audit notes work completed, test fixes work (95% done), new sprints, new data sources setup and configuration

src/__Libraries/StellaOps.Reachability.Core/AGENTS.md

@@ -0,0 +1,41 @@
+# StellaOps.Reachability.Core
+
+## Module Charter
+The Reachability.Core library defines canonical identifiers and deterministic hashing helpers used by reachability analysis and evidence pipelines.
+
+### Scope
+- Symbol normalization and canonical IDs
+- Node hash and path hash helpers
+- Deterministic serialization support
+
+### Out of Scope
+- Call graph extraction (Scanner)
+- Runtime signal collection (Signals)
+- DSSE signing and transparency submission (Attestor)
+- Policy evaluation and gates (Policy)
+
+## Roles
+- Backend developer (.NET)
+- QA automation engineer
+
+## Required Reading
+- docs/README.md
+- docs/07_HIGH_LEVEL_ARCHITECTURE.md
+- docs/modules/platform/architecture-overview.md
+- docs/modules/reach-graph/architecture.md
+- docs/modules/scanner/architecture.md
+- docs/modules/signals/architecture.md
+- docs/contracts/witness-v1.md
+- docs/architecture/EVIDENCE_PIPELINE_ARCHITECTURE.md
+
+## Working Rules
+- Determinism first: invariant culture, stable ordering, UTC timestamps.
+- No direct `DateTime.UtcNow`, `Guid.NewGuid()`, or `Random.Shared` in production code.
+- Hashing and canonical JSON must use shared helpers; do not reimplement DSSE PAE.
+- ASCII-only output in logs and comments.
+- Tests live in `src/__Libraries/__Tests/StellaOps.Reachability.Core.Tests` and must cover determinism and edge cases.
+
+## Allowed Shared Dependencies
+- `StellaOps.Cryptography`
+- `StellaOps.Attestation`
+