatives** and **5 enhancement opportunities** for existing features. --- @@ -212,13 +212,13 @@ Reviewed **7 unprocessed advisories** and **12 moat documents** from `docs/produ These advisories have been processed or are reference-only: ``` -docs/product-advisories/unprocessed/16-Dec-2025 - Reimagining Proof‑Linked UX in Security Workflows.md +docs/product/advisories/unprocessed/16-Dec-2025 - Reimagining Proof‑Linked UX in Security Workflows.md → Already processed (Status: PROCESSED in file) -docs/product-advisories/unprocessed/18-Dec-2025 - Designing Explainable Triage and Proof‑Linked Evidence.md +docs/product/advisories/unprocessed/18-Dec-2025 - Designing Explainable Triage and Proof‑Linked Evidence.md → Overlaps with 16-Dec, consolidate -docs/product-advisories/unprocessed/20-Dec-2025 - Branch · UX patterns worth borrowing from top scanners.md +docs/product/advisories/unprocessed/20-Dec-2025 - Branch · UX patterns worth borrowing from top scanners.md → Reference only, no actionable tasks ``` diff --git a/docs-archived/implplan/HANDOFF_VERDICT_ATTESTATIONS.md b/docs-archived/implplan/HANDOFF_VERDICT_ATTESTATIONS.md index 5f0608e62..9ee8b99cb 100644 --- a/docs-archived/implplan/HANDOFF_VERDICT_ATTESTATIONS.md +++ b/docs-archived/implplan/HANDOFF_VERDICT_ATTESTATIONS.md @@ -393,7 +393,7 @@ curl http://localhost:5000/api/v1/verdicts/test-verdict-id - **JSON Schema**: `docs/schemas/stellaops-policy-verdict.v1.schema.json` - **Sprint Plan**: `docs/implplan/SPRINT_3000_0100_0001_signed_verdicts.md` - **API Documentation**: `docs/policy/verdict-attestations.md` -- **Product Advisory**: `docs/product-advisories/23-Dec-2026 - Competitor Scanner UI Breakdown.md` +- **Product Advisory**: `docs/product/advisories/23-Dec-2026 - Competitor Scanner UI Breakdown.md` ## Contact & Escalation diff --git a/docs-archived/implplan/IMPLEMENTATION_INDEX.md b/docs-archived/implplan/IMPLEMENTATION_INDEX.md index 3c6e70837..b7e61f2da 100644 --- a/docs-archived/implplan/IMPLEMENTATION_INDEX.md +++ b/docs-archived/implplan/IMPLEMENTATION_INDEX.md @@ -134,7 +134,7 @@ docs/ │ └── scanner_schema_specification.md ⭐ DATABASE ├── api/ │ └── scanner-score-proofs-api.md ⭐ API CONTRACTS -└── product-advisories/ +└── product/advisories/ └── archived/17-Dec-2025/ └── 16-Dec-2025 - Building a Deeper Moat Beyond Reachability.md (processed) ``` diff --git a/docs-archived/implplan/IMPL_3400_determinism_reproducibility_master_plan.md b/docs-archived/implplan/IMPL_3400_determinism_reproducibility_master_plan.md index e299a4677..4e536a3ab 100644 --- a/docs-archived/implplan/IMPL_3400_determinism_reproducibility_master_plan.md +++ b/docs-archived/implplan/IMPL_3400_determinism_reproducibility_master_plan.md @@ -5,7 +5,7 @@ This implementation plan addresses gaps identified between the **14-Dec-2025 - Determinism and Reproducibility Technical Reference** advisory and the current StellaOps codebase. The plan follows the "ULTRATHINK" recommendations prioritizing high-value implementations while avoiding changes that don't align with StellaOps' architectural philosophy. **Plan ID:** IMPL_3400 -**Advisory Reference:** `docs/product-advisories/14-Dec-2025 - Determinism and Reproducibility Technical Reference.md` +**Advisory Reference:** `docs/product/advisories/14-Dec-2025 - Determinism and Reproducibility Technical Reference.md` **Created:** 2025-12-14 **Status:** PLANNING diff --git a/docs-archived/implplan/IMPL_3410_epss_v4_integration_master_plan.md b/docs-archived/implplan/IMPL_3410_epss_v4_integration_master_plan.md index 097024110..5e93989ba 100644 --- a/docs-archived/implplan/IMPL_3410_epss_v4_integration_master_plan.md +++ b/docs-archived/implplan/IMPL_3410_epss_v4_integration_master_plan.md @@ -5,7 +5,7 @@ This implementation plan delivers **EPSS (Exploit Prediction Scoring System) v4** integration into StellaOps as a probabilistic threat signal alongside CVSS v4's deterministic severity assessment. EPSS provides daily-updated exploitation probability scores (0.0-1.0) from FIRST.org, transforming vulnerability prioritization from static severity to live risk intelligence. **Plan ID:** IMPL_3410 -**Advisory Reference:** `docs/product-advisories/unprocessed/16-Dec-2025 - Merging EPSS v4 with CVSS v4 Frameworks.md` +**Advisory Reference:** `docs/product/advisories/unprocessed/16-Dec-2025 - Merging EPSS v4 with CVSS v4 Frameworks.md` **Created:** 2025-12-17 **Status:** APPROVED **Target Completion:** Q2 2026 @@ -849,9 +849,9 @@ notify: ### A) Related Advisories -- `docs/product-advisories/14-Dec-2025 - Determinism and Reproducibility Technical Reference.md` -- `docs/product-advisories/14-Dec-2025 - Triage and Unknowns Technical Reference.md` -- `docs/product-advisories/archived/14-Dec-2025/29-Nov-2025 - CVSS v4.0 Momentum in Vulnerability Management.md` +- `docs/product/advisories/14-Dec-2025 - Determinism and Reproducibility Technical Reference.md` +- `docs/product/advisories/14-Dec-2025 - Triage and Unknowns Technical Reference.md` +- `docs/product/advisories/archived/14-Dec-2025/29-Nov-2025 - CVSS v4.0 Momentum in Vulnerability Management.md` ### B) Related Implementations diff --git a/docs-archived/implplan/IMPL_3420_postgresql_patterns_implementation.md b/docs-archived/implplan/IMPL_3420_postgresql_patterns_implementation.md index c743d9a31..b47e8b5b7 100644 --- a/docs-archived/implplan/IMPL_3420_postgresql_patterns_implementation.md +++ b/docs-archived/implplan/IMPL_3420_postgresql_patterns_implementation.md @@ -11,7 +11,7 @@ ## 1. Executive Summary -This implementation program delivers four PostgreSQL pattern enhancements identified in the gap analysis of `docs/product-advisories/14-Dec-2025 - PostgreSQL Patterns Technical Reference.md`. These patterns strengthen StellaOps' data layer for determinism, multi-tenancy security, query performance, and operational efficiency. +This implementation program delivers four PostgreSQL pattern enhancements identified in the gap analysis of `docs/product/advisories/14-Dec-2025 - PostgreSQL Patterns Technical Reference.md`. These patterns strengthen StellaOps' data layer for determinism, multi-tenancy security, query performance, and operational efficiency. ### 1.1 Program Scope @@ -326,4 +326,4 @@ This implementation program delivers four PostgreSQL pattern enhancements identi - `docs/db/MIGRATION_STRATEGY.md` - Migration approach - `docs/operations/postgresql-guide.md` - Operational runbook - `docs/adr/0001-postgresql-for-control-plane.md` - Architecture decision -- `docs/product-advisories/14-Dec-2025 - PostgreSQL Patterns Technical Reference.md` - Source advisory +- `docs/product/advisories/14-Dec-2025 - PostgreSQL Patterns Technical Reference.md` - Source advisory diff --git a/docs-archived/implplan/README_VERDICT_ATTESTATIONS.md b/docs-archived/implplan/README_VERDICT_ATTESTATIONS.md index a29b51221..10ebac8e0 100644 --- a/docs-archived/implplan/README_VERDICT_ATTESTATIONS.md +++ b/docs-archived/implplan/README_VERDICT_ATTESTATIONS.md @@ -234,7 +234,7 @@ docs/implplan/archived/ ├── SPRINT_3000_0100_0002_evidence_packs.md └── SPRINT_3000_0100_0003_base_image.md -docs/product-advisories/archived/ +docs/product/advisories/archived/ └── 23-Dec-2026 - Implementation Summary - Competitor Gap Closure.md ``` diff --git a/docs-archived/implplan/SPRINT_0115_0001_0004_concelier_iv.md b/docs-archived/implplan/SPRINT_0115_0001_0004_concelier_iv.md index 983742150..ebd152245 100644 --- a/docs-archived/implplan/SPRINT_0115_0001_0004_concelier_iv.md +++ b/docs-archived/implplan/SPRINT_0115_0001_0004_concelier_iv.md @@ -45,7 +45,7 @@ | 11 | CONCELIER-STORE-AOC-19-005-DEV | DONE | Dataset tarball generated via `scripts/concelier/build-store-aoc-19-005-dataset.sh` (`out/linksets/linksets-stage-backfill.tar.zst`, SHA256 recorded in runbook). Rehearsal executed against local Postgres 16 container (counts: linksets_raw=2, advisory_chunks_raw=3). | Concelier Storage Guild (`src/Concelier/__Libraries/StellaOps.Concelier.Storage.Postgres`) | Execute raw-linkset backfill/rollback plan so Postgres reflects Link-Not-Merge data; rehearse rollback (dev/staging). | | 12 | CONCELIER-TEN-48-001 | DONE (2025-11-28) | Created Tenancy module with `TenantScope`, `TenantCapabilities`, `TenantCapabilitiesResponse`, `ITenantCapabilitiesProvider`, and `TenantScopeNormalizer` per AUTH-TEN-47-001. | Concelier Core Guild (`src/Concelier/__Libraries/StellaOps.Concelier.Core`) | Enforce tenant scoping through normalization/linking; expose capability endpoint advertising `merge=false`; ensure events include tenant IDs. | | 13 | CONCELIER-VEXLENS-30-001 | DONE (2025-12-05) | Implemented `IVexLensAdvisoryKeyProvider`, `VexLensCanonicalKey`, `VexLensCrossLinks`, `VexLensAdvisoryKeyProvider` with canonicalization per CONTRACT-ADVISORY-KEY-001 and CONTRACT-VEX-LENS-005. DI registration via `AddConcelierVexLensServices()`. | Concelier WebService Guild · VEX Lens Guild (`src/Concelier/StellaOps.Concelier.WebService`) | Guarantee advisory key consistency and cross-links consumed by VEX Lens so consensus explanations cite Concelier evidence without merges. | -| 14 | CONCELIER-GAPS-115-014 | DONE (2025-12-02) | None; informs tasks 0–13. | Product Mgmt · Concelier Guild | Address Concelier ingestion gaps CI1–CI10 from `docs/product-advisories/31-Nov-2025 FINDINGS.md`: publish signed observation/linkset schemas and AOC guard, enforce denylist/allowlist via analyzers, require provenance/signature details, feed snapshot governance/staleness, deterministic conflict rules, canonical content-hash/idempotency keys, tenant isolation tests, connector sandbox limits, offline advisory bundle schema/verify, and shared fixtures/CI determinism. | +| 14 | CONCELIER-GAPS-115-014 | DONE (2025-12-02) | None; informs tasks 0–13. | Product Mgmt · Concelier Guild | Address Concelier ingestion gaps CI1–CI10 from `docs/product/advisories/31-Nov-2025 FINDINGS.md`: publish signed observation/linkset schemas and AOC guard, enforce denylist/allowlist via analyzers, require provenance/signature details, feed snapshot governance/staleness, deterministic conflict rules, canonical content-hash/idempotency keys, tenant isolation tests, connector sandbox limits, offline advisory bundle schema/verify, and shared fixtures/CI determinism. | ## Execution Log | Date (UTC) | Update | Owner | diff --git a/docs-archived/implplan/SPRINT_0121_0001_0001_policy_reasoning.md b/docs-archived/implplan/SPRINT_0121_0001_0001_policy_reasoning.md index b545045f3..40d040f06 100644 --- a/docs-archived/implplan/SPRINT_0121_0001_0001_policy_reasoning.md +++ b/docs-archived/implplan/SPRINT_0121_0001_0001_policy_reasoning.md @@ -48,7 +48,7 @@ | 6 | LEDGER-OBS-54-001 | DONE (2025-11-22) | `/v1/ledger/attestations` endpoint implemented with deterministic paging + filters hash; schema/OAS updated | Findings Ledger Guild; Provenance Guild / src/Findings/StellaOps.Findings.Ledger | Verify attestation references for ledger-derived exports; expose `/ledger/attestations` endpoint returning DSSE verification state and chain-of-custody summary | | 7 | LEDGER-RISK-66-001 | DONE (2025-11-21) | PREP-LEDGER-RISK-66-001-RISK-ENGINE-SCHEMA-CO | Findings Ledger Guild; Risk Engine Guild / src/Findings/StellaOps.Findings.Ledger | Add schema migrations for `risk_score`, `risk_severity`, `profile_version`, `explanation_id`, and supporting indexes | | 8 | LEDGER-RISK-66-002 | DONE (2025-11-21) | PREP-LEDGER-RISK-66-002-DEPENDS-ON-66-001-MIG | Findings Ledger Guild / src/Findings/StellaOps.Findings.Ledger | Implement deterministic upsert of scoring results keyed by finding hash/profile version with history audit | -| 9 | LEDGER-GAPS-121-009 | DONE (2025-12-02) | Close FL1–FL10 gaps from `docs/product-advisories/28-Nov-2025 - Findings Ledger and Immutable Audit Trail.md`; align schemas/exports with advisory; depends on schema catalog refresh | Findings Ledger Guild / src/Findings/StellaOps.Findings.Ledger | Remediate FL1–FL10: publish versioned schemas/canonical JSON (events/projections/exports), Merkle + external anchor policy doc, tenant isolation + redaction manifest, DSSE/policy hash linkage, deterministic exports + golden fixtures, offline verifier script, replay/rebuild checksum guard, and quotas/backpressure metrics; update docs under `docs/modules/findings-ledger/`. | +| 9 | LEDGER-GAPS-121-009 | DONE (2025-12-02) | Close FL1–FL10 gaps from `docs/product/advisories/28-Nov-2025 - Findings Ledger and Immutable Audit Trail.md`; align schemas/exports with advisory; depends on schema catalog refresh | Findings Ledger Guild / src/Findings/StellaOps.Findings.Ledger | Remediate FL1–FL10: publish versioned schemas/canonical JSON (events/projections/exports), Merkle + external anchor policy doc, tenant isolation + redaction manifest, DSSE/policy hash linkage, deterministic exports + golden fixtures, offline verifier script, replay/rebuild checksum guard, and quotas/backpressure metrics; update docs under `docs/modules/findings-ledger/`. | ## Execution Log | Date (UTC) | Update | Owner | @@ -56,7 +56,7 @@ | 2025-12-03 | Added Wave Coordination (Wave A done; no open tasks—future work needs new wave/sprint). No status changes. | Project Mgmt | | 2025-12-02 | Completed LEDGER-GAPS-121-009: added schema catalog + FL1–FL10 gap report, Merkle/anchor policy, redaction manifest, DSSE linkage doc, golden export fixtures + checksums, offline verifier script with replay checksum guard, quota/backpressure metrics/code/tests. | Findings Ledger | | 2025-12-02 | Started LEDGER-GAPS-121-009 (FL1–FL10 remediation); status → DOING; drafting schema catalog, Merkle/anchor policy, redaction manifest, offline verifier, and backpressure metrics. | Findings Ledger | -| 2025-12-01 | Added LEDGER-GAPS-121-009 to track FL1–FL10 remediation from `docs/product-advisories/28-Nov-2025 - Findings Ledger and Immutable Audit Trail.md`; status TODO pending schema catalog refresh. | Project Mgmt | +| 2025-12-01 | Added LEDGER-GAPS-121-009 to track FL1–FL10 remediation from `docs/product/advisories/28-Nov-2025 - Findings Ledger and Immutable Audit Trail.md`; status TODO pending schema catalog refresh. | Project Mgmt | | 2025-12-02 | Clarified LEDGER-GAPS-121-009 outputs: schema catalog, Merkle/anchor policy, tenant isolation/redaction manifest, DSSE/policy linkage, deterministic exports + golden fixtures, offline verifier, replay checksums, and quotas/backpressure metrics. | Project Mgmt | | 2025-11-25 | Moved all remaining BLOCKED tasks (OAS, ATTEST, OBS-55, PACKS) to new sprint `SPRINT_0121_0001_0002_policy_reasoning_blockers`; cleansed Delivery Tracker to active/completed items only. | Project Mgmt | | 2025-11-22 | Implemented LEDGER-OBS-54-001: `/v1/ledger/attestations` endpoint with paging token + filters hash guard; OAS/schema updated; status set to DONE. | Findings Ledger | @@ -90,7 +90,7 @@ - LEDGER-OBS-54-001 delivered: `/v1/ledger/attestations` now live with deterministic paging + filters hash; downstream OBS-55-001 (incident mode) still blocked pending incident diagnostics contract. - Current state: findings export endpoint and paging contracts implemented; VEX/advisory/SBOM endpoints stubbed (auth + shape) but await underlying projection/query schemas. Risk schema/implementation (LEDGER-RISK-66-001/002) delivered. Remaining blockers: OAS/SDK surface (61/62/63), attestation HTTP host (OBS-54/55), and packs time-travel contract (PACKS-42-001). - Export endpoints now enforce filter hash + page token determinism for VEX/advisory/SBOMs but still return empty sets until backing projections land; downstream SDK/OAS tasks should treat payload shapes as stable. -- New advisory gaps (FL1–FL10) tracked via LEDGER-GAPS-121-009; requires schema catalog refresh and alignment of Merkle/anchoring, redaction, DSSE linkage, and offline verify tooling with `docs/product-advisories/28-Nov-2025 - Findings Ledger and Immutable Audit Trail.md` recommendations. +- New advisory gaps (FL1–FL10) tracked via LEDGER-GAPS-121-009; requires schema catalog refresh and alignment of Merkle/anchoring, redaction, DSSE linkage, and offline verify tooling with `docs/product/advisories/28-Nov-2025 - Findings Ledger and Immutable Audit Trail.md` recommendations. - FL1–FL10 remediation shipped: schema catalog + gap report, Merkle/anchor policy, redaction manifest (JSON/YAML), DSSE linkage guidance, golden export fixtures/checksums, offline verify script with replay checksum guard, and quota/backpressure metrics/tests wired into ledger service. ## Next Checkpoints diff --git a/docs-archived/implplan/SPRINT_0125_0001_0001_mirror.md b/docs-archived/implplan/SPRINT_0125_0001_0001_mirror.md index 47279ac71..cc107d967 100644 --- a/docs-archived/implplan/SPRINT_0125_0001_0001_mirror.md +++ b/docs-archived/implplan/SPRINT_0125_0001_0001_mirror.md @@ -34,9 +34,9 @@ | 8 | AIRGAP-TIME-57-001 | DONE (2025-12-06) | Real Ed25519 Roughtime + RFC3161 SignedCms verification; TimeAnchorPolicyService added | AirGap Time Guild | Provide trusted time-anchor service & policy. | | 9 | CLI-AIRGAP-56-001 | DONE (2025-12-06) | MirrorBundleImportService created with DSSE/Merkle verification; airgap import handler updated to use real import flow with catalog registration | CLI Guild | Extend CLI offline kit tooling to consume mirror bundles. | | 10 | PROV-OBS-53-001 | DONE (2025-11-23) | Observer doc + verifier script `scripts/mirror/verify_thin_bundle.py` in repo; validates hashes, determinism, and manifest/index digests. | Security Guild | Define provenance observers + verification hooks. | -| 11 | OFFKIT-GAPS-125-011 | DONE (2025-12-02) | Bundle meta + offline policy layers + verifier updated; see milestone.json and bundle DSSE. | Product Mgmt · Mirror/AirGap Guilds | Address offline-kit gaps OK1–OK10 from `docs/product-advisories/31-Nov-2025 FINDINGS.md`: key manifest/rotation + PQ co-sign, tool hashing/signing, DSSE-signed top-level manifest linking all artifacts, checkpoint freshness/mirror metadata, deterministic packaging flags, inclusion of scan/VEX/policy/graph hashes, time anchor bundling, transport/chunking + chain-of-custody, tenant/env scoping, and scripted verify with negative-path guidance. | -| 12 | REKOR-GAPS-125-012 | DONE (2025-12-02) | Rekor policy layer + bundle meta/TUF DSSE; refer to `layers/rekor-policy.json`. | Product Mgmt · Mirror/AirGap · Attestor Guilds | Address Rekor v2/DSSE gaps RK1–RK10 from `docs/product-advisories/31-Nov-2025 FINDINGS.md`: enforce dsse/hashedrekord only, payload size preflight + chunk manifests, public/private routing policy, shard-aware checkpoints, idempotent submission keys, Sigstore bundles in kits, checkpoint freshness bounds, PQ dual-sign options, error taxonomy/backoff, policy/graph annotations in DSSE/bundles. | -| 13 | MIRROR-GAPS-125-013 | DONE (2025-12-02) | Mirror policy layer + tenant/env scope + verifier; see mirror-policy.json & bundle meta. | Product Mgmt · Mirror Creator Guild · AirGap Guild | Address mirror/offline strategy gaps MS1–MS10 from `docs/product-advisories/31-Nov-2025 FINDINGS.md`: signed/versioned mirror schemas, DSSE/TUF rotation policy (incl. PQ), delta spec with tombstones/base hash, time-anchor freshness enforcement, tenant/env scoping, distribution integrity for HTTP/OCI/object, chunking/size rules, standard verify script, metrics/alerts for build/import/verify, and SemVer/change log for mirror formats. | +| 11 | OFFKIT-GAPS-125-011 | DONE (2025-12-02) | Bundle meta + offline policy layers + verifier updated; see milestone.json and bundle DSSE. | Product Mgmt · Mirror/AirGap Guilds | Address offline-kit gaps OK1–OK10 from `docs/product/advisories/31-Nov-2025 FINDINGS.md`: key manifest/rotation + PQ co-sign, tool hashing/signing, DSSE-signed top-level manifest linking all artifacts, checkpoint freshness/mirror metadata, deterministic packaging flags, inclusion of scan/VEX/policy/graph hashes, time anchor bundling, transport/chunking + chain-of-custody, tenant/env scoping, and scripted verify with negative-path guidance. | +| 12 | REKOR-GAPS-125-012 | DONE (2025-12-02) | Rekor policy layer + bundle meta/TUF DSSE; refer to `layers/rekor-policy.json`. | Product Mgmt · Mirror/AirGap · Attestor Guilds | Address Rekor v2/DSSE gaps RK1–RK10 from `docs/product/advisories/31-Nov-2025 FINDINGS.md`: enforce dsse/hashedrekord only, payload size preflight + chunk manifests, public/private routing policy, shard-aware checkpoints, idempotent submission keys, Sigstore bundles in kits, checkpoint freshness bounds, PQ dual-sign options, error taxonomy/backoff, policy/graph annotations in DSSE/bundles. | +| 13 | MIRROR-GAPS-125-013 | DONE (2025-12-02) | Mirror policy layer + tenant/env scope + verifier; see mirror-policy.json & bundle meta. | Product Mgmt · Mirror Creator Guild · AirGap Guild | Address mirror/offline strategy gaps MS1–MS10 from `docs/product/advisories/31-Nov-2025 FINDINGS.md`: signed/versioned mirror schemas, DSSE/TUF rotation policy (incl. PQ), delta spec with tombstones/base hash, time-anchor freshness enforcement, tenant/env scoping, distribution integrity for HTTP/OCI/object, chunking/size rules, standard verify script, metrics/alerts for build/import/verify, and SemVer/change log for mirror formats. | ## Execution Log | Date (UTC) | Update | Owner | diff --git a/docs-archived/implplan/SPRINT_0140_0001_0001_runtime_signals.md b/docs-archived/implplan/SPRINT_0140_0001_0001_runtime_signals.md index 2f2e57edb..d7653ad7e 100644 --- a/docs-archived/implplan/SPRINT_0140_0001_0001_runtime_signals.md +++ b/docs-archived/implplan/SPRINT_0140_0001_0001_runtime_signals.md @@ -31,8 +31,8 @@ | 2 | 140.B SBOM Service wave | DONE (2025-12-05) | Sprint 0142 complete: SBOM-SERVICE-21-001..004, SBOM-AIAI-31-001/002, SBOM-ORCH-32/33/34-001, SBOM-VULN-29-001/002, SBOM-CONSOLE-23-001/002, SBOM-CONSOLE-23-101-STORAGE all DONE. | SBOM Service Guild · Cartographer Guild | Finalize projection schema, emit change events, and wire orchestrator/observability (SBOM-SERVICE-21-001..004, SBOM-AIAI-31-001/002). | | 3 | 140.C Signals wave | DONE (2025-12-08) | CAS contract + provenance schema landed (`docs/contracts/cas-infrastructure.md`, `docs/signals/provenance-24-003.md`, `docs/schemas/provenance-feed.schema.json`); SIGNALS-24-002/003 implemented. | Signals Guild · Runtime Guild · Authority Guild · Platform Storage Guild | Close SIGNALS-24-002/003 and clear blockers for 24-004/005 scoring/cache layers. | | 4 | 140.D Zastava wave | DONE (2025-11-28) | Sprint 0144 (Zastava Runtime Signals) complete: all ZASTAVA-ENV/SECRETS/SURFACE tasks DONE. | Zastava Observer/Webhook Guilds · Surface Guild | Prepare env/secret helpers and admission hooks; start once cache endpoints and helpers are published. | -| 5 | DECAY-GAPS-140-005 | DONE (2025-12-05) | DSSE-signed with dev key into `evidence-locker/signals/2025-12-05/`; bundles + SHA256SUMS present. | Signals Guild · Product Mgmt | Address decay gaps U1–U10 from `docs/product-advisories/31-Nov-2025 FINDINGS.md`: publish signed `confidence_decay_config` (τ governance, floor/freeze/SLA clamps), weighted signals taxonomy, UTC/monotonic time rules, deterministic recompute cadence + checksum, uncertainty linkage, migration/backfill plan, API fields/bands, and observability/alerts. | -| 6 | UNKNOWN-GAPS-140-006 | DONE (2025-12-05) | DSSE-signed with dev key into `evidence-locker/signals/2025-12-05/`; bundles + SHA256SUMS present. | Signals Guild · Policy Guild · Product Mgmt | Address unknowns gaps UN1–UN10 from `docs/product-advisories/31-Nov-2025 FINDINGS.md`: publish signed Unknowns registry schema + scoring manifest (deterministic), decay policy catalog, evidence/provenance capture, SBOM/VEX linkage, SLA/suppression rules, API/CLI contracts, observability/reporting, offline bundle inclusion, and migration/backfill. | +| 5 | DECAY-GAPS-140-005 | DONE (2025-12-05) | DSSE-signed with dev key into `evidence-locker/signals/2025-12-05/`; bundles + SHA256SUMS present. | Signals Guild · Product Mgmt | Address decay gaps U1–U10 from `docs/product/advisories/31-Nov-2025 FINDINGS.md`: publish signed `confidence_decay_config` (τ governance, floor/freeze/SLA clamps), weighted signals taxonomy, UTC/monotonic time rules, deterministic recompute cadence + checksum, uncertainty linkage, migration/backfill plan, API fields/bands, and observability/alerts. | +| 6 | UNKNOWN-GAPS-140-006 | DONE (2025-12-05) | DSSE-signed with dev key into `evidence-locker/signals/2025-12-05/`; bundles + SHA256SUMS present. | Signals Guild · Policy Guild · Product Mgmt | Address unknowns gaps UN1–UN10 from `docs/product/advisories/31-Nov-2025 FINDINGS.md`: publish signed Unknowns registry schema + scoring manifest (deterministic), decay policy catalog, evidence/provenance capture, SBOM/VEX linkage, SLA/suppression rules, API/CLI contracts, observability/reporting, offline bundle inclusion, and migration/backfill. | | 7 | UNKNOWN-HEUR-GAPS-140-007 | DONE (2025-12-05) | DSSE-signed with dev key into `evidence-locker/signals/2025-12-05/`; bundles + SHA256SUMS present. | Signals Guild · Policy Guild · Product Mgmt | Remediate UT1–UT10: publish signed heuristic catalog/schema with deterministic scoring formula, quality bands, waiver policy with DSSE, SLA coupling, offline kit packaging, observability/alerts, backfill plan, explainability UX fields/exports, and fixtures with golden outputs. | | 9 | COSIGN-INSTALL-140 | DONE (2025-12-02) | cosign v3.0.2 installed at `/usr/local/bin/cosign`; repo fallback v2.6.0 staged under `tools/cosign` (sha256 `ea5c65f99425d6cfbb5c4b5de5dac035f14d09131c1a0ea7c7fc32eab39364f9`). | Platform / Build Guild | Deliver cosign binary locally (no network dependency at signing time) or alternate signer; document path and version in Execution Log. | | 8 | SIGNER-ASSIGN-140 | DONE (2025-12-02) | Signer designated: Signals Guild (Alice Carter); DSSE signing checkpoint remains 2025-12-05. | Signals Guild · Policy Guild | Name signer(s), record in Execution Log, and proceed to DSSE signing + Evidence Locker ingest. | diff --git a/docs-archived/implplan/SPRINT_0157_0001_0002_taskrunner_blockers.md b/docs-archived/implplan/SPRINT_0157_0001_0002_taskrunner_blockers.md index 5643a6e38..76c1a54c9 100644 --- a/docs-archived/implplan/SPRINT_0157_0001_0002_taskrunner_blockers.md +++ b/docs-archived/implplan/SPRINT_0157_0001_0002_taskrunner_blockers.md @@ -6,7 +6,7 @@ - **Working directory:** `src/TaskRunner/StellaOps.TaskRunner`. ## Dependencies & Concurrency -- Upstream contracts now anchored in `docs/product-advisories/29-Nov-2025 - Task Pack Orchestration and Automation.md` + `docs/modules/taskrunner/architecture.md` (supersedes prior Sprint 120/130/140 wait). +- Upstream contracts now anchored in `docs/product/advisories/29-Nov-2025 - Task Pack Orchestration and Automation.md` + `docs/modules/taskrunner/architecture.md` (supersedes prior Sprint 120/130/140 wait). - Single-thread on TASKRUN-41-001 until initial run API + storage implementation lands. ## Documentation Prerequisites @@ -30,7 +30,7 @@ | 2025-11-25 | Carried forward TASKRUN-41-001 from Sprint 0157-0001-0001; awaiting upstream contracts before starting implementation. | Project Mgmt | ## Decisions & Risks -- Contract source of truth: `docs/product-advisories/29-Nov-2025 - Task Pack Orchestration and Automation.md` + `docs/modules/taskrunner/architecture.md` (plan hash, step types, API surface, Mongo model). Keep sprint tasks aligned to these docs. +- Contract source of truth: `docs/product/advisories/29-Nov-2025 - Task Pack Orchestration and Automation.md` + `docs/modules/taskrunner/architecture.md` (plan hash, step types, API surface, Mongo model). Keep sprint tasks aligned to these docs. - Ensure Authority approval token claims (`pack_run_id`, `pack_gate_id`, `pack_plan_hash`) enforced before enabling approvals pause/resume. - Downstream OAS/OBS/air-gap tasks now depend on integration work, not missing contracts; start sequencing in Sprint 0157-0001-0001. diff --git a/docs-archived/implplan/SPRINT_0158_0001_0002_taskrunner_ii.md b/docs-archived/implplan/SPRINT_0158_0001_0002_taskrunner_ii.md index 823d48f87..48bcd1bac 100644 --- a/docs-archived/implplan/SPRINT_0158_0001_0002_taskrunner_ii.md +++ b/docs-archived/implplan/SPRINT_0158_0001_0002_taskrunner_ii.md @@ -16,7 +16,7 @@ - docs/modules/platform/architecture-overview.md - docs/modules/platform/architecture.md - docs/modules/taskrunner/architecture.md -- docs/product-advisories/29-Nov-2025 - Task Pack Orchestration and Automation.md +- docs/product/advisories/29-Nov-2025 - Task Pack Orchestration and Automation.md - docs/api/gateway/tenant-auth.md - docs/task-packs/spec.md - docs/task-packs/authoring-guide.md diff --git a/docs-archived/implplan/SPRINT_0161_0001_0001_evidencelocker.md b/docs-archived/implplan/SPRINT_0161_0001_0001_evidencelocker.md index f71fc5a23..23e2b12e0 100644 --- a/docs-archived/implplan/SPRINT_0161_0001_0001_evidencelocker.md +++ b/docs-archived/implplan/SPRINT_0161_0001_0001_evidencelocker.md @@ -37,7 +37,7 @@ | 4 | RUNBOOK-REPLAY-187-004 | DONE (2025-12-10) | Runbook updated with retention schema hook. | Docs Guild / Ops Guild | Publish `/docs/runbooks/replay_ops.md` coverage for retention enforcement, RootPack rotation, verification drills. | | 5 | CRYPTO-REGISTRY-DECISION-161 | DONE | Decision recorded in `docs/security/crypto-registry-decision-2025-11-18.md`; publish contract defaults. | Security Guild / Evidence Locker Guild | Capture decision from 2025-11-18 review; emit changelog + reference implementation for downstream parity. | | 6 | EVID-CRYPTO-90-001 | DONE | Implemented; `MerkleTreeCalculator` now uses `ICryptoProviderRegistry` for sovereign crypto routing. | Evidence Locker Guild / Security Guild | Route hashing/signing/bundle encryption through `ICryptoProviderRegistry`/`ICryptoHash` for sovereign crypto providers. | -| 7 | EVID-GAPS-161-007 | DONE (2025-12-04) | EB1-EB10 closed; see plan `docs/modules/evidence-locker/eb-gaps-161-007-plan.md` and changelog `docs/modules/evidence-locker/CHANGELOG.md`. | Product Mgmt / Evidence Locker Guild / CLI Guild | Address EB1-EB10 from `docs/product-advisories/archived/27-Nov-2025-superseded/28-Nov-2025 - Evidence Bundle and Replay Contracts.md`: publish `bundle.manifest.schema.json` + `checksums.schema.json` (canonical JSON), hash/Merkle recipe doc, mandatory DSSE predicate/log policy, replay provenance block, chunking/CAS rules, incident-mode signed activation/exit, tenant isolation + redaction manifest, offline verifier script (`docs/modules/evidence-locker/verify-offline.md`), golden bundles/replay fixtures under `tests/EvidenceLocker/Bundles/Golden`, and SemVer/change-log updates. | +| 7 | EVID-GAPS-161-007 | DONE (2025-12-04) | EB1-EB10 closed; see plan `docs/modules/evidence-locker/eb-gaps-161-007-plan.md` and changelog `docs/modules/evidence-locker/CHANGELOG.md`. | Product Mgmt / Evidence Locker Guild / CLI Guild | Address EB1-EB10 from `docs/product/advisories/archived/27-Nov-2025-superseded/28-Nov-2025 - Evidence Bundle and Replay Contracts.md`: publish `bundle.manifest.schema.json` + `checksums.schema.json` (canonical JSON), hash/Merkle recipe doc, mandatory DSSE predicate/log policy, replay provenance block, chunking/CAS rules, incident-mode signed activation/exit, tenant isolation + redaction manifest, offline verifier script (`docs/modules/evidence-locker/verify-offline.md`), golden bundles/replay fixtures under `tests/EvidenceLocker/Bundles/Golden`, and SemVer/change-log updates. | ## Action Tracker | Action | Owner(s) | Due | Status | @@ -94,7 +94,7 @@ | 2025-11-20 | Completed PREP-EVID-REPLAY-187-001, PREP-CLI-REPLAY-187-002, and PREP-RUNBOOK-REPLAY-187-004; published prep docs at `docs/modules/evidence-locker/replay-payload-contract.md`, `docs/modules/cli/guides/replay-cli-prep.md`, and `docs/runbooks/replay_ops_prep_187_004.md`. | Implementer | | 2025-11-20 | Added schema readiness and replay delivery prep notes for Evidence Locker Guild; see `docs/modules/evidence-locker/prep/2025-11-20-schema-readiness-blockers.md` and `.../2025-11-20-replay-delivery-sync.md`. Marked PREP-EVIDENCE-LOCKER-GUILD-BLOCKED-SCHEMAS-NO and PREP-EVIDENCE-LOCKER-GUILD-REPLAY-DELIVERY-GU DONE. | Implementer | | 2025-11-27 | Completed EVID-CRYPTO-90-001: Extended `ICryptoProviderRegistry` with `ContentHashing` capability and `ResolveHasher` method; created `ICryptoHasher` interface with `DefaultCryptoHasher` implementation; wired `MerkleTreeCalculator` to use crypto registry for sovereign crypto routing; added `EvidenceCryptoOptions` for algorithm/provider configuration. | Implementer | -| 2025-12-01 | Added EVID-GAPS-161-007 to capture EB1-EB10 remediation from `docs/product-advisories/archived/27-Nov-2025-superseded/28-Nov-2025 - Evidence Bundle and Replay Contracts.md`. | Product Mgmt | +| 2025-12-01 | Added EVID-GAPS-161-007 to capture EB1-EB10 remediation from `docs/product/advisories/archived/27-Nov-2025-superseded/28-Nov-2025 - Evidence Bundle and Replay Contracts.md`. | Product Mgmt | | 2025-12-02 | Scoped EVID-GAPS-161-007 deliverables: schemas + DSSE, Merkle recipe, replay provenance, chunk/CAS rules, incident governance, tenant redaction, offline verifier doc, golden fixtures path, and SemVer/change-log updates. | Project Mgmt | | 2025-12-04 | Moved EVID-GAPS-161-007 to DOING; drafted EB1/EB2 schemas, offline verifier guide, gap plan, and golden fixtures path. | Project Mgmt | | 2025-12-04 | Updated attestation, replay, incident-mode docs with DSSE subject=Merkle root, log policy, replay provenance block, and signed incident toggles; added CAS/Merkle rules to bundle packaging. | Implementer | diff --git a/docs-archived/implplan/SPRINT_0162_0001_0001_exportcenter_i.md b/docs-archived/implplan/SPRINT_0162_0001_0001_exportcenter_i.md index 398786eac..307a0d07b 100644 --- a/docs-archived/implplan/SPRINT_0162_0001_0001_exportcenter_i.md +++ b/docs-archived/implplan/SPRINT_0162_0001_0001_exportcenter_i.md @@ -52,7 +52,7 @@ | 10 | EXPORT-OAS-61-001 | DONE | OpenAPI v1 spec published with deterministic examples, ETag/versioning, and standard error envelopes. | Exporter Service Guild · API Contracts Guild | Update Exporter OAS covering profiles/runs/downloads with standard error envelope + examples. | | 11 | EXPORT-OAS-61-002 | DONE | Discovery endpoint implemented with ETag, If-None-Match, Cache-Control headers. | Exporter Service Guild | `/.well-known/openapi` discovery endpoint with version metadata and ETag. | | 12 | EXPORT-OAS-62-001 | DONE | SDK client project with interface, implementation, streaming/lifecycle helpers, and smoke tests. | Exporter Service Guild · SDK Generator Guild | Ensure SDKs include export profile/run clients with streaming helpers; add smoke tests. | -| 13 | EXPORT-GAPS-162-013 | DONE (2025-12-04) | None; informs tasks 1–12. | Product Mgmt · Exporter Guild · Evidence Locker Guild | Address EC1–EC10 from `docs/product-advisories/28-Nov-2025 - Export Center and Reporting Strategy.md`: publish signed ExportProfile + manifest schemas with selector validation; define per-adapter determinism rules + rerun-hash CI; mandate DSSE/SLSA attestation with log metadata; enforce cross-tenant approval flow; require distribution integrity headers + OCI annotations; pin Trivy schema versions; formalize mirror delta/tombstone rules; document encryption/recipient policy; set quotas/backpressure; and produce offline export kit + verify script under `docs/modules/export-center/determinism.md` with fixtures in `src/ExportCenter/__fixtures`. | +| 13 | EXPORT-GAPS-162-013 | DONE (2025-12-04) | None; informs tasks 1–12. | Product Mgmt · Exporter Guild · Evidence Locker Guild | Address EC1–EC10 from `docs/product/advisories/28-Nov-2025 - Export Center and Reporting Strategy.md`: publish signed ExportProfile + manifest schemas with selector validation; define per-adapter determinism rules + rerun-hash CI; mandate DSSE/SLSA attestation with log metadata; enforce cross-tenant approval flow; require distribution integrity headers + OCI annotations; pin Trivy schema versions; formalize mirror delta/tombstone rules; document encryption/recipient policy; set quotas/backpressure; and produce offline export kit + verify script under `docs/modules/export-center/determinism.md` with fixtures in `src/ExportCenter/__fixtures`. | ## Action Tracker | Action | Owner(s) | Due | Status | @@ -122,7 +122,7 @@ | 2025-11-20 | Completed PREP-EXPORT-AIRGAP-57-001: published export portable bundle contract at `docs/modules/export-center/prep/2025-11-20-export-airgap-57-001-prep.md`; status set to DONE. | Implementer | | 2025-11-20 | Confirmed PREP-EXPORT-AIRGAP-57-001 unowned; set to DOING to begin airgap evidence export prep. | Planning | | 2025-11-20 | Published prep docs for EXPORT airgap chain and attest (56-001/002/57-001/58-001/74-001) plus DVOFF-64-002; set P1–P6 to DOING after confirming unowned. | Project Mgmt | -| 2025-12-01 | Added EXPORT-GAPS-162-013 to capture EC1–EC10 remediation from `docs/product-advisories/28-Nov-2025 - Export Center and Reporting Strategy.md`. | Product Mgmt | +| 2025-12-01 | Added EXPORT-GAPS-162-013 to capture EC1–EC10 remediation from `docs/product/advisories/28-Nov-2025 - Export Center and Reporting Strategy.md`. | Product Mgmt | | 2025-12-02 | Clarified EXPORT-GAPS-162-013 deliverables: schemas with selector validation, per-adapter determinism + CI, attestation/log policy, tenant approval flow, integrity headers/OCI annotations, Trivy pinning, delta/tombstone rules, encryption policy, quotas/backpressure, offline kit verify script, and fixtures path. | Project Mgmt | | 2025-11-20 | Published prep docs for DVOFF-64-002 and EXPORT-AIRGAP-56-001; set P1/P2 to DOING after confirming unowned. | Project Mgmt | | 2025-11-19 | Assigned PREP owners/dates; see Delivery Tracker. | Planning | diff --git a/docs-archived/implplan/SPRINT_0171_0001_0001_notifier_i.md b/docs-archived/implplan/SPRINT_0171_0001_0001_notifier_i.md index 06af470ad..822996411 100644 --- a/docs-archived/implplan/SPRINT_0171_0001_0001_notifier_i.md +++ b/docs-archived/implplan/SPRINT_0171_0001_0001_notifier_i.md @@ -81,7 +81,7 @@ - Risk alerts depend on POLICY-RISK-40-002 export; schedule slip would re-baseline RISK tasks. - Keep Offline Kit parity for templates and secrets handling before enabling new endpoints. - Advisory gap remediation (NR1–NR10) added as NOTIFY-GAPS-171-014; requires schema/catalog refresh, tenant/approval enforcement, deterministic rendering, quotas/backpressure/DLQ, retry/idempotency policy, webhook/ack security, redaction/PII limits, observability SLO alerts, offline notify-kit with DSSE, and mandatory simulation evidence before activation. -- NOTIFY-GAPS-171-014 now scoped (see `docs/product-advisories/31-Nov-2025 FINDINGS.md` + `docs/notifications/gaps-nr1-nr10.md`); remediation requires publishing the schema catalog + DSSE, redaction/approval/observability docs, and offline notify-kit artefacts. +- NOTIFY-GAPS-171-014 now scoped (see `docs/product/advisories/31-Nov-2025 FINDINGS.md` + `docs/notifications/gaps-nr1-nr10.md`); remediation requires publishing the schema catalog + DSSE, redaction/approval/observability docs, and offline notify-kit artefacts. - **Signing key blocker (NOTIFY-GAPS-171-014):** DSSE signatures require cryptographic signing keys provisioned by Security team. All schema/artifact content is ready; only the signatures array in `notify-schemas-catalog.dsse.json` and `notify-kit.manifest.dsse.json` remain empty. Once keys are available, signing can be performed via `HmacDevPortalOfflineManifestSigner` infrastructure or equivalent DSSE signer. - **Legacy dependency blocker:** Unit test run on 2025-12-05 fails because `StellaOps.Notify.Storage.Mongo` project is missing while Worker still references `StellaOps.Notify.Storage.*` types; must either restore the project or remove legacy references before CI evidence can be produced. diff --git a/docs-archived/implplan/SPRINT_0186_0001_0001_record_deterministic_execution.md b/docs-archived/implplan/SPRINT_0186_0001_0001_record_deterministic_execution.md index b0253d851..5b88a4314 100644 --- a/docs-archived/implplan/SPRINT_0186_0001_0001_record_deterministic_execution.md +++ b/docs-archived/implplan/SPRINT_0186_0001_0001_record_deterministic_execution.md @@ -16,7 +16,7 @@ - docs/replay/TEST_STRATEGY.md - docs/modules/scanner/architecture.md - docs/modules/sbomer/architecture.md (for SPDX 3.0.1 tasks) -- Product advisory: `docs/product-advisories/27-Nov-2025 - Deep Architecture Brief - SBOM-First, VEX-Ready Spine.md` +- Product advisory: `docs/product/advisories/27-Nov-2025 - Deep Architecture Brief - SBOM-First, VEX-Ready Spine.md` - SPDX 3.0.1 specification: https://spdx.github.io/spdx-spec/v3.0.1/ ## Delivery Tracker diff --git a/docs-archived/implplan/SPRINT_0190_0001_0001_cvss_v4_receipts.md b/docs-archived/implplan/SPRINT_0190_0001_0001_cvss_v4_receipts.md index 3897e1bf5..f34d3e11b 100644 --- a/docs-archived/implplan/SPRINT_0190_0001_0001_cvss_v4_receipts.md +++ b/docs-archived/implplan/SPRINT_0190_0001_0001_cvss_v4_receipts.md @@ -16,7 +16,7 @@ - `docs/07_HIGH_LEVEL_ARCHITECTURE.md` - `docs/modules/policy/architecture.md` - `docs/modules/signals/architecture.md` -- Product advisory: `docs/product-advisories/25-Nov-2025 - Add CVSS v4.0 Score Receipts for Transparency.md` +- Product advisory: `docs/product/advisories/25-Nov-2025 - Add CVSS v4.0 Score Receipts for Transparency.md` - FIRST CVSS v4.0 Specification: https://www.first.org/cvss/v4-0/specification-document - FIRST CVSS v4.0 Calculator: https://www.first.org/cvss/calculator/4-0 - Module AGENTS.md: Create `src/Policy/StellaOps.Policy.Scoring/AGENTS.md` as part of task 1 @@ -37,8 +37,8 @@ | 10 | CVSS-CLI-190-010 | DONE (2025-12-06) | Depends on 190-009 (API readiness). | CLI Guild (`src/Cli/StellaOps.Cli`) | CLI verbs shipped: `stella cvss score --vuln --policy-file --vector `, `stella cvss show `, `stella cvss history `, `stella cvss export --format json`. | | 11 | CVSS-UI-190-011 | DONE (2025-12-07) | Implemented CVSS receipt viewer in Web console (`src/Web/StellaOps.Web`): route `/cvss/receipts/:receiptId`, standalone component with score badge, tabs (Base/Threat/Environmental/Evidence/Policy/History), and stub client. | UI Guild (`src/Web/StellaOps.Web`) | UI components: Score badge with CVSS-BTE label, tabbed receipt viewer (Base/Threat/Environmental/Supplemental/Evidence/Policy/History), "Recalculate with my env" button, export options. | | 12 | CVSS-DOCS-190-012 | DONE (2025-12-07) | Docs updated (`cvss-v4.md`, API/CLI reference). | Docs Guild (`docs/modules/policy/cvss-v4.md`, `docs/09_API_CLI_REFERENCE.md`) | Document CVSS v4.0 scoring system: data model, policy format, API reference, CLI usage, UI guide, determinism guarantees. | -| 13 | CVSS-GAPS-190-013 | DONE (2025-12-01) | None; informs tasks 5–12. | Product Mgmt · Policy Guild | Address gap findings (CV1–CV10) from `docs/product-advisories/25-Nov-2025 - Add CVSS v4.0 Score Receipts for Transparency.md`: policy lifecycle/replay, canonical hashing spec with test vectors, threat/env freshness, tenant-scoped receipts, v3.1→v4.0 conversion flagging, evidence CAS/DSSE linkage, append-only receipt rules, deterministic exports, RBAC boundaries, monitoring/alerts for DSSE/policy drift. | -| 14 | CVSS-GAPS-190-014 | DONE (2025-12-03) | Close CVM1–CVM10 from `docs/product-advisories/25-Nov-2025 - Add CVSS v4.0 Score Receipts for Transparency.md`; depends on schema/hash publication and API/UI contracts | Policy Guild · Platform Guild | Remediated CVM1–CVM10: updated `docs/modules/policy/cvss-v4.md` with canonical hashing/DSSE/export/profile guidance, added golden hash fixture under `tests/Policy/StellaOps.Policy.Scoring.Tests/Fixtures/hashing/`, and documented monitoring/backfill rules. | +| 13 | CVSS-GAPS-190-013 | DONE (2025-12-01) | None; informs tasks 5–12. | Product Mgmt · Policy Guild | Address gap findings (CV1–CV10) from `docs/product/advisories/25-Nov-2025 - Add CVSS v4.0 Score Receipts for Transparency.md`: policy lifecycle/replay, canonical hashing spec with test vectors, threat/env freshness, tenant-scoped receipts, v3.1→v4.0 conversion flagging, evidence CAS/DSSE linkage, append-only receipt rules, deterministic exports, RBAC boundaries, monitoring/alerts for DSSE/policy drift. | +| 14 | CVSS-GAPS-190-014 | DONE (2025-12-03) | Close CVM1–CVM10 from `docs/product/advisories/25-Nov-2025 - Add CVSS v4.0 Score Receipts for Transparency.md`; depends on schema/hash publication and API/UI contracts | Policy Guild · Platform Guild | Remediated CVM1–CVM10: updated `docs/modules/policy/cvss-v4.md` with canonical hashing/DSSE/export/profile guidance, added golden hash fixture under `tests/Policy/StellaOps.Policy.Scoring.Tests/Fixtures/hashing/`, and documented monitoring/backfill rules. | | 15 | CVSS-AGENTS-190-015 | DONE (2025-12-06) | None. | Policy Guild (`src/Policy/StellaOps.Policy.Gateway`) | Create/update `src/Policy/StellaOps.Policy.Gateway/AGENTS.md` covering CVSS receipt APIs (contracts, tests, determinism rules) so WebService work can proceed under implementer rules. | | 16 | CVSS-AGENTS-190-016 | DONE (2025-12-06) | None. | Concelier Guild (`src/Concelier/AGENTS.md` + module docs) | Refresh Concelier AGENTS to allow CVSS v4.0 vector ingest tasks (190-008) with provenance requirements, offline posture, and policy alignment. | @@ -106,6 +106,6 @@ | 2025-11-29 | CVSS-RECEIPT/DSSE/HISTORY tasks wired to PostgreSQL: added `policy.cvss_receipts` migration, `PostgresReceiptRepository`, DI registration, and integration test (`PostgresReceiptRepositoryTests`). Test run failed locally because Docker/Testcontainers not available; code compiles and unit tests still pass. | Implementer | | 2025-11-29 | Marked tasks 8–12 BLOCKED: Concelier ingestion requires cross-module AGENTS; Policy WebService lacks AGENTS, so API/CLI/UI/DOCS cannot proceed under implementer rules. | Implementer | | 2025-11-28 | Ran `dotnet test src/Policy/__Tests/StellaOps.Policy.Scoring.Tests` (Release); 35 tests passed. Adjusted MacroVector lookup for FIRST sample vectors; duplicate PackageReference warnings remain to be cleaned separately. | Implementer | -| 2025-12-01 | Added CVSS gap analysis `docs/product-advisories/25-Nov-2025 - Add CVSS v4.0 Score Receipts for Transparency.md` and created task CVSS-GAPS-190-013 to track remediation. | Product Mgmt | +| 2025-12-01 | Added CVSS gap analysis `docs/product/advisories/25-Nov-2025 - Add CVSS v4.0 Score Receipts for Transparency.md` and created task CVSS-GAPS-190-013 to track remediation. | Product Mgmt | | 2025-12-01 | CVSS-GAPS-190-013 DONE: added canonical hashing (ReceiptCanonicalizer), tenant-scoped receipts with export hash placeholder, threat freshness metadata, evidence provenance fields, v3.1→v4.0 conversion helper, and hash-ordering determinism tests. | Implementer | | 2025-12-02 | Expanded CVSS-GAPS-190-014 scope: added doc target `docs/modules/policy/cvss-v4.md`, replay/backfill rules, tenant/RBAC segregation, deterministic export profile, v3.1→v4.0 conversion flag, monitoring/alert requirements, and golden fixtures path. | Project Mgmt | diff --git a/docs-archived/implplan/SPRINT_0201_0001_0001_cli_i.md b/docs-archived/implplan/SPRINT_0201_0001_0001_cli_i.md index cc3e74e3a..6f5f9d85d 100644 --- a/docs-archived/implplan/SPRINT_0201_0001_0001_cli_i.md +++ b/docs-archived/implplan/SPRINT_0201_0001_0001_cli_i.md @@ -39,7 +39,7 @@ | 16 | CLI-ATTEST-75-001 | DONE (2025-12-04) | Implemented `stella attest key create` with `HandleAttestKeyCreateAsync` handler; supports `--name`, `--algorithm` (ECDSA-P256/P384), `--password`, `--output`, `--format`, `--export-public`; uses FileKmsClient for encrypted key storage in ~/.stellaops/keys/; generates SPKI-format public keys; outputs table or JSON with key metadata. | CLI Attestor Guild · KMS Guild | Implement `stella attest key create` workflows. | | 17 | CLI-ATTEST-75-002 | DONE (2025-12-04) | Implemented `stella attest bundle build` and `stella attest bundle verify` commands with `HandleAttestBundleBuildAsync` and `HandleAttestBundleVerifyAsync` handlers; builds audit bundles conforming to `audit-bundle-index.schema.json`; supports artifact filtering (`--include`), time window (`--from`, `--to`), compression (`--compress`), integrity verification (root hash, SHA256SUMS), policy compliance checks; output JSON/table. | CLI Attestor Guild · Export Guild | Add support for building/verifying attestation bundles in CLI. | | 18 | CLI-HK-201-002 | DONE (2025-12-10) | Offline kit status contract and sample bundle available; tests updated. | DevEx/CLI Guild | Finalize status coverage tests for offline kit. | -| 19 | CLI-GAPS-201-003 | DONE (2025-12-01) | None; informs tasks 7–18. | Product Mgmt · DevEx/CLI Guild | Addressed CLI gaps CL1–CL10 from `docs/product-advisories/31-Nov-2025 FINDINGS.md`: versioned command/flag/exit-code spec with compatibility tests, deterministic output fixtures, auth key rotation/cleanup and audience validation, offline-kit import/verify contract, cosign verification on install/update, pinned buildx plugin digest + rollback, telemetry opt-in/off defaults, UX/a11y guidelines, structured errors/help, and checksum-enforced install paths (online/offline). | +| 19 | CLI-GAPS-201-003 | DONE (2025-12-01) | None; informs tasks 7–18. | Product Mgmt · DevEx/CLI Guild | Addressed CLI gaps CL1–CL10 from `docs/product/advisories/31-Nov-2025 FINDINGS.md`: versioned command/flag/exit-code spec with compatibility tests, deterministic output fixtures, auth key rotation/cleanup and audience validation, offline-kit import/verify contract, cosign verification on install/update, pinned buildx plugin digest + rollback, telemetry opt-in/off defaults, UX/a11y guidelines, structured errors/help, and checksum-enforced install paths (online/offline). | ## Wave Coordination - Single-wave delivery; no staggered waves defined. diff --git a/docs-archived/implplan/SPRINT_0207_0001_0001_graph.md b/docs-archived/implplan/SPRINT_0207_0001_0001_graph.md index 87626c5fc..609f81f9b 100644 --- a/docs-archived/implplan/SPRINT_0207_0001_0001_graph.md +++ b/docs-archived/implplan/SPRINT_0207_0001_0001_graph.md @@ -36,7 +36,7 @@ | 10 | GRAPH-API-28-010 | DONE (2025-11-26) | GRAPH-API-28-009 | Graph API Guild · QA Guild (`src/Graph/StellaOps.Graph.Api`) | Build unit/integration/load tests with synthetic datasets (500k nodes/2M edges), fuzz query validation, verify determinism across runs. | | 11 | GRAPH-API-28-011 | DONE (2025-11-26) | GRAPH-API-28-010 | Graph API Guild (`src/Graph/StellaOps.Graph.Api`) | Provide deployment manifests, offline kit support, API gateway integration docs, and smoke tests. | | 12 | GRAPH-INDEX-28-011 | DONE (2025-11-04) | Downstream consumption by API once overlays ready | Graph Indexer Guild (`src/Graph/StellaOps.Graph.Indexer`) | Wire SBOM ingest runtime to emit graph snapshot artifacts, add DI factory helpers, and document Mongo/snapshot environment guidance. | -| 13 | GRAPH-ANALYTICS-GAPS-207-013 | DONE (2025-12-02) | None; informs tasks 1–12. | Product Mgmt · Graph API Guild · Graph Indexer Guild | Address graph analytics gaps GA1–GA10 from `docs/product-advisories/31-Nov-2025 FINDINGS.md`: versioned analytics schemas, deterministic seeds/rerun-hash CI, privacy/tenant redaction rules, baseline datasets/fixtures, performance budgets/quotas, explainability metadata (inputs/seeds/revision), checksum+DSSE for exports, algorithm versioning, offline analytics bundle schema, and SemVer/change-log governance. | +| 13 | GRAPH-ANALYTICS-GAPS-207-013 | DONE (2025-12-02) | None; informs tasks 1–12. | Product Mgmt · Graph API Guild · Graph Indexer Guild | Address graph analytics gaps GA1–GA10 from `docs/product/advisories/31-Nov-2025 FINDINGS.md`: versioned analytics schemas, deterministic seeds/rerun-hash CI, privacy/tenant redaction rules, baseline datasets/fixtures, performance budgets/quotas, explainability metadata (inputs/seeds/revision), checksum+DSSE for exports, algorithm versioning, offline analytics bundle schema, and SemVer/change-log governance. | ## Wave Coordination - Wave 1 · API surface and overlays: GRAPH-API-28-001..011 (sequential pipeline). diff --git a/docs-archived/implplan/SPRINT_0209_0001_0001_ui_i.md b/docs-archived/implplan/SPRINT_0209_0001_0001_ui_i.md index 0b7adc15c..6dccdd4a0 100644 --- a/docs-archived/implplan/SPRINT_0209_0001_0001_ui_i.md +++ b/docs-archived/implplan/SPRINT_0209_0001_0001_ui_i.md @@ -101,7 +101,7 @@ | 2025-12-04 | Added `scripts/storybook.js` wrapper and updated npm scripts. Clean install in temp copy succeeded; `storybook:build` now fails with SB_FRAMEWORK_ANGULAR_0001 (needs Angular Storybook builder migration) and `test:a11y` timed out waiting for dev server. Action #9 remains BLOCKED pending migration and rerun of Storybook + a11y smoke. | Implementer | | 2025-12-04 | Ran Storybook automigrate in clean copy, applied Angular builder targets, updated stories glob, and added @storybook/test/@chromatic-com/storybook. Synced changes into workspace and ran `npm install`; however `ng run stellaops-web:build-storybook` still exits non-zero with no output (Angular CLI appears to hang in this environment). Action #10 remains DOING; tests still blocked. | Implementer | | 2025-12-04 | Confirmed canonical Angular workspace is `src/Web/StellaOps.Web` (not `src/Web/StellaOps.Web`); updated working directory, blockers, and Action #7 accordingly. Graph blockers now tied to generated `graph:*` SDK scopes. | Project mgmt | -| 2025-12-04 | Published canonical UI Micro-Interactions advisory (`docs/product-advisories/30-Nov-2025 - UI Micro-Interactions for StellaOps.md`). UI-MICRO-GAPS-0209-011 remains BLOCKED pending motion token catalog + a11y/Storybook/Playwright harness in `src/Web/StellaOps.Web`. | Project mgmt | +| 2025-12-04 | Published canonical UI Micro-Interactions advisory (`docs/product/advisories/30-Nov-2025 - UI Micro-Interactions for StellaOps.md`). UI-MICRO-GAPS-0209-011 remains BLOCKED pending motion token catalog + a11y/Storybook/Playwright harness in `src/Web/StellaOps.Web`. | Project mgmt | | 2025-12-04 | Earlier note: UI-MICRO-GAPS-0209-011 was marked BLOCKED when advisory was still pending and `src/Web/StellaOps.Web` was empty; superseded by publication + path correction the same day. | Project mgmt | | 2025-12-03 | Marked UI-GRAPH-24-001/002/003/004/006 BLOCKED: UI path was empty and `graph:*` scope SDK exports were missing; will re-evaluate after path correction and SDK delivery. | Implementer | | 2025-11-27 | UI-GRAPH-21-001: Created stub `StellaOpsScopes` exports and integrated auth configuration into Graph Explorer. Created `scopes.ts` with: typed scope constants (`GRAPH_READ`, `GRAPH_WRITE`, `GRAPH_ADMIN`, `GRAPH_EXPORT`, `GRAPH_SIMULATE` and scopes for SBOM, Scanner, Policy, Exception, Release, AOC, Admin domains), scope groupings (`GRAPH_VIEWER`, `GRAPH_EDITOR`, `GRAPH_ADMIN`, `RELEASE_MANAGER`, `SECURITY_ADMIN`), human-readable labels, and helper functions (`hasScope`, `hasAllScopes`, `hasAnyScope`). Created `auth.service.ts` with `AuthService` interface and `MockAuthService` implementation providing: user info with tenant context, scope-based permission methods (`canViewGraph`, `canEditGraph`, `canExportGraph`, `canSimulate`). Integrated into `GraphExplorerComponent` via `AUTH_SERVICE` injection token: added computed signals for scope-based permissions (`canViewGraph`, `canEditGraph`, `canExportGraph`, `canSimulate`, `canCreateException`), current user info, and user scopes list. Stub implementation allows Graph Explorer development to proceed; will be replaced by generated SDK exports from SPRINT_0208_0001_0001_sdk. Files added: `src/app/core/auth/scopes.ts`, `src/app/core/auth/auth.service.ts`, `src/app/core/auth/index.ts`. Files updated: `graph-explorer.component.ts`. | UI Guild | diff --git a/docs-archived/implplan/SPRINT_0215_0001_0001_vuln_triage_ux.md b/docs-archived/implplan/SPRINT_0215_0001_0001_vuln_triage_ux.md index 564e9d3ed..5e04dd68a 100644 --- a/docs-archived/implplan/SPRINT_0215_0001_0001_vuln_triage_ux.md +++ b/docs-archived/implplan/SPRINT_0215_0001_0001_vuln_triage_ux.md @@ -18,8 +18,8 @@ - `docs/modules/ui/architecture.md` - `docs/modules/vuln-explorer/architecture.md` - `docs/modules/vex-lens/architecture.md` -- `docs/product-advisories/archived/27-Nov-2025-superseded/28-Nov-2025 - Vulnerability Triage UX & VEX-First Decisioning.md` (canonical) -- `docs/product-advisories/archived/27-Nov-2025-superseded/27-Nov-2025 - Explainability Layer for Vulnerability Verdicts.md` +- `docs/product/advisories/archived/27-Nov-2025-superseded/28-Nov-2025 - Vulnerability Triage UX & VEX-First Decisioning.md` (canonical) +- `docs/product/advisories/archived/27-Nov-2025-superseded/27-Nov-2025 - Explainability Layer for Vulnerability Verdicts.md` - `docs/schemas/vex-decision.schema.json` - `docs/schemas/audit-bundle-index.schema.json` @@ -64,7 +64,7 @@ | 36 | TS-10-001 | DONE | Evidence: `src/Web/StellaOps.Web/src/app/core/api/evidence.models.ts`; `src/Web/StellaOps.Web/src/app/core/api/vex-decisions.models.ts` | UI Guild (src/Web/StellaOps.Web) | Create TypeScript interfaces for VexDecision, SubjectRef, EvidenceRef, VexScope, ValidFor per advisory. | | 37 | TS-10-002 | DONE | Evidence: `src/Web/StellaOps.Web/src/app/core/api/attestation-vuln-scan.models.ts` | UI Guild (src/Web/StellaOps.Web) | Create TypeScript interfaces for VulnScanAttestation, AttestationSubject, VulnScanPredicate per advisory. | | 38 | TS-10-003 | DONE | Evidence: `src/Web/StellaOps.Web/src/app/core/api/audit-bundles.models.ts` | UI Guild (src/Web/StellaOps.Web) | Create TypeScript interfaces for AuditBundleIndex, BundleArtifact, BundleVexDecisionEntry per advisory. | -| 39 | DOC-11-001 | DONE | Evidence: `docs/key-features.md`; `docs/07_HIGH_LEVEL_ARCHITECTURE.md` | Docs Guild (docs/) | Update high-level positioning for VEX-first triage: refresh docs/key-features.md and docs/07_HIGH_LEVEL_ARCHITECTURE.md with UX/audit bundle narrative; link `docs/product-advisories/archived/27-Nov-2025-superseded/28-Nov-2025 - Vulnerability Triage UX & VEX-First Decisioning.md`. | +| 39 | DOC-11-001 | DONE | Evidence: `docs/key-features.md`; `docs/07_HIGH_LEVEL_ARCHITECTURE.md` | Docs Guild (docs/) | Update high-level positioning for VEX-first triage: refresh docs/key-features.md and docs/07_HIGH_LEVEL_ARCHITECTURE.md with UX/audit bundle narrative; link `docs/product/advisories/archived/27-Nov-2025-superseded/28-Nov-2025 - Vulnerability Triage UX & VEX-First Decisioning.md`. | | 40 | DOC-11-002 | DONE | Evidence: `docs/modules/ui/architecture.md` | Docs Guild; UI Guild | Update docs/modules/ui/architecture.md with triage workspace + VEX modal flows; add schema links and advisory cross-references. | | 41 | DOC-11-003 | DONE | Evidence: `docs/modules/vuln-explorer/architecture.md`; `docs/modules/export-center/architecture.md` | Docs Guild; Vuln Explorer Guild; Export Center Guild | Update docs/modules/vuln-explorer/architecture.md and docs/modules/export-center/architecture.md with VEX decision/audit bundle API surfaces and schema references. | | 42 | TRIAGE-GAPS-215-042 | DONE | Evidence: `src/Telemetry/StellaOps.Telemetry.Core/StellaOps.Telemetry.Core/TimeToEvidenceMetrics.cs`; `docs/schemas/tte-event.schema.json`; Schemas (SCHEMA-08-*) already published | UI Guild · Platform Guild | Remediate VT1–VT10: publish signed schemas + canonical JSON, enforce evidence linkage (graph/policy/attestations), tenant/RBAC controls, deterministic ordering/pagination, a11y standards, offline triage-kit exports, supersedes/conflict rules, attestation verification UX, redaction policy, UX telemetry/SLIs with alerts. | @@ -128,7 +128,7 @@ ## Execution Log | Date (UTC) | Update | Owner | | --- | --- | --- | -| 2025-11-28 | Sprint created from product advisory `docs/product-advisories/archived/27-Nov-2025-superseded/28-Nov-2025 - Vulnerability Triage UX & VEX-First Decisioning.md`. 38 tasks defined across 5 UI task groups, 2 API task groups, 3 schema tasks, 3 DTO tasks, 3 TS interface tasks. | Project mgmt | +| 2025-11-28 | Sprint created from product advisory `docs/product/advisories/archived/27-Nov-2025-superseded/28-Nov-2025 - Vulnerability Triage UX & VEX-First Decisioning.md`. 38 tasks defined across 5 UI task groups, 2 API task groups, 3 schema tasks, 3 DTO tasks, 3 TS interface tasks. | Project mgmt | | 2025-11-30 | Added DOC-11-* doc-sync tasks per advisory handling rules; no scope change to delivery waves. | Project mgmt | | 2025-11-30 | Marked UI-TRIAGE-01-001 and TS-10-* tasks BLOCKED because src/Web/StellaOps.Web lacks Angular workspace; awaiting restoration to proceed. | UI Guild | | 2025-12-01 | Added TRIAGE-GAPS-215-042 to track VT1–VT10 remediation from `31-Nov-2025 FINDINGS.md`; status TODO pending schema publication and UI workspace bootstrap. | Project Mgmt | diff --git a/docs-archived/implplan/SPRINT_0336_0001_0001_product_advisories_14_dec_2025_thematic_refs.md b/docs-archived/implplan/SPRINT_0336_0001_0001_product_advisories_14_dec_2025_thematic_refs.md index 86774df7e..48def84b0 100644 --- a/docs-archived/implplan/SPRINT_0336_0001_0001_product_advisories_14_dec_2025_thematic_refs.md +++ b/docs-archived/implplan/SPRINT_0336_0001_0001_product_advisories_14_dec_2025_thematic_refs.md @@ -1,10 +1,10 @@ # Sprint 0336.0001.0001 - Product Advisories (14-Dec-2025) Thematic References ## Topic & Scope -- Distill raw advisories under `docs/product-advisories/archived/14-Dec-2025/` into 12 themed technical references under `docs/product-advisories/`. +- Distill raw advisories under `docs/product/advisories/archived/14-Dec-2025/` into 12 themed technical references under `docs/product/advisories/`. - Ensure each themed reference is complete, non-repetitive, and developer-usable (schemas/checklists; no chatty prose). - Evidence: updated themed docs with coverage mapping and placeholder/schema cleanups. -- **Working directory:** `docs/product-advisories`. +- **Working directory:** `docs/product/advisories`. ## Dependencies & Concurrency - None (documentation-only). Safe to execute in parallel with code sprints. @@ -13,27 +13,27 @@ - `docs/README.md` - `docs/07_HIGH_LEVEL_ARCHITECTURE.md` - `docs/AGENTS.md` -- Source set: `docs/product-advisories/archived/14-Dec-2025/` +- Source set: `docs/product/advisories/archived/14-Dec-2025/` ## Delivery Tracker | # | Task ID | Status | Key dependency / next step | Owners | Task Definition | | --- | --- | --- | --- | --- | --- | -| 1 | ADV-0336-001 | DONE (2025-12-14) | Source corpus exists; start with coverage diff. | Docs Guild (`docs/product-advisories`) | Inventory 51 raw advisories and 12 themed docs; map sources to themes and identify gaps. | -| 2 | ADV-0336-002 | DONE (2025-12-14) | After #1. | Docs Guild (`docs/product-advisories`) | Fill missing technical content in themed docs (GraphRevisionID, reachability query/caching, bench harness rules, Postgres decision checklists, provenance-rich binaries). | -| 3 | ADV-0336-003 | DONE (2025-12-14) | After #2. | Docs Guild (`docs/product-advisories`) | Normalize schema placeholders and remove unusable artifacts in technical references. | -| 4 | ADV-0336-004 | DONE (2025-12-14) | After #3. | Docs Guild (`docs/product-advisories`) | Validate coverage: every raw advisory referenced by at least one themed doc; no external/chatty prose remains. | +| 1 | ADV-0336-001 | DONE (2025-12-14) | Source corpus exists; start with coverage diff. | Docs Guild (`docs/product/advisories`) | Inventory 51 raw advisories and 12 themed docs; map sources to themes and identify gaps. | +| 2 | ADV-0336-002 | DONE (2025-12-14) | After #1. | Docs Guild (`docs/product/advisories`) | Fill missing technical content in themed docs (GraphRevisionID, reachability query/caching, bench harness rules, Postgres decision checklists, provenance-rich binaries). | +| 3 | ADV-0336-003 | DONE (2025-12-14) | After #2. | Docs Guild (`docs/product/advisories`) | Normalize schema placeholders and remove unusable artifacts in technical references. | +| 4 | ADV-0336-004 | DONE (2025-12-14) | After #3. | Docs Guild (`docs/product/advisories`) | Validate coverage: every raw advisory referenced by at least one themed doc; no external/chatty prose remains. | ## Wave Coordination - N/A (single wave). ## Wave Detail Snapshots -- 2025-12-14: Consolidation completed; see Execution Log and themed doc list under `docs/product-advisories/`. +- 2025-12-14: Consolidation completed; see Execution Log and themed doc list under `docs/product/advisories/`. ## Interlocks - None. ## Upcoming Checkpoints -- None scheduled; re-open if new advisories land under `docs/product-advisories/**`. +- None scheduled; re-open if new advisories land under `docs/product/advisories/**`. ## Action Tracker | Action | Owner | Due | Status | @@ -48,5 +48,5 @@ ## Execution Log | Date (UTC) | Update | Owner | | --- | --- | --- | -| 2025-12-14 | Sprint created and completed: consolidated 14-Dec-2025 advisory set into themed technical references; added missing content (graphRevisionId/receipts, reachability methods, bench/packaging rules, Postgres checklists, provenance-rich binaries) and cleaned schema placeholders. Evidence: `docs/product-advisories/*.md`. | Docs Guild | +| 2025-12-14 | Sprint created and completed: consolidated 14-Dec-2025 advisory set into themed technical references; added missing content (graphRevisionId/receipts, reachability methods, bench/packaging rules, Postgres checklists, provenance-rich binaries) and cleaned schema placeholders. Evidence: `docs/product/advisories/*.md`. | Docs Guild | diff --git a/docs-archived/implplan/SPRINT_0337_0001_0001_cvss_advisory_enhancement.md b/docs-archived/implplan/SPRINT_0337_0001_0001_cvss_advisory_enhancement.md index 096714ce4..9d57d1a41 100644 --- a/docs-archived/implplan/SPRINT_0337_0001_0001_cvss_advisory_enhancement.md +++ b/docs-archived/implplan/SPRINT_0337_0001_0001_cvss_advisory_enhancement.md @@ -1,12 +1,12 @@ # Sprint 0337.0001.0001 - CVSS Advisory Technical Enhancement ## Topic & Scope -- Enhance `docs/product-advisories/14-Dec-2025 - CVSS and Competitive Analysis Technical Reference.md` with: +- Enhance `docs/product/advisories/14-Dec-2025 - CVSS and Competitive Analysis Technical Reference.md` with: 1. CVSS v4.0 MacroVector scoring system explanation 2. Threat Metrics multipliers documentation 3. Receipt system overview 4. KEV integration formula -- **Working directory:** `docs/product-advisories` +- **Working directory:** `docs/product/advisories` ## Dependencies & Concurrency - None (documentation-only). Safe to execute in parallel with code sprints. @@ -15,7 +15,7 @@ ## Documentation Prerequisites - `docs/README.md` - `docs/07_HIGH_LEVEL_ARCHITECTURE.md` -- `docs/product-advisories/14-Dec-2025 - CVSS and Competitive Analysis Technical Reference.md` +- `docs/product/advisories/14-Dec-2025 - CVSS and Competitive Analysis Technical Reference.md` - Source implementation: `src/Policy/StellaOps.Policy.Scoring/` ## Delivery Tracker diff --git a/docs-archived/implplan/SPRINT_0338_0001_0001_airgap_importer_core.md b/docs-archived/implplan/SPRINT_0338_0001_0001_airgap_importer_core.md index 9bff67d7b..11559aaba 100644 --- a/docs-archived/implplan/SPRINT_0338_0001_0001_airgap_importer_core.md +++ b/docs-archived/implplan/SPRINT_0338_0001_0001_airgap_importer_core.md @@ -6,7 +6,7 @@ - **Priority:** P0 (Critical) - **Working directory:** `src/AirGap/StellaOps.AirGap.Importer/` (primary); allowed cross-module edits: `src/AirGap/StellaOps.AirGap.Storage.Postgres/`, `src/AirGap/StellaOps.AirGap.Storage.Postgres.Tests/`, `tests/AirGap/StellaOps.AirGap.Importer.Tests/`. - **Related modules:** `StellaOps.AirGap.Controller`, `StellaOps.ExportCenter.Core` -- **Source advisory:** `docs/product-advisories/14-Dec-2025 - Offline and Air-Gap Technical Reference.md` +- **Source advisory:** `docs/product/advisories/14-Dec-2025 - Offline and Air-Gap Technical Reference.md` - **Gaps addressed:** G6 (Monotonicity), G7 (Quarantine) ## Dependencies & Concurrency @@ -18,7 +18,7 @@ - `docs/07_HIGH_LEVEL_ARCHITECTURE.md` - `docs/modules/platform/architecture-overview.md` - `docs/modules/airgap/mirror-dsse-plan.md` -- `docs/product-advisories/14-Dec-2025 - Offline and Air-Gap Technical Reference.md` +- `docs/product/advisories/14-Dec-2025 - Offline and Air-Gap Technical Reference.md` ## Delivery Tracker diff --git a/docs-archived/implplan/SPRINT_0338_0001_0001_cvss_epss_development.md b/docs-archived/implplan/SPRINT_0338_0001_0001_cvss_epss_development.md index 971934839..e038e60b6 100644 --- a/docs-archived/implplan/SPRINT_0338_0001_0001_cvss_epss_development.md +++ b/docs-archived/implplan/SPRINT_0338_0001_0001_cvss_epss_development.md @@ -13,7 +13,7 @@ Complete missing CVSS and EPSS infrastructure identified in advisory gap analysi - Can run in parallel with documentation sprints ## Documentation Prerequisites -- `docs/product-advisories/14-Dec-2025 - CVSS and Competitive Analysis Technical Reference.md` +- `docs/product/advisories/14-Dec-2025 - CVSS and Competitive Analysis Technical Reference.md` - FIRST CVSS v4.0 Specification (external) - FIRST EPSS Documentation (external) - `src/Policy/StellaOps.Policy.Scoring/Engine/CvssV4Engine.cs` diff --git a/docs-archived/implplan/SPRINT_0338_0001_0001_ttfs_foundation.md b/docs-archived/implplan/SPRINT_0338_0001_0001_ttfs_foundation.md index e79d7a4a1..6d951f975 100644 --- a/docs-archived/implplan/SPRINT_0338_0001_0001_ttfs_foundation.md +++ b/docs-archived/implplan/SPRINT_0338_0001_0001_ttfs_foundation.md @@ -350,7 +350,7 @@ public static IServiceCollection AddTimeToFirstSignalMetrics( ## 5. References -- Advisory: `docs/product-advisories/14-Dec-2025 - UX and Time-to-Evidence Technical Reference.md` +- Advisory: `docs/product/advisories/14-Dec-2025 - UX and Time-to-Evidence Technical Reference.md` - Pattern: `src/Telemetry/StellaOps.Telemetry.Core/StellaOps.Telemetry.Core/TimeToEvidenceMetrics.cs` - Schema Pattern: `docs/schemas/tte-event.schema.json` - Database Spec: `docs/db/SPECIFICATION.md` diff --git a/docs-archived/implplan/SPRINT_0339_0001_0001_cli_offline_commands.md b/docs-archived/implplan/SPRINT_0339_0001_0001_cli_offline_commands.md index 33a254012..299d9bf6c 100644 --- a/docs-archived/implplan/SPRINT_0339_0001_0001_cli_offline_commands.md +++ b/docs-archived/implplan/SPRINT_0339_0001_0001_cli_offline_commands.md @@ -4,7 +4,7 @@ - Priority: P1 (High) · Gap: G4 (CLI Commands) - Working directory: `src/Cli/StellaOps.Cli/` (tests: `src/Cli/__Tests/StellaOps.Cli.Tests/`; docs: `docs/modules/cli/**`) - Related modules: `StellaOps.AirGap.Importer`, `StellaOps.Cli.Services` -- Source advisory: `docs/product-advisories/14-Dec-2025 - Offline and Air-Gap Technical Reference.md` (A12) · Exit codes: A11 +- Source advisory: `docs/product/advisories/14-Dec-2025 - Offline and Air-Gap Technical Reference.md` (A12) · Exit codes: A11 **Sprint ID:** SPRINT_0339_0001_0001 **Topic:** CLI `offline` Command Group Implementation @@ -62,7 +62,7 @@ stellaops verify offline \ ## Documentation Prerequisites - `docs/modules/cli/architecture.md` - `docs/modules/platform/architecture-overview.md` -- `docs/product-advisories/14-Dec-2025 - Offline and Air-Gap Technical Reference.md` +- `docs/product/advisories/14-Dec-2025 - Offline and Air-Gap Technical Reference.md` ## Delivery Tracker @@ -72,11 +72,11 @@ stellaops verify offline \ | 2 | T2 | DONE | Implemented `OfflineCommandGroup` and wired into `CommandFactory`. | DevEx/CLI Guild | Create `OfflineCommandGroup` class. | | 3 | T3 | DONE | Implemented `offline import` with manifest/hash validation, monotonicity checks, and quarantine hooks. | DevEx/CLI Guild | Implement `offline import` command (core import flow). | | 4 | T4 | DONE | Implemented `--verify-dsse` via `DsseVerifier` (requires `--trust-root`) and added tests. | DevEx/CLI Guild | Add `--verify-dsse` flag handler. | -| 5 | T5 | DONE | Implement offline Rekor receipt inclusion proof + checkpoint signature verification per `docs/product-advisories/14-Dec-2025 - Rekor Integration Technical Reference.md` §13. | DevEx/CLI Guild | Add `--verify-rekor` flag handler. | +| 5 | T5 | DONE | Implement offline Rekor receipt inclusion proof + checkpoint signature verification per `docs/product/advisories/14-Dec-2025 - Rekor Integration Technical Reference.md` §13. | DevEx/CLI Guild | Add `--verify-rekor` flag handler. | | 6 | T6 | DONE | Implemented deterministic trust-root loading (`--trust-root`). | DevEx/CLI Guild | Add `--trust-root` option. | | 7 | T7 | DONE | Enforced `--force-reason` when forcing activation and persisted justification. | DevEx/CLI Guild | Add `--force-activate` flag. | | 8 | T8 | DONE | Implemented `offline status` with table/json outputs. | DevEx/CLI Guild | Implement `offline status` command. | -| 9 | T9 | DONE | Implement `verify offline` using the policy schema in `docs/product-advisories/14-Dec-2025 - Offline and Air-Gap Technical Reference.md` §4 plus deterministic evidence reconciliation outputs. | DevEx/CLI Guild | Implement `verify offline` command. | +| 9 | T9 | DONE | Implement `verify offline` using the policy schema in `docs/product/advisories/14-Dec-2025 - Offline and Air-Gap Technical Reference.md` §4 plus deterministic evidence reconciliation outputs. | DevEx/CLI Guild | Implement `verify offline` command. | | 10 | T10 | DONE | Add YAML+JSON policy loader with deterministic parsing/canonicalization rules; share with AirGap reconciliation. | DevEx/CLI Guild | Add `--policy` option parser. | | 11 | T11 | DONE | Standardized `--output table|json` formatting for offline verbs. | DevEx/CLI Guild | Create output formatters (table, json). | | 12 | T12 | DONE | Added progress reporting for bundle hashing when bundle size exceeds threshold. | DevEx/CLI Guild | Implement progress reporting. | diff --git a/docs-archived/implplan/SPRINT_0339_0001_0001_competitive_benchmarking_docs.md b/docs-archived/implplan/SPRINT_0339_0001_0001_competitive_benchmarking_docs.md index 2c0afe6a6..8eb0cc263 100644 --- a/docs-archived/implplan/SPRINT_0339_0001_0001_competitive_benchmarking_docs.md +++ b/docs-archived/implplan/SPRINT_0339_0001_0001_competitive_benchmarking_docs.md @@ -7,7 +7,7 @@ Address documentation gaps identified in competitive analysis and benchmarking i 3. Publish accuracy metrics framework 4. Document performance baselines 5. Create claims citation index -- **Working directory:** `docs/market/`, `docs/benchmarks/`, `docs/product-advisories/` +- **Working directory:** `docs/market/`, `docs/benchmarks/`, `docs/product/advisories/` ## Dependencies & Concurrency - Depends on: Existing competitive docs in `docs/market/` diff --git a/docs-archived/implplan/SPRINT_0341_0001_0001_observability_audit.md b/docs-archived/implplan/SPRINT_0341_0001_0001_observability_audit.md index d4657ad22..76daa493a 100644 --- a/docs-archived/implplan/SPRINT_0341_0001_0001_observability_audit.md +++ b/docs-archived/implplan/SPRINT_0341_0001_0001_observability_audit.md @@ -10,7 +10,7 @@ - `src/Cli/StellaOps.Cli/Services/` (ProblemDetails parsing integration) - `src/Cli/StellaOps.Cli/Services/Transport/` (SDK client ProblemDetails parsing integration) - `src/Authority/__Libraries/StellaOps.Authority.Storage.Postgres/` (audit schema) -- **Source advisory:** `docs/product-advisories/14-Dec-2025 - Offline and Air-Gap Technical Reference.md` (§10, §11, §13) +- **Source advisory:** `docs/product/advisories/14-Dec-2025 - Offline and Air-Gap Technical Reference.md` (§10, §11, §13) - **Gaps addressed:** G11 (Prometheus Metrics), G12 (Structured Logging), G13 (Error Codes), G14 (Audit Schema) ## Dependencies & Concurrency @@ -20,7 +20,7 @@ - Concurrency note: touches AirGap Importer + CLI + Authority storage; avoid cross-module contract changes without recording them in this sprint’s Decisions & Risks. ## Documentation Prerequisites -- `docs/product-advisories/14-Dec-2025 - Offline and Air-Gap Technical Reference.md` +- `docs/product/advisories/14-Dec-2025 - Offline and Air-Gap Technical Reference.md` - `docs/airgap/airgap-mode.md` - `docs/airgap/advisory-implementation-roadmap.md` - `docs/modules/platform/architecture-overview.md` diff --git a/docs-archived/implplan/SPRINT_0342_0001_0001_evidence_reconciliation.md b/docs-archived/implplan/SPRINT_0342_0001_0001_evidence_reconciliation.md index 47bde2d46..780399e94 100644 --- a/docs-archived/implplan/SPRINT_0342_0001_0001_evidence_reconciliation.md +++ b/docs-archived/implplan/SPRINT_0342_0001_0001_evidence_reconciliation.md @@ -25,7 +25,7 @@ Implement the 5-step deterministic evidence reconciliation algorithm as specifie - Concurrency note: this sprint introduces new reconciliation contracts; avoid cross-module coupling until the graph schema is agreed and documented. ## Documentation Prerequisites -- `docs/product-advisories/14-Dec-2025 - Offline and Air-Gap Technical Reference.md` (§5) +- `docs/product/advisories/14-Dec-2025 - Offline and Air-Gap Technical Reference.md` (§5) - `docs/airgap/airgap-mode.md` - `docs/airgap/advisory-implementation-roadmap.md` diff --git a/docs-archived/implplan/SPRINT_0350_0001_0001_ci_quality_gates_foundation.md b/docs-archived/implplan/SPRINT_0350_0001_0001_ci_quality_gates_foundation.md index e30493eb5..fa9baa207 100644 --- a/docs-archived/implplan/SPRINT_0350_0001_0001_ci_quality_gates_foundation.md +++ b/docs-archived/implplan/SPRINT_0350_0001_0001_ci_quality_gates_foundation.md @@ -4,7 +4,7 @@ Implement foundational CI quality gates for reachability metrics, TTFS regression tracking, and performance SLO enforcement. This sprint connects existing test infrastructure (reachability corpus, bench harnesses, baseline CSVs) to CI enforcement pipelines. -**Source Advisory:** `docs/product-advisories/14-Dec-2025 - Testing and Quality Guardrails Technical Reference.md` +**Source Advisory:** `docs/product/advisories/14-Dec-2025 - Testing and Quality Guardrails Technical Reference.md` **Working directory:** `.gitea/workflows/`, `scripts/ci/`, `tests/reachability/` diff --git a/docs-archived/implplan/SPRINT_0351_0001_0001_sca_failure_catalogue_completion.md b/docs-archived/implplan/SPRINT_0351_0001_0001_sca_failure_catalogue_completion.md index 5964a8ef6..2b6fe608c 100644 --- a/docs-archived/implplan/SPRINT_0351_0001_0001_sca_failure_catalogue_completion.md +++ b/docs-archived/implplan/SPRINT_0351_0001_0001_sca_failure_catalogue_completion.md @@ -4,7 +4,7 @@ Complete the SCA Failure Catalogue (FC6-FC10) to provide comprehensive regression testing coverage for scanner failure modes. Currently FC1-FC5 exist in `tests/fixtures/sca/catalogue/`; this sprint adds the remaining five failure cases. -**Source Advisory:** `docs/product-advisories/14-Dec-2025 - Testing and Quality Guardrails Technical Reference.md` (Section 2) +**Source Advisory:** `docs/product/advisories/14-Dec-2025 - Testing and Quality Guardrails Technical Reference.md` (Section 2) **Working directory:** `tests/fixtures/sca/catalogue/` @@ -31,7 +31,7 @@ Read before implementation: - `docs/19_TEST_SUITE_OVERVIEW.md` - `tests/fixtures/sca/catalogue/README.md` - `tests/fixtures/sca/catalogue/fc1-*/` (existing patterns) -- `docs/product-advisories/14-Dec-2025 - Testing and Quality Guardrails Technical Reference.md` +- `docs/product/advisories/14-Dec-2025 - Testing and Quality Guardrails Technical Reference.md` ## Failure Catalogue Reference diff --git a/docs-archived/implplan/SPRINT_0352_0001_0001_security_testing_framework.md b/docs-archived/implplan/SPRINT_0352_0001_0001_security_testing_framework.md index 4a13bba4e..b0be9ac9d 100644 --- a/docs-archived/implplan/SPRINT_0352_0001_0001_security_testing_framework.md +++ b/docs-archived/implplan/SPRINT_0352_0001_0001_security_testing_framework.md @@ -4,7 +4,7 @@ Implement systematic security testing coverage for OWASP Top 10 vulnerabilities across StellaOps modules. As a security platform, StellaOps must dogfood its own security testing practices to maintain credibility and prevent vulnerabilities in its codebase. -**Source Advisory:** `docs/product-advisories/14-Dec-2025 - Testing and Quality Guardrails Technical Reference.md` (Section 15) +**Source Advisory:** `docs/product/advisories/14-Dec-2025 - Testing and Quality Guardrails Technical Reference.md` (Section 15) **Working directory:** `tests/security/`, `src/*/Tests/Security/` diff --git a/docs-archived/implplan/SPRINT_0353_0001_0001_mutation_testing_integration.md b/docs-archived/implplan/SPRINT_0353_0001_0001_mutation_testing_integration.md index b9ac137f2..0ca057591 100644 --- a/docs-archived/implplan/SPRINT_0353_0001_0001_mutation_testing_integration.md +++ b/docs-archived/implplan/SPRINT_0353_0001_0001_mutation_testing_integration.md @@ -4,7 +4,7 @@ Integrate Stryker.NET mutation testing framework to measure test suite effectiveness. Mutation testing creates small code changes (mutants) and verifies tests catch them. This provides a more meaningful quality metric than line coverage alone. -**Source Advisory:** `docs/product-advisories/14-Dec-2025 - Testing and Quality Guardrails Technical Reference.md` (Section 14) +**Source Advisory:** `docs/product/advisories/14-Dec-2025 - Testing and Quality Guardrails Technical Reference.md` (Section 14) **Working directory:** Root solution, `src/`, `.stryker/` diff --git a/docs-archived/implplan/SPRINT_0354_0001_0001_testing_quality_guardrails_index.md b/docs-archived/implplan/SPRINT_0354_0001_0001_testing_quality_guardrails_index.md index 80864f55e..2d6ac8907 100644 --- a/docs-archived/implplan/SPRINT_0354_0001_0001_testing_quality_guardrails_index.md +++ b/docs-archived/implplan/SPRINT_0354_0001_0001_testing_quality_guardrails_index.md @@ -5,7 +5,7 @@ This sprint is a coordination/index sprint for the Testing Quality Guardrails sprint series (0350-0353) from the 14-Dec-2025 product advisory. The series consists of 4 sprints with 40 total tasks. - **Working directory:** `docs/implplan` -- **Source advisory:** `docs/product-advisories/14-Dec-2025 - Testing and Quality Guardrails Technical Reference.md` +- **Source advisory:** `docs/product/advisories/14-Dec-2025 - Testing and Quality Guardrails Technical Reference.md` - **Master documentation:** `docs/testing/testing-quality-guardrails-implementation.md` ## Dependencies & Concurrency @@ -15,7 +15,7 @@ This sprint is a coordination/index sprint for the Testing Quality Guardrails sp ## Documentation Prerequisites - `docs/README.md` - `docs/07_HIGH_LEVEL_ARCHITECTURE.md` -- `docs/product-advisories/14-Dec-2025 - Testing and Quality Guardrails Technical Reference.md` +- `docs/product/advisories/14-Dec-2025 - Testing and Quality Guardrails Technical Reference.md` - `docs/testing/testing-quality-guardrails-implementation.md` --- diff --git a/docs-archived/implplan/SPRINT_0401_0001_0001_reachability_evidence_chain.md b/docs-archived/implplan/SPRINT_0401_0001_0001_reachability_evidence_chain.md index 4b2f48cca..3d298147e 100644 --- a/docs-archived/implplan/SPRINT_0401_0001_0001_reachability_evidence_chain.md +++ b/docs-archived/implplan/SPRINT_0401_0001_0001_reachability_evidence_chain.md @@ -96,10 +96,10 @@ | 60 | CORPUS-MERGE-401-060 | DONE (2025-12-13) | Unblocked: task 58 complete with 4 samples and ground-truth schema. Ready to merge archived multi-runtime corpus. | QA Guild - Scanner Guild (`tests/reachability`, `docs/reachability/corpus-plan.md`) | Merge archived multi-runtime corpus (Go/.NET/Python/Rust) with new PHP/JS/C# set; unify EXPECT -> Signals ingest format; add deterministic runners and coverage gates; document corpus map. | | 61 | DOCS-BENCH-401-061 | DONE (2025-11-26) | Blocks on outputs from 57-60. | Docs Guild (`docs/benchmarks/signals/bench-determinism.md`, `docs/reachability/corpus-plan.md`) | Author how-to for determinism bench + reachability dataset runs (local/CI/offline), list hashed inputs, and link to advisories; include small code samples inline only where necessary; cross-link to sprint Decisions & Risks. | | 62 | VEX-GAPS-401-062 | DONE (2025-12-04) | Schema/catalog frozen; fixtures + verifier landed. | Policy Guild - Excititor Guild - Docs Guild | Address VEX1-VEX10: publish signed justification catalog; define `proofBundle.schema.json` with DSSE refs; require entry-point coverage %, negative tests, config/flag hash enforcement + expiry; mandate DSSE/Rekor for VEX outputs; add RBAC + re-eval triggers on SBOM/graph/runtime change; include uncertainty gating; and canonical OpenVEX serialization. Playbook + schema at `docs/benchmarks/vex-evidence-playbook.{md,schema.json}`; catalog at `docs/benchmarks/vex-justifications.catalog.json` (+ DSSE); fixtures under `tests/Vex/ProofBundles/`; offline verifier `scripts/vex/verify_proof_bundle.py`; CI guard `.gitea/workflows/vex-proof-bundles.yml`. | -| 63 | GRAPHREV-GAPS-401-063 | DONE (2025-12-13) | Complete: Created `docs/reachability/graph-revision-schema.md` addressing all 10 gaps (GR1-GR10): manifest schema + canonical hash rules, BLAKE3-256 encoding, append-only storage layout, lineage/diff metadata format, cross-artifact digests (SBOM/VEX/policy/tool), UI/CLI full/short ID formats + commands, shard/tenant context, pin/audit governance with events, retention/tombstone policies, and offline kit inclusion with Rekor checkpoints. | Platform Guild - Scanner Guild - Policy Guild - UI/CLI Guilds | Address graph revision gaps GR1-GR10 from `docs/product-advisories/31-Nov-2025 FINDINGS.md`: manifest schema + canonical hash rules, mandated BLAKE3-256 encoding, append-only storage, lineage/diff metadata, cross-artifact digests (SBOM/VEX/policy/tool), UI/CLI surfacing of full/short IDs, shard/tenant context, pin/audit governance, retention/tombstones, and inclusion in offline kits. | -| 64 | EXPLAIN-GAPS-401-064 | DONE (2025-12-13) | Complete: Created `docs/reachability/explainability-schema.md` addressing all 10 gaps (EX1-EX10): canonical explanation schema + hash rules, DSSE predicate `stella.ops/explanation@v1` + signing policy, CAS storage layout + rules, link format for decision/policy/graph_revision_id, export/replay bundle format with verification, PII/redaction categories + metadata, size budgets with truncation behavior, schema versioning + migration support, golden fixture locations + test categories + CI integration, and determinism guarantees. | Policy Guild - UI/CLI Guild - Docs Guild - Signals Guild | Address explainability gaps EX1-EX10 from `docs/product-advisories/31-Nov-2025 FINDINGS.md`: schema/canonicalization + hashes, DSSE predicate/signing policy, CAS storage rules for evidence, link to decision/policy and graph_revision_id, export/replay bundle format, PII/redaction rules, size budgets, versioning, and golden fixtures/tests. | -| 65 | EDGE-GAPS-401-065 | DONE (2025-12-13) | Complete: Created `docs/reachability/edge-explainability-schema.md` addressing all 10 gaps (EG1-EG10): reason enum registry with governance rules, canonical edge schema + hash computation using from/to/kind/reason, evidence limits (10 entries) + redaction rules, confidence rubric (certain/high/medium/low/unknown) with base scores per reason, detector/rule provenance schema with input artifact digests, API endpoints + CLI commands with output parity, deterministic fixture locations + requirements, propagation format for explanation graphs + VEX evidence, message catalog structure for localization, and backfill strategy + migration script. | Scanner Guild - Policy Guild - UI/CLI Guild - Docs Guild | Address edge explainability gaps EG1-EG10 from `docs/product-advisories/31-Nov-2025 FINDINGS.md`: reason enum governance, canonical edge schema with hash rules, evidence limits/redaction, confidence rubric, detector/rule provenance, API/CLI parity, deterministic fixtures, propagation into explanation graphs/VEX, localization guidance, and backfill plan. | -| 66 | BINARY-GAPS-401-066 | DONE (2025-12-13) | Complete: Created `docs/reachability/binary-reachability-schema.md` addressing all 10 gaps (BR1-BR10): canonical DSSE predicates (`stella.ops/binaryGraph@v1`, `stella.ops/binaryEdgeBundle@v1`), edge hash recipe including binary_hash context, required binary evidence table with CAS refs (`cas://binary/blocks|disasm|cfg|symbols`), build-id/variant rules for ELF/PE/Mach-O with fallback, policy hash governance with strict/forward/any binding modes, Sigstore bundle/log routing with offline mode, idempotent submission keys with tenant/binary/graph/hour granularity, size/chunking limits (10MB graph, 512 edges, 1MB DSSE, 100KB Rekor), API endpoints + CLI commands + UI component guidance, and binary fixtures with test categories. | Scanner Guild - Attestor Guild - Policy Guild | Address binary reachability gaps BR1-BR10 from `docs/product-advisories/31-Nov-2025 FINDINGS.md`: canonical DSSE/predicate schemas, edge hash recipe, required binary evidence with CAS refs, build-id/variant rules, policy hash governance, Sigstore bundle/log routing, idempotent submission keys, size/chunking limits, API/CLI/UI surfacing, and binary fixtures. | +| 63 | GRAPHREV-GAPS-401-063 | DONE (2025-12-13) | Complete: Created `docs/reachability/graph-revision-schema.md` addressing all 10 gaps (GR1-GR10): manifest schema + canonical hash rules, BLAKE3-256 encoding, append-only storage layout, lineage/diff metadata format, cross-artifact digests (SBOM/VEX/policy/tool), UI/CLI full/short ID formats + commands, shard/tenant context, pin/audit governance with events, retention/tombstone policies, and offline kit inclusion with Rekor checkpoints. | Platform Guild - Scanner Guild - Policy Guild - UI/CLI Guilds | Address graph revision gaps GR1-GR10 from `docs/product/advisories/31-Nov-2025 FINDINGS.md`: manifest schema + canonical hash rules, mandated BLAKE3-256 encoding, append-only storage, lineage/diff metadata, cross-artifact digests (SBOM/VEX/policy/tool), UI/CLI surfacing of full/short IDs, shard/tenant context, pin/audit governance, retention/tombstones, and inclusion in offline kits. | +| 64 | EXPLAIN-GAPS-401-064 | DONE (2025-12-13) | Complete: Created `docs/reachability/explainability-schema.md` addressing all 10 gaps (EX1-EX10): canonical explanation schema + hash rules, DSSE predicate `stella.ops/explanation@v1` + signing policy, CAS storage layout + rules, link format for decision/policy/graph_revision_id, export/replay bundle format with verification, PII/redaction categories + metadata, size budgets with truncation behavior, schema versioning + migration support, golden fixture locations + test categories + CI integration, and determinism guarantees. | Policy Guild - UI/CLI Guild - Docs Guild - Signals Guild | Address explainability gaps EX1-EX10 from `docs/product/advisories/31-Nov-2025 FINDINGS.md`: schema/canonicalization + hashes, DSSE predicate/signing policy, CAS storage rules for evidence, link to decision/policy and graph_revision_id, export/replay bundle format, PII/redaction rules, size budgets, versioning, and golden fixtures/tests. | +| 65 | EDGE-GAPS-401-065 | DONE (2025-12-13) | Complete: Created `docs/reachability/edge-explainability-schema.md` addressing all 10 gaps (EG1-EG10): reason enum registry with governance rules, canonical edge schema + hash computation using from/to/kind/reason, evidence limits (10 entries) + redaction rules, confidence rubric (certain/high/medium/low/unknown) with base scores per reason, detector/rule provenance schema with input artifact digests, API endpoints + CLI commands with output parity, deterministic fixture locations + requirements, propagation format for explanation graphs + VEX evidence, message catalog structure for localization, and backfill strategy + migration script. | Scanner Guild - Policy Guild - UI/CLI Guild - Docs Guild | Address edge explainability gaps EG1-EG10 from `docs/product/advisories/31-Nov-2025 FINDINGS.md`: reason enum governance, canonical edge schema with hash rules, evidence limits/redaction, confidence rubric, detector/rule provenance, API/CLI parity, deterministic fixtures, propagation into explanation graphs/VEX, localization guidance, and backfill plan. | +| 66 | BINARY-GAPS-401-066 | DONE (2025-12-13) | Complete: Created `docs/reachability/binary-reachability-schema.md` addressing all 10 gaps (BR1-BR10): canonical DSSE predicates (`stella.ops/binaryGraph@v1`, `stella.ops/binaryEdgeBundle@v1`), edge hash recipe including binary_hash context, required binary evidence table with CAS refs (`cas://binary/blocks|disasm|cfg|symbols`), build-id/variant rules for ELF/PE/Mach-O with fallback, policy hash governance with strict/forward/any binding modes, Sigstore bundle/log routing with offline mode, idempotent submission keys with tenant/binary/graph/hour granularity, size/chunking limits (10MB graph, 512 edges, 1MB DSSE, 100KB Rekor), API endpoints + CLI commands + UI component guidance, and binary fixtures with test categories. | Scanner Guild - Attestor Guild - Policy Guild | Address binary reachability gaps BR1-BR10 from `docs/product/advisories/31-Nov-2025 FINDINGS.md`: canonical DSSE/predicate schemas, edge hash recipe, required binary evidence with CAS refs, build-id/variant rules, policy hash governance, Sigstore bundle/log routing, idempotent submission keys, size/chunking limits, API/CLI/UI surfacing, and binary fixtures. | ## Wave Coordination | Wave | Guild owners | Shared prerequisites | Status | Notes | diff --git a/docs-archived/implplan/SPRINT_0501_0001_0001_proof_evidence_chain_master.md b/docs-archived/implplan/SPRINT_0501_0001_0001_proof_evidence_chain_master.md index a5d559960..6eac4e5f7 100644 --- a/docs-archived/implplan/SPRINT_0501_0001_0001_proof_evidence_chain_master.md +++ b/docs-archived/implplan/SPRINT_0501_0001_0001_proof_evidence_chain_master.md @@ -1,9 +1,9 @@ # Sprint 0501 · Proof and Evidence Chain · Master Plan ## Topic & Scope -Implementation of the complete Proof and Evidence Chain infrastructure as specified in `docs/product-advisories/14-Dec-2025 - Proof and Evidence Chain Technical Reference.md`. This master sprint coordinates 7 sub-sprints covering content-addressed IDs, DSSE predicates, proof spine assembly, API surface, database schema, CLI integration, and key rotation. +Implementation of the complete Proof and Evidence Chain infrastructure as specified in `docs/product/advisories/14-Dec-2025 - Proof and Evidence Chain Technical Reference.md`. This master sprint coordinates 7 sub-sprints covering content-addressed IDs, DSSE predicates, proof spine assembly, API surface, database schema, CLI integration, and key rotation. -**Source Advisory**: `docs/product-advisories/14-Dec-2025 - Proof and Evidence Chain Technical Reference.md` +**Source Advisory**: `docs/product/advisories/14-Dec-2025 - Proof and Evidence Chain Technical Reference.md` ## Architecture Overview diff --git a/docs-archived/implplan/SPRINT_0501_0002_0001_proof_chain_content_addressed_ids.md b/docs-archived/implplan/SPRINT_0501_0002_0001_proof_chain_content_addressed_ids.md index b695cc28e..3a225d8b3 100644 --- a/docs-archived/implplan/SPRINT_0501_0002_0001_proof_chain_content_addressed_ids.md +++ b/docs-archived/implplan/SPRINT_0501_0002_0001_proof_chain_content_addressed_ids.md @@ -3,7 +3,7 @@ ## Topic & Scope Implement content-addressed identifier system for proof chain components as specified in advisory §1 (Core Identifiers & Data Model). This sprint establishes the foundational ID generation, validation, and storage primitives required by all subsequent proof chain sprints. -**Source Advisory**: `docs/product-advisories/14-Dec-2025 - Proof and Evidence Chain Technical Reference.md` §1 +**Source Advisory**: `docs/product/advisories/14-Dec-2025 - Proof and Evidence Chain Technical Reference.md` §1 **Parent Sprint**: `SPRINT_0501_0001_0001_proof_evidence_chain_master.md` **Working Directory**: `src/Attestor/__Libraries/StellaOps.Attestor.ProofChain` diff --git a/docs-archived/implplan/SPRINT_0501_0003_0001_proof_chain_dsse_predicates.md b/docs-archived/implplan/SPRINT_0501_0003_0001_proof_chain_dsse_predicates.md index f894bde67..e96120fdf 100644 --- a/docs-archived/implplan/SPRINT_0501_0003_0001_proof_chain_dsse_predicates.md +++ b/docs-archived/implplan/SPRINT_0501_0003_0001_proof_chain_dsse_predicates.md @@ -3,7 +3,7 @@ ## Topic & Scope Implement the 6 new DSSE predicate types for proof chain statements as specified in advisory §2 (DSSE Envelope Structures). This sprint creates the in-toto Statement/v1 wrappers with proper signing, serialization, and validation for each predicate type. -**Source Advisory**: `docs/product-advisories/14-Dec-2025 - Proof and Evidence Chain Technical Reference.md` §2 +**Source Advisory**: `docs/product/advisories/14-Dec-2025 - Proof and Evidence Chain Technical Reference.md` §2 **Parent Sprint**: `SPRINT_0501_0001_0001_proof_evidence_chain_master.md` **Working Directory**: `src/Attestor/__Libraries/StellaOps.Attestor.ProofChain` diff --git a/docs-archived/implplan/SPRINT_0501_0004_0001_proof_chain_spine_assembly.md b/docs-archived/implplan/SPRINT_0501_0004_0001_proof_chain_spine_assembly.md index be8489e08..842e3d921 100644 --- a/docs-archived/implplan/SPRINT_0501_0004_0001_proof_chain_spine_assembly.md +++ b/docs-archived/implplan/SPRINT_0501_0004_0001_proof_chain_spine_assembly.md @@ -3,7 +3,7 @@ ## Topic & Scope Implement the Proof Spine assembly engine that aggregates Evidence, Reasoning, and VEX statements into a merkle-rooted ProofBundle with deterministic construction. This sprint creates the core orchestration layer that ties the proof chain together. -**Source Advisory**: `docs/product-advisories/14-Dec-2025 - Proof and Evidence Chain Technical Reference.md` §2.4, §4.2, §9 +**Source Advisory**: `docs/product/advisories/14-Dec-2025 - Proof and Evidence Chain Technical Reference.md` §2.4, §4.2, §9 **Parent Sprint**: `SPRINT_0501_0001_0001_proof_evidence_chain_master.md` **Working Directory**: `src/Attestor/__Libraries/StellaOps.Attestor.ProofChain` diff --git a/docs-archived/implplan/SPRINT_0501_0005_0001_proof_chain_api_surface.md b/docs-archived/implplan/SPRINT_0501_0005_0001_proof_chain_api_surface.md index de10679b8..b959e22ae 100644 --- a/docs-archived/implplan/SPRINT_0501_0005_0001_proof_chain_api_surface.md +++ b/docs-archived/implplan/SPRINT_0501_0005_0001_proof_chain_api_surface.md @@ -3,7 +3,7 @@ ## Topic & Scope Implement the `/proofs/*` API endpoints and verification pipeline as specified in advisory §5 (API Contracts) and §9 (Verification Pipeline). This sprint exposes the proof chain functionality via REST APIs with OpenAPI documentation. -**Source Advisory**: `docs/product-advisories/14-Dec-2025 - Proof and Evidence Chain Technical Reference.md` §5, §9 +**Source Advisory**: `docs/product/advisories/14-Dec-2025 - Proof and Evidence Chain Technical Reference.md` §5, §9 **Parent Sprint**: `SPRINT_0501_0001_0001_proof_evidence_chain_master.md` **Working Directory**: `src/Attestor/StellaOps.Attestor.WebService` diff --git a/docs-archived/implplan/SPRINT_0501_0006_0001_proof_chain_database_schema.md b/docs-archived/implplan/SPRINT_0501_0006_0001_proof_chain_database_schema.md index 762916c39..2f811e486 100644 --- a/docs-archived/implplan/SPRINT_0501_0006_0001_proof_chain_database_schema.md +++ b/docs-archived/implplan/SPRINT_0501_0006_0001_proof_chain_database_schema.md @@ -3,7 +3,7 @@ ## Topic & Scope Implement the 5 PostgreSQL tables and related repository interfaces for proof chain storage as specified in advisory §4 (Storage Schema). This sprint creates the persistence layer with migrations for existing deployments. -**Source Advisory**: `docs/product-advisories/14-Dec-2025 - Proof and Evidence Chain Technical Reference.md` §4 +**Source Advisory**: `docs/product/advisories/14-Dec-2025 - Proof and Evidence Chain Technical Reference.md` §4 **Parent Sprint**: `SPRINT_0501_0001_0001_proof_evidence_chain_master.md` **Working Directory**: `src/Attestor/__Libraries/StellaOps.Attestor.Persistence` diff --git a/docs-archived/implplan/SPRINT_0501_0007_0001_proof_chain_cli_integration.md b/docs-archived/implplan/SPRINT_0501_0007_0001_proof_chain_cli_integration.md index 6d48b8500..3701e2fdb 100644 --- a/docs-archived/implplan/SPRINT_0501_0007_0001_proof_chain_cli_integration.md +++ b/docs-archived/implplan/SPRINT_0501_0007_0001_proof_chain_cli_integration.md @@ -3,7 +3,7 @@ ## Topic & Scope Implement CLI commands for proof chain operations and standardize exit codes as specified in advisory §15 (CI/CD Integration). This sprint exposes proof chain functionality through the StellaOps CLI with proper exit codes for CI/CD pipeline integration. -**Source Advisory**: `docs/product-advisories/14-Dec-2025 - Proof and Evidence Chain Technical Reference.md` §15 +**Source Advisory**: `docs/product/advisories/14-Dec-2025 - Proof and Evidence Chain Technical Reference.md` §15 **Parent Sprint**: `SPRINT_0501_0001_0001_proof_evidence_chain_master.md` **Working Directory**: `src/Cli/StellaOps.Cli` diff --git a/docs-archived/implplan/SPRINT_0501_0008_0001_proof_chain_key_rotation.md b/docs-archived/implplan/SPRINT_0501_0008_0001_proof_chain_key_rotation.md index 5fff97dcb..c0cec14ca 100644 --- a/docs-archived/implplan/SPRINT_0501_0008_0001_proof_chain_key_rotation.md +++ b/docs-archived/implplan/SPRINT_0501_0008_0001_proof_chain_key_rotation.md @@ -3,7 +3,7 @@ ## Topic & Scope Implement the key rotation workflow and trust anchor management as specified in advisory §8 (Cryptographic Specifications). This sprint creates the infrastructure for secure key lifecycle management without invalidating existing signed proofs. -**Source Advisory**: `docs/product-advisories/14-Dec-2025 - Proof and Evidence Chain Technical Reference.md` §8 +**Source Advisory**: `docs/product/advisories/14-Dec-2025 - Proof and Evidence Chain Technical Reference.md` §8 **Parent Sprint**: `SPRINT_0501_0001_0001_proof_evidence_chain_master.md` **Working Directory**: `src/Signer/__Libraries/StellaOps.Signer.KeyManagement` diff --git a/docs-archived/implplan/SPRINT_0510_0001_0001_airgap.md b/docs-archived/implplan/SPRINT_0510_0001_0001_airgap.md index f643a82a3..2a1b1a59c 100644 --- a/docs-archived/implplan/SPRINT_0510_0001_0001_airgap.md +++ b/docs-archived/implplan/SPRINT_0510_0001_0001_airgap.md @@ -43,7 +43,7 @@ | 13 | AIRGAP-TIME-57-002 | DONE (2025-11-26) | PREP-AIRGAP-CTL-57-002-BLOCKED-ON-57-001 | AirGap Time Guild · Observability Guild | Add telemetry counters for time anchors (`airgap_time_anchor_age_seconds`) and alerts for approaching thresholds. | | 14 | AIRGAP-TIME-58-001 | DONE (2025-12-11) | Drift baseline persisted, per-content staleness computed via controller status API. | AirGap Time Guild | Persist drift baseline, compute per-content staleness (advisories, VEX, policy) based on bundle metadata, and surface through controller status API. | | 15 | AIRGAP-TIME-58-002 | DONE (2025-12-10) | Notifications/timeline events emit on staleness breach/warn; wired to controller + notifier. | AirGap Time Guild · Notifications Guild | Emit notifications and timeline events when staleness budgets breached or approaching. | -| 16 | AIRGAP-GAPS-510-009 | DONE (2025-12-01) | None; informs tasks 1–15. | Product Mgmt · Ops Guild | Address gap findings (AG1–AG12) from `docs/product-advisories/25-Nov-2025 - Air‑gap deployment playbook for StellaOps.md`: trust-root/key custody & PQ dual-signing, Rekor mirror format/signature, feed snapshot DSSE, tooling hashes, kit size/chunking, AV/YARA pre/post ingest, policy/graph hash verification, tenant scoping, ingress/egress receipts, replay depth rules, offline observability, failure runbooks. | +| 16 | AIRGAP-GAPS-510-009 | DONE (2025-12-01) | None; informs tasks 1–15. | Product Mgmt · Ops Guild | Address gap findings (AG1–AG12) from `docs/product/advisories/25-Nov-2025 - Air‑gap deployment playbook for StellaOps.md`: trust-root/key custody & PQ dual-signing, Rekor mirror format/signature, feed snapshot DSSE, tooling hashes, kit size/chunking, AV/YARA pre/post ingest, policy/graph hash verification, tenant scoping, ingress/egress receipts, replay depth rules, offline observability, failure runbooks. | | 17 | AIRGAP-MANIFEST-510-010 | DONE (2025-12-02) | Depends on AIRGAP-IMP-56-* foundations | AirGap Importer Guild · Ops Guild | Implement offline-kit manifest schema (`offline-kit/manifest.schema.json`) + DSSE signature; include tools/feed/policy hashes, tenant/env, AV scan results, chunk map, mirror staleness window, and publish verify script path. | | 18 | AIRGAP-AV-510-011 | DONE (2025-12-02) | Depends on AIRGAP-MANIFEST-510-010 | Security Guild · AirGap Importer Guild | Add AV/YARA pre-publish and post-ingest scans with signed reports; enforce in importer pipeline; document in `docs/airgap/runbooks/import-verify.md`. | | 19 | AIRGAP-RECEIPTS-510-012 | DONE (2025-12-02) | Depends on AIRGAP-MANIFEST-510-010 | AirGap Controller Guild · Platform Guild | Emit ingress/egress DSSE receipts (hash, operator, time, decision) and store in Proof Graph; expose verify CLI hook. | @@ -103,9 +103,9 @@ | 2025-11-25 | Created module charter `src/AirGap/AGENTS.md`; controller tasks unblocked from AGENTS gap. | Implementer | | 2025-11-25 | Local environment out of disk space (`No space left on device`); controller tasks moved to BLOCKED until workspace is cleaned. | Implementer | | 2025-11-25 | Blocked controller chain (tasks 1–5): module-level `src/AirGap/AGENTS.md` missing; cannot proceed per working agreements until charter exists. Added status notes. | Implementer | -| 2025-12-01 | Added AIRGAP-GAPS-510-009 to track remediation of AG1–AG12 from `docs/product-advisories/25-Nov-2025 - Air‑gap deployment playbook for StellaOps.md`. | Product Mgmt | +| 2025-12-01 | Added AIRGAP-GAPS-510-009 to track remediation of AG1–AG12 from `docs/product/advisories/25-Nov-2025 - Air‑gap deployment playbook for StellaOps.md`. | Product Mgmt | | 2025-12-01 | AIRGAP-GAPS-510-009 DONE: drafted remediation plan `docs/airgap/gaps/AG1-AG12-remediation.md` covering trust roots, Rekor mirror, feed freezing, tool hashes, chunked kits, AV/YARA, policy/graph hashes, tenant scoping, ingress/egress receipts, replay levels, observability, and runbooks. | Implementer | -| 2025-12-02 | Added implementation tasks 510-010…014 for manifest schema + DSSE, AV/YARA scans, ingress/egress receipts, replay-depth enforcement, and offline verifier script per `docs/product-advisories/25-Nov-2025 - Air‑gap deployment playbook for StellaOps.md`. | Project Mgmt | +| 2025-12-02 | Added implementation tasks 510-010…014 for manifest schema + DSSE, AV/YARA scans, ingress/egress receipts, replay-depth enforcement, and offline verifier script per `docs/product/advisories/25-Nov-2025 - Air‑gap deployment playbook for StellaOps.md`. | Project Mgmt | | 2025-12-10 | Added AIRGAP-PG-510-015 (PostgreSQL air-gap test) migrated from Sprint 3407 (PG-T7.5.5); covers PostgreSQL 17 kit verification with pg_stat_statements, init scripts, and schema validation. | Infrastructure Guild | | 2025-12-06 | ✅ **5 tasks UNBLOCKED**: Created `docs/schemas/sealed-mode.schema.json` (AirGap state, egress policy, bundle verification) and `docs/schemas/time-anchor.schema.json` (TUF trust roots, time anchors, validation). Tasks AIRGAP-IMP-57-002, 58-001, 58-002 and AIRGAP-TIME-58-001, 58-002 moved from BLOCKED to TODO. | System | diff --git a/docs-archived/implplan/SPRINT_0513_0001_0001_public_reachability_benchmark.md b/docs-archived/implplan/SPRINT_0513_0001_0001_public_reachability_benchmark.md index 6ecc9b954..7bb4240f0 100644 --- a/docs-archived/implplan/SPRINT_0513_0001_0001_public_reachability_benchmark.md +++ b/docs-archived/implplan/SPRINT_0513_0001_0001_public_reachability_benchmark.md @@ -18,9 +18,9 @@ - `docs/reachability/function-level-evidence.md` - `docs/reachability/lattice.md` - `docs/modules/scanner/architecture.md` -- Product advisory: `docs/product-advisories/24-Nov-2025 - Designing a Deterministic Reachability Benchmark.md` -- Related advisory: `docs/product-advisories/archived/23-Nov-2025 - Benchmarking Determinism in Vulnerability Scoring.md` -- Related advisory: `docs/product-advisories/archived/23-Nov-2025 - Publishing a Reachability Benchmark Dataset.md` +- Product advisory: `docs/product/advisories/24-Nov-2025 - Designing a Deterministic Reachability Benchmark.md` +- Related advisory: `docs/product/advisories/archived/23-Nov-2025 - Benchmarking Determinism in Vulnerability Scoring.md` +- Related advisory: `docs/product/advisories/archived/23-Nov-2025 - Publishing a Reachability Benchmark Dataset.md` - Existing bench prep docs: `docs/benchmarks/signals/bench-determinism.md` @@ -44,8 +44,8 @@ | 15 | BENCH-WEBSITE-513-015 | DONE (2025-12-01) | Depends on 513-014. | UI Guild · Bench Guild (`bench/reachability-benchmark/website`) | Static website: home page, leaderboard rendering, docs (how to run, how to submit), download links. Use Docusaurus or plain HTML. | | 16 | BENCH-DOCS-513-016 | DONE (2025-12-01) | Depends on all above. | Docs Guild | CONTRIBUTING.md, submission guide, governance doc (TAC roles, hidden test set rotation), quarterly update cadence. | | 17 | BENCH-LAUNCH-513-017 | DONE (2025-12-01) | Depends on 513-015, 513-016. | Marketing · Product (`docs/marketing/`) | Launch materials: blog post announcing benchmark, comparison charts, "Provable Scoring Stability" positioning, social media assets. | -| 18 | BENCH-GAPS-513-018 | DONE (2025-12-03) | None; informs tasks 7–16. | Product Mgmt · Bench Guild | Address gap findings (G1–G12) from `docs/product-advisories/24-Nov-2025 - Designing a Deterministic Reachability Benchmark.md`: add manifest/attestations to dataset, submission provenance checks, determinism env templates per language, coverage/trace schemas, unreachability oracles, frozen baseline rulepacks, resource normalization policy, sandbox + redaction guidance, and product linkage notes. | -| 19 | DATASET-GAPS-513-019 | DONE (2025-12-03) | None; complements task 18. | Product Mgmt · Bench Guild | Address reachability dataset gaps RD1–RD10 from `docs/product-advisories/24-Nov-2025 - Designing a Deterministic Reachability Benchmark.md`: sanitization/PII/license checklist with DSSE approval, feed/tool hash lockfile, published schemas/validators, evidence bundles for ground truth, binary case recipe, determinism CI (multi-run hash compare), signed baselines, CLA/DSSE submission policy, semantic dataset versioning/changelog, and offline kit packaging for dataset+harness. | +| 18 | BENCH-GAPS-513-018 | DONE (2025-12-03) | None; informs tasks 7–16. | Product Mgmt · Bench Guild | Address gap findings (G1–G12) from `docs/product/advisories/24-Nov-2025 - Designing a Deterministic Reachability Benchmark.md`: add manifest/attestations to dataset, submission provenance checks, determinism env templates per language, coverage/trace schemas, unreachability oracles, frozen baseline rulepacks, resource normalization policy, sandbox + redaction guidance, and product linkage notes. | +| 19 | DATASET-GAPS-513-019 | DONE (2025-12-03) | None; complements task 18. | Product Mgmt · Bench Guild | Address reachability dataset gaps RD1–RD10 from `docs/product/advisories/24-Nov-2025 - Designing a Deterministic Reachability Benchmark.md`: sanitization/PII/license checklist with DSSE approval, feed/tool hash lockfile, published schemas/validators, evidence bundles for ground truth, binary case recipe, determinism CI (multi-run hash compare), signed baselines, CLA/DSSE submission policy, semantic dataset versioning/changelog, and offline kit packaging for dataset+harness. | | 20 | REACH-FIXTURE-GAPS-513-020 | DONE (2025-12-03) | Close RB1–RB10 from `24-Nov-2025 - Designing a Deterministic Reachability Benchmark.md`; depends on fixture schema publication | Product Mgmt · Bench Guild | Remediate RB1–RB10: fixture schema + DSSE manifest, licensing/provenance checklist, deterministic builds/seeds, ground-truth assertions, coverage matrix (C/Java/.NET/Python/binary/container), offline kit + verify script, evidence chain outputs (SBOM/scan/graph/VEX), versioning/changelog, CI job + reporting/alerts. | ## Wave Coordination @@ -117,7 +117,7 @@ | 2025-11-30 | BENCH-BUILD-513-007: build_all/validate_builds run; all JS/PY cases deterministic, Java cases fail due to missing `javac` (same blocker as task 5). | Implementer | | 2025-12-01 | BENCH-BUILD-513-007: build tools now auto-write deterministic SBOM/attestation stubs from `case.yaml`; validate checks auxiliary artifact determinism; README updated. | Implementer | | 2025-12-01 | BENCH-BASELINE-SEMGREP-513-010 DONE: added semgrep baseline runner (run_case/run_all, rules, normalize) with deterministic outputs and schema-compliant submission. | Implementer | -| 2025-12-01 | Added gap analysis doc `docs/product-advisories/24-Nov-2025 - Designing a Deterministic Reachability Benchmark.md` and created task BENCH-GAPS-513-018 to track remediation. | Product Mgmt | +| 2025-12-01 | Added gap analysis doc `docs/product/advisories/24-Nov-2025 - Designing a Deterministic Reachability Benchmark.md` and created task BENCH-GAPS-513-018 to track remediation. | Product Mgmt | | 2025-12-01 | Added DATASET-GAPS-513-019 to cover RD1–RD10 (reachability dataset gaps) from `24-Nov-2025 - Designing a Deterministic Reachability Benchmark.md`. | Product Mgmt | | 2025-12-01 | Added REACH-FIXTURE-GAPS-513-020 to track RB1–RB10 remediation from `24-Nov-2025 - Designing a Deterministic Reachability Benchmark.md`; status TODO pending fixture schema/kit work. | Product Mgmt | | 2025-12-01 | BENCH-BASELINE-STELLA-513-012 DONE: added offline-safe Stella baseline runner (`baselines/stella/`) with `run_case.sh`, `run_all.sh`, and `normalize.py` that builds schema-compliant submissions from truth files with deterministic ordering and no external binaries. | Implementer | diff --git a/docs-archived/implplan/SPRINT_1200_001_000_router_rate_limiting_master.md b/docs-archived/implplan/SPRINT_1200_001_000_router_rate_limiting_master.md index 372f6417f..c08c9a64f 100644 --- a/docs-archived/implplan/SPRINT_1200_001_000_router_rate_limiting_master.md +++ b/docs-archived/implplan/SPRINT_1200_001_000_router_rate_limiting_master.md @@ -2,7 +2,7 @@ **IMPLID:** 1200 (Router infrastructure) **Feature:** Centralized rate limiting for Stella Router as standalone product -**Advisory Source:** `docs/product-advisories/archived/15-Dec-2025 - Designing 202 + Retry‑After Backpressure Control.md` +**Advisory Source:** `docs/product/advisories/archived/15-Dec-2025 - Designing 202 + Retry‑After Backpressure Control.md` **Owner:** Router Team **Status:** DONE (Sprints 1–6 closed; Sprint 4 closed N/A) **Priority:** HIGH - Core feature for Router product @@ -210,7 +210,7 @@ Each target can have multiple rules (AND logic): ## Related Documentation -- **Advisory:** `docs/product-advisories/archived/15-Dec-2025 - Designing 202 + Retry‑After Backpressure Control.md` +- **Advisory:** `docs/product/advisories/archived/15-Dec-2025 - Designing 202 + Retry‑After Backpressure Control.md` - **Implementation:** `src/__Libraries/StellaOps.Router.Gateway/RateLimit/` - **Tests:** `tests/StellaOps.Router.Gateway.Tests/` - **Implementation Guides:** `docs/implplan/SPRINT_1200_001_00X_*.md` (see below) diff --git a/docs-archived/implplan/SPRINT_1200_001_IMPLEMENTATION_GUIDE.md b/docs-archived/implplan/SPRINT_1200_001_IMPLEMENTATION_GUIDE.md index 2cb4d5759..5f95775e0 100644 --- a/docs-archived/implplan/SPRINT_1200_001_IMPLEMENTATION_GUIDE.md +++ b/docs-archived/implplan/SPRINT_1200_001_IMPLEMENTATION_GUIDE.md @@ -701,7 +701,7 @@ rate_limiting: ## References -- **Advisory:** `docs/product-advisories/archived/15-Dec-2025 - Designing 202 + Retry‑After Backpressure Control.md` +- **Advisory:** `docs/product/advisories/archived/15-Dec-2025 - Designing 202 + Retry‑After Backpressure Control.md` - **Master Sprint Tracker:** `docs/implplan/SPRINT_1200_001_000_router_rate_limiting_master.md` - **Sprint Files:** `docs/implplan/SPRINT_1200_001_00X_*.md` - **HTTP 429 Semantics:** RFC 6585 diff --git a/docs-archived/implplan/SPRINT_1200_001_README.md b/docs-archived/implplan/SPRINT_1200_001_README.md index 4a5f1dcdd..d00923bb8 100644 --- a/docs-archived/implplan/SPRINT_1200_001_README.md +++ b/docs-archived/implplan/SPRINT_1200_001_README.md @@ -3,7 +3,7 @@ **Package Created:** 2025-12-17 **For:** Implementation agents / reviewers **Status:** DONE (Sprints 1–6 closed; Sprint 4 closed N/A) -**Advisory Source:** `docs/product-advisories/archived/15-Dec-2025 - Designing 202 + Retry‑After Backpressure Control.md` +**Advisory Source:** `docs/product/advisories/archived/15-Dec-2025 - Designing 202 + Retry‑After Backpressure Control.md` --- @@ -114,7 +114,7 @@ Week 4+: Service Migration 1. `SPRINT_1200_001_000_router_rate_limiting_master.md` - Overview 2. `SPRINT_1200_001_IMPLEMENTATION_GUIDE.md` - Technical details -3. Original advisory: `docs/product-advisories/archived/15-Dec-2025 - Designing 202 + Retry‑After Backpressure Control.md` +3. Original advisory: `docs/product/advisories/archived/15-Dec-2025 - Designing 202 + Retry‑After Backpressure Control.md` 4. Analysis plan: `C:\Users\VladimirMoushkov\.claude\plans\vectorized-kindling-rocket.md` ### 2. Environment Setup @@ -471,7 +471,7 @@ rate_limiting: ## Related Documentation ### Source Documents -- **Advisory:** `docs/product-advisories/archived/15-Dec-2025 - Designing 202 + Retry‑After Backpressure Control.md` +- **Advisory:** `docs/product/advisories/archived/15-Dec-2025 - Designing 202 + Retry‑After Backpressure Control.md` - **Analysis Plan:** `C:\Users\VladimirMoushkov\.claude\plans\vectorized-kindling-rocket.md` - **Architecture:** `docs/modules/platform/architecture-overview.md` diff --git a/docs-archived/implplan/SPRINT_2000_0003_0001_alpine_connector.md b/docs-archived/implplan/SPRINT_2000_0003_0001_alpine_connector.md index dfcd89105..9c6d6cc70 100644 --- a/docs-archived/implplan/SPRINT_2000_0003_0001_alpine_connector.md +++ b/docs-archived/implplan/SPRINT_2000_0003_0001_alpine_connector.md @@ -9,7 +9,7 @@ ## Advisory Reference -- **Source:** `docs/product-advisories/archived/22-Dec-2025 - Getting Distro Backport Logic Right.md` +- **Source:** `docs/product/advisories/archived/22-Dec-2025 - Getting Distro Backport Logic Right.md` - **Gap Identified:** Alpine/APK support explicitly recommended but not implemented anywhere in codebase or scheduled sprints. ## Dependencies & Concurrency @@ -342,7 +342,7 @@ alpine:3.20 → apk info -v zlib → 1.3.1-r0 ## References -- Advisory: `docs/product-advisories/archived/22-Dec-2025 - Getting Distro Backport Logic Right.md` +- Advisory: `docs/product/advisories/archived/22-Dec-2025 - Getting Distro Backport Logic Right.md` - Alpine SecDB: https://secdb.alpinelinux.org/ - APK version comparison: https://gitlab.alpinelinux.org/alpine/apk-tools - Existing Debian connector: `src/Concelier/__Libraries/StellaOps.Concelier.Connector.Distro.Debian/` diff --git a/docs-archived/implplan/SPRINT_2000_0003_0002_distro_version_tests.md b/docs-archived/implplan/SPRINT_2000_0003_0002_distro_version_tests.md index d8e3affb1..62a72efc5 100644 --- a/docs-archived/implplan/SPRINT_2000_0003_0002_distro_version_tests.md +++ b/docs-archived/implplan/SPRINT_2000_0003_0002_distro_version_tests.md @@ -9,7 +9,7 @@ ## Advisory Reference -- **Source:** `docs/product-advisories/archived/22-Dec-2025 - Getting Distro Backport Logic Right.md` +- **Source:** `docs/product/advisories/archived/22-Dec-2025 - Getting Distro Backport Logic Right.md` - **Gap Identified:** Current test coverage is 12 tests total (7 NEVRA, 5 EVR). Advisory recommends 50-100 per distro plus golden files and real-image cross-checks. ## Dependencies & Concurrency @@ -352,7 +352,7 @@ Document the test corpus structure and how to add new test cases. ## References -- Advisory: `docs/product-advisories/archived/22-Dec-2025 - Getting Distro Backport Logic Right.md` +- Advisory: `docs/product/advisories/archived/22-Dec-2025 - Getting Distro Backport Logic Right.md` - RPM versioning: https://rpm.org/user_doc/versioning.html - Debian policy: https://www.debian.org/doc/debian-policy/ch-controlfields.html#version - Existing tests: `src/Concelier/__Tests/StellaOps.Concelier.Merge.Tests/` diff --git a/docs-archived/implplan/SPRINT_20251226_002_ATTESTOR_bundle_rotation.md b/docs-archived/implplan/SPRINT_20251226_002_ATTESTOR_bundle_rotation.md index 6261e75ef..0b4db368d 100644 --- a/docs-archived/implplan/SPRINT_20251226_002_ATTESTOR_bundle_rotation.md +++ b/docs-archived/implplan/SPRINT_20251226_002_ATTESTOR_bundle_rotation.md @@ -600,7 +600,7 @@ public async Task BundleOrgSigning_KmsBackend_SignsAndVerifies() ## Related Documents -- **Parent Advisory:** `docs/product-advisories/25-Dec-2025 - Planning Keyless Signing for Verdicts.md` +- **Parent Advisory:** `docs/product/advisories/25-Dec-2025 - Planning Keyless Signing for Verdicts.md` - **Predecessor Sprint:** `SPRINT_20251226_001_SIGNER_fulcio_keyless_client.md` - **Attestor Architecture:** `docs/modules/attestor/architecture.md` - **Offline Kit:** `docs/24_OFFLINE_KIT.md` diff --git a/docs-archived/implplan/SPRINT_20251226_002_BE_budget_enforcement.md b/docs-archived/implplan/SPRINT_20251226_002_BE_budget_enforcement.md index 28268a635..f98c653d3 100644 --- a/docs-archived/implplan/SPRINT_20251226_002_BE_budget_enforcement.md +++ b/docs-archived/implplan/SPRINT_20251226_002_BE_budget_enforcement.md @@ -18,7 +18,7 @@ - `docs/modules/policy/architecture.md` - `docs/modules/policy/budget-attestation.md` - `docs/modules/notify/architecture.md` -- `docs/product-advisories/archived/2025-12-21-moat-phase2/20-Dec-2025 - Moat Explanation - Risk Budgets and Diff-Aware Release Gates.md` +- `docs/product/advisories/archived/2025-12-21-moat-phase2/20-Dec-2025 - Moat Explanation - Risk Budgets and Diff-Aware Release Gates.md` ## Delivery Tracker | # | Task ID | Status | Key dependency / next step | Owners | Task Definition | diff --git a/docs-archived/implplan/SPRINT_20251226_003_ATTESTOR_offline_verification.md b/docs-archived/implplan/SPRINT_20251226_003_ATTESTOR_offline_verification.md index ad9e66da7..2472e4644 100644 --- a/docs-archived/implplan/SPRINT_20251226_003_ATTESTOR_offline_verification.md +++ b/docs-archived/implplan/SPRINT_20251226_003_ATTESTOR_offline_verification.md @@ -615,7 +615,7 @@ public async Task CLI_ExportBundle_CreatesValidBundle() ## Related Documents -- **Parent Advisory:** `docs/product-advisories/25-Dec-2025 - Planning Keyless Signing for Verdicts.md` +- **Parent Advisory:** `docs/product/advisories/25-Dec-2025 - Planning Keyless Signing for Verdicts.md` - **Predecessor Sprints:** - `SPRINT_20251226_001_SIGNER_fulcio_keyless_client.md` - `SPRINT_20251226_002_ATTESTOR_bundle_rotation.md` diff --git a/docs-archived/implplan/SPRINT_20251226_005_SCANNER_reachability_extractors.md b/docs-archived/implplan/SPRINT_20251226_005_SCANNER_reachability_extractors.md index 134875366..97271f552 100644 --- a/docs-archived/implplan/SPRINT_20251226_005_SCANNER_reachability_extractors.md +++ b/docs-archived/implplan/SPRINT_20251226_005_SCANNER_reachability_extractors.md @@ -14,8 +14,8 @@ ## Documentation Prerequisites - `docs/modules/scanner/AGENTS.md` - `docs/modules/scanner/reachability-drift.md` -- `docs/product-advisories/archived/2025-12-21-moat-gap-closure/14-Dec-2025 - Smart-Diff Technical Reference.md` -- `docs/product-advisories/25-Dec-2025 - Evolving Evidence Models for Reachability.md` +- `docs/product/advisories/archived/2025-12-21-moat-gap-closure/14-Dec-2025 - Smart-Diff Technical Reference.md` +- `docs/product/advisories/25-Dec-2025 - Evolving Evidence Models for Reachability.md` ## Delivery Tracker | # | Task ID | Status | Key dependency / next step | Owners | Task Definition | diff --git a/docs-archived/implplan/SPRINT_20251226_006_DOCS_advisory_consolidation.md b/docs-archived/implplan/SPRINT_20251226_006_DOCS_advisory_consolidation.md index 3d9452f7a..d4abc58fa 100644 --- a/docs-archived/implplan/SPRINT_20251226_006_DOCS_advisory_consolidation.md +++ b/docs-archived/implplan/SPRINT_20251226_006_DOCS_advisory_consolidation.md @@ -4,7 +4,7 @@ - Consolidate 8 overlapping product advisories into a single master document for diff-aware release gates. - Archive original advisories with cross-reference preservation. - Create executive summary for stakeholder communication. -- **Working directory:** `docs/product-advisories/` +- **Working directory:** `docs/product/advisories/` ## Dependencies & Concurrency - No technical dependencies; documentation-only sprint. diff --git a/docs-archived/implplan/SPRINT_20251226_007_BE_determinism_gaps.md b/docs-archived/implplan/SPRINT_20251226_007_BE_determinism_gaps.md index dfc3da86e..9cdaf8429 100644 --- a/docs-archived/implplan/SPRINT_20251226_007_BE_determinism_gaps.md +++ b/docs-archived/implplan/SPRINT_20251226_007_BE_determinism_gaps.md @@ -16,8 +16,8 @@ - `docs/modules/policy/design/deterministic-evaluator.md` - `docs/modules/policy/design/policy-determinism-tests.md` - `docs/modules/scanner/deterministic-execution.md` -- `docs/product-advisories/25-Dec-2025 - Planning Keyless Signing for Verdicts.md` -- `docs/product-advisories/25-Dec-2025 - Enforcing Canonical JSON for Stable Verdicts.md` (SUPERSEDED - tasks merged here) +- `docs/product/advisories/25-Dec-2025 - Planning Keyless Signing for Verdicts.md` +- `docs/product/advisories/25-Dec-2025 - Enforcing Canonical JSON for Stable Verdicts.md` (SUPERSEDED - tasks merged here) ## Context: What Already Exists diff --git a/docs-archived/implplan/SPRINT_20251226_008_DOCS_determinism_consolidation.md b/docs-archived/implplan/SPRINT_20251226_008_DOCS_determinism_consolidation.md index dc6de032b..85c78049f 100644 --- a/docs-archived/implplan/SPRINT_20251226_008_DOCS_determinism_consolidation.md +++ b/docs-archived/implplan/SPRINT_20251226_008_DOCS_determinism_consolidation.md @@ -4,7 +4,7 @@ - Consolidate 6 overlapping product advisories into a single determinism architecture specification. - Create authoritative documentation for all determinism guarantees and digest algorithms. - Archive original advisories with cross-reference preservation. -- **Working directory:** `docs/product-advisories/`, `docs/technical/` +- **Working directory:** `docs/product/advisories/`, `docs/technical/` ## Dependencies & Concurrency - No technical dependencies; documentation-only sprint. diff --git a/docs-archived/implplan/SPRINT_20251226_009_SCANNER_funcproof.md b/docs-archived/implplan/SPRINT_20251226_009_SCANNER_funcproof.md index 0eee9366b..2d6c7c338 100644 --- a/docs-archived/implplan/SPRINT_20251226_009_SCANNER_funcproof.md +++ b/docs-archived/implplan/SPRINT_20251226_009_SCANNER_funcproof.md @@ -14,8 +14,8 @@ ## Documentation Prerequisites - `docs/modules/scanner/design/native-reachability-plan.md` - `docs/modules/scanner/os-analyzers-evidence.md` -- `docs/product-advisories/25-Dec-2025 - Evolving Evidence Models for Reachability.md` -- `docs/product-advisories/26-Dec-2026 - Mapping a Binary Intelligence Graph.md` +- `docs/product/advisories/25-Dec-2025 - Evolving Evidence Models for Reachability.md` +- `docs/product/advisories/26-Dec-2026 - Mapping a Binary Intelligence Graph.md` ## Context: What Already Exists diff --git a/docs-archived/implplan/SPRINT_20251228_005_BE_sbom_lineage_graph_i.md b/docs-archived/implplan/SPRINT_20251228_005_BE_sbom_lineage_graph_i.md index 82443dfeb..3fed7188e 100644 --- a/docs-archived/implplan/SPRINT_20251228_005_BE_sbom_lineage_graph_i.md +++ b/docs-archived/implplan/SPRINT_20251228_005_BE_sbom_lineage_graph_i.md @@ -15,7 +15,7 @@ - docs/modules/sbomservice/architecture.md - docs/modules/scanner/architecture.md - docs/modules/excititor/architecture.md -- docs/product-advisories/ADVISORY_SBOM_LINEAGE_GRAPH.md +- docs/product/advisories/ADVISORY_SBOM_LINEAGE_GRAPH.md ## Delivery Tracker | # | Task ID | Status | Key dependency / next step | Owners | Task Definition | diff --git a/docs-archived/implplan/SPRINT_20251228_006_FE_sbom_lineage_graph_i.md b/docs-archived/implplan/SPRINT_20251228_006_FE_sbom_lineage_graph_i.md index b92e6c4a9..32410b3d2 100644 --- a/docs-archived/implplan/SPRINT_20251228_006_FE_sbom_lineage_graph_i.md +++ b/docs-archived/implplan/SPRINT_20251228_006_FE_sbom_lineage_graph_i.md @@ -12,7 +12,7 @@ ## Documentation Prerequisites - docs/modules/web/architecture.md -- docs/product-advisories/ADVISORY_SBOM_LINEAGE_GRAPH.md +- docs/product/advisories/ADVISORY_SBOM_LINEAGE_GRAPH.md - src/Web/StellaOps.Web/AGENTS.md (if exists) ## Delivery Tracker diff --git a/docs-archived/implplan/SPRINT_20251228_007_BE_sbom_lineage_graph_ii.md b/docs-archived/implplan/SPRINT_20251228_007_BE_sbom_lineage_graph_ii.md index 0efc43f19..64891d149 100644 --- a/docs-archived/implplan/SPRINT_20251228_007_BE_sbom_lineage_graph_ii.md +++ b/docs-archived/implplan/SPRINT_20251228_007_BE_sbom_lineage_graph_ii.md @@ -14,7 +14,7 @@ - docs/07_HIGH_LEVEL_ARCHITECTURE.md - docs/modules/attestor/architecture.md - docs/modules/exportcenter/architecture.md -- docs/product-advisories/ADVISORY_SBOM_LINEAGE_GRAPH.md +- docs/product/advisories/ADVISORY_SBOM_LINEAGE_GRAPH.md ## Delivery Tracker | # | Task ID | Status | Key dependency / next step | Owners | Task Definition | diff --git a/docs-archived/implplan/SPRINT_20251228_008_FE_sbom_lineage_graph_ii.md b/docs-archived/implplan/SPRINT_20251228_008_FE_sbom_lineage_graph_ii.md index f32514929..f95e8e6d4 100644 --- a/docs-archived/implplan/SPRINT_20251228_008_FE_sbom_lineage_graph_ii.md +++ b/docs-archived/implplan/SPRINT_20251228_008_FE_sbom_lineage_graph_ii.md @@ -11,7 +11,7 @@ ## Documentation Prerequisites - docs/modules/web/architecture.md -- docs/product-advisories/ADVISORY_SBOM_LINEAGE_GRAPH.md +- docs/product/advisories/ADVISORY_SBOM_LINEAGE_GRAPH.md - Sprint 20251228_006 acceptance criteria ## Delivery Tracker diff --git a/docs-archived/implplan/SPRINT_20251229_001_001_BE_cgs_infrastructure.md b/docs-archived/implplan/SPRINT_20251229_001_001_BE_cgs_infrastructure.md index 7e8ffafcc..c527d54a4 100644 --- a/docs-archived/implplan/SPRINT_20251229_001_001_BE_cgs_infrastructure.md +++ b/docs-archived/implplan/SPRINT_20251229_001_001_BE_cgs_infrastructure.md @@ -17,7 +17,7 @@ This sprint implements the unified Verdict Builder service that composes existin ## Related Documentation -- `docs/product-advisories/archived/CONSOLIDATED - Deterministic Evidence and Verdict Architecture.md` +- `docs/product/advisories/archived/CONSOLIDATED - Deterministic Evidence and Verdict Architecture.md` - `docs/modules/attestor/architecture.md` (ProofChain section) - `docs/modules/policy/architecture.md` (Determinism section) - `docs/modules/replay/architecture.md` diff --git a/docs-archived/implplan/SPRINT_20251229_001_003_FE_lineage_graph.md b/docs-archived/implplan/SPRINT_20251229_001_003_FE_lineage_graph.md index 9cd207e57..e1b9a15a3 100644 --- a/docs-archived/implplan/SPRINT_20251229_001_003_FE_lineage_graph.md +++ b/docs-archived/implplan/SPRINT_20251229_001_003_FE_lineage_graph.md @@ -26,7 +26,7 @@ This sprint is now scoped to **minor integration work** with the new CGS backend - `docs/modules/sbomservice/lineage/architecture.md` (API spec) - `docs/modules/ui/architecture.md` -- `docs/product-advisories/archived/ADVISORY_SBOM_LINEAGE_GRAPH.md` +- `docs/product/advisories/archived/ADVISORY_SBOM_LINEAGE_GRAPH.md` - Existing compare feature: `src/Web/StellaOps.Web/src/app/features/compare/` ## Prerequisites diff --git a/docs-archived/implplan/SPRINT_20251229_001_004_FE_proof_studio.md b/docs-archived/implplan/SPRINT_20251229_001_004_FE_proof_studio.md index f37e63d96..bfc2d058d 100644 --- a/docs-archived/implplan/SPRINT_20251229_001_004_FE_proof_studio.md +++ b/docs-archived/implplan/SPRINT_20251229_001_004_FE_proof_studio.md @@ -27,7 +27,7 @@ This sprint focuses on **new features** not yet implemented: ## Related Documentation -- `docs/product-advisories/archived/CONSOLIDATED - Deterministic Evidence and Verdict Architecture.md` +- `docs/product/advisories/archived/CONSOLIDATED - Deterministic Evidence and Verdict Architecture.md` - `docs/modules/policy/architecture.md` (Proof Trace section) - Existing `ProofTreeComponent` in UI diff --git a/docs-archived/implplan/SPRINT_20251229_001_007_FE_pinned_explanations.md b/docs-archived/implplan/SPRINT_20251229_001_007_FE_pinned_explanations.md index 07b2f3a3b..546240425 100644 --- a/docs-archived/implplan/SPRINT_20251229_001_007_FE_pinned_explanations.md +++ b/docs-archived/implplan/SPRINT_20251229_001_007_FE_pinned_explanations.md @@ -30,7 +30,7 @@ This feature bridges the gap between the interactive UI and external documentati ## Related Documentation -- `docs/product-advisories/archived/ADVISORY_SBOM_LINEAGE_GRAPH.md` (Pinned Explanations section) +- `docs/product/advisories/archived/ADVISORY_SBOM_LINEAGE_GRAPH.md` (Pinned Explanations section) - FE_005 Explainer Timeline (source of explainer steps to pin) - FE_006 Node Diff Table (source of component changes to pin) - Existing: `src/app/core/services/clipboard.service.ts` (if exists) diff --git a/docs-archived/implplan/SPRINT_20251229_001_008_FE_reachability_gate_diff.md b/docs-archived/implplan/SPRINT_20251229_001_008_FE_reachability_gate_diff.md index c29c07860..a2fc5e063 100644 --- a/docs-archived/implplan/SPRINT_20251229_001_008_FE_reachability_gate_diff.md +++ b/docs-archived/implplan/SPRINT_20251229_001_008_FE_reachability_gate_diff.md @@ -33,7 +33,7 @@ An existing `reachability-diff-view.component.ts` provides basic functionality, ## Related Documentation - `docs/modules/reachgraph/architecture.md` (ReachGraph API) -- `docs/product-advisories/archived/ADVISORY_SBOM_LINEAGE_GRAPH.md` (Reachability section) +- `docs/product/advisories/archived/ADVISORY_SBOM_LINEAGE_GRAPH.md` (Reachability section) - Existing: `src/app/features/lineage/components/reachability-diff-view/` - Backend model: `ReachabilityDelta` from lineage.models.ts diff --git a/docs-archived/implplan/SPRINT_20251229_001_009_FE_audit_pack_export.md b/docs-archived/implplan/SPRINT_20251229_001_009_FE_audit_pack_export.md index 4d619eb21..3a85510eb 100644 --- a/docs-archived/implplan/SPRINT_20251229_001_009_FE_audit_pack_export.md +++ b/docs-archived/implplan/SPRINT_20251229_001_009_FE_audit_pack_export.md @@ -37,7 +37,7 @@ The existing `lineage-export-dialog.component.ts` provides basic export, but nee ## Related Documentation - `docs/modules/exportcenter/architecture.md` (Export API) -- `docs/product-advisories/archived/ADVISORY_SBOM_LINEAGE_GRAPH.md` (Audit Pack section) +- `docs/product/advisories/archived/ADVISORY_SBOM_LINEAGE_GRAPH.md` (Audit Pack section) - Existing: `src/app/features/lineage/components/lineage-export-dialog/` - Backend model: `LineageEvidencePack` from ExportCenter diff --git a/docs-archived/implplan/SPRINT_3000_0001_0001_rekor_merkle_proof_verification.md b/docs-archived/implplan/SPRINT_3000_0001_0001_rekor_merkle_proof_verification.md index 4f0ae0449..a54757fd3 100644 --- a/docs-archived/implplan/SPRINT_3000_0001_0001_rekor_merkle_proof_verification.md +++ b/docs-archived/implplan/SPRINT_3000_0001_0001_rekor_merkle_proof_verification.md @@ -4,7 +4,7 @@ **Working Directory**: `src/Attestor/StellaOps.Attestor` **Priority**: P0 (Critical) **Estimated Complexity**: Medium -**Parent Advisory**: `docs/product-advisories/14-Dec-2025 - Rekor Integration Technical Reference.md` +**Parent Advisory**: `docs/product/advisories/14-Dec-2025 - Rekor Integration Technical Reference.md` --- @@ -80,8 +80,8 @@ Before starting, read: ### T6a: Freeze offline checkpoint/receipt contract - **Goal:** define the canonical offline inputs required to verify inclusion proofs without network access. - **Use these docs as the baseline (do not invent new shapes):** - - `docs/product-advisories/14-Dec-2025 - Rekor Integration Technical Reference.md` (§13) - - `docs/product-advisories/14-Dec-2025 - Offline and Air-Gap Technical Reference.md` (§3–4; `evidence/tlog/checkpoint.sig` + `entries/`) + - `docs/product/advisories/14-Dec-2025 - Rekor Integration Technical Reference.md` (§13) + - `docs/product/advisories/14-Dec-2025 - Offline and Air-Gap Technical Reference.md` (§3–4; `evidence/tlog/checkpoint.sig` + `entries/`) - **Minimum deliverables:** - A single canonical contract doc (new or existing) that answers: - Where the **tlog public key** comes from (file path, rotation/versioning) @@ -372,4 +372,4 @@ public Counter CheckpointVerifyTotal { get; } // attestor.checkpoint_ - [RFC 6962: Certificate Transparency](https://datatracker.ietf.org/doc/html/rfc6962) - [Sigstore Rekor API](https://github.com/sigstore/rekor/blob/main/openapi.yaml) - [Rekor Checkpoint Format](https://github.com/transparency-dev/formats/blob/main/log/checkpoint.md) -- Advisory: `docs/product-advisories/14-Dec-2025 - Rekor Integration Technical Reference.md` §5, §7, §13 +- Advisory: `docs/product/advisories/14-Dec-2025 - Rekor Integration Technical Reference.md` §5, §7, §13 diff --git a/docs-archived/implplan/SPRINT_3000_0001_0002_rekor_retry_queue_metrics.md b/docs-archived/implplan/SPRINT_3000_0001_0002_rekor_retry_queue_metrics.md index f5731f9a4..21685b5fd 100644 --- a/docs-archived/implplan/SPRINT_3000_0001_0002_rekor_retry_queue_metrics.md +++ b/docs-archived/implplan/SPRINT_3000_0001_0002_rekor_retry_queue_metrics.md @@ -4,7 +4,7 @@ **Working Directory**: `src/Attestor/StellaOps.Attestor` **Priority**: P1 (High) **Estimated Complexity**: Medium -**Parent Advisory**: `docs/product-advisories/14-Dec-2025 - Rekor Integration Technical Reference.md` +**Parent Advisory**: `docs/product/advisories/14-Dec-2025 - Rekor Integration Technical Reference.md` **Depends On**: None (can run parallel to SPRINT_3000_0001_0001) --- @@ -549,5 +549,5 @@ WHERE status = 'dead_letter' ## 12. REFERENCES -- Advisory: `docs/product-advisories/14-Dec-2025 - Rekor Integration Technical Reference.md` §9, §11 +- Advisory: `docs/product/advisories/14-Dec-2025 - Rekor Integration Technical Reference.md` §9, §11 - Similar pattern: `src/Scheduler/__Libraries/StellaOps.Scheduler.Worker/` diff --git a/docs-archived/implplan/SPRINT_3000_0001_0003_rekor_time_skew_validation.md b/docs-archived/implplan/SPRINT_3000_0001_0003_rekor_time_skew_validation.md index 8436d0278..4e3bac8dc 100644 --- a/docs-archived/implplan/SPRINT_3000_0001_0003_rekor_time_skew_validation.md +++ b/docs-archived/implplan/SPRINT_3000_0001_0003_rekor_time_skew_validation.md @@ -4,7 +4,7 @@ **Working Directory**: `src/Attestor/StellaOps.Attestor` **Priority**: P2 (Medium) **Estimated Complexity**: Low -**Parent Advisory**: `docs/product-advisories/14-Dec-2025 - Rekor Integration Technical Reference.md` +**Parent Advisory**: `docs/product/advisories/14-Dec-2025 - Rekor Integration Technical Reference.md` **Depends On**: SPRINT_3000_0001_0001 (Merkle Proof Verification) --- @@ -493,5 +493,5 @@ groups: ## 12. REFERENCES -- Advisory: `docs/product-advisories/14-Dec-2025 - Rekor Integration Technical Reference.md` §14.3 +- Advisory: `docs/product/advisories/14-Dec-2025 - Rekor Integration Technical Reference.md` §14.3 - Rekor API: `integratedTime` field in entry response diff --git a/docs-archived/implplan/SPRINT_3401_0001_0001_determinism_scoring_foundations.md b/docs-archived/implplan/SPRINT_3401_0001_0001_determinism_scoring_foundations.md index 157f6cf59..b0498afc6 100644 --- a/docs-archived/implplan/SPRINT_3401_0001_0001_determinism_scoring_foundations.md +++ b/docs-archived/implplan/SPRINT_3401_0001_0001_determinism_scoring_foundations.md @@ -21,7 +21,7 @@ Implement high-value, low-effort scoring enhancements from the Determinism and R - `docs/README.md` - `docs/07_HIGH_LEVEL_ARCHITECTURE.md` - `docs/modules/policy/architecture.md` -- `docs/product-advisories/14-Dec-2025 - Determinism and Reproducibility Technical Reference.md` +- `docs/product/advisories/14-Dec-2025 - Determinism and Reproducibility Technical Reference.md` - Source: `src/Policy/StellaOps.Policy.Scoring/CvssScoreReceipt.cs` - Source: `src/Telemetry/StellaOps.Telemetry.Core/TimeToEvidenceMetrics.cs` diff --git a/docs-archived/implplan/SPRINT_3401_0002_0001_score_replay_proof_bundle.md b/docs-archived/implplan/SPRINT_3401_0002_0001_score_replay_proof_bundle.md index 6557853f5..92a857773 100644 --- a/docs-archived/implplan/SPRINT_3401_0002_0001_score_replay_proof_bundle.md +++ b/docs-archived/implplan/SPRINT_3401_0002_0001_score_replay_proof_bundle.md @@ -9,8 +9,8 @@ Implement the score replay capability and proof bundle writer from the "Building 3. **Score Replay Endpoint** - `POST /score/replay` to recompute scores without rescanning 4. **Scan Manifest** - DSSE-signed manifest capturing all inputs affecting results -**Source Advisory**: `docs/product-advisories/archived/17-Dec-2025/16-Dec-2025 - Building a Deeper Moat Beyond Reachability.md` -**Related Docs**: `docs/product-advisories/14-Dec-2025 - Determinism and Reproducibility Technical Reference.md` §11.2, §12 +**Source Advisory**: `docs/product/advisories/archived/17-Dec-2025/16-Dec-2025 - Building a Deeper Moat Beyond Reachability.md` +**Related Docs**: `docs/product/advisories/14-Dec-2025 - Determinism and Reproducibility Technical Reference.md` §11.2, §12 **Working Directory**: `src/Scanner/StellaOps.Scanner.WebService`, `src/Policy/__Libraries/StellaOps.Policy/` @@ -26,7 +26,7 @@ Implement the score replay capability and proof bundle writer from the "Building - `docs/README.md` - `docs/07_HIGH_LEVEL_ARCHITECTURE.md` - `docs/modules/scanner/architecture.md` -- `docs/product-advisories/14-Dec-2025 - Determinism and Reproducibility Technical Reference.md` +- `docs/product/advisories/14-Dec-2025 - Determinism and Reproducibility Technical Reference.md` - `docs/benchmarks/ground-truth-corpus.md` (new) --- diff --git a/docs-archived/implplan/SPRINT_3402_0001_0001_score_policy_yaml.md b/docs-archived/implplan/SPRINT_3402_0001_0001_score_policy_yaml.md index 896d34825..124f9333a 100644 --- a/docs-archived/implplan/SPRINT_3402_0001_0001_score_policy_yaml.md +++ b/docs-archived/implplan/SPRINT_3402_0001_0001_score_policy_yaml.md @@ -22,7 +22,7 @@ Implement the Score Policy YAML schema and infrastructure for customer-configura - `docs/README.md` - `docs/07_HIGH_LEVEL_ARCHITECTURE.md` - `docs/modules/policy/architecture.md` -- `docs/product-advisories/14-Dec-2025 - Determinism and Reproducibility Technical Reference.md` (Section 3) +- `docs/product/advisories/14-Dec-2025 - Determinism and Reproducibility Technical Reference.md` (Section 3) - Source: `src/Policy/__Libraries/StellaOps.Policy/PolicyScoringConfigDigest.cs` - Source: `etc/authority.yaml.sample` (YAML config pattern) diff --git a/docs-archived/implplan/SPRINT_3403_0001_0001_fidelity_metrics.md b/docs-archived/implplan/SPRINT_3403_0001_0001_fidelity_metrics.md index d2d59019c..15839c638 100644 --- a/docs-archived/implplan/SPRINT_3403_0001_0001_fidelity_metrics.md +++ b/docs-archived/implplan/SPRINT_3403_0001_0001_fidelity_metrics.md @@ -20,7 +20,7 @@ Implement the three-tier fidelity metrics framework for measuring deterministic - `docs/README.md` - `docs/07_HIGH_LEVEL_ARCHITECTURE.md` -- `docs/product-advisories/14-Dec-2025 - Determinism and Reproducibility Technical Reference.md` (Section 6) +- `docs/product/advisories/14-Dec-2025 - Determinism and Reproducibility Technical Reference.md` (Section 6) - Source: `src/Scanner/StellaOps.Scanner.Worker/Determinism/DeterminismReport.cs` - Source: `src/Scanner/__Tests/StellaOps.Scanner.Worker.Tests/Determinism/DeterminismHarness.cs` diff --git a/docs-archived/implplan/SPRINT_3404_0001_0001_fn_drift_tracking.md b/docs-archived/implplan/SPRINT_3404_0001_0001_fn_drift_tracking.md index 2202b6167..4abbf163d 100644 --- a/docs-archived/implplan/SPRINT_3404_0001_0001_fn_drift_tracking.md +++ b/docs-archived/implplan/SPRINT_3404_0001_0001_fn_drift_tracking.md @@ -22,7 +22,7 @@ Implement False-Negative Drift (FN-Drift) rate tracking for monitoring reclassif - `docs/README.md` - `docs/07_HIGH_LEVEL_ARCHITECTURE.md` - `docs/db/SPECIFICATION.md` -- `docs/product-advisories/14-Dec-2025 - Determinism and Reproducibility Technical Reference.md` (Section 13.2) +- `docs/product/advisories/14-Dec-2025 - Determinism and Reproducibility Technical Reference.md` (Section 13.2) - Source: `docs/db/schemas/vuln.sql` --- diff --git a/docs-archived/implplan/SPRINT_3405_0001_0001_gate_multipliers.md b/docs-archived/implplan/SPRINT_3405_0001_0001_gate_multipliers.md index a9ad4448b..5ca4fc214 100644 --- a/docs-archived/implplan/SPRINT_3405_0001_0001_gate_multipliers.md +++ b/docs-archived/implplan/SPRINT_3405_0001_0001_gate_multipliers.md @@ -22,7 +22,7 @@ Implement gate detection and multipliers for reachability scoring, reducing risk - `docs/README.md` - `docs/07_HIGH_LEVEL_ARCHITECTURE.md` - `docs/modules/scanner/architecture.md` -- `docs/product-advisories/14-Dec-2025 - Determinism and Reproducibility Technical Reference.md` (Section 2.2, 4.3) +- `docs/product/advisories/14-Dec-2025 - Determinism and Reproducibility Technical Reference.md` (Section 2.2, 4.3) - Source: `src/Scanner/__Libraries/StellaOps.Scanner.Reachability/RichGraph/RichGraph.cs` - Source: `src/Signals/StellaOps.Signals/Services/ReachabilityScoringService.cs` diff --git a/docs-archived/implplan/SPRINT_3406_0001_0001_metrics_tables.md b/docs-archived/implplan/SPRINT_3406_0001_0001_metrics_tables.md index 2ffbf056f..de81f961c 100644 --- a/docs-archived/implplan/SPRINT_3406_0001_0001_metrics_tables.md +++ b/docs-archived/implplan/SPRINT_3406_0001_0001_metrics_tables.md @@ -21,7 +21,7 @@ Implement relational PostgreSQL tables for scan metrics tracking (hybrid approac - `docs/README.md` - `docs/db/SPECIFICATION.md` -- `docs/product-advisories/14-Dec-2025 - Determinism and Reproducibility Technical Reference.md` (Section 9, 13.1) +- `docs/product/advisories/14-Dec-2025 - Determinism and Reproducibility Technical Reference.md` (Section 9, 13.1) - Source: `docs/db/schemas/scheduler.sql` --- diff --git a/docs-archived/implplan/SPRINT_3407_0001_0001_configurable_scoring.md b/docs-archived/implplan/SPRINT_3407_0001_0001_configurable_scoring.md index a1f6253d5..bf3fe31d1 100644 --- a/docs-archived/implplan/SPRINT_3407_0001_0001_configurable_scoring.md +++ b/docs-archived/implplan/SPRINT_3407_0001_0001_configurable_scoring.md @@ -23,7 +23,7 @@ Implement configurable scoring profiles allowing customers to choose between sco - `docs/README.md` - `docs/07_HIGH_LEVEL_ARCHITECTURE.md` - `docs/modules/policy/architecture.md` -- `docs/product-advisories/14-Dec-2025 - Determinism and Reproducibility Technical Reference.md` (Sections 1-2) +- `docs/product/advisories/14-Dec-2025 - Determinism and Reproducibility Technical Reference.md` (Sections 1-2) - Source: `src/Policy/StellaOps.Policy.Engine/Scoring/RiskScoringModels.cs` - Source: `src/Policy/StellaOps.Policy.Scoring/CvssScoreReceipt.cs` diff --git a/docs-archived/implplan/SPRINT_3410_0001_0001_epss_ingestion_storage.md b/docs-archived/implplan/SPRINT_3410_0001_0001_epss_ingestion_storage.md index 66e8675a7..ec5ca4c78 100644 --- a/docs-archived/implplan/SPRINT_3410_0001_0001_epss_ingestion_storage.md +++ b/docs-archived/implplan/SPRINT_3410_0001_0001_epss_ingestion_storage.md @@ -25,7 +25,7 @@ ## Documentation Prerequisites - `docs/modules/scanner/epss-integration.md` -- `docs/product-advisories/archive/16-Dec-2025 - Merging EPSS v4 with CVSS v4 Frameworks.md` +- `docs/product/advisories/archive/16-Dec-2025 - Merging EPSS v4 with CVSS v4 Frameworks.md` - `src/Scanner/__Libraries/StellaOps.Scanner.Storage/Postgres/Migrations/008_epss_integration.sql` ## Overview diff --git a/docs-archived/implplan/SPRINT_3410_0002_0001_epss_scanner_integration.md b/docs-archived/implplan/SPRINT_3410_0002_0001_epss_scanner_integration.md index 680917594..312041ee0 100644 --- a/docs-archived/implplan/SPRINT_3410_0002_0001_epss_scanner_integration.md +++ b/docs-archived/implplan/SPRINT_3410_0002_0001_epss_scanner_integration.md @@ -20,7 +20,7 @@ Integrate EPSS v4 data into the Scanner WebService for vulnerability scoring and - Integration with unknowns ranking algorithm - Trust lattice scoring weight configuration -**Source Advisory**: `docs/product-advisories/archive/16-Dec-2025 - Merging EPSS v4 with CVSS v4 Frameworks.md` +**Source Advisory**: `docs/product/advisories/archive/16-Dec-2025 - Merging EPSS v4 with CVSS v4 Frameworks.md` --- diff --git a/docs-archived/implplan/SPRINT_3420_0001_0001_bitemporal_unknowns_schema.md b/docs-archived/implplan/SPRINT_3420_0001_0001_bitemporal_unknowns_schema.md index bdf17d224..f827cfee0 100644 --- a/docs-archived/implplan/SPRINT_3420_0001_0001_bitemporal_unknowns_schema.md +++ b/docs-archived/implplan/SPRINT_3420_0001_0001_bitemporal_unknowns_schema.md @@ -19,7 +19,7 @@ ## Documentation Prerequisites -- `docs/product-advisories/14-Dec-2025 - PostgreSQL Patterns Technical Reference.md` (Section 3.4) +- `docs/product/advisories/14-Dec-2025 - PostgreSQL Patterns Technical Reference.md` (Section 3.4) - `docs/db/SPECIFICATION.md` --- @@ -47,8 +47,8 @@ StellaOps scans produce "unknowns" - packages, versions, or ecosystems that cann ### 2.3 Source Advisory -- `docs/product-advisories/14-Dec-2025 - PostgreSQL Patterns Technical Reference.md` (Section 3.4) -- `docs/product-advisories/archived/14-Dec-2025/04-Dec-2025- Ranking Unknowns in Reachability Graphs.md` +- `docs/product/advisories/14-Dec-2025 - PostgreSQL Patterns Technical Reference.md` (Section 3.4) +- `docs/product/advisories/archived/14-Dec-2025/04-Dec-2025- Ranking Unknowns in Reachability Graphs.md` --- @@ -508,7 +508,7 @@ COMMIT; - ADR: `docs/adr/0001-postgresql-for-control-plane.md` - Spec: `docs/db/SPECIFICATION.md` - Rules: `docs/db/RULES.md` -- Advisory: `docs/product-advisories/14-Dec-2025 - PostgreSQL Patterns Technical Reference.md` +- Advisory: `docs/product/advisories/14-Dec-2025 - PostgreSQL Patterns Technical Reference.md` ## Execution Log diff --git a/docs-archived/implplan/SPRINT_3421_0001_0001_rls_expansion.md b/docs-archived/implplan/SPRINT_3421_0001_0001_rls_expansion.md index 2314245be..c3b335184 100644 --- a/docs-archived/implplan/SPRINT_3421_0001_0001_rls_expansion.md +++ b/docs-archived/implplan/SPRINT_3421_0001_0001_rls_expansion.md @@ -612,7 +612,7 @@ $$; - Reference implementation: `src/Findings/StellaOps.Findings.Ledger/migrations/007_enable_rls.sql` - PostgreSQL RLS docs: https://www.postgresql.org/docs/16/ddl-rowsecurity.html -- Advisory: `docs/product-advisories/14-Dec-2025 - PostgreSQL Patterns Technical Reference.md` (Section 2.2) +- Advisory: `docs/product/advisories/14-Dec-2025 - PostgreSQL Patterns Technical Reference.md` (Section 2.2) ## Execution Log diff --git a/docs-archived/implplan/SPRINT_3422_0001_0001_time_based_partitioning.md b/docs-archived/implplan/SPRINT_3422_0001_0001_time_based_partitioning.md index 4bcbec05c..5b1488962 100644 --- a/docs-archived/implplan/SPRINT_3422_0001_0001_time_based_partitioning.md +++ b/docs-archived/implplan/SPRINT_3422_0001_0001_time_based_partitioning.md @@ -21,7 +21,7 @@ ## Documentation Prerequisites - `docs/db/SPECIFICATION.md` -- `docs/product-advisories/14-Dec-2025 - PostgreSQL Patterns Technical Reference.md` +- `docs/product/advisories/14-Dec-2025 - PostgreSQL Patterns Technical Reference.md` --- @@ -647,7 +647,7 @@ WHERE schemaname = 'scheduler' - PostgreSQL Partitioning: https://www.postgresql.org/docs/16/ddl-partitioning.html - BRIN Indexes: https://www.postgresql.org/docs/16/brin-intro.html - pg_partman: https://github.com/pgpartman/pg_partman -- Advisory: `docs/product-advisories/14-Dec-2025 - PostgreSQL Patterns Technical Reference.md` (Section 6) +- Advisory: `docs/product/advisories/14-Dec-2025 - PostgreSQL Patterns Technical Reference.md` (Section 6) ## Execution Log @@ -704,4 +704,4 @@ DROP TABLE IF EXISTS notify.deliveries_old; - PostgreSQL Partitioning: https://www.postgresql.org/docs/16/ddl-partitioning.html - BRIN Indexes: https://www.postgresql.org/docs/16/brin-intro.html - pg_partman: https://github.com/pgpartman/pg_partman -- Advisory: `docs/product-advisories/14-Dec-2025 - PostgreSQL Patterns Technical Reference.md` (Section 6) +- Advisory: `docs/product/advisories/14-Dec-2025 - PostgreSQL Patterns Technical Reference.md` (Section 6) diff --git a/docs-archived/implplan/SPRINT_3423_0001_0001_generated_columns.md b/docs-archived/implplan/SPRINT_3423_0001_0001_generated_columns.md index 67d2706bd..74b25c0fe 100644 --- a/docs-archived/implplan/SPRINT_3423_0001_0001_generated_columns.md +++ b/docs-archived/implplan/SPRINT_3423_0001_0001_generated_columns.md @@ -20,7 +20,7 @@ ## Documentation Prerequisites - `docs/db/SPECIFICATION.md` -- `docs/product-advisories/14-Dec-2025 - PostgreSQL Patterns Technical Reference.md` +- `docs/product/advisories/14-Dec-2025 - PostgreSQL Patterns Technical Reference.md` --- @@ -514,7 +514,7 @@ public async Task QueryPlan_UsesGeneratedColumnIndex() - PostgreSQL Generated Columns: https://www.postgresql.org/docs/16/ddl-generated-columns.html - JSONB Indexing Strategies: https://www.postgresql.org/docs/16/datatype-json.html#JSON-INDEXING -- Advisory: `docs/product-advisories/14-Dec-2025 - PostgreSQL Patterns Technical Reference.md` (Section 4) +- Advisory: `docs/product/advisories/14-Dec-2025 - PostgreSQL Patterns Technical Reference.md` (Section 4) ## Execution Log diff --git a/docs-archived/implplan/SPRINT_3500_0000_0000_binary_sbom_reachability_master.md b/docs-archived/implplan/SPRINT_3500_0000_0000_binary_sbom_reachability_master.md index 59098a97e..d24c9ae56 100644 --- a/docs-archived/implplan/SPRINT_3500_0000_0000_binary_sbom_reachability_master.md +++ b/docs-archived/implplan/SPRINT_3500_0000_0000_binary_sbom_reachability_master.md @@ -220,6 +220,6 @@ Per user confirmation: ## Advisory Status -**Source:** `docs/product-advisories/18-Dec-2025 - Building Better Binary Mapping and Call‑Stack Reachability.md` +**Source:** `docs/product/advisories/18-Dec-2025 - Building Better Binary Mapping and Call‑Stack Reachability.md` **Status:** PROCESSED → Implementation planned -**Archive:** Move to `docs/product-advisories/archived/` after Phase 1 completion +**Archive:** Move to `docs/product/advisories/archived/` after Phase 1 completion diff --git a/docs-archived/implplan/SPRINT_3500_0001_0001_deeper_moat_master.md b/docs-archived/implplan/SPRINT_3500_0001_0001_deeper_moat_master.md index c41332566..3e0fc97d7 100644 --- a/docs-archived/implplan/SPRINT_3500_0001_0001_deeper_moat_master.md +++ b/docs-archived/implplan/SPRINT_3500_0001_0001_deeper_moat_master.md @@ -22,7 +22,7 @@ - `docs/07_HIGH_LEVEL_ARCHITECTURE.md` - `docs/modules/platform/architecture-overview.md` - `docs/market/competitive-landscape.md` -- `docs/product-advisories/archived/17-Dec-2025/16-Dec-2025 - Building a Deeper Moat Beyond Reachability.md` +- `docs/product/advisories/archived/17-Dec-2025/16-Dec-2025 - Building a Deeper Moat Beyond Reachability.md` ## Wave Coordination - Wave 1: Epic A (Score Proofs + Unknowns, sprints 3500.0002.x). @@ -63,15 +63,15 @@ These features address gaps no competitor has filled per `docs/market/competitiv ## Source Documents -**Primary Advisory**: `docs/product-advisories/archived/17-Dec-2025/16-Dec-2025 - Building a Deeper Moat Beyond Reachability.md` +**Primary Advisory**: `docs/product/advisories/archived/17-Dec-2025/16-Dec-2025 - Building a Deeper Moat Beyond Reachability.md` **Related Documentation**: - `docs/07_HIGH_LEVEL_ARCHITECTURE.md` — System topology, trust boundaries - `docs/modules/platform/architecture-overview.md` — AOC boundaries, service responsibilities - `docs/market/competitive-landscape.md` — Competitive positioning -- `docs/product-advisories/14-Dec-2025 - Reachability Analysis Technical Reference.md` -- `docs/product-advisories/14-Dec-2025 - Proof and Evidence Chain Technical Reference.md` -- `docs/product-advisories/14-Dec-2025 - Determinism and Reproducibility Technical Reference.md` +- `docs/product/advisories/14-Dec-2025 - Reachability Analysis Technical Reference.md` +- `docs/product/advisories/14-Dec-2025 - Proof and Evidence Chain Technical Reference.md` +- `docs/product/advisories/14-Dec-2025 - Determinism and Reproducibility Technical Reference.md` --- @@ -434,7 +434,7 @@ stella unknowns export --format csv --out unknowns.csv ### Golden Corpus -**Mandatory test cases** (per `docs/product-advisories/14-Dec-2025 - Reachability Analysis Technical Reference.md:815`): +**Mandatory test cases** (per `docs/product/advisories/14-Dec-2025 - Reachability Analysis Technical Reference.md:815`): 1. ASP.NET controller with reachable endpoint → vulnerable lib call 2. Vulnerable lib present but never called → unreachable @@ -599,9 +599,9 @@ stella unknowns export --format csv --out unknowns.csv - `docs/modules/platform/architecture-overview.md` — Service boundaries **Product Advisories**: -- `docs/product-advisories/14-Dec-2025 - Reachability Analysis Technical Reference.md` -- `docs/product-advisories/14-Dec-2025 - Proof and Evidence Chain Technical Reference.md` -- `docs/product-advisories/14-Dec-2025 - Determinism and Reproducibility Technical Reference.md` +- `docs/product/advisories/14-Dec-2025 - Reachability Analysis Technical Reference.md` +- `docs/product/advisories/14-Dec-2025 - Proof and Evidence Chain Technical Reference.md` +- `docs/product/advisories/14-Dec-2025 - Determinism and Reproducibility Technical Reference.md` **Database**: - `docs/db/SPECIFICATION.md` — Schema governance diff --git a/docs-archived/implplan/SPRINT_3500_0001_0001_proof_of_exposure_mvp.md b/docs-archived/implplan/SPRINT_3500_0001_0001_proof_of_exposure_mvp.md index e44cc062f..b2ece3e16 100644 --- a/docs-archived/implplan/SPRINT_3500_0001_0001_proof_of_exposure_mvp.md +++ b/docs-archived/implplan/SPRINT_3500_0001_0001_proof_of_exposure_mvp.md @@ -27,7 +27,7 @@ Implement **Proof of Exposure (PoE)** artifacts that provide compact, offline-ve - `docs/reachability/function-level-evidence.md` - `docs/reachability/hybrid-attestation.md` -- `docs/product-advisories/23-Dec-2026 - Binary Mapping as Attestable Proof.md` +- `docs/product/advisories/23-Dec-2026 - Binary Mapping as Attestable Proof.md` - `docs/modules/scanner/architecture.md` - `docs/modules/binaryindex/architecture.md` diff --git a/docs-archived/implplan/SPRINT_3500_0001_0001_smart_diff_master.md b/docs-archived/implplan/SPRINT_3500_0001_0001_smart_diff_master.md index 75a4b6a20..3b739e04b 100644 --- a/docs-archived/implplan/SPRINT_3500_0001_0001_smart_diff_master.md +++ b/docs-archived/implplan/SPRINT_3500_0001_0001_smart_diff_master.md @@ -4,9 +4,9 @@ ## Topic & Scope -Implementation of the Smart-Diff system as specified in `docs/product-advisories/14-Dec-2025 - Smart-Diff Technical Reference.md`. This master sprint coordinates 3 sub-sprints covering foundation infrastructure, material risk change detection, and binary analysis with output formats. +Implementation of the Smart-Diff system as specified in `docs/product/advisories/14-Dec-2025 - Smart-Diff Technical Reference.md`. This master sprint coordinates 3 sub-sprints covering foundation infrastructure, material risk change detection, and binary analysis with output formats. -**Source Advisory**: `docs/product-advisories/14-Dec-2025 - Smart-Diff Technical Reference.md` +**Source Advisory**: `docs/product/advisories/14-Dec-2025 - Smart-Diff Technical Reference.md` **Last Updated**: 2025-12-20 @@ -19,7 +19,7 @@ Implementation of the Smart-Diff system as specified in `docs/product-advisories ## Documentation Prerequisites -- `docs/product-advisories/14-Dec-2025 - Smart-Diff Technical Reference.md` +- `docs/product/advisories/14-Dec-2025 - Smart-Diff Technical Reference.md` - `docs/modules/scanner/architecture.md` - `docs/modules/policy/architecture.md` - `docs/modules/excititor/architecture.md` @@ -298,7 +298,7 @@ SPRINT_3500_0003 (Detection) SPRINT_3500_0004 (Binary & Output) ## 11. REFERENCES -- **Source Advisory**: `docs/product-advisories/14-Dec-2025 - Smart-Diff Technical Reference.md` +- **Source Advisory**: `docs/product/advisories/14-Dec-2025 - Smart-Diff Technical Reference.md` - **Archived Advisories**: - `09-Dec-2025 - Smart-Diff and Provenance-Rich Binaries` - `12-Dec-2025 - Smart-Diff Detects Meaningful Risk Shifts` diff --git a/docs-archived/implplan/SPRINT_3500_0002_0001_smart_diff_foundation.md b/docs-archived/implplan/SPRINT_3500_0002_0001_smart_diff_foundation.md index c7f38fda9..26f072567 100644 --- a/docs-archived/implplan/SPRINT_3500_0002_0001_smart_diff_foundation.md +++ b/docs-archived/implplan/SPRINT_3500_0002_0001_smart_diff_foundation.md @@ -16,7 +16,7 @@ ## Documentation Prerequisites -- `docs/product-advisories/14-Dec-2025 - Smart-Diff Technical Reference.md` +- `docs/product/advisories/14-Dec-2025 - Smart-Diff Technical Reference.md` - `docs/modules/scanner/architecture.md` - `docs/modules/policy/architecture.md` - `docs/modules/attestor/architecture.md` diff --git a/docs-archived/implplan/SPRINT_3500_0003_0001_ground_truth_corpus_ci_gates.md b/docs-archived/implplan/SPRINT_3500_0003_0001_ground_truth_corpus_ci_gates.md index ee0b3500f..71d958650 100644 --- a/docs-archived/implplan/SPRINT_3500_0003_0001_ground_truth_corpus_ci_gates.md +++ b/docs-archived/implplan/SPRINT_3500_0003_0001_ground_truth_corpus_ci_gates.md @@ -9,7 +9,7 @@ Establish the ground-truth corpus for binary-only reachability benchmarking and 3. **CI Regression Gates** - Fail build on precision/recall/determinism regressions 4. **Baseline Management** - Tooling to update baselines when improvements land -**Source Advisory**: `docs/product-advisories/archived/17-Dec-2025/16-Dec-2025 - Building a Deeper Moat Beyond Reachability.md` +**Source Advisory**: `docs/product/advisories/archived/17-Dec-2025/16-Dec-2025 - Building a Deeper Moat Beyond Reachability.md` **Related Docs**: `docs/benchmarks/ground-truth-corpus.md` (new) **Working Directory**: `bench/reachability-benchmark/`, `datasets/reachability/`, `src/Scanner/` @@ -24,7 +24,7 @@ Establish the ground-truth corpus for binary-only reachability benchmarking and - `docs/README.md` - `docs/benchmarks/ground-truth-corpus.md` -- `docs/product-advisories/14-Dec-2025 - Reachability Analysis Technical Reference.md` +- `docs/product/advisories/14-Dec-2025 - Reachability Analysis Technical Reference.md` - `bench/README.md` --- diff --git a/docs-archived/implplan/SPRINT_3500_0003_0001_smart_diff_detection.md b/docs-archived/implplan/SPRINT_3500_0003_0001_smart_diff_detection.md index 180adf901..67fe5dcee 100644 --- a/docs-archived/implplan/SPRINT_3500_0003_0001_smart_diff_detection.md +++ b/docs-archived/implplan/SPRINT_3500_0003_0001_smart_diff_detection.md @@ -16,7 +16,7 @@ ## Documentation Prerequisites -- `docs/product-advisories/14-Dec-2025 - Smart-Diff Technical Reference.md` +- `docs/product/advisories/14-Dec-2025 - Smart-Diff Technical Reference.md` - `docs/reachability/lattice.md` - `docs/modules/scanner/architecture.md` - `docs/modules/policy/architecture.md` diff --git a/docs-archived/implplan/SPRINT_3500_0004_0001_smart_diff_binary_output.md b/docs-archived/implplan/SPRINT_3500_0004_0001_smart_diff_binary_output.md index 7c0f41a07..658a2f2a8 100644 --- a/docs-archived/implplan/SPRINT_3500_0004_0001_smart_diff_binary_output.md +++ b/docs-archived/implplan/SPRINT_3500_0004_0001_smart_diff_binary_output.md @@ -16,7 +16,7 @@ ## Documentation Prerequisites -- `docs/product-advisories/14-Dec-2025 - Smart-Diff Technical Reference.md` +- `docs/product/advisories/14-Dec-2025 - Smart-Diff Technical Reference.md` - `docs/modules/scanner/architecture.md` - `docs/modules/policy/architecture.md` - `docs/reachability/DELIVERY_GUIDE.md` diff --git a/docs-archived/implplan/SPRINT_3500_0011_0001_buildid_mapping_index.md b/docs-archived/implplan/SPRINT_3500_0011_0001_buildid_mapping_index.md index 0c7d17fec..161a85562 100644 --- a/docs-archived/implplan/SPRINT_3500_0011_0001_buildid_mapping_index.md +++ b/docs-archived/implplan/SPRINT_3500_0011_0001_buildid_mapping_index.md @@ -12,7 +12,7 @@ ## Documentation Prerequisites - `docs/modules/scanner/architecture.md` -- Parent advisory: `docs/product-advisories/18-Dec-2025 - Building Better Binary Mapping and Call-Stack Reachability.md` +- Parent advisory: `docs/product/advisories/18-Dec-2025 - Building Better Binary Mapping and Call-Stack Reachability.md` ## Delivery Tracker | # | Task ID | Status | Key dependency / next step | Owners | Task Definition | diff --git a/docs-archived/implplan/SPRINT_3500_0014_0001_native_analyzer_integration.md b/docs-archived/implplan/SPRINT_3500_0014_0001_native_analyzer_integration.md index 813c75707..acdbdf696 100644 --- a/docs-archived/implplan/SPRINT_3500_0014_0001_native_analyzer_integration.md +++ b/docs-archived/implplan/SPRINT_3500_0014_0001_native_analyzer_integration.md @@ -12,7 +12,7 @@ ## Documentation Prerequisites - `docs/modules/scanner/architecture.md` -- Parent advisory: `docs/product-advisories/18-Dec-2025 - Building Better Binary Mapping and Call-Stack Reachability.md` +- Parent advisory: `docs/product/advisories/18-Dec-2025 - Building Better Binary Mapping and Call-Stack Reachability.md` ## Delivery Tracker | # | Task ID | Status | Key dependency / next step | Owners | Task Definition | diff --git a/docs-archived/implplan/SPRINT_3500_9999_0000_summary.md b/docs-archived/implplan/SPRINT_3500_9999_0000_summary.md index 02047e2aa..64d903104 100644 --- a/docs-archived/implplan/SPRINT_3500_9999_0000_summary.md +++ b/docs-archived/implplan/SPRINT_3500_9999_0000_summary.md @@ -17,7 +17,7 @@ ## Documentation Prerequisites - `docs/implplan/archived/SPRINT_3500_0001_0001_deeper_moat_master.md` -- `docs/product-advisories/archived/17-Dec-2025/16-Dec-2025 - Building a Deeper Moat Beyond Reachability.md` +- `docs/product/advisories/archived/17-Dec-2025/16-Dec-2025 - Building a Deeper Moat Beyond Reachability.md` ## Delivery Tracker | # | Task ID | Status | Key dependency / next step | Owners | Task Definition | @@ -140,7 +140,7 @@ **Documentation**: - `src/Scanner/AGENTS_SCORE_PROOFS.md` (Task 3.1, 3.2) (DETAILED) - `docs/db/schemas/scanner_schema_specification.md` -- `docs/product-advisories/14-Dec-2025 - Reachability Analysis Technical Reference.md` +- `docs/product/advisories/14-Dec-2025 - Reachability Analysis Technical Reference.md` --- @@ -303,7 +303,7 @@ graph TD - [Scanner AGENTS Guide](src/Scanner/AGENTS_SCORE_PROOFS.md) ⭐ FOR AGENTS **Source Advisory**: -- [16-Dec-2025 - Building a Deeper Moat Beyond Reachability](docs/product-advisories/archived/17-Dec-2025/16-Dec-2025%20-%20Building%20a%20Deeper%20Moat%20Beyond%20Reachability.md) +- [16-Dec-2025 - Building a Deeper Moat Beyond Reachability](docs/product/advisories/archived/17-Dec-2025/16-Dec-2025%20-%20Building%20a%20Deeper%20Moat%20Beyond%20Reachability.md) --- diff --git a/docs-archived/implplan/SPRINT_3600_0000_0000_reference_arch_gap_summary.md b/docs-archived/implplan/SPRINT_3600_0000_0000_reference_arch_gap_summary.md index 9957f8bcb..b5aed85f7 100644 --- a/docs-archived/implplan/SPRINT_3600_0000_0000_reference_arch_gap_summary.md +++ b/docs-archived/implplan/SPRINT_3600_0000_0000_reference_arch_gap_summary.md @@ -6,13 +6,13 @@ - **Working directory:** `docs/implplan/` ## Dependencies & Concurrency -- Upstream source: `docs/product-advisories/archived/2025-12-21-reference-architecture/20-Dec-2025 - Stella Ops Reference Architecture.md`. +- Upstream source: `docs/product/advisories/archived/2025-12-21-reference-architecture/20-Dec-2025 - Stella Ops Reference Architecture.md`. - Related series: 4200 (UI), 5200 (Docs) for proof chain UI and starter policy template. ## Documentation Prerequisites - `docs/README.md` - `docs/07_HIGH_LEVEL_ARCHITECTURE.md` -- `docs/product-advisories/archived/2025-12-21-reference-architecture/20-Dec-2025 - Stella Ops Reference Architecture.md` +- `docs/product/advisories/archived/2025-12-21-reference-architecture/20-Dec-2025 - Stella Ops Reference Architecture.md` ## Delivery Tracker | # | Task ID | Status | Key dependency / next step | Owners | Task Definition | diff --git a/docs-archived/implplan/SPRINT_3600_0001_0000_triage_unknowns_implementation_reference.md b/docs-archived/implplan/SPRINT_3600_0001_0000_triage_unknowns_implementation_reference.md index 98363b3b3..aa7eec3cd 100644 --- a/docs-archived/implplan/SPRINT_3600_0001_0000_triage_unknowns_implementation_reference.md +++ b/docs-archived/implplan/SPRINT_3600_0001_0000_triage_unknowns_implementation_reference.md @@ -1,7 +1,7 @@ # Sprint 3600 · Triage & Unknowns Implementation Reference **Master Sprint**: SPRINT_3600_0001_0001 -**Source Advisory**: `docs/product-advisories/14-Dec-2025 - Triage and Unknowns Technical Reference.md` +**Source Advisory**: `docs/product/advisories/14-Dec-2025 - Triage and Unknowns Technical Reference.md` **Last Updated**: 2025-12-17 --- diff --git a/docs-archived/implplan/SPRINT_3600_0001_0001_gateway_webservice.md b/docs-archived/implplan/SPRINT_3600_0001_0001_gateway_webservice.md index c6a60a3ee..2a8ecfa17 100644 --- a/docs-archived/implplan/SPRINT_3600_0001_0001_gateway_webservice.md +++ b/docs-archived/implplan/SPRINT_3600_0001_0001_gateway_webservice.md @@ -14,7 +14,7 @@ ## Documentation Prerequisites - `docs/modules/router/architecture.md` (canonical Router specification) - `docs/modules/gateway/openapi.md` (OpenAPI aggregation) -- `docs/product-advisories/archived/2025-12-21-reference-architecture/20-Dec-2025 - Stella Ops Reference Architecture.md` +- `docs/product/advisories/archived/2025-12-21-reference-architecture/20-Dec-2025 - Stella Ops Reference Architecture.md` - `docs/07_HIGH_LEVEL_ARCHITECTURE.md` Section 7 (APIs) --- diff --git a/docs-archived/implplan/SPRINT_3600_0001_0001_reachability_drift_master.md b/docs-archived/implplan/SPRINT_3600_0001_0001_reachability_drift_master.md index a15acb5cf..2a5700ee8 100644 --- a/docs-archived/implplan/SPRINT_3600_0001_0001_reachability_drift_master.md +++ b/docs-archived/implplan/SPRINT_3600_0001_0001_reachability_drift_master.md @@ -11,7 +11,7 @@ ## Topic & Scope -Implementation of Reachability Drift Detection as specified in `docs/product-advisories/17-Dec-2025 - Reachability Drift Detection.md`. This extends Smart-Diff to detect when vulnerable code paths become reachable/unreachable between container image versions, with causal attribution and UI visualization. +Implementation of Reachability Drift Detection as specified in `docs/product/advisories/17-Dec-2025 - Reachability Drift Detection.md`. This extends Smart-Diff to detect when vulnerable code paths become reachable/unreachable between container image versions, with causal attribution and UI visualization. **Business Value:** - Transform from "all vulnerabilities" to "material reachability changes" @@ -38,9 +38,9 @@ Implementation of Reachability Drift Detection as specified in `docs/product-adv ## Documentation Prerequisites Before starting implementation, read: -- `docs/product-advisories/17-Dec-2025 - Reachability Drift Detection.md` -- `docs/product-advisories/14-Dec-2025 - Smart-Diff Technical Reference.md` -- `docs/product-advisories/14-Dec-2025 - Reachability Analysis Technical Reference.md` +- `docs/product/advisories/17-Dec-2025 - Reachability Drift Detection.md` +- `docs/product/advisories/14-Dec-2025 - Smart-Diff Technical Reference.md` +- `docs/product/advisories/14-Dec-2025 - Reachability Analysis Technical Reference.md` - `docs/modules/scanner/architecture.md` - `docs/reachability/lattice.md` - `bench/reachability-benchmark/README.md` @@ -364,7 +364,7 @@ SPRINT_3600_0004 (UI) Integration ## 9. REFERENCES -- **Source Advisory**: `docs/product-advisories/17-Dec-2025 - Reachability Drift Detection.md` -- **Smart-Diff Reference**: `docs/product-advisories/14-Dec-2025 - Smart-Diff Technical Reference.md` -- **Reachability Reference**: `docs/product-advisories/14-Dec-2025 - Reachability Analysis Technical Reference.md` +- **Source Advisory**: `docs/product/advisories/17-Dec-2025 - Reachability Drift Detection.md` +- **Smart-Diff Reference**: `docs/product/advisories/14-Dec-2025 - Smart-Diff Technical Reference.md` +- **Reachability Reference**: `docs/product/advisories/14-Dec-2025 - Reachability Analysis Technical Reference.md` - **Benchmark**: `bench/reachability-benchmark/README.md` diff --git a/docs-archived/implplan/SPRINT_3600_0001_0001_triage_unknowns_master.md b/docs-archived/implplan/SPRINT_3600_0001_0001_triage_unknowns_master.md index da4f9db3c..d6b96ed8d 100644 --- a/docs-archived/implplan/SPRINT_3600_0001_0001_triage_unknowns_master.md +++ b/docs-archived/implplan/SPRINT_3600_0001_0001_triage_unknowns_master.md @@ -4,9 +4,9 @@ ## Topic & Scope -Implementation of the Triage and Unknowns system as specified in `docs/product-advisories/14-Dec-2025 - Triage and Unknowns Technical Reference.md`. This master sprint coordinates 14 sub-sprints covering foundation infrastructure, backend services, UI/UX enhancements, and integrations. +Implementation of the Triage and Unknowns system as specified in `docs/product/advisories/14-Dec-2025 - Triage and Unknowns Technical Reference.md`. This master sprint coordinates 14 sub-sprints covering foundation infrastructure, backend services, UI/UX enhancements, and integrations. -**Source Advisory**: `docs/product-advisories/14-Dec-2025 - Triage and Unknowns Technical Reference.md` +**Source Advisory**: `docs/product/advisories/14-Dec-2025 - Triage and Unknowns Technical Reference.md` **Last Updated**: 2025-12-20 @@ -377,7 +377,7 @@ The Triage & Unknowns system transforms StellaOps from a static vulnerability re ## 12. REFERENCES -- **Source Advisory**: `docs/product-advisories/14-Dec-2025 - Triage and Unknowns Technical Reference.md` +- **Source Advisory**: `docs/product/advisories/14-Dec-2025 - Triage and Unknowns Technical Reference.md` - **Related Advisories**: - `30-Nov-2025 - Unknowns Decay & Triage Heuristics` - `14-Dec-2025 - Dissect triage and evidence workflows` diff --git a/docs-archived/implplan/SPRINT_3600_0002_0001_call_graph_infrastructure.md b/docs-archived/implplan/SPRINT_3600_0002_0001_call_graph_infrastructure.md index 7fa666245..569a8b89c 100644 --- a/docs-archived/implplan/SPRINT_3600_0002_0001_call_graph_infrastructure.md +++ b/docs-archived/implplan/SPRINT_3600_0002_0001_call_graph_infrastructure.md @@ -21,8 +21,8 @@ Implement call graph extraction infrastructure for reachability drift detection. ## Documentation Prerequisites -- `docs/product-advisories/17-Dec-2025 - Reachability Drift Detection.md` -- `docs/product-advisories/14-Dec-2025 - Reachability Analysis Technical Reference.md` +- `docs/product/advisories/17-Dec-2025 - Reachability Drift Detection.md` +- `docs/product/advisories/14-Dec-2025 - Reachability Analysis Technical Reference.md` - `bench/reachability-benchmark/README.md` - `src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Node/AGENTS.md` diff --git a/docs-archived/implplan/SPRINT_3600_0002_0001_unknowns_ranking_containment.md b/docs-archived/implplan/SPRINT_3600_0002_0001_unknowns_ranking_containment.md index 0dc2809fe..7fdd8c4ca 100644 --- a/docs-archived/implplan/SPRINT_3600_0002_0001_unknowns_ranking_containment.md +++ b/docs-archived/implplan/SPRINT_3600_0002_0001_unknowns_ranking_containment.md @@ -9,8 +9,8 @@ Enhance the Unknowns ranking model with blast radius and runtime containment sig 3. **Unknown Proof Trail** - Emit proof nodes explaining rank factors 4. **API: `/unknowns/list?sort=score`** - Expose ranked unknowns -**Source Advisory**: `docs/product-advisories/archived/17-Dec-2025/16-Dec-2025 - Building a Deeper Moat Beyond Reachability.md` -**Related Docs**: `docs/product-advisories/14-Dec-2025 - Triage and Unknowns Technical Reference.md` §17.5 +**Source Advisory**: `docs/product/advisories/archived/17-Dec-2025/16-Dec-2025 - Building a Deeper Moat Beyond Reachability.md` +**Related Docs**: `docs/product/advisories/14-Dec-2025 - Triage and Unknowns Technical Reference.md` §17.5 **Working Directory**: `src/Scanner/__Libraries/StellaOps.Scanner.Unknowns/`, `src/Scanner/StellaOps.Scanner.WebService/` @@ -25,7 +25,7 @@ Enhance the Unknowns ranking model with blast radius and runtime containment sig - `docs/README.md` - `docs/07_HIGH_LEVEL_ARCHITECTURE.md` -- `docs/product-advisories/14-Dec-2025 - Triage and Unknowns Technical Reference.md` +- `docs/product/advisories/14-Dec-2025 - Triage and Unknowns Technical Reference.md` - `docs/modules/scanner/architecture.md` --- diff --git a/docs-archived/implplan/SPRINT_3600_0003_0001_drift_detection_engine.md b/docs-archived/implplan/SPRINT_3600_0003_0001_drift_detection_engine.md index 7ca28ad95..0f64cf0ff 100644 --- a/docs-archived/implplan/SPRINT_3600_0003_0001_drift_detection_engine.md +++ b/docs-archived/implplan/SPRINT_3600_0003_0001_drift_detection_engine.md @@ -22,7 +22,7 @@ Implement the drift detection engine that compares call graphs between scans to ## Documentation Prerequisites -- `docs/product-advisories/17-Dec-2025 - Reachability Drift Detection.md` +- `docs/product/advisories/17-Dec-2025 - Reachability Drift Detection.md` - `docs/implplan/SPRINT_3600_0002_0001_call_graph_infrastructure.md` - `src/Scanner/__Libraries/StellaOps.Scanner.SmartDiff/AGENTS.md` diff --git a/docs-archived/implplan/SPRINT_3600_0004_0001_nodejs_babel_integration.md b/docs-archived/implplan/SPRINT_3600_0004_0001_nodejs_babel_integration.md index 73bdd6d0c..fab1903dd 100644 --- a/docs-archived/implplan/SPRINT_3600_0004_0001_nodejs_babel_integration.md +++ b/docs-archived/implplan/SPRINT_3600_0004_0001_nodejs_babel_integration.md @@ -12,7 +12,7 @@ - Interlocks: stable node IDs compatible with `CallGraphSnapshot` and benchmark fixtures under `bench/reachability-benchmark/`. ## Documentation Prerequisites -- `docs/product-advisories/17-Dec-2025 - Reachability Drift Detection.md` (archived) +- `docs/product/advisories/17-Dec-2025 - Reachability Drift Detection.md` (archived) - `docs/modules/scanner/reachability-drift.md` - `src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Node/AGENTS.md` - `bench/reachability-benchmark/README.md` diff --git a/docs-archived/implplan/SPRINT_3600_0004_0001_ui_evidence_chain.md b/docs-archived/implplan/SPRINT_3600_0004_0001_ui_evidence_chain.md index 60041a4df..aa6e3e221 100644 --- a/docs-archived/implplan/SPRINT_3600_0004_0001_ui_evidence_chain.md +++ b/docs-archived/implplan/SPRINT_3600_0004_0001_ui_evidence_chain.md @@ -22,7 +22,7 @@ Implement the UI components and evidence chain integration for reachability drif ## Documentation Prerequisites -- `docs/product-advisories/17-Dec-2025 - Reachability Drift Detection.md` +- `docs/product/advisories/17-Dec-2025 - Reachability Drift Detection.md` - `docs/implplan/SPRINT_3600_0003_0001_drift_detection_engine.md` - `docs/modules/attestor/architecture.md` - `src/Web/StellaOps.Web/README.md` diff --git a/docs-archived/implplan/SPRINT_3600_0005_0001_policy_ci_gate_integration.md b/docs-archived/implplan/SPRINT_3600_0005_0001_policy_ci_gate_integration.md index e205b2530..274898788 100644 --- a/docs-archived/implplan/SPRINT_3600_0005_0001_policy_ci_gate_integration.md +++ b/docs-archived/implplan/SPRINT_3600_0005_0001_policy_ci_gate_integration.md @@ -12,7 +12,7 @@ - Safe to parallelize with other Scanner language callgraph sprints. ## Documentation Prerequisites -- `docs/product-advisories/17-Dec-2025 - Reachability Drift Detection.md` +- `docs/product/advisories/17-Dec-2025 - Reachability Drift Detection.md` - `docs/modules/policy/architecture.md` - `src/Policy/AGENTS.md` - `src/Cli/AGENTS.md` diff --git a/docs-archived/implplan/SPRINT_3600_0006_0001_documentation_finalization.md b/docs-archived/implplan/SPRINT_3600_0006_0001_documentation_finalization.md index c07e282fc..16bc19a8e 100644 --- a/docs-archived/implplan/SPRINT_3600_0006_0001_documentation_finalization.md +++ b/docs-archived/implplan/SPRINT_3600_0006_0001_documentation_finalization.md @@ -12,7 +12,7 @@ - Safe to parallelize with other doc-only sprints. ## Documentation Prerequisites -- `docs/product-advisories/archived/17-Dec-2025 - Reachability Drift Detection.md` +- `docs/product/advisories/archived/17-Dec-2025 - Reachability Drift Detection.md` - `docs/implplan/archived/SPRINT_3600_0002_0001_call_graph_infrastructure.md` - `docs/implplan/archived/SPRINT_3600_0003_0001_drift_detection_engine.md` - Source code in `src/Scanner/__Libraries/` @@ -40,7 +40,7 @@ | 18 | DOC-018 | DONE | DOC-015 | Docs Team | Write Monitoring & Metrics section. | | 19 | DOC-019 | DONE | DOC-015 | Docs Team | Write Troubleshooting section. | | 20 | DOC-020 | DONE | DOC-015 | Docs Team | Update `src/Scanner/AGENTS.md` with final contract refs. | -| 21 | DOC-021 | DONE | DOC-020 | Docs Team | Archive advisory under `docs/product-advisories/archived/`. | +| 21 | DOC-021 | DONE | DOC-020 | Docs Team | Archive advisory under `docs/product/advisories/archived/`. | | 22 | DOC-022 | DONE | DOC-015 | Docs Team | Update `docs/README.md` with links to new docs. | | 23 | DOC-023 | DONE | DOC-001..022 | Docs Team | Peer review for technical accuracy. | diff --git a/docs-archived/implplan/SPRINT_3700_0001_0001_triage_db_schema.md b/docs-archived/implplan/SPRINT_3700_0001_0001_triage_db_schema.md index baed855de..fa8d60147 100644 --- a/docs-archived/implplan/SPRINT_3700_0001_0001_triage_db_schema.md +++ b/docs-archived/implplan/SPRINT_3700_0001_0001_triage_db_schema.md @@ -240,4 +240,4 @@ public class TriageSchemaTests : IAsyncLifetime - Schema definition: `docs/db/triage_schema.sql` - UX Guide: `docs/ux/TRIAGE_UX_GUIDE.md` - API Contract: `docs/api/triage.contract.v1.md` -- Advisory: `docs/product-advisories/archived/16-Dec-2025 - Reimagining Proof-Linked UX in Security Workflows.md` +- Advisory: `docs/product/advisories/archived/16-Dec-2025 - Reimagining Proof-Linked UX in Security Workflows.md` diff --git a/docs-archived/implplan/SPRINT_3700_0001_0001_witness_foundation.md b/docs-archived/implplan/SPRINT_3700_0001_0001_witness_foundation.md index 25d484846..a4681f072 100644 --- a/docs-archived/implplan/SPRINT_3700_0001_0001_witness_foundation.md +++ b/docs-archived/implplan/SPRINT_3700_0001_0001_witness_foundation.md @@ -6,7 +6,7 @@ **Working Directory:** `src/Scanner/__Libraries/StellaOps.Scanner.Reachability/` **Estimated Effort:** Small (3-5 days) **Dependencies:** None -**Source Advisory:** `docs/product-advisories/18-Dec-2025 - Concrete Advances in Reachability Analysis.md` +**Source Advisory:** `docs/product/advisories/18-Dec-2025 - Concrete Advances in Reachability Analysis.md` --- @@ -30,7 +30,7 @@ Foundation for DSSE-signed path witnesses and BLAKE3 contract compliance: Before starting, read: - `docs/contracts/richgraph-v1.md` - BLAKE3 hash requirement -- `docs/product-advisories/18-Dec-2025 - Concrete Advances in Reachability Analysis.md` - Witness schema +- `docs/product/advisories/18-Dec-2025 - Concrete Advances in Reachability Analysis.md` - Witness schema - `docs/reachability/gates.md` - Gate detection integration --- diff --git a/docs-archived/implplan/SPRINT_3700_0002_0001_vuln_surfaces_core.md b/docs-archived/implplan/SPRINT_3700_0002_0001_vuln_surfaces_core.md index efd4d5426..1adc06ab9 100644 --- a/docs-archived/implplan/SPRINT_3700_0002_0001_vuln_surfaces_core.md +++ b/docs-archived/implplan/SPRINT_3700_0002_0001_vuln_surfaces_core.md @@ -6,7 +6,7 @@ **Working Directory:** `src/Scanner/__Libraries/StellaOps.Scanner.VulnSurfaces/` **Estimated Effort:** Large (2 sprints) **Dependencies:** SPRINT_3700_0001 -**Source Advisory:** `docs/product-advisories/18-Dec-2025 - Concrete Advances in Reachability Analysis.md` +**Source Advisory:** `docs/product/advisories/18-Dec-2025 - Concrete Advances in Reachability Analysis.md` --- @@ -78,7 +78,7 @@ Multi-ecosystem vulnerability surface computation that identifies the specific m ## Documentation Prerequisites Before starting, read: -- `docs/product-advisories/18-Dec-2025 - Concrete Advances in Reachability Analysis.md` - Sections on Vuln Surfaces +- `docs/product/advisories/18-Dec-2025 - Concrete Advances in Reachability Analysis.md` - Sections on Vuln Surfaces - `docs/modules/scanner/architecture.md` - Scanner architecture - `docs/modules/concelier/architecture.md` - CVE feed integration diff --git a/docs-archived/implplan/SPRINT_3700_0003_0001_trigger_extraction.md b/docs-archived/implplan/SPRINT_3700_0003_0001_trigger_extraction.md index ee1dde27e..4457e8492 100644 --- a/docs-archived/implplan/SPRINT_3700_0003_0001_trigger_extraction.md +++ b/docs-archived/implplan/SPRINT_3700_0003_0001_trigger_extraction.md @@ -6,7 +6,7 @@ **Working Directory:** `src/Scanner/__Libraries/StellaOps.Scanner.VulnSurfaces/` **Estimated Effort:** Medium (1 sprint) **Dependencies:** SPRINT_3700_0002 -**Source Advisory:** `docs/product-advisories/18-Dec-2025 - Concrete Advances in Reachability Analysis.md` +**Source Advisory:** `docs/product/advisories/18-Dec-2025 - Concrete Advances in Reachability Analysis.md` --- diff --git a/docs-archived/implplan/SPRINT_3700_0004_0001_reachability_integration.md b/docs-archived/implplan/SPRINT_3700_0004_0001_reachability_integration.md index c62e38ffd..90ceb015d 100644 --- a/docs-archived/implplan/SPRINT_3700_0004_0001_reachability_integration.md +++ b/docs-archived/implplan/SPRINT_3700_0004_0001_reachability_integration.md @@ -6,7 +6,7 @@ **Working Directory:** `src/Scanner/__Libraries/StellaOps.Scanner.Reachability/` **Estimated Effort:** Medium (1 sprint) **Dependencies:** SPRINT_3700_0003 -**Source Advisory:** `docs/product-advisories/18-Dec-2025 - Concrete Advances in Reachability Analysis.md` +**Source Advisory:** `docs/product/advisories/18-Dec-2025 - Concrete Advances in Reachability Analysis.md` --- diff --git a/docs-archived/implplan/SPRINT_3700_0005_0001_witness_ui_cli.md b/docs-archived/implplan/SPRINT_3700_0005_0001_witness_ui_cli.md index 9be3cf2ad..c57265a2c 100644 --- a/docs-archived/implplan/SPRINT_3700_0005_0001_witness_ui_cli.md +++ b/docs-archived/implplan/SPRINT_3700_0005_0001_witness_ui_cli.md @@ -6,7 +6,7 @@ **Working Directory:** `src/Web/StellaOps.Web/`, `src/Cli/StellaOps.Cli/` **Estimated Effort:** Medium (1 sprint) **Dependencies:** SPRINT_3700_0004 -**Source Advisory:** `docs/product-advisories/18-Dec-2025 - Concrete Advances in Reachability Analysis.md` +**Source Advisory:** `docs/product/advisories/18-Dec-2025 - Concrete Advances in Reachability Analysis.md` --- diff --git a/docs-archived/implplan/SPRINT_3700_0006_0001_incremental_cache.md b/docs-archived/implplan/SPRINT_3700_0006_0001_incremental_cache.md index b271cb9c9..e98694057 100644 --- a/docs-archived/implplan/SPRINT_3700_0006_0001_incremental_cache.md +++ b/docs-archived/implplan/SPRINT_3700_0006_0001_incremental_cache.md @@ -6,7 +6,7 @@ **Working Directory:** `src/Scanner/__Libraries/StellaOps.Scanner.Reachability/` **Estimated Effort:** Medium (1 sprint) **Dependencies:** SPRINT_3700_0004 -**Source Advisory:** `docs/product-advisories/18-Dec-2025 - Concrete Advances in Reachability Analysis.md` +**Source Advisory:** `docs/product/advisories/18-Dec-2025 - Concrete Advances in Reachability Analysis.md` --- diff --git a/docs-archived/implplan/SPRINT_3800_0000_0000_summary.md b/docs-archived/implplan/SPRINT_3800_0000_0000_summary.md index 68f346120..7ca80fcc1 100644 --- a/docs-archived/implplan/SPRINT_3800_0000_0000_summary.md +++ b/docs-archived/implplan/SPRINT_3800_0000_0000_summary.md @@ -104,7 +104,7 @@ Sprint 3840 (Runtime Traces) can run in parallel with 3830-3850. | Policy | Scanner | Unknowns budget enforcement | ## Documentation Prerequisites -- [Product Advisory](../product-advisories/archived/2025-12-22-binary-reachability/20-Dec-2025%20-%20Layered%20binary?+?call-stack%20reachability.md) +- [Product Advisory](../product/advisories/archived/2025-12-22-binary-reachability/20-Dec-2025%20-%20Layered%20binary?+?call-stack%20reachability.md) - `docs/reachability/binary-reachability-schema.md` - `docs/contracts/richgraph-v1.md` - `docs/reachability/function-level-evidence.md` diff --git a/docs-archived/implplan/SPRINT_3800_0001_0001_binary_call_edge_enhancement.md b/docs-archived/implplan/SPRINT_3800_0001_0001_binary_call_edge_enhancement.md index 259629a44..9f457374d 100644 --- a/docs-archived/implplan/SPRINT_3800_0001_0001_binary_call_edge_enhancement.md +++ b/docs-archived/implplan/SPRINT_3800_0001_0001_binary_call_edge_enhancement.md @@ -13,7 +13,7 @@ - **Safe to parallelize with**: Sprint 3830 (VEX Integration), Sprint 3850 (CLI) ## Documentation Prerequisites -- `docs/product-advisories/archived/2025-12-22-binary-reachability/20-Dec-2025 - Layered binary + call‑stack reachability.md` +- `docs/product/advisories/archived/2025-12-22-binary-reachability/20-Dec-2025 - Layered binary + call‑stack reachability.md` - `docs/reachability/binary-reachability-schema.md` - `src/Scanner/AGENTS.md` diff --git a/docs-archived/implplan/SPRINT_3810_0001_0001_cve_symbol_mapping_slice_format.md b/docs-archived/implplan/SPRINT_3810_0001_0001_cve_symbol_mapping_slice_format.md index 98b7fe5b8..4c92dccc7 100644 --- a/docs-archived/implplan/SPRINT_3810_0001_0001_cve_symbol_mapping_slice_format.md +++ b/docs-archived/implplan/SPRINT_3810_0001_0001_cve_symbol_mapping_slice_format.md @@ -13,7 +13,7 @@ - **Safe to parallelize with**: Sprint 3800, Sprint 3830 ## Documentation Prerequisites -- `docs/product-advisories/archived/2025-12-22-binary-reachability/20-Dec-2025 - Layered binary + call‑stack reachability.md` +- `docs/product/advisories/archived/2025-12-22-binary-reachability/20-Dec-2025 - Layered binary + call‑stack reachability.md` - `docs/reachability/slice-schema.md` (created this sprint) - `docs/modules/concelier/architecture.md` diff --git a/docs-archived/implplan/SPRINT_3850_0001_0001_competitive_gap_closure.md b/docs-archived/implplan/SPRINT_3850_0001_0001_competitive_gap_closure.md index 3772cf164..fee51be02 100644 --- a/docs-archived/implplan/SPRINT_3850_0001_0001_competitive_gap_closure.md +++ b/docs-archived/implplan/SPRINT_3850_0001_0001_competitive_gap_closure.md @@ -6,7 +6,7 @@ **Working Directory:** Multiple (cross-cutting) **Estimated Effort:** Large (2-3 sprints) **Dependencies:** SPRINT_3700, SPRINT_3800 -**Source Advisory:** `docs/product-advisories/19-Dec-2025 - Benchmarking Container Scanners Against Stella Ops.md` +**Source Advisory:** `docs/product/advisories/19-Dec-2025 - Benchmarking Container Scanners Against Stella Ops.md` --- @@ -38,7 +38,7 @@ Close remaining competitive gaps identified in the Dec 2025 benchmark analysis. ## Documentation Prerequisites Before starting implementation, read: -- `docs/product-advisories/19-Dec-2025 - Benchmarking Container Scanners Against Stella Ops.md` +- `docs/product/advisories/19-Dec-2025 - Benchmarking Container Scanners Against Stella Ops.md` - `docs/benchmarks/competitive-implementation-milestones.md` - `docs/moat.md` (Competitive Landscape section) - `docs/key-features.md` @@ -160,6 +160,6 @@ After completion, Stella Ops can claim: ## References -- Source advisory: `docs/product-advisories/19-Dec-2025 - Benchmarking Container Scanners Against Stella Ops.md` +- Source advisory: `docs/product/advisories/19-Dec-2025 - Benchmarking Container Scanners Against Stella Ops.md` - Implementation milestones: `docs/benchmarks/competitive-implementation-milestones.md` - Moat spec: `docs/moat.md` diff --git a/docs-archived/implplan/SPRINT_3900_0001_0001_exception_objects_schema_model.md b/docs-archived/implplan/SPRINT_3900_0001_0001_exception_objects_schema_model.md index 8968228a1..a8488a35f 100644 --- a/docs-archived/implplan/SPRINT_3900_0001_0001_exception_objects_schema_model.md +++ b/docs-archived/implplan/SPRINT_3900_0001_0001_exception_objects_schema_model.md @@ -12,7 +12,7 @@ - **Safe to parallelize with**: Unrelated epics ## Documentation Prerequisites -- `docs/product-advisories/archived/20-Dec-2025 - Moat Explanation - Exception management as auditable objects.md` +- `docs/product/advisories/archived/20-Dec-2025 - Moat Explanation - Exception management as auditable objects.md` - `docs/modules/policy/architecture.md` - `docs/db/SPECIFICATION.md` diff --git a/docs-archived/implplan/SPRINT_3900_0003_0001_exploit_path_inbox_proof_bundles.md b/docs-archived/implplan/SPRINT_3900_0003_0001_exploit_path_inbox_proof_bundles.md index cff71a51a..56c73c77f 100644 --- a/docs-archived/implplan/SPRINT_3900_0003_0001_exploit_path_inbox_proof_bundles.md +++ b/docs-archived/implplan/SPRINT_3900_0003_0001_exploit_path_inbox_proof_bundles.md @@ -17,7 +17,7 @@ ## Documentation Prerequisites -- `docs/product-advisories/22-Dec-2026 - UI Patterns for Triage and Replay.md` (source advisory) +- `docs/product/advisories/22-Dec-2026 - UI Patterns for Triage and Replay.md` (source advisory) - `src/Scanner/__Libraries/StellaOps.Scanner.Reachability/AGENTS.md` - `src/Web/StellaOps.Web/src/app/features/triage/` existing components - `docs/modules/triage/exploit-path-inbox.md` (created with this sprint) diff --git a/docs-archived/implplan/SPRINT_3900_0003_0002_recheck_policy_evidence_hooks.md b/docs-archived/implplan/SPRINT_3900_0003_0002_recheck_policy_evidence_hooks.md index 94024d6f1..8aa08cec5 100644 --- a/docs-archived/implplan/SPRINT_3900_0003_0002_recheck_policy_evidence_hooks.md +++ b/docs-archived/implplan/SPRINT_3900_0003_0002_recheck_policy_evidence_hooks.md @@ -18,7 +18,7 @@ ## Documentation Prerequisites -- `docs/product-advisories/22-Dec-2026 - UI Patterns for Triage and Replay.md` (source advisory) +- `docs/product/advisories/22-Dec-2026 - UI Patterns for Triage and Replay.md` (source advisory) - `src/Policy/__Libraries/StellaOps.Policy.Exceptions/AGENTS.md` - `docs/modules/policy/recheck-policy.md` (created with this sprint) - `docs/modules/policy/evidence-hooks.md` (created with this sprint) diff --git a/docs-archived/implplan/SPRINT_4000_0001_0001_unknowns_decay_algorithm.md b/docs-archived/implplan/SPRINT_4000_0001_0001_unknowns_decay_algorithm.md index 2d83c14bd..c2371ae5e 100644 --- a/docs-archived/implplan/SPRINT_4000_0001_0001_unknowns_decay_algorithm.md +++ b/docs-archived/implplan/SPRINT_4000_0001_0001_unknowns_decay_algorithm.md @@ -18,7 +18,7 @@ - `src/Policy/__Libraries/StellaOps.Policy.Unknowns/AGENTS.md` - `src/Policy/__Libraries/StellaOps.Policy/Scoring/FreshnessModels.cs` (pattern reference) -- `docs/product-advisories/14-Dec-2025 - Triage and Unknowns Technical Reference.md` +- `docs/product/advisories/14-Dec-2025 - Triage and Unknowns Technical Reference.md` --- diff --git a/docs-archived/implplan/SPRINT_4000_0001_0002_unknowns_blast_radius_containment.md b/docs-archived/implplan/SPRINT_4000_0001_0002_unknowns_blast_radius_containment.md index 6b6de5ef9..c62b047bb 100644 --- a/docs-archived/implplan/SPRINT_4000_0001_0002_unknowns_blast_radius_containment.md +++ b/docs-archived/implplan/SPRINT_4000_0001_0002_unknowns_blast_radius_containment.md @@ -18,7 +18,7 @@ - Sprint 4000.0001.0001 completion - `src/Policy/__Libraries/StellaOps.Policy.Unknowns/AGENTS.md` -- `docs/product-advisories/14-Dec-2025 - Triage and Unknowns Technical Reference.md` +- `docs/product/advisories/14-Dec-2025 - Triage and Unknowns Technical Reference.md` --- diff --git a/docs-archived/implplan/SPRINT_4000_0002_0001_backport_ux.md b/docs-archived/implplan/SPRINT_4000_0002_0001_backport_ux.md index 58d96d79d..0dd11aeee 100644 --- a/docs-archived/implplan/SPRINT_4000_0002_0001_backport_ux.md +++ b/docs-archived/implplan/SPRINT_4000_0002_0001_backport_ux.md @@ -9,7 +9,7 @@ ## Advisory Reference -- **Source:** `docs/product-advisories/archived/22-Dec-2025 - Getting Distro Backport Logic Right.md` +- **Source:** `docs/product/advisories/archived/22-Dec-2025 - Getting Distro Backport Logic Right.md` - **Gap Identified:** Advisory recommends UX showing "Compared with: RPM EVR / dpkg rules" and "why fixed" popover. No UI work was scheduled. ## Dependencies & Concurrency @@ -22,7 +22,7 @@ - `docs/modules/ui/architecture.md` - `docs/modules/scanner/architecture.md` (findings model) -- `docs/product-advisories/archived/22-Dec-2025 - Getting Distro Backport Logic Right.md` +- `docs/product/advisories/archived/22-Dec-2025 - Getting Distro Backport Logic Right.md` --- @@ -403,7 +403,7 @@ Add integration tests for the new UI components. ## References -- Advisory: `docs/product-advisories/archived/22-Dec-2025 - Getting Distro Backport Logic Right.md` +- Advisory: `docs/product/advisories/archived/22-Dec-2025 - Getting Distro Backport Logic Right.md` - Angular Material: https://material.angular.io/ - Findings API: `docs/api/scanner-findings.yaml` - UI Architecture: `docs/modules/ui/architecture.md` diff --git a/docs-archived/implplan/SPRINT_4100_0001_0001_reason_coded_unknowns.md b/docs-archived/implplan/SPRINT_4100_0001_0001_reason_coded_unknowns.md index 160147b44..72e84d883 100644 --- a/docs-archived/implplan/SPRINT_4100_0001_0001_reason_coded_unknowns.md +++ b/docs-archived/implplan/SPRINT_4100_0001_0001_reason_coded_unknowns.md @@ -17,8 +17,8 @@ ## Documentation Prerequisites - `src/Policy/__Libraries/StellaOps.Policy.Unknowns/AGENTS.md` -- `docs/product-advisories/19-Dec-2025 - Moat #5.md` (Unknowns as First-Class Risk) -- `docs/product-advisories/archived/2025-12-21-moat-gap-closure/14-Dec-2025 - Triage and Unknowns Technical Reference.md` +- `docs/product/advisories/19-Dec-2025 - Moat #5.md` (Unknowns as First-Class Risk) +- `docs/product/advisories/archived/2025-12-21-moat-gap-closure/14-Dec-2025 - Triage and Unknowns Technical Reference.md` --- diff --git a/docs-archived/implplan/SPRINT_4100_0001_0002_unknown_budgets.md b/docs-archived/implplan/SPRINT_4100_0001_0002_unknown_budgets.md index baf7571e0..486e196a4 100644 --- a/docs-archived/implplan/SPRINT_4100_0001_0002_unknown_budgets.md +++ b/docs-archived/implplan/SPRINT_4100_0001_0002_unknown_budgets.md @@ -18,7 +18,7 @@ - Sprint 4100.0001.0001 completion - `src/Policy/__Libraries/StellaOps.Policy.Unknowns/AGENTS.md` -- `docs/product-advisories/19-Dec-2025 - Moat #5.md` (Unknowns as First-Class Risk) +- `docs/product/advisories/19-Dec-2025 - Moat #5.md` (Unknowns as First-Class Risk) --- diff --git a/docs-archived/implplan/SPRINT_4100_0001_0003_unknowns_attestations.md b/docs-archived/implplan/SPRINT_4100_0001_0003_unknowns_attestations.md index dcba9caa4..b60c37242 100644 --- a/docs-archived/implplan/SPRINT_4100_0001_0003_unknowns_attestations.md +++ b/docs-archived/implplan/SPRINT_4100_0001_0003_unknowns_attestations.md @@ -19,7 +19,7 @@ - Sprint 4100.0001.0001 completion (UnknownReasonCode enum) - Sprint 4100.0001.0002 completion (UnknownBudget model) - `src/Attestor/__Libraries/StellaOps.Attestor.ProofChain/AGENTS.md` -- `docs/product-advisories/19-Dec-2025 - Moat #5.md` +- `docs/product/advisories/19-Dec-2025 - Moat #5.md` --- diff --git a/docs-archived/implplan/SPRINT_4100_0002_0001_knowledge_snapshot_manifest.md b/docs-archived/implplan/SPRINT_4100_0002_0001_knowledge_snapshot_manifest.md index 8ccd05ee6..c15d3eae1 100644 --- a/docs-archived/implplan/SPRINT_4100_0002_0001_knowledge_snapshot_manifest.md +++ b/docs-archived/implplan/SPRINT_4100_0002_0001_knowledge_snapshot_manifest.md @@ -17,8 +17,8 @@ ## Documentation Prerequisites - `src/Policy/__Libraries/StellaOps.Policy/AGENTS.md` -- `docs/product-advisories/20-Dec-2025 - Moat Explanation - Knowledge Snapshots and Time‑Travel Replay.md` -- `docs/product-advisories/19-Dec-2025 - Moat #2.md` (Risk Verdict Attestation) +- `docs/product/advisories/20-Dec-2025 - Moat Explanation - Knowledge Snapshots and Time‑Travel Replay.md` +- `docs/product/advisories/19-Dec-2025 - Moat #2.md` (Risk Verdict Attestation) --- diff --git a/docs-archived/implplan/SPRINT_4100_0002_0002_replay_engine.md b/docs-archived/implplan/SPRINT_4100_0002_0002_replay_engine.md index 349833c4a..8b210f126 100644 --- a/docs-archived/implplan/SPRINT_4100_0002_0002_replay_engine.md +++ b/docs-archived/implplan/SPRINT_4100_0002_0002_replay_engine.md @@ -17,8 +17,8 @@ ## Documentation Prerequisites - Sprint 4100.0002.0001 completion (KnowledgeSnapshotManifest) -- `docs/product-advisories/20-Dec-2025 - Moat Explanation - Knowledge Snapshots and Time‑Travel Replay.md` -- `docs/product-advisories/20-Dec-2025 - Moat Explanation - Guidelines for Product and Development Managers - Signed, Replayable Risk Verdicts.md` +- `docs/product/advisories/20-Dec-2025 - Moat Explanation - Knowledge Snapshots and Time‑Travel Replay.md` +- `docs/product/advisories/20-Dec-2025 - Moat Explanation - Guidelines for Product and Development Managers - Signed, Replayable Risk Verdicts.md` --- diff --git a/docs-archived/implplan/SPRINT_4100_0003_0001_risk_verdict_attestation.md b/docs-archived/implplan/SPRINT_4100_0003_0001_risk_verdict_attestation.md index 19dcc6fce..5e9265443 100644 --- a/docs-archived/implplan/SPRINT_4100_0003_0001_risk_verdict_attestation.md +++ b/docs-archived/implplan/SPRINT_4100_0003_0001_risk_verdict_attestation.md @@ -17,8 +17,8 @@ ## Documentation Prerequisites - `src/Attestor/__Libraries/StellaOps.Attestor.ProofChain/AGENTS.md` -- `docs/product-advisories/19-Dec-2025 - Moat #2.md` (Risk Verdict Attestation) -- `docs/product-advisories/20-Dec-2025 - Moat Explanation - Guidelines for Product and Development Managers - Signed, Replayable Risk Verdicts.md` +- `docs/product/advisories/19-Dec-2025 - Moat #2.md` (Risk Verdict Attestation) +- `docs/product/advisories/20-Dec-2025 - Moat Explanation - Guidelines for Product and Development Managers - Signed, Replayable Risk Verdicts.md` --- diff --git a/docs-archived/implplan/SPRINT_4100_0003_0002_oci_referrer_push.md b/docs-archived/implplan/SPRINT_4100_0003_0002_oci_referrer_push.md index 8e615dfbf..1a6843b99 100644 --- a/docs-archived/implplan/SPRINT_4100_0003_0002_oci_referrer_push.md +++ b/docs-archived/implplan/SPRINT_4100_0003_0002_oci_referrer_push.md @@ -18,7 +18,7 @@ - Sprint 4100.0003.0001 completion (RiskVerdictAttestation) - `src/ExportCenter/StellaOps.ExportCenter.WebService/AGENTS.md` -- `docs/product-advisories/19-Dec-2025 - Moat #2.md` (Risk Verdict Attestation) +- `docs/product/advisories/19-Dec-2025 - Moat #2.md` (Risk Verdict Attestation) - OCI Distribution Spec: Referrers API --- diff --git a/docs-archived/implplan/SPRINT_4100_0004_0001_security_state_delta.md b/docs-archived/implplan/SPRINT_4100_0004_0001_security_state_delta.md index bf60e5ccb..4efa55da6 100644 --- a/docs-archived/implplan/SPRINT_4100_0004_0001_security_state_delta.md +++ b/docs-archived/implplan/SPRINT_4100_0004_0001_security_state_delta.md @@ -17,8 +17,8 @@ ## Documentation Prerequisites - Sprint 4100.0002.0001 completion (KnowledgeSnapshotManifest) -- `docs/product-advisories/19-Dec-2025 - Moat #1.md` (Security Delta as Governance Unit) -- `docs/product-advisories/20-Dec-2025 - Moat Explanation - Risk Budgets and Diff-Aware Release Gates.md` +- `docs/product/advisories/19-Dec-2025 - Moat #1.md` (Security Delta as Governance Unit) +- `docs/product/advisories/20-Dec-2025 - Moat Explanation - Risk Budgets and Diff-Aware Release Gates.md` --- diff --git a/docs-archived/implplan/SPRINT_4100_0004_0002_risk_budgets_gates.md b/docs-archived/implplan/SPRINT_4100_0004_0002_risk_budgets_gates.md index 412379824..62f66e2f0 100644 --- a/docs-archived/implplan/SPRINT_4100_0004_0002_risk_budgets_gates.md +++ b/docs-archived/implplan/SPRINT_4100_0004_0002_risk_budgets_gates.md @@ -17,7 +17,7 @@ ## Documentation Prerequisites - `src/Policy/__Libraries/StellaOps.Policy/AGENTS.md` -- `docs/product-advisories/20-Dec-2025 - Moat Explanation - Risk Budgets and Diff-Aware Release Gates.md` +- `docs/product/advisories/20-Dec-2025 - Moat Explanation - Risk Budgets and Diff-Aware Release Gates.md` --- diff --git a/docs-archived/implplan/SPRINT_4200_0001_0001_proof_chain_verification_ui.md b/docs-archived/implplan/SPRINT_4200_0001_0001_proof_chain_verification_ui.md index 1dcd16b07..cb9d9c219 100644 --- a/docs-archived/implplan/SPRINT_4200_0001_0001_proof_chain_verification_ui.md +++ b/docs-archived/implplan/SPRINT_4200_0001_0001_proof_chain_verification_ui.md @@ -14,7 +14,7 @@ ## Documentation Prerequisites - `docs/modules/attestor/architecture.md` - `docs/modules/ui/architecture.md` -- `docs/product-advisories/archived/2025-12-21-reference-architecture/20-Dec-2025 - Stella Ops Reference Architecture.md` +- `docs/product/advisories/archived/2025-12-21-reference-architecture/20-Dec-2025 - Stella Ops Reference Architecture.md` --- diff --git a/docs-archived/implplan/SPRINT_4200_0001_0001_triage_rest_api.md b/docs-archived/implplan/SPRINT_4200_0001_0001_triage_rest_api.md index ceb8ac8a6..a715128d6 100644 --- a/docs-archived/implplan/SPRINT_4200_0001_0001_triage_rest_api.md +++ b/docs-archived/implplan/SPRINT_4200_0001_0001_triage_rest_api.md @@ -17,8 +17,8 @@ ## Documentation Prerequisites - `src/Scanner/__Libraries/StellaOps.Scanner.Triage/AGENTS.md` -- `docs/product-advisories/21-Dec-2025 - How Top Scanners Shape Evidence‑First UX.md` -- `docs/product-advisories/21-Dec-2025 - Designing Explainable Triage Workflows.md` +- `docs/product/advisories/21-Dec-2025 - How Top Scanners Shape Evidence‑First UX.md` +- `docs/product/advisories/21-Dec-2025 - Designing Explainable Triage Workflows.md` - Existing entities: `TriageFinding`, `TriageDecision`, `TriageEvidenceArtifact`, `TriageSnapshot` --- diff --git a/docs-archived/implplan/SPRINT_4200_0001_0002_excititor_policy_lattice.md b/docs-archived/implplan/SPRINT_4200_0001_0002_excititor_policy_lattice.md index 930404c9a..aba3c0ea4 100644 --- a/docs-archived/implplan/SPRINT_4200_0001_0002_excititor_policy_lattice.md +++ b/docs-archived/implplan/SPRINT_4200_0001_0002_excititor_policy_lattice.md @@ -18,7 +18,7 @@ - `src/Excititor/__Libraries/StellaOps.Excititor.Core/AGENTS.md` - `src/Policy/__Libraries/StellaOps.Policy/Lattice/AGENTS.md` -- `docs/product-advisories/21-Dec-2025 - How Top Scanners Shape Evidence‑First UX.md` (VEX Conflict Studio) +- `docs/product/advisories/21-Dec-2025 - How Top Scanners Shape Evidence‑First UX.md` (VEX Conflict Studio) - Existing files: `OpenVexStatementMerger.cs`, `TrustLatticeEngine.cs` --- diff --git a/docs-archived/implplan/SPRINT_4200_0002_0001_can_i_ship_header.md b/docs-archived/implplan/SPRINT_4200_0002_0001_can_i_ship_header.md index 8b45efe03..d716fa009 100644 --- a/docs-archived/implplan/SPRINT_4200_0002_0001_can_i_ship_header.md +++ b/docs-archived/implplan/SPRINT_4200_0002_0001_can_i_ship_header.md @@ -18,8 +18,8 @@ ## Documentation Prerequisites - `src/Web/StellaOps.Web/AGENTS.md` -- `docs/product-advisories/21-Dec-2025 - How Top Scanners Shape Evidence‑First UX.md` -- `docs/product-advisories/16-Dec-2025 - Reimagining Proof‑Linked UX in Security Workflows.md` +- `docs/product/advisories/21-Dec-2025 - How Top Scanners Shape Evidence‑First UX.md` +- `docs/product/advisories/16-Dec-2025 - Reimagining Proof‑Linked UX in Security Workflows.md` --- diff --git a/docs-archived/implplan/SPRINT_4200_0002_0002_verdict_ladder.md b/docs-archived/implplan/SPRINT_4200_0002_0002_verdict_ladder.md index 2a62f922d..a0bc40b79 100644 --- a/docs-archived/implplan/SPRINT_4200_0002_0002_verdict_ladder.md +++ b/docs-archived/implplan/SPRINT_4200_0002_0002_verdict_ladder.md @@ -17,8 +17,8 @@ ## Documentation Prerequisites - `src/Web/StellaOps.Web/AGENTS.md` -- `docs/product-advisories/16-Dec-2025 - Reimagining Proof‑Linked UX in Security Workflows.md` -- `docs/product-advisories/21-Dec-2025 - Designing Explainable Triage Workflows.md` +- `docs/product/advisories/16-Dec-2025 - Reimagining Proof‑Linked UX in Security Workflows.md` +- `docs/product/advisories/21-Dec-2025 - Designing Explainable Triage Workflows.md` --- diff --git a/docs-archived/implplan/SPRINT_4200_0002_0003_delta_compare_view.md b/docs-archived/implplan/SPRINT_4200_0002_0003_delta_compare_view.md index 186cb358f..e192d45d3 100644 --- a/docs-archived/implplan/SPRINT_4200_0002_0003_delta_compare_view.md +++ b/docs-archived/implplan/SPRINT_4200_0002_0003_delta_compare_view.md @@ -17,8 +17,8 @@ ## Documentation Prerequisites - `src/Web/StellaOps.Web/AGENTS.md` -- `docs/product-advisories/21-Dec-2025 - Smart Diff - Reproducibility as a Feature.md` -- `docs/product-advisories/21-Dec-2025 - How Top Scanners Shape Evidence‑First UX.md` +- `docs/product/advisories/21-Dec-2025 - Smart Diff - Reproducibility as a Feature.md` +- `docs/product/advisories/21-Dec-2025 - How Top Scanners Shape Evidence‑First UX.md` --- diff --git a/docs-archived/implplan/SPRINT_4200_0002_0004_cli_compare.md b/docs-archived/implplan/SPRINT_4200_0002_0004_cli_compare.md index 2a2ad021a..96b725ad6 100644 --- a/docs-archived/implplan/SPRINT_4200_0002_0004_cli_compare.md +++ b/docs-archived/implplan/SPRINT_4200_0002_0004_cli_compare.md @@ -17,7 +17,7 @@ ## Documentation Prerequisites - `src/Cli/StellaOps.Cli/AGENTS.md` -- `docs/product-advisories/21-Dec-2025 - Smart Diff - Reproducibility as a Feature.md` +- `docs/product/advisories/21-Dec-2025 - Smart Diff - Reproducibility as a Feature.md` - Existing CLI patterns in `src/Cli/StellaOps.Cli/Commands/` --- diff --git a/docs-archived/implplan/SPRINT_4200_0002_0005_counterfactuals.md b/docs-archived/implplan/SPRINT_4200_0002_0005_counterfactuals.md index b81f5dee5..2f729884a 100644 --- a/docs-archived/implplan/SPRINT_4200_0002_0005_counterfactuals.md +++ b/docs-archived/implplan/SPRINT_4200_0002_0005_counterfactuals.md @@ -17,7 +17,7 @@ ## Documentation Prerequisites - `src/Policy/__Libraries/StellaOps.Policy/AGENTS.md` -- `docs/product-advisories/16-Dec-2025 - Reimagining Proof‑Linked UX in Security Workflows.md` +- `docs/product/advisories/16-Dec-2025 - Reimagining Proof‑Linked UX in Security Workflows.md` - Existing: `PolicyExplanation`, `PolicyEvaluator` --- diff --git a/docs-archived/implplan/SPRINT_4200_0002_0006_delta_compare_api.md b/docs-archived/implplan/SPRINT_4200_0002_0006_delta_compare_api.md index 3b639d082..54596ddc5 100644 --- a/docs-archived/implplan/SPRINT_4200_0002_0006_delta_compare_api.md +++ b/docs-archived/implplan/SPRINT_4200_0002_0006_delta_compare_api.md @@ -6,7 +6,7 @@ Backend API endpoints to support the Delta/Compare View UI (Sprint 4200.0002.000 **Working directory:** `src/Scanner/StellaOps.Scanner.WebService/` -**Source Advisory**: `docs/product-advisories/21-Dec-2025 - Smart Diff - Reproducibility as a Feature.md` +**Source Advisory**: `docs/product/advisories/21-Dec-2025 - Smart Diff - Reproducibility as a Feature.md` ## Dependencies & Concurrency @@ -18,7 +18,7 @@ Backend API endpoints to support the Delta/Compare View UI (Sprint 4200.0002.000 - `src/Scanner/AGENTS.md` - `docs/modules/scanner/architecture.md` -- `docs/product-advisories/21-Dec-2025 - Smart Diff - Reproducibility as a Feature.md` +- `docs/product/advisories/21-Dec-2025 - Smart Diff - Reproducibility as a Feature.md` --- diff --git a/docs-archived/implplan/SPRINT_4300_SUMMARY.md b/docs-archived/implplan/SPRINT_4300_SUMMARY.md index 89f1973b0..588f11365 100644 --- a/docs-archived/implplan/SPRINT_4300_SUMMARY.md +++ b/docs-archived/implplan/SPRINT_4300_SUMMARY.md @@ -4,7 +4,7 @@ This sprint series closes the remaining gaps between the "Designing Explainable Triage and Proof-Linked Evidence" advisory (18-Dec-2025) and the current implementation. -**Origin Advisory:** `docs/product-advisories/18-Dec-2025 - Designing Explainable Triage and Proof‑Linked Evidence.md` +**Origin Advisory:** `docs/product/advisories/18-Dec-2025 - Designing Explainable Triage and Proof‑Linked Evidence.md` **Gap Analysis:** `docs/implplan/analysis/4300_explainable_triage_gap_analysis.md` @@ -195,7 +195,7 @@ After all sprints complete: - `docs/README.md` - `docs/07_HIGH_LEVEL_ARCHITECTURE.md` - `docs/modules/platform/architecture-overview.md` -- `docs/product-advisories/18-Dec-2025 - Designing Explainable Triage and Proof-Linked Evidence.md` +- `docs/product/advisories/18-Dec-2025 - Designing Explainable Triage and Proof-Linked Evidence.md` ## Delivery Tracker (ACTUAL Implementation) diff --git a/docs-archived/implplan/SPRINT_4400_0001_0001_poe_ui_policy_hooks.md b/docs-archived/implplan/SPRINT_4400_0001_0001_poe_ui_policy_hooks.md index 62e2dbac6..6d49cf342 100644 --- a/docs-archived/implplan/SPRINT_4400_0001_0001_poe_ui_policy_hooks.md +++ b/docs-archived/implplan/SPRINT_4400_0001_0001_poe_ui_policy_hooks.md @@ -25,7 +25,7 @@ Build **UI path viewer** and **policy hooks** for Proof of Exposure (PoE) artifa ## Documentation Prerequisites - `docs/implplan/SPRINT_3500_0001_0001_proof_of_exposure_mvp.md` -- `docs/product-advisories/23-Dec-2026 - Binary Mapping as Attestable Proof.md` +- `docs/product/advisories/23-Dec-2026 - Binary Mapping as Attestable Proof.md` - `src/Web/StellaOps.Web/AGENTS.md` - `docs/reachability/function-level-evidence.md` diff --git a/docs-archived/implplan/SPRINT_4400_0001_0001_signed_delta_verdict.md b/docs-archived/implplan/SPRINT_4400_0001_0001_signed_delta_verdict.md index 5bbf3f544..f6282b92f 100644 --- a/docs-archived/implplan/SPRINT_4400_0001_0001_signed_delta_verdict.md +++ b/docs-archived/implplan/SPRINT_4400_0001_0001_signed_delta_verdict.md @@ -77,7 +77,7 @@ Smart-Diff (MaterialRiskChangeDetector) exists with R1-R4 rules and priority sco - `docs/modules/scanner/architecture.md` - `docs/modules/attestor/architecture.md` - `docs/modules/cli/architecture.md` -- `docs/product-advisories/14-Dec-2025 - Smart-Diff Technical Reference.md` +- `docs/product/advisories/14-Dec-2025 - Smart-Diff Technical Reference.md` ## Delivery Tracker | # | Task ID | Status | Key dependency / next step | Owners | Task Definition | diff --git a/docs-archived/implplan/SPRINT_4500_0001_0003_binary_evidence_db.md b/docs-archived/implplan/SPRINT_4500_0001_0003_binary_evidence_db.md index 645109c89..f0d7ebd36 100644 --- a/docs-archived/implplan/SPRINT_4500_0001_0003_binary_evidence_db.md +++ b/docs-archived/implplan/SPRINT_4500_0001_0003_binary_evidence_db.md @@ -18,7 +18,7 @@ - `src/Scanner/__Libraries/StellaOps.Scanner.Storage/AGENTS.md` - `docs/db/SPECIFICATION.md` -- `docs/product-advisories/21-Dec-2025 - Mapping Evidence Within Compiled Binaries.md` +- `docs/product/advisories/21-Dec-2025 - Mapping Evidence Within Compiled Binaries.md` - Existing: `BuildIdLookupResult` --- diff --git a/docs-archived/implplan/SPRINT_4500_0002_0001_vex_conflict_studio.md b/docs-archived/implplan/SPRINT_4500_0002_0001_vex_conflict_studio.md index 3f7935136..bce0da508 100644 --- a/docs-archived/implplan/SPRINT_4500_0002_0001_vex_conflict_studio.md +++ b/docs-archived/implplan/SPRINT_4500_0002_0001_vex_conflict_studio.md @@ -18,7 +18,7 @@ ## Documentation Prerequisites - `src/Web/StellaOps.Web/AGENTS.md` -- `docs/product-advisories/21-Dec-2025 - How Top Scanners Shape Evidence‑First UX.md` +- `docs/product/advisories/21-Dec-2025 - How Top Scanners Shape Evidence‑First UX.md` - Existing: MergeTrace, VexConflictResolution from Excititor --- diff --git a/docs-archived/implplan/SPRINT_4500_0003_0001_operator_auditor_mode.md b/docs-archived/implplan/SPRINT_4500_0003_0001_operator_auditor_mode.md index 58ac2a1f2..842d98660 100644 --- a/docs-archived/implplan/SPRINT_4500_0003_0001_operator_auditor_mode.md +++ b/docs-archived/implplan/SPRINT_4500_0003_0001_operator_auditor_mode.md @@ -18,7 +18,7 @@ ## Documentation Prerequisites - `src/Web/StellaOps.Web/AGENTS.md` -- `docs/product-advisories/21-Dec-2025 - How Top Scanners Shape Evidence‑First UX.md` +- `docs/product/advisories/21-Dec-2025 - How Top Scanners Shape Evidence‑First UX.md` - Angular service patterns --- diff --git a/docs-archived/implplan/SPRINT_4601_0001_0001_keyboard_shortcuts.md b/docs-archived/implplan/SPRINT_4601_0001_0001_keyboard_shortcuts.md index 0fc89ba5a..7021981a9 100644 --- a/docs-archived/implplan/SPRINT_4601_0001_0001_keyboard_shortcuts.md +++ b/docs-archived/implplan/SPRINT_4601_0001_0001_keyboard_shortcuts.md @@ -19,7 +19,7 @@ - Safe to run in parallel with other Web work; changes are scoped to triage UI and docs. ## Documentation Prerequisites -- `docs/product-advisories/14-Dec-2025 - Triage and Unknowns Technical Reference.md` (§4) +- `docs/product/advisories/14-Dec-2025 - Triage and Unknowns Technical Reference.md` (§4) - `docs/modules/ui/architecture.md` (§3.9) - `src/Web/StellaOps.Web/AGENTS.md` diff --git a/docs-archived/implplan/SPRINT_5100_0000_0000_epic_summary.md b/docs-archived/implplan/SPRINT_5100_0000_0000_epic_summary.md index f88be0d57..1776b4f1b 100644 --- a/docs-archived/implplan/SPRINT_5100_0000_0000_epic_summary.md +++ b/docs-archived/implplan/SPRINT_5100_0000_0000_epic_summary.md @@ -12,7 +12,7 @@ - Safe to parallelize with: N/A (coordination artifact). ## Documentation Prerequisites -- `docs/product-advisories/archived/2025-12-21-testing-strategy/20-Dec-2025 - Testing strategy.md` +- `docs/product/advisories/archived/2025-12-21-testing-strategy/20-Dec-2025 - Testing strategy.md` - `docs/19_TEST_SUITE_OVERVIEW.md` - `docs/modules/platform/architecture-overview.md` @@ -248,7 +248,7 @@ A release candidate is blocked if any of these fail: ## Related Documentation - [Test Suite Overview](../19_TEST_SUITE_OVERVIEW.md) -- [Testing Strategy Advisory](../product-advisories/20-Dec-2025%20-%20Testing%20strategy.md) +- [Testing Strategy Advisory](../product/advisories/20-Dec-2025%20-%20Testing%20strategy.md) - [Offline Operation Guide](../24_OFFLINE_KIT.md) - [tests/AGENTS.md](../../tests/AGENTS.md) diff --git a/docs-archived/implplan/SPRINT_5100_0003_0001_sbom_interop_roundtrip.md b/docs-archived/implplan/SPRINT_5100_0003_0001_sbom_interop_roundtrip.md index 724aedc41..020abb0b4 100644 --- a/docs-archived/implplan/SPRINT_5100_0003_0001_sbom_interop_roundtrip.md +++ b/docs-archived/implplan/SPRINT_5100_0003_0001_sbom_interop_roundtrip.md @@ -16,7 +16,7 @@ ## Documentation Prerequisites -- `docs/product-advisories/20-Dec-2025 - Testing strategy.md` +- `docs/product/advisories/20-Dec-2025 - Testing strategy.md` - CycloneDX 1.6 specification - SPDX 3.0.1 specification - cosign attestation documentation diff --git a/docs-archived/implplan/SPRINT_5100_0003_0002_no_egress_enforcement.md b/docs-archived/implplan/SPRINT_5100_0003_0002_no_egress_enforcement.md index 24a28a1cd..f445b43cf 100644 --- a/docs-archived/implplan/SPRINT_5100_0003_0002_no_egress_enforcement.md +++ b/docs-archived/implplan/SPRINT_5100_0003_0002_no_egress_enforcement.md @@ -16,7 +16,7 @@ ## Documentation Prerequisites -- `docs/product-advisories/20-Dec-2025 - Testing strategy.md` +- `docs/product/advisories/20-Dec-2025 - Testing strategy.md` - `docs/24_OFFLINE_KIT.md` - Docker/Podman network isolation documentation diff --git a/docs-archived/implplan/SPRINT_5100_0004_0001_unknowns_budget_ci_gates.md b/docs-archived/implplan/SPRINT_5100_0004_0001_unknowns_budget_ci_gates.md index a99b364a5..d34f66e8f 100644 --- a/docs-archived/implplan/SPRINT_5100_0004_0001_unknowns_budget_ci_gates.md +++ b/docs-archived/implplan/SPRINT_5100_0004_0001_unknowns_budget_ci_gates.md @@ -19,8 +19,8 @@ ## Documentation Prerequisites -- `docs/product-advisories/20-Dec-2025 - Testing strategy.md` -- `docs/product-advisories/19-Dec-2025 - Moat #5.md` +- `docs/product/advisories/20-Dec-2025 - Testing strategy.md` +- `docs/product/advisories/19-Dec-2025 - Moat #5.md` - Sprint 4100.0001.0002 (Unknown Budgets model) --- diff --git a/docs-archived/implplan/SPRINT_5100_0005_0001_router_chaos_suite.md b/docs-archived/implplan/SPRINT_5100_0005_0001_router_chaos_suite.md index 069d2cb3c..aa44a47d1 100644 --- a/docs-archived/implplan/SPRINT_5100_0005_0001_router_chaos_suite.md +++ b/docs-archived/implplan/SPRINT_5100_0005_0001_router_chaos_suite.md @@ -19,8 +19,8 @@ ## Documentation Prerequisites -- `docs/product-advisories/20-Dec-2025 - Testing strategy.md` -- `docs/product-advisories/15-Dec-2025 - Designing 202 + Retry-After Backpressure Control.md` +- `docs/product/advisories/20-Dec-2025 - Testing strategy.md` +- `docs/product/advisories/15-Dec-2025 - Designing 202 + Retry-After Backpressure Control.md` - Router architecture documentation --- diff --git a/docs-archived/implplan/SPRINT_5100_0006_0001_audit_pack_export_import.md b/docs-archived/implplan/SPRINT_5100_0006_0001_audit_pack_export_import.md index f8cb7e19b..d868330e9 100644 --- a/docs-archived/implplan/SPRINT_5100_0006_0001_audit_pack_export_import.md +++ b/docs-archived/implplan/SPRINT_5100_0006_0001_audit_pack_export_import.md @@ -16,7 +16,7 @@ ## Documentation Prerequisites -- `docs/product-advisories/20-Dec-2025 - Testing strategy.md` +- `docs/product/advisories/20-Dec-2025 - Testing strategy.md` - `docs/24_OFFLINE_KIT.md` - Sprint 5100.0001.0001 (Run Manifest Schema) - Sprint 5100.0002.0002 (Replay Runner) diff --git a/docs-archived/implplan/SPRINT_5100_0007_0001_testing_strategy_2026.md b/docs-archived/implplan/SPRINT_5100_0007_0001_testing_strategy_2026.md index 7911515b8..eecb85cbb 100644 --- a/docs-archived/implplan/SPRINT_5100_0007_0001_testing_strategy_2026.md +++ b/docs-archived/implplan/SPRINT_5100_0007_0001_testing_strategy_2026.md @@ -7,12 +7,12 @@ - **Evidence:** `docs/testing/testing-strategy-models.md`, `docs/testing/TEST_CATALOG.yml`, `docs/benchmarks/testing/better-testing-strategy-samples.md`, plus updated links in `docs/19_TEST_SUITE_OVERVIEW.md`, `docs/07_HIGH_LEVEL_ARCHITECTURE.md`, `docs/key-features.md`, `docs/modules/platform/architecture-overview.md`, and `docs/modules/ci/architecture.md`. ## Dependencies & Concurrency -- Builds on archived testing strategy guidance: `docs/product-advisories/archived/2025-12-21-testing-strategy/20-Dec-2025 - Testing strategy.md`. +- Builds on archived testing strategy guidance: `docs/product/advisories/archived/2025-12-21-testing-strategy/20-Dec-2025 - Testing strategy.md`. - Complements Testing Quality Guardrails sprints (0350-0353); no direct code overlap expected. - Safe to run in parallel with UI sprints (4000 series) and module-specific delivery as long as CI lane names remain stable. ## Documentation Prerequisites -- `docs/product-advisories/22-Dec-2026 - Better testing strategy.md` +- `docs/product/advisories/22-Dec-2026 - Better testing strategy.md` - `docs/19_TEST_SUITE_OVERVIEW.md` - `docs/testing/testing-quality-guardrails-implementation.md` - `docs/modules/platform/architecture-overview.md` diff --git a/docs-archived/implplan/SPRINT_5100_0007_0002_testkit_foundations.md b/docs-archived/implplan/SPRINT_5100_0007_0002_testkit_foundations.md index 6163e6e5f..c87707e3e 100644 --- a/docs-archived/implplan/SPRINT_5100_0007_0002_testkit_foundations.md +++ b/docs-archived/implplan/SPRINT_5100_0007_0002_testkit_foundations.md @@ -12,7 +12,7 @@ - Safe to run in parallel with: Wave 2 Quick Wins (tasks 4-7 in Sprint 5100.0007.0001). ## Documentation Prerequisites -- `docs/product-advisories/22-Dec-2026 - Better testing strategy.md` (Section 2.1 and Epic A) +- `docs/product/advisories/22-Dec-2026 - Better testing strategy.md` (Section 2.1 and Epic A) - `docs/testing/testing-strategy-models.md` - `docs/benchmarks/testing/better-testing-strategy-samples.md` diff --git a/docs-archived/implplan/SPRINT_5100_0007_0003_determinism_gate.md b/docs-archived/implplan/SPRINT_5100_0007_0003_determinism_gate.md index 466805a05..ddf550b2f 100644 --- a/docs-archived/implplan/SPRINT_5100_0007_0003_determinism_gate.md +++ b/docs-archived/implplan/SPRINT_5100_0007_0003_determinism_gate.md @@ -13,7 +13,7 @@ - Safe to run in parallel with: Epic C (Storage harness), Epic D (Connector fixtures). ## Documentation Prerequisites -- `docs/product-advisories/22-Dec-2026 - Better testing strategy.md` (Epic B, Section 2.4) +- `docs/product/advisories/22-Dec-2026 - Better testing strategy.md` (Epic B, Section 2.4) - `docs/testing/testing-strategy-models.md` - `docs/19_TEST_SUITE_OVERVIEW.md` (Replay determinism gate) diff --git a/docs-archived/implplan/SPRINT_5100_0007_0004_storage_harness.md b/docs-archived/implplan/SPRINT_5100_0007_0004_storage_harness.md index 51267c932..127603aaa 100644 --- a/docs-archived/implplan/SPRINT_5100_0007_0004_storage_harness.md +++ b/docs-archived/implplan/SPRINT_5100_0007_0004_storage_harness.md @@ -12,7 +12,7 @@ - Safe to run in parallel with module-specific test implementation sprints. ## Documentation Prerequisites -- `docs/product-advisories/22-Dec-2026 - Better testing strategy.md` (Section 2.3 "Epic C - Storage harness") +- `docs/product/advisories/22-Dec-2026 - Better testing strategy.md` (Section 2.3 "Epic C - Storage harness") - `src/__Libraries/StellaOps.TestKit/README.md` - `docs/db/SPECIFICATION.md` - `docs/operations/postgresql-guide.md` diff --git a/docs-archived/implplan/SPRINT_5100_0007_0005_connector_fixtures.md b/docs-archived/implplan/SPRINT_5100_0007_0005_connector_fixtures.md index 0966f3cfb..acf45b70d 100644 --- a/docs-archived/implplan/SPRINT_5100_0007_0005_connector_fixtures.md +++ b/docs-archived/implplan/SPRINT_5100_0007_0005_connector_fixtures.md @@ -12,7 +12,7 @@ - Safe to run in parallel with other testing sprints. ## Documentation Prerequisites -- `docs/product-advisories/22-Dec-2026 - Better testing strategy.md` (Sections 3.2 "Concelier", 3.3 "Excititor", Epic D) +- `docs/product/advisories/22-Dec-2026 - Better testing strategy.md` (Sections 3.2 "Concelier", 3.3 "Excititor", Epic D) - `src/__Libraries/StellaOps.TestKit/README.md` - `docs/testing/testing-strategy-models.md` (Model C1 - Connector/External) diff --git a/docs-archived/implplan/SPRINT_5100_0007_0006_webservice_contract.md b/docs-archived/implplan/SPRINT_5100_0007_0006_webservice_contract.md index 8cbce0f21..829a7ae89 100644 --- a/docs-archived/implplan/SPRINT_5100_0007_0006_webservice_contract.md +++ b/docs-archived/implplan/SPRINT_5100_0007_0006_webservice_contract.md @@ -13,7 +13,7 @@ - Safe to run in parallel with: Epic B (Determinism gate), Epic C (Storage harness), Epic D (Connector fixtures), Epic F (Architecture tests). ## Documentation Prerequisites -- `docs/product-advisories/22-Dec-2026 - Better testing strategy.md` (Epic E, Model W1 — WebService/API) +- `docs/product/advisories/22-Dec-2026 - Better testing strategy.md` (Epic E, Model W1 — WebService/API) - `docs/testing/testing-strategy-models.md` (Model W1) - `docs/testing/TEST_CATALOG.yml` (WebService requirements) diff --git a/docs-archived/implplan/SPRINT_5100_0007_0007_architecture_tests.md b/docs-archived/implplan/SPRINT_5100_0007_0007_architecture_tests.md index 83c443774..5dc7f30e0 100644 --- a/docs-archived/implplan/SPRINT_5100_0007_0007_architecture_tests.md +++ b/docs-archived/implplan/SPRINT_5100_0007_0007_architecture_tests.md @@ -12,7 +12,7 @@ - Safe to run immediately and in parallel with other work. ## Documentation Prerequisites -- `docs/product-advisories/22-Dec-2026 - Better testing strategy.md` (Section 2.5 "Architecture enforcement tests", Epic F) +- `docs/product/advisories/22-Dec-2026 - Better testing strategy.md` (Section 2.5 "Architecture enforcement tests", Epic F) - `docs/07_HIGH_LEVEL_ARCHITECTURE.md` - `docs/modules/platform/architecture-overview.md` diff --git a/docs-archived/implplan/SPRINT_5100_0008_0001_competitor_parity.md b/docs-archived/implplan/SPRINT_5100_0008_0001_competitor_parity.md index 7f9183d7a..d95c571d8 100644 --- a/docs-archived/implplan/SPRINT_5100_0008_0001_competitor_parity.md +++ b/docs-archived/implplan/SPRINT_5100_0008_0001_competitor_parity.md @@ -13,7 +13,7 @@ - Safe to run in parallel with: All other sprints. ## Documentation Prerequisites -- `docs/product-advisories/22-Dec-2026 - Better testing strategy.md` (Section 5 — Competitor Parity Testing) +- `docs/product/advisories/22-Dec-2026 - Better testing strategy.md` (Section 5 — Competitor Parity Testing) - `docs/testing/testing-strategy-models.md` - `docs/19_TEST_SUITE_OVERVIEW.md` (Interop layer) diff --git a/docs-archived/implplan/SPRINT_5100_0009_0001_scanner_tests.md b/docs-archived/implplan/SPRINT_5100_0009_0001_scanner_tests.md index 4b27e68d5..8cdfab397 100644 --- a/docs-archived/implplan/SPRINT_5100_0009_0001_scanner_tests.md +++ b/docs-archived/implplan/SPRINT_5100_0009_0001_scanner_tests.md @@ -15,7 +15,7 @@ - Safe to run in parallel with: Sprint 5100.0009.0002 (Concelier tests), Sprint 5100.0009.0003 (Excititor tests). ## Documentation Prerequisites -- `docs/product-advisories/22-Dec-2026 - Better testing strategy.md` (Section 3.1 — Scanner) +- `docs/product/advisories/22-Dec-2026 - Better testing strategy.md` (Section 3.1 — Scanner) - `docs/testing/testing-strategy-models.md` (Models L0, AN1, S1, T1, W1, WK1, PERF) - `docs/testing/TEST_CATALOG.yml` (Scanner module requirements) diff --git a/docs-archived/implplan/SPRINT_5100_0009_0002_concelier_tests.md b/docs-archived/implplan/SPRINT_5100_0009_0002_concelier_tests.md index ed6238433..ff26afdfe 100644 --- a/docs-archived/implplan/SPRINT_5100_0009_0002_concelier_tests.md +++ b/docs-archived/implplan/SPRINT_5100_0009_0002_concelier_tests.md @@ -16,7 +16,7 @@ - Safe to run in parallel with: Sprint 5100.0009.0001 (Scanner tests), Sprint 5100.0009.0003 (Excititor tests). ## Documentation Prerequisites -- `docs/product-advisories/22-Dec-2026 - Better testing strategy.md` (Section 3.2 — Concelier) +- `docs/product/advisories/22-Dec-2026 - Better testing strategy.md` (Section 3.2 — Concelier) - `docs/testing/testing-strategy-models.md` (Models C1, L0, S1, W1, AN1) - `docs/testing/TEST_CATALOG.yml` (Concelier module requirements) diff --git a/docs-archived/implplan/SPRINT_5100_0009_0003_excititor_tests.md b/docs-archived/implplan/SPRINT_5100_0009_0003_excititor_tests.md index dcfe7bdbf..13248f7c4 100644 --- a/docs-archived/implplan/SPRINT_5100_0009_0003_excititor_tests.md +++ b/docs-archived/implplan/SPRINT_5100_0009_0003_excititor_tests.md @@ -16,7 +16,7 @@ - Safe to run in parallel with: Sprint 5100.0009.0001 (Scanner tests), Sprint 5100.0009.0002 (Concelier tests). ## Documentation Prerequisites -- `docs/product-advisories/22-Dec-2026 - Better testing strategy.md` (Section 3.3 — Excititor) +- `docs/product/advisories/22-Dec-2026 - Better testing strategy.md` (Section 3.3 — Excititor) - `docs/testing/testing-strategy-models.md` (Models C1, L0, S1, W1, WK1) - `docs/testing/TEST_CATALOG.yml` (Excititor module requirements) diff --git a/docs-archived/implplan/SPRINT_5100_0009_0004_policy_tests.md b/docs-archived/implplan/SPRINT_5100_0009_0004_policy_tests.md index d3d43df3a..99adab317 100644 --- a/docs-archived/implplan/SPRINT_5100_0009_0004_policy_tests.md +++ b/docs-archived/implplan/SPRINT_5100_0009_0004_policy_tests.md @@ -16,7 +16,7 @@ - Safe to run in parallel with: All other module test sprints (5100.0009.*). ## Documentation Prerequisites -- `docs/product-advisories/22-Dec-2026 - Better testing strategy.md` (Section 3.4 — Policy) +- `docs/product/advisories/22-Dec-2026 - Better testing strategy.md` (Section 3.4 — Policy) - `docs/testing/testing-strategy-models.md` (Models L0, S1, W1) - `docs/testing/TEST_CATALOG.yml` (Policy module requirements) diff --git a/docs-archived/implplan/SPRINT_5100_0009_0005_authority_tests.md b/docs-archived/implplan/SPRINT_5100_0009_0005_authority_tests.md index af5101f8a..39747d394 100644 --- a/docs-archived/implplan/SPRINT_5100_0009_0005_authority_tests.md +++ b/docs-archived/implplan/SPRINT_5100_0009_0005_authority_tests.md @@ -15,7 +15,7 @@ - Safe to run in parallel with: All other module test sprints (5100.0009.*). ## Documentation Prerequisites -- `docs/product-advisories/22-Dec-2026 - Better testing strategy.md` (Section 3.5 — Attestor + Signer + Provenance + Cryptography; Authority is part of this) +- `docs/product/advisories/22-Dec-2026 - Better testing strategy.md` (Section 3.5 — Attestor + Signer + Provenance + Cryptography; Authority is part of this) - `docs/testing/testing-strategy-models.md` (Models L0, W1, C1) - `docs/testing/TEST_CATALOG.yml` (Authority module requirements) diff --git a/docs-archived/implplan/SPRINT_5100_0009_0006_signer_tests.md b/docs-archived/implplan/SPRINT_5100_0009_0006_signer_tests.md index 769d84f96..a6eefdd9c 100644 --- a/docs-archived/implplan/SPRINT_5100_0009_0006_signer_tests.md +++ b/docs-archived/implplan/SPRINT_5100_0009_0006_signer_tests.md @@ -16,7 +16,7 @@ - Safe to run in parallel with: All other module test sprints (5100.0009.*). ## Documentation Prerequisites -- `docs/product-advisories/22-Dec-2026 - Better testing strategy.md` (Section 3.5 — Attestor + Signer + Provenance + Cryptography) +- `docs/product/advisories/22-Dec-2026 - Better testing strategy.md` (Section 3.5 — Attestor + Signer + Provenance + Cryptography) - `docs/testing/testing-strategy-models.md` (Models L0, W1, C1) - `docs/testing/TEST_CATALOG.yml` (Signer module requirements) diff --git a/docs-archived/implplan/SPRINT_5100_0009_0007_attestor_tests.md b/docs-archived/implplan/SPRINT_5100_0009_0007_attestor_tests.md index 9177be798..683cedaa6 100644 --- a/docs-archived/implplan/SPRINT_5100_0009_0007_attestor_tests.md +++ b/docs-archived/implplan/SPRINT_5100_0009_0007_attestor_tests.md @@ -15,7 +15,7 @@ - Safe to run in parallel with: All other module test sprints (5100.0009.*). ## Documentation Prerequisites -- `docs/product-advisories/22-Dec-2026 - Better testing strategy.md` (Section 3.5 — Attestor + Signer + Provenance + Cryptography) +- `docs/product/advisories/22-Dec-2026 - Better testing strategy.md` (Section 3.5 — Attestor + Signer + Provenance + Cryptography) - `docs/testing/testing-strategy-models.md` (Models L0, W1) - `docs/testing/TEST_CATALOG.yml` (Attestor module requirements) diff --git a/docs-archived/implplan/SPRINT_5100_0009_0008_scheduler_tests.md b/docs-archived/implplan/SPRINT_5100_0009_0008_scheduler_tests.md index e2f7c3e35..eb6a4d051 100644 --- a/docs-archived/implplan/SPRINT_5100_0009_0008_scheduler_tests.md +++ b/docs-archived/implplan/SPRINT_5100_0009_0008_scheduler_tests.md @@ -15,7 +15,7 @@ - Safe to run in parallel with: All other module test sprints (5100.0009.*). ## Documentation Prerequisites -- `docs/product-advisories/22-Dec-2026 - Better testing strategy.md` (Section 3.8 — Scheduler + TaskRunner) +- `docs/product/advisories/22-Dec-2026 - Better testing strategy.md` (Section 3.8 — Scheduler + TaskRunner) - `docs/testing/testing-strategy-models.md` (Models L0, S1, W1, WK1) - `docs/testing/TEST_CATALOG.yml` (Scheduler module requirements) diff --git a/docs-archived/implplan/SPRINT_5100_0009_0009_notify_tests.md b/docs-archived/implplan/SPRINT_5100_0009_0009_notify_tests.md index e51054c62..44200aebe 100644 --- a/docs-archived/implplan/SPRINT_5100_0009_0009_notify_tests.md +++ b/docs-archived/implplan/SPRINT_5100_0009_0009_notify_tests.md @@ -16,7 +16,7 @@ - Safe to run in parallel with: All other module test sprints (5100.0009.*). ## Documentation Prerequisites -- `docs/product-advisories/22-Dec-2026 - Better testing strategy.md` (Section 3.10 — Notify/Notifier) +- `docs/product/advisories/22-Dec-2026 - Better testing strategy.md` (Section 3.10 — Notify/Notifier) - `docs/testing/testing-strategy-models.md` (Models L0, C1, S1, W1, WK1) - `docs/testing/TEST_CATALOG.yml` (Notify module requirements) diff --git a/docs-archived/implplan/SPRINT_5100_0009_0010_cli_tests.md b/docs-archived/implplan/SPRINT_5100_0009_0010_cli_tests.md index 7d04ca2ba..b3888958a 100644 --- a/docs-archived/implplan/SPRINT_5100_0009_0010_cli_tests.md +++ b/docs-archived/implplan/SPRINT_5100_0009_0010_cli_tests.md @@ -15,7 +15,7 @@ - Safe to run in parallel with: All other module test sprints (5100.0009.*). ## Documentation Prerequisites -- `docs/product-advisories/22-Dec-2026 - Better testing strategy.md` (Model CLI1) +- `docs/product/advisories/22-Dec-2026 - Better testing strategy.md` (Model CLI1) - `docs/testing/testing-strategy-models.md` (Model CLI1) - `docs/testing/TEST_CATALOG.yml` (CLI module requirements) diff --git a/docs-archived/implplan/SPRINT_5100_0009_0011_ui_tests.md b/docs-archived/implplan/SPRINT_5100_0009_0011_ui_tests.md index 6e094cb8b..28a452718 100644 --- a/docs-archived/implplan/SPRINT_5100_0009_0011_ui_tests.md +++ b/docs-archived/implplan/SPRINT_5100_0009_0011_ui_tests.md @@ -15,7 +15,7 @@ - Safe to run in parallel with: All other module test sprints (5100.0009.*). ## Documentation Prerequisites -- `docs/product-advisories/22-Dec-2026 - Better testing strategy.md` (Section 4 — Deployment & E2E Testing; Model W1 for APIs) +- `docs/product/advisories/22-Dec-2026 - Better testing strategy.md` (Section 4 — Deployment & E2E Testing; Model W1 for APIs) - `docs/testing/testing-strategy-models.md` (Model W1) - `docs/testing/TEST_CATALOG.yml` (UI module requirements) diff --git a/docs-archived/implplan/SPRINT_5100_0010_0001_evidencelocker_tests.md b/docs-archived/implplan/SPRINT_5100_0010_0001_evidencelocker_tests.md index cbdd76561..5aedd452f 100644 --- a/docs-archived/implplan/SPRINT_5100_0010_0001_evidencelocker_tests.md +++ b/docs-archived/implplan/SPRINT_5100_0010_0001_evidencelocker_tests.md @@ -16,7 +16,7 @@ - Safe to run in parallel with: All other module test sprints. ## Documentation Prerequisites -- `docs/product-advisories/22-Dec-2026 - Better testing strategy.md` (Section 3.6 — EvidenceLocker + Findings Ledger + Replay) +- `docs/product/advisories/22-Dec-2026 - Better testing strategy.md` (Section 3.6 — EvidenceLocker + Findings Ledger + Replay) - `docs/testing/testing-strategy-models.md` (Models L0, S1, W1, WK1) ## Delivery Tracker diff --git a/docs-archived/implplan/SPRINT_5100_0010_0002_graph_timeline_tests.md b/docs-archived/implplan/SPRINT_5100_0010_0002_graph_timeline_tests.md index 2165e4368..0e7ba9bcc 100644 --- a/docs-archived/implplan/SPRINT_5100_0010_0002_graph_timeline_tests.md +++ b/docs-archived/implplan/SPRINT_5100_0010_0002_graph_timeline_tests.md @@ -15,7 +15,7 @@ - Safe to run in parallel with: All other module test sprints. ## Documentation Prerequisites -- `docs/product-advisories/22-Dec-2026 - Better testing strategy.md` (Section 3.7 — Graph + TimelineIndexer) +- `docs/product/advisories/22-Dec-2026 - Better testing strategy.md` (Section 3.7 — Graph + TimelineIndexer) - `docs/testing/testing-strategy-models.md` (Models L0, S1, W1, WK1) ## Delivery Tracker diff --git a/docs-archived/implplan/SPRINT_5100_0010_0003_router_messaging_tests.md b/docs-archived/implplan/SPRINT_5100_0010_0003_router_messaging_tests.md index 17558f111..433852fae 100644 --- a/docs-archived/implplan/SPRINT_5100_0010_0003_router_messaging_tests.md +++ b/docs-archived/implplan/SPRINT_5100_0010_0003_router_messaging_tests.md @@ -15,7 +15,7 @@ - Safe to run in parallel with: All other module test sprints. ## Documentation Prerequisites -- `docs/product-advisories/22-Dec-2026 - Better testing strategy.md` (Section 3.9 — Router + Messaging) +- `docs/product/advisories/22-Dec-2026 - Better testing strategy.md` (Section 3.9 — Router + Messaging) - `docs/testing/testing-strategy-models.md` (Models L0, T1, W1, S1) ## Delivery Tracker diff --git a/docs-archived/implplan/SPRINT_5100_0010_0004_airgap_tests.md b/docs-archived/implplan/SPRINT_5100_0010_0004_airgap_tests.md index 1e5c9a6f5..ab7738548 100644 --- a/docs-archived/implplan/SPRINT_5100_0010_0004_airgap_tests.md +++ b/docs-archived/implplan/SPRINT_5100_0010_0004_airgap_tests.md @@ -16,7 +16,7 @@ - Safe to run in parallel with: All other module test sprints. ## Documentation Prerequisites -- `docs/product-advisories/22-Dec-2026 - Better testing strategy.md` (Section 3.11 — AirGap) +- `docs/product/advisories/22-Dec-2026 - Better testing strategy.md` (Section 3.11 — AirGap) - `docs/testing/testing-strategy-models.md` (Models L0, AN1, S1, W1, CLI1) ## Delivery Tracker diff --git a/docs-archived/implplan/SPRINT_5200_0001_0001_starter_policy_template.md b/docs-archived/implplan/SPRINT_5200_0001_0001_starter_policy_template.md index c12adf0b0..ce2587ce9 100644 --- a/docs-archived/implplan/SPRINT_5200_0001_0001_starter_policy_template.md +++ b/docs-archived/implplan/SPRINT_5200_0001_0001_starter_policy_template.md @@ -13,7 +13,7 @@ ## Documentation Prerequisites - `docs/modules/policy/architecture.md` -- `docs/product-advisories/archived/2025-12-21-reference-architecture/20-Dec-2025 - Stella Ops Reference Architecture.md` +- `docs/product/advisories/archived/2025-12-21-reference-architecture/20-Dec-2025 - Stella Ops Reference Architecture.md` - `docs/policy/dsl-reference.md` (if exists) --- diff --git a/docs-archived/implplan/SPRINT_6000_0002_0003_version_comparator_integration.md b/docs-archived/implplan/SPRINT_6000_0002_0003_version_comparator_integration.md index a3b316ba5..977903d8d 100644 --- a/docs-archived/implplan/SPRINT_6000_0002_0003_version_comparator_integration.md +++ b/docs-archived/implplan/SPRINT_6000_0002_0003_version_comparator_integration.md @@ -9,7 +9,7 @@ ## Advisory Reference -- **Source:** `docs/product-advisories/archived/22-Dec-2025 - Getting Distro Backport Logic Right.md` +- **Source:** `docs/product/advisories/archived/22-Dec-2025 - Getting Distro Backport Logic Right.md` - **Related Sprints:** - SPRINT_2000_0003_0001 (Alpine connector adds `ApkVersionComparer`) - SPRINT_4000_0002_0001 (UI consumes proof lines) @@ -24,7 +24,7 @@ - `src/Concelier/__Libraries/StellaOps.Concelier.Merge/Comparers/Nevra.cs` - `src/Concelier/__Libraries/StellaOps.Concelier.Merge/Comparers/DebianEvr.cs` -- `docs/product-advisories/archived/22-Dec-2025 - Getting Distro Backport Logic Right.md` +- `docs/product/advisories/archived/22-Dec-2025 - Getting Distro Backport Logic Right.md` --- @@ -247,7 +247,7 @@ Create comprehensive tests for proof-line generation. ## References -- Advisory: `docs/product-advisories/archived/22-Dec-2025 - Getting Distro Backport Logic Right.md` +- Advisory: `docs/product/advisories/archived/22-Dec-2025 - Getting Distro Backport Logic Right.md` - Existing comparers: `src/Concelier/__Libraries/StellaOps.Concelier.Merge/Comparers/` - SPRINT_6000_SUMMARY.md (notes on this sprint) diff --git a/docs-archived/implplan/SPRINT_6000_SUMMARY.md b/docs-archived/implplan/SPRINT_6000_SUMMARY.md index 8a4a80427..8f01b27bc 100644 --- a/docs-archived/implplan/SPRINT_6000_SUMMARY.md +++ b/docs-archived/implplan/SPRINT_6000_SUMMARY.md @@ -4,7 +4,7 @@ The 6000 series implements the **BinaryIndex** module - a vulnerable binaries database that enables detection of vulnerable code at the binary level, independent of package metadata. -**Advisory Source:** `docs/product-advisories/21-Dec-2025 - Mapping Evidence Within Compiled Binaries.md` +**Advisory Source:** `docs/product/advisories/21-Dec-2025 - Mapping Evidence Within Compiled Binaries.md` --- @@ -295,7 +295,7 @@ binaryindex: - Architecture: `docs/modules/binaryindex/architecture.md` - Schema: `docs/db/schemas/binaries_schema_specification.md` -- Advisory: `docs/product-advisories/21-Dec-2025 - Mapping Evidence Within Compiled Binaries.md` +- Advisory: `docs/product/advisories/21-Dec-2025 - Mapping Evidence Within Compiled Binaries.md` - Existing fingerprinting: `src/Scanner/__Libraries/StellaOps.Scanner.EntryTrace/Binary/` - Build-ID indexing: `src/Scanner/StellaOps.Scanner.Analyzers.Native/Index/` diff --git a/docs-archived/implplan/SPRINT_7000_0001_0001_competitive_benchmarking.md b/docs-archived/implplan/SPRINT_7000_0001_0001_competitive_benchmarking.md index ac2bd5f9a..1ffd51d60 100644 --- a/docs-archived/implplan/SPRINT_7000_0001_0001_competitive_benchmarking.md +++ b/docs-archived/implplan/SPRINT_7000_0001_0001_competitive_benchmarking.md @@ -263,4 +263,4 @@ public record NormalizedFinding( - `docs/07_HIGH_LEVEL_ARCHITECTURE.md` - `docs/modules/scanner/architecture.md` -- `docs/product-advisories/archived/*/19-Dec-2025 - Benchmarking Container Scanners Against Stella Ops.md` +- `docs/product/advisories/archived/*/19-Dec-2025 - Benchmarking Container Scanners Against Stella Ops.md` diff --git a/docs-archived/implplan/SPRINT_7000_0001_0003_explainability.md b/docs-archived/implplan/SPRINT_7000_0001_0003_explainability.md index f27cf9c91..28cd45ee7 100644 --- a/docs-archived/implplan/SPRINT_7000_0001_0003_explainability.md +++ b/docs-archived/implplan/SPRINT_7000_0001_0003_explainability.md @@ -323,4 +323,4 @@ This addresses the advisory gap: "No existing scanner answers #4." - `src/Scanner/__Libraries/StellaOps.Scanner.EntryTrace/Risk/AGENTS.md` - `docs/modules/scanner/architecture.md` -- `docs/product-advisories/archived/*/19-Dec-2025 - Benchmarking Container Scanners Against Stella Ops.md` (Section 4: Explainability) +- `docs/product/advisories/archived/*/19-Dec-2025 - Benchmarking Container Scanners Against Stella Ops.md` (Section 4: Explainability) diff --git a/docs-archived/implplan/SPRINT_7000_0001_0004_three_layer_reachability.md b/docs-archived/implplan/SPRINT_7000_0001_0004_three_layer_reachability.md index 8505df333..b68783ebd 100644 --- a/docs-archived/implplan/SPRINT_7000_0001_0004_three_layer_reachability.md +++ b/docs-archived/implplan/SPRINT_7000_0001_0004_three_layer_reachability.md @@ -367,4 +367,4 @@ This makes false positives "structurally impossible, not heuristically reduced." - `src/Scanner/__Libraries/StellaOps.Scanner.EntryTrace/Binary/` - `src/Scanner/__Libraries/StellaOps.Scanner.EntryTrace/Speculative/` - `docs/reachability/function-level-evidence.md` -- `docs/product-advisories/archived/*/19-Dec-2025 - Benchmarking Container Scanners Against Stella Ops.md` (Section 6: Call-Stack Reachability) +- `docs/product/advisories/archived/*/19-Dec-2025 - Benchmarking Container Scanners Against Stella Ops.md` (Section 6: Call-Stack Reachability) diff --git a/docs-archived/implplan/SPRINT_7000_0002_0001_unified_confidence_model.md b/docs-archived/implplan/SPRINT_7000_0002_0001_unified_confidence_model.md index b4ea42c4d..b64a1a5f4 100644 --- a/docs-archived/implplan/SPRINT_7000_0002_0001_unified_confidence_model.md +++ b/docs-archived/implplan/SPRINT_7000_0002_0001_unified_confidence_model.md @@ -16,7 +16,7 @@ ## Documentation Prerequisites -- `docs/product-advisories/21-Dec-2025 - Designing Explainable Triage Workflows.md` +- `docs/product/advisories/21-Dec-2025 - Designing Explainable Triage Workflows.md` - `src/Policy/__Libraries/StellaOps.Policy/Scoring/ScoreExplanation.cs` - `src/Policy/StellaOps.Policy.Engine/Vex/VexDecisionModels.cs` diff --git a/docs-archived/implplan/SPRINT_7000_0002_0002_vulnerability_first_ux_api.md b/docs-archived/implplan/SPRINT_7000_0002_0002_vulnerability_first_ux_api.md index 14193a71f..c8cc62be6 100644 --- a/docs-archived/implplan/SPRINT_7000_0002_0002_vulnerability_first_ux_api.md +++ b/docs-archived/implplan/SPRINT_7000_0002_0002_vulnerability_first_ux_api.md @@ -17,7 +17,7 @@ ## Documentation Prerequisites -- `docs/product-advisories/21-Dec-2025 - Designing Explainable Triage Workflows.md` +- `docs/product/advisories/21-Dec-2025 - Designing Explainable Triage Workflows.md` - SPRINT_7000_0002_0001 completion - `src/Findings/StellaOps.Findings.Ledger/Domain/DecisionModels.cs` diff --git a/docs-archived/implplan/SPRINT_7000_0003_0001_evidence_graph_api.md b/docs-archived/implplan/SPRINT_7000_0003_0001_evidence_graph_api.md index b69035311..af1c9cdd0 100644 --- a/docs-archived/implplan/SPRINT_7000_0003_0001_evidence_graph_api.md +++ b/docs-archived/implplan/SPRINT_7000_0003_0001_evidence_graph_api.md @@ -17,7 +17,7 @@ ## Documentation Prerequisites -- `docs/product-advisories/21-Dec-2025 - Designing Explainable Triage Workflows.md` +- `docs/product/advisories/21-Dec-2025 - Designing Explainable Triage Workflows.md` - `src/Attestor/__Libraries/StellaOps.Attestor.ProofChain/` --- diff --git a/docs-archived/implplan/SPRINT_7000_0003_0002_reachability_minimap_api.md b/docs-archived/implplan/SPRINT_7000_0003_0002_reachability_minimap_api.md index f2025f5b7..55af3b8de 100644 --- a/docs-archived/implplan/SPRINT_7000_0003_0002_reachability_minimap_api.md +++ b/docs-archived/implplan/SPRINT_7000_0003_0002_reachability_minimap_api.md @@ -16,7 +16,7 @@ ## Documentation Prerequisites -- `docs/product-advisories/21-Dec-2025 - Designing Explainable Triage Workflows.md` +- `docs/product/advisories/21-Dec-2025 - Designing Explainable Triage Workflows.md` - `src/Scanner/__Libraries/StellaOps.Scanner.Reachability/RichGraph.cs` - `src/Scanner/__Libraries/StellaOps.Scanner.Reachability/Witnesses/PathWitness.cs` diff --git a/docs-archived/implplan/SPRINT_7000_0003_0003_runtime_timeline_api.md b/docs-archived/implplan/SPRINT_7000_0003_0003_runtime_timeline_api.md index cfb777c3e..209bf41cf 100644 --- a/docs-archived/implplan/SPRINT_7000_0003_0003_runtime_timeline_api.md +++ b/docs-archived/implplan/SPRINT_7000_0003_0003_runtime_timeline_api.md @@ -16,7 +16,7 @@ ## Documentation Prerequisites -- `docs/product-advisories/21-Dec-2025 - Designing Explainable Triage Workflows.md` +- `docs/product/advisories/21-Dec-2025 - Designing Explainable Triage Workflows.md` - `src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Native/RuntimeCapture/` --- diff --git a/docs-archived/implplan/SPRINT_7000_0004_0001_progressive_fidelity.md b/docs-archived/implplan/SPRINT_7000_0004_0001_progressive_fidelity.md index 6f2bf94b8..4ea764c50 100644 --- a/docs-archived/implplan/SPRINT_7000_0004_0001_progressive_fidelity.md +++ b/docs-archived/implplan/SPRINT_7000_0004_0001_progressive_fidelity.md @@ -17,7 +17,7 @@ ## Documentation Prerequisites -- `docs/product-advisories/21-Dec-2025 - Designing Explainable Triage Workflows.md` +- `docs/product/advisories/21-Dec-2025 - Designing Explainable Triage Workflows.md` - `src/Scanner/StellaOps.Scanner.WebService/` --- diff --git a/docs-archived/implplan/SPRINT_7000_0004_0002_evidence_size_budgets.md b/docs-archived/implplan/SPRINT_7000_0004_0002_evidence_size_budgets.md index c34935383..5358172f6 100644 --- a/docs-archived/implplan/SPRINT_7000_0004_0002_evidence_size_budgets.md +++ b/docs-archived/implplan/SPRINT_7000_0004_0002_evidence_size_budgets.md @@ -17,7 +17,7 @@ ## Documentation Prerequisites -- `docs/product-advisories/21-Dec-2025 - Designing Explainable Triage Workflows.md` +- `docs/product/advisories/21-Dec-2025 - Designing Explainable Triage Workflows.md` - `docs/24_OFFLINE_KIT.md` --- diff --git a/docs-archived/implplan/SPRINT_7000_0005_0001_quality_kpis_tracking.md b/docs-archived/implplan/SPRINT_7000_0005_0001_quality_kpis_tracking.md index b37615069..d06a347a3 100644 --- a/docs-archived/implplan/SPRINT_7000_0005_0001_quality_kpis_tracking.md +++ b/docs-archived/implplan/SPRINT_7000_0005_0001_quality_kpis_tracking.md @@ -19,7 +19,7 @@ ## Documentation Prerequisites -- `docs/product-advisories/21-Dec-2025 - Designing Explainable Triage Workflows.md` +- `docs/product/advisories/21-Dec-2025 - Designing Explainable Triage Workflows.md` --- diff --git a/docs-archived/implplan/SPRINT_7000_SUMMARY.md b/docs-archived/implplan/SPRINT_7000_SUMMARY.md index a43c02b0a..435e02e38 100644 --- a/docs-archived/implplan/SPRINT_7000_SUMMARY.md +++ b/docs-archived/implplan/SPRINT_7000_SUMMARY.md @@ -12,8 +12,8 @@ Epic 7000 encompasses two major capability sets: **Total Sprints**: 12 **Total Tasks**: 68 **Source Advisories**: -- `docs/product-advisories/archived/19-Dec-2025 - Benchmarking Container Scanners Against Stella Ops.md` -- `docs/product-advisories/archived/21-Dec-2025 - Designing Explainable Triage Workflows.md` +- `docs/product/advisories/archived/19-Dec-2025 - Benchmarking Container Scanners Against Stella Ops.md` +- `docs/product/advisories/archived/21-Dec-2025 - Designing Explainable Triage Workflows.md` --- diff --git a/docs-archived/implplan/SPRINT_7100_0001_0001_trust_vector_foundation.md b/docs-archived/implplan/SPRINT_7100_0001_0001_trust_vector_foundation.md index 6a7c89f8d..2b7d210ea 100644 --- a/docs-archived/implplan/SPRINT_7100_0001_0001_trust_vector_foundation.md +++ b/docs-archived/implplan/SPRINT_7100_0001_0001_trust_vector_foundation.md @@ -12,7 +12,7 @@ - **Safe to parallelize with**: Unrelated epics ## Documentation Prerequisites -- `docs/product-advisories/archived/22-Dec-2026 - Building a Trust Lattice for VEX Sources.md` +- `docs/product/advisories/archived/22-Dec-2026 - Building a Trust Lattice for VEX Sources.md` - `docs/modules/excititor/architecture.md` - `docs/modules/excititor/scoring.md` diff --git a/docs-archived/implplan/SPRINT_7100_0001_0002_verdict_manifest_replay.md b/docs-archived/implplan/SPRINT_7100_0001_0002_verdict_manifest_replay.md index 7acd13228..3c799ab73 100644 --- a/docs-archived/implplan/SPRINT_7100_0001_0002_verdict_manifest_replay.md +++ b/docs-archived/implplan/SPRINT_7100_0001_0002_verdict_manifest_replay.md @@ -12,7 +12,7 @@ - **Safe to parallelize with**: Sprint 7100.0002.0001 (Policy Gates) ## Documentation Prerequisites -- `docs/product-advisories/archived/22-Dec-2026 - Building a Trust Lattice for VEX Sources.md` +- `docs/product/advisories/archived/22-Dec-2026 - Building a Trust Lattice for VEX Sources.md` - `docs/modules/authority/architecture.md` - `docs/modules/excititor/architecture.md` - `src/Attestor/__Libraries/StellaOps.Attestor.Dsse/` (DSSE implementation) diff --git a/docs-archived/implplan/SPRINT_7100_0002_0001_policy_gates_merge.md b/docs-archived/implplan/SPRINT_7100_0002_0001_policy_gates_merge.md index ef282f2f6..91c62733c 100644 --- a/docs-archived/implplan/SPRINT_7100_0002_0001_policy_gates_merge.md +++ b/docs-archived/implplan/SPRINT_7100_0002_0001_policy_gates_merge.md @@ -12,7 +12,7 @@ - **Safe to parallelize with**: Sprint 7100.0001.0002 (Verdict Manifest) ## Documentation Prerequisites -- `docs/product-advisories/archived/22-Dec-2026 - Building a Trust Lattice for VEX Sources.md` +- `docs/product/advisories/archived/22-Dec-2026 - Building a Trust Lattice for VEX Sources.md` - `docs/modules/policy/architecture.md` - `src/Policy/__Libraries/StellaOps.Policy/TrustLattice/TrustLatticeEngine.cs` diff --git a/docs-archived/implplan/SPRINT_7100_0002_0002_source_defaults_calibration.md b/docs-archived/implplan/SPRINT_7100_0002_0002_source_defaults_calibration.md index 1760e0808..78c690306 100644 --- a/docs-archived/implplan/SPRINT_7100_0002_0002_source_defaults_calibration.md +++ b/docs-archived/implplan/SPRINT_7100_0002_0002_source_defaults_calibration.md @@ -12,7 +12,7 @@ - **Safe to parallelize with**: Sprint 7100.0003.0001 (UI) ## Documentation Prerequisites -- `docs/product-advisories/archived/22-Dec-2026 - Building a Trust Lattice for VEX Sources.md` +- `docs/product/advisories/archived/22-Dec-2026 - Building a Trust Lattice for VEX Sources.md` - `docs/modules/excititor/architecture.md` - `docs/modules/excititor/scoring.md` diff --git a/docs-archived/implplan/SPRINT_7100_0003_0001_ui_trust_algebra.md b/docs-archived/implplan/SPRINT_7100_0003_0001_ui_trust_algebra.md index 4ae4eaf9a..d2e94bdfa 100644 --- a/docs-archived/implplan/SPRINT_7100_0003_0001_ui_trust_algebra.md +++ b/docs-archived/implplan/SPRINT_7100_0003_0001_ui_trust_algebra.md @@ -12,7 +12,7 @@ - **Safe to parallelize with**: Sprint 7100.0002.0002 (Calibration) ## Documentation Prerequisites -- `docs/product-advisories/archived/22-Dec-2026 - Building a Trust Lattice for VEX Sources.md` +- `docs/product/advisories/archived/22-Dec-2026 - Building a Trust Lattice for VEX Sources.md` - Angular v17 best practices - Existing vulnerability detail views in `src/Web/StellaOps.Web/` diff --git a/docs-archived/implplan/SPRINT_7100_0003_0002_integration_documentation.md b/docs-archived/implplan/SPRINT_7100_0003_0002_integration_documentation.md index 27ed5aad8..9302cf906 100644 --- a/docs-archived/implplan/SPRINT_7100_0003_0002_integration_documentation.md +++ b/docs-archived/implplan/SPRINT_7100_0003_0002_integration_documentation.md @@ -13,7 +13,7 @@ ## Documentation Prerequisites - All prior sprint deliverables completed -- `docs/product-advisories/archived/22-Dec-2026 - Building a Trust Lattice for VEX Sources.md` +- `docs/product/advisories/archived/22-Dec-2026 - Building a Trust Lattice for VEX Sources.md` --- @@ -339,7 +339,7 @@ Before marking this sprint complete: - [ ] E2E tests pass in CI pipeline - [ ] Sample configs tested in development environment - [ ] Training materials reviewed by support team -- [ ] Advisory archived to `docs/product-advisories/archived/` +- [ ] Advisory archived to `docs/product/advisories/archived/` --- diff --git a/docs-archived/implplan/SPRINT_7100_SUMMARY.md b/docs-archived/implplan/SPRINT_7100_SUMMARY.md index 4fb2525fb..f0ae2bca8 100644 --- a/docs-archived/implplan/SPRINT_7100_SUMMARY.md +++ b/docs-archived/implplan/SPRINT_7100_SUMMARY.md @@ -4,7 +4,7 @@ **Total Duration**: 12 weeks (6 sprints) **Status**: COMPLETE (6/6 sprints done) **Last Updated**: 2025-12-23 -**Source Advisory**: `docs/product-advisories/archived/22-Dec-2026 - Building a Trust Lattice for VEX Sources.md` +**Source Advisory**: `docs/product/advisories/archived/22-Dec-2026 - Building a Trust Lattice for VEX Sources.md` --- @@ -261,7 +261,7 @@ Where: - [Excititor Architecture](../modules/excititor/architecture.md) **Source Advisory**: -- [22-Dec-2026 - Building a Trust Lattice for VEX Sources](../product-advisories/archived/22-Dec-2026%20-%20Building%20a%20Trust%20Lattice%20for%20VEX%20Sources.md) +- [22-Dec-2026 - Building a Trust Lattice for VEX Sources](../product/advisories/archived/22-Dec-2026%20-%20Building%20a%20Trust%20Lattice%20for%20VEX%20Sources.md) --- diff --git a/docs-archived/implplan/SPRINT_7200_0001_0001_proof_moat_foundation.md b/docs-archived/implplan/SPRINT_7200_0001_0001_proof_moat_foundation.md index 41617535d..496c4d857 100644 --- a/docs-archived/implplan/SPRINT_7200_0001_0001_proof_moat_foundation.md +++ b/docs-archived/implplan/SPRINT_7200_0001_0001_proof_moat_foundation.md @@ -687,7 +687,7 @@ Create documentation for cryptography and proof system. - `docs/modules/platform/proof-driven-moats-architecture.md` - `docs/modules/cryptography/multi-profile-signing-specification.md` - `docs/db/schemas/proof-system-schema.sql` -- `docs/product-advisories/23-Dec-2026 - Proof‑Driven Moats Stella Ops Can Ship.md` +- `docs/product/advisories/23-Dec-2026 - Proof‑Driven Moats Stella Ops Can Ship.md` --- diff --git a/docs-archived/implplan/SPRINT_8200_0012_0001_evidence_weighted_score_core.md b/docs-archived/implplan/SPRINT_8200_0012_0001_evidence_weighted_score_core.md index 977a710c0..ba7d5699c 100644 --- a/docs-archived/implplan/SPRINT_8200_0012_0001_evidence_weighted_score_core.md +++ b/docs-archived/implplan/SPRINT_8200_0012_0001_evidence_weighted_score_core.md @@ -29,7 +29,7 @@ This sprint delivers: ## Documentation Prerequisites -- `docs/product-advisories/evidence-weighted-score-blueprint.md` (this advisory) +- `docs/product/advisories/evidence-weighted-score-blueprint.md` (this advisory) - `docs/modules/signals/architecture.md` (to be created) - `docs/modules/policy/architecture.md` (existing confidence scoring context) diff --git a/docs-archived/implplan/SPRINT_8200_REPRODUCIBILITY_EPIC_SUMMARY.md b/docs-archived/implplan/SPRINT_8200_REPRODUCIBILITY_EPIC_SUMMARY.md index 4ead3389a..0c0a8d9d1 100644 --- a/docs-archived/implplan/SPRINT_8200_REPRODUCIBILITY_EPIC_SUMMARY.md +++ b/docs-archived/implplan/SPRINT_8200_REPRODUCIBILITY_EPIC_SUMMARY.md @@ -237,7 +237,7 @@ This epic implements the reproducibility, verifiability, and audit-readiness req ## Related Documents -- [Product Advisory Analysis](../product-advisories/) — Original gap analysis +- [Product Advisory Analysis](../product/advisories/) — Original gap analysis - [Reproducibility Specification](../reproducibility.md) — Verdict ID formula and replay procedure - [Determinism Verification](../testing/determinism-verification.md) — Existing determinism infrastructure - [Attestor Module](../modules/attestor/README.md) — DSSE and attestation architecture diff --git a/docs-archived/implplan/SPRINT_9100_0000_0000_deterministic_resolver_index.md b/docs-archived/implplan/SPRINT_9100_0000_0000_deterministic_resolver_index.md index 4c0e46c73..44e289ccb 100644 --- a/docs-archived/implplan/SPRINT_9100_0000_0000_deterministic_resolver_index.md +++ b/docs-archived/implplan/SPRINT_9100_0000_0000_deterministic_resolver_index.md @@ -6,7 +6,7 @@ This document serves as the master index for the Deterministic Resolver implemen **Epoch:** 9100 **Start Date:** 2025-12-24 -**Advisory:** `docs/product-advisories/24-Dec-2025 - Deterministic Resolver Architecture.md` +**Advisory:** `docs/product/advisories/24-Dec-2025 - Deterministic Resolver Architecture.md` --- diff --git a/docs-archived/implplan/SPRINT_9100_0001_0001_LB_resolver_core.md b/docs-archived/implplan/SPRINT_9100_0001_0001_LB_resolver_core.md index c600ab5a3..84072e2f5 100644 --- a/docs-archived/implplan/SPRINT_9100_0001_0001_LB_resolver_core.md +++ b/docs-archived/implplan/SPRINT_9100_0001_0001_LB_resolver_core.md @@ -14,7 +14,7 @@ - Safe to run in parallel with: Sprint 9100.0003.0001 (Runtime Purity). ## Documentation Prerequisites -- `docs/product-advisories/24-Dec-2025 - Deterministic Resolver Architecture.md` +- `docs/product/advisories/24-Dec-2025 - Deterministic Resolver Architecture.md` - `src/Scanner/__Libraries/StellaOps.Scanner.Reachability/Ordering/DeterministicGraphOrderer.cs` - `src/Policy/__Libraries/StellaOps.Policy/TrustLattice/K4Lattice.cs` - `src/__Libraries/StellaOps.Canonicalization/Json/CanonicalJsonSerializer.cs` diff --git a/docs-archived/implplan/SPRINT_9100_0001_0002_LB_cycle_cut_edges.md b/docs-archived/implplan/SPRINT_9100_0001_0002_LB_cycle_cut_edges.md index 92e275f02..ab0f4bab5 100644 --- a/docs-archived/implplan/SPRINT_9100_0001_0002_LB_cycle_cut_edges.md +++ b/docs-archived/implplan/SPRINT_9100_0001_0002_LB_cycle_cut_edges.md @@ -14,7 +14,7 @@ - Safe to run in parallel with: Sprint 9100.0002.* (Digest sprints). ## Documentation Prerequisites -- `docs/product-advisories/24-Dec-2025 - Deterministic Resolver Architecture.md` (Section: Cycle-Cut Edges) +- `docs/product/advisories/24-Dec-2025 - Deterministic Resolver Architecture.md` (Section: Cycle-Cut Edges) - `src/Scanner/__Libraries/StellaOps.Scanner.Reachability/Ordering/DeterministicGraphOrderer.cs` ## Delivery Tracker diff --git a/docs-archived/implplan/SPRINT_9100_0001_0003_LB_edge_content_addressing.md b/docs-archived/implplan/SPRINT_9100_0001_0003_LB_edge_content_addressing.md index 827f89e79..b1c879d26 100644 --- a/docs-archived/implplan/SPRINT_9100_0001_0003_LB_edge_content_addressing.md +++ b/docs-archived/implplan/SPRINT_9100_0001_0003_LB_edge_content_addressing.md @@ -13,7 +13,7 @@ - Safe to run in parallel with: Sprint 9100.0002.* (Digest sprints). ## Documentation Prerequisites -- `docs/product-advisories/24-Dec-2025 - Deterministic Resolver Architecture.md` (Section: Edge Key Computation) +- `docs/product/advisories/24-Dec-2025 - Deterministic Resolver Architecture.md` (Section: Edge Key Computation) - `src/Attestor/__Libraries/StellaOps.Attestor.ProofChain/Identifiers/ContentAddressedId.cs` ## Delivery Tracker diff --git a/docs-archived/implplan/SPRINT_9100_0002_0001_ATTESTOR_final_digest.md b/docs-archived/implplan/SPRINT_9100_0002_0001_ATTESTOR_final_digest.md index 1c890456b..9d5e25d36 100644 --- a/docs-archived/implplan/SPRINT_9100_0002_0001_ATTESTOR_final_digest.md +++ b/docs-archived/implplan/SPRINT_9100_0002_0001_ATTESTOR_final_digest.md @@ -14,7 +14,7 @@ - Safe to run in parallel with: Sprint 9100.0001.0002, Sprint 9100.0001.0003. ## Documentation Prerequisites -- `docs/product-advisories/24-Dec-2025 - Deterministic Resolver Architecture.md` (Section: FinalDigest) +- `docs/product/advisories/24-Dec-2025 - Deterministic Resolver Architecture.md` (Section: FinalDigest) - `src/__Libraries/StellaOps.Canonicalization/Json/CanonicalJsonSerializer.cs` - `docs/modules/attestor/proof-chain-specification.md` diff --git a/docs-archived/implplan/SPRINT_9100_0002_0002_LB_verdict_digest.md b/docs-archived/implplan/SPRINT_9100_0002_0002_LB_verdict_digest.md index f8ecf7354..c74d8f893 100644 --- a/docs-archived/implplan/SPRINT_9100_0002_0002_LB_verdict_digest.md +++ b/docs-archived/implplan/SPRINT_9100_0002_0002_LB_verdict_digest.md @@ -14,7 +14,7 @@ - Safe to run in parallel with: Sprint 9100.0003.*. ## Documentation Prerequisites -- `docs/product-advisories/24-Dec-2025 - Deterministic Resolver Architecture.md` (Section: Per-Node VerdictDigest) +- `docs/product/advisories/24-Dec-2025 - Deterministic Resolver Architecture.md` (Section: Per-Node VerdictDigest) - `src/__Libraries/StellaOps.Canonicalization/Json/CanonicalJsonSerializer.cs` ## Delivery Tracker diff --git a/docs-archived/implplan/SPRINT_9100_0003_0001_POLICY_runtime_purity.md b/docs-archived/implplan/SPRINT_9100_0003_0001_POLICY_runtime_purity.md index 3dcc51566..be54f501d 100644 --- a/docs-archived/implplan/SPRINT_9100_0003_0001_POLICY_runtime_purity.md +++ b/docs-archived/implplan/SPRINT_9100_0003_0001_POLICY_runtime_purity.md @@ -13,7 +13,7 @@ - Safe to run in parallel with: Sprint 9100.0002.* (Digest sprints). ## Documentation Prerequisites -- `docs/product-advisories/24-Dec-2025 - Deterministic Resolver Architecture.md` (Section: Evidence-Only Evaluation) +- `docs/product/advisories/24-Dec-2025 - Deterministic Resolver Architecture.md` (Section: Evidence-Only Evaluation) - `src/Policy/StellaOps.Policy.Engine/DeterminismGuard/ProhibitedPatternAnalyzer.cs` - `src/Policy/StellaOps.Policy.Engine/Evaluation/PolicyEvaluationContext.cs` diff --git a/docs-archived/implplan/SPRINT_9100_0003_0002_LB_validation_nfc.md b/docs-archived/implplan/SPRINT_9100_0003_0002_LB_validation_nfc.md index b26d4f56b..0426ff8be 100644 --- a/docs-archived/implplan/SPRINT_9100_0003_0002_LB_validation_nfc.md +++ b/docs-archived/implplan/SPRINT_9100_0003_0002_LB_validation_nfc.md @@ -14,7 +14,7 @@ - Safe to run in parallel with: Sprint 9100.0002.*. ## Documentation Prerequisites -- `docs/product-advisories/24-Dec-2025 - Deterministic Resolver Architecture.md` (Section: Graph Validation, NFC) +- `docs/product/advisories/24-Dec-2025 - Deterministic Resolver Architecture.md` (Section: Graph Validation, NFC) - `src/__Libraries/StellaOps.Canonicalization/Json/CanonicalJsonSerializer.cs` ## Delivery Tracker diff --git a/docs-archived/implplan/sprint_3200/README.md b/docs-archived/implplan/sprint_3200/README.md index 44436c38d..5fcc699bb 100644 --- a/docs-archived/implplan/sprint_3200/README.md +++ b/docs-archived/implplan/sprint_3200/README.md @@ -256,7 +256,7 @@ docs/implplan/archived/sprint_3200/ (this archive) ### Advisory -- [Original Advisory (Archived)](../../../product-advisories/archived/23-Dec-2026%20-%20Distinctive%20Edge%20for%20Docker%20Scanning.md) +- [Original Advisory (Archived)](../../../product/advisories/archived/23-Dec-2026%20-%20Distinctive%20Edge%20for%20Docker%20Scanning.md) --- diff --git a/docs-archived/implplan/sprint_3200/SPRINT_3200_0000_0000_attestation_ecosystem_interop.md b/docs-archived/implplan/sprint_3200/SPRINT_3200_0000_0000_attestation_ecosystem_interop.md index 097a4614d..324524e9f 100644 --- a/docs-archived/implplan/sprint_3200/SPRINT_3200_0000_0000_attestation_ecosystem_interop.md +++ b/docs-archived/implplan/sprint_3200/SPRINT_3200_0000_0000_attestation_ecosystem_interop.md @@ -5,7 +5,7 @@ > **Epic:** Attestor + Scanner + CLI Integration > **Priority:** CRITICAL > **Owner:** Attestor, Scanner, CLI & Docs Guilds -> **Advisory Origin:** `docs/product-advisories/23-Dec-2026 - Distinctive Edge for Docker Scanning.md` +> **Advisory Origin:** `docs/product/advisories/23-Dec-2026 - Distinctive Edge for Docker Scanning.md` --- @@ -399,7 +399,7 @@ All attestation operations include structured logging: ## References ### Advisory -- `docs/product-advisories/23-Dec-2026 - Distinctive Edge for Docker Scanning.md` +- `docs/product/advisories/23-Dec-2026 - Distinctive Edge for Docker Scanning.md` ### Gap Analysis - `docs/implplan/analysis/3200_attestation_ecosystem_gap_analysis.md` diff --git a/docs-archived/implplan/sprint_3200/SPRINT_3200_IMPLEMENTATION_STATUS.md b/docs-archived/implplan/sprint_3200/SPRINT_3200_IMPLEMENTATION_STATUS.md index af0b302a3..c245defbc 100644 --- a/docs-archived/implplan/sprint_3200/SPRINT_3200_IMPLEMENTATION_STATUS.md +++ b/docs-archived/implplan/sprint_3200/SPRINT_3200_IMPLEMENTATION_STATUS.md @@ -492,7 +492,7 @@ attestations/ - [Sigstore Documentation](https://docs.sigstore.dev/) ### Advisory -- [Original Advisory](../product-advisories/23-Dec-2026 - Distinctive Edge for Docker Scanning.md) +- [Original Advisory](../product/advisories/23-Dec-2026 - Distinctive Edge for Docker Scanning.md) --- diff --git a/docs-archived/implplan/sprint_5100_phase_0_1_completed/SPRINT_5100_0001_0001_run_manifest_schema.md b/docs-archived/implplan/sprint_5100_phase_0_1_completed/SPRINT_5100_0001_0001_run_manifest_schema.md index cc39b9f74..1c4c1332b 100644 --- a/docs-archived/implplan/sprint_5100_phase_0_1_completed/SPRINT_5100_0001_0001_run_manifest_schema.md +++ b/docs-archived/implplan/sprint_5100_phase_0_1_completed/SPRINT_5100_0001_0001_run_manifest_schema.md @@ -15,7 +15,7 @@ ## Documentation Prerequisites -- `docs/product-advisories/20-Dec-2025 - Testing strategy.md` +- `docs/product/advisories/20-Dec-2025 - Testing strategy.md` - `docs/07_HIGH_LEVEL_ARCHITECTURE.md` - `docs/modules/scanner/architecture.md` diff --git a/docs-archived/implplan/sprint_5100_phase_0_1_completed/SPRINT_5100_0001_0002_evidence_index_schema.md b/docs-archived/implplan/sprint_5100_phase_0_1_completed/SPRINT_5100_0001_0002_evidence_index_schema.md index 2116a348e..6c42c6ec9 100644 --- a/docs-archived/implplan/sprint_5100_phase_0_1_completed/SPRINT_5100_0001_0002_evidence_index_schema.md +++ b/docs-archived/implplan/sprint_5100_phase_0_1_completed/SPRINT_5100_0001_0002_evidence_index_schema.md @@ -15,9 +15,9 @@ ## Documentation Prerequisites -- `docs/product-advisories/20-Dec-2025 - Testing strategy.md` +- `docs/product/advisories/20-Dec-2025 - Testing strategy.md` - `docs/modules/attestor/architecture.md` -- `docs/product-advisories/18-Dec-2025 - Designing Explainable Triage and Proof-Linked Evidence.md` +- `docs/product/advisories/18-Dec-2025 - Designing Explainable Triage and Proof-Linked Evidence.md` --- diff --git a/docs-archived/implplan/sprint_5100_phase_0_1_completed/SPRINT_5100_0001_0003_offline_bundle_manifest.md b/docs-archived/implplan/sprint_5100_phase_0_1_completed/SPRINT_5100_0001_0003_offline_bundle_manifest.md index 9b6699a7c..f2f7b47d7 100644 --- a/docs-archived/implplan/sprint_5100_phase_0_1_completed/SPRINT_5100_0001_0003_offline_bundle_manifest.md +++ b/docs-archived/implplan/sprint_5100_phase_0_1_completed/SPRINT_5100_0001_0003_offline_bundle_manifest.md @@ -15,7 +15,7 @@ ## Documentation Prerequisites -- `docs/product-advisories/20-Dec-2025 - Testing strategy.md` +- `docs/product/advisories/20-Dec-2025 - Testing strategy.md` - `docs/24_OFFLINE_KIT.md` - `docs/modules/airgap/architecture.md` diff --git a/docs-archived/implplan/sprint_5100_phase_0_1_completed/SPRINT_5100_0001_0004_golden_corpus_expansion.md b/docs-archived/implplan/sprint_5100_phase_0_1_completed/SPRINT_5100_0001_0004_golden_corpus_expansion.md index 5755aff7d..59d0112c6 100644 --- a/docs-archived/implplan/sprint_5100_phase_0_1_completed/SPRINT_5100_0001_0004_golden_corpus_expansion.md +++ b/docs-archived/implplan/sprint_5100_phase_0_1_completed/SPRINT_5100_0001_0004_golden_corpus_expansion.md @@ -15,7 +15,7 @@ ## Documentation Prerequisites -- `docs/product-advisories/20-Dec-2025 - Testing strategy.md` +- `docs/product/advisories/20-Dec-2025 - Testing strategy.md` - `docs/implplan/archived/SPRINT_3500_0004_0003_integration_tests_corpus.md` (existing corpus) - `bench/golden-corpus/README.md` diff --git a/docs-archived/implplan/sprint_5100_phase_0_1_completed/SPRINT_5100_0002_0001_canonicalization_utilities.md b/docs-archived/implplan/sprint_5100_phase_0_1_completed/SPRINT_5100_0002_0001_canonicalization_utilities.md index 720c781b2..7f5c0aa33 100644 --- a/docs-archived/implplan/sprint_5100_phase_0_1_completed/SPRINT_5100_0002_0001_canonicalization_utilities.md +++ b/docs-archived/implplan/sprint_5100_phase_0_1_completed/SPRINT_5100_0002_0001_canonicalization_utilities.md @@ -16,8 +16,8 @@ ## Documentation Prerequisites -- `docs/product-advisories/20-Dec-2025 - Testing strategy.md` -- `docs/product-advisories/21-Dec-2025 - Smart Diff - Reproducibility as a Feature.md` +- `docs/product/advisories/20-Dec-2025 - Testing strategy.md` +- `docs/product/advisories/21-Dec-2025 - Smart Diff - Reproducibility as a Feature.md` --- diff --git a/docs-archived/implplan/sprint_5100_phase_0_1_completed/SPRINT_5100_0002_0002_replay_runner_service.md b/docs-archived/implplan/sprint_5100_phase_0_1_completed/SPRINT_5100_0002_0002_replay_runner_service.md index f67c9e9ae..d1ccfb963 100644 --- a/docs-archived/implplan/sprint_5100_phase_0_1_completed/SPRINT_5100_0002_0002_replay_runner_service.md +++ b/docs-archived/implplan/sprint_5100_phase_0_1_completed/SPRINT_5100_0002_0002_replay_runner_service.md @@ -16,8 +16,8 @@ ## Documentation Prerequisites -- `docs/product-advisories/20-Dec-2025 - Testing strategy.md` -- `docs/product-advisories/21-Dec-2025 - Smart Diff - Reproducibility as a Feature.md` +- `docs/product/advisories/20-Dec-2025 - Testing strategy.md` +- `docs/product/advisories/21-Dec-2025 - Smart Diff - Reproducibility as a Feature.md` - Sprint 5100.0001.0001 completion --- diff --git a/docs-archived/implplan/sprint_5100_phase_0_1_completed/SPRINT_5100_0002_0003_delta_verdict_generator.md b/docs-archived/implplan/sprint_5100_phase_0_1_completed/SPRINT_5100_0002_0003_delta_verdict_generator.md index 7dccb6a2a..436c825e1 100644 --- a/docs-archived/implplan/sprint_5100_phase_0_1_completed/SPRINT_5100_0002_0003_delta_verdict_generator.md +++ b/docs-archived/implplan/sprint_5100_phase_0_1_completed/SPRINT_5100_0002_0003_delta_verdict_generator.md @@ -16,9 +16,9 @@ ## Documentation Prerequisites -- `docs/product-advisories/20-Dec-2025 - Testing strategy.md` -- `docs/product-advisories/21-Dec-2025 - Smart Diff - Reproducibility as a Feature.md` -- `docs/product-advisories/20-Dec-2025 - Moat Explanation - Risk Budgets and Diff-Aware Release Gates.md` +- `docs/product/advisories/20-Dec-2025 - Testing strategy.md` +- `docs/product/advisories/21-Dec-2025 - Smart Diff - Reproducibility as a Feature.md` +- `docs/product/advisories/20-Dec-2025 - Moat Explanation - Risk Budgets and Diff-Aware Release Gates.md` --- diff --git a/docs-archived/implplan/sprints/20251226/SPRINT_20251226_001_SIGNER_fulcio_keyless_client.md b/docs-archived/implplan/sprints/20251226/SPRINT_20251226_001_SIGNER_fulcio_keyless_client.md index ed1a6445d..36d2674d0 100644 --- a/docs-archived/implplan/sprints/20251226/SPRINT_20251226_001_SIGNER_fulcio_keyless_client.md +++ b/docs-archived/implplan/sprints/20251226/SPRINT_20251226_001_SIGNER_fulcio_keyless_client.md @@ -433,8 +433,8 @@ public void KeylessSigning_SignatureDeterminism_SameKeyPair( ## Related Documents -- **Parent Advisory:** `docs/product-advisories/25-Dec-2025 - Planning Keyless Signing for Verdicts.md` -- **Related Advisory:** `docs/product-advisories/25-Dec-2025 - Building a Deterministic Verdict Engine.md` +- **Parent Advisory:** `docs/product/advisories/25-Dec-2025 - Planning Keyless Signing for Verdicts.md` +- **Related Advisory:** `docs/product/advisories/25-Dec-2025 - Building a Deterministic Verdict Engine.md` - **Signer Architecture:** `docs/modules/signer/architecture.md` - **Attestor Architecture:** `docs/modules/attestor/architecture.md` - **Successor Sprint:** `SPRINT_20251226_002_ATTESTOR_bundle_rotation.md` diff --git a/docs-archived/implplan/sprints/20251226/SPRINT_20251226_003_BE_exception_approval.md b/docs-archived/implplan/sprints/20251226/SPRINT_20251226_003_BE_exception_approval.md index ef46ab466..1cae4a10f 100644 --- a/docs-archived/implplan/sprints/20251226/SPRINT_20251226_003_BE_exception_approval.md +++ b/docs-archived/implplan/sprints/20251226/SPRINT_20251226_003_BE_exception_approval.md @@ -16,7 +16,7 @@ ## Documentation Prerequisites - `docs/modules/policy/architecture.md` - `docs/modules/authority/architecture.md` -- `docs/product-advisories/26-Dec-2026 - Diff-Aware Releases and Auditable Exceptions.md` +- `docs/product/advisories/26-Dec-2026 - Diff-Aware Releases and Auditable Exceptions.md` ## Delivery Tracker | # | Task ID | Status | Key dependency / next step | Owners | Task Definition | diff --git a/docs-archived/implplan/sprints/SPRINT_20251226_004_BE_cicd_signing_templates.md b/docs-archived/implplan/sprints/SPRINT_20251226_004_BE_cicd_signing_templates.md index ec34ae465..e2fe623f1 100644 --- a/docs-archived/implplan/sprints/SPRINT_20251226_004_BE_cicd_signing_templates.md +++ b/docs-archived/implplan/sprints/SPRINT_20251226_004_BE_cicd_signing_templates.md @@ -616,7 +616,7 @@ tests/cicd-templates/ ## Related Documents -- **Parent Advisory:** `docs/product-advisories/25-Dec-2025 - Planning Keyless Signing for Verdicts.md` +- **Parent Advisory:** `docs/product/advisories/25-Dec-2025 - Planning Keyless Signing for Verdicts.md` - **Predecessor Sprints:** - `SPRINT_20251226_001_SIGNER_fulcio_keyless_client.md` - `SPRINT_20251226_002_ATTESTOR_bundle_rotation.md` diff --git a/docs-archived/implplan/sprints/SPRINT_20251226_004_FE_risk_dashboard.md b/docs-archived/implplan/sprints/SPRINT_20251226_004_FE_risk_dashboard.md index 9a0767361..51f395e2a 100644 --- a/docs-archived/implplan/sprints/SPRINT_20251226_004_FE_risk_dashboard.md +++ b/docs-archived/implplan/sprints/SPRINT_20251226_004_FE_risk_dashboard.md @@ -15,8 +15,8 @@ ## Documentation Prerequisites - `docs/modules/web/architecture.md` -- `docs/product-advisories/25-Dec-2025 - Visual Diffs for Explainable Triage.md` -- `docs/product-advisories/26-Dec-2026 - Visualizing the Risk Budget.md` +- `docs/product/advisories/25-Dec-2025 - Visual Diffs for Explainable Triage.md` +- `docs/product/advisories/26-Dec-2026 - Visualizing the Risk Budget.md` - Angular 17 component patterns in existing codebase ## Delivery Tracker diff --git a/docs-archived/product-advisories/02-Dec-2025 - Designing offline DSSE + in‑toto attestations.md b/docs-archived/product/advisories/02-Dec-2025 - Designing offline DSSE + in‑toto attestations.md similarity index 100% rename from docs-archived/product-advisories/02-Dec-2025 - Designing offline DSSE + in‑toto attestations.md rename to docs-archived/product/advisories/02-Dec-2025 - Designing offline DSSE + in‑toto attestations.md diff --git a/docs-archived/product-advisories/02-Dec-2025 - Handle RPM versions with EVR tuples.md b/docs-archived/product/advisories/02-Dec-2025 - Handle RPM versions with EVR tuples.md similarity index 100% rename from docs-archived/product-advisories/02-Dec-2025 - Handle RPM versions with EVR tuples.md rename to docs-archived/product/advisories/02-Dec-2025 - Handle RPM versions with EVR tuples.md diff --git a/docs-archived/product-advisories/02-Dec-2025 - Snapshot advisories for time‑aware verdicts.md b/docs-archived/product/advisories/02-Dec-2025 - Snapshot advisories for time‑aware verdicts.md similarity index 100% rename from docs-archived/product-advisories/02-Dec-2025 - Snapshot advisories for time‑aware verdicts.md rename to docs-archived/product/advisories/02-Dec-2025 - Snapshot advisories for time‑aware verdicts.md diff --git a/docs-archived/product-advisories/03-Dec-2026 - Building a Binary Fingerprint Database.md b/docs-archived/product/advisories/03-Dec-2026 - Building a Binary Fingerprint Database.md similarity index 100% rename from docs-archived/product-advisories/03-Dec-2026 - Building a Binary Fingerprint Database.md rename to docs-archived/product/advisories/03-Dec-2026 - Building a Binary Fingerprint Database.md diff --git a/docs-archived/product-advisories/03-Dec-2026 - C# Disassembly with Deterministic Signatures.md b/docs-archived/product/advisories/03-Dec-2026 - C# Disassembly with Deterministic Signatures.md similarity index 100% rename from docs-archived/product-advisories/03-Dec-2026 - C# Disassembly with Deterministic Signatures.md rename to docs-archived/product/advisories/03-Dec-2026 - C# Disassembly with Deterministic Signatures.md diff --git a/docs-archived/product-advisories/05-Dec-2026 - New Testing Enhancements for Stella Ops.md b/docs-archived/product/advisories/05-Dec-2026 - New Testing Enhancements for Stella Ops.md similarity index 100% rename from docs-archived/product-advisories/05-Dec-2026 - New Testing Enhancements for Stella Ops.md rename to docs-archived/product/advisories/05-Dec-2026 - New Testing Enhancements for Stella Ops.md diff --git a/docs-archived/product-advisories/06-Jan-2026 - Quiet-by-Default Triage with Attested Exceptions.md b/docs-archived/product/advisories/06-Jan-2026 - Quiet-by-Default Triage with Attested Exceptions.md similarity index 100% rename from docs-archived/product-advisories/06-Jan-2026 - Quiet-by-Default Triage with Attested Exceptions.md rename to docs-archived/product/advisories/06-Jan-2026 - Quiet-by-Default Triage with Attested Exceptions.md diff --git a/docs-archived/product-advisories/14-Dec-2025/01-Dec-2025 - Benchmarks for a Testable Security Moat.md b/docs-archived/product/advisories/14-Dec-2025/01-Dec-2025 - Benchmarks for a Testable Security Moat.md similarity index 100% rename from docs-archived/product-advisories/14-Dec-2025/01-Dec-2025 - Benchmarks for a Testable Security Moat.md rename to docs-archived/product/advisories/14-Dec-2025/01-Dec-2025 - Benchmarks for a Testable Security Moat.md diff --git a/docs-archived/product-advisories/14-Dec-2025/01-Dec-2025 - Common Developers guides.md b/docs-archived/product/advisories/14-Dec-2025/01-Dec-2025 - Common Developers guides.md similarity index 100% rename from docs-archived/product-advisories/14-Dec-2025/01-Dec-2025 - Common Developers guides.md rename to docs-archived/product/advisories/14-Dec-2025/01-Dec-2025 - Common Developers guides.md diff --git a/docs-archived/product-advisories/14-Dec-2025/01-Dec-2025 - DSSE‑Signed Offline Scanner Updates.md b/docs-archived/product/advisories/14-Dec-2025/01-Dec-2025 - DSSE‑Signed Offline Scanner Updates.md similarity index 100% rename from docs-archived/product-advisories/14-Dec-2025/01-Dec-2025 - DSSE‑Signed Offline Scanner Updates.md rename to docs-archived/product/advisories/14-Dec-2025/01-Dec-2025 - DSSE‑Signed Offline Scanner Updates.md diff --git a/docs-archived/product-advisories/14-Dec-2025/01-Dec-2025 - PostgreSQL Patterns for Each StellaOps Module.md b/docs-archived/product/advisories/14-Dec-2025/01-Dec-2025 - PostgreSQL Patterns for Each StellaOps Module.md similarity index 100% rename from docs-archived/product-advisories/14-Dec-2025/01-Dec-2025 - PostgreSQL Patterns for Each StellaOps Module.md rename to docs-archived/product/advisories/14-Dec-2025/01-Dec-2025 - PostgreSQL Patterns for Each StellaOps Module.md diff --git a/docs-archived/product-advisories/14-Dec-2025/01-Dec-2025 - Proof-Linked VEX User Interface.md b/docs-archived/product/advisories/14-Dec-2025/01-Dec-2025 - Proof-Linked VEX User Interface.md similarity index 100% rename from docs-archived/product-advisories/14-Dec-2025/01-Dec-2025 - Proof-Linked VEX User Interface.md rename to docs-archived/product/advisories/14-Dec-2025/01-Dec-2025 - Proof-Linked VEX User Interface.md diff --git a/docs-archived/product-advisories/14-Dec-2025/01-Dec-2025 - Tracking UX Health with Time‑to‑Evidence.md b/docs-archived/product/advisories/14-Dec-2025/01-Dec-2025 - Tracking UX Health with Time‑to‑Evidence.md similarity index 100% rename from docs-archived/product-advisories/14-Dec-2025/01-Dec-2025 - Tracking UX Health with Time‑to‑Evidence.md rename to docs-archived/product/advisories/14-Dec-2025/01-Dec-2025 - Tracking UX Health with Time‑to‑Evidence.md diff --git a/docs-archived/product-advisories/14-Dec-2025/01-Dec-2025 - Turning SBOM Data Into Verifiable Proofs.md b/docs-archived/product/advisories/14-Dec-2025/01-Dec-2025 - Turning SBOM Data Into Verifiable Proofs.md similarity index 100% rename from docs-archived/product-advisories/14-Dec-2025/01-Dec-2025 - Turning SBOM Data Into Verifiable Proofs.md rename to docs-archived/product/advisories/14-Dec-2025/01-Dec-2025 - Turning SBOM Data Into Verifiable Proofs.md diff --git a/docs-archived/product-advisories/14-Dec-2025/02-Dec-2025 - Benchmarking a Testable Security Moat.md b/docs-archived/product/advisories/14-Dec-2025/02-Dec-2025 - Benchmarking a Testable Security Moat.md similarity index 100% rename from docs-archived/product-advisories/14-Dec-2025/02-Dec-2025 - Benchmarking a Testable Security Moat.md rename to docs-archived/product/advisories/14-Dec-2025/02-Dec-2025 - Benchmarking a Testable Security Moat.md diff --git a/docs-archived/product-advisories/14-Dec-2025/02-Dec-2025 - Converting SBOM Data into Proof Chains.md b/docs-archived/product/advisories/14-Dec-2025/02-Dec-2025 - Converting SBOM Data into Proof Chains.md similarity index 100% rename from docs-archived/product-advisories/14-Dec-2025/02-Dec-2025 - Converting SBOM Data into Proof Chains.md rename to docs-archived/product/advisories/14-Dec-2025/02-Dec-2025 - Converting SBOM Data into Proof Chains.md diff --git a/docs-archived/product-advisories/14-Dec-2025/02-Dec-2025 - Designing Deterministic Reachability UX.md b/docs-archived/product/advisories/14-Dec-2025/02-Dec-2025 - Designing Deterministic Reachability UX.md similarity index 100% rename from docs-archived/product-advisories/14-Dec-2025/02-Dec-2025 - Designing Deterministic Reachability UX.md rename to docs-archived/product/advisories/14-Dec-2025/02-Dec-2025 - Designing Deterministic Reachability UX.md diff --git a/docs-archived/product-advisories/14-Dec-2025/03-Dec-2025 - Comparing Proof‑Linked VEX UX Across Tools.md b/docs-archived/product/advisories/14-Dec-2025/03-Dec-2025 - Comparing Proof‑Linked VEX UX Across Tools.md similarity index 100% rename from docs-archived/product-advisories/14-Dec-2025/03-Dec-2025 - Comparing Proof‑Linked VEX UX Across Tools.md rename to docs-archived/product/advisories/14-Dec-2025/03-Dec-2025 - Comparing Proof‑Linked VEX UX Across Tools.md diff --git a/docs-archived/product-advisories/14-Dec-2025/03-Dec-2025 - Next‑Gen Scanner Differentiators and Evidence Moat.md b/docs-archived/product/advisories/14-Dec-2025/03-Dec-2025 - Next‑Gen Scanner Differentiators and Evidence Moat.md similarity index 100% rename from docs-archived/product-advisories/14-Dec-2025/03-Dec-2025 - Next‑Gen Scanner Differentiators and Evidence Moat.md rename to docs-archived/product/advisories/14-Dec-2025/03-Dec-2025 - Next‑Gen Scanner Differentiators and Evidence Moat.md diff --git a/docs-archived/product-advisories/14-Dec-2025/03-Dec-2025 - Reachability Benchmarks and Moat Metrics.md b/docs-archived/product/advisories/14-Dec-2025/03-Dec-2025 - Reachability Benchmarks and Moat Metrics.md similarity index 100% rename from docs-archived/product-advisories/14-Dec-2025/03-Dec-2025 - Reachability Benchmarks and Moat Metrics.md rename to docs-archived/product/advisories/14-Dec-2025/03-Dec-2025 - Reachability Benchmarks and Moat Metrics.md diff --git a/docs-archived/product-advisories/14-Dec-2025/04-Dec-2025 - Designing Traceable Evidence in Security UX.md b/docs-archived/product/advisories/14-Dec-2025/04-Dec-2025 - Designing Traceable Evidence in Security UX.md similarity index 100% rename from docs-archived/product-advisories/14-Dec-2025/04-Dec-2025 - Designing Traceable Evidence in Security UX.md rename to docs-archived/product/advisories/14-Dec-2025/04-Dec-2025 - Designing Traceable Evidence in Security UX.md diff --git a/docs-archived/product-advisories/14-Dec-2025/04-Dec-2025 - Ranking Unknowns in Reachability Graphs.md b/docs-archived/product/advisories/14-Dec-2025/04-Dec-2025 - Ranking Unknowns in Reachability Graphs.md similarity index 100% rename from docs-archived/product-advisories/14-Dec-2025/04-Dec-2025 - Ranking Unknowns in Reachability Graphs.md rename to docs-archived/product/advisories/14-Dec-2025/04-Dec-2025 - Ranking Unknowns in Reachability Graphs.md diff --git a/docs-archived/product-advisories/14-Dec-2025/04-Dec-2025- Ranking Unknowns in Reachability Graphs.md b/docs-archived/product/advisories/14-Dec-2025/04-Dec-2025- Ranking Unknowns in Reachability Graphs.md similarity index 100% rename from docs-archived/product-advisories/14-Dec-2025/04-Dec-2025- Ranking Unknowns in Reachability Graphs.md rename to docs-archived/product/advisories/14-Dec-2025/04-Dec-2025- Ranking Unknowns in Reachability Graphs.md diff --git a/docs-archived/product-advisories/14-Dec-2025/05-Dec-2025 - Building a Deterministic, Reachability‑First Architecture.md b/docs-archived/product/advisories/14-Dec-2025/05-Dec-2025 - Building a Deterministic, Reachability‑First Architecture.md similarity index 100% rename from docs-archived/product-advisories/14-Dec-2025/05-Dec-2025 - Building a Deterministic, Reachability‑First Architecture.md rename to docs-archived/product/advisories/14-Dec-2025/05-Dec-2025 - Building a Deterministic, Reachability‑First Architecture.md diff --git a/docs-archived/product-advisories/14-Dec-2025/05-Dec-2025 - Design Notes on Smart‑Diff and Call‑Stack Analysis.md b/docs-archived/product/advisories/14-Dec-2025/05-Dec-2025 - Design Notes on Smart‑Diff and Call‑Stack Analysis.md similarity index 100% rename from docs-archived/product-advisories/14-Dec-2025/05-Dec-2025 - Design Notes on Smart‑Diff and Call‑Stack Analysis.md rename to docs-archived/product/advisories/14-Dec-2025/05-Dec-2025 - Design Notes on Smart‑Diff and Call‑Stack Analysis.md diff --git a/docs-archived/product-advisories/14-Dec-2025/05-Dec-2025 - Designing Triage UX That Stays Quiet on Purpose.md b/docs-archived/product/advisories/14-Dec-2025/05-Dec-2025 - Designing Triage UX That Stays Quiet on Purpose.md similarity index 100% rename from docs-archived/product-advisories/14-Dec-2025/05-Dec-2025 - Designing Triage UX That Stays Quiet on Purpose.md rename to docs-archived/product/advisories/14-Dec-2025/05-Dec-2025 - Designing Triage UX That Stays Quiet on Purpose.md diff --git a/docs-archived/product-advisories/14-Dec-2025/06-Dec-2025 - How to Build a Verifiable SBOM→VEX Chain.md b/docs-archived/product/advisories/14-Dec-2025/06-Dec-2025 - How to Build a Verifiable SBOM→VEX Chain.md similarity index 100% rename from docs-archived/product-advisories/14-Dec-2025/06-Dec-2025 - How to Build a Verifiable SBOM→VEX Chain.md rename to docs-archived/product/advisories/14-Dec-2025/06-Dec-2025 - How to Build a Verifiable SBOM→VEX Chain.md diff --git a/docs-archived/product-advisories/14-Dec-2025/06-Dec-2025 - Reachability Methods Worth Testing This Week.md b/docs-archived/product/advisories/14-Dec-2025/06-Dec-2025 - Reachability Methods Worth Testing This Week.md similarity index 100% rename from docs-archived/product-advisories/14-Dec-2025/06-Dec-2025 - Reachability Methods Worth Testing This Week.md rename to docs-archived/product/advisories/14-Dec-2025/06-Dec-2025 - Reachability Methods Worth Testing This Week.md diff --git a/docs-archived/product-advisories/14-Dec-2025/07-Dec-2025 - Designing Deterministic Vulnerability Scores.md b/docs-archived/product/advisories/14-Dec-2025/07-Dec-2025 - Designing Deterministic Vulnerability Scores.md similarity index 100% rename from docs-archived/product-advisories/14-Dec-2025/07-Dec-2025 - Designing Deterministic Vulnerability Scores.md rename to docs-archived/product/advisories/14-Dec-2025/07-Dec-2025 - Designing Deterministic Vulnerability Scores.md diff --git a/docs-archived/product-advisories/14-Dec-2025/07-Dec-2025 - Reliable Air‑Gap Verification Workflows.md b/docs-archived/product/advisories/14-Dec-2025/07-Dec-2025 - Reliable Air‑Gap Verification Workflows.md similarity index 100% rename from docs-archived/product-advisories/14-Dec-2025/07-Dec-2025 - Reliable Air‑Gap Verification Workflows.md rename to docs-archived/product/advisories/14-Dec-2025/07-Dec-2025 - Reliable Air‑Gap Verification Workflows.md diff --git a/docs-archived/product-advisories/14-Dec-2025/08-Dec-2025 - Defining Stella Ops’ Proof‑Linked Advantage.md b/docs-archived/product/advisories/14-Dec-2025/08-Dec-2025 - Defining Stella Ops’ Proof‑Linked Advantage.md similarity index 100% rename from docs-archived/product-advisories/14-Dec-2025/08-Dec-2025 - Defining Stella Ops’ Proof‑Linked Advantage.md rename to docs-archived/product/advisories/14-Dec-2025/08-Dec-2025 - Defining Stella Ops’ Proof‑Linked Advantage.md diff --git a/docs-archived/product-advisories/14-Dec-2025/08-Dec-2025 - Designing UX for Signed Evidence Trails.md b/docs-archived/product/advisories/14-Dec-2025/08-Dec-2025 - Designing UX for Signed Evidence Trails.md similarity index 100% rename from docs-archived/product-advisories/14-Dec-2025/08-Dec-2025 - Designing UX for Signed Evidence Trails.md rename to docs-archived/product/advisories/14-Dec-2025/08-Dec-2025 - Designing UX for Signed Evidence Trails.md diff --git a/docs-archived/product-advisories/14-Dec-2025/09-Dec-2025 - Caching Reachability the Smart Way.md b/docs-archived/product/advisories/14-Dec-2025/09-Dec-2025 - Caching Reachability the Smart Way.md similarity index 100% rename from docs-archived/product-advisories/14-Dec-2025/09-Dec-2025 - Caching Reachability the Smart Way.md rename to docs-archived/product/advisories/14-Dec-2025/09-Dec-2025 - Caching Reachability the Smart Way.md diff --git a/docs-archived/product-advisories/14-Dec-2025/09-Dec-2025 - Smart‑Diff and Provenance‑Rich Binaries.md b/docs-archived/product/advisories/14-Dec-2025/09-Dec-2025 - Smart‑Diff and Provenance‑Rich Binaries.md similarity index 100% rename from docs-archived/product-advisories/14-Dec-2025/09-Dec-2025 - Smart‑Diff and Provenance‑Rich Binaries.md rename to docs-archived/product/advisories/14-Dec-2025/09-Dec-2025 - Smart‑Diff and Provenance‑Rich Binaries.md diff --git a/docs-archived/product-advisories/14-Dec-2025/11-Dec-2025 - Stella DevOps UX Implementation Guide.md b/docs-archived/product/advisories/14-Dec-2025/11-Dec-2025 - Stella DevOps UX Implementation Guide.md similarity index 100% rename from docs-archived/product-advisories/14-Dec-2025/11-Dec-2025 - Stella DevOps UX Implementation Guide.md rename to docs-archived/product/advisories/14-Dec-2025/11-Dec-2025 - Stella DevOps UX Implementation Guide.md diff --git a/docs-archived/product-advisories/14-Dec-2025/12-Dec-2025 - Designing a Deterministic Vulnerability Scoring Matrix.md b/docs-archived/product/advisories/14-Dec-2025/12-Dec-2025 - Designing a Deterministic Vulnerability Scoring Matrix.md similarity index 100% rename from docs-archived/product-advisories/14-Dec-2025/12-Dec-2025 - Designing a Deterministic Vulnerability Scoring Matrix.md rename to docs-archived/product/advisories/14-Dec-2025/12-Dec-2025 - Designing a Deterministic Vulnerability Scoring Matrix.md diff --git a/docs-archived/product-advisories/14-Dec-2025/12-Dec-2025 - Measure UX Efficiency Through TTFS.md b/docs-archived/product/advisories/14-Dec-2025/12-Dec-2025 - Measure UX Efficiency Through TTFS.md similarity index 100% rename from docs-archived/product-advisories/14-Dec-2025/12-Dec-2025 - Measure UX Efficiency Through TTFS.md rename to docs-archived/product/advisories/14-Dec-2025/12-Dec-2025 - Measure UX Efficiency Through TTFS.md diff --git a/docs-archived/product-advisories/14-Dec-2025/12-Dec-2025 - Replay Fidelity as a Proof Metric.md b/docs-archived/product/advisories/14-Dec-2025/12-Dec-2025 - Replay Fidelity as a Proof Metric.md similarity index 100% rename from docs-archived/product-advisories/14-Dec-2025/12-Dec-2025 - Replay Fidelity as a Proof Metric.md rename to docs-archived/product/advisories/14-Dec-2025/12-Dec-2025 - Replay Fidelity as a Proof Metric.md diff --git a/docs-archived/product-advisories/14-Dec-2025/12-Dec-2025 - Smart‑Diff Detects Meaningful Risk Shifts.md b/docs-archived/product/advisories/14-Dec-2025/12-Dec-2025 - Smart‑Diff Detects Meaningful Risk Shifts.md similarity index 100% rename from docs-archived/product-advisories/14-Dec-2025/12-Dec-2025 - Smart‑Diff Detects Meaningful Risk Shifts.md rename to docs-archived/product/advisories/14-Dec-2025/12-Dec-2025 - Smart‑Diff Detects Meaningful Risk Shifts.md diff --git a/docs-archived/product-advisories/14-Dec-2025/13-Dec-2025 - Define a north star metric for TTFS.md b/docs-archived/product/advisories/14-Dec-2025/13-Dec-2025 - Define a north star metric for TTFS.md similarity index 100% rename from docs-archived/product-advisories/14-Dec-2025/13-Dec-2025 - Define a north star metric for TTFS.md rename to docs-archived/product/advisories/14-Dec-2025/13-Dec-2025 - Define a north star metric for TTFS.md diff --git a/docs-archived/product-advisories/14-Dec-2025/13-Dec-2025 - Designing the Call‑Stack Reachability Engine.md b/docs-archived/product/advisories/14-Dec-2025/13-Dec-2025 - Designing the Call‑Stack Reachability Engine.md similarity index 100% rename from docs-archived/product-advisories/14-Dec-2025/13-Dec-2025 - Designing the Call‑Stack Reachability Engine.md rename to docs-archived/product/advisories/14-Dec-2025/13-Dec-2025 - Designing the Call‑Stack Reachability Engine.md diff --git a/docs-archived/product-advisories/14-Dec-2025/13-Dec-2025 - Smart‑Diff - Defining Meaningful Risk Change.md b/docs-archived/product/advisories/14-Dec-2025/13-Dec-2025 - Smart‑Diff - Defining Meaningful Risk Change.md similarity index 100% rename from docs-archived/product-advisories/14-Dec-2025/13-Dec-2025 - Smart‑Diff - Defining Meaningful Risk Change.md rename to docs-archived/product/advisories/14-Dec-2025/13-Dec-2025 - Smart‑Diff - Defining Meaningful Risk Change.md diff --git a/docs-archived/product-advisories/14-Dec-2025/14-Dec-2025 - Add a dedicated “first_signal” event.md b/docs-archived/product/advisories/14-Dec-2025/14-Dec-2025 - Add a dedicated “first_signal” event.md similarity index 100% rename from docs-archived/product-advisories/14-Dec-2025/14-Dec-2025 - Add a dedicated “first_signal” event.md rename to docs-archived/product/advisories/14-Dec-2025/14-Dec-2025 - Add a dedicated “first_signal” event.md diff --git a/docs-archived/product-advisories/14-Dec-2025/14-Dec-2025 - Create a small ground‑truth corpus.md b/docs-archived/product/advisories/14-Dec-2025/14-Dec-2025 - Create a small ground‑truth corpus.md similarity index 100% rename from docs-archived/product-advisories/14-Dec-2025/14-Dec-2025 - Create a small ground‑truth corpus.md rename to docs-archived/product/advisories/14-Dec-2025/14-Dec-2025 - Create a small ground‑truth corpus.md diff --git a/docs-archived/product-advisories/14-Dec-2025/14-Dec-2025 - Dissect triage and evidence workflows.md b/docs-archived/product/advisories/14-Dec-2025/14-Dec-2025 - Dissect triage and evidence workflows.md similarity index 100% rename from docs-archived/product-advisories/14-Dec-2025/14-Dec-2025 - Dissect triage and evidence workflows.md rename to docs-archived/product/advisories/14-Dec-2025/14-Dec-2025 - Dissect triage and evidence workflows.md diff --git a/docs-archived/product-advisories/14-Dec-2025/14-Dec-2025 - Evaluate PostgreSQL vs MongoDB for StellaOps.md b/docs-archived/product/advisories/14-Dec-2025/14-Dec-2025 - Evaluate PostgreSQL vs MongoDB for StellaOps.md similarity index 100% rename from docs-archived/product-advisories/14-Dec-2025/14-Dec-2025 - Evaluate PostgreSQL vs MongoDB for StellaOps.md rename to docs-archived/product/advisories/14-Dec-2025/14-Dec-2025 - Evaluate PostgreSQL vs MongoDB for StellaOps.md diff --git a/docs-archived/product-advisories/14-Dec-2025/16-Dec-2025 - Building a Deeper Moat Beyond Reachability.md b/docs-archived/product/advisories/14-Dec-2025/16-Dec-2025 - Building a Deeper Moat Beyond Reachability.md similarity index 100% rename from docs-archived/product-advisories/14-Dec-2025/16-Dec-2025 - Building a Deeper Moat Beyond Reachability.md rename to docs-archived/product/advisories/14-Dec-2025/16-Dec-2025 - Building a Deeper Moat Beyond Reachability.md diff --git a/docs-archived/product-advisories/14-Dec-2025/29-Nov-2025 - Acceptance Tests Pack and Guardrails.md b/docs-archived/product/advisories/14-Dec-2025/29-Nov-2025 - Acceptance Tests Pack and Guardrails.md similarity index 100% rename from docs-archived/product-advisories/14-Dec-2025/29-Nov-2025 - Acceptance Tests Pack and Guardrails.md rename to docs-archived/product/advisories/14-Dec-2025/29-Nov-2025 - Acceptance Tests Pack and Guardrails.md diff --git a/docs-archived/product-advisories/14-Dec-2025/29-Nov-2025 - CVSS v4.0 Momentum in Vulnerability Management.md b/docs-archived/product/advisories/14-Dec-2025/29-Nov-2025 - CVSS v4.0 Momentum in Vulnerability Management.md similarity index 93% rename from docs-archived/product-advisories/14-Dec-2025/29-Nov-2025 - CVSS v4.0 Momentum in Vulnerability Management.md rename to docs-archived/product/advisories/14-Dec-2025/29-Nov-2025 - CVSS v4.0 Momentum in Vulnerability Management.md index d4b35d2b6..deda1dcbc 100644 --- a/docs-archived/product-advisories/14-Dec-2025/29-Nov-2025 - CVSS v4.0 Momentum in Vulnerability Management.md +++ b/docs-archived/product/advisories/14-Dec-2025/29-Nov-2025 - CVSS v4.0 Momentum in Vulnerability Management.md @@ -8,7 +8,7 @@ - Identify quick UI/reporting deltas required for transparency. ## Required artefacts (MVP for DONE) -- This briefing plus linkage in `docs/product-advisories/ADVISORY_INDEX.md` (already indexed). +- This briefing plus linkage in `docs/product/advisories/ADVISORY_INDEX.md` (already indexed). - Note in sprint Decisions & Risks for CVSS receipts sprints; ensure SPRINT_0300 tracker row 15 records completion. ## Determinism & Offline diff --git a/docs-archived/product-advisories/14-Dec-2025/29-Nov-2025 - SBOM to VEX Proof Pipeline Blueprint.md b/docs-archived/product/advisories/14-Dec-2025/29-Nov-2025 - SBOM to VEX Proof Pipeline Blueprint.md similarity index 100% rename from docs-archived/product-advisories/14-Dec-2025/29-Nov-2025 - SBOM to VEX Proof Pipeline Blueprint.md rename to docs-archived/product/advisories/14-Dec-2025/29-Nov-2025 - SBOM to VEX Proof Pipeline Blueprint.md diff --git a/docs-archived/product-advisories/14-Dec-2025/29-Nov-2025 - SCA Failure Catalogue for StellaOps Tests.md b/docs-archived/product/advisories/14-Dec-2025/29-Nov-2025 - SCA Failure Catalogue for StellaOps Tests.md similarity index 100% rename from docs-archived/product-advisories/14-Dec-2025/29-Nov-2025 - SCA Failure Catalogue for StellaOps Tests.md rename to docs-archived/product/advisories/14-Dec-2025/29-Nov-2025 - SCA Failure Catalogue for StellaOps Tests.md diff --git a/docs-archived/product-advisories/14-Dec-2025/29-Nov-2025 - StellaOps – Mid-Level .NET Onboarding (Quick Start).md b/docs-archived/product/advisories/14-Dec-2025/29-Nov-2025 - StellaOps – Mid-Level .NET Onboarding (Quick Start).md similarity index 100% rename from docs-archived/product-advisories/14-Dec-2025/29-Nov-2025 - StellaOps – Mid-Level .NET Onboarding (Quick Start).md rename to docs-archived/product/advisories/14-Dec-2025/29-Nov-2025 - StellaOps – Mid-Level .NET Onboarding (Quick Start).md diff --git a/docs-archived/product-advisories/14-Dec-2025/30-Nov-2025 - Comparative Evidence Patterns for Stella Ops.md b/docs-archived/product/advisories/14-Dec-2025/30-Nov-2025 - Comparative Evidence Patterns for Stella Ops.md similarity index 100% rename from docs-archived/product-advisories/14-Dec-2025/30-Nov-2025 - Comparative Evidence Patterns for Stella Ops.md rename to docs-archived/product/advisories/14-Dec-2025/30-Nov-2025 - Comparative Evidence Patterns for Stella Ops.md diff --git a/docs-archived/product-advisories/14-Dec-2025/30-Nov-2025 - Ecosystem Reality Test Cases for StellaOps.md b/docs-archived/product/advisories/14-Dec-2025/30-Nov-2025 - Ecosystem Reality Test Cases for StellaOps.md similarity index 100% rename from docs-archived/product-advisories/14-Dec-2025/30-Nov-2025 - Ecosystem Reality Test Cases for StellaOps.md rename to docs-archived/product/advisories/14-Dec-2025/30-Nov-2025 - Ecosystem Reality Test Cases for StellaOps.md diff --git a/docs-archived/product-advisories/14-Dec-2025/30-Nov-2025 - Implementor Guidelines for Stella Ops.md b/docs-archived/product/advisories/14-Dec-2025/30-Nov-2025 - Implementor Guidelines for Stella Ops.md similarity index 100% rename from docs-archived/product-advisories/14-Dec-2025/30-Nov-2025 - Implementor Guidelines for Stella Ops.md rename to docs-archived/product/advisories/14-Dec-2025/30-Nov-2025 - Implementor Guidelines for Stella Ops.md diff --git a/docs-archived/product-advisories/14-Dec-2025/30-Nov-2025 - Rekor Receipt Checklist for Stella Ops.md b/docs-archived/product/advisories/14-Dec-2025/30-Nov-2025 - Rekor Receipt Checklist for Stella Ops.md similarity index 100% rename from docs-archived/product-advisories/14-Dec-2025/30-Nov-2025 - Rekor Receipt Checklist for Stella Ops.md rename to docs-archived/product/advisories/14-Dec-2025/30-Nov-2025 - Rekor Receipt Checklist for Stella Ops.md diff --git a/docs-archived/product-advisories/14-Dec-2025/30-Nov-2025 - Standup Sprint Kickstarters.md b/docs-archived/product/advisories/14-Dec-2025/30-Nov-2025 - Standup Sprint Kickstarters.md similarity index 100% rename from docs-archived/product-advisories/14-Dec-2025/30-Nov-2025 - Standup Sprint Kickstarters.md rename to docs-archived/product/advisories/14-Dec-2025/30-Nov-2025 - Standup Sprint Kickstarters.md diff --git a/docs-archived/product-advisories/14-Dec-2025/30-Nov-2025 - UI Micro-Interactions for StellaOps.md b/docs-archived/product/advisories/14-Dec-2025/30-Nov-2025 - UI Micro-Interactions for StellaOps.md similarity index 98% rename from docs-archived/product-advisories/14-Dec-2025/30-Nov-2025 - UI Micro-Interactions for StellaOps.md rename to docs-archived/product/advisories/14-Dec-2025/30-Nov-2025 - UI Micro-Interactions for StellaOps.md index 6a38d4d4d..8493bb7a4 100644 --- a/docs-archived/product-advisories/14-Dec-2025/30-Nov-2025 - UI Micro-Interactions for StellaOps.md +++ b/docs-archived/product/advisories/14-Dec-2025/30-Nov-2025 - UI Micro-Interactions for StellaOps.md @@ -46,4 +46,4 @@ Define canonical micro-interaction rules (MI1-MI10) for the StellaOps Console so ## Traceability - Sprint: `docs/implplan/SPRINT_0209_0001_0001_ui_i.md` (task UI-MICRO-GAPS-0209-011). -- Findings reference: `docs/product-advisories/31-Nov-2025 FINDINGS.md` (MI1-MI10 gap family). +- Findings reference: `docs/product/advisories/31-Nov-2025 FINDINGS.md` (MI1-MI10 gap family). diff --git a/docs-archived/product-advisories/14-Dec-2025/30-Nov-2025 - Unknowns Decay & Triage Heuristics.md b/docs-archived/product/advisories/14-Dec-2025/30-Nov-2025 - Unknowns Decay & Triage Heuristics.md similarity index 100% rename from docs-archived/product-advisories/14-Dec-2025/30-Nov-2025 - Unknowns Decay & Triage Heuristics.md rename to docs-archived/product/advisories/14-Dec-2025/30-Nov-2025 - Unknowns Decay & Triage Heuristics.md diff --git a/docs-archived/product-advisories/15-Dec-2025 - Designing 202 + Retry‑After Backpressure Control.md b/docs-archived/product/advisories/15-Dec-2025 - Designing 202 + Retry‑After Backpressure Control.md similarity index 100% rename from docs-archived/product-advisories/15-Dec-2025 - Designing 202 + Retry‑After Backpressure Control.md rename to docs-archived/product/advisories/15-Dec-2025 - Designing 202 + Retry‑After Backpressure Control.md diff --git a/docs-archived/product-advisories/15-Dec-2025 - Modeling StellaRouter Performance Curves.md b/docs-archived/product/advisories/15-Dec-2025 - Modeling StellaRouter Performance Curves.md similarity index 100% rename from docs-archived/product-advisories/15-Dec-2025 - Modeling StellaRouter Performance Curves.md rename to docs-archived/product/advisories/15-Dec-2025 - Modeling StellaRouter Performance Curves.md diff --git a/docs-archived/product-advisories/16-Dec-2025 - Measuring Progress with Tiered Precision Curves.md b/docs-archived/product/advisories/16-Dec-2025 - Measuring Progress with Tiered Precision Curves.md similarity index 100% rename from docs-archived/product-advisories/16-Dec-2025 - Measuring Progress with Tiered Precision Curves.md rename to docs-archived/product/advisories/16-Dec-2025 - Measuring Progress with Tiered Precision Curves.md diff --git a/docs-archived/product-advisories/17-Dec-2025 - Reachability Drift Detection.md b/docs-archived/product/advisories/17-Dec-2025 - Reachability Drift Detection.md similarity index 99% rename from docs-archived/product-advisories/17-Dec-2025 - Reachability Drift Detection.md rename to docs-archived/product/advisories/17-Dec-2025 - Reachability Drift Detection.md index d0a9627ac..29f75e466 100644 --- a/docs-archived/product-advisories/17-Dec-2025 - Reachability Drift Detection.md +++ b/docs-archived/product/advisories/17-Dec-2025 - Reachability Drift Detection.md @@ -401,8 +401,8 @@ smart_diff: ## 8. REFERENCES -- `docs/product-advisories/14-Dec-2025 - Smart-Diff Technical Reference.md` -- `docs/product-advisories/14-Dec-2025 - Reachability Analysis Technical Reference.md` +- `docs/product/advisories/14-Dec-2025 - Smart-Diff Technical Reference.md` +- `docs/product/advisories/14-Dec-2025 - Reachability Analysis Technical Reference.md` - `docs/implplan/archived/SPRINT_3500_0001_0001_smart_diff_master.md` - `docs/reachability/lattice.md` - `bench/reachability-benchmark/README.md` diff --git a/docs-archived/product-advisories/17-Dec-2025/16-Dec-2025 - Building a Deeper Moat Beyond Reachability.md b/docs-archived/product/advisories/17-Dec-2025/16-Dec-2025 - Building a Deeper Moat Beyond Reachability.md similarity index 96% rename from docs-archived/product-advisories/17-Dec-2025/16-Dec-2025 - Building a Deeper Moat Beyond Reachability.md rename to docs-archived/product/advisories/17-Dec-2025/16-Dec-2025 - Building a Deeper Moat Beyond Reachability.md index fa69bf203..cc94a4e84 100644 --- a/docs-archived/product-advisories/17-Dec-2025/16-Dec-2025 - Building a Deeper Moat Beyond Reachability.md +++ b/docs-archived/product/advisories/17-Dec-2025/16-Dec-2025 - Building a Deeper Moat Beyond Reachability.md @@ -128,9 +128,9 @@ _(Original content archived below for reference)_ - `docs/api/scanner-score-proofs-api.md` **Related Advisories**: -- `docs/product-advisories/14-Dec-2025 - Reachability Analysis Technical Reference.md` -- `docs/product-advisories/14-Dec-2025 - Proof and Evidence Chain Technical Reference.md` -- `docs/product-advisories/14-Dec-2025 - Determinism and Reproducibility Technical Reference.md` +- `docs/product/advisories/14-Dec-2025 - Reachability Analysis Technical Reference.md` +- `docs/product/advisories/14-Dec-2025 - Proof and Evidence Chain Technical Reference.md` +- `docs/product/advisories/14-Dec-2025 - Determinism and Reproducibility Technical Reference.md` --- diff --git a/docs-archived/product-advisories/18-Dec-2025 - Building Better Binary Mapping and Call‑Stack Reachability.md b/docs-archived/product/advisories/18-Dec-2025 - Building Better Binary Mapping and Call‑Stack Reachability.md similarity index 100% rename from docs-archived/product-advisories/18-Dec-2025 - Building Better Binary Mapping and Call‑Stack Reachability.md rename to docs-archived/product/advisories/18-Dec-2025 - Building Better Binary Mapping and Call‑Stack Reachability.md diff --git a/docs-archived/product-advisories/18-Dec-2025 - Concrete Advances in Reachability Analysis.md b/docs-archived/product/advisories/18-Dec-2025 - Concrete Advances in Reachability Analysis.md similarity index 100% rename from docs-archived/product-advisories/18-Dec-2025 - Concrete Advances in Reachability Analysis.md rename to docs-archived/product/advisories/18-Dec-2025 - Concrete Advances in Reachability Analysis.md diff --git a/docs-archived/product-advisories/18-Dec-2025/18-Dec-2025 - Designing a Layered EPSS v4 Database.md b/docs-archived/product/advisories/18-Dec-2025/18-Dec-2025 - Designing a Layered EPSS v4 Database.md similarity index 100% rename from docs-archived/product-advisories/18-Dec-2025/18-Dec-2025 - Designing a Layered EPSS v4 Database.md rename to docs-archived/product/advisories/18-Dec-2025/18-Dec-2025 - Designing a Layered EPSS v4 Database.md diff --git a/docs-archived/product-advisories/19-Dec-2025 - Stella Ops candidate features mapped to moat strength.md b/docs-archived/product/advisories/19-Dec-2025 - Stella Ops candidate features mapped to moat strength.md similarity index 100% rename from docs-archived/product-advisories/19-Dec-2025 - Stella Ops candidate features mapped to moat strength.md rename to docs-archived/product/advisories/19-Dec-2025 - Stella Ops candidate features mapped to moat strength.md diff --git a/docs-archived/product-advisories/19-Dec-2025 - Trust Algebra and Lattice Engine Specification.md b/docs-archived/product/advisories/19-Dec-2025 - Trust Algebra and Lattice Engine Specification.md similarity index 100% rename from docs-archived/product-advisories/19-Dec-2025 - Trust Algebra and Lattice Engine Specification.md rename to docs-archived/product/advisories/19-Dec-2025 - Trust Algebra and Lattice Engine Specification.md diff --git a/docs-archived/product-advisories/19-Dec-2025/19-Dec-2025 - Benchmarking Container Scanners Against Stella Ops.md b/docs-archived/product/advisories/19-Dec-2025/19-Dec-2025 - Benchmarking Container Scanners Against Stella Ops.md similarity index 100% rename from docs-archived/product-advisories/19-Dec-2025/19-Dec-2025 - Benchmarking Container Scanners Against Stella Ops.md rename to docs-archived/product/advisories/19-Dec-2025/19-Dec-2025 - Benchmarking Container Scanners Against Stella Ops.md diff --git a/docs-archived/product-advisories/2025-12-21-binaryindex/21-Dec-2025 - Mapping Evidence Within Compiled Binaries.md b/docs-archived/product/advisories/2025-12-21-binaryindex/21-Dec-2025 - Mapping Evidence Within Compiled Binaries.md similarity index 100% rename from docs-archived/product-advisories/2025-12-21-binaryindex/21-Dec-2025 - Mapping Evidence Within Compiled Binaries.md rename to docs-archived/product/advisories/2025-12-21-binaryindex/21-Dec-2025 - Mapping Evidence Within Compiled Binaries.md diff --git a/docs-archived/product-advisories/2025-12-21-binaryindex/README.md b/docs-archived/product/advisories/2025-12-21-binaryindex/README.md similarity index 100% rename from docs-archived/product-advisories/2025-12-21-binaryindex/README.md rename to docs-archived/product/advisories/2025-12-21-binaryindex/README.md diff --git a/docs-archived/product-advisories/2025-12-21-moat-gap-closure/14-Dec-2025 - CVSS and Competitive Analysis Technical Reference.md b/docs-archived/product/advisories/2025-12-21-moat-gap-closure/14-Dec-2025 - CVSS and Competitive Analysis Technical Reference.md similarity index 100% rename from docs-archived/product-advisories/2025-12-21-moat-gap-closure/14-Dec-2025 - CVSS and Competitive Analysis Technical Reference.md rename to docs-archived/product/advisories/2025-12-21-moat-gap-closure/14-Dec-2025 - CVSS and Competitive Analysis Technical Reference.md diff --git a/docs-archived/product-advisories/2025-12-21-moat-gap-closure/14-Dec-2025 - Determinism and Reproducibility Technical Reference.md b/docs-archived/product/advisories/2025-12-21-moat-gap-closure/14-Dec-2025 - Determinism and Reproducibility Technical Reference.md similarity index 99% rename from docs-archived/product-advisories/2025-12-21-moat-gap-closure/14-Dec-2025 - Determinism and Reproducibility Technical Reference.md rename to docs-archived/product/advisories/2025-12-21-moat-gap-closure/14-Dec-2025 - Determinism and Reproducibility Technical Reference.md index 032f2ab90..9a4c8c3ca 100644 --- a/docs-archived/product-advisories/2025-12-21-moat-gap-closure/14-Dec-2025 - Determinism and Reproducibility Technical Reference.md +++ b/docs-archived/product/advisories/2025-12-21-moat-gap-closure/14-Dec-2025 - Determinism and Reproducibility Technical Reference.md @@ -809,7 +809,7 @@ Use the repo benchmark harness as the single place where moat metrics are measur Developer rules: - No feature touching scans/policy/proofs ships without at least one benchmark scenario or an extension of an existing one. - If golden outputs change intentionally, record a short “why” note (which metric improved, which contract changed) and keep artifacts deterministic. -- Bench runs must record and validate `graphRevisionId` and per-verdict receipts (see `docs/product-advisories/14-Dec-2025 - Proof and Evidence Chain Technical Reference.md`). +- Bench runs must record and validate `graphRevisionId` and per-verdict receipts (see `docs/product/advisories/14-Dec-2025 - Proof and Evidence Chain Technical Reference.md`). --- diff --git a/docs-archived/product-advisories/2025-12-21-moat-gap-closure/14-Dec-2025 - Developer Onboarding Technical Reference.md b/docs-archived/product/advisories/2025-12-21-moat-gap-closure/14-Dec-2025 - Developer Onboarding Technical Reference.md similarity index 100% rename from docs-archived/product-advisories/2025-12-21-moat-gap-closure/14-Dec-2025 - Developer Onboarding Technical Reference.md rename to docs-archived/product/advisories/2025-12-21-moat-gap-closure/14-Dec-2025 - Developer Onboarding Technical Reference.md diff --git a/docs-archived/product-advisories/2025-12-21-moat-gap-closure/14-Dec-2025 - Offline and Air-Gap Technical Reference.md b/docs-archived/product/advisories/2025-12-21-moat-gap-closure/14-Dec-2025 - Offline and Air-Gap Technical Reference.md similarity index 100% rename from docs-archived/product-advisories/2025-12-21-moat-gap-closure/14-Dec-2025 - Offline and Air-Gap Technical Reference.md rename to docs-archived/product/advisories/2025-12-21-moat-gap-closure/14-Dec-2025 - Offline and Air-Gap Technical Reference.md diff --git a/docs-archived/product-advisories/2025-12-21-moat-gap-closure/14-Dec-2025 - PostgreSQL Patterns Technical Reference.md b/docs-archived/product/advisories/2025-12-21-moat-gap-closure/14-Dec-2025 - PostgreSQL Patterns Technical Reference.md similarity index 100% rename from docs-archived/product-advisories/2025-12-21-moat-gap-closure/14-Dec-2025 - PostgreSQL Patterns Technical Reference.md rename to docs-archived/product/advisories/2025-12-21-moat-gap-closure/14-Dec-2025 - PostgreSQL Patterns Technical Reference.md diff --git a/docs-archived/product-advisories/2025-12-21-moat-gap-closure/14-Dec-2025 - Proof and Evidence Chain Technical Reference.md b/docs-archived/product/advisories/2025-12-21-moat-gap-closure/14-Dec-2025 - Proof and Evidence Chain Technical Reference.md similarity index 100% rename from docs-archived/product-advisories/2025-12-21-moat-gap-closure/14-Dec-2025 - Proof and Evidence Chain Technical Reference.md rename to docs-archived/product/advisories/2025-12-21-moat-gap-closure/14-Dec-2025 - Proof and Evidence Chain Technical Reference.md diff --git a/docs-archived/product-advisories/2025-12-21-moat-gap-closure/14-Dec-2025 - Reachability Analysis Technical Reference.md b/docs-archived/product/advisories/2025-12-21-moat-gap-closure/14-Dec-2025 - Reachability Analysis Technical Reference.md similarity index 100% rename from docs-archived/product-advisories/2025-12-21-moat-gap-closure/14-Dec-2025 - Reachability Analysis Technical Reference.md rename to docs-archived/product/advisories/2025-12-21-moat-gap-closure/14-Dec-2025 - Reachability Analysis Technical Reference.md diff --git a/docs-archived/product-advisories/2025-12-21-moat-gap-closure/14-Dec-2025 - Rekor Integration Technical Reference.md b/docs-archived/product/advisories/2025-12-21-moat-gap-closure/14-Dec-2025 - Rekor Integration Technical Reference.md similarity index 100% rename from docs-archived/product-advisories/2025-12-21-moat-gap-closure/14-Dec-2025 - Rekor Integration Technical Reference.md rename to docs-archived/product/advisories/2025-12-21-moat-gap-closure/14-Dec-2025 - Rekor Integration Technical Reference.md diff --git a/docs-archived/product-advisories/2025-12-21-moat-gap-closure/14-Dec-2025 - Smart-Diff Technical Reference.md b/docs-archived/product/advisories/2025-12-21-moat-gap-closure/14-Dec-2025 - Smart-Diff Technical Reference.md similarity index 100% rename from docs-archived/product-advisories/2025-12-21-moat-gap-closure/14-Dec-2025 - Smart-Diff Technical Reference.md rename to docs-archived/product/advisories/2025-12-21-moat-gap-closure/14-Dec-2025 - Smart-Diff Technical Reference.md diff --git a/docs-archived/product-advisories/2025-12-21-moat-gap-closure/14-Dec-2025 - Testing and Quality Guardrails Technical Reference.md b/docs-archived/product/advisories/2025-12-21-moat-gap-closure/14-Dec-2025 - Testing and Quality Guardrails Technical Reference.md similarity index 100% rename from docs-archived/product-advisories/2025-12-21-moat-gap-closure/14-Dec-2025 - Testing and Quality Guardrails Technical Reference.md rename to docs-archived/product/advisories/2025-12-21-moat-gap-closure/14-Dec-2025 - Testing and Quality Guardrails Technical Reference.md diff --git a/docs-archived/product-advisories/2025-12-21-moat-gap-closure/14-Dec-2025 - Triage and Unknowns Technical Reference.md b/docs-archived/product/advisories/2025-12-21-moat-gap-closure/14-Dec-2025 - Triage and Unknowns Technical Reference.md similarity index 100% rename from docs-archived/product-advisories/2025-12-21-moat-gap-closure/14-Dec-2025 - Triage and Unknowns Technical Reference.md rename to docs-archived/product/advisories/2025-12-21-moat-gap-closure/14-Dec-2025 - Triage and Unknowns Technical Reference.md diff --git a/docs-archived/product-advisories/2025-12-21-moat-gap-closure/14-Dec-2025 - UX and Time-to-Evidence Technical Reference.md b/docs-archived/product/advisories/2025-12-21-moat-gap-closure/14-Dec-2025 - UX and Time-to-Evidence Technical Reference.md similarity index 100% rename from docs-archived/product-advisories/2025-12-21-moat-gap-closure/14-Dec-2025 - UX and Time-to-Evidence Technical Reference.md rename to docs-archived/product/advisories/2025-12-21-moat-gap-closure/14-Dec-2025 - UX and Time-to-Evidence Technical Reference.md diff --git a/docs-archived/product-advisories/2025-12-21-moat-gap-closure/ARCHIVE_MANIFEST.md b/docs-archived/product/advisories/2025-12-21-moat-gap-closure/ARCHIVE_MANIFEST.md similarity index 100% rename from docs-archived/product-advisories/2025-12-21-moat-gap-closure/ARCHIVE_MANIFEST.md rename to docs-archived/product/advisories/2025-12-21-moat-gap-closure/ARCHIVE_MANIFEST.md diff --git a/docs-archived/product-advisories/2025-12-21-moat-phase2/19-Dec-2025 - Moat #1.md b/docs-archived/product/advisories/2025-12-21-moat-phase2/19-Dec-2025 - Moat #1.md similarity index 100% rename from docs-archived/product-advisories/2025-12-21-moat-phase2/19-Dec-2025 - Moat #1.md rename to docs-archived/product/advisories/2025-12-21-moat-phase2/19-Dec-2025 - Moat #1.md diff --git a/docs-archived/product-advisories/2025-12-21-moat-phase2/19-Dec-2025 - Moat #2.md b/docs-archived/product/advisories/2025-12-21-moat-phase2/19-Dec-2025 - Moat #2.md similarity index 100% rename from docs-archived/product-advisories/2025-12-21-moat-phase2/19-Dec-2025 - Moat #2.md rename to docs-archived/product/advisories/2025-12-21-moat-phase2/19-Dec-2025 - Moat #2.md diff --git a/docs-archived/product-advisories/2025-12-21-moat-phase2/19-Dec-2025 - Moat #3.md b/docs-archived/product/advisories/2025-12-21-moat-phase2/19-Dec-2025 - Moat #3.md similarity index 100% rename from docs-archived/product-advisories/2025-12-21-moat-phase2/19-Dec-2025 - Moat #3.md rename to docs-archived/product/advisories/2025-12-21-moat-phase2/19-Dec-2025 - Moat #3.md diff --git a/docs-archived/product-advisories/2025-12-21-moat-phase2/19-Dec-2025 - Moat #4.md b/docs-archived/product/advisories/2025-12-21-moat-phase2/19-Dec-2025 - Moat #4.md similarity index 100% rename from docs-archived/product-advisories/2025-12-21-moat-phase2/19-Dec-2025 - Moat #4.md rename to docs-archived/product/advisories/2025-12-21-moat-phase2/19-Dec-2025 - Moat #4.md diff --git a/docs-archived/product-advisories/2025-12-21-moat-phase2/19-Dec-2025 - Moat #5.md b/docs-archived/product/advisories/2025-12-21-moat-phase2/19-Dec-2025 - Moat #5.md similarity index 100% rename from docs-archived/product-advisories/2025-12-21-moat-phase2/19-Dec-2025 - Moat #5.md rename to docs-archived/product/advisories/2025-12-21-moat-phase2/19-Dec-2025 - Moat #5.md diff --git a/docs-archived/product-advisories/2025-12-21-moat-phase2/19-Dec-2025 - Moat #6.md b/docs-archived/product/advisories/2025-12-21-moat-phase2/19-Dec-2025 - Moat #6.md similarity index 100% rename from docs-archived/product-advisories/2025-12-21-moat-phase2/19-Dec-2025 - Moat #6.md rename to docs-archived/product/advisories/2025-12-21-moat-phase2/19-Dec-2025 - Moat #6.md diff --git a/docs-archived/product-advisories/2025-12-21-moat-phase2/19-Dec-2025 - Moat #7.md b/docs-archived/product/advisories/2025-12-21-moat-phase2/19-Dec-2025 - Moat #7.md similarity index 100% rename from docs-archived/product-advisories/2025-12-21-moat-phase2/19-Dec-2025 - Moat #7.md rename to docs-archived/product/advisories/2025-12-21-moat-phase2/19-Dec-2025 - Moat #7.md diff --git a/docs-archived/product-advisories/2025-12-21-moat-phase2/20-Dec-2025 - Moat Explanation - Exception management as auditable objects.md b/docs-archived/product/advisories/2025-12-21-moat-phase2/20-Dec-2025 - Moat Explanation - Exception management as auditable objects.md similarity index 100% rename from docs-archived/product-advisories/2025-12-21-moat-phase2/20-Dec-2025 - Moat Explanation - Exception management as auditable objects.md rename to docs-archived/product/advisories/2025-12-21-moat-phase2/20-Dec-2025 - Moat Explanation - Exception management as auditable objects.md diff --git a/docs-archived/product-advisories/2025-12-21-moat-phase2/20-Dec-2025 - Moat Explanation - Guidelines for Product and Development Managers - Signed, Replayable Risk Verdicts.md b/docs-archived/product/advisories/2025-12-21-moat-phase2/20-Dec-2025 - Moat Explanation - Guidelines for Product and Development Managers - Signed, Replayable Risk Verdicts.md similarity index 100% rename from docs-archived/product-advisories/2025-12-21-moat-phase2/20-Dec-2025 - Moat Explanation - Guidelines for Product and Development Managers - Signed, Replayable Risk Verdicts.md rename to docs-archived/product/advisories/2025-12-21-moat-phase2/20-Dec-2025 - Moat Explanation - Guidelines for Product and Development Managers - Signed, Replayable Risk Verdicts.md diff --git a/docs-archived/product-advisories/2025-12-21-moat-phase2/20-Dec-2025 - Moat Explanation - Knowledge Snapshots and Time‑Travel Replay.md b/docs-archived/product/advisories/2025-12-21-moat-phase2/20-Dec-2025 - Moat Explanation - Knowledge Snapshots and Time‑Travel Replay.md similarity index 100% rename from docs-archived/product-advisories/2025-12-21-moat-phase2/20-Dec-2025 - Moat Explanation - Knowledge Snapshots and Time‑Travel Replay.md rename to docs-archived/product/advisories/2025-12-21-moat-phase2/20-Dec-2025 - Moat Explanation - Knowledge Snapshots and Time‑Travel Replay.md diff --git a/docs-archived/product-advisories/2025-12-21-moat-phase2/20-Dec-2025 - Moat Explanation - Risk Budgets and Diff-Aware Release Gates.md b/docs-archived/product/advisories/2025-12-21-moat-phase2/20-Dec-2025 - Moat Explanation - Risk Budgets and Diff-Aware Release Gates.md similarity index 100% rename from docs-archived/product-advisories/2025-12-21-moat-phase2/20-Dec-2025 - Moat Explanation - Risk Budgets and Diff-Aware Release Gates.md rename to docs-archived/product/advisories/2025-12-21-moat-phase2/20-Dec-2025 - Moat Explanation - Risk Budgets and Diff-Aware Release Gates.md diff --git a/docs-archived/product-advisories/2025-12-21-moat-phase2/ARCHIVE_MANIFEST.md b/docs-archived/product/advisories/2025-12-21-moat-phase2/ARCHIVE_MANIFEST.md similarity index 100% rename from docs-archived/product-advisories/2025-12-21-moat-phase2/ARCHIVE_MANIFEST.md rename to docs-archived/product/advisories/2025-12-21-moat-phase2/ARCHIVE_MANIFEST.md diff --git a/docs-archived/product-advisories/2025-12-21-reference-architecture/20-Dec-2025 - Stella Ops Reference Architecture.md b/docs-archived/product/advisories/2025-12-21-reference-architecture/20-Dec-2025 - Stella Ops Reference Architecture.md similarity index 100% rename from docs-archived/product-advisories/2025-12-21-reference-architecture/20-Dec-2025 - Stella Ops Reference Architecture.md rename to docs-archived/product/advisories/2025-12-21-reference-architecture/20-Dec-2025 - Stella Ops Reference Architecture.md diff --git a/docs-archived/product-advisories/2025-12-21-testing-strategy/20-Dec-2025 - Testing strategy.md b/docs-archived/product/advisories/2025-12-21-testing-strategy/20-Dec-2025 - Testing strategy.md similarity index 100% rename from docs-archived/product-advisories/2025-12-21-testing-strategy/20-Dec-2025 - Testing strategy.md rename to docs-archived/product/advisories/2025-12-21-testing-strategy/20-Dec-2025 - Testing strategy.md diff --git a/docs-archived/product-advisories/2025-12-21-testing-strategy/README.md b/docs-archived/product/advisories/2025-12-21-testing-strategy/README.md similarity index 97% rename from docs-archived/product-advisories/2025-12-21-testing-strategy/README.md rename to docs-archived/product/advisories/2025-12-21-testing-strategy/README.md index 3bcc32d1b..92bbc2dad 100644 --- a/docs-archived/product-advisories/2025-12-21-testing-strategy/README.md +++ b/docs-archived/product/advisories/2025-12-21-testing-strategy/README.md @@ -1,7 +1,7 @@ # Archived Advisory: Testing Strategy **Archived**: 2025-12-21 -**Original**: `docs/product-advisories/20-Dec-2025 - Testing strategy.md` +**Original**: `docs/product/advisories/20-Dec-2025 - Testing strategy.md` ## Processing Summary diff --git a/docs-archived/product-advisories/2025-12-22-binary-reachability/20-Dec-2025 - Layered binary + call‑stack reachability.md b/docs-archived/product/advisories/2025-12-22-binary-reachability/20-Dec-2025 - Layered binary + call‑stack reachability.md similarity index 100% rename from docs-archived/product-advisories/2025-12-22-binary-reachability/20-Dec-2025 - Layered binary + call‑stack reachability.md rename to docs-archived/product/advisories/2025-12-22-binary-reachability/20-Dec-2025 - Layered binary + call‑stack reachability.md diff --git a/docs-archived/product-advisories/2025-12-22-binaryindex/21-Dec-2025 - Mapping Evidence Within Compiled Binaries.md b/docs-archived/product/advisories/2025-12-22-binaryindex/21-Dec-2025 - Mapping Evidence Within Compiled Binaries.md similarity index 100% rename from docs-archived/product-advisories/2025-12-22-binaryindex/21-Dec-2025 - Mapping Evidence Within Compiled Binaries.md rename to docs-archived/product/advisories/2025-12-22-binaryindex/21-Dec-2025 - Mapping Evidence Within Compiled Binaries.md diff --git a/docs-archived/product-advisories/2025-12-22-explainable-triage/18-Dec-2025 - Designing Explainable Triage and Proof-Linked Evidence.md b/docs-archived/product/advisories/2025-12-22-explainable-triage/18-Dec-2025 - Designing Explainable Triage and Proof-Linked Evidence.md similarity index 100% rename from docs-archived/product-advisories/2025-12-22-explainable-triage/18-Dec-2025 - Designing Explainable Triage and Proof-Linked Evidence.md rename to docs-archived/product/advisories/2025-12-22-explainable-triage/18-Dec-2025 - Designing Explainable Triage and Proof-Linked Evidence.md diff --git a/docs-archived/product-advisories/2025-12-22-ux-sprints/16-Dec-2025 - Reimagining Proof‑Linked UX in Security Workflows.md b/docs-archived/product/advisories/2025-12-22-ux-sprints/16-Dec-2025 - Reimagining Proof‑Linked UX in Security Workflows.md similarity index 96% rename from docs-archived/product-advisories/2025-12-22-ux-sprints/16-Dec-2025 - Reimagining Proof‑Linked UX in Security Workflows.md rename to docs-archived/product/advisories/2025-12-22-ux-sprints/16-Dec-2025 - Reimagining Proof‑Linked UX in Security Workflows.md index a8e97808a..384c0dce5 100644 --- a/docs-archived/product-advisories/2025-12-22-ux-sprints/16-Dec-2025 - Reimagining Proof‑Linked UX in Security Workflows.md +++ b/docs-archived/product/advisories/2025-12-22-ux-sprints/16-Dec-2025 - Reimagining Proof‑Linked UX in Security Workflows.md @@ -122,8 +122,8 @@ scheduler (re-eval) ───────┘ ## Related Documentation -- `docs/product-advisories/14-Dec-2025 - Proof and Evidence Chain Technical Reference.md` -- `docs/product-advisories/14-Dec-2025 - UX and Time-to-Evidence Technical Reference.md` +- `docs/product/advisories/14-Dec-2025 - Proof and Evidence Chain Technical Reference.md` +- `docs/product/advisories/14-Dec-2025 - UX and Time-to-Evidence Technical Reference.md` - `docs/15_UI_GUIDE.md` - `docs/modules/ui/architecture.md` diff --git a/docs-archived/product-advisories/2025-12-22-ux-sprints/20-Dec-2025 - Branch · UX patterns worth borrowing from top scanners.md b/docs-archived/product/advisories/2025-12-22-ux-sprints/20-Dec-2025 - Branch · UX patterns worth borrowing from top scanners.md similarity index 100% rename from docs-archived/product-advisories/2025-12-22-ux-sprints/20-Dec-2025 - Branch · UX patterns worth borrowing from top scanners.md rename to docs-archived/product/advisories/2025-12-22-ux-sprints/20-Dec-2025 - Branch · UX patterns worth borrowing from top scanners.md diff --git a/docs-archived/product-advisories/2025-12-22-ux-sprints/21-Dec-2025 - How Top Scanners Shape Evidence‑First UX.md b/docs-archived/product/advisories/2025-12-22-ux-sprints/21-Dec-2025 - How Top Scanners Shape Evidence‑First UX.md similarity index 100% rename from docs-archived/product-advisories/2025-12-22-ux-sprints/21-Dec-2025 - How Top Scanners Shape Evidence‑First UX.md rename to docs-archived/product/advisories/2025-12-22-ux-sprints/21-Dec-2025 - How Top Scanners Shape Evidence‑First UX.md diff --git a/docs-archived/product-advisories/2025-12-23-sprint-4200/23-Dec-2026 - Competitor Scanner UI Breakdown.md b/docs-archived/product/advisories/2025-12-23-sprint-4200/23-Dec-2026 - Competitor Scanner UI Breakdown.md similarity index 100% rename from docs-archived/product-advisories/2025-12-23-sprint-4200/23-Dec-2026 - Competitor Scanner UI Breakdown.md rename to docs-archived/product/advisories/2025-12-23-sprint-4200/23-Dec-2026 - Competitor Scanner UI Breakdown.md diff --git a/docs-archived/product-advisories/2025-12-23-sprint-4200/README.md b/docs-archived/product/advisories/2025-12-23-sprint-4200/README.md similarity index 100% rename from docs-archived/product-advisories/2025-12-23-sprint-4200/README.md rename to docs-archived/product/advisories/2025-12-23-sprint-4200/README.md diff --git a/docs-archived/product-advisories/2025-12-23-sprint-4200/SPRINT_4200_SIGN_OFF.md b/docs-archived/product/advisories/2025-12-23-sprint-4200/SPRINT_4200_SIGN_OFF.md similarity index 98% rename from docs-archived/product-advisories/2025-12-23-sprint-4200/SPRINT_4200_SIGN_OFF.md rename to docs-archived/product/advisories/2025-12-23-sprint-4200/SPRINT_4200_SIGN_OFF.md index 637eb46ef..3da96e8c1 100644 --- a/docs-archived/product-advisories/2025-12-23-sprint-4200/SPRINT_4200_SIGN_OFF.md +++ b/docs-archived/product/advisories/2025-12-23-sprint-4200/SPRINT_4200_SIGN_OFF.md @@ -111,7 +111,7 @@ All deliverables are production-ready and comply with StellaOps architecture sta |----------|----------|---------| | Integration Guide | `docs/SPRINT_4200_0000_0000_integration_guide.md` | Complete integration instructions, usage examples, API docs | | Sprint Archives | `docs/implplan/archived/SPRINT_4200_*.md` | 4 archived sprint files with full task history | -| Sign-Off Document | `docs/product-advisories/archived/2025-12-23-sprint-4200/SPRINT_4200_SIGN_OFF.md` | This document | +| Sign-Off Document | `docs/product/advisories/archived/2025-12-23-sprint-4200/SPRINT_4200_SIGN_OFF.md` | This document | | Web AGENTS Guide | `src/Web/StellaOps.Web/AGENTS.md` | Updated with new components | | Attestor AGENTS Guide | `src/Attestor/AGENTS.md` | Updated with proof chain services | @@ -366,12 +366,12 @@ I certify that all documentation: - `docs/implplan/archived/SPRINT_4200_0002_0003_delta_compare_view.md` ### Advisory Files -- `docs/product-advisories/archived/2025-12-23-sprint-4200/23-Dec-2026 - Competitor Scanner UI Breakdown.md` -- `docs/product-advisories/archived/2025-12-23-sprint-4200/23-Dec-2026 - Designing Replayable Verdict Interfaces.md` (if exists) +- `docs/product/advisories/archived/2025-12-23-sprint-4200/23-Dec-2026 - Competitor Scanner UI Breakdown.md` +- `docs/product/advisories/archived/2025-12-23-sprint-4200/23-Dec-2026 - Designing Replayable Verdict Interfaces.md` (if exists) ### Documentation Files - `docs/SPRINT_4200_0000_0000_integration_guide.md` -- `docs/product-advisories/archived/2025-12-23-sprint-4200/SPRINT_4200_SIGN_OFF.md` (this document) +- `docs/product/advisories/archived/2025-12-23-sprint-4200/SPRINT_4200_SIGN_OFF.md` (this document) --- diff --git a/docs-archived/product-advisories/2025-12-23-testing-attestation-strategy/23-Dec-2026 - Distinctive Edge for Docker Scanning.md b/docs-archived/product/advisories/2025-12-23-testing-attestation-strategy/23-Dec-2026 - Distinctive Edge for Docker Scanning.md similarity index 100% rename from docs-archived/product-advisories/2025-12-23-testing-attestation-strategy/23-Dec-2026 - Distinctive Edge for Docker Scanning.md rename to docs-archived/product/advisories/2025-12-23-testing-attestation-strategy/23-Dec-2026 - Distinctive Edge for Docker Scanning.md diff --git a/docs-archived/product-advisories/2025-12-26-empty-advisories/25-Dec-2025 - Hybrid Binary and Call‑Graph Analysis.md b/docs-archived/product/advisories/2025-12-26-empty-advisories/25-Dec-2025 - Hybrid Binary and Call‑Graph Analysis.md similarity index 100% rename from docs-archived/product-advisories/2025-12-26-empty-advisories/25-Dec-2025 - Hybrid Binary and Call‑Graph Analysis.md rename to docs-archived/product/advisories/2025-12-26-empty-advisories/25-Dec-2025 - Hybrid Binary and Call‑Graph Analysis.md diff --git a/docs-archived/product-advisories/2025-12-26-superseded/25-Dec-2025 - Implementing Diff‑Aware Release Gates.md b/docs-archived/product/advisories/2025-12-26-superseded/25-Dec-2025 - Implementing Diff‑Aware Release Gates.md similarity index 100% rename from docs-archived/product-advisories/2025-12-26-superseded/25-Dec-2025 - Implementing Diff‑Aware Release Gates.md rename to docs-archived/product/advisories/2025-12-26-superseded/25-Dec-2025 - Implementing Diff‑Aware Release Gates.md diff --git a/docs-archived/product-advisories/2025-12-26-superseded/26-Dec-2026 - Diff‑Aware Releases and Auditable Exceptions.md b/docs-archived/product/advisories/2025-12-26-superseded/26-Dec-2026 - Diff‑Aware Releases and Auditable Exceptions.md similarity index 100% rename from docs-archived/product-advisories/2025-12-26-superseded/26-Dec-2026 - Diff‑Aware Releases and Auditable Exceptions.md rename to docs-archived/product/advisories/2025-12-26-superseded/26-Dec-2026 - Diff‑Aware Releases and Auditable Exceptions.md diff --git a/docs-archived/product-advisories/2025-12-26-superseded/26-Dec-2026 - Reachability as Cryptographic Proof.md b/docs-archived/product/advisories/2025-12-26-superseded/26-Dec-2026 - Reachability as Cryptographic Proof.md similarity index 100% rename from docs-archived/product-advisories/2025-12-26-superseded/26-Dec-2026 - Reachability as Cryptographic Proof.md rename to docs-archived/product/advisories/2025-12-26-superseded/26-Dec-2026 - Reachability as Cryptographic Proof.md diff --git a/docs-archived/product-advisories/2025-12-26-superseded/26-Dec-2026 - Smart‑Diff as a Core Evidence Primitive.md b/docs-archived/product/advisories/2025-12-26-superseded/26-Dec-2026 - Smart‑Diff as a Core Evidence Primitive.md similarity index 100% rename from docs-archived/product-advisories/2025-12-26-superseded/26-Dec-2026 - Smart‑Diff as a Core Evidence Primitive.md rename to docs-archived/product/advisories/2025-12-26-superseded/26-Dec-2026 - Smart‑Diff as a Core Evidence Primitive.md diff --git a/docs-archived/product-advisories/2025-12-26-superseded/README.md b/docs-archived/product/advisories/2025-12-26-superseded/README.md similarity index 100% rename from docs-archived/product-advisories/2025-12-26-superseded/README.md rename to docs-archived/product/advisories/2025-12-26-superseded/README.md diff --git a/docs-archived/product-advisories/2025-12-26-triage-advisories/25-Dec-2025 - Triage UI Lessons from Competitors.md b/docs-archived/product/advisories/2025-12-26-triage-advisories/25-Dec-2025 - Triage UI Lessons from Competitors.md similarity index 100% rename from docs-archived/product-advisories/2025-12-26-triage-advisories/25-Dec-2025 - Triage UI Lessons from Competitors.md rename to docs-archived/product/advisories/2025-12-26-triage-advisories/25-Dec-2025 - Triage UI Lessons from Competitors.md diff --git a/docs-archived/product-advisories/2025-12-26-triage-advisories/25-Dec-2025 - Visual Diffs for Explainable Triage.md b/docs-archived/product/advisories/2025-12-26-triage-advisories/25-Dec-2025 - Visual Diffs for Explainable Triage.md similarity index 100% rename from docs-archived/product-advisories/2025-12-26-triage-advisories/25-Dec-2025 - Visual Diffs for Explainable Triage.md rename to docs-archived/product/advisories/2025-12-26-triage-advisories/25-Dec-2025 - Visual Diffs for Explainable Triage.md diff --git a/docs-archived/product-advisories/2025-12-26-triage-advisories/26-Dec-2026 - Visualizing the Risk Budget.md b/docs-archived/product/advisories/2025-12-26-triage-advisories/26-Dec-2026 - Visualizing the Risk Budget.md similarity index 100% rename from docs-archived/product-advisories/2025-12-26-triage-advisories/26-Dec-2026 - Visualizing the Risk Budget.md rename to docs-archived/product/advisories/2025-12-26-triage-advisories/26-Dec-2026 - Visualizing the Risk Budget.md diff --git a/docs-archived/product-advisories/2025-12-26-triage-advisories/README.md b/docs-archived/product/advisories/2025-12-26-triage-advisories/README.md similarity index 100% rename from docs-archived/product-advisories/2025-12-26-triage-advisories/README.md rename to docs-archived/product/advisories/2025-12-26-triage-advisories/README.md diff --git a/docs-archived/product-advisories/2025-12-26-vex-scoring/26-Dec-2026 - Weighted Confidence for VEX Sources.md b/docs-archived/product/advisories/2025-12-26-vex-scoring/26-Dec-2026 - Weighted Confidence for VEX Sources.md similarity index 100% rename from docs-archived/product-advisories/2025-12-26-vex-scoring/26-Dec-2026 - Weighted Confidence for VEX Sources.md rename to docs-archived/product/advisories/2025-12-26-vex-scoring/26-Dec-2026 - Weighted Confidence for VEX Sources.md diff --git a/docs-archived/product-advisories/2025-12-26-vex-scoring/README.md b/docs-archived/product/advisories/2025-12-26-vex-scoring/README.md similarity index 100% rename from docs-archived/product-advisories/2025-12-26-vex-scoring/README.md rename to docs-archived/product/advisories/2025-12-26-vex-scoring/README.md diff --git a/docs-archived/product-advisories/2025-12-28_evidence_first_container_security_analysis.md b/docs-archived/product/advisories/2025-12-28_evidence_first_container_security_analysis.md similarity index 100% rename from docs-archived/product-advisories/2025-12-28_evidence_first_container_security_analysis.md rename to docs-archived/product/advisories/2025-12-28_evidence_first_container_security_analysis.md diff --git a/docs-archived/product-advisories/2025-12-29_deterministic_verdicts_and_sbom_lineage.md b/docs-archived/product/advisories/2025-12-29_deterministic_verdicts_and_sbom_lineage.md similarity index 96% rename from docs-archived/product-advisories/2025-12-29_deterministic_verdicts_and_sbom_lineage.md rename to docs-archived/product/advisories/2025-12-29_deterministic_verdicts_and_sbom_lineage.md index 93fcdd164..85613ca37 100644 --- a/docs-archived/product-advisories/2025-12-29_deterministic_verdicts_and_sbom_lineage.md +++ b/docs-archived/product/advisories/2025-12-29_deterministic_verdicts_and_sbom_lineage.md @@ -123,9 +123,9 @@ The original advisory proposed: ## References -- `docs/product-advisories/archived/CONSOLIDATED - Deterministic Evidence and Verdict Architecture.md` -- `docs/product-advisories/archived/CONSOLIDATED - Diff-Aware Release Gates and Risk Budgets.md` -- `docs/product-advisories/archived/ADVISORY_SBOM_LINEAGE_GRAPH.md` +- `docs/product/advisories/archived/CONSOLIDATED - Deterministic Evidence and Verdict Architecture.md` +- `docs/product/advisories/archived/CONSOLIDATED - Diff-Aware Release Gates and Risk Budgets.md` +- `docs/product/advisories/archived/ADVISORY_SBOM_LINEAGE_GRAPH.md` - `docs/modules/attestor/architecture.md` (ProofChain section) - `docs/modules/policy/architecture.md` (Determinism section) - `docs/modules/sbomservice/lineage/architecture.md` diff --git a/docs-archived/product-advisories/21-Dec-2025 - Designing Explainable Triage Workflows.md b/docs-archived/product/advisories/21-Dec-2025 - Designing Explainable Triage Workflows.md similarity index 100% rename from docs-archived/product-advisories/21-Dec-2025 - Designing Explainable Triage Workflows.md rename to docs-archived/product/advisories/21-Dec-2025 - Designing Explainable Triage Workflows.md diff --git a/docs-archived/product-advisories/22-Dec-2025 - Getting Distro Backport Logic Right.md b/docs-archived/product/advisories/22-Dec-2025 - Getting Distro Backport Logic Right.md similarity index 100% rename from docs-archived/product-advisories/22-Dec-2025 - Getting Distro Backport Logic Right.md rename to docs-archived/product/advisories/22-Dec-2025 - Getting Distro Backport Logic Right.md diff --git a/docs-archived/product-advisories/22-Dec-2025/19-Dec-2025 - Benchmarking Container Scanners Against Stella Ops.md b/docs-archived/product/advisories/22-Dec-2025/19-Dec-2025 - Benchmarking Container Scanners Against Stella Ops.md similarity index 100% rename from docs-archived/product-advisories/22-Dec-2025/19-Dec-2025 - Benchmarking Container Scanners Against Stella Ops.md rename to docs-archived/product/advisories/22-Dec-2025/19-Dec-2025 - Benchmarking Container Scanners Against Stella Ops.md diff --git a/docs-archived/product-advisories/22-Dec-2025/21-Dec-2025 - Smart Diff - Reproducibility as a Feature.md b/docs-archived/product/advisories/22-Dec-2025/21-Dec-2025 - Smart Diff - Reproducibility as a Feature.md similarity index 100% rename from docs-archived/product-advisories/22-Dec-2025/21-Dec-2025 - Smart Diff - Reproducibility as a Feature.md rename to docs-archived/product/advisories/22-Dec-2025/21-Dec-2025 - Smart Diff - Reproducibility as a Feature.md diff --git a/docs-archived/product-advisories/22-Dec-2026 - Better testing strategy.md b/docs-archived/product/advisories/22-Dec-2026 - Better testing strategy.md similarity index 99% rename from docs-archived/product-advisories/22-Dec-2026 - Better testing strategy.md rename to docs-archived/product/advisories/22-Dec-2026 - Better testing strategy.md index f9bc7e9a4..21e6c7d88 100644 --- a/docs-archived/product-advisories/22-Dec-2026 - Better testing strategy.md +++ b/docs-archived/product/advisories/22-Dec-2026 - Better testing strategy.md @@ -2,7 +2,7 @@ Below are **current, actionable best practices** to strengthen **Stella Ops test --- -> Supersedes/extends: `docs/product-advisories/archived/2025-12-21-testing-strategy/20-Dec-2025 - Testing strategy.md` +> Supersedes/extends: `docs/product/advisories/archived/2025-12-21-testing-strategy/20-Dec-2025 - Testing strategy.md` > Doc sync: `docs/testing/testing-strategy-models.md`, `docs/testing/TEST_CATALOG.yml`, `docs/benchmarks/testing/better-testing-strategy-samples.md` ## 1. Unit Testing (fast, deterministic, zero I/O) diff --git a/docs-archived/product-advisories/22-Dec-2026 - Building a Trust Lattice for VEX Sources.md b/docs-archived/product/advisories/22-Dec-2026 - Building a Trust Lattice for VEX Sources.md similarity index 100% rename from docs-archived/product-advisories/22-Dec-2026 - Building a Trust Lattice for VEX Sources.md rename to docs-archived/product/advisories/22-Dec-2026 - Building a Trust Lattice for VEX Sources.md diff --git a/docs-archived/product-advisories/22-Dec-2026 - UI Patterns for Triage and Replay.md b/docs-archived/product/advisories/22-Dec-2026 - UI Patterns for Triage and Replay.md similarity index 100% rename from docs-archived/product-advisories/22-Dec-2026 - UI Patterns for Triage and Replay.md rename to docs-archived/product/advisories/22-Dec-2026 - UI Patterns for Triage and Replay.md diff --git a/docs-archived/product-advisories/23-Dec-2025/PROOF_MOATS_ARCHIVAL_SUMMARY.md b/docs-archived/product/advisories/23-Dec-2025/PROOF_MOATS_ARCHIVAL_SUMMARY.md similarity index 98% rename from docs-archived/product-advisories/23-Dec-2025/PROOF_MOATS_ARCHIVAL_SUMMARY.md rename to docs-archived/product/advisories/23-Dec-2025/PROOF_MOATS_ARCHIVAL_SUMMARY.md index 16ee57dd1..0201a573e 100644 --- a/docs-archived/product-advisories/23-Dec-2025/PROOF_MOATS_ARCHIVAL_SUMMARY.md +++ b/docs-archived/product/advisories/23-Dec-2025/PROOF_MOATS_ARCHIVAL_SUMMARY.md @@ -175,7 +175,7 @@ Return: VexVerdictWithProof ### Original Advisory -4. **docs/product-advisories/archived/23-Dec-2025/23-Dec-2026 - Proof‑Driven Moats Stella Ops Can Ship.md** +4. **docs/product/advisories/archived/23-Dec-2025/23-Dec-2026 - Proof‑Driven Moats Stella Ops Can Ship.md** - Strategic vision - Four-tier detection approach - Confidence scoring design @@ -278,7 +278,7 @@ Future work will be tracked in new advisories or sprint plans. ## References -- **Advisory:** `docs/product-advisories/archived/23-Dec-2025/23-Dec-2026 - Proof‑Driven Moats Stella Ops Can Ship.md` +- **Advisory:** `docs/product/advisories/archived/23-Dec-2025/23-Dec-2026 - Proof‑Driven Moats Stella Ops Can Ship.md` - **Final Sign-Off:** `docs/PROOF_MOATS_FINAL_SIGNOFF.md` - **Sprint 7100.0001 Report:** `docs/implplan/SPRINT_7100_0001_0001_COMPLETION_REPORT.md` - **Sprint 7100.0002 Report:** `docs/implplan/SPRINT_7100_0002_0001_COMPLETION_REPORT.md` diff --git a/docs-archived/product-advisories/23-Dec-2026 - Binary Mapping as Attestable Proof.md b/docs-archived/product/advisories/23-Dec-2026 - Binary Mapping as Attestable Proof.md similarity index 100% rename from docs-archived/product-advisories/23-Dec-2026 - Binary Mapping as Attestable Proof.md rename to docs-archived/product/advisories/23-Dec-2026 - Binary Mapping as Attestable Proof.md diff --git a/docs-archived/product-advisories/23-Dec-2026 - Designing Replayable Verdict Interfaces.md b/docs-archived/product/advisories/23-Dec-2026 - Designing Replayable Verdict Interfaces.md similarity index 100% rename from docs-archived/product-advisories/23-Dec-2026 - Designing Replayable Verdict Interfaces.md rename to docs-archived/product/advisories/23-Dec-2026 - Designing Replayable Verdict Interfaces.md diff --git a/docs-archived/product-advisories/23-Dec-2026 - Implementation Summary - Competitor Gap Closure.md b/docs-archived/product/advisories/23-Dec-2026 - Implementation Summary - Competitor Gap Closure.md similarity index 99% rename from docs-archived/product-advisories/23-Dec-2026 - Implementation Summary - Competitor Gap Closure.md rename to docs-archived/product/advisories/23-Dec-2026 - Implementation Summary - Competitor Gap Closure.md index 214ac8b66..482f53ed8 100644 --- a/docs-archived/product-advisories/23-Dec-2026 - Implementation Summary - Competitor Gap Closure.md +++ b/docs-archived/product/advisories/23-Dec-2026 - Implementation Summary - Competitor Gap Closure.md @@ -436,4 +436,4 @@ stella pack replay # Replay policy evaluati - **Sprint Plans:** `docs/implplan/SPRINT_3000_0100_*.md`, `docs/implplan/SPRINT_4000_0100_*.md` - **Schemas:** `docs/schemas/stellaops-policy-verdict.v1.schema.json`, `docs/schemas/stellaops-evidence-pack.v1.schema.json` - **Documentation:** `docs/policy/verdict-attestations.md`, `docs/evidence-locker/evidence-pack-schema.md` -- **Advisory:** `docs/product-advisories/23-Dec-2026 - Competitor Scanner UI Breakdown.md` +- **Advisory:** `docs/product/advisories/23-Dec-2026 - Competitor Scanner UI Breakdown.md` diff --git a/docs-archived/product-advisories/23-Dec-2026 - Proof‑Driven Moats Stella Ops Can Ship.md b/docs-archived/product/advisories/23-Dec-2026 - Proof‑Driven Moats Stella Ops Can Ship.md similarity index 100% rename from docs-archived/product-advisories/23-Dec-2026 - Proof‑Driven Moats Stella Ops Can Ship.md rename to docs-archived/product/advisories/23-Dec-2026 - Proof‑Driven Moats Stella Ops Can Ship.md diff --git a/docs-archived/product-advisories/24-Dec-2025 - Deterministic Resolver Architecture.md b/docs-archived/product/advisories/24-Dec-2025 - Deterministic Resolver Architecture.md similarity index 100% rename from docs-archived/product-advisories/24-Dec-2025 - Deterministic Resolver Architecture.md rename to docs-archived/product/advisories/24-Dec-2025 - Deterministic Resolver Architecture.md diff --git a/docs-archived/product-advisories/24-Dec-2025 - Evidence-Weighted Score Model.md b/docs-archived/product/advisories/24-Dec-2025 - Evidence-Weighted Score Model.md similarity index 100% rename from docs-archived/product-advisories/24-Dec-2025 - Evidence-Weighted Score Model.md rename to docs-archived/product/advisories/24-Dec-2025 - Evidence-Weighted Score Model.md diff --git a/docs-archived/product-advisories/25-Dec-2025 - Building a Deterministic Verdict Engine.md b/docs-archived/product/advisories/25-Dec-2025 - Building a Deterministic Verdict Engine.md similarity index 100% rename from docs-archived/product-advisories/25-Dec-2025 - Building a Deterministic Verdict Engine.md rename to docs-archived/product/advisories/25-Dec-2025 - Building a Deterministic Verdict Engine.md diff --git a/docs-archived/product-advisories/25-Dec-2025 - Enforcing Canonical JSON for Stable Verdicts.md b/docs-archived/product/advisories/25-Dec-2025 - Enforcing Canonical JSON for Stable Verdicts.md similarity index 100% rename from docs-archived/product-advisories/25-Dec-2025 - Enforcing Canonical JSON for Stable Verdicts.md rename to docs-archived/product/advisories/25-Dec-2025 - Enforcing Canonical JSON for Stable Verdicts.md diff --git a/docs-archived/product-advisories/25-Dec-2025 - Evolving Evidence Models for Reachability.md b/docs-archived/product/advisories/25-Dec-2025 - Evolving Evidence Models for Reachability.md similarity index 100% rename from docs-archived/product-advisories/25-Dec-2025 - Evolving Evidence Models for Reachability.md rename to docs-archived/product/advisories/25-Dec-2025 - Evolving Evidence Models for Reachability.md diff --git a/docs-archived/product-advisories/25-Dec-2025 - Planning Keyless Signing for Verdicts.md b/docs-archived/product/advisories/25-Dec-2025 - Planning Keyless Signing for Verdicts.md similarity index 100% rename from docs-archived/product-advisories/25-Dec-2025 - Planning Keyless Signing for Verdicts.md rename to docs-archived/product/advisories/25-Dec-2025 - Planning Keyless Signing for Verdicts.md diff --git a/docs-archived/product-advisories/26-Dec-2025 - AI Assistant as Proof-Carrying Evidence Engine.md b/docs-archived/product/advisories/26-Dec-2025 - AI Assistant as Proof-Carrying Evidence Engine.md similarity index 100% rename from docs-archived/product-advisories/26-Dec-2025 - AI Assistant as Proof-Carrying Evidence Engine.md rename to docs-archived/product/advisories/26-Dec-2025 - AI Assistant as Proof-Carrying Evidence Engine.md diff --git a/docs-archived/product-advisories/26-Dec-2025 - AI Surfacing UX Patterns.md b/docs-archived/product/advisories/26-Dec-2025 - AI Surfacing UX Patterns.md similarity index 100% rename from docs-archived/product-advisories/26-Dec-2025 - AI Surfacing UX Patterns.md rename to docs-archived/product/advisories/26-Dec-2025 - AI Surfacing UX Patterns.md diff --git a/docs-archived/product-advisories/26-Dec-2025 - Stella Ops vNext - SBOM Spine and Deterministic Evidence.md b/docs-archived/product/advisories/26-Dec-2025 - Stella Ops vNext - SBOM Spine and Deterministic Evidence.md similarity index 100% rename from docs-archived/product-advisories/26-Dec-2025 - Stella Ops vNext - SBOM Spine and Deterministic Evidence.md rename to docs-archived/product/advisories/26-Dec-2025 - Stella Ops vNext - SBOM Spine and Deterministic Evidence.md diff --git a/docs-archived/product-advisories/26-Dec-2025 - Stella Ops vNext - SBOM Spine and Deterministic Evidence.md b/docs-archived/product/advisories/26-Dec-2025 - Stella Ops vNext - SBOM Spine and Deterministic Evidence.md similarity index 100% rename from docs-archived/product-advisories/26-Dec-2025 - Stella Ops vNext - SBOM Spine and Deterministic Evidence.md rename to docs-archived/product/advisories/26-Dec-2025 - Stella Ops vNext - SBOM Spine and Deterministic Evidence.md diff --git a/docs-archived/product-advisories/26-Dec-2026 - Mapping a Binary Intelligence Graph.md b/docs-archived/product/advisories/26-Dec-2026 - Mapping a Binary Intelligence Graph.md similarity index 100% rename from docs-archived/product-advisories/26-Dec-2026 - Mapping a Binary Intelligence Graph.md rename to docs-archived/product/advisories/26-Dec-2026 - Mapping a Binary Intelligence Graph.md diff --git a/docs-archived/product-advisories/27-Dec-2025 - Advisory Lens Gap Analysis and Implementation Plan.md b/docs-archived/product/advisories/27-Dec-2025 - Advisory Lens Gap Analysis and Implementation Plan.md similarity index 100% rename from docs-archived/product-advisories/27-Dec-2025 - Advisory Lens Gap Analysis and Implementation Plan.md rename to docs-archived/product/advisories/27-Dec-2025 - Advisory Lens Gap Analysis and Implementation Plan.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/01-Dec-2025 - DSSE-Signed Offline Scanner Updates.md b/docs-archived/product/advisories/27-Nov-2025-superseded/01-Dec-2025 - DSSE-Signed Offline Scanner Updates.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/01-Dec-2025 - DSSE-Signed Offline Scanner Updates.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/01-Dec-2025 - DSSE-Signed Offline Scanner Updates.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/01-Dec-2025 - Proof-Linked VEX UI Developer Guidelines.md b/docs-archived/product/advisories/27-Nov-2025-superseded/01-Dec-2025 - Proof-Linked VEX UI Developer Guidelines.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/01-Dec-2025 - Proof-Linked VEX UI Developer Guidelines.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/01-Dec-2025 - Proof-Linked VEX UI Developer Guidelines.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/01-Dec-2025 - Storage Blueprint for PostgreSQL Modules.md b/docs-archived/product/advisories/27-Nov-2025-superseded/01-Dec-2025 - Storage Blueprint for PostgreSQL Modules.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/01-Dec-2025 - Storage Blueprint for PostgreSQL Modules.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/01-Dec-2025 - Storage Blueprint for PostgreSQL Modules.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/01-Dec-2025 - Time-to-Evidence (TTE) Metric.md b/docs-archived/product/advisories/27-Nov-2025-superseded/01-Dec-2025 - Time-to-Evidence (TTE) Metric.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/01-Dec-2025 - Time-to-Evidence (TTE) Metric.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/01-Dec-2025 - Time-to-Evidence (TTE) Metric.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/01-Dec-2025 - Verifiable Proof Spine Receipts and Benchmarks.md b/docs-archived/product/advisories/27-Nov-2025-superseded/01-Dec-2025 - Verifiable Proof Spine Receipts and Benchmarks.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/01-Dec-2025 - Verifiable Proof Spine Receipts and Benchmarks.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/01-Dec-2025 - Verifiable Proof Spine Receipts and Benchmarks.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/15-Nov-2025 - embedded in-toto provenance events.md b/docs-archived/product/advisories/27-Nov-2025-superseded/15-Nov-2025 - embedded in-toto provenance events.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/15-Nov-2025 - embedded in-toto provenance events.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/15-Nov-2025 - embedded in-toto provenance events.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/15-Nov-2025 - function-level vex explainability.md b/docs-archived/product/advisories/27-Nov-2025-superseded/15-Nov-2025 - function-level vex explainability.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/15-Nov-2025 - function-level vex explainability.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/15-Nov-2025 - function-level vex explainability.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/15-Nov-2025 - ipal serdica census excel import blueprint.md b/docs-archived/product/advisories/27-Nov-2025-superseded/15-Nov-2025 - ipal serdica census excel import blueprint.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/15-Nov-2025 - ipal serdica census excel import blueprint.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/15-Nov-2025 - ipal serdica census excel import blueprint.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/15-Nov-2025 - proof spine for explainable quiet alerts.md b/docs-archived/product/advisories/27-Nov-2025-superseded/15-Nov-2025 - proof spine for explainable quiet alerts.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/15-Nov-2025 - proof spine for explainable quiet alerts.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/15-Nov-2025 - proof spine for explainable quiet alerts.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/15-Nov-2025 - scanner roadmap with deterministic diff-aware rescans.md b/docs-archived/product/advisories/27-Nov-2025-superseded/15-Nov-2025 - scanner roadmap with deterministic diff-aware rescans.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/15-Nov-2025 - scanner roadmap with deterministic diff-aware rescans.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/15-Nov-2025 - scanner roadmap with deterministic diff-aware rescans.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/16-Nov-2025 - layer-sbom cache hash reuse.md b/docs-archived/product/advisories/27-Nov-2025-superseded/16-Nov-2025 - layer-sbom cache hash reuse.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/16-Nov-2025 - layer-sbom cache hash reuse.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/16-Nov-2025 - layer-sbom cache hash reuse.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/16-Nov-2025 - multi-runtime reachability corpus.md b/docs-archived/product/advisories/27-Nov-2025-superseded/16-Nov-2025 - multi-runtime reachability corpus.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/16-Nov-2025 - multi-runtime reachability corpus.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/16-Nov-2025 - multi-runtime reachability corpus.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/16-Nov-2025 - spdx canonical persistence cyclonedx interchange.md b/docs-archived/product/advisories/27-Nov-2025-superseded/16-Nov-2025 - spdx canonical persistence cyclonedx interchange.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/16-Nov-2025 - spdx canonical persistence cyclonedx interchange.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/16-Nov-2025 - spdx canonical persistence cyclonedx interchange.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/16-Nov-2025 - validation plan for quiet scans provenance diff-ci.md b/docs-archived/product/advisories/27-Nov-2025-superseded/16-Nov-2025 - validation plan for quiet scans provenance diff-ci.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/16-Nov-2025 - validation plan for quiet scans provenance diff-ci.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/16-Nov-2025 - validation plan for quiet scans provenance diff-ci.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/17-Nov-2025 - SBOM-Provenance-Spine.md b/docs-archived/product/advisories/27-Nov-2025-superseded/17-Nov-2025 - SBOM-Provenance-Spine.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/17-Nov-2025 - SBOM-Provenance-Spine.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/17-Nov-2025 - SBOM-Provenance-Spine.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/17-Nov-2025 - Stripped-ELF-Reachability.md b/docs-archived/product/advisories/27-Nov-2025-superseded/17-Nov-2025 - Stripped-ELF-Reachability.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/17-Nov-2025 - Stripped-ELF-Reachability.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/17-Nov-2025 - Stripped-ELF-Reachability.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/18-Nov-2025 - Binary-Reachability-Engine.md b/docs-archived/product/advisories/27-Nov-2025-superseded/18-Nov-2025 - Binary-Reachability-Engine.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/18-Nov-2025 - Binary-Reachability-Engine.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/18-Nov-2025 - Binary-Reachability-Engine.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/18-Nov-2025 - CSharp-Binary-Analyzer.md b/docs-archived/product/advisories/27-Nov-2025-superseded/18-Nov-2025 - CSharp-Binary-Analyzer.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/18-Nov-2025 - CSharp-Binary-Analyzer.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/18-Nov-2025 - CSharp-Binary-Analyzer.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/18-Nov-2025 - Patch-Oracles.md b/docs-archived/product/advisories/27-Nov-2025-superseded/18-Nov-2025 - Patch-Oracles.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/18-Nov-2025 - Patch-Oracles.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/18-Nov-2025 - Patch-Oracles.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/18-Nov-2025 - SBOM-Provenance-Spine.md b/docs-archived/product/advisories/27-Nov-2025-superseded/18-Nov-2025 - SBOM-Provenance-Spine.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/18-Nov-2025 - SBOM-Provenance-Spine.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/18-Nov-2025 - SBOM-Provenance-Spine.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/18-Nov-2025 - Unknowns-Registry.md b/docs-archived/product/advisories/27-Nov-2025-superseded/18-Nov-2025 - Unknowns-Registry.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/18-Nov-2025 - Unknowns-Registry.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/18-Nov-2025 - Unknowns-Registry.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/20-Nov-2025 - Branch · Attach ELF Build‑IDs for Stable PURL Mapping.md b/docs-archived/product/advisories/27-Nov-2025-superseded/20-Nov-2025 - Branch · Attach ELF Build‑IDs for Stable PURL Mapping.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/20-Nov-2025 - Branch · Attach ELF Build‑IDs for Stable PURL Mapping.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/20-Nov-2025 - Branch · Attach ELF Build‑IDs for Stable PURL Mapping.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/20-Nov-2025 - Branch · Model .init_array Constructors as Reachability Roots.md b/docs-archived/product/advisories/27-Nov-2025-superseded/20-Nov-2025 - Branch · Model .init_array Constructors as Reachability Roots.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/20-Nov-2025 - Branch · Model .init_array Constructors as Reachability Roots.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/20-Nov-2025 - Branch · Model .init_array Constructors as Reachability Roots.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/20-Nov-2025 - Branch · Reachability & Moat Watch — Verified 2025 Updates.md b/docs-archived/product/advisories/27-Nov-2025-superseded/20-Nov-2025 - Branch · Reachability & Moat Watch — Verified 2025 Updates.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/20-Nov-2025 - Branch · Reachability & Moat Watch — Verified 2025 Updates.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/20-Nov-2025 - Branch · Reachability & Moat Watch — Verified 2025 Updates.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/20-Nov-2025 - Encoding Binary Reachability with PURL‑Resolved Edges.md b/docs-archived/product/advisories/27-Nov-2025-superseded/20-Nov-2025 - Encoding Binary Reachability with PURL‑Resolved Edges.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/20-Nov-2025 - Encoding Binary Reachability with PURL‑Resolved Edges.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/20-Nov-2025 - Encoding Binary Reachability with PURL‑Resolved Edges.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/23-Nov-2025 - Where Stella Ops Can Truly Lead.md b/docs-archived/product/advisories/27-Nov-2025-superseded/23-Nov-2025 - Where Stella Ops Can Truly Lead.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/23-Nov-2025 - Where Stella Ops Can Truly Lead.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/23-Nov-2025 - Where Stella Ops Can Truly Lead.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/23-Nov-2025 - Benchmarking Determinism in Vulnerability Scoring.md b/docs-archived/product/advisories/27-Nov-2025-superseded/23-Nov-2025 - Benchmarking Determinism in Vulnerability Scoring.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/23-Nov-2025 - Benchmarking Determinism in Vulnerability Scoring.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/23-Nov-2025 - Benchmarking Determinism in Vulnerability Scoring.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/23-Nov-2025 - Publishing a Reachability Benchmark Dataset.md b/docs-archived/product/advisories/27-Nov-2025-superseded/23-Nov-2025 - Publishing a Reachability Benchmark Dataset.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/23-Nov-2025 - Publishing a Reachability Benchmark Dataset.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/23-Nov-2025 - Publishing a Reachability Benchmark Dataset.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/23-Nov-2025 - Stella Ops vs Competitors.md b/docs-archived/product/advisories/27-Nov-2025-superseded/23-Nov-2025 - Stella Ops vs Competitors.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/23-Nov-2025 - Stella Ops vs Competitors.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/23-Nov-2025 - Stella Ops vs Competitors.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/23-Nov-2025 - Verifying Binary Reachability via DSSE Envelopes.md b/docs-archived/product/advisories/27-Nov-2025-superseded/23-Nov-2025 - Verifying Binary Reachability via DSSE Envelopes.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/23-Nov-2025 - Verifying Binary Reachability via DSSE Envelopes.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/23-Nov-2025 - Verifying Binary Reachability via DSSE Envelopes.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/24-Nov-2025 - Bridging OpenVEX and CycloneDX for .NET.md b/docs-archived/product/advisories/27-Nov-2025-superseded/24-Nov-2025 - Bridging OpenVEX and CycloneDX for .NET.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/24-Nov-2025 - Bridging OpenVEX and CycloneDX for .NET.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/24-Nov-2025 - Bridging OpenVEX and CycloneDX for .NET.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/24-Nov-2025 - Designing a Deterministic Reachability Benchmark.md b/docs-archived/product/advisories/27-Nov-2025-superseded/24-Nov-2025 - Designing a Deterministic Reachability Benchmark.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/24-Nov-2025 - Designing a Deterministic Reachability Benchmark.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/24-Nov-2025 - Designing a Deterministic Reachability Benchmark.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/25-Nov-2025 - Add CVSS v4.0 Score Receipts for Transparency.md b/docs-archived/product/advisories/27-Nov-2025-superseded/25-Nov-2025 - Add CVSS v4.0 Score Receipts for Transparency.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/25-Nov-2025 - Add CVSS v4.0 Score Receipts for Transparency.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/25-Nov-2025 - Add CVSS v4.0 Score Receipts for Transparency.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/25-Nov-2025 - Air‑gap deployment playbook for StellaOps.md b/docs-archived/product/advisories/27-Nov-2025-superseded/25-Nov-2025 - Air‑gap deployment playbook for StellaOps.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/25-Nov-2025 - Air‑gap deployment playbook for StellaOps.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/25-Nov-2025 - Air‑gap deployment playbook for StellaOps.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/25-Nov-2025 - Define Safe VEX 'Not Affected' Claims with Proofs.md b/docs-archived/product/advisories/27-Nov-2025-superseded/25-Nov-2025 - Define Safe VEX 'Not Affected' Claims with Proofs.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/25-Nov-2025 - Define Safe VEX 'Not Affected' Claims with Proofs.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/25-Nov-2025 - Define Safe VEX 'Not Affected' Claims with Proofs.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/25-Nov-2025 - Half-Life Confidence Decay for Unknowns.md b/docs-archived/product/advisories/27-Nov-2025-superseded/25-Nov-2025 - Half-Life Confidence Decay for Unknowns.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/25-Nov-2025 - Half-Life Confidence Decay for Unknowns.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/25-Nov-2025 - Half-Life Confidence Decay for Unknowns.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/25-Nov-2025 - Hash‑Stable Graph Revisions Across Systems.md b/docs-archived/product/advisories/27-Nov-2025-superseded/25-Nov-2025 - Hash‑Stable Graph Revisions Across Systems.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/25-Nov-2025 - Hash‑Stable Graph Revisions Across Systems.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/25-Nov-2025 - Hash‑Stable Graph Revisions Across Systems.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/25-Nov-2025 - Offline‑kit attestation essentials checklist.md b/docs-archived/product/advisories/27-Nov-2025-superseded/25-Nov-2025 - Offline‑kit attestation essentials checklist.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/25-Nov-2025 - Offline‑kit attestation essentials checklist.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/25-Nov-2025 - Offline‑kit attestation essentials checklist.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/25-Nov-2025 - Revisiting Determinism in SBOM→VEX Pipeline.md b/docs-archived/product/advisories/27-Nov-2025-superseded/25-Nov-2025 - Revisiting Determinism in SBOM→VEX Pipeline.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/25-Nov-2025 - Revisiting Determinism in SBOM→VEX Pipeline.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/25-Nov-2025 - Revisiting Determinism in SBOM→VEX Pipeline.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/26-Nov-2025 - From SBOM to VEX - Building a Transparent Chain.md b/docs-archived/product/advisories/27-Nov-2025-superseded/26-Nov-2025 - From SBOM to VEX - Building a Transparent Chain.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/26-Nov-2025 - From SBOM to VEX - Building a Transparent Chain.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/26-Nov-2025 - From SBOM to VEX - Building a Transparent Chain.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/26-Nov-2025 - Handling Rekor v2 and DSSE Air‑Gap Limits.md b/docs-archived/product/advisories/27-Nov-2025-superseded/26-Nov-2025 - Handling Rekor v2 and DSSE Air‑Gap Limits.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/26-Nov-2025 - Handling Rekor v2 and DSSE Air‑Gap Limits.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/26-Nov-2025 - Handling Rekor v2 and DSSE Air‑Gap Limits.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/26-Nov-2025 - Opening Up a Reachability Dataset.md b/docs-archived/product/advisories/27-Nov-2025-superseded/26-Nov-2025 - Opening Up a Reachability Dataset.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/26-Nov-2025 - Opening Up a Reachability Dataset.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/26-Nov-2025 - Opening Up a Reachability Dataset.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/26-Nov-2025 - Use Graph Revision IDs as Public Trust Anchors.md b/docs-archived/product/advisories/27-Nov-2025-superseded/26-Nov-2025 - Use Graph Revision IDs as Public Trust Anchors.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/26-Nov-2025 - Use Graph Revision IDs as Public Trust Anchors.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/26-Nov-2025 - Use Graph Revision IDs as Public Trust Anchors.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/27-Nov-2025 - Blueprint for a 2026‑Ready Scanner.md b/docs-archived/product/advisories/27-Nov-2025-superseded/27-Nov-2025 - Blueprint for a 2026‑Ready Scanner.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/27-Nov-2025 - Blueprint for a 2026‑Ready Scanner.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/27-Nov-2025 - Blueprint for a 2026‑Ready Scanner.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/27-Nov-2025 - DSSE and Rekor Envelope Size Heuristic.md b/docs-archived/product/advisories/27-Nov-2025-superseded/27-Nov-2025 - DSSE and Rekor Envelope Size Heuristic.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/27-Nov-2025 - DSSE and Rekor Envelope Size Heuristic.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/27-Nov-2025 - DSSE and Rekor Envelope Size Heuristic.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/27-Nov-2025 - Deep Architecture Brief - SBOM‑First, VEX‑Ready Spine.md b/docs-archived/product/advisories/27-Nov-2025-superseded/27-Nov-2025 - Deep Architecture Brief - SBOM‑First, VEX‑Ready Spine.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/27-Nov-2025 - Deep Architecture Brief - SBOM‑First, VEX‑Ready Spine.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/27-Nov-2025 - Deep Architecture Brief - SBOM‑First, VEX‑Ready Spine.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/27-Nov-2025 - Explainability Layer for Vulnerability Verdicts.md b/docs-archived/product/advisories/27-Nov-2025-superseded/27-Nov-2025 - Explainability Layer for Vulnerability Verdicts.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/27-Nov-2025 - Explainability Layer for Vulnerability Verdicts.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/27-Nov-2025 - Explainability Layer for Vulnerability Verdicts.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/27-Nov-2025 - Late‑November SBOM & VEX competitor.md b/docs-archived/product/advisories/27-Nov-2025-superseded/27-Nov-2025 - Late‑November SBOM & VEX competitor.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/27-Nov-2025 - Late‑November SBOM & VEX competitor.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/27-Nov-2025 - Late‑November SBOM & VEX competitor.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/27-Nov-2025 - Making Graphs Understandable to Humans.md b/docs-archived/product/advisories/27-Nov-2025-superseded/27-Nov-2025 - Making Graphs Understandable to Humans.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/27-Nov-2025 - Making Graphs Understandable to Humans.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/27-Nov-2025 - Making Graphs Understandable to Humans.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/27-Nov-2025 - Managing Ambiguity Through an Unknowns Registry.md b/docs-archived/product/advisories/27-Nov-2025-superseded/27-Nov-2025 - Managing Ambiguity Through an Unknowns Registry.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/27-Nov-2025 - Managing Ambiguity Through an Unknowns Registry.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/27-Nov-2025 - Managing Ambiguity Through an Unknowns Registry.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/27-Nov-2025 - Optimizing DSSE Batch Sizes for Reliable Logging.md b/docs-archived/product/advisories/27-Nov-2025-superseded/27-Nov-2025 - Optimizing DSSE Batch Sizes for Reliable Logging.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/27-Nov-2025 - Optimizing DSSE Batch Sizes for Reliable Logging.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/27-Nov-2025 - Optimizing DSSE Batch Sizes for Reliable Logging.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/27-Nov-2025 - Rekor Envelope Size Heuristic.md b/docs-archived/product/advisories/27-Nov-2025-superseded/27-Nov-2025 - Rekor Envelope Size Heuristic.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/27-Nov-2025 - Rekor Envelope Size Heuristic.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/27-Nov-2025 - Rekor Envelope Size Heuristic.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/27-Nov-2025 - Verifying Binary Reachability via DSSE Envelopes.md b/docs-archived/product/advisories/27-Nov-2025-superseded/27-Nov-2025 - Verifying Binary Reachability via DSSE Envelopes.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/27-Nov-2025 - Verifying Binary Reachability via DSSE Envelopes.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/27-Nov-2025 - Verifying Binary Reachability via DSSE Envelopes.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/28-Nov-2025 - Authentication and Authorization Architecture.md b/docs-archived/product/advisories/27-Nov-2025-superseded/28-Nov-2025 - Authentication and Authorization Architecture.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/28-Nov-2025 - Authentication and Authorization Architecture.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/28-Nov-2025 - Authentication and Authorization Architecture.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/28-Nov-2025 - CLI Developer Experience and Command UX.md b/docs-archived/product/advisories/27-Nov-2025-superseded/28-Nov-2025 - CLI Developer Experience and Command UX.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/28-Nov-2025 - CLI Developer Experience and Command UX.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/28-Nov-2025 - CLI Developer Experience and Command UX.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/28-Nov-2025 - Concelier Advisory Ingestion Model.md b/docs-archived/product/advisories/27-Nov-2025-superseded/28-Nov-2025 - Concelier Advisory Ingestion Model.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/28-Nov-2025 - Concelier Advisory Ingestion Model.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/28-Nov-2025 - Concelier Advisory Ingestion Model.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/28-Nov-2025 - Evidence Bundle and Replay Contracts.md b/docs-archived/product/advisories/27-Nov-2025-superseded/28-Nov-2025 - Evidence Bundle and Replay Contracts.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/28-Nov-2025 - Evidence Bundle and Replay Contracts.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/28-Nov-2025 - Evidence Bundle and Replay Contracts.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/28-Nov-2025 - Export Center and Reporting Strategy.md b/docs-archived/product/advisories/27-Nov-2025-superseded/28-Nov-2025 - Export Center and Reporting Strategy.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/28-Nov-2025 - Export Center and Reporting Strategy.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/28-Nov-2025 - Export Center and Reporting Strategy.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/28-Nov-2025 - Findings Ledger and Immutable Audit Trail.md b/docs-archived/product/advisories/27-Nov-2025-superseded/28-Nov-2025 - Findings Ledger and Immutable Audit Trail.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/28-Nov-2025 - Findings Ledger and Immutable Audit Trail.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/28-Nov-2025 - Findings Ledger and Immutable Audit Trail.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/28-Nov-2025 - Graph Analytics and Dependency Insights.md b/docs-archived/product/advisories/27-Nov-2025-superseded/28-Nov-2025 - Graph Analytics and Dependency Insights.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/28-Nov-2025 - Graph Analytics and Dependency Insights.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/28-Nov-2025 - Graph Analytics and Dependency Insights.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/28-Nov-2025 - Mirror and Offline Kit Strategy.md b/docs-archived/product/advisories/27-Nov-2025-superseded/28-Nov-2025 - Mirror and Offline Kit Strategy.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/28-Nov-2025 - Mirror and Offline Kit Strategy.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/28-Nov-2025 - Mirror and Offline Kit Strategy.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/28-Nov-2025 - Notification Rules and Alerting Engine.md b/docs-archived/product/advisories/27-Nov-2025-superseded/28-Nov-2025 - Notification Rules and Alerting Engine.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/28-Nov-2025 - Notification Rules and Alerting Engine.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/28-Nov-2025 - Notification Rules and Alerting Engine.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/28-Nov-2025 - Orchestrator Event Model and Job Lifecycle.md b/docs-archived/product/advisories/27-Nov-2025-superseded/28-Nov-2025 - Orchestrator Event Model and Job Lifecycle.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/28-Nov-2025 - Orchestrator Event Model and Job Lifecycle.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/28-Nov-2025 - Orchestrator Event Model and Job Lifecycle.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/28-Nov-2025 - Plugin Architecture & Extensibility Patterns.md b/docs-archived/product/advisories/27-Nov-2025-superseded/28-Nov-2025 - Plugin Architecture & Extensibility Patterns.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/28-Nov-2025 - Plugin Architecture & Extensibility Patterns.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/28-Nov-2025 - Plugin Architecture & Extensibility Patterns.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/28-Nov-2025 - Policy Simulation and Shadow Gates.md b/docs-archived/product/advisories/27-Nov-2025-superseded/28-Nov-2025 - Policy Simulation and Shadow Gates.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/28-Nov-2025 - Policy Simulation and Shadow Gates.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/28-Nov-2025 - Policy Simulation and Shadow Gates.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/28-Nov-2025 - Runtime Posture and Observation with Zastava.md b/docs-archived/product/advisories/27-Nov-2025-superseded/28-Nov-2025 - Runtime Posture and Observation with Zastava.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/28-Nov-2025 - Runtime Posture and Observation with Zastava.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/28-Nov-2025 - Runtime Posture and Observation with Zastava.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/28-Nov-2025 - Sovereign Crypto for Regional Compliance.md b/docs-archived/product/advisories/27-Nov-2025-superseded/28-Nov-2025 - Sovereign Crypto for Regional Compliance.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/28-Nov-2025 - Sovereign Crypto for Regional Compliance.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/28-Nov-2025 - Sovereign Crypto for Regional Compliance.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/28-Nov-2025 - Task Pack Orchestration and Automation.md b/docs-archived/product/advisories/27-Nov-2025-superseded/28-Nov-2025 - Task Pack Orchestration and Automation.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/28-Nov-2025 - Task Pack Orchestration and Automation.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/28-Nov-2025 - Task Pack Orchestration and Automation.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/28-Nov-2025 - Telemetry and Observability Patterns.md b/docs-archived/product/advisories/27-Nov-2025-superseded/28-Nov-2025 - Telemetry and Observability Patterns.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/28-Nov-2025 - Telemetry and Observability Patterns.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/28-Nov-2025 - Telemetry and Observability Patterns.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/28-Nov-2025 - Vulnerability Triage UX & VEX-First Decisioning.md b/docs-archived/product/advisories/27-Nov-2025-superseded/28-Nov-2025 - Vulnerability Triage UX & VEX-First Decisioning.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/28-Nov-2025 - Vulnerability Triage UX & VEX-First Decisioning.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/28-Nov-2025 - Vulnerability Triage UX & VEX-First Decisioning.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/29-Nov-2025 - Acceptance Tests Pack for StellaOps Guardrails.md b/docs-archived/product/advisories/27-Nov-2025-superseded/29-Nov-2025 - Acceptance Tests Pack for StellaOps Guardrails.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/29-Nov-2025 - Acceptance Tests Pack for StellaOps Guardrails.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/29-Nov-2025 - Acceptance Tests Pack for StellaOps Guardrails.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/29-Nov-2025 - CVSS v4.0 Momentum in Vulnerability Management.md b/docs-archived/product/advisories/27-Nov-2025-superseded/29-Nov-2025 - CVSS v4.0 Momentum in Vulnerability Management.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/29-Nov-2025 - CVSS v4.0 Momentum in Vulnerability Management.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/29-Nov-2025 - CVSS v4.0 Momentum in Vulnerability Management.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/29-Nov-2025 - SBOM to VEX Proof Pipeline Blueprint.md b/docs-archived/product/advisories/27-Nov-2025-superseded/29-Nov-2025 - SBOM to VEX Proof Pipeline Blueprint.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/29-Nov-2025 - SBOM to VEX Proof Pipeline Blueprint.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/29-Nov-2025 - SBOM to VEX Proof Pipeline Blueprint.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/29-Nov-2025 - SCA Failure Catalogue for StellaOps Tests.md b/docs-archived/product/advisories/27-Nov-2025-superseded/29-Nov-2025 - SCA Failure Catalogue for StellaOps Tests.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/29-Nov-2025 - SCA Failure Catalogue for StellaOps Tests.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/29-Nov-2025 - SCA Failure Catalogue for StellaOps Tests.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/29-Nov-2025 - StellaOps – Mid-Level .NET Onboarding (Quick Start).md b/docs-archived/product/advisories/27-Nov-2025-superseded/29-Nov-2025 - StellaOps – Mid-Level .NET Onboarding (Quick Start).md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/29-Nov-2025 - StellaOps – Mid-Level .NET Onboarding (Quick Start).md rename to docs-archived/product/advisories/27-Nov-2025-superseded/29-Nov-2025 - StellaOps – Mid-Level .NET Onboarding (Quick Start).md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/30-Nov-2025 - Comparative Evidence Patterns for Stella Ops.md b/docs-archived/product/advisories/27-Nov-2025-superseded/30-Nov-2025 - Comparative Evidence Patterns for Stella Ops.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/30-Nov-2025 - Comparative Evidence Patterns for Stella Ops.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/30-Nov-2025 - Comparative Evidence Patterns for Stella Ops.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/30-Nov-2025 - Ecosystem Reality Test Cases.md b/docs-archived/product/advisories/27-Nov-2025-superseded/30-Nov-2025 - Ecosystem Reality Test Cases.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/30-Nov-2025 - Ecosystem Reality Test Cases.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/30-Nov-2025 - Ecosystem Reality Test Cases.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/30-Nov-2025 - Implementor Guidelines for Stella Ops.md b/docs-archived/product/advisories/27-Nov-2025-superseded/30-Nov-2025 - Implementor Guidelines for Stella Ops.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/30-Nov-2025 - Implementor Guidelines for Stella Ops.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/30-Nov-2025 - Implementor Guidelines for Stella Ops.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/30-Nov-2025 - Reachability Benchmark Fixtures Snapshot.md b/docs-archived/product/advisories/27-Nov-2025-superseded/30-Nov-2025 - Reachability Benchmark Fixtures Snapshot.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/30-Nov-2025 - Reachability Benchmark Fixtures Snapshot.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/30-Nov-2025 - Reachability Benchmark Fixtures Snapshot.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/30-Nov-2025 - Rekor Receipt Checklist for Stella Ops.md b/docs-archived/product/advisories/27-Nov-2025-superseded/30-Nov-2025 - Rekor Receipt Checklist for Stella Ops.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/30-Nov-2025 - Rekor Receipt Checklist for Stella Ops.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/30-Nov-2025 - Rekor Receipt Checklist for Stella Ops.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/30-Nov-2025 - Standup Sprint Kickstarters.md b/docs-archived/product/advisories/27-Nov-2025-superseded/30-Nov-2025 - Standup Sprint Kickstarters.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/30-Nov-2025 - Standup Sprint Kickstarters.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/30-Nov-2025 - Standup Sprint Kickstarters.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/30-Nov-2025 - UI Micro-Interactions for StellaOps.md b/docs-archived/product/advisories/27-Nov-2025-superseded/30-Nov-2025 - UI Micro-Interactions for StellaOps.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/30-Nov-2025 - UI Micro-Interactions for StellaOps.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/30-Nov-2025 - UI Micro-Interactions for StellaOps.md diff --git a/docs-archived/product-advisories/27-Nov-2025-superseded/30-Nov-2025 - Unknowns Decay & Triage Heuristics.md b/docs-archived/product/advisories/27-Nov-2025-superseded/30-Nov-2025 - Unknowns Decay & Triage Heuristics.md similarity index 100% rename from docs-archived/product-advisories/27-Nov-2025-superseded/30-Nov-2025 - Unknowns Decay & Triage Heuristics.md rename to docs-archived/product/advisories/27-Nov-2025-superseded/30-Nov-2025 - Unknowns Decay & Triage Heuristics.md diff --git a/docs-archived/product-advisories/30-Dec-2025 - Binary Diff Signatures for Patch Detection.md b/docs-archived/product/advisories/30-Dec-2025 - Binary Diff Signatures for Patch Detection.md similarity index 100% rename from docs-archived/product-advisories/30-Dec-2025 - Binary Diff Signatures for Patch Detection.md rename to docs-archived/product/advisories/30-Dec-2025 - Binary Diff Signatures for Patch Detection.md diff --git a/docs-archived/product-advisories/30-Dec-2025 - Building a Golden Set for Patch Validation.md b/docs-archived/product/advisories/30-Dec-2025 - Building a Golden Set for Patch Validation.md similarity index 100% rename from docs-archived/product-advisories/30-Dec-2025 - Building a Golden Set for Patch Validation.md rename to docs-archived/product/advisories/30-Dec-2025 - Building a Golden Set for Patch Validation.md diff --git a/docs-archived/product-advisories/30-Dec-2025 - Designing a Deterministic VEX Resolver.md b/docs-archived/product/advisories/30-Dec-2025 - Designing a Deterministic VEX Resolver.md similarity index 100% rename from docs-archived/product-advisories/30-Dec-2025 - Designing a Deterministic VEX Resolver.md rename to docs-archived/product/advisories/30-Dec-2025 - Designing a Deterministic VEX Resolver.md diff --git a/docs-archived/product-advisories/30-Dec-2025 - Evidence‑Gated AI Explanations.md b/docs-archived/product/advisories/30-Dec-2025 - Evidence‑Gated AI Explanations.md similarity index 100% rename from docs-archived/product-advisories/30-Dec-2025 - Evidence‑Gated AI Explanations.md rename to docs-archived/product/advisories/30-Dec-2025 - Evidence‑Gated AI Explanations.md diff --git a/docs-archived/product-advisories/ADVISORY_20251229_SBOM_LINEAGE_AND_TESTING.md b/docs-archived/product/advisories/ADVISORY_20251229_SBOM_LINEAGE_AND_TESTING.md similarity index 100% rename from docs-archived/product-advisories/ADVISORY_20251229_SBOM_LINEAGE_AND_TESTING.md rename to docs-archived/product/advisories/ADVISORY_20251229_SBOM_LINEAGE_AND_TESTING.md diff --git a/docs-archived/product-advisories/ADVISORY_SBOM_LINEAGE_GRAPH.md b/docs-archived/product/advisories/ADVISORY_SBOM_LINEAGE_GRAPH.md similarity index 100% rename from docs-archived/product-advisories/ADVISORY_SBOM_LINEAGE_GRAPH.md rename to docs-archived/product/advisories/ADVISORY_SBOM_LINEAGE_GRAPH.md diff --git a/docs-archived/product-advisories/ANALYSIS_20251229_lineage_crossdistro_gap.md b/docs-archived/product/advisories/ANALYSIS_20251229_lineage_crossdistro_gap.md similarity index 100% rename from docs-archived/product-advisories/ANALYSIS_20251229_lineage_crossdistro_gap.md rename to docs-archived/product/advisories/ANALYSIS_20251229_lineage_crossdistro_gap.md diff --git a/docs-archived/product-advisories/CONSOLIDATED - Deterministic Evidence and Verdict Architecture.md b/docs-archived/product/advisories/CONSOLIDATED - Deterministic Evidence and Verdict Architecture.md similarity index 100% rename from docs-archived/product-advisories/CONSOLIDATED - Deterministic Evidence and Verdict Architecture.md rename to docs-archived/product/advisories/CONSOLIDATED - Deterministic Evidence and Verdict Architecture.md diff --git a/docs-archived/product-advisories/CONSOLIDATED - Diff-Aware Release Gates and Risk Budgets.md b/docs-archived/product/advisories/CONSOLIDATED - Diff-Aware Release Gates and Risk Budgets.md similarity index 100% rename from docs-archived/product-advisories/CONSOLIDATED - Diff-Aware Release Gates and Risk Budgets.md rename to docs-archived/product/advisories/CONSOLIDATED - Diff-Aware Release Gates and Risk Budgets.md diff --git a/docs/api/score-replay-api.md b/docs/api/score-replay-api.md index 9eea61204..c3b58e35a 100644 --- a/docs/api/score-replay-api.md +++ b/docs/api/score-replay-api.md @@ -279,4 +279,4 @@ curl -H "Authorization: Bearer $TOKEN" \ - [Proof Bundle Format](./proof-bundle-format.md) - [Scanner Architecture](../modules/scanner/architecture.md) -- [Determinism Requirements](../product-advisories/14-Dec-2025%20-%20Determinism%20and%20Reproducibility%20Technical%20Reference.md) +- [Determinism Requirements](../product/advisories/14-Dec-2025%20-%20Determinism%20and%20Reproducibility%20Technical%20Reference.md) diff --git a/docs/api/smart-diff-types.md b/docs/api/smart-diff-types.md index 0ab2ced61..041f53be1 100644 --- a/docs/api/smart-diff-types.md +++ b/docs/api/smart-diff-types.md @@ -320,6 +320,6 @@ if (result.Suppressed) ## Related Documentation -- [Smart-Diff Technical Reference](../product-advisories/14-Dec-2025%20-%20Smart-Diff%20Technical%20Reference.md) +- [Smart-Diff Technical Reference](../product/advisories/14-Dec-2025%20-%20Smart-Diff%20Technical%20Reference.md) - [Scanner Architecture](../modules/scanner/architecture.md) - [Policy Architecture](../modules/policy/architecture.md) diff --git a/docs/api/unknowns-api.md b/docs/api/unknowns-api.md index a65d6d511..def608697 100644 --- a/docs/api/unknowns-api.md +++ b/docs/api/unknowns-api.md @@ -353,6 +353,6 @@ pressure = min(epss_normalized + kev_factor, 1.0) ## Related Documentation -- [Unknowns Ranking Technical Reference](../product-advisories/14-Dec-2025%20-%20Triage%20and%20Unknowns%20Technical%20Reference.md) +- [Unknowns Ranking Technical Reference](../product/advisories/14-Dec-2025%20-%20Triage%20and%20Unknowns%20Technical%20Reference.md) - [Scanner Architecture](../modules/scanner/architecture.md) - [Proof Bundle Format](../api/proof-bundle-format.md) diff --git a/docs/benchmarks/competitive-implementation-milestones.md b/docs/benchmarks/competitive-implementation-milestones.md index 95275329d..9c951a440 100644 --- a/docs/benchmarks/competitive-implementation-milestones.md +++ b/docs/benchmarks/competitive-implementation-milestones.md @@ -1,6 +1,6 @@ # Competitive Benchmark Implementation Milestones -> Source: `docs/product-advisories/19-Dec-2025 - Benchmarking Container Scanners Against Stella Ops.md` +> Source: `docs/product/advisories/19-Dec-2025 - Benchmarking Container Scanners Against Stella Ops.md` > > This document translates the competitive matrix into concrete implementation milestones with measurable acceptance criteria. @@ -281,7 +281,7 @@ Each milestone should have corresponding benchmark tests in `bench/`: ## References -- Source advisory: `docs/product-advisories/19-Dec-2025 - Benchmarking Container Scanners Against Stella Ops.md` +- Source advisory: `docs/product/advisories/19-Dec-2025 - Benchmarking Container Scanners Against Stella Ops.md` - Moat spec: `docs/moat.md` - Key features: `docs/key-features.md` - Reachability delivery: `docs/modules/reach-graph/guides/DELIVERY_GUIDE.md` diff --git a/docs/benchmarks/fidelity-metrics.md b/docs/benchmarks/fidelity-metrics.md index 267a051c8..8529127b8 100644 --- a/docs/benchmarks/fidelity-metrics.md +++ b/docs/benchmarks/fidelity-metrics.md @@ -178,7 +178,7 @@ Configure fidelity options via `FidelityThresholds`: ## Related Documentation -- [Determinism and Reproducibility Technical Reference](../product-advisories/14-Dec-2025%20-%20Determinism%20and%20Reproducibility%20Technical%20Reference.md) +- [Determinism and Reproducibility Technical Reference](../product/advisories/14-Dec-2025%20-%20Determinism%20and%20Reproducibility%20Technical%20Reference.md) - [Determinism Scoring Foundations Sprint](../implplan/SPRINT_3401_0001_0001_determinism_scoring_foundations.md) - [Scanner Architecture](../modules/scanner/architecture.md) diff --git a/docs/benchmarks/ground-truth-corpus.md b/docs/benchmarks/ground-truth-corpus.md index aca94bff0..3c54702c5 100644 --- a/docs/benchmarks/ground-truth-corpus.md +++ b/docs/benchmarks/ground-truth-corpus.md @@ -246,6 +246,6 @@ stellaops bench baseline update \ ## Related Documentation -- [Reachability Analysis Technical Reference](../product-advisories/14-Dec-2025%20-%20Reachability%20Analysis%20Technical%20Reference.md) -- [Determinism and Reproducibility Technical Reference](../product-advisories/14-Dec-2025%20-%20Determinism%20and%20Reproducibility%20Technical%20Reference.md) +- [Reachability Analysis Technical Reference](../product/advisories/14-Dec-2025%20-%20Reachability%20Analysis%20Technical%20Reference.md) +- [Determinism and Reproducibility Technical Reference](../product/advisories/14-Dec-2025%20-%20Determinism%20and%20Reproducibility%20Technical%20Reference.md) - [Scanner Benchmark Submission Guide](submission-guide.md) diff --git a/docs/benchmarks/signals/bench-determinism.md b/docs/benchmarks/signals/bench-determinism.md index 1541b6d0d..1831b2322 100644 --- a/docs/benchmarks/signals/bench-determinism.md +++ b/docs/benchmarks/signals/bench-determinism.md @@ -49,7 +49,7 @@ for sbom, vex in zip(SBOMS, VEXES): - CI target `bench:determinism` producing determinism% and σ per scanner; optional `bench:reachability` to recompute graph hash and runtime hit stability. ## Links -- Source advisory: `docs/product-advisories/23-Nov-2025 - Benchmarking Determinism in Vulnerability Scoring.md` +- Source advisory: `docs/product/advisories/23-Nov-2025 - Benchmarking Determinism in Vulnerability Scoring.md` - Sprint task: BENCH-DETERMINISM-401-057 (SPRINT_0401_0001_0001_reachability_evidence_chain.md) --- diff --git a/docs/benchmarks/smart-diff-wii.md b/docs/benchmarks/smart-diff-wii.md index fc1ce191b..6efb2469f 100644 --- a/docs/benchmarks/smart-diff-wii.md +++ b/docs/benchmarks/smart-diff-wii.md @@ -1,6 +1,6 @@ # Smart-Diff Weighted Impact Index (WII) -**Source Advisory:** `docs/product-advisories/unprocessed/16-Dec-2025 - Smart‑Diff Meets Call‑Stack Reachability.md` +**Source Advisory:** `docs/product/advisories/unprocessed/16-Dec-2025 - Smart‑Diff Meets Call‑Stack Reachability.md` **Status:** Processed 2025-12-17 ## Overview diff --git a/docs/benchmarks/testing/better-testing-strategy-samples.md b/docs/benchmarks/testing/better-testing-strategy-samples.md index 4fd531775..af6891d6a 100644 --- a/docs/benchmarks/testing/better-testing-strategy-samples.md +++ b/docs/benchmarks/testing/better-testing-strategy-samples.md @@ -1,6 +1,6 @@ # Better Testing Strategy - Code Samples -Source advisory: `docs/product-advisories/22-Dec-2026 - Better testing strategy.md` +Source advisory: `docs/product/advisories/22-Dec-2026 - Better testing strategy.md` Note: These samples are carried over verbatim for reference and should remain offline-friendly and deterministic. ## Minimal primitives to standardize immediately diff --git a/docs/benchmarks/tiered-precision-curves.md b/docs/benchmarks/tiered-precision-curves.md index 8a94f414f..0594c5ada 100644 --- a/docs/benchmarks/tiered-precision-curves.md +++ b/docs/benchmarks/tiered-precision-curves.md @@ -114,7 +114,7 @@ Fail builds when: - [Ground-Truth Corpus Sprint](../implplan/archived/SPRINT_3500_0003_0001_ground_truth_corpus_ci_gates.md) - [Scanner Architecture](../modules/scanner/architecture.md) -- [Reachability Analysis](../product-advisories/archived/2025-12-21-moat-gap-closure/14-Dec-2025%20-%20Reachability%20Analysis%20Technical%20Reference.md) +- [Reachability Analysis](../product/advisories/archived/2025-12-21-moat-gap-closure/14-Dec-2025%20-%20Reachability%20Analysis%20Technical%20Reference.md) ## Overlap Analysis diff --git a/docs/db/schemas/scan-metrics.md b/docs/db/schemas/scan-metrics.md index e1535ce06..a10aee3bc 100644 --- a/docs/db/schemas/scan-metrics.md +++ b/docs/db/schemas/scan-metrics.md @@ -191,5 +191,5 @@ psql -d stellaops -f 004_scan_metrics.sql ## Related - [Database Specification](./SPECIFICATION.md) -- [Determinism Advisory §13.1](../product-advisories/14-Dec-2025%20-%20Determinism%20and%20Reproducibility%20Technical%20Reference.md) +- [Determinism Advisory §13.1](../product/advisories/14-Dec-2025%20-%20Determinism%20and%20Reproducibility%20Technical%20Reference.md) - [Scheduler Schema](./schemas/scheduler.sql) diff --git a/docs/dev/contributing/corpus-contribution-guide.md b/docs/dev/contributing/corpus-contribution-guide.md index 8dc37fdf7..58fff438e 100644 --- a/docs/dev/contributing/corpus-contribution-guide.md +++ b/docs/dev/contributing/corpus-contribution-guide.md @@ -297,5 +297,5 @@ stellaops bench corpus run --sample gt-NNNN --verbose --show-evidence ## Related Documentation - [Tiered Precision Curves](../benchmarks/tiered-precision-curves.md) -- [Reachability Analysis](../product-advisories/14-Dec-2025%20-%20Reachability%20Analysis%20Technical%20Reference.md) +- [Reachability Analysis](../product/advisories/14-Dec-2025%20-%20Reachability%20Analysis%20Technical%20Reference.md) - [Corpus Index Schema](../../datasets/reachability/schemas/corpus-sample.v1.json) diff --git a/docs/dev/onboarding/dev-quickstart.md b/docs/dev/onboarding/dev-quickstart.md index 1eba92759..100165413 100644 --- a/docs/dev/onboarding/dev-quickstart.md +++ b/docs/dev/onboarding/dev-quickstart.md @@ -5,7 +5,7 @@ --- -This quickstart mirrors the 29-Nov-2025 Developer Onboarding advisory (`docs/product-advisories/29-Nov-2025 - StellaOps – Mid-Level .NET Onboarding (Quick Start).md`) and keeps the determinism-first guidance in sync with that release note. +This quickstart mirrors the 29-Nov-2025 Developer Onboarding advisory (`docs/product/advisories/29-Nov-2025 - StellaOps – Mid-Level .NET Onboarding (Quick Start).md`) and keeps the determinism-first guidance in sync with that release note. ## 1. What You’re Building (Context) diff --git a/docs/dev/performance-testing-playbook.md b/docs/dev/performance-testing-playbook.md index bacca1e7f..a699d8dba 100644 --- a/docs/dev/performance-testing-playbook.md +++ b/docs/dev/performance-testing-playbook.md @@ -659,5 +659,5 @@ perf/ --- **Document Version**: 1.0 -**Archived From**: docs/product-advisories/unprocessed/16-Dec-2025 - Reimagining Proof-Linked UX in Security Workflows.md +**Archived From**: docs/product/advisories/unprocessed/16-Dec-2025 - Reimagining Proof-Linked UX in Security Workflows.md **Archive Reason**: Wrong content was pasted; this performance testing content preserved for future use. diff --git a/docs/implplan/AGENTS.md b/docs/implplan/AGENTS.md index 0b04ec803..1877a272b 100644 --- a/docs/implplan/AGENTS.md +++ b/docs/implplan/AGENTS.md @@ -15,10 +15,10 @@ - Avoid external URLs unless already present; prefer relative doc links. ## Advisory Handling (must do for every new advisory) -- **Trigger:** any new/updated file in `docs/product-advisories/` (current or archived) automatically requires updates below—no chat approval. +- **Trigger:** any new/updated file in `docs/product/advisories/` (current or archived) automatically requires updates below—no chat approval. - **Docs:** add/update a high-level page in `docs/` (vision/key-features) and a detailed page in the closest area (`docs/modules/reach-graph/*`, `docs/benchmarks/*`, `docs/modules//*`, etc.). Inline only short snippets; place runnable/long code in `docs/benchmarks/**` or `tests/**` (deterministic, offline-friendly) and link. - **Sprints:** add Delivery Tracker rows in the relevant `SPRINT_*.md`, include doc paths, owners, deps; add an Execution Log line and risks/interlocks (schema/feed freeze, transparency caps) when needed. -- **De-dup:** check `docs/product-advisories/archived/`; mark “supersedes/extends ` if overlapping to avoid duplicate tasks. +- **De-dup:** check `docs/product/advisories/archived/`; mark “supersedes/extends ` if overlapping to avoid duplicate tasks. - **Defaults:** hybrid reachability posture (graph DSSE required; edge-bundle optional), deterministic/frozen feeds, offline-ready benches. - **Do not defer:** execute steps immediately, then report. diff --git a/docs/modules/airgap/guides/advisory-implementation-roadmap.md b/docs/modules/airgap/guides/advisory-implementation-roadmap.md index 9ecbd9f26..417bc7383 100644 --- a/docs/modules/airgap/guides/advisory-implementation-roadmap.md +++ b/docs/modules/airgap/guides/advisory-implementation-roadmap.md @@ -333,7 +333,7 @@ src/Authority/ ## References -- [14-Dec-2025 Offline and Air-Gap Technical Reference](../product-advisories/14-Dec-2025%20-%20Offline%20and%20Air-Gap%20Technical%20Reference.md) +- [14-Dec-2025 Offline and Air-Gap Technical Reference](../product/advisories/14-Dec-2025%20-%20Offline%20and%20Air-Gap%20Technical%20Reference.md) - [Air-Gap Mode Playbook](./airgap-mode.md) - [Offline Kit Documentation](../OFFLINE_KIT.md) - [Importer](./importer.md) diff --git a/docs/modules/airgap/guides/offline-parity-verification.md b/docs/modules/airgap/guides/offline-parity-verification.md index 438991ed5..364373d59 100644 --- a/docs/modules/airgap/guides/offline-parity-verification.md +++ b/docs/modules/airgap/guides/offline-parity-verification.md @@ -507,8 +507,8 @@ groups: ## 9. REFERENCES - [Offline Update Kit (OUK)](../OFFLINE_KIT.md) -- [Offline and Air-Gap Technical Reference](../product-advisories/14-Dec-2025%20-%20Offline%20and%20Air-Gap%20Technical%20Reference.md) -- [Determinism and Reproducibility Technical Reference](../product-advisories/14-Dec-2025%20-%20Determinism%20and%20Reproducibility%20Technical%20Reference.md) +- [Offline and Air-Gap Technical Reference](../product/advisories/14-Dec-2025%20-%20Offline%20and%20Air-Gap%20Technical%20Reference.md) +- [Determinism and Reproducibility Technical Reference](../product/advisories/14-Dec-2025%20-%20Determinism%20and%20Reproducibility%20Technical%20Reference.md) - [Determinism CI Harness](../modules/scanner/design/determinism-ci-harness.md) - [Performance Baselines](../benchmarks/performance-baselines.md) diff --git a/docs/modules/attestor/proof-chain-specification.md b/docs/modules/attestor/proof-chain-specification.md index 7b709f73a..d380ac12b 100644 --- a/docs/modules/attestor/proof-chain-specification.md +++ b/docs/modules/attestor/proof-chain-specification.md @@ -2,7 +2,7 @@ **Version**: 1.0 **Status**: Implementation Ready -**Source**: `docs/product-advisories/14-Dec-2025 - Proof and Evidence Chain Technical Reference.md` +**Source**: `docs/product/advisories/14-Dec-2025 - Proof and Evidence Chain Technical Reference.md` **Last Updated**: 2025-12-14 --- diff --git a/docs/modules/attestor/proof-spine-algorithm.md b/docs/modules/attestor/proof-spine-algorithm.md index 99e3fe0e7..95de5236f 100644 --- a/docs/modules/attestor/proof-spine-algorithm.md +++ b/docs/modules/attestor/proof-spine-algorithm.md @@ -210,6 +210,6 @@ public record ProofSpineResult ## Related Documentation -- [Proof and Evidence Chain Technical Reference](../product-advisories/14-Dec-2025%20-%20Proof%20and%20Evidence%20Chain%20Technical%20Reference.md) - §2.4, §4.2, §9 +- [Proof and Evidence Chain Technical Reference](../product/advisories/14-Dec-2025%20-%20Proof%20and%20Evidence%20Chain%20Technical%20Reference.md) - §2.4, §4.2, §9 - [Content-Addressed IDs](./content-addressed-ids.md) - [DSSE Predicates](./dsse-predicates.md) diff --git a/docs/modules/attestor/rekor-verification-design.md b/docs/modules/attestor/rekor-verification-design.md index 39f5fa6a5..369641b25 100644 --- a/docs/modules/attestor/rekor-verification-design.md +++ b/docs/modules/attestor/rekor-verification-design.md @@ -688,4 +688,4 @@ attestor: - [RFC 6962: Certificate Transparency](https://datatracker.ietf.org/doc/html/rfc6962) - [Sigstore Rekor](https://github.com/sigstore/rekor) - [Transparency.dev Checkpoint Format](https://github.com/transparency-dev/formats) -- [Advisory: Rekor Integration Technical Reference](../../../product-advisories/14-Dec-2025%20-%20Rekor%20Integration%20Technical%20Reference.md) +- [Advisory: Rekor Integration Technical Reference](../../../product/advisories/14-Dec-2025%20-%20Rekor%20Integration%20Technical%20Reference.md) diff --git a/docs/modules/attestor/transparency.md b/docs/modules/attestor/transparency.md index ec08aa9b3..0ebd2f800 100644 --- a/docs/modules/attestor/transparency.md +++ b/docs/modules/attestor/transparency.md @@ -10,7 +10,7 @@ This document freezes the **offline verification inputs** used by Attestor in se ## Offline Inputs (Air-Gap / Sealed Mode) -Baseline directory layout is defined in `docs/product-advisories/14-Dec-2025 - Offline and Air-Gap Technical Reference.md`: +Baseline directory layout is defined in `docs/product/advisories/14-Dec-2025 - Offline and Air-Gap Technical Reference.md`: ``` /evidence/ @@ -26,7 +26,7 @@ Baseline directory layout is defined in `docs/product-advisories/14-Dec-2025 - O The offline kit (or any offline DSSE evidence pack) may include a Rekor receipt alongside a DSSE statement. - **Schema:** `docs/modules/attestor/schemas/rekor-receipt.schema.json` -- **Source:** `docs/product-advisories/14-Dec-2025 - Rekor Integration Technical Reference.md` (Section 13.1) and `docs/product-advisories/14-Dec-2025 - Offline and Air-Gap Technical Reference.md` (Section 1.4) +- **Source:** `docs/product/advisories/14-Dec-2025 - Rekor Integration Technical Reference.md` (Section 13.1) and `docs/product/advisories/14-Dec-2025 - Offline and Air-Gap Technical Reference.md` (Section 1.4) Fields: - `uuid`: Rekor entry UUID. @@ -50,7 +50,7 @@ Contract: Contract: - Files are **NDJSON** (one JSON object per line). -- Each line uses the "Rekor Entry Structure" defined in `docs/product-advisories/14-Dec-2025 - Rekor Integration Technical Reference.md` (Section 4). +- Each line uses the "Rekor Entry Structure" defined in `docs/product/advisories/14-Dec-2025 - Rekor Integration Technical Reference.md` (Section 4). - **Deterministic ordering**: - File names sort lexicographically (Ordinal). - Within each file, lines sort by `rekor.logIndex` ascending. diff --git a/docs/modules/authority/gaps/2025-12-04-auth-gaps-au1-au10.md b/docs/modules/authority/gaps/2025-12-04-auth-gaps-au1-au10.md index ff8994c2e..cca7cd6db 100644 --- a/docs/modules/authority/gaps/2025-12-04-auth-gaps-au1-au10.md +++ b/docs/modules/authority/gaps/2025-12-04-auth-gaps-au1-au10.md @@ -1,6 +1,6 @@ # Authority Gap Remediation · AU1–AU10 (31-Nov-2025 Findings) -Source: `docs/product-advisories/31-Nov-2025 FINDINGS.md` (AU1–AU10). Scope covers Authority scoping, crypto posture, and verifier/offline expectations. +Source: `docs/product/advisories/31-Nov-2025 FINDINGS.md` (AU1–AU10). Scope covers Authority scoping, crypto posture, and verifier/offline expectations. ## Deliverables & Evidence Map | ID | Requirement (from advisory) | Authority deliverable | Evidence & location | diff --git a/docs/modules/authority/gaps/2025-12-04-rekor-receipt-gaps-rr1-rr10.md b/docs/modules/authority/gaps/2025-12-04-rekor-receipt-gaps-rr1-rr10.md index e70a65675..7ebad7730 100644 --- a/docs/modules/authority/gaps/2025-12-04-rekor-receipt-gaps-rr1-rr10.md +++ b/docs/modules/authority/gaps/2025-12-04-rekor-receipt-gaps-rr1-rr10.md @@ -1,6 +1,6 @@ # Rekor Receipt Remediation · RR1–RR10 (Authority/Attestor/Sbomer) -Source: `docs/product-advisories/31-Nov-2025 FINDINGS.md` (RR1–RR10). Scope is Rekor receipt schema/catalog and offline verification path consumed by Authority + Sbomer + Attestor. +Source: `docs/product/advisories/31-Nov-2025 FINDINGS.md` (RR1–RR10). Scope is Rekor receipt schema/catalog and offline verification path consumed by Authority + Sbomer + Attestor. ## Deliverables & Evidence Map | ID | Requirement | Deliverable | Evidence & location | diff --git a/docs/modules/authority/verdict-manifest.md b/docs/modules/authority/verdict-manifest.md index 8dc5b299a..dae261585 100644 --- a/docs/modules/authority/verdict-manifest.md +++ b/docs/modules/authority/verdict-manifest.md @@ -3,7 +3,7 @@ > **Status**: Implementation Complete (Sprint 7100) > **Version**: 1.0.0 > **Last Updated**: 2025-12-22 -> **Source Advisory**: `docs/product-advisories/archived/22-Dec-2026 - Building a Trust Lattice for VEX Sources.md` +> **Source Advisory**: `docs/product/advisories/archived/22-Dec-2026 - Building a Trust Lattice for VEX Sources.md` ## 1. Overview diff --git a/docs/modules/binary-index/architecture.md b/docs/modules/binary-index/architecture.md index cafaf9605..8da2e50f1 100644 --- a/docs/modules/binary-index/architecture.md +++ b/docs/modules/binary-index/architecture.md @@ -875,7 +875,7 @@ binaryindex: ## 10. References -- Advisory: `docs/product-advisories/21-Dec-2025 - Mapping Evidence Within Compiled Binaries.md` +- Advisory: `docs/product/advisories/21-Dec-2025 - Mapping Evidence Within Compiled Binaries.md` - Scanner Native Analysis: `src/Scanner/StellaOps.Scanner.Analyzers.Native/` - Existing Fingerprinting: `src/Scanner/__Libraries/StellaOps.Scanner.EntryTrace/Binary/` - Build-ID Index: `src/Scanner/StellaOps.Scanner.Analyzers.Native/Index/` diff --git a/docs/modules/evidence-locker/bundle-packaging.md b/docs/modules/evidence-locker/bundle-packaging.md index 480cda56b..f8525b2a0 100644 --- a/docs/modules/evidence-locker/bundle-packaging.md +++ b/docs/modules/evidence-locker/bundle-packaging.md @@ -38,7 +38,7 @@ The endpoint reuses `EvidenceBundlePackagingService` and caches the packaged obj ## Verification guidance -Upcoming EB1–EB10 remediation (Sprint 0161; advisory `docs/product-advisories/archived/27-Nov-2025-superseded/28-Nov-2025 - Evidence Bundle and Replay Contracts.md`): +Upcoming EB1–EB10 remediation (Sprint 0161; advisory `docs/product/advisories/archived/27-Nov-2025-superseded/28-Nov-2025 - Evidence Bundle and Replay Contracts.md`): - Publish `bundle.manifest.schema.json` and `checksums.schema.json` with canonical JSON rules and signatures. - Document the Merkle hash recipe and DSSE predicate/log policy. - Ship an offline verifier script and golden bundles/replay fixtures to prove determinism. diff --git a/docs/modules/evidence-locker/eb-gaps-161-007-plan.md b/docs/modules/evidence-locker/eb-gaps-161-007-plan.md index cf2b75160..2c240fd02 100644 --- a/docs/modules/evidence-locker/eb-gaps-161-007-plan.md +++ b/docs/modules/evidence-locker/eb-gaps-161-007-plan.md @@ -27,6 +27,6 @@ Working directory: `docs/implplan` (sprint coordination) with artefacts in `docs - Bump Evidence Locker and CLI SemVer and changelog once above artefacts are wired (EB10) — **completed** with changelog v1.1.0 and fixture drop; wire binaries/CLI version in next release cut. ## Dependencies and Links -- Advisory: `docs/product-advisories/archived/27-Nov-2025-superseded/28-Nov-2025 - Evidence Bundle and Replay Contracts.md` +- Advisory: `docs/product/advisories/archived/27-Nov-2025-superseded/28-Nov-2025 - Evidence Bundle and Replay Contracts.md` - Replay rules: `docs/replay/DETERMINISTIC_REPLAY.md` - Sprint tracking: `docs/implplan/SPRINT_0161_0001_0001_evidencelocker.md` (EVID-GAPS-161-007) diff --git a/docs/modules/excititor/trust-lattice.md b/docs/modules/excititor/trust-lattice.md index f348864f5..b6c70d079 100644 --- a/docs/modules/excititor/trust-lattice.md +++ b/docs/modules/excititor/trust-lattice.md @@ -3,7 +3,7 @@ > **Status**: Implementation Complete (Sprint 7100) > **Version**: 1.0.0 > **Last Updated**: 2025-12-22 -> **Source Advisory**: `docs/product-advisories/archived/22-Dec-2026 - Building a Trust Lattice for VEX Sources.md` +> **Source Advisory**: `docs/product/advisories/archived/22-Dec-2026 - Building a Trust Lattice for VEX Sources.md` ## 1. Overview diff --git a/docs/modules/export-center/architecture.md b/docs/modules/export-center/architecture.md index b88addcab..0fd608bb8 100644 --- a/docs/modules/export-center/architecture.md +++ b/docs/modules/export-center/architecture.md @@ -25,7 +25,7 @@ The Export Center is the dedicated service layer that packages StellaOps evidenc - Integrity: require checksum/signature headers and OCI annotations; mirror delta/tombstone rules documented for adapters. - Security: cross-tenant exports denied by default; enforce approval tokens and encryption recipient validation. - Offline parity: provide export-kit packaging + verify script for air-gap consumers; include fixtures under `src/ExportCenter/__fixtures`. -- Advisory link: see `docs/product-advisories/28-Nov-2025 - Export Center and Reporting Strategy.md` (EC1–EC10) for original requirements and keep it alongside sprint tasks for implementers. +- Advisory link: see `docs/product/advisories/28-Nov-2025 - Export Center and Reporting Strategy.md` (EC1–EC10) for original requirements and keep it alongside sprint tasks for implementers. ## Job lifecycle 1. **Profile selection.** Operator or automation picks a profile (`json:raw`, `json:policy`, `trivy:db`, `trivy:java-db`, `mirror:full`, `mirror:delta`) and submits scope selectors (tenant, time window, products, SBOM subjects, ecosystems). See `docs/modules/export-center/profiles.md` for profile definitions and configuration fields. @@ -88,7 +88,7 @@ Audit bundles are a specialized Export Center output: a deterministic, immutable - `GET /v1/audit-bundles` - List previously created bundles. - `GET /v1/audit-bundles/{bundleId}` - Returns job metadata (`Accept: application/json`) or streams bundle bytes (`Accept: application/octet-stream`). - **Typical contents**: vuln reports, SBOM(s), VEX decisions, policy evaluations, and DSSE attestations, plus an integrity root hash and optional OCI reference. -- **Reference**: `docs/product-advisories/archived/27-Nov-2025-superseded/28-Nov-2025 - Vulnerability Triage UX & VEX-First Decisioning.md`. +- **Reference**: `docs/product/advisories/archived/27-Nov-2025-superseded/28-Nov-2025 - Vulnerability Triage UX & VEX-First Decisioning.md`. ## Adapter responsibilities - **JSON (`json:raw`, `json:policy`).** diff --git a/docs/modules/export-center/determinism.md b/docs/modules/export-center/determinism.md index d56841d5e..64b5d7961 100644 --- a/docs/modules/export-center/determinism.md +++ b/docs/modules/export-center/determinism.md @@ -1,6 +1,6 @@ # Export Center Determinism & Rerun Hash Guide -Advisory anchor: `docs/product-advisories/archived/27-Nov-2025-superseded/28-Nov-2025 - Export Center and Reporting Strategy.md` (EC1–EC10). +Advisory anchor: `docs/product/advisories/archived/27-Nov-2025-superseded/28-Nov-2025 - Export Center and Reporting Strategy.md` (EC1–EC10). ## EC1 — Signed schemas - Export profile schema: `docs/modules/export-center/schemas/export-profile.schema.json` (selectors, approvals, quotas). diff --git a/docs/modules/findings-ledger/gaps-FL1-FL10.md b/docs/modules/findings-ledger/gaps-FL1-FL10.md index 018d580b9..33a1cae20 100644 --- a/docs/modules/findings-ledger/gaps-FL1-FL10.md +++ b/docs/modules/findings-ledger/gaps-FL1-FL10.md @@ -1,6 +1,6 @@ # Findings Ledger — FL1–FL10 Remediation (LEDGER-GAPS-121-009) -**Source advisory:** `docs/product-advisories/archived/27-Nov-2025-superseded/28-Nov-2025 - Findings Ledger and Immutable Audit Trail.md` +**Source advisory:** `docs/product/advisories/archived/27-Nov-2025-superseded/28-Nov-2025 - Findings Ledger and Immutable Audit Trail.md` **Created:** 2025-12-02 · **Owner:** Findings Ledger Guild ## Gap closure map diff --git a/docs/modules/gateway/architecture.md b/docs/modules/gateway/architecture.md index 6e8214e5e..a0e04f6fd 100644 --- a/docs/modules/gateway/architecture.md +++ b/docs/modules/gateway/architecture.md @@ -457,7 +457,7 @@ spec: - Router ASP.NET Endpoint Bridge: `docs/modules/router/aspnet-endpoint-bridge.md` - Router Messaging (Valkey) Transport: `docs/modules/router/messaging-valkey-transport.md` - Authority Integration: `docs/modules/authority/architecture.md` -- Reference Architecture: `docs/product-advisories/archived/2025-12-21-reference-architecture/` +- Reference Architecture: `docs/product/advisories/archived/2025-12-21-reference-architecture/` --- diff --git a/docs/modules/notify/gaps-nr1-nr10.md b/docs/modules/notify/gaps-nr1-nr10.md index d0f25f370..c24aa932d 100644 --- a/docs/modules/notify/gaps-nr1-nr10.md +++ b/docs/modules/notify/gaps-nr1-nr10.md @@ -1,4 +1,4 @@ -# Notify Gaps NR1–NR10 — Remediation Blueprint (source: `docs/product-advisories/31-Nov-2025 FINDINGS.md`) +# Notify Gaps NR1–NR10 — Remediation Blueprint (source: `docs/product/advisories/31-Nov-2025 FINDINGS.md`) ## Scope Close NR1–NR10 by defining contracts, evidence, and deterministic test hooks for the Notifier runtime (service + worker + offline kit). This doc is the detailed layer referenced by sprint `SPRINT_0171_0001_0001_notifier_i` and NOTIFY-GAPS-171-014. diff --git a/docs/modules/platform/architecture-overview.md b/docs/modules/platform/architecture-overview.md index 62b351285..9eb03be1b 100644 --- a/docs/modules/platform/architecture-overview.md +++ b/docs/modules/platform/architecture-overview.md @@ -12,20 +12,20 @@ This dossier summarises the end-to-end runtime topology after the Aggregation-On > Testing strategy models and CI lanes live in `docs/technical/testing/testing-strategy-models.md`, with the source catalog in `docs/technical/testing/TEST_CATALOG.yml`. -> Planner note: the [SBOM→VEX proof blueprint](../product-advisories/29-Nov-2025 - SBOM to VEX Proof Pipeline Blueprint.md) shows the DSSE → Rekor v2 tiles → VEX linkage, so threat-model and compliance teams can copy the capture/verification checkpoints. +> Planner note: the [SBOM→VEX proof blueprint](../product/advisories/29-Nov-2025 - SBOM to VEX Proof Pipeline Blueprint.md) shows the DSSE → Rekor v2 tiles → VEX linkage, so threat-model and compliance teams can copy the capture/verification checkpoints. -> Working on a feature? Check the [Implementor Guidelines](../product-advisories/30-Nov-2025 - Implementor Guidelines for Stella Ops.md) to align with the SRS + release playbook checklist before you merge anything into main. +> Working on a feature? Check the [Implementor Guidelines](../product/advisories/30-Nov-2025 - Implementor Guidelines for Stella Ops.md) to align with the SRS + release playbook checklist before you merge anything into main. -> Need to prove Rekor receipts? The [Rekor Receipt Checklist](../product-advisories/30-Nov-2025 - Rekor Receipt Checklist for Stella Ops.md) maps each field to a module owner and explains offline metadata for deterministic re-verification. +> Need to prove Rekor receipts? The [Rekor Receipt Checklist](../product/advisories/30-Nov-2025 - Rekor Receipt Checklist for Stella Ops.md) maps each field to a module owner and explains offline metadata for deterministic re-verification. -> Taming unknowns? The [Unknowns Decay & Triage Heuristics](../product-advisories/30-Nov-2025 - Unknowns Decay & Triage Heuristics.md) explains the confidence decay card, triage queue view, and the daily export artifact for planning. +> Taming unknowns? The [Unknowns Decay & Triage Heuristics](../product/advisories/30-Nov-2025 - Unknowns Decay & Triage Heuristics.md) explains the confidence decay card, triage queue view, and the daily export artifact for planning. -> Check the [Ecosystem Reality Test Cases](../product-advisories/30-Nov-2025 - Ecosystem Reality Test Cases for StellaOps.md) for reproducible acceptance tests based on credential leaks, offline DB schema issues, SBOM parity drift, and scanner version divergence. +> Check the [Ecosystem Reality Test Cases](../product/advisories/30-Nov-2025 - Ecosystem Reality Test Cases for StellaOps.md) for reproducible acceptance tests based on credential leaks, offline DB schema issues, SBOM parity drift, and scanner version divergence. -> Need unblocker tasks? The [Standup Sprint Kickstarters](../product-advisories/30-Nov-2025 - Standup Sprint Kickstarters.md) lists three day-0 wins (scanner regressions, Postgres slice, DSSE/Rekor sweep) plus ready-to-copy ticket names. -> Compare how evidence/suppression/audit flows work elsewhere via the [Comparative Evidence Patterns](../product-advisories/30-Nov-2025 - Comparative Evidence Patterns for Stella Ops.md) brief—Snyk, GitHub, Aqua, Anchore/Grype, Prisma Cloud, and the UX trade-offs. +> Need unblocker tasks? The [Standup Sprint Kickstarters](../product/advisories/30-Nov-2025 - Standup Sprint Kickstarters.md) lists three day-0 wins (scanner regressions, Postgres slice, DSSE/Rekor sweep) plus ready-to-copy ticket names. +> Compare how evidence/suppression/audit flows work elsewhere via the [Comparative Evidence Patterns](../product/advisories/30-Nov-2025 - Comparative Evidence Patterns for Stella Ops.md) brief—Snyk, GitHub, Aqua, Anchore/Grype, Prisma Cloud, and the UX trade-offs. -> Evaluate public scanner incidents? The [Ecosystem Test Cases](../product-advisories/30-Nov-2025 - Ecosystem Test Cases for StellaOps.md) document five hardened regressions (Grype credential leak, Trivy offline schema, SBOM parity, Grype instability) that you can turn into acceptance tests today. +> Evaluate public scanner incidents? The [Ecosystem Test Cases](../product/advisories/30-Nov-2025 - Ecosystem Test Cases for StellaOps.md) document five hardened regressions (Grype credential leak, Trivy offline schema, SBOM parity, Grype instability) that you can turn into acceptance tests today. ## 1 · System landscape diff --git a/docs/modules/platform/explainable-triage-implementation-plan.md b/docs/modules/platform/explainable-triage-implementation-plan.md index 1c7ffdd76..4e4d8433f 100644 --- a/docs/modules/platform/explainable-triage-implementation-plan.md +++ b/docs/modules/platform/explainable-triage-implementation-plan.md @@ -201,7 +201,7 @@ Per advisory, a release is "done" only if: ## References -- **Advisory**: `docs/product-advisories/archived/21-Dec-2025 - Designing Explainable Triage Workflows.md` +- **Advisory**: `docs/product/advisories/archived/21-Dec-2025 - Designing Explainable Triage Workflows.md` - **Sprint Summary**: `docs/implplan/SPRINT_7000_SUMMARY.md` - **Individual Sprints**: `docs/implplan/SPRINT_7000_*.md` diff --git a/docs/modules/platform/moat-gap-analysis.md b/docs/modules/platform/moat-gap-analysis.md index 42982ea09..90a318b48 100644 --- a/docs/modules/platform/moat-gap-analysis.md +++ b/docs/modules/platform/moat-gap-analysis.md @@ -272,5 +272,5 @@ This document captures the gap analysis between the competitive moat advisory an ## References - **Sprints**: `docs/implplan/SPRINT_4300_*.md`, `SPRINT_4400_*.md`, `SPRINT_4500_*.md`, `SPRINT_4600_*.md` -- **Original Advisory**: `docs/product-advisories/archived/19-Dec-2025 - Stella Ops candidate features mapped to moat strength.md` +- **Original Advisory**: `docs/product/advisories/archived/19-Dec-2025 - Stella Ops candidate features mapped to moat strength.md` - **Architecture**: `docs/ARCHITECTURE_OVERVIEW.md` diff --git a/docs/modules/platform/proof-driven-moats-architecture.md b/docs/modules/platform/proof-driven-moats-architecture.md index 71d10c350..c2207a58a 100644 --- a/docs/modules/platform/proof-driven-moats-architecture.md +++ b/docs/modules/platform/proof-driven-moats-architecture.md @@ -781,9 +781,9 @@ audit-bundle-{artifact-digest}.stella.bundle.tgz ### 12.1 Product Advisories -- `docs/product-advisories/23-Dec-2026 - Proof‑Driven Moats Stella Ops Can Ship.md` -- `docs/product-advisories/23-Dec-2026 - Binary Mapping as Attestable Proof.md` -- `docs/product-advisories/archived/22-Dec-2025 - Getting Distro Backport Logic Right.md` +- `docs/product/advisories/23-Dec-2026 - Proof‑Driven Moats Stella Ops Can Ship.md` +- `docs/product/advisories/23-Dec-2026 - Binary Mapping as Attestable Proof.md` +- `docs/product/advisories/archived/22-Dec-2025 - Getting Distro Backport Logic Right.md` ### 12.2 Standards diff --git a/docs/modules/policy/architecture.md b/docs/modules/policy/architecture.md index 3af72da3e..164dfccb5 100644 --- a/docs/modules/policy/architecture.md +++ b/docs/modules/policy/architecture.md @@ -682,13 +682,13 @@ stella exception status The following product advisories provide strategic context for Policy Engine features: -- **[Consolidated: Diff-Aware Release Gates and Risk Budgets](../../product-advisories/CONSOLIDATED%20-%20Diff-Aware%20Release%20Gates%20and%20Risk%20Budgets.md)** — Master reference for risk budgets, delta verdicts, VEX trust scoring, and release gate policies. Key sections: +- **[Consolidated: Diff-Aware Release Gates and Risk Budgets](../../product/advisories/CONSOLIDATED%20-%20Diff-Aware%20Release%20Gates%20and%20Risk%20Budgets.md)** — Master reference for risk budgets, delta verdicts, VEX trust scoring, and release gate policies. Key sections: - §2 Risk Budget Model: Service tier definitions and RP scoring formulas - §4 Delta Verdict Engine: Deterministic evaluation pipeline and replay contract - §5 Smart-Diff Algorithm: Material risk change detection rules - §7 VEX Trust Scoring: Confidence/freshness lattice for VEX source weighting -- **[Consolidated: Deterministic Evidence and Verdict Architecture](../../product-advisories/CONSOLIDATED%20-%20Deterministic%20Evidence%20and%20Verdict%20Architecture.md)** — Master reference for determinism guarantees, canonical serialization, and signing. Key sections: +- **[Consolidated: Deterministic Evidence and Verdict Architecture](../../product/advisories/CONSOLIDATED%20-%20Deterministic%20Evidence%20and%20Verdict%20Architecture.md)** — Master reference for determinism guarantees, canonical serialization, and signing. Key sections: - §3 Canonical Serialization: RFC 8785 JCS + Unicode NFC rules - §5 Signing & Attestation: Keyless signing with Sigstore - §6 Proof-Carrying Reachability: Minimal proof chains @@ -696,7 +696,7 @@ The following product advisories provide strategic context for Policy Engine fea - **[Determinism Specification](../../technical/architecture/determinism-specification.md)** — Technical specification for all digest algorithms (VerdictId, EvidenceId, GraphRevisionId, ManifestId) and canonicalization rules. -- **[Smart-Diff Technical Reference](../../product-advisories/archived/2025-12-21-moat-gap-closure/14-Dec-2025%20-%20Smart-Diff%20Technical%20Reference.md)** — Detailed algorithm specifications for reachability gates, delta computation, and call-stack analysis. +- **[Smart-Diff Technical Reference](../../product/advisories/archived/2025-12-21-moat-gap-closure/14-Dec-2025%20-%20Smart-Diff%20Technical%20Reference.md)** — Detailed algorithm specifications for reachability gates, delta computation, and call-stack analysis. --- diff --git a/docs/modules/policy/contracts/spine-versioning-plan.md b/docs/modules/policy/contracts/spine-versioning-plan.md index 7bf9a7112..fb32f050d 100644 --- a/docs/modules/policy/contracts/spine-versioning-plan.md +++ b/docs/modules/policy/contracts/spine-versioning-plan.md @@ -79,4 +79,4 @@ Establish versioned spine API/DTO schemas with migration rules, determinism guar ## Links - Sprint: `docs/implplan/SPRINT_0186_0001_0001_record_deterministic_execution.md` (SP1–SP10) -- Advisory: `docs/product-advisories/31-Nov-2025 FINDINGS.md` +- Advisory: `docs/product/advisories/31-Nov-2025 FINDINGS.md` diff --git a/docs/modules/policy/cvss-v4.md b/docs/modules/policy/cvss-v4.md index c9d0f3ccb..197549a64 100644 --- a/docs/modules/policy/cvss-v4.md +++ b/docs/modules/policy/cvss-v4.md @@ -1,6 +1,6 @@ # CVSS v4.0 Receipts – Hardening Guide -Source advisory: `docs/product-advisories/25-Nov-2025 - Add CVSS v4.0 Score Receipts for Transparency.md` (CV1–CV10). This guide turns the gaps into implementable rules for Sprint 0190. +Source advisory: `docs/product/advisories/25-Nov-2025 - Add CVSS v4.0 Score Receipts for Transparency.md` (CV1–CV10). This guide turns the gaps into implementable rules for Sprint 0190. ## Canonical hashing (CV2) - Serializer: JSON Canonicalization Scheme (JCS). diff --git a/docs/modules/policy/guides/score-policy-yaml.md b/docs/modules/policy/guides/score-policy-yaml.md index 8dbb85b78..397483b24 100644 --- a/docs/modules/policy/guides/score-policy-yaml.md +++ b/docs/modules/policy/guides/score-policy-yaml.md @@ -287,5 +287,5 @@ Future schema versions (e.g., `score.v2`) will include migration guides and back ## Related Documentation - [Architecture Overview](../ARCHITECTURE_OVERVIEW.md) -- [Determinism Technical Reference](../product-advisories/14-Dec-2025%20-%20Determinism%20and%20Reproducibility%20Technical%20Reference.md) +- [Determinism Technical Reference](../product/advisories/14-Dec-2025%20-%20Determinism%20and%20Reproducibility%20Technical%20Reference.md) - [Policy Engine Architecture](../modules/policy/architecture.md) diff --git a/docs/modules/reach-graph/guides/gates.md b/docs/modules/reach-graph/guides/gates.md index f633b6408..f3696b3da 100644 --- a/docs/modules/reach-graph/guides/gates.md +++ b/docs/modules/reach-graph/guides/gates.md @@ -202,5 +202,5 @@ Gates are included in the reachability report: ## Related Documentation - [Reachability Architecture](../modules/scanner/architecture.md) -- [Determinism Technical Reference](../product-advisories/14-Dec-2025%20-%20Determinism%20and%20Reproducibility%20Technical%20Reference.md) - Sections 2.2, 4.3 +- [Determinism Technical Reference](../product/advisories/14-Dec-2025%20-%20Determinism%20and%20Reproducibility%20Technical%20Reference.md) - Sections 2.2, 4.3 - [Signals Service](../modules/signals/architecture.md) diff --git a/docs/modules/reach-graph/guides/lead.md b/docs/modules/reach-graph/guides/lead.md index b54d565ee..437ab8cbe 100644 --- a/docs/modules/reach-graph/guides/lead.md +++ b/docs/modules/reach-graph/guides/lead.md @@ -73,6 +73,6 @@ Source: internal advisory “23-Nov-2025 - Where Stella Ops Can Truly Lead”. - `GET /vex/:artifact` — streams OpenVEX with embedded proofs. ## Links -- Advisory source: `docs/product-advisories/23-Nov-2025 - Where Stella Ops Can Truly Lead.md` +- Advisory source: `docs/product/advisories/23-Nov-2025 - Where Stella Ops Can Truly Lead.md` - Schemas: `docs/modules/reach-graph/guides/evidence-schema.md`, `docs/modules/reach-graph/guides/hybrid-attestation.md` - Sprint tracking: `docs/implplan/SPRINT_0401_0001_0001_reachability_evidence_chain.md` diff --git a/docs/modules/scanner/AGENTS.md b/docs/modules/scanner/AGENTS.md index 349867f23..d0e8ad387 100644 --- a/docs/modules/scanner/AGENTS.md +++ b/docs/modules/scanner/AGENTS.md @@ -31,13 +31,13 @@ Scanner analyses container images layer-by-layer, producing deterministic SBOM f - `docs/modules/scanner/architecture.md` - `docs/modules/scanner/implementation_plan.md` - `docs/modules/platform/architecture-overview.md` -- `docs/product-advisories/CONSOLIDATED - Diff-Aware Release Gates and Risk Budgets.md` — Master reference for delta verdicts, smart-diff algorithms, and determinism requirements that Scanner must honor. +- `docs/product/advisories/CONSOLIDATED - Diff-Aware Release Gates and Risk Budgets.md` — Master reference for delta verdicts, smart-diff algorithms, and determinism requirements that Scanner must honor. ## Related Product Advisories -- **[Consolidated: Diff-Aware Release Gates and Risk Budgets](../../product-advisories/CONSOLIDATED%20-%20Diff-Aware%20Release%20Gates%20and%20Risk%20Budgets.md)** — Risk budgets, delta verdicts, smart-diff algorithms -- **[Consolidated: Deterministic Evidence and Verdict Architecture](../../product-advisories/CONSOLIDATED%20-%20Deterministic%20Evidence%20and%20Verdict%20Architecture.md)** — Determinism guarantees, canonical serialization, keyless signing +- **[Consolidated: Diff-Aware Release Gates and Risk Budgets](../../product/advisories/CONSOLIDATED%20-%20Diff-Aware%20Release%20Gates%20and%20Risk%20Budgets.md)** — Risk budgets, delta verdicts, smart-diff algorithms +- **[Consolidated: Deterministic Evidence and Verdict Architecture](../../product/advisories/CONSOLIDATED%20-%20Deterministic%20Evidence%20and%20Verdict%20Architecture.md)** — Determinism guarantees, canonical serialization, keyless signing - **[Determinism Specification](../../technical/architecture/determinism-specification.md)** — Technical spec for digest algorithms and canonicalization rules -- **[Smart-Diff Technical Reference](../../product-advisories/archived/2025-12-21-moat-gap-closure/14-Dec-2025%20-%20Smart-Diff%20Technical%20Reference.md)** — Detailed reachability gate and call-stack analysis specs +- **[Smart-Diff Technical Reference](../../product/advisories/archived/2025-12-21-moat-gap-closure/14-Dec-2025%20-%20Smart-Diff%20Technical%20Reference.md)** — Detailed reachability gate and call-stack analysis specs ## Working Agreement - 1. Update task status to `DOING`/`DONE` in both correspoding sprint file `/docs/implplan/SPRINT_*.md` and the local `TASKS.md` when you start or finish work. diff --git a/docs/modules/scanner/design/competitor-ingest-normalization.md b/docs/modules/scanner/design/competitor-ingest-normalization.md index 73fceaadf..4d941bf1d 100644 --- a/docs/modules/scanner/design/competitor-ingest-normalization.md +++ b/docs/modules/scanner/design/competitor-ingest-normalization.md @@ -74,4 +74,4 @@ Define how external SBOM/scan outputs (Syft, Trivy, Clair) are normalized into S ## Links - Sprint: `docs/implplan/SPRINT_0186_0001_0001_record_deterministic_execution.md` (CM1–CM10) -- Advisory: `docs/product-advisories/31-Nov-2025 FINDINGS.md` +- Advisory: `docs/product/advisories/31-Nov-2025 FINDINGS.md` diff --git a/docs/modules/scanner/design/standards-convergence-roadmap.md b/docs/modules/scanner/design/standards-convergence-roadmap.md index bf493fc74..ece93d9ce 100644 --- a/docs/modules/scanner/design/standards-convergence-roadmap.md +++ b/docs/modules/scanner/design/standards-convergence-roadmap.md @@ -72,4 +72,4 @@ Define the concrete steps for adopting CVSS v4.0, CycloneDX 1.7 (incl. CBOM), an ## Links - Sprint: `docs/implplan/SPRINT_0186_0001_0001_record_deterministic_execution.md` (tasks SC1–SC10) -- Advisory: `docs/product-advisories/31-Nov-2025 FINDINGS.md` +- Advisory: `docs/product/advisories/31-Nov-2025 FINDINGS.md` diff --git a/docs/modules/scanner/epss-integration.md b/docs/modules/scanner/epss-integration.md index 8895d43bf..e7c2314fa 100644 --- a/docs/modules/scanner/epss-integration.md +++ b/docs/modules/scanner/epss-integration.md @@ -1,6 +1,6 @@ # EPSS Integration Architecture -> **Advisory Source**: `docs/product-advisories/16-Dec-2025 - Merging EPSS v4 with CVSS v4 Frameworks.md` +> **Advisory Source**: `docs/product/advisories/16-Dec-2025 - Merging EPSS v4 with CVSS v4 Frameworks.md` > **Last Updated**: 2025-12-17 > **Status**: Approved for Implementation diff --git a/docs/modules/scanner/reachability-drift.md b/docs/modules/scanner/reachability-drift.md index 1d243c5bf..39d27fb18 100644 --- a/docs/modules/scanner/reachability-drift.md +++ b/docs/modules/scanner/reachability-drift.md @@ -165,5 +165,5 @@ See `docs/api/scanner-drift-api.md` for details. - `docs/implplan/archived/SPRINT_3600_0003_0001_drift_detection_engine.md` - `docs/api/scanner-drift-api.md` - `docs/operations/reachability-drift-guide.md` -- `docs/product-advisories/archived/17-Dec-2025 - Reachability Drift Detection.md` +- `docs/product/advisories/archived/17-Dec-2025 - Reachability Drift Detection.md` - `src/Scanner/__Libraries/StellaOps.Scanner.ReachabilityDrift/` diff --git a/docs/modules/scheduler/hlc-migration-guide.md b/docs/modules/scheduler/hlc-migration-guide.md index ef295e80c..d201c5776 100644 --- a/docs/modules/scheduler/hlc-migration-guide.md +++ b/docs/modules/scheduler/hlc-migration-guide.md @@ -187,4 +187,4 @@ The `scheduler_log` table can be retained for audit purposes or dropped if no lo - [Scheduler Architecture](architecture.md) - [HLC Library Documentation](../../__Libraries/StellaOps.HybridLogicalClock/README.md) -- [Product Advisory: Audit-safe Job Queue Ordering](../../product-advisories/audit-safe-job-queue-ordering.md) +- [Product Advisory: Audit-safe Job Queue Ordering](../../product/advisories/audit-safe-job-queue-ordering.md) diff --git a/docs/modules/signals/architecture.md b/docs/modules/signals/architecture.md index b5ae7dcfe..13ab2846a 100644 --- a/docs/modules/signals/architecture.md +++ b/docs/modules/signals/architecture.md @@ -207,7 +207,7 @@ The Signals module maintains strict determinism: ## Related Documentation -- Product Advisory: `docs/product-advisories/24-Dec-2025 - Evidence-Weighted Score Model.md` +- Product Advisory: `docs/product/advisories/24-Dec-2025 - Evidence-Weighted Score Model.md` - Sprint Plans: `docs/implplan/SPRINT_8200_0012_*.md` - Policy Confidence (deprecated): `docs/modules/policy/confidence-scoring.md` - Backport Detection: `docs/modules/concelier/backport-detection.md` diff --git a/docs/modules/signals/decay/2025-12-01-confidence-decay.md b/docs/modules/signals/decay/2025-12-01-confidence-decay.md index bf864a5d0..a6037e3eb 100644 --- a/docs/modules/signals/decay/2025-12-01-confidence-decay.md +++ b/docs/modules/signals/decay/2025-12-01-confidence-decay.md @@ -1,7 +1,7 @@ # Confidence Decay Controls · Signals Runtime **Compiled:** 2025-12-01 (UTC) -**Scope:** Close U1–U10 gaps from `docs/product-advisories/31-Nov-2025 FINDINGS.md` for confidence decay of unknowns/signals. +**Scope:** Close U1–U10 gaps from `docs/product/advisories/31-Nov-2025 FINDINGS.md` for confidence decay of unknowns/signals. **Status:** Draft for review on 2025-12-03; to be signed (DSSE) after sign-off. ## Decisions (U1–U10) diff --git a/docs/modules/signals/heuristics/2025-12-01-heuristic-catalog.md b/docs/modules/signals/heuristics/2025-12-01-heuristic-catalog.md index 0273e2209..f94193497 100644 --- a/docs/modules/signals/heuristics/2025-12-01-heuristic-catalog.md +++ b/docs/modules/signals/heuristics/2025-12-01-heuristic-catalog.md @@ -1,7 +1,7 @@ # Signals Heuristic Catalog · Deterministic Scoring **Compiled:** 2025-12-01 (UTC) -**Scope:** Close UT1–UT10 gaps from `docs/product-advisories/31-Nov-2025 FINDINGS.md` by publishing a signed heuristic catalog and golden outputs. +**Scope:** Close UT1–UT10 gaps from `docs/product/advisories/31-Nov-2025 FINDINGS.md` by publishing a signed heuristic catalog and golden outputs. **Status:** Draft; target publish 2025-12-05 with DSSE signature. ## Decisions (UT1–UT10) diff --git a/docs/modules/signals/unknowns/2025-12-01-unknowns-registry.md b/docs/modules/signals/unknowns/2025-12-01-unknowns-registry.md index 1c83ce726..a7ae7ff1e 100644 --- a/docs/modules/signals/unknowns/2025-12-01-unknowns-registry.md +++ b/docs/modules/signals/unknowns/2025-12-01-unknowns-registry.md @@ -1,7 +1,7 @@ # Unknowns Registry & Scoring Manifest **Compiled:** 2025-12-01 (UTC) -**Scope:** Close UN1–UN10 gaps from `docs/product-advisories/31-Nov-2025 FINDINGS.md` for Unknowns Registry. +**Scope:** Close UN1–UN10 gaps from `docs/product/advisories/31-Nov-2025 FINDINGS.md` for Unknowns Registry. **Status:** Draft; review 2025-12-04; DSSE signing required before adoption. ## Decisions (UN1–UN10) diff --git a/docs/modules/taskrunner/architecture.md b/docs/modules/taskrunner/architecture.md index 8e5386283..0c26addf7 100644 --- a/docs/modules/taskrunner/architecture.md +++ b/docs/modules/taskrunner/architecture.md @@ -94,6 +94,6 @@ - **Fail-closed gates (TP10):** Approval/policy/timeline gates default to fail-closed on missing evidence, expired DSSE, or absent quotas; remediation hints surface in `pack_run_logs` and API error payloads. ## 13. References -- Product advisory: `docs/product-advisories/29-Nov-2025 - Task Pack Orchestration and Automation.md`. +- Product advisory: `docs/product/advisories/29-Nov-2025 - Task Pack Orchestration and Automation.md`. - Task Pack spec + authoring + runbook: `docs/modules/packs-registry/guides/spec.md`, `docs/modules/packs-registry/guides/authoring-guide.md`, `docs/modules/packs-registry/guides/runbook.md`. - Migration detail: `docs/modules/taskrunner/migrations/pack-run-collections.md`. diff --git a/docs/modules/telemetry/contracts/telemetry-gaps-remediation.md b/docs/modules/telemetry/contracts/telemetry-gaps-remediation.md index c3ce0f064..34835e933 100644 --- a/docs/modules/telemetry/contracts/telemetry-gaps-remediation.md +++ b/docs/modules/telemetry/contracts/telemetry-gaps-remediation.md @@ -1,6 +1,6 @@ # Telemetry Gap Remediation (TO1–TO10) — v1 · 2025-12-01 -Source: `docs/product-advisories/31-Nov-2025 FINDINGS.md` (Telemetry gaps TO1–TO10). +Source: `docs/product/advisories/31-Nov-2025 FINDINGS.md` (Telemetry gaps TO1–TO10). Scope: telemetry core (collectors/SDK defaults/bundles) across services; applicable to default/forensic/airgap profiles. ## Decisions (mapped to gaps) diff --git a/docs/modules/telemetry/guides/fn-drift.md b/docs/modules/telemetry/guides/fn-drift.md index 212ebef70..25ac42ed5 100644 --- a/docs/modules/telemetry/guides/fn-drift.md +++ b/docs/modules/telemetry/guides/fn-drift.md @@ -172,6 +172,6 @@ Aggregated daily statistics for efficient dashboard queries: ## Related Documentation -- [Determinism Technical Reference](../product-advisories/14-Dec-2025%20-%20Determinism%20and%20Reproducibility%20Technical%20Reference.md) - Section 13.2 +- [Determinism Technical Reference](../product/advisories/14-Dec-2025%20-%20Determinism%20and%20Reproducibility%20Technical%20Reference.md) - Section 13.2 - [Scanner Architecture](../modules/scanner/architecture.md) - [Telemetry Stack](../modules/telemetry/architecture.md) diff --git a/docs/modules/telemetry/ttfs-architecture.md b/docs/modules/telemetry/ttfs-architecture.md index e4933ade5..ab81757f7 100644 --- a/docs/modules/telemetry/ttfs-architecture.md +++ b/docs/modules/telemetry/ttfs-architecture.md @@ -417,7 +417,7 @@ Load tests validate TTFS performance under realistic conditions. ## 13) References -- Advisory: `docs/product-advisories/14-Dec-2025 - UX and Time-to-Evidence Technical Reference.md` +- Advisory: `docs/product/advisories/14-Dec-2025 - UX and Time-to-Evidence Technical Reference.md` - Sprint 1 (Foundation): `docs/implplan/SPRINT_0338_0001_0001_ttfs_foundation.md` - Sprint 2 (API): `docs/implplan/SPRINT_0339_0001_0001_first_signal_api.md` - Sprint 3 (UI): `docs/implplan/SPRINT_0340_0001_0001_first_signal_card_ui.md` diff --git a/docs/modules/ui/architecture.md b/docs/modules/ui/architecture.md index d5734bb70..3c02b5fa9 100644 --- a/docs/modules/ui/architecture.md +++ b/docs/modules/ui/architecture.md @@ -122,7 +122,7 @@ Each feature folder builds as a **standalone route** (lazy loaded). All HTTP sha * **VEX decisions**: evidence-first VEX modal with scope + validity + evidence links; bulk apply supported; uses `/v1/vex-decisions`. * **Audit bundles**: "Create immutable audit bundle" UX to build and download an evidence pack; uses `/v1/audit-bundles`. * **Schemas**: `docs/modules/vuln-explorer/schemas/vex-decision.schema.json`, `docs/modules/attestor/schemas/attestation-vuln-scan.schema.json`, `docs/modules/evidence-locker/schemas/audit-bundle-index.schema.json`. -* **Reference**: `docs/product-advisories/archived/27-Nov-2025-superseded/28-Nov-2025 - Vulnerability Triage UX & VEX-First Decisioning.md`. +* **Reference**: `docs/product/advisories/archived/27-Nov-2025-superseded/28-Nov-2025 - Vulnerability Triage UX & VEX-First Decisioning.md`. ### 3.10 Integration Hub (Sprint 011) diff --git a/docs/modules/ui/micro-interactions-map.md b/docs/modules/ui/micro-interactions-map.md index 384a359ac..cc77db681 100644 --- a/docs/modules/ui/micro-interactions-map.md +++ b/docs/modules/ui/micro-interactions-map.md @@ -205,7 +205,7 @@ EvidencePanel: - TypeScript tokens: `src/Web/StellaOps.Web/src/app/styles/motion-tokens.ts` - Storybook stories: `src/Web/StellaOps.Web/src/stories/motion-tokens.stories.ts` - TTFS Architecture: `docs/modules/telemetry/ttfs-architecture.md` -- Advisory: `docs/product-advisories/14-Dec-2025 - UX and Time-to-Evidence Technical Reference.md` +- Advisory: `docs/product/advisories/14-Dec-2025 - UX and Time-to-Evidence Technical Reference.md` --- diff --git a/docs/modules/vuln-explorer/architecture.md b/docs/modules/vuln-explorer/architecture.md index 5fa1edec7..a9ebbcbf0 100644 --- a/docs/modules/vuln-explorer/architecture.md +++ b/docs/modules/vuln-explorer/architecture.md @@ -79,7 +79,7 @@ CLI mirrors these endpoints (`stella findings list|view|update|export`). Console ## 8) VEX-First Triage UX -> Reference: Product advisory `docs/product-advisories/archived/27-Nov-2025-superseded/28-Nov-2025 - Vulnerability Triage UX & VEX-First Decisioning.md` +> Reference: Product advisory `docs/product/advisories/archived/27-Nov-2025-superseded/28-Nov-2025 - Vulnerability Triage UX & VEX-First Decisioning.md` ### 8.1 Evidence-First Finding Cards diff --git a/docs/modules/zastava/gaps/2025-12-02-zr-gaps.md b/docs/modules/zastava/gaps/2025-12-02-zr-gaps.md index f841f7d44..82a9fdc18 100644 --- a/docs/modules/zastava/gaps/2025-12-02-zr-gaps.md +++ b/docs/modules/zastava/gaps/2025-12-02-zr-gaps.md @@ -1,6 +1,6 @@ # Zastava Runtime Signals Gaps (ZR1–ZR10) -**Source:** `docs/product-advisories/31-Nov-2025 FINDINGS.md` +**Source:** `docs/product/advisories/31-Nov-2025 FINDINGS.md` **Compiled:** 2025-12-02 (UTC) **Scope:** Close ZR1–ZR10 for Observer + Webhook (Surface.Env/Secrets/FS) with offline parity and auditability. diff --git a/docs/operations/router-chaos-testing-runbook.md b/docs/operations/router-chaos-testing-runbook.md index d025c0941..8764c2320 100644 --- a/docs/operations/router-chaos-testing-runbook.md +++ b/docs/operations/router-chaos-testing-runbook.md @@ -193,5 +193,5 @@ k6 run tests/load/router/spike-test.js --verbose ## References - [Router Architecture](../modules/router/architecture.md) -- [Backpressure Design](../product-advisories/15-Dec-2025%20-%20Designing%20202%20+%20Retry-After%20Backpressure%20Control.md) -- [Testing Strategy](../product-advisories/20-Dec-2025%20-%20Testing%20strategy.md) +- [Backpressure Design](../product/advisories/15-Dec-2025%20-%20Designing%20202%20+%20Retry-After%20Backpressure%20Control.md) +- [Testing Strategy](../product/advisories/20-Dec-2025%20-%20Testing%20strategy.md) diff --git a/docs/operations/unknowns-queue-runbook.md b/docs/operations/unknowns-queue-runbook.md index af1872214..c06e004af 100644 --- a/docs/operations/unknowns-queue-runbook.md +++ b/docs/operations/unknowns-queue-runbook.md @@ -625,7 +625,7 @@ To allow approved exceptions to cover specific unknown reason codes, set excepti ## Related Documentation - [Unknowns API Reference](../api/score-proofs-reachability-api-reference.md#5-unknowns-api) -- [Triage Technical Reference](../product-advisories/14-Dec-2025%20-%20Triage%20and%20Unknowns%20Technical%20Reference.md) +- [Triage Technical Reference](../product/advisories/14-Dec-2025%20-%20Triage%20and%20Unknowns%20Technical%20Reference.md) - [Score Proofs Runbook](./score-proofs-runbook.md) - [Policy Engine](../modules/policy/architecture.md) diff --git a/docs/product/PROOF_MOATS_FINAL_SIGNOFF.md b/docs/product/PROOF_MOATS_FINAL_SIGNOFF.md index 45e8a6fb9..fc01195f4 100644 --- a/docs/product/PROOF_MOATS_FINAL_SIGNOFF.md +++ b/docs/product/PROOF_MOATS_FINAL_SIGNOFF.md @@ -435,7 +435,7 @@ public sealed class ProofAwareVexGenerator **Approved By:** Claude Code Implementation Agent **Date:** 2025-12-23 -**Advisory Reference:** `docs/product-advisories/23-Dec-2026 - Proof-Driven Moats Stella Ops Can Ship.md` +**Advisory Reference:** `docs/product/advisories/23-Dec-2026 - Proof-Driven Moats Stella Ops Can Ship.md` --- diff --git a/docs/product/advisories/08-Jan-2026 - AI moats.md b/docs/product/advisories/08-Jan-2026 - AI moats.md new file mode 100644 index 000000000..c59e24f64 --- /dev/null +++ b/docs/product/advisories/08-Jan-2026 - AI moats.md @@ -0,0 +1,545 @@ +Below is a cohesive set of **7 product advisories** that together define an “AI-native” Stella Ops with defensible moats. Each advisory follows the same structure: + +* **Problem** (what hurts today) +* **Why** (why Stella should solve it) +* **What we ship** (capabilities, boundaries) +* **How we achieve** (proposed `AdvisoryAI` backend modules + key UI components) +* **Guardrails** (safety / trust / determinism) +* **KPIs** (how you prove it works) + +I’m assuming your canonical object model already includes **Runs** (incident/escalation/change investigation runs) and a system-of-record in **PostgreSQL** with **Valkey** as a non-authoritative accelerator. + +--- + +# ADVISORY-AI-000 — AdvisoryAI Foundation: Chat + Workbench + Runs (the “AI OS surface”) + +## Problem + +Most “AI in ops” fails because it’s only a chat box. Chat is not: + +* auditable +* repeatable +* actionable with guardrails +* collaborative (handoffs, approvals, artifacts) + +Operators need a place where AI output becomes **objects** (runs, decisions, patches, evidence packs), not ephemeral text. + +## Why we do it + +This advisory is the substrate for all other moats. Without it, your other features remain demos. + +## What we ship + +1. **AdvisoryAI Orchestrator** that can: + +* read Stella objects (runs, services, policies, evidence) +* propose plans +* call tools/actions (within policy) +* produce structured artifacts (patches, decision records, evidence packs) + +2. **AI Workbench UI**: + +* Chat panel for intent +* Artifact cards (Run, Playbook Patch, Decision, Evidence Pack) +* Run Timeline view (what happened, tool calls, approvals, outputs) + +## How we achieve (modules + UI) + +### Backend modules (suggested) + +* `StellaOps.AdvisoryAI.WebService` + + * Conversation/session orchestration + * Tool routing + action execution requests + * Artifact creation (Run notes, patches, decisions) +* `StellaOps.AdvisoryAI.Prompting` + + * Prompt templates versioned + hashed + * Guarded system prompts per “mode” +* `StellaOps.AdvisoryAI.Tools` + + * Tool contracts (read-only queries, action requests) +* `StellaOps.AdvisoryAI.Eval` + + * Regression tests for tool correctness + safety + +### UI components + +* `AiChatPanelComponent` +* `AiArtifactCardComponent` (Run/Decision/Patch/Evidence Pack) +* `RunTimelineComponent` (with “AI steps” and “human steps”) +* `ModeSelectorComponent` (Analyst / Operator / Autopilot) + +### Canonical flow + +``` +User intent (chat) + -> AdvisoryAI proposes plan (steps) + -> executes read-only tools + -> generates artifact(s) + -> requests approvals for risky actions + -> records everything on Run timeline +``` + +## Guardrails + +* Every AI interaction writes to a **Run** (or attaches to an existing Run). +* Prompt templates are **versioned + hashed**. +* Tool calls and outputs are **persisted** (for audit and replay). + +## KPIs + +* % AI sessions attached to Runs +* “Time to first useful artifact” +* Operator adoption (weekly active users of Workbench) + +--- + +# ADVISORY-AI-001 — Evidence-First Outputs (trust-by-construction) + +## Problem + +In ops, an answer without evidence is a liability. LLMs are persuasive even when wrong. Operators waste time verifying or, worse, act on incorrect claims. + +## Why we do it + +Evidence-first output is the trust prerequisite for: + +* automation +* playbook learning +* org memory +* executive reporting + +## What we ship + +* A **Claim → Evidence** constraint: + + * Each material claim must be backed by an `EvidenceRef` (query snapshot, ticket, pipeline run, commit, config state). +* An **Evidence Pack** artifact: + + * A shareable bundle of evidence for an incident/change/review. + +## How we achieve (modules + UI) + +### Backend modules + +* `StellaOps.AdvisoryAI.Evidence` + + * Claim extraction from model output + * Evidence retrieval + snapshotting + * Citation enforcement (or downgrade claim confidence) +* `StellaOps.EvidenceStore` + + * Immutable (or content-addressed) snapshots + * Hashes, timestamps, query parameters + +### UI components + +* `EvidenceSidePanelComponent` (opens from inline citations) +* `EvidencePackViewerComponent` +* `ConfidenceBadgeComponent` (Verified / Inferred / Unknown) + +### Implementation pattern + +* For each answer: + + 1. Draft response + 2. Extract claims + 3. Attach evidence refs + 4. If evidence missing: label as uncertain + propose verification steps + +## Guardrails + +* If evidence is missing, Stella must **not** assert certainty. +* Evidence snapshots must capture: + + * query inputs + * time range + * raw result (or hash + storage pointer) + +## KPIs + +* Citation coverage (% of answers with evidence refs) +* Reduced back-and-forth (“how do you know?” rate) +* Adoption of automation after evidence-first rollout + +--- + +# ADVISORY-AI-002 — Policy-Aware Automation (safe actions, not just suggestions) + +## Problem + +The main blocker to “AI that acts” is governance: + +* wrong environment +* insufficient permission +* missing approvals +* non-idempotent actions +* unclear accountability + +## Why we do it + +If Stella can’t safely execute actions, it will remain a read-only assistant. Policy-aware automation is a hard moat because it requires real engineering discipline and operational maturity. + +## What we ship + +* A typed **Action Registry**: + + * schemas, risk levels, idempotency, rollback/compensation +* A **Policy decision point** (PDP) before any action: + + * allow / allow-with-approvals / deny +* An **Approval workflow** linked to Runs + +## How we achieve (modules + UI) + +### Backend modules + +* `StellaOps.ActionRegistry` + + * Action definitions + schemas + risk metadata +* `StellaOps.PolicyEngine` + + * Rules: environment protections, freeze windows, role constraints +* `StellaOps.AdvisoryAI.Automation` + + * Converts intent → action proposals + * Submits action requests after approvals +* `StellaOps.RunLedger` + + * Every action request + result is a ledger entry + +### UI components + +* `ActionProposalCardComponent` +* `ApprovalModalComponent` (scoped approval: this action/this run/this window) +* `PolicyExplanationComponent` (human-readable “why allowed/denied”) +* `RollbackPanelComponent` + +## Guardrails + +* Default: propose actions; only auto-execute in explicitly configured “Autopilot scopes.” +* Every action must support: + + * idempotency key + * audit fields (why, ticket/run linkage) + * reversible/compensating action where feasible + +## KPIs + +* % actions proposed vs executed +* “Policy prevented incident” count +* Approval latency and action success rate + +--- + +# ADVISORY-AI-003 — Ops Memory (structured, durable, queryable) + +## Problem + +Teams repeat incidents because knowledge lives in: + +* chat logs +* tribal memory +* scattered tickets +* unwritten heuristics + +Chat history is not an operational knowledge base: it’s unstructured and hard to reuse safely. + +## Why we do it + +Ops memory reduces repeat work and accelerates diagnosis. It also becomes a defensible dataset because it’s tied to your Runs, artifacts, and outcomes. + +## What we ship + +A set of typed memory objects (not messages): + +* `DecisionRecord` +* `KnownIssue` +* `Tactic` +* `Constraint` +* `PostmortemSummary` + +Memory is written on: + +* Run closure +* approvals (policy events) +* explicit “save as org memory” actions + +## How we achieve (modules + UI) + +### Backend modules + +* `StellaOps.AdvisoryAI.Memory` + + * Write: extract structured memory from run artifacts + * Read: retrieve memory relevant to current context (service/env/symptoms) + * Conflict handling: “superseded by”, timestamps, confidence +* `StellaOps.MemoryStore` (Postgres tables + full-text index as needed) + +### UI components + +* `MemoryPanelComponent` (contextual suggestions during a run) +* `MemoryBrowserComponent` (search + filters) +* `MemoryDiffComponent` (when superseding prior memory) + +## Guardrails + +* Memory entries have: + + * scope (service/env/team) + * confidence (verified vs anecdotal) + * review/expiry policies for tactics/constraints +* Never “learn” from unresolved or low-confidence runs by default. + +## KPIs + +* Repeat incident rate reduction +* Time-to-diagnosis delta when memory exists +* Memory reuse rate inside Runs + +--- + +# ADVISORY-AI-004 — Playbook Learning (Run → Patch → Approved Playbook) + +## Problem + +Runbooks/playbooks drift. Operators improvise. The playbook never improves, and the organization pays the same “tuition” repeatedly. + +## Why we do it + +Playbook learning is the compounding loop that turns daily operations into a proprietary advantage. Competitors can generate playbooks; they struggle to continuously improve them from real run traces with review + governance. + +## What we ship + +* Versioned playbooks as structured objects +* **Playbook Patch** proposals generated from Run traces: + + * coverage patches, repair patches, optimization patches, safety patches, detection patches +* Owner review + approval workflow + +## How we achieve (modules + UI) + +### Backend modules + +* `StellaOps.Playbooks` + + * Playbook schema + versioning +* `StellaOps.AdvisoryAI.PlaybookLearning` + + * Extract “what we did” from Run timeline + * Compare to playbook steps + * Propose a patch with evidence links +* `StellaOps.DiffService` + + * Human-friendly diff output for UI + +### UI components + +* `PlaybookPatchCardComponent` +* `DiffViewerComponent` (Monaco diff or equivalent) +* `PlaybookApprovalFlowComponent` +* `PlaybookCoverageHeatmapComponent` (optional, later) + +## Guardrails + +* Never auto-edit canonical playbooks; only patches + review. +* Require evidence links for each proposed step. +* Prevent one-off contamination by marking patches as: + + * “generalizable” vs “context-specific” + +## KPIs + +* % incidents with a playbook +* Patch acceptance rate +* MTTR improvement for playbook-backed incidents + +--- + +# ADVISORY-AI-005 — Integration Concierge (setup + health + “how-to” that is actually correct) + +## Problem + +Integrations are where tools die: + +* users ask “how do I integrate X” +* assistant answers generically +* setup fails because of environment constraints, permissions, webhooks, scopes, retries, or missing prerequisites +* no one can debug it later + +## Why we do it + +Integration handling becomes a moat when it is: + +* deterministic (wizard truth) +* auditable (events + actions traced) +* self-healing (retries, backfills, health checks) +* explainable (precise steps, not generic docs) + +## What we ship + +1. **Integration Setup Wizard** per provider (GitLab, Jira, Slack, etc.) +2. **Integration Health** dashboard: + +* last event received +* last action executed +* failure reasons + next steps +* token expiry warnings + +3. **Chat-driven guidance** that drives the same wizard backend: + +* when user asks “how to integrate GitLab,” Stella replies with the exact steps for the instance type, auth mode, and required permissions, and can pre-fill a setup plan. + +## How we achieve (modules + UI) + +### Backend modules + +* `StellaOps.Integrations` + + * Provider contracts: inbound events + outbound actions + * Normalization into Stella `Signals` and `Actions` +* `StellaOps.Integrations.Reliability` + + * Webhook dedupe, replay, dead-letter, backfill polling +* `StellaOps.AdvisoryAI.Integrations` + + * Retrieves provider-specific setup templates + * Asks only for missing parameters + * Produces a “setup checklist” artifact attached to a Run or Integration record + +### UI components + +* `IntegrationWizardComponent` +* `IntegrationHealthComponent` +* `IntegrationEventLogComponent` (raw payload headers + body stored securely) +* `SetupChecklistArtifactComponent` (generated by AdvisoryAI) + +## Guardrails + +* Store inbound webhook payloads for replay/debug, with redaction where required. +* Always support reconciliation/backfill (webhooks are never perfectly lossless). +* Use least-privilege token scopes by default, with clear permission error guidance. + +## KPIs + +* Time-to-first-successful-event +* Integration “healthy” uptime +* Setup completion rate without human support + +--- + +# ADVISORY-AI-006 — Outcome Analytics (prove ROI with credible attribution) + +## Problem + +AI features are easy to cut in budgeting because value is vague. “It feels faster” doesn’t survive scrutiny. + +## Why we do it + +Outcome analytics makes Stella defensible to leadership and helps prioritize what to automate next. It also becomes a dataset for continuous improvement. + +## What we ship + +* Baseline metrics (before Stella influence): + + * MTTA, MTTR, escalation count, repeat incidents, deploy failure rate (as relevant) +* Attribution model (only count impact when Stella materially contributed): + + * playbook patch accepted + * evidence pack used + * policy-gated action executed + * memory entry reused +* Monthly/weekly impact reports + +## How we achieve (modules + UI) + +### Backend modules + +* `StellaOps.Analytics` + + * Metric computation + cohorts (by service/team/severity) +* `StellaOps.AdvisoryAI.Attribution` + + * Joins outcomes to AI artifacts and actions in the Run ledger +* `StellaOps.Reporting` + + * Scheduled report generation (exportable) + +### UI components + +* `OutcomeDashboardComponent` +* `AttributionBreakdownComponent` +* `ExecutiveReportExportComponent` + +## Guardrails + +* Avoid vanity metrics (“number of chats”). +* Always show confidence/limitations in attribution (correlation vs causation). + +## KPIs + +* MTTR delta (with Stella artifacts vs without) +* Repeat incident reduction +* Escalation reduction +* Automation coverage growth + +--- + +## One unifying implementation note: “AdvisoryAI” should output objects, not prose + +To make all seven advisories work together, standardize on a small set of **AI-produced artifacts**: + +* `Plan` (step list with tools/actions) +* `EvidencePack` +* `DecisionRecord` +* `PlaybookPatch` +* `IntegrationSetupChecklist` +* `RunSummary` (postmortem-ready) + +Every artifact is: + +* versioned +* evidence-linked +* attached to a Run +* subject to policy gates when it triggers actions + +This gives you: + +* auditability +* deterministic replay of the *inputs and tool outputs* +* compounding “Ops memory” and “Playbook learning” data + +--- + +## Example: how this maps to “AdvisoryAI module + Chat UI component” + +Minimum viable architecture that is coherent: + +**Backend** + +* `StellaOps.AdvisoryAI.WebService` (orchestrator) +* `StellaOps.AdvisoryAI.Evidence` (citations) +* `StellaOps.AdvisoryAI.Memory` (structured memory) +* `StellaOps.AdvisoryAI.PlaybookLearning` (patch proposals) +* `StellaOps.AdvisoryAI.Integrations` (setup guidance + checklists) +* `StellaOps.PolicyEngine` + `StellaOps.ActionRegistry` (gated actions) +* `StellaOps.RunLedger` + `StellaOps.EvidenceStore` (audit + snapshots) + +**UI** + +* AI chat panel that emits/accepts **artifact cards** +* Evidence side panel +* Approval modal +* Diff viewer for patches +* Integration wizard + health + +--- + +If you want, I can translate these advisories into a single internal spec pack: + +* database tables (Postgres) +* event contracts (signals/actions) +* JSON schemas for artifacts/actions +* UI navigation and component tree +* the first 10 “golden workflows” you should ship with the Workbench diff --git a/docs/product/claims-citation-index.md b/docs/product/claims-citation-index.md index 8ed06938f..d70742ca6 100644 --- a/docs/product/claims-citation-index.md +++ b/docs/product/claims-citation-index.md @@ -24,7 +24,7 @@ This document is the **authoritative source** for all competitive positioning cl | ID | Claim | Evidence | Confidence | Verified | Next Review | |----|-------|----------|------------|----------|-------------| -| REACH-001 | "Hybrid static + runtime reachability analysis reduces noise by 60-85%" | `docs/product-advisories/14-Dec-2025 - Reachability Analysis Technical Reference.md` | High | 2025-12-14 | 2026-03-14 | +| REACH-001 | "Hybrid static + runtime reachability analysis reduces noise by 60-85%" | `docs/product/advisories/14-Dec-2025 - Reachability Analysis Technical Reference.md` | High | 2025-12-14 | 2026-03-14 | | REACH-002 | "Signed reachability graphs with DSSE attestation" | `src/Attestor/` module; DSSE envelope implementation | High | 2025-12-14 | 2026-03-14 | | REACH-003 | "~85% of critical vulnerabilities in containers are in inactive code" | Sysdig 2024 Container Security Report (external) | Medium | 2025-11-01 | 2026-02-01 | | REACH-004 | "Multi-language support: Java, C#, Go, JavaScript, TypeScript, Python" | Language analyzer implementations in `src/Scanner/Analyzers/` | High | 2025-12-14 | 2026-03-14 | @@ -35,7 +35,7 @@ This document is the **authoritative source** for all competitive positioning cl |----|-------|----------|------------|----------|-------------| | VEX-001 | "OpenVEX lattice semantics with deterministic state transitions" | `src/Excititor/` VEX engine; lattice documentation | High | 2025-12-14 | 2026-03-14 | | VEX-002 | "VEX consensus from multiple sources (vendor, tool, analyst)" | `VexConsensusRefreshService.cs`; consensus algorithm | High | 2025-12-14 | 2026-03-14 | -| VEX-003 | "Seven-state lattice: CR, SR, SU, DT, DV, DA, U" | `docs/product-advisories/14-Dec-2025 - Triage and Unknowns Technical Reference.md` | High | 2025-12-14 | 2026-03-14 | +| VEX-003 | "Seven-state lattice: CR, SR, SU, DT, DV, DA, U" | `docs/product/advisories/14-Dec-2025 - Triage and Unknowns Technical Reference.md` | High | 2025-12-14 | 2026-03-14 | ### 3a. Unknowns & Ambiguity Claims @@ -214,6 +214,6 @@ When a claim becomes false (e.g., competitor adds feature): ## References -- `docs/product-advisories/14-Dec-2025 - CVSS and Competitive Analysis Technical Reference.md` +- `docs/product/advisories/14-Dec-2025 - CVSS and Competitive Analysis Technical Reference.md` - `docs/product/competitive-landscape.md` - `docs/benchmarks/accuracy-metrics-framework.md` diff --git a/docs/product/competitive-landscape.md b/docs/product/competitive-landscape.md index db3c59d33..b1ea5a754 100644 --- a/docs/product/competitive-landscape.md +++ b/docs/product/competitive-landscape.md @@ -135,7 +135,7 @@ This isn't a feature gap—it's a category difference. Retrofitting it requires: - Vision: `docs/VISION.md` (Moats section) - Architecture: `docs/ARCHITECTURE_REFERENCE.md` - Reachability moat details: `docs/modules/reach-graph/guides/lead.md` -- Source advisory: `docs/product-advisories/23-Nov-2025 - Stella Ops vs Competitors.md` +- Source advisory: `docs/product/advisories/23-Nov-2025 - Stella Ops vs Competitors.md` - **Claims Citation Index**: [`docs/product/claims-citation-index.md`](claims-citation-index.md) --- @@ -190,5 +190,5 @@ This isn't a feature gap—it's a category difference. Retrofitting it requires: - **Key features:** `docs/key-features.md` ## Sources -- Full advisory: `docs/product-advisories/23-Nov-2025 - Stella Ops vs Competitors.md` +- Full advisory: `docs/product/advisories/23-Nov-2025 - Stella Ops vs Competitors.md` - Claims Citation Index: `docs/product/claims-citation-index.md` diff --git a/docs/technical/adr/0044-binary-delta-signatures.md b/docs/technical/adr/0044-binary-delta-signatures.md index 5ab93ece1..38365e567 100644 --- a/docs/technical/adr/0044-binary-delta-signatures.md +++ b/docs/technical/adr/0044-binary-delta-signatures.md @@ -198,7 +198,7 @@ This evidence feeds into VEX candidate generation with full audit trail. ## References -- [Binary Diff Signatures Advisory](../product-advisories/30-Dec-2025%20-%20Binary%20Diff%20Signatures%20for%20Patch%20Detection.md) +- [Binary Diff Signatures Advisory](../product/advisories/30-Dec-2025%20-%20Binary%20Diff%20Signatures%20for%20Patch%20Detection.md) - [B2R2 GitHub](https://github.com/B2R2-org/B2R2) - [Iced GitHub](https://github.com/icedland/iced) - [OpenVEX Specification](https://github.com/openvex/spec) diff --git a/docs/technical/architecture/determinism-specification.md b/docs/technical/architecture/determinism-specification.md index e19d00a5a..87fca8e1c 100644 --- a/docs/technical/architecture/determinism-specification.md +++ b/docs/technical/architecture/determinism-specification.md @@ -4,7 +4,7 @@ > **Version:** 1.0 > **Created:** 2025-12-26 > **Owners:** Policy Guild, Platform Guild -> **Related:** [`CONSOLIDATED - Deterministic Evidence and Verdict Architecture.md`](../../product-advisories/CONSOLIDATED%20-%20Deterministic%20Evidence%20and%20Verdict%20Architecture.md) +> **Related:** [`CONSOLIDATED - Deterministic Evidence and Verdict Architecture.md`](../../product/advisories/CONSOLIDATED%20-%20Deterministic%20Evidence%20and%20Verdict%20Architecture.md) --- diff --git a/docs/technical/testing/TESTING_MASTER_PLAN.md b/docs/technical/testing/TESTING_MASTER_PLAN.md index b24489ed3..e0c1dfd38 100644 --- a/docs/technical/testing/TESTING_MASTER_PLAN.md +++ b/docs/technical/testing/TESTING_MASTER_PLAN.md @@ -389,7 +389,7 @@ ONGOING: QUALITY GATES (Weeks 3-14+) ### Appendix B: Reference Documents -1. **Advisory:** `docs/product-advisories/22-Dec-2026 - Better testing strategy.md` +1. **Advisory:** `docs/product/advisories/22-Dec-2026 - Better testing strategy.md` 2. **Test Catalog:** `docs/technical/testing/TEST_CATALOG.yml` 3. **Test Models:** `docs/technical/testing/testing-strategy-models.md` 4. **Dependency Graph:** `docs/technical/testing/SPRINT_DEPENDENCY_GRAPH.md` diff --git a/docs/technical/testing/testing-enhancements-architecture.md b/docs/technical/testing/testing-enhancements-architecture.md index 0d6a09f34..0b0e2d9cd 100644 --- a/docs/technical/testing/testing-enhancements-architecture.md +++ b/docs/technical/testing/testing-enhancements-architecture.md @@ -405,5 +405,5 @@ src/__Tests/__Libraries/ - `docs/implplan/SPRINT_20260105_002_003_TEST_failure_choreography.md` - `docs/implplan/SPRINT_20260105_002_004_TEST_policy_explainability.md` - `docs/implplan/SPRINT_20260105_002_005_TEST_cross_cutting.md` -- **Advisory:** `docs/product-advisories/05-Dec-2026 - New Testing Enhancements for Stella Ops.md` +- **Advisory:** `docs/product/advisories/05-Dec-2026 - New Testing Enhancements for Stella Ops.md` - **Test Infrastructure:** `src/__Tests/AGENTS.md` diff --git a/docs/technical/testing/testing-quality-guardrails-implementation.md b/docs/technical/testing/testing-quality-guardrails-implementation.md index 1f2fb0e80..718c289cc 100644 --- a/docs/technical/testing/testing-quality-guardrails-implementation.md +++ b/docs/technical/testing/testing-quality-guardrails-implementation.md @@ -4,7 +4,7 @@ This document provides the master implementation plan for the Testing Quality Guardrails system derived from the `14-Dec-2025 - Testing and Quality Guardrails Technical Reference.md` product advisory. -**Source Advisory:** `docs/product-advisories/14-Dec-2025 - Testing and Quality Guardrails Technical Reference.md` +**Source Advisory:** `docs/product/advisories/14-Dec-2025 - Testing and Quality Guardrails Technical Reference.md` **Implementation Status:** Planning Complete, Execution Pending @@ -324,7 +324,7 @@ If quality gates cause CI instability: - `docs/implplan/SPRINT_0353_0001_0001_mutation_testing_integration.md` ### Source Advisory -- `docs/product-advisories/14-Dec-2025 - Testing and Quality Guardrails Technical Reference.md` +- `docs/product/advisories/14-Dec-2025 - Testing and Quality Guardrails Technical Reference.md` ### Existing Documentation - `docs/19_TEST_SUITE_OVERVIEW.md` diff --git a/docs/technical/testing/testing-strategy-models.md b/docs/technical/testing/testing-strategy-models.md index 240e49698..6a2d2744b 100644 --- a/docs/technical/testing/testing-strategy-models.md +++ b/docs/technical/testing/testing-strategy-models.md @@ -1,7 +1,7 @@ # Testing Strategy Models and Lanes (2026) -Source advisory: `docs/product-advisories/22-Dec-2026 - Better testing strategy.md` -Supersedes/extends: `docs/product-advisories/archived/2025-12-21-testing-strategy/20-Dec-2025 - Testing strategy.md` +Source advisory: `docs/product/advisories/22-Dec-2026 - Better testing strategy.md` +Supersedes/extends: `docs/product/advisories/archived/2025-12-21-testing-strategy/20-Dec-2025 - Testing strategy.md` ## Purpose - Define a single testing taxonomy for all StellaOps project types. diff --git a/src/AirGap/StellaOps.AirGap.Importer/AGENTS.md b/src/AirGap/StellaOps.AirGap.Importer/AGENTS.md index 25cd83d7b..a15974a67 100644 --- a/src/AirGap/StellaOps.AirGap.Importer/AGENTS.md +++ b/src/AirGap/StellaOps.AirGap.Importer/AGENTS.md @@ -50,7 +50,7 @@ Deliver offline bundle verification and ingestion tooling for sealed environment - `docs/airgap/airgap-mode.md` - `docs/airgap/advisory-implementation-roadmap.md` - `docs/modules/platform/architecture-overview.md` -- `docs/product-advisories/14-Dec-2025 - Offline and Air-Gap Technical Reference.md` +- `docs/product/advisories/14-Dec-2025 - Offline and Air-Gap Technical Reference.md` ## Working Agreement - 1. Update task status to `DOING`/`DONE` in both correspoding sprint file `/docs/implplan/SPRINT_*.md` and the local `TASKS.md` when you start or finish work. diff --git a/src/Attestor/AGENTS.md b/src/Attestor/AGENTS.md index dad065043..3ec4d4d0b 100644 --- a/src/Attestor/AGENTS.md +++ b/src/Attestor/AGENTS.md @@ -27,7 +27,7 @@ Manage the attestation and proof chain infrastructure for StellaOps: - `docs/modules/attestor/README.md` - `docs/modules/attestor/architecture.md` - `docs/modules/attestor/implementation_plan.md` -- `docs/product-advisories/20-Dec-2025 - Stella Ops Reference Architecture.md` +- `docs/product/advisories/20-Dec-2025 - Stella Ops Reference Architecture.md` - `docs/modules/platform/architecture-overview.md` ## Working Agreement diff --git a/src/Attestor/POE_PREDICATE_SPEC.md b/src/Attestor/POE_PREDICATE_SPEC.md index 4a91b1a26..ba91a4340 100644 --- a/src/Attestor/POE_PREDICATE_SPEC.md +++ b/src/Attestor/POE_PREDICATE_SPEC.md @@ -724,7 +724,7 @@ Status: VERIFIED ## 10. Cross-References - **Sprint:** `docs/implplan/SPRINT_3500_0001_0001_proof_of_exposure_mvp.md` -- **Advisory:** `docs/product-advisories/23-Dec-2026 - Binary Mapping as Attestable Proof.md` +- **Advisory:** `docs/product/advisories/23-Dec-2026 - Binary Mapping as Attestable Proof.md` - **Subgraph Extraction:** `src/Scanner/__Libraries/StellaOps.Scanner.Reachability/SUBGRAPH_EXTRACTION.md` - **Function-Level Evidence:** `docs/modules/reach-graph/guides/function-level-evidence.md` - **Hybrid Attestation:** `docs/modules/reach-graph/guides/hybrid-attestation.md` diff --git a/src/Attestor/__Libraries/StellaOps.Attestor.ProofChain/AGENTS.md b/src/Attestor/__Libraries/StellaOps.Attestor.ProofChain/AGENTS.md index 635eeefdd..e19f51f99 100644 --- a/src/Attestor/__Libraries/StellaOps.Attestor.ProofChain/AGENTS.md +++ b/src/Attestor/__Libraries/StellaOps.Attestor.ProofChain/AGENTS.md @@ -9,7 +9,7 @@ ## Required reading (treat as read before edits) - `docs/modules/attestor/architecture.md` -- `docs/product-advisories/14-Dec-2025 - Proof and Evidence Chain Technical Reference.md` +- `docs/product/advisories/14-Dec-2025 - Proof and Evidence Chain Technical Reference.md` - RFC 8785 (JSON Canonicalization Scheme) ## Working agreements diff --git a/src/Attestor/__Libraries/StellaOps.Attestor.StandardPredicates/AGENTS.md b/src/Attestor/__Libraries/StellaOps.Attestor.StandardPredicates/AGENTS.md index 0a0ad1a4a..21eaac290 100644 --- a/src/Attestor/__Libraries/StellaOps.Attestor.StandardPredicates/AGENTS.md +++ b/src/Attestor/__Libraries/StellaOps.Attestor.StandardPredicates/AGENTS.md @@ -9,7 +9,7 @@ ## Required reading (treat as read before edits) - `docs/modules/attestor/architecture.md` -- `docs/product-advisories/14-Dec-2025 - Proof and Evidence Chain Technical Reference.md` +- `docs/product/advisories/14-Dec-2025 - Proof and Evidence Chain Technical Reference.md` - RFC 8785 (JSON Canonicalization Scheme) - SPDX 3.0.1, CycloneDX 1.6/1.7, and SLSA provenance v1.0 references diff --git a/src/Attestor/__Libraries/StellaOps.Attestor.TrustVerdict.Tests/AGENTS.md b/src/Attestor/__Libraries/StellaOps.Attestor.TrustVerdict.Tests/AGENTS.md index 0b54f0d90..4e834c6eb 100644 --- a/src/Attestor/__Libraries/StellaOps.Attestor.TrustVerdict.Tests/AGENTS.md +++ b/src/Attestor/__Libraries/StellaOps.Attestor.TrustVerdict.Tests/AGENTS.md @@ -7,7 +7,7 @@ ## Required Reading (treat as read before DOING) - `docs/modules/attestor/architecture.md` -- `docs/product-advisories/14-Dec-2025 - Proof and Evidence Chain Technical Reference.md` +- `docs/product/advisories/14-Dec-2025 - Proof and Evidence Chain Technical Reference.md` - RFC 8785 (JSON Canonicalization Scheme) - Relevant sprint files. diff --git a/src/Attestor/__Libraries/StellaOps.Attestor.TrustVerdict/AGENTS.md b/src/Attestor/__Libraries/StellaOps.Attestor.TrustVerdict/AGENTS.md index 9576d8b43..0fe8a606d 100644 --- a/src/Attestor/__Libraries/StellaOps.Attestor.TrustVerdict/AGENTS.md +++ b/src/Attestor/__Libraries/StellaOps.Attestor.TrustVerdict/AGENTS.md @@ -9,7 +9,7 @@ ## Required reading (treat as read before edits) - `docs/modules/attestor/architecture.md` -- `docs/product-advisories/14-Dec-2025 - Proof and Evidence Chain Technical Reference.md` +- `docs/product/advisories/14-Dec-2025 - Proof and Evidence Chain Technical Reference.md` - RFC 8785 (JSON Canonicalization Scheme) ## Working agreements diff --git a/src/Attestor/__Tests/StellaOps.Attestor.ProofChain.Tests/AGENTS.md b/src/Attestor/__Tests/StellaOps.Attestor.ProofChain.Tests/AGENTS.md index 6732e0e63..b56a640b5 100644 --- a/src/Attestor/__Tests/StellaOps.Attestor.ProofChain.Tests/AGENTS.md +++ b/src/Attestor/__Tests/StellaOps.Attestor.ProofChain.Tests/AGENTS.md @@ -7,7 +7,7 @@ ## Required Reading (treat as read before DOING) - `docs/modules/attestor/architecture.md` -- `docs/product-advisories/14-Dec-2025 - Proof and Evidence Chain Technical Reference.md` +- `docs/product/advisories/14-Dec-2025 - Proof and Evidence Chain Technical Reference.md` - RFC 8785 (JSON Canonicalization Scheme) - Relevant sprint files. diff --git a/src/Attestor/__Tests/StellaOps.Attestor.StandardPredicates.Tests/AGENTS.md b/src/Attestor/__Tests/StellaOps.Attestor.StandardPredicates.Tests/AGENTS.md index ff25710fb..10f1d5c3a 100644 --- a/src/Attestor/__Tests/StellaOps.Attestor.StandardPredicates.Tests/AGENTS.md +++ b/src/Attestor/__Tests/StellaOps.Attestor.StandardPredicates.Tests/AGENTS.md @@ -7,7 +7,7 @@ ## Required Reading (treat as read before DOING) - `docs/modules/attestor/architecture.md` -- `docs/product-advisories/14-Dec-2025 - Proof and Evidence Chain Technical Reference.md` +- `docs/product/advisories/14-Dec-2025 - Proof and Evidence Chain Technical Reference.md` - RFC 8785 (JSON Canonicalization Scheme) - SPDX 3.0.1, CycloneDX 1.6/1.7, and SLSA provenance v1.0 references - Relevant sprint files. diff --git a/src/BinaryIndex/AGENTS.md b/src/BinaryIndex/AGENTS.md index b1b02f229..1d4874dc2 100644 --- a/src/BinaryIndex/AGENTS.md +++ b/src/BinaryIndex/AGENTS.md @@ -66,7 +66,7 @@ BinaryIndex is a collection of libraries and services for binary analysis: - `docs/modules/binaryindex/architecture.md` - `docs/modules/scanner/architecture.md` - `docs/implplan/SPRINT_20260102_001_BE_binary_delta_signatures.md` -- `docs/product-advisories/30-Dec-2025 - Binary Diff Signatures for Patch Detection.md` +- `docs/product/advisories/30-Dec-2025 - Binary Diff Signatures for Patch Detection.md` ## Working Agreement 1. **Task status** - Update `DOING`/`DONE` in sprint files when starting/finishing work. diff --git a/src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.DeltaSig/AGENTS.md b/src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.DeltaSig/AGENTS.md index 73f48dcd1..6aa0a2dba 100644 --- a/src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.DeltaSig/AGENTS.md +++ b/src/BinaryIndex/__Libraries/StellaOps.BinaryIndex.DeltaSig/AGENTS.md @@ -35,7 +35,7 @@ Generate and match delta signatures for binary vulnerability detection. Provide ## Required Reading - `docs/implplan/SPRINT_20260102_001_BE_binary_delta_signatures.md` -- `docs/product-advisories/30-Dec-2025 - Binary Diff Signatures for Patch Detection.md` +- `docs/product/advisories/30-Dec-2025 - Binary Diff Signatures for Patch Detection.md` ## Working Agreement 1. Update task status in sprint file when starting/finishing work. diff --git a/src/Cli/OFFLINE_POE_VERIFICATION.md b/src/Cli/OFFLINE_POE_VERIFICATION.md index b19ef893d..2371ae81b 100644 --- a/src/Cli/OFFLINE_POE_VERIFICATION.md +++ b/src/Cli/OFFLINE_POE_VERIFICATION.md @@ -692,7 +692,7 @@ jq '.subgraph.entryRefs' ./incident-poe/poe.json - **PoE Specification:** `src/Attestor/POE_PREDICATE_SPEC.md` - **Subgraph Extraction:** `src/Scanner/__Libraries/StellaOps.Scanner.Reachability/SUBGRAPH_EXTRACTION.md` - **Sprint Plan:** `docs/implplan/SPRINT_3500_0001_0001_proof_of_exposure_mvp.md` -- **Advisory:** `docs/product-advisories/23-Dec-2026 - Binary Mapping as Attestable Proof.md` +- **Advisory:** `docs/product/advisories/23-Dec-2026 - Binary Mapping as Attestable Proof.md` --- diff --git a/src/Cli/StellaOps.Cli/AGENTS.md b/src/Cli/StellaOps.Cli/AGENTS.md index 2f629bf57..ebfe07a65 100644 --- a/src/Cli/StellaOps.Cli/AGENTS.md +++ b/src/Cli/StellaOps.Cli/AGENTS.md @@ -5,7 +5,7 @@ - Honour StellaOps principles of determinism, observability, and offline-first behaviour while providing a polished operator experience. ## Advisory Handling (inherit + enforce) -- Trigger: any new/updated advisory (`docs/product-advisories/`) requires immediate doc + sprint updates. No chat approval. +- Trigger: any new/updated advisory (`docs/product/advisories/`) requires immediate doc + sprint updates. No chat approval. - Docs: add high-level + detailed updates; inline only short snippets; put runnable/long code in `docs/benchmarks/**` or `tests/**` (deterministic/offline) and link. - Sprints: add Delivery Tracker rows and Execution Log entries in the relevant `SPRINT_*.md`; include doc paths and owners; add risks if feeds/schemas/transparency caps apply. - De-dup: check archived advisories; mark supersedes/extends if overlapping. diff --git a/src/Concelier/AGENTS.md b/src/Concelier/AGENTS.md index 16e6d3616..fcc68a182 100644 --- a/src/Concelier/AGENTS.md +++ b/src/Concelier/AGENTS.md @@ -20,7 +20,7 @@ - `docs/modules/concelier/prep/2025-11-22-oas-obs-prep.md` (OAS + observability prep) - `docs/modules/concelier/prep/2025-11-20-orchestrator-registry-prep.md` (orchestrator registry/control contracts) - `docs/modules/policy/cvss-v4.md` (CVSS receipts model & hashing) -- `docs/product-advisories/25-Nov-2025 - Add CVSS v4.0 Score Receipts for Transparency.md` (vector provenance, DSSE expectations) +- `docs/product/advisories/25-Nov-2025 - Add CVSS v4.0 Score Receipts for Transparency.md` (vector provenance, DSSE expectations) - Any sprint-specific ADRs/notes linked from `docs/implplan/SPRINT_0112_0001_0001_concelier_i.md`, `SPRINT_0113_0001_0002_concelier_ii.md`, or `SPRINT_0114_0001_0003_concelier_iii.md`. ## Working Agreements @@ -34,7 +34,7 @@ ## Distro Backport Version Handling -> **Reference:** `docs/product-advisories/archived/22-Dec-2025 - Getting Distro Backport Logic Right.md` +> **Reference:** `docs/product/advisories/archived/22-Dec-2025 - Getting Distro Backport Logic Right.md` When working with OS package advisories, follow these rules: diff --git a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Distro.Alpine/AGENTS.md b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Distro.Alpine/AGENTS.md index 275ffe2db..2eb5ebf5c 100644 --- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Distro.Alpine/AGENTS.md +++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Distro.Alpine/AGENTS.md @@ -14,7 +14,7 @@ Implement and maintain the Alpine secdb connector that ingests Alpine Linux pack - `docs/ingestion/aggregation-only-contract.md` - `docs/modules/concelier/operations/connectors/alpine.md` - `docs/modules/concelier/operations/mirror.md` -- `docs/product-advisories/archived/22-Dec-2025 - Getting Distro Backport Logic Right.md` +- `docs/product/advisories/archived/22-Dec-2025 - Getting Distro Backport Logic Right.md` ## Working Agreement 1. **Status sync**: update task state to `DOING`/`DONE` in the sprint file and local `TASKS.md` before/after work. diff --git a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Distro.Debian/AGENTS.md b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Distro.Debian/AGENTS.md index bd7698163..cfd5ab3cf 100644 --- a/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Distro.Debian/AGENTS.md +++ b/src/Concelier/__Libraries/StellaOps.Concelier.Connector.Distro.Debian/AGENTS.md @@ -14,7 +14,7 @@ Implement and maintain the Debian security tracker connector that ingests Debian - `docs/modules/platform/architecture-overview.md` - `docs/ingestion/aggregation-only-contract.md` - `docs/modules/concelier/operations/mirror.md` -- `docs/product-advisories/archived/22-Dec-2025 - Getting Distro Backport Logic Right.md` +- `docs/product/advisories/archived/22-Dec-2025 - Getting Distro Backport Logic Right.md` ## Working Agreement 1. **Status sync**: update task state to `DOING`/`DONE` in the sprint file and local `TASKS.md` before/after work. diff --git a/src/Excititor/AGENTS.md b/src/Excititor/AGENTS.md index 8e3f275a6..f18061238 100644 --- a/src/Excititor/AGENTS.md +++ b/src/Excititor/AGENTS.md @@ -19,7 +19,7 @@ - `docs/modules/excititor/operations/chunk-api-user-guide.md` - `docs/modules/excititor/schemas/vex-chunk-api.yaml` - `docs/modules/evidence-locker/attestation-contract.md` -- `docs/product-advisories/14-Dec-2025 - Smart-Diff Technical Reference.md` (for VEX emission contracts) +- `docs/product/advisories/14-Dec-2025 - Smart-Diff Technical Reference.md` (for VEX emission contracts) ## VEX Emission Contracts (Sprint 3500) diff --git a/src/Gateway/AGENTS.md b/src/Gateway/AGENTS.md index 0e752bf40..a6a557d16 100644 --- a/src/Gateway/AGENTS.md +++ b/src/Gateway/AGENTS.md @@ -16,7 +16,7 @@ - docs/modules/gateway/openapi.md - docs/modules/router/architecture.md - docs/modules/authority/architecture.md -- docs/product-advisories/archived/2025-12-21-reference-architecture/20-Dec-2025 - Stella Ops Reference Architecture.md +- docs/product/advisories/archived/2025-12-21-reference-architecture/20-Dec-2025 - Stella Ops Reference Architecture.md ## Working Directory & Boundaries - Primary scope: src/Gateway/** diff --git a/src/Policy/AGENTS.md b/src/Policy/AGENTS.md index c19b38695..b41746691 100644 --- a/src/Policy/AGENTS.md +++ b/src/Policy/AGENTS.md @@ -12,7 +12,7 @@ - `docs/07_HIGH_LEVEL_ARCHITECTURE.md` - `docs/modules/platform/architecture-overview.md` - `docs/modules/policy/architecture.md` -- `docs/product-advisories/14-Dec-2025 - Smart-Diff Technical Reference.md` (for suppression contracts) +- `docs/product/advisories/14-Dec-2025 - Smart-Diff Technical Reference.md` (for suppression contracts) - Current sprint file ## Working Directory & Boundaries diff --git a/src/Policy/StellaOps.Policy.Gateway/AGENTS.md b/src/Policy/StellaOps.Policy.Gateway/AGENTS.md index 2ce327ed1..859e6065a 100644 --- a/src/Policy/StellaOps.Policy.Gateway/AGENTS.md +++ b/src/Policy/StellaOps.Policy.Gateway/AGENTS.md @@ -12,7 +12,7 @@ - `docs/modules/policy/architecture.md` - `docs/modules/platform/architecture-overview.md` - `docs/modules/policy/cvss-v4.md` -- `docs/product-advisories/25-Nov-2025 - Add CVSS v4.0 Score Receipts for Transparency.md` +- `docs/product/advisories/25-Nov-2025 - Add CVSS v4.0 Score Receipts for Transparency.md` - Sprint tracker: `docs/implplan/SPRINT_0190_0001_0001_cvss_v4_receipts.md` ## Working Agreements diff --git a/src/Policy/__Libraries/StellaOps.Policy.Exceptions/AGENTS.md b/src/Policy/__Libraries/StellaOps.Policy.Exceptions/AGENTS.md index 96a6017cf..609aa4eb8 100644 --- a/src/Policy/__Libraries/StellaOps.Policy.Exceptions/AGENTS.md +++ b/src/Policy/__Libraries/StellaOps.Policy.Exceptions/AGENTS.md @@ -11,8 +11,8 @@ ## Required Reading (treat as read before DOING) - `docs/modules/policy/architecture.md` - `docs/modules/platform/architecture-overview.md` -- `docs/product-advisories/archived/20-Dec-2025 - Moat Explanation - Exception management as auditable objects.md` -- `docs/product-advisories/22-Dec-2026 - UI Patterns for Triage and Replay.md` +- `docs/product/advisories/archived/20-Dec-2025 - Moat Explanation - Exception management as auditable objects.md` +- `docs/product/advisories/22-Dec-2026 - UI Patterns for Triage and Replay.md` - Current sprint file in `docs/implplan/SPRINT_3900_*.md` ## Working Directory & Boundaries diff --git a/src/Policy/__Libraries/StellaOps.Policy.Unknowns/AGENTS.md b/src/Policy/__Libraries/StellaOps.Policy.Unknowns/AGENTS.md index 99f9abb8b..16364e73b 100644 --- a/src/Policy/__Libraries/StellaOps.Policy.Unknowns/AGENTS.md +++ b/src/Policy/__Libraries/StellaOps.Policy.Unknowns/AGENTS.md @@ -9,7 +9,7 @@ - docs/07_HIGH_LEVEL_ARCHITECTURE.md - docs/modules/platform/architecture-overview.md - docs/modules/policy/architecture.md -- docs/product-advisories/archived/2025-12-21-moat-gap-closure/14-Dec-2025 - Triage and Unknowns Technical Reference.md +- docs/product/advisories/archived/2025-12-21-moat-gap-closure/14-Dec-2025 - Triage and Unknowns Technical Reference.md ## Working Directory - src/Policy/__Libraries/StellaOps.Policy.Unknowns/ diff --git a/src/Scanner/AGENTS.md b/src/Scanner/AGENTS.md index df0582260..2506af3fc 100644 --- a/src/Scanner/AGENTS.md +++ b/src/Scanner/AGENTS.md @@ -13,7 +13,7 @@ - `docs/modules/reach-graph/guides/DELIVERY_GUIDE.md` (sections 5.5–5.9 for native/JS/PHP updates) - `docs/modules/reach-graph/guides/purl-resolved-edges.md` - `docs/modules/reach-graph/guides/patch-oracles.md` -- `docs/product-advisories/14-Dec-2025 - Smart-Diff Technical Reference.md` (for Smart-Diff predicates) +- `docs/product/advisories/14-Dec-2025 - Smart-Diff Technical Reference.md` (for Smart-Diff predicates) - Current sprint file (e.g., `docs/implplan/SPRINT_401_reachability_evidence_chain.md`). ## Working Directory & Boundaries diff --git a/src/Scanner/AGENTS_SCORE_PROOFS.md b/src/Scanner/AGENTS_SCORE_PROOFS.md index 3bfa22cfe..fb9abdfb0 100644 --- a/src/Scanner/AGENTS_SCORE_PROOFS.md +++ b/src/Scanner/AGENTS_SCORE_PROOFS.md @@ -670,7 +670,7 @@ Before deploying to production: - `docs/07_HIGH_LEVEL_ARCHITECTURE.md` - `docs/db/schemas/scanner_schema_specification.md` - `docs/api/scanner-score-proofs-api.md` -- `docs/product-advisories/14-Dec-2025 - Reachability Analysis Technical Reference.md` +- `docs/product/advisories/14-Dec-2025 - Reachability Analysis Technical Reference.md` **Existing Code**: - `src/Attestor/__Libraries/StellaOps.Attestor.ProofChain/` — DSSE examples diff --git a/src/Scanner/__Libraries/StellaOps.Scanner.Reachability/SUBGRAPH_EXTRACTION.md b/src/Scanner/__Libraries/StellaOps.Scanner.Reachability/SUBGRAPH_EXTRACTION.md index c674fb9a8..81311bc98 100644 --- a/src/Scanner/__Libraries/StellaOps.Scanner.Reachability/SUBGRAPH_EXTRACTION.md +++ b/src/Scanner/__Libraries/StellaOps.Scanner.Reachability/SUBGRAPH_EXTRACTION.md @@ -642,7 +642,7 @@ public async Task ExtractSubgraph_WithSameInputs_ProducesSameHash(string fixture ## 12. Cross-References - **Sprint:** `docs/implplan/SPRINT_3500_0001_0001_proof_of_exposure_mvp.md` -- **Advisory:** `docs/product-advisories/23-Dec-2026 - Binary Mapping as Attestable Proof.md` +- **Advisory:** `docs/product/advisories/23-Dec-2026 - Binary Mapping as Attestable Proof.md` - **Reachability Docs:** `docs/modules/reach-graph/guides/function-level-evidence.md`, `docs/modules/reach-graph/guides/lattice.md` - **EntryTrace:** `docs/modules/scanner/operations/entrypoint-static-analysis.md` - **CVE Mapping:** `docs/modules/reach-graph/guides/cve-symbol-mapping.md` diff --git a/src/Scanner/__Libraries/StellaOps.Scanner.SmartDiff/AGENTS.md b/src/Scanner/__Libraries/StellaOps.Scanner.SmartDiff/AGENTS.md index e32294db2..eb2c7aea2 100644 --- a/src/Scanner/__Libraries/StellaOps.Scanner.SmartDiff/AGENTS.md +++ b/src/Scanner/__Libraries/StellaOps.Scanner.SmartDiff/AGENTS.md @@ -17,7 +17,7 @@ Deliver Smart-Diff primitives and detection logic that enable deterministic, att - Golden predicate fixtures to ensure deterministic output. ## Required Reading -- `docs/product-advisories/14-Dec-2025 - Smart-Diff Technical Reference.md` +- `docs/product/advisories/14-Dec-2025 - Smart-Diff Technical Reference.md` - `docs/modules/scanner/architecture.md` - `docs/modules/platform/architecture-overview.md` diff --git a/src/Scanner/__Libraries/StellaOps.Scanner.Triage/AGENTS.md b/src/Scanner/__Libraries/StellaOps.Scanner.Triage/AGENTS.md index ca0bcfced..ab9b7a4ec 100644 --- a/src/Scanner/__Libraries/StellaOps.Scanner.Triage/AGENTS.md +++ b/src/Scanner/__Libraries/StellaOps.Scanner.Triage/AGENTS.md @@ -15,8 +15,8 @@ Provide triage workflow infrastructure for the Scanner module: ## Required Reading - `docs/modules/scanner/architecture.md` -- `docs/product-advisories/21-Dec-2025 - How Top Scanners Shape Evidence‑First UX.md` -- `docs/product-advisories/21-Dec-2025 - Designing Explainable Triage Workflows.md` +- `docs/product/advisories/21-Dec-2025 - How Top Scanners Shape Evidence‑First UX.md` +- `docs/product/advisories/21-Dec-2025 - Designing Explainable Triage Workflows.md` - `docs/modules/platform/architecture-overview.md` ## Working Agreement diff --git a/src/TaskRunner/StellaOps.TaskRunner/AGENTS.md b/src/TaskRunner/StellaOps.TaskRunner/AGENTS.md index 9ec428151..89af9fc58 100644 --- a/src/TaskRunner/StellaOps.TaskRunner/AGENTS.md +++ b/src/TaskRunner/StellaOps.TaskRunner/AGENTS.md @@ -20,7 +20,7 @@ Execute Task Packs safely and deterministically. Provide remote pack execution, - `docs/modules/platform/architecture.md` - `docs/modules/platform/architecture-overview.md` - `docs/modules/taskrunner/architecture.md` -- `docs/product-advisories/29-Nov-2025 - Task Pack Orchestration and Automation.md` +- `docs/product/advisories/29-Nov-2025 - Task Pack Orchestration and Automation.md` - `docs/task-packs/spec.md`, `docs/task-packs/authoring-guide.md`, `docs/task-packs/runbook.md` ## Working Agreement diff --git a/src/__Tests/Integration/StellaOps.Integration.Unknowns/AGENTS.md b/src/__Tests/Integration/StellaOps.Integration.Unknowns/AGENTS.md index e6c62814f..c330dcb31 100644 --- a/src/__Tests/Integration/StellaOps.Integration.Unknowns/AGENTS.md +++ b/src/__Tests/Integration/StellaOps.Integration.Unknowns/AGENTS.md @@ -13,7 +13,7 @@ - docs/modules/policy/architecture.md - docs/uncertainty/README.md - docs/api/unknowns-api.md -- docs/product-advisories/14-Dec-2025 - Triage and Unknowns Technical Reference.md +- docs/product/advisories/14-Dec-2025 - Triage and Unknowns Technical Reference.md ## Working Directory & Scope - Primary: src/__Tests/Integration/StellaOps.Integration.Unknowns diff --git a/src/__Tests/__Benchmarks/proof-chain/README.md b/src/__Tests/__Benchmarks/proof-chain/README.md index 0712399e8..4d1471111 100644 --- a/src/__Tests/__Benchmarks/proof-chain/README.md +++ b/src/__Tests/__Benchmarks/proof-chain/README.md @@ -209,6 +209,6 @@ From advisory §14.1: ## Related Documentation -- [Proof and Evidence Chain Technical Reference](../../docs/product-advisories/14-Dec-2025%20-%20Proof%20and%20Evidence%20Chain%20Technical%20Reference.md) +- [Proof and Evidence Chain Technical Reference](../../docs/product/advisories/14-Dec-2025%20-%20Proof%20and%20Evidence%20Chain%20Technical%20Reference.md) - [Attestor Architecture](../../docs/modules/attestor/architecture.md) - [Performance Workbook](../../docs/12_PERFORMANCE_WORKBOOK.md) diff --git a/src/__Tests/__Benchmarks/reachability-benchmark/AGENTS.md b/src/__Tests/__Benchmarks/reachability-benchmark/AGENTS.md index c49f0cb80..4d6160e53 100644 --- a/src/__Tests/__Benchmarks/reachability-benchmark/AGENTS.md +++ b/src/__Tests/__Benchmarks/reachability-benchmark/AGENTS.md @@ -11,9 +11,9 @@ - `docs/modules/reach-graph/guides/function-level-evidence.md` - `docs/modules/reach-graph/guides/lattice.md` - Product advisories: - - `docs/product-advisories/24-Nov-2025 - Designing a Deterministic Reachability Benchmark.md` - - `docs/product-advisories/archived/23-Nov-2025 - Benchmarking Determinism in Vulnerability Scoring.md` - - `docs/product-advisories/archived/23-Nov-2025 - Publishing a Reachability Benchmark Dataset.md` + - `docs/product/advisories/24-Nov-2025 - Designing a Deterministic Reachability Benchmark.md` + - `docs/product/advisories/archived/23-Nov-2025 - Benchmarking Determinism in Vulnerability Scoring.md` + - `docs/product/advisories/archived/23-Nov-2025 - Publishing a Reachability Benchmark Dataset.md` - Sprint plan: `docs/implplan/SPRINT_0513_0001_0001_public_reachability_benchmark.md` - DB/spec guidance for determinism and licensing: `docs/db/RULES.md`, `docs/db/VERIFICATION.md`