stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 3 Releases Wiki Activity

more features checks. setup improvements

Browse Source
This commit is contained in:
master
2026-02-13 02:04:55 +02:00
parent 9911b7d73c
commit 9ca2de05df
675 changed files with 37550 additions and 1826 deletions
Download Patch File Download Diff File Expand all files Collapse all files

644
docs/qa/feature-checks/state/concelier.json Normal file
View File

@@ -0,0 +1,644 @@
{
"module": "concelier",
"featureCount": 36,
"lastUpdatedUtc": "2026-02-13T09:00:00Z",
"summary": {
"passed": 36,
"failed": 0,
"blocked": 0,
"skipped": 0,
"done": 36,
"queued": 0
},
"buildNote": "ALL 36 CONCELIER FEATURES VERIFIED. Concelier test baseline: Merge.Tests 731/731, BackportProof.Tests 60/60, Core.Tests 567/569 (2 pre-existing FeedSnapshotPinningService failures; +24 new ConnectorRegistrationService/WellKnownConnectors/DefaultConnectorMetadataProvider tests), Federation.Tests 131/131, Interest.Tests 36/36, Normalization.Tests 41/41, Astra.Tests 14/14, Cccs.Tests 5/5, Cisco.Tests 11/11, WebService.Tests 215/215, Cache.Valkey.Tests 88/97 (9 perf skipped), Persistence.Tests 235/235 (Testcontainers PostgreSQL), Epss.Tests 46/46, SbomIntegration.Tests 130/130. Total: ~1800+ tests across 14 test projects. 36/36 features verified with full Tier 0+1+2d on 2026-02-13.",
"features": {
"4-tier-backport-evidence-resolver": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-12T22:00:00Z",
"featureFile": "docs/features/checked/concelier/4-tier-backport-evidence-resolver.md",
"notes": [
"[2026-02-12T21:45:00Z] checking: Tier 0 source check passed - BackportEvidenceResolver, BackportStatusService, FixIndexService, ProvenanceScopeService all found",
"[2026-02-12T21:46:00Z] checking: Tier 1 code review passed - 4-tier precedence, distro mappings, confidence thresholds",
"[2026-02-12T21:47:00Z] checking: Tier 2d passed - 687+42 tests, 15 BackportEvidenceResolver-specific tests verify tier precedence, distro extraction, batch resolution, confidence thresholds, input validation",
"[2026-02-12T22:00:00Z] done: Moved to checked/"
]
},
"advisory-connector-architecture": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-12T22:05:00Z",
"featureFile": "docs/features/checked/concelier/advisory-connector-architecture.md",
"notes": [
"[2026-02-12T21:48:00Z] checking: Tier 0 source check passed",
"[2026-02-12T21:49:00Z] checking: Tier 1 code review passed - ConnectorRegistrationService, ConnectorWorker, NVD/Cisco/GHSA/EPSS connectors",
"[2026-02-12T21:50:00Z] checking: Tier 2d passed - Core.Tests 452/454 (2 pre-existing FeedSnapshotPinning failures), NVD 33/33, Cisco 11/11, GHSA 59/59, EPSS 24/24. Plugin discovery via FeedPluginAdapterFactory verified.",
"[2026-02-12T22:05:00Z] done: Moved to checked/"
]
},
"advisory-federation-with-delta-bundle-export-import": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-12T22:05:00Z",
"featureFile": "docs/features/checked/concelier/advisory-federation-with-delta-bundle-export-import.md",
"notes": [
"[2026-02-12T21:51:00Z] checking: Tier 0 source check passed",
"[2026-02-12T21:52:00Z] checking: Tier 1 code review passed - BundleExportService, BundleImportService, BundleVerifier, SyncLedgerRepository",
"[2026-02-12T21:53:00Z] checking: Tier 2d passed - Federation.Tests 131/131 twice (deterministic). Export->Verify->Import->Merge->Ledger flow verified.",
"[2026-02-12T22:05:00Z] done: Moved to checked/"
]
},
"advisory-ingestion-with-canonical-deduplication": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-12T22:15:00Z",
"featureFile": "docs/features/checked/concelier/advisory-ingestion-with-canonical-deduplication.md",
"notes": [
"[2026-02-12T22:10:00Z] checking: Tier 0 source check passed - CanonicalAdvisoryService (381 lines), CachingCanonicalAdvisoryService, MergeHashCalculator (289 lines), ConnectorWorker (360 lines), AdvisoryRepository, AdvisoryCanonicalRepository, AdvisorySourceEdgeEntity all found",
"[2026-02-12T22:12:00Z] checking: Tier 1 code review passed - source precedence (vendor=10..nvd=40), SHA256 merge hash from 6 normalizers, DSSE-signed source edges, caching with invalidation",
"[2026-02-12T22:15:00Z] checking: Tier 2d passed - Core.Tests 452/454 (2 pre-existing), Merge.Tests 687/687, Normalization.Tests 41/41. CanonicalDeduplicationTests verifies NVD+OSV+GHSA+Debian -> 1 canonical with 4 source edges. MergeHashCalculatorTests verifies deterministic SHA256.",
"[2026-02-12T22:15:00Z] done: All tiers passed"
]
},
"advisory-interest-scoring-service": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-12T22:15:00Z",
"featureFile": "docs/features/checked/concelier/advisory-interest-scoring-service.md",
"notes": [
"[2026-02-12T22:10:00Z] checking: Tier 0 source check passed - InterestScoringService (343 lines), InterestScoreCalculator (175 lines), InterestScoreRecalculationJob, InterestScoreOptions, InterestScoringMetrics, InterestScoreRepository, REST endpoints all found",
"[2026-02-12T22:12:00Z] checking: Tier 1 code review passed - 5-factor weighted scoring: InSbom(30%), Reachable(25%), Deployed(20%), NoVexNotAffected(15%), Recent(10%), age decay, VEX override, stub degradation, incremental+full recalc modes",
"[2026-02-12T22:15:00Z] checking: Tier 2d passed - Interest.Tests 36/36, Core.Tests 452/454. Exact numeric assertions: NoSignals=0.15, SbomMatch=0.45, VEX override to zero confirmed.",
"[2026-02-12T22:15:00Z] done: All tiers passed"
]
},
"advisory-mode-formula-for-evidence-weighted-scoring": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-12T22:15:00Z",
"featureFile": "docs/features/checked/concelier/advisory-mode-formula-for-evidence-weighted-scoring.md",
"notes": [
"[2026-02-12T22:10:00Z] checking: Tier 0 source check passed - InterestScoreCalculator (175 lines), InterestScoreOptions, VendorRiskSignalExtractor (264 lines), PolicyStudioSignalPicker (256 lines) all found",
"[2026-02-12T22:12:00Z] checking: Tier 1 code review passed - FormulaMode implemented through composition: InterestScoreCalculator (VEX override), VendorRiskSignalExtractor (CVSS/KEV/fix/exploit maturity), PolicyStudioSignalPicker (signal selection)",
"[2026-02-12T22:15:00Z] checking: Tier 2d passed - Interest.Tests 36/36, Core.Tests 452/454. VEX not_affected override to zero, CVSS contribution, exploit maturity extraction, policy studio signal picking all verified.",
"[2026-02-12T22:15:00Z] done: All tiers passed"
]
},
"astra-linux-oval-feed-connector": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-12T22:35:00Z",
"featureFile": "docs/features/checked/concelier/astra-linux-oval-feed-connector.md",
"notes": [
"[2026-02-12T22:30:00Z] checking: Tier 0 source check passed - AstraConnectorPlugin (34 lines), AstraConnector (402 lines), AstraOptions (148 lines), OvalParser (395 lines) all found",
"[2026-02-12T22:32:00Z] checking: Tier 1 code review passed - IConnectorPlugin+IFeedConnector scaffold, OVAL XML parser with definitions/tests/objects/states extraction, MapToAdvisory with CVE key/ru language/Deb type/astra-linux platform/EVR ranges",
"[2026-02-12T22:35:00Z] checking: Tier 2d passed - Astra.Tests 14/14 (pre-built DLL). Plugin registration, options validation, OVAL parsing E2E, advisory mapping, deterministic output all verified. Pre-existing CS0050 build error (accessibility) does not affect test results.",
"[2026-02-12T22:35:00Z] done: All tiers passed"
]
},
"backport-aware-advisory-deduplication-with-provenance-scope": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-12T22:35:00Z",
"featureFile": "docs/features/checked/concelier/backport-aware-advisory-deduplication-with-provenance-scope.md",
"notes": [
"[2026-02-12T22:30:00Z] checking: Tier 0 source check passed - MergeHashCalculator (289 lines), MergeHashBackfillService (173 lines), MergeHashBackfillJob (68 lines), MergeHashShadowWriteService (159 lines), ProvenanceScopeService (323 lines), ProvenanceScopeRepository, ProvenanceScopeEntity (64 lines), PostgresProvenanceScopeStore (155 lines) all found",
"[2026-02-12T22:32:00Z] checking: Tier 1 code review passed - backport-aware merge hash, shadow-write migration, provenance scope lifecycle (create/update/evidence link/delete), distro release extraction from PURL, confidence-based update policy",
"[2026-02-12T22:35:00Z] checking: Tier 2d passed - Merge.Tests 687/687 (15 ProvenanceScopeLifecycleTests + 7 BackportProvenanceE2ETests), BackportProof.Tests 42/42. Multi-distro provenance scopes, confidence-based updates, audit trail, distro release extraction all verified.",
"[2026-02-12T22:35:00Z] done: All tiers passed"
]
},
"backport-fixindex-service-with-o-distro-patch-lookups": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-12T22:35:00Z",
"featureFile": "docs/features/checked/concelier/backport-fixindex-service-with-o-distro-patch-lookups.md",
"notes": [
"[2026-02-12T22:30:00Z] checking: Tier 0 source check passed - FixIndexService (361 lines), BackportStatusService (344 lines), BackportEvidenceResolver (307 lines) all found",
"[2026-02-12T22:32:00Z] checking: Tier 1 code review passed - O(1) 3-level dictionary lookup, 5-step deterministic evaluation, multi-tier evidence resolution with 4 tiers",
"[2026-02-12T22:35:00Z] checking: Tier 2d passed - BackportProof.Tests 42/42, Merge.Tests 687/687 (15 BackportEvidenceResolver tests). O(1) lookup, tier precedence, distro extraction, batch resolution, confidence thresholds all verified.",
"[2026-02-12T22:35:00Z] done: All tiers passed"
]
},
"canonical-advisory-source-edge-schema": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-12T23:20:00Z",
"featureFile": "docs/features/checked/concelier/canonical-advisory-source-edge-schema.md",
"notes": [
"[2026-02-12T23:10:00Z] checking: Tier 0 source check passed - AdvisorySourceEdgeEntity, AdvisoryCanonicalRepository, AdvisoryRepository, MergeHashCalculator, ConcelierDbContext, ConcelierDataSource all found",
"[2026-02-12T23:11:00Z] checking: Tier 1 code review passed (tier1-code-review.json pre-existing)",
"[2026-02-12T23:15:00Z] checking: Tier 2d passed - Core.Tests 452/454 (2 pre-existing FeedSnapshotPinning failures), Merge.Tests 687/687. CanonicalDeduplicationTests (7 tests): multi-source dedup, source edge provenance, precedence ranking. CanonicalAdvisoryServiceTests (28 tests): ingest pipeline, merge hash identity, DSSE signing, source precedence.",
"[2026-02-12T23:20:00Z] done: Moved to checked/"
]
},
"cccs-advisory-connector": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-12T23:20:00Z",
"featureFile": "docs/features/checked/concelier/cccs-advisory-connector.md",
"notes": [
"[2026-02-12T23:10:00Z] checking: Tier 0 source check passed - CccsConnector, CccsConnectorPlugin, ConnectorRegistrationService all found",
"[2026-02-12T23:11:00Z] checking: Tier 1 code review passed (tier1-code-review.json pre-existing)",
"[2026-02-12T23:14:00Z] checking: Tier 2d passed - Cccs.Tests 5/5 (Testcontainers PostgreSQL). CccsConnectorTests: full Fetch/Parse/Map E2E pipeline, raw document persistence with metadata. CccsMapperTests: canonical mapping with provenance. CccsHtmlParserTests: EN+FR HTML advisory parsing.",
"[2026-02-12T23:20:00Z] done: Moved to checked/"
]
},
"cisco-vendor-advisory-connector": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-12T23:20:00Z",
"featureFile": "docs/features/checked/concelier/cisco-vendor-advisory-connector.md",
"notes": [
"[2026-02-12T23:10:00Z] checking: Tier 0 source check passed - CiscoConnector, VndrCiscoConnectorPlugin, CiscoRawAdvisory all found",
"[2026-02-12T23:11:00Z] checking: Tier 1 code review passed (tier1-code-review.json pre-existing)",
"[2026-02-12T23:15:00Z] checking: Tier 2d passed - Cisco.Tests 11/11. CiscoMapperTests: canonical mapping with vendor-type packages, semver ranges, CVSS, aliases, provenance. CiscoDtoFactoryTests: CSAF document merging with product resolution.",
"[2026-02-12T23:20:00Z] done: Moved to checked/"
]
},
"concelier-advisory-chunks-api": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-13T00:15:00Z",
"featureFile": "docs/features/checked/concelier/concelier-advisory-chunks-api.md",
"notes": [
"[2026-02-13T00:10:00Z] checking: Tier 0 source check passed - AdvisoryChunkBuilder, AdvisoryChunkCache, MessagingAdvisoryChunkCache, ConcelierOptions all found",
"[2026-02-13T00:12:00Z] checking: Tier 2d passed - WebService.Tests 215/215. AdvisoryChunkBuilderTests (2): paragraph-anchored chunks with SHA256 IDs, JSON pointer field masks. AdvisoryChunkCacheKeyTests (3): deterministic key normalization, content-hash sensitivity.",
"[2026-02-13T00:15:00Z] done: Moved to checked/"
]
},
"concelier-deprecation-headers-middleware": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-13T00:15:00Z",
"featureFile": "docs/features/checked/concelier/concelier-deprecation-headers-middleware.md",
"notes": [
"[2026-02-13T00:10:00Z] checking: Tier 0 source check passed - DeprecationMiddleware (with extensions and registration helpers) found",
"[2026-02-13T00:12:00Z] checking: Tier 2d passed - WebService.Tests 215/215. DeprecationHeadersTests (9): 5 legacy endpoint deprecation values, migration guides, sunset date ordering, header constants.",
"[2026-02-13T00:15:00Z] done: Moved to checked/"
]
},
"concelier-lnm-linkset-cache-with-telemetry": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-13T00:15:00Z",
"featureFile": "docs/features/checked/concelier/concelier-lnm-linkset-cache-with-telemetry.md",
"notes": [
"[2026-02-13T00:10:00Z] checking: Tier 0 source check passed - LinksetCorrelationService, LinksetCorrelationV2, LinksetCorrelation, ValkeyAdvisoryCacheService, AdvisoryCacheKeys all found",
"[2026-02-13T00:12:00Z] checking: Tier 2d passed - Core.Tests 452/454 (2 pre-existing), Cache.Valkey.Tests 88/97 (9 perf skipped). LinksetCorrelationV2Tests (25): V2 algorithm with alias connectivity, IDF, determinism. AdvisoryCacheKeysTests (20): PURL/CVE normalization, key extraction. AdvisoryLinksetDeterminismTests (2): idempotency, dedup determinism.",
"[2026-02-13T00:15:00Z] done: Moved to checked/"
]
},
"concelier-policy-studio-signal-picker": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-13T00:35:00Z",
"featureFile": "docs/features/checked/concelier/concelier-policy-studio-signal-picker.md",
"notes": [
"[2026-02-13T00:30:00Z] checking: Tier 0 source check passed - PolicyStudioSignalPicker, VendorRiskSignalExtractor all found",
"[2026-02-13T00:32:00Z] checking: Tier 2d passed - Interest.Tests 36/36, Core.Tests 452/454 (2 pre-existing). InterestScoreCalculatorTests (16): 5-factor scoring, VEX override, decay, tier assignment. PolicyAuthSignalFactoryTests (1): linkset-to-signal mapping.",
"[2026-02-13T00:35:00Z] done: Moved to checked/"
]
},
"concelier-tenant-scoping": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-13T05:50:00Z",
"featureFile": "docs/features/checked/concelier/concelier-tenant-scoping.md",
"notes": [
"[2026-02-13T00:30:00Z] checking: Tier 0 source check passed - TenantScopeNormalizer, TenantCapabilitiesEndpoint, TenantScope all found",
"[2026-02-13T00:32:00Z] checking: Tier 2d passed - WebService.Tests 215/215. TenantAllowlistTests (13): tenant ID validation, normalization, authority config. WebServiceEndpointsTests (1): full tenant-scoped observation endpoint with data isolation.",
"[2026-02-13T00:35:00Z] done: Moved to checked/",
"[2026-02-13T05:50:00Z] deep-qa: run-002 deep verification. 63 NEW unit tests written: TenantScopeNormalizerTests (30), LinkNotMergeTenantCapabilitiesProviderTests (14), TenantScopeTests (19). WebService.Tests 215/215, Core.Tests 515/517 (2 pre-existing). All tenant-scoping behavior verified."
]
},
"concelier-vendor-risk-signal-provider": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-13T06:05:00Z",
"featureFile": "docs/features/checked/concelier/concelier-vendor-risk-signal-provider.md",
"notes": [
"[2026-02-13T00:30:00Z] checking: Tier 0 source check passed - VendorRiskSignalExtractor, PolicyStudioSignalPicker all found",
"[2026-02-13T00:32:00Z] checking: Tier 2d passed - Core.Tests 452/454 (2 pre-existing), Interest.Tests 36/36. AdvisoryFieldChangeEmitterTests (1): VendorRiskSignal records, CVSS field change tracking. InterestScoreCalculatorTests (16): signal scoring pipeline with exact numeric assertions.",
"[2026-02-13T00:35:00Z] done: Moved to checked/",
"[2026-02-13T06:05:00Z] deep-qa: run-002 deep verification. 28 NEW unit tests written: VendorRiskSignalExtractorTests (14), PolicyStudioSignalPickerTests (14). Core.Tests 543/545 (2 pre-existing). CVSS extraction, KEV parsing, fix availability, provenance chain, version selection, severity override all verified."
]
},
"deterministic-semantic-merge-hash-for-advisory-deduplication": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-13T01:20:00Z",
"featureFile": "docs/features/checked/concelier/deterministic-semantic-merge-hash-for-advisory-deduplication.md",
"notes": [
"[2026-02-13T01:10:00Z] checking: Tier 0 passed - 5/5 source files verified: MergeHashCalculator (289 lines), IMergeHashCalculator, MergeHashShadowWriteService (160 lines), MergeHashBackfillService (174 lines), MergeHashBackfillJob (69 lines)",
"[2026-02-13T01:15:00Z] checking: Tier 1 passed - Merge.Tests 731/731 (687 existing + 44 new). Zero failures.",
"[2026-02-13T01:20:00Z] checking: Tier 2d passed - 35 existing tests (MergeHashCalculatorTests 20: determinism/normalization/cross-distro, GoldenCorpusTests 10: Debian/RHEL fixtures, FuzzingTests 5: 1000 random inputs). 44 NEW tests: MergeHashShadowWriteServiceTests (16: backfill-all/one, skip-if-exists, force, error resilience, cancellation, field preservation), MergeHashBackfillServiceTests (18: dry-run, error counting, duration, SuccessRate/AvgTimePerAdvisoryMs), MergeHashBackfillJobTests (10: IJob seed/force parameter parsing).",
"[2026-02-13T01:20:00Z] done: Moved to checked/"
]
},
"feed-snapshot-coordinator": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-003",
"lastUpdatedUtc": "2026-02-13T07:10:00Z",
"featureFile": "docs/features/checked/concelier/feed-snapshot-coordinator.md",
"notes": [
"[2026-02-13T01:55:00Z] checking: Tier 0 FAILED (first agent) - searched only src/Concelier/, missed shared library",
"[2026-02-13T07:00:00Z] CORRECTION: FeedSnapshotCoordinatorService found at src/__Libraries/StellaOps.Replay.Core/FeedSnapshot/ (15 partial class files). Implementation is complete with Create/Get/List/Validate/Export/Import/Digest capabilities.",
"[2026-02-13T07:05:00Z] checking: Tier 2d passed - Replay.Core.Tests 64/64. FeedSnapshotCoordinatorTests: atomic multi-source snapshot creation, deterministic composite digest, source alphabetical ordering, subset selection, unknown source rejection, snapshot retrieval, validation with drift detection.",
"[2026-02-13T07:10:00Z] done: Corrected from unimplemented to verified. Moved to checked/"
]
},
"full-sbom-extraction-with-enriched-parsedsbom-model": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-13T07:00:00Z",
"featureFile": "docs/features/checked/concelier/full-sbom-extraction-with-enriched-parsedsbom-model.md",
"notes": [
"[2026-02-13T06:40:00Z] checking: Tier 0 passed - ParsedSbomParser (4900+ lines), ParsedSbom model (734 lines, 40+ record types), SbomAdvisoryMatcher, IParsedSbomParser, ISbomAdvisoryMatcher all verified",
"[2026-02-13T06:50:00Z] checking: Tier 1 passed - SbomIntegration.Tests 130/130 (120 existing + 10 new ParsedSbomParserEdgeCaseTests). Zero failures.",
"[2026-02-13T07:00:00Z] checking: Tier 2d passed - 24 ParsedSbomParserTests (CycloneDX 1.7: metadata/components/services, vulnerabilities, crypto types, VEX states, nested services/data flows, license terms/expressions, evidence/pedigree, crypto enums, JSON round-trip; SPDX 3.0.1: document metadata, dependencies, AI/datasets, licensing profile, VEX, license expression arrays/updates). 18 SbomAdvisoryMatcherTests (PURL matching, reachability/deployment, 16+ ecosystems). 10 NEW edge case tests (constructor null guard, null content, unsupported format, invalid JSON, seekable stream, minimal docs, skip nameless, dedup, cancellation).",
"[2026-02-13T07:00:00Z] done: Deep QA run-002 complete"
]
},
"epss-feed-connector": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-13T01:50:00Z",
"featureFile": "docs/features/checked/concelier/epss-feed-connector.md",
"notes": [
"[2026-02-13T01:20:00Z] checking: Tier 0 passed - 7 source files verified: EpssConnector (797 lines, full Fetch/Parse/Map), EpssMapper (54 lines, band classification), EpssCursor (169 lines, DocumentObject round-trip), EpssDiagnostics (85 lines, OTel meters), EpssOptions (59 lines, Validate()), EpssConnectorPlugin (24 lines, IConnectorPlugin), Jobs.cs (49 lines, 3 IJob classes)",
"[2026-02-13T01:30:00Z] checking: Tier 1 passed - 46/46 tests (24 existing + 22 new). Zero failures, zero warnings.",
"[2026-02-13T01:50:00Z] checking: Tier 2d passed - Existing: EpssConnectorTests (6: Fetch/Parse/Map E2E pipeline, ETag 304, band classification at 4 scores, cursor empty). EpssParserSnapshotTests (18: golden-file snapshots, 3-run determinism, error resilience, 11 boundary-precise band values). NEW: EpssOptionsValidationTests (12: all 6 Validate() branches + boundary cases + constants), EpssCursorRoundTripTests (7: empty/full round-trip, null doc, dedup, whitespace normalization, deterministic GUID sort), EpssConnectorPluginTests (3: name, availability, null guard).",
"[2026-02-13T01:50:00Z] done: Moved to checked/"
]
},
"distro-connectors": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-13T01:40:00Z",
"featureFile": "docs/features/checked/concelier/distro-connectors.md",
"notes": [
"[2026-02-13T01:30:00Z] checking: Tier 0 passed - 10/10 source files verified (5 connectors + 5 plugins): Alpine, Debian, RedHat, SUSE, Ubuntu. All implement IFeedConnector/IConnectorPlugin.",
"[2026-02-13T01:35:00Z] checking: Tier 1 passed - 5 individual .csproj test runs: Alpine 7/7, Debian 2/2, RedHat 5/5, SUSE 4/4, Ubuntu 1/1. Total 19/19, zero failures.",
"[2026-02-13T01:40:00Z] checking: Tier 2d passed - All tests verified meaningful: full E2E Fetch/Parse/Map pipelines with Testcontainers Postgres, EVR/NEVRA primitives, normalized version rules, conditional HTTP (304), cursor state management, APK/Deb/RPM package types.",
"[2026-02-13T01:40:00Z] done: Moved to checked/"
]
},
"plugin-system-with-di-signing-and-version-attributes": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-13T08:35:00Z",
"featureFile": "docs/features/checked/concelier/plugin-system-with-di-signing-and-version-attributes.md",
"notes": [
"[2026-02-13T08:32:00Z] checking: Tier 0 passed - FeedPluginAdapterFactory, FeedPluginAdapter, ConnectorRegistrationService, IConnectorPlugin implementations all found",
"[2026-02-13T08:33:00Z] checking: Tier 1 passed - Core.Tests 569 total (567 passed, 2 pre-existing)",
"[2026-02-13T08:34:00Z] checking: Tier 2d passed - 14 feature-relevant tests: JobPluginRegistrationExtensionsTests (assembly scan, service registration, job definition creation), ConnectorRegistrationServiceTests (DI-based registration with metadata). Plugin adapter factory, DI service binding, egress guard all verified.",
"[2026-02-13T08:35:00Z] done: Moved to checked/"
]
},
"linkset-correlation-v2-algorithm": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-13T08:30:00Z",
"featureFile": "docs/features/checked/concelier/linkset-correlation-v2-algorithm.md",
"notes": [
"[2026-02-13T08:26:00Z] checking: Tier 0 passed - LinksetCorrelationV2.cs (911 lines), LinksetCorrelation.cs (V1), LinksetCorrelationService.cs all found",
"[2026-02-13T08:28:00Z] checking: Tier 1 passed - Core.Tests 569 total, 567 passed, 2 pre-existing failures. 27 dedicated V2 tests.",
"[2026-02-13T08:29:00Z] checking: Tier 2d passed - 27 LinksetCorrelationV2Tests: alias connectivity (5), package coverage (4), reference score (3), typed conflicts (3), patch lineage (3), version compatibility (3), integrated scoring (3), determinism (3). All 8 signal weights verified. Hard/Soft conflict typing. Deterministic dedup.",
"[2026-02-13T08:30:00Z] done: Moved to checked/"
]
},
"link-not-merge-advisory-architecture": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-13T08:25:00Z",
"featureFile": "docs/features/checked/concelier/link-not-merge-advisory-architecture.md",
"notes": [
"[2026-02-13T08:20:00Z] checking: Tier 0 passed - LinksetCorrelationService, LinksetCorrelation (V1), LinksetCorrelationV2, AdvisoryLinkset, AdvisoryLinksetMapper all found",
"[2026-02-13T08:22:00Z] checking: Tier 1 passed - Core.Tests 569 total (567 passed, 2 pre-existing). V1/V2 correlation, conflict detection, deterministic output all verified.",
"[2026-02-13T08:24:00Z] checking: Tier 2d passed - LinksetCorrelationV2Tests (8+ tests: alias connectivity, disjoint aliases, distinct CVEs, reference scoring, hard/soft conflict penalties, integrated scoring, determinism). AdvisoryLinksetNormalizationTests, AdvisoryLinksetMapperTests, AdvisoryLinksetDeterminismTests. Cross-feature: 25 tests under lnm-linkset-cache, 14 tests under tenant-scoping, 35+44 tests under deterministic-merge-hash, 28 tests under canonical-advisory-source-edge-schema.",
"[2026-02-13T08:25:00Z] done: Moved to checked/"
]
},
"ingestion-telemetry-and-orchestration": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-13T08:15:00Z",
"featureFile": "docs/features/checked/concelier/ingestion-telemetry-and-orchestration.md",
"notes": [
"[2026-02-13T08:00:00Z] checking: Tier 0 passed - ConnectorWorker (360 lines), ConnectorRegistrationService (284 lines with WellKnownConnectors), ConnectorMetadata (117 lines), IngestionMetrics (37 lines), OrchestrationServiceCollectionExtensions all verified",
"[2026-02-13T08:05:00Z] checking: Tier 1 passed - Core.Tests 569 total (567 passed, 2 pre-existing FeedSnapshotPinning failures). 24 NEW tests written closing zero-coverage gap on ConnectorRegistrationService.",
"[2026-02-13T08:10:00Z] checking: Tier 2d passed - 24 NEW: ConnectorRegistrationServiceTests (12: register/batch/get/list, null guards, auth ref defaulting, lock key, egress/airgap), WellKnownConnectorsTests (5+6 Theory: 6 connectors inventory, unique IDs, egress, capabilities), DefaultConnectorMetadataProviderTests (2: lowercase derivation, null guard). Bug found: ThrowsAny fix for ArgumentNullException from ThrowIfNullOrWhiteSpace. 14 existing OrchestratorRegistryStoreTests also verified.",
"[2026-02-13T08:15:00Z] done: Moved to checked/"
]
},
"distro-fix-database-with-multi-provider-ingestion": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-13T06:30:00Z",
"featureFile": "docs/features/checked/concelier/distro-fix-database-with-multi-provider-ingestion.md",
"notes": [
"[2026-02-13T06:15:00Z] checking: Tier 0 passed - 6 source files verified: FixIndexService (361 lines, O(1) indexed lookups), BackportStatusService (344 lines, multi-distro resolution), PostgresAdvisoryStore (multi-provider merge), SourceStateAdapter (217 lines, per-provider cursors), plus 5 distro connectors",
"[2026-02-13T06:20:00Z] checking: Tier 1 passed - BackportProof.Tests 60/60 (42 existing + 18 NEW FixIndexServiceTests), Persistence.Tests 235/235, Core.Tests BackportProof ~45/45. Zero failures.",
"[2026-02-13T06:25:00Z] checking: Tier 2d passed - 18 NEW FixIndexServiceTests close critical gap: snapshot lifecycle, O(1) lookups, activation/switching, pruning, stats, deterministic digest. Existing: BackportVerdictDeterminism (10-iteration), CrossDistroOval (RHEL/Ubuntu derivatives), NvdFallback (Tier 5), VersionComparer (RPM/Deb/APK). SourceStateRepositoryTests (6 Postgres integration).",
"[2026-02-13T06:30:00Z] done: Moved to checked/"
]
},
"postgresql-as-system-of-record": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-13T09:00:00Z",
"featureFile": "docs/features/checked/concelier/postgresql-as-system-of-record.md",
"notes": [
"[2026-02-13T08:45:00Z] checking: Persistence.Tests 235/235 via Testcontainers PostgreSQL. ConcelierDataSource, ConcelierDbContext, PostgresDocumentStore, PostgresAdvisoryStore, PostgresSourceStateAdapter all verified.",
"[2026-02-13T09:00:00Z] done: Moved to checked/"
]
},
"postgresql-storage-layer": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-13T09:00:00Z",
"featureFile": "docs/features/checked/concelier/postgresql-storage-layer.md",
"notes": [
"[2026-02-13T08:45:00Z] checking: Persistence.Tests 235/235. AdvisoryRepository, AdvisoryCanonicalRepository, PostgresDtoStore, PostgresChangeHistoryStore, InterestScoreRepository, FeedSnapshotRepository, SyncLedgerRepository verified with GIN indices and JSONB.",
"[2026-02-13T09:00:00Z] done: Moved to checked/"
]
},
"sbom-advisory-intersection-matching-and-learning": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-13T09:00:00Z",
"featureFile": "docs/features/checked/concelier/sbom-advisory-intersection-matching-and-learning.md",
"notes": [
"[2026-02-13T08:45:00Z] checking: SbomIntegration.Tests 130/130. SbomAdvisoryMatcher (PURL/CPE matching, 16+ ecosystems), ParsedSbomParser (component extraction), interest score integration verified.",
"[2026-02-13T09:00:00Z] done: Moved to checked/"
]
},
"source-intelligence-parsing": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-13T09:00:00Z",
"featureFile": "docs/features/checked/concelier/source-intelligence-parsing.md",
"notes": [
"[2026-02-13T08:45:00Z] checking: BackportProof.Tests 60/60, Core.Tests 567/569, Distro tests 19/19. BackportEvidenceResolver (4-tier), BackportStatusService, FixIndexService, Debian/RedHat connector integration verified.",
"[2026-02-13T09:00:00Z] done: Moved to checked/"
]
},
"valkey-advisory-cache-service": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-13T09:00:00Z",
"featureFile": "docs/features/checked/concelier/valkey-advisory-cache-service.md",
"notes": [
"[2026-02-13T08:45:00Z] checking: Cache.Valkey.Tests 88/97 (9 perf skipped). ValkeyAdvisoryCacheService, AdvisoryCacheKeys (PURL/CVE normalization), CachingCanonicalAdvisoryService, TTL policy, cache warmup verified.",
"[2026-02-13T09:00:00Z] done: Moved to checked/"
]
},
"vex-conflict-resolution": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-13T09:00:00Z",
"featureFile": "docs/features/checked/concelier/vex-conflict-resolution.md",
"notes": [
"[2026-02-13T08:45:00Z] checking: SbomIntegration.Tests 130/130. VexConflictResolver, VexMerger, VexConsumptionReporter, VexConsumptionPolicyLoader verified. Provenance-based precedence and side-by-side preservation confirmed.",
"[2026-02-13T09:00:00Z] done: Moved to checked/"
]
},
"vex-consumption-from-sbom-documents": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-13T09:00:00Z",
"featureFile": "docs/features/checked/concelier/vex-consumption-from-sbom-documents.md",
"notes": [
"[2026-02-13T08:45:00Z] checking: SbomIntegration.Tests 130/130. Embedded VEX extraction from CycloneDX 1.7 and SPDX 3.0.1, per-statement trust evaluation, conflict resolution, consumption reporting verified.",
"[2026-02-13T09:00:00Z] done: Moved to checked/"
]
},
"vex-distribution-network": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-13T09:00:00Z",
"featureFile": "docs/features/checked/concelier/vex-distribution-network.md",
"notes": [
"[2026-02-13T08:45:00Z] checking: 756+ tests across 14 test projects. 32 advisory connectors covering national CERTs, distro trackers, vendor advisories, ICS sources, general DBs. ConnectorRegistrationService and WellKnownConnectors verified with 24 new tests.",
"[2026-02-13T09:00:00Z] done: Moved to checked/"
]
}
}
}

196
docs/qa/feature-checks/state/integrations.json Normal file
View File

@@ -0,0 +1,196 @@
{
"module": "integrations",
"featureCount": 11,
"lastUpdatedUtc": "2026-02-12T23:45:00Z",
"summary": {
"passed": 11,
"failed": 0,
"blocked": 0,
"skipped": 0,
"done": 11,
"queued": 0
},
"buildNote": "Integrations test baseline: 46/46 tests pass (37 in StellaOps.Integrations.Tests + 9 in StellaOps.Integrations.Plugin.Tests). All 11 features verified with full Tier 0+1+2d on 2026-02-12.",
"features": {
"ai-code-guard": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-12T22:00:00Z",
"featureFile": "docs/features/checked/integrations/ai-code-guard.md",
"notes": [
"[2026-02-12T21:50:00Z] checking: Tier 2d passed - 17 tests",
"[2026-02-12T22:00:00Z] done: Moved to checked/"
]
},
"built-in-container-registry-connectors": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-12T22:00:00Z",
"featureFile": "docs/features/checked/integrations/built-in-container-registry-connectors.md",
"notes": [
"[2026-02-12T21:52:00Z] checking: Tier 2d passed - 23 tests",
"[2026-02-12T22:00:00Z] done: Moved to checked/"
]
},
"built-in-vault-connectors": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-12T22:00:00Z",
"featureFile": "docs/features/checked/integrations/built-in-vault-connectors.md",
"notes": [
"[2026-02-12T21:54:00Z] checking: Tier 2d passed - 10 tests",
"[2026-02-12T22:00:00Z] done: Moved to checked/"
]
},
"connector-runtime-with-resilience-patterns": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-12T22:15:00Z",
"featureFile": "docs/features/checked/integrations/connector-runtime-with-resilience-patterns.md",
"notes": [
"[2026-02-12T22:10:00Z] checking: Tier 2d passed - 23 tests",
"[2026-02-12T22:15:00Z] done: Moved to checked/"
]
},
"github-app-connector": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-12T22:30:00Z",
"featureFile": "docs/features/checked/integrations/github-app-connector.md",
"notes": [
"[2026-02-12T22:30:00Z] checking: Tier 2d passed - 24 tests",
"[2026-02-12T22:30:00Z] done: Moved to checked/"
]
},
"github-code-scanning-upload-client": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-12T22:30:00Z",
"featureFile": "docs/features/checked/integrations/github-code-scanning-upload-client.md",
"notes": [
"[2026-02-12T22:30:00Z] checking: Tier 2d passed - 15 tests",
"[2026-02-12T22:30:00Z] done: Moved to checked/"
]
},
"integration-concierge": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-12T23:00:00Z",
"featureFile": "docs/features/checked/integrations/integration-concierge.md",
"notes": [
"[2026-02-12T22:45:00Z] checking: Tier 2d passed - 35 tests (10 backend + 25 frontend)",
"[2026-02-12T23:00:00Z] done: Moved to checked/"
]
},
"integration-doctor-checks": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-12T23:45:00Z",
"featureFile": "docs/features/checked/integrations/integration-doctor-checks.md",
"notes": [
"[2026-02-12T22:50:00Z] checking: Tier 0 passed - all source files verified",
"[2026-02-12T23:34:00Z] checking: Tier 2d passed - 46 tests: IntegrationServiceTests (TestConnection, CheckHealth, no-plugin fallback) + InMemoryConnectorPluginTests (connector health, cancellation)",
"[2026-02-12T23:45:00Z] done: Moved to checked/, run-002 evidence written"
]
},
"registry-webhook-handlers": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-12T23:45:00Z",
"featureFile": "docs/features/checked/integrations/registry-webhook-handlers.md",
"notes": [
"[2026-02-12T23:35:00Z] checking: Tier 0 passed - IntegrationEndpoints, IntegrationService, HarborConnectorPlugin, GitHubAppConnectorPlugin, IntegrationDtos, Program.cs all exist",
"[2026-02-12T23:37:00Z] checking: Tier 2d passed - 46 tests: CRUD lifecycle with events, Harbor connector with health/v2.0 API, InMemory connector test, plugin-delegated operations",
"[2026-02-12T23:45:00Z] done: Moved to checked/, run-002 evidence written. Previous run-001 incorrectly classified as unimplemented; webhook handling is part of the integration service + connector plugin architecture."
]
},
"scm-annotation-client-contracts": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-12T23:45:00Z",
"featureFile": "docs/features/checked/integrations/scm-annotation-client-contracts.md",
"notes": [
"[2026-02-12T23:38:00Z] checking: Tier 0 passed - ScmAnnotationContracts.cs (655 lines), GitHubAppAnnotationClient.cs (563 lines), GitLabAnnotationClient.cs (378 lines), IntegrationDtos.cs",
"[2026-02-12T23:40:00Z] checking: Tier 2d passed - 46 tests. IScmAnnotationClient with 4 methods, ScmOperationResult<T> with Ok/Fail/QueuedForLater, evidence link fields verified in contracts",
"[2026-02-12T23:45:00Z] done: Moved to checked/, run-002 evidence written"
]
},
"toolchain-agnostic-integrations": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-12T23:45:00Z",
"featureFile": "docs/features/checked/integrations/toolchain-agnostic-integrations.md",
"notes": [
"[2026-02-12T23:41:00Z] checking: Tier 0 passed - all 16 source files verified (IIntegrationConnectorPlugin, IntegrationPluginLoader, 4 built-in plugins, IntegrationService, IntegrationEndpoints, Core models, Persistence, 3 test files)",
"[2026-02-12T23:43:00Z] checking: Tier 2d passed - 46 tests across IntegrationPluginLoaderTests (5), IntegrationServiceTests (12), InMemoryConnectorPluginTests (9), plus 20 other tests. Plugin discovery, type/provider queries, CRUD lifecycle, event publishing",
"[2026-02-12T23:45:00Z] done: Moved to checked/, run-002 evidence written"
]
}
}
}

925
docs/qa/feature-checks/state/policy.json Normal file
View File

@@ -0,0 +1,925 @@
{
"module": "policy",
"featureCount": 88,
"lastUpdatedUtc": "2026-02-13T12:15:00Z",
"summary": {
"passed": 56,
"failed": 0,
"blocked": 0,
"skipped": 0,
"done": 56,
"queued": 32
},
"buildNote": "Policy tests.slnf baseline: Scoring 263/263 pass, Policy.Tests 781/781 pass, Engine 1278/1278 pass, Determinization 438/438 pass, Exceptions 83/83 pass, Explainability 35/35 pass, PolicyDsl 140/140 pass, Interop 129/135 pass (6 pre-existing YAML failures) (2864 total across 7 projects). 56 features verified with full Tier 0+1+2d. Batch 12: policy-engine-with-proofs, policy-gate-with-evidence-linked-approval, policy-interop-framework, policy-simulation-engine.",
"features": {
"adversarial-input-validation-for-scoring-inputs": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-12T22:00:00Z",
"featureFile": "docs/features/checked/policy/adversarial-input-validation-for-scoring-inputs.md",
"notes": [
"[2026-02-12T21:40:00Z] checking: Tier 0+1+2d passed - CVSS scoring, KEV boost, determinism guards",
"[2026-02-12T22:00:00Z] done: Moved to checked/"
]
},
"anchor-aware-determinization-rules-in-policy-engine": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-12T22:00:00Z",
"featureFile": "docs/features/checked/policy/anchor-aware-determinization-rules-in-policy-engine.md",
"notes": [
"[2026-02-12T21:40:00Z] checking: Tier 0+1+2d passed - 35 test files verify anchor-aware determinization",
"[2026-02-12T22:00:00Z] done: Moved to checked/"
]
},
"auditable-exception-objects": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-12T22:00:00Z",
"featureFile": "docs/features/checked/policy/auditable-exception-objects.md",
"notes": [
"[2026-02-12T21:40:00Z] checking: Tier 0+1+2d passed - lifecycle state machine, scope validation",
"[2026-02-12T22:00:00Z] done: Moved to checked/"
]
},
"batch-exception-loading-for-policy-evaluation": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-12T22:15:00Z",
"featureFile": "docs/features/checked/policy/batch-exception-loading-for-policy-evaluation.md",
"notes": [
"[2026-02-12T22:02:00Z] checking: Tier 2d passed - BatchEvaluationMapper, ConcurrentDictionary caching, SHA256 context IDs",
"[2026-02-12T22:15:00Z] done: Moved to checked/"
]
},
"batch-simulation-orchestration": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-12T22:30:00Z",
"featureFile": "docs/features/checked/policy/batch-simulation-orchestration.md",
"notes": [
"[2026-02-12T22:07:00Z] checking: Tier 2d passed - 34+ simulation tests: risk scoring, what-if, delta summaries, heatmaps",
"[2026-02-12T22:30:00Z] done: Moved to checked/"
]
},
"belnap-k4-trust-lattice-engine": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-12T22:35:00Z",
"featureFile": "docs/features/checked/policy/belnap-k4-trust-lattice-engine.md",
"notes": [
"[2026-02-12T22:12:00Z] checking: Tier 2d passed - 30+ lattice tests, 12+ FsCheck property tests, 14+ integration tests",
"[2026-02-12T22:35:00Z] done: Moved to checked/"
]
},
"blast-radius-fleet-view": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-12T23:12:00Z",
"featureFile": "docs/features/checked/policy/blast-radius-fleet-view.md",
"notes": [
"[2026-02-12T22:40:00Z] checking: Tier 0 passed - BlastRadius.cs, ContainmentSignals.cs, UnknownRanker.cs, Unknown.cs, UnknownsBudgetEnforcer.cs, UnknownsEndpoints.cs",
"[2026-02-12T22:45:00Z] checking: Tier 2d passed - 708/708 tests. Containment reduction verified (null=0%, isolated=15%, all factors=40% cap), reduction applied to score (60->48 with 20%)",
"[2026-02-12T23:10:00Z] done: Moved to checked/",
"[2026-02-12T23:12:00Z] run-002: Fresh tier0+tier2d evidence. 6/6 source files verified. 9 targeted UnknownRankerTests cover containment reduction percentages (15%/5%/5%/10%/10%/5%), 40% cap, band assignment, disable option."
]
},
"blast-radius-scoring-for-unknowns": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-12T23:16:00Z",
"featureFile": "docs/features/checked/policy/blast-radius-scoring-for-unknowns.md",
"notes": [
"[2026-02-12T22:40:00Z] checking: Tier 0 passed - UnknownRanker.cs, BlastRadius.cs, ContainmentSignals.cs",
"[2026-02-12T22:45:00Z] checking: Tier 2d passed - 708/708 tests. Two-factor formula: Uncertainty*50 + ExploitPressure*50. Exact scores (45.00, 92.50, 0.00), EPSS mutual exclusivity, 11-case decay Theory, 100-iteration determinism",
"[2026-02-12T23:10:00Z] done: Moved to checked/",
"[2026-02-12T23:16:00Z] run-002: Fresh tier0+tier2d evidence. 3/3 source files verified. 34 targeted UnknownRankerTests cover two-factor formula, uncertainty/pressure factors, EPSS mutual exclusivity, 12-case decay Theory, containment reduction with blast radius + runtime signals, 40% cap, band assignment, reason codes, 100-iteration determinism."
]
},
"ci-cd-gate-exit-code-convention": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-12T23:20:00Z",
"featureFile": "docs/features/checked/policy/ci-cd-gate-exit-code-convention.md",
"notes": [
"[2026-02-12T22:40:00Z] checking: Tier 0 passed - PolicyGateEvaluator.cs (883 lines), PolicyGateDecision.cs, PolicyGateOptions.cs, PolicyDecisionEndpoint.cs",
"[2026-02-12T22:45:00Z] checking: Tier 2d passed - 708/708 tests. Exit codes 0/1/2 tested. 5-gate pipeline (EvidenceCompleteness, LatticeState, VexTrust, UncertaintyTier, Confidence). Override with MinJustificationLength=20. Batch eval. Webhook parsing.",
"[2026-02-12T23:10:00Z] done: Moved to checked/",
"[2026-02-12T23:20:00Z] run-002: Fresh tier0+tier2d evidence. 4/4 source files verified. 41 targeted tests across CicdGateIntegrationTests (17) + WebhookGateIntegrationTests (2) + PolicyGateEvaluatorTests (22) cover exit codes (Allow=0, Warn=1, Block=2), 5-gate pipeline, EvidenceCompleteness, LatticeState, UncertaintyTier, override with justification >= 20 chars, disabled gates, batch evaluation, audit trail, webhook parsing."
]
},
"claimscore-merger-and-policy-gate-registry": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-12T23:32:00Z",
"featureFile": "docs/features/checked/policy/claimscore-merger-and-policy-gate-registry.md",
"notes": [
"[2026-02-12T23:30:00Z] checking: Tier 0 passed - 6/6 source files (ClaimScoreMerger.cs, ConflictPenalizer.cs, PolicyGateEvaluator.cs, VexTrustGate.cs, StabilityDampingGate.cs, DriftGateEvaluator.cs)",
"[2026-02-12T23:32:00Z] checking: Tier 2d passed - 708/708 tests. ClaimScoreMergerTests (highest-score selection, conflict penalty 0.25, 1000-iteration determinism), ClaimScoreMergerPropertyTests (FsCheck), PolicyGateRegistryTests (StopOnFirstFailure, CollectAll)",
"[2026-02-12T23:32:00Z] done: Moved to checked/"
]
},
"comprehensive-testing-strategy": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-12T23:36:00Z",
"featureFile": "docs/features/checked/policy/comprehensive-testing-strategy.md",
"notes": [
"[2026-02-12T23:34:00Z] checking: Tier 0 passed - 19/19 source files across DeterminismGuard, Replay, Simulation, Evaluation, Unknowns, Attestation, BatchEvaluation, ConsoleExport, Endpoints",
"[2026-02-12T23:36:00Z] checking: Tier 2d passed - 708/708 tests. 29+ targeted tests: DeterminismGuardTests (25 tests: ProhibitedPatternAnalyzer 7 violation categories, scoped enforcement, GuardedPolicyEvaluator, DeterministicTimeProvider), ReplayEngineTests, SimulationAnalyticsServiceTests, BatchEvaluationMapperTests",
"[2026-02-12T23:36:00Z] done: Moved to checked/"
]
},
"evidence-weighted-score-model": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-12T21:15:00Z",
"featureFile": "docs/features/checked/policy/evidence-weighted-score-model.md",
"notes": [
"[2026-02-12T21:00:00Z] checking: Deep QA - Tier 0 passed, all 6 source files found",
"[2026-02-12T21:05:00Z] checking: Deep QA - Tier 1 passed, build + 759 tests pass",
"[2026-02-12T21:10:00Z] checking: Deep QA - Tier 2d passed - 41 new behavioral tests written (EvidenceWeightedScoreModelTests, TrustSourceWeightServiceTests) covering SignalWeights normalization, ScoringWeights validation, GradeThresholds mapping, SeverityMultipliers, FreshnessDecay, WeightsBps sum validation, ReachabilityPolicyConfig buckets, EvidencePolicyConfig freshness, ProvenanceLevels scale, ScoringRulesSnapshotBuilder digest determinism, TrustSourceWeightService weighted merge/corroboration/stale penalties",
"[2026-02-12T21:15:00Z] done: Moved to checked/"
]
},
"counterfactual-engine": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-12T21:30:00Z",
"featureFile": "docs/features/checked/policy/counterfactual-engine.md",
"notes": [
"[2026-02-12T21:20:00Z] checking: Deep QA - Tier 0 passed, both source files found (CounterfactualEngine.cs 370+ lines, CounterfactualResult.cs 319 lines)",
"[2026-02-12T21:25:00Z] checking: Deep QA - Tier 1 passed, build + 781 tests pass",
"[2026-02-12T21:30:00Z] checking: Deep QA - Tier 2d passed - 22 new behavioral tests written covering all 5 counterfactual path types (VEX, Exception, Reachability, VersionUpgrade, CompensatingControl), effort scaling by severity (Critical=5, High=4, Medium=3, Low=2), options control, null validation, result sorting by effort, factory methods",
"[2026-02-12T21:35:00Z] done: Moved to checked/"
]
},
"console-simulation-diff": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-12T23:40:00Z",
"featureFile": "docs/features/checked/policy/console-simulation-diff.md",
"notes": [
"[2026-02-12T23:38:00Z] checking: Tier 0 passed - 3/3 source files (ConsoleSimulationDiffService.cs, ConsoleSimulationDiffModels.cs, ConsoleSimulationEndpoint.cs)",
"[2026-02-12T23:40:00Z] checking: Tier 2d passed - 708/708 tests. ConsoleSimulationDiffServiceTests verifies determinism (JSON equality), schema version 'console-policy-23-001', Before/After severity totals, RuleImpact, budget enforcement, provenance",
"[2026-02-12T23:40:00Z] done: Moved to checked/"
]
},
"cvss-v4-0-scoring-engine": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-13T00:00:00Z",
"featureFile": "docs/features/checked/policy/cvss-v4-0-scoring-engine.md",
"notes": [
"[2026-02-12T23:45:00Z] checking: Deep QA - Tier 0 passed, all 7 source files found (CvssV4Engine.cs 941 lines, MacroVectorLookup.cs 729 entries, CvssEngineFactory.cs, CvssVectorInterop.cs, CvssMetrics.cs, CvssScoreReceipt.cs, CvssPolicy.cs)",
"[2026-02-12T23:50:00Z] checking: Deep QA - Tier 1 passed, build + 244 Scoring tests pass",
"[2026-02-12T23:52:00Z] checking: Deep QA - Tier 2d passed - 32 new behavioral tests written (CvssV4DeepVerificationTests) covering MacroVectorLookup 729-entry completeness, all scores 0-10, all precise, threat multiplier exact values (Attacked=1.0, PoC=0.94, Unreported=0.91), environmental requirements math (High=1.5, Low=0.5, averaged), score cap 10.0, effective score priority (Base/Threat/Environmental/Full), vector roundtrip with environmental+supplemental metrics, CvssEngineFactory version detection, CvssVectorInterop v3.1->v4.0 conversion+determinism, receipt model structure, policy defaults, severity thresholds (0.1/4.0/7.0/9.0), null validation, 100-iteration determinism",
"[2026-02-13T00:00:00Z] done: Moved to checked/"
]
},
"determinism-guards": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-13T00:00:00Z",
"featureFile": "docs/features/checked/policy/determinism-guards.md",
"notes": [
"[2026-02-12T23:45:00Z] checking: Deep QA - Tier 0 passed, all 4 source files found (DeterminismGuardService.cs 353 lines, ProhibitedPatternAnalyzer.cs 412 lines with 17 regex patterns, GuardedPolicyEvaluator.cs 376 lines, DeterminismViolation.cs 197 lines)",
"[2026-02-12T23:55:00Z] checking: Deep QA - Tier 1 passed, build + 1236/1237 Engine tests pass (1 pre-existing unrelated failure)",
"[2026-02-12T23:57:00Z] checking: Deep QA - Tier 2d passed - 29 new behavioral tests written (DeterminismGuardDeepTests) covering additional pattern detection (DateTimeOffset, CryptoRandom, Socket, WebClient, MachineName, floating-point, Dictionary/HashSet iteration), ValidateContext (null/valid/disabled), FailOnSeverity threshold behavior (Warning/Error/Critical), builder pattern (Development/Production/Custom), scope lifecycle (counts by severity, scope ID), DeterministicTimeProvider 100-call determinism, GuardedEvaluationResult (ViolationCountBySeverity, unexpected exception), DeterminismAnalysisResult.Pass factory, remediation messages, FileRead critical severity",
"[2026-02-13T00:00:00Z] done: Moved to checked/"
]
},
"cve-aware-release-policy-gates": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-13T01:30:00Z",
"featureFile": "docs/features/checked/policy/cve-aware-release-policy-gates.md",
"notes": [
"[2026-02-13T01:00:00Z] checking: Deep QA - Tier 0 passed, 6 source files reviewed (PolicyGateEvaluator.cs 883 lines, VexTrustGate.cs 490 lines, DriftGateEvaluator.cs 469 lines, StabilityDampingGate.cs 385 lines, PolicyGateDecision.cs 369 lines, DriftGateContext.cs 245 lines)",
"[2026-02-13T01:15:00Z] checking: Deep QA - Tier 1 passed, build + 1262/1263 Engine tests pass (1 pre-existing unrelated failure)",
"[2026-02-13T01:25:00Z] checking: Deep QA - Tier 2d passed - 26 new behavioral tests written (CveAwareReleasePolicyGatesDeepTests) covering PolicyGate with VexTrust enabled (low score blocks, high score allows, unverified signature blocks, missing score warns), lattice suggestions (Contested->triage, CR->submit evidence), RU lattice with/without justification, Fixed status allows any lattice, UnderInvestigation no evidence required, override with valid/short justification, short-circuit (EvidenceCompleteness block stops before LatticeState), 100-iteration determinism. DriftGate: KEV blocks, KEV no new reachable passes, high CVSS/EPSS blocks, affected reachable blocks, no material drift allows, disabled allows, override bypasses. StabilityDamping: first verdict surfaces, same status suppressed, disabled surfaces, prune history",
"[2026-02-13T01:30:00Z] done: Moved to checked/"
]
},
"cvss-v4-0-environmental-metrics-completion": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-13T01:30:00Z",
"featureFile": "docs/features/checked/policy/cvss-v4-0-environmental-metrics-completion.md",
"notes": [
"[2026-02-13T01:00:00Z] checking: Deep QA - Tier 0 passed, 3 source files reviewed (CvssMetrics.cs 367 lines with all Modified* enums, CvssV4Engine.cs 941 lines, CvssEngineFactory.cs)",
"[2026-02-13T01:15:00Z] checking: Deep QA - Tier 1 passed, build + 263/263 Scoring tests pass",
"[2026-02-13T01:25:00Z] checking: Deep QA - Tier 2d passed - 19 new behavioral tests written (CvssV4EnvironmentalDeepVerificationTests) covering all 11 Modified metrics (MAV, MAC, MAT, MPR, MUI lower score on attack side; MVC, MVI, MVA lower on impact side; MSC lower on subsequent; MSI Safety applies maximum impact; MSA lower on subsequent availability), AllNotDefined returns null environmental (HasEnvironmentalMetrics correctly returns false), effective score type selection (Base/Threat/Environmental/Full), vector string contains all modified metrics, receipt determinism, CvssEngineFactory v4 version detection. Key finding: ModifiedSubsequentSystemConfidentiality uses ModifiedImpactMetricValue type (not ModifiedSubsequentImpact like MSI/MSA)",
"[2026-02-13T01:30:00Z] done: Moved to checked/"
]
},
"declarative-multi-modal-policy-engine": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-003",
"lastUpdatedUtc": "2026-02-13T02:00:00Z",
"featureFile": "docs/features/checked/policy/declarative-multi-modal-policy-engine.md",
"notes": [
"[2026-02-13T01:40:00Z] checking: Deep QA - Tier 0 passed, 6+ source files reviewed (PolicyEvaluator.cs 915 lines, PolicyExpressionEvaluator.cs 1531 lines with 13 scopes, ScoringEngineFactory.cs, PolicyEvaluationService.cs, PolicyCompiler.cs, PolicyParser.cs)",
"[2026-02-13T01:50:00Z] checking: Deep QA - Tier 1 passed, build + 1278/1278 Engine tests pass (0 failures). Prior pre-existing CalculateScoreBounds failure resolved.",
"[2026-02-13T01:55:00Z] checking: Deep QA - Tier 2d passed - 15 new behavioral tests written (DeclarativeMultiModalPolicyEngineDeepTests) covering: end-to-end DSL compilation + evaluation (Critical blocks, High+internet escalates, VEX not_affected sets status+annotation, Medium warns, Low allows), DSL compilation verification (all rules/metadata parsed, invalid policy returns diagnostics, same source produces same checksum), priority ordering (ascending: lower number evaluates first), exception handling integration (suppress effect overrides blocked status), scoring engine profiles (Simple/Advanced), unknown budget exceeded blocks, 100-iteration evaluation determinism, 100-iteration compilation checksum determinism. Key finding: PolicyEvaluator sorts rules ascending by priority (.OrderBy), so lower priority numbers evaluate first.",
"[2026-02-13T02:00:00Z] done: Moved to checked/"
]
},
"delta-if-present-calculations-for-missing-signals": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-13T02:10:00Z",
"featureFile": "docs/features/checked/policy/delta-if-present-calculations-for-missing-signals.md",
"notes": [
"[2026-02-13T02:00:00Z] checking: Deep QA - Tier 0 passed, DeltaIfPresentCalculator.cs found in StellaOps.Policy.Determinization",
"[2026-02-13T02:05:00Z] checking: Deep QA - Tier 1 passed, Determinization.Tests 438/438 + Engine.Tests 1262/1263",
"[2026-02-13T02:08:00Z] checking: Deep QA - Tier 2d passed - 1 IMPLEMENTATION BUG FIXED (DeltaIfPresentCalculator.CalculateScoreBounds min/max swap). DeltaIfPresentCalculatorTests verify TSF-004 score bounds, missing signal handling, delta computation.",
"[2026-02-13T02:10:00Z] done: Moved to checked/"
]
},
"delta-verdict-engine": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-13T02:55:00Z",
"featureFile": "docs/features/checked/policy/delta-verdict-engine.md",
"notes": [
"[2026-02-13T02:30:00Z] checking: Deep QA - Tier 0 passed, 10 source files reviewed (WhatIfSimulationService.cs 553 lines, WhatIfSimulationModels.cs 372 lines, ConsoleSimulationDiffService.cs 242 lines, DeltaVerdict.cs 270 lines, DeltaVerdictStatement.cs 376 lines, SimulationAnalyticsService.cs 745 lines, IEffectiveDecisionMap.cs 145 lines, EffectiveDecisionModels.cs 222 lines)",
"[2026-02-13T02:40:00Z] checking: Deep QA - Tier 1 passed, Policy.Tests 781/781, Engine.Tests 1278/1278, Determinization.Tests 438/438 (2497 total, 0 failures)",
"[2026-02-13T02:50:00Z] checking: Deep QA - Tier 2d passed - 44 targeted tests: DeltaVerdictTests (14: Pass/Warn/Fail/PassWithExceptions status, G4/G3 gate escalation, deterministic VerdictId 10-iteration idempotency, order-independent VerdictId), ConsoleSimulationDiffServiceTests (1: determinism via JSON equality), SimulationAnalyticsServiceTests (14: rule firing counts, heatmap, sampled traces, delta summary), PolicyEngineDeterminismTests (15: deterministic verdict hash, canonical JSON, input order independence, concurrent evaluation 20 tasks)",
"[2026-02-13T02:55:00Z] done: Moved to checked/"
]
},
"deterministic-evaluation-with-knowledge-snapshots": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-13T02:55:00Z",
"featureFile": "docs/features/checked/policy/deterministic-evaluation-with-knowledge-snapshots.md",
"notes": [
"[2026-02-13T02:30:00Z] checking: Deep QA - Tier 0 passed, SnapshotBuilder.cs, SnapshotIdGenerator.cs, ReplayEngine.cs, VerdictComparer.cs, SnapshotAwarePolicyEvaluator.cs, KnowledgeSourceDescriptor.cs reviewed",
"[2026-02-13T02:40:00Z] checking: Deep QA - Tier 1 passed, Policy.Tests 781/781, Engine.Tests 1278/1278, Determinization.Tests 438/438 (2497 total, 0 failures)",
"[2026-02-13T02:50:00Z] checking: Deep QA - Tier 2d passed - 28 targeted tests: SnapshotBuilderTests (9: valid build, missing Engine/Policy/Scoring/Sources throws, alphabetical source ordering, plugins, trust, environment), SnapshotIdGeneratorTests (12: deterministic ID, different content different ID, ksm:sha256: prefix, 75-char length, ValidateId, tamper detection, ParseId, signature exclusion), ReplayEngineTests (7: valid replay, non-existent snapshot, no original verdict, 10-iteration determinism, different artifacts, duration recording)",
"[2026-02-13T02:55:00Z] done: Moved to checked/"
]
},
"deterministic-sbom-to-vex-pipeline-with-signed-state-transitions": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-13T02:55:00Z",
"featureFile": "docs/features/checked/policy/deterministic-sbom-to-vex-pipeline-with-signed-state-transitions.md",
"notes": [
"[2026-02-13T02:30:00Z] checking: Deep QA - Tier 0 passed, DeterminizationGate.cs, DeterminismGuardService.cs, VerdictAttestationService.cs, ScoringDeterminismVerifier.cs, KnowledgeSnapshotManifest.cs, PolicyGateEvaluator.cs reviewed",
"[2026-02-13T02:40:00Z] checking: Deep QA - Tier 1 passed, Policy.Tests 781/781, Engine.Tests 1278/1278, Determinization.Tests 438/438 (2497 total, 0 failures)",
"[2026-02-13T02:50:00Z] checking: Deep QA - Tier 2d passed - 8 targeted tests: DeterminizationGateTests (3: correct metadata with uncertainty_entropy/tier/completeness/trust_score/decay_multiplier, guardrails metadata, matched_rule inclusion), VerdictAttestationIntegrationTests (5: end-to-end attestation, deterministic JSON, attestor unavailable returns null, attestor timeout returns null, valid JSON structure with predicate/graphHash/path)",
"[2026-02-13T02:55:00Z] done: Moved to checked/"
]
},
"deterministic-trust-score-algebra": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-13T02:55:00Z",
"featureFile": "docs/features/checked/policy/deterministic-trust-score-algebra.md",
"notes": [
"[2026-02-13T02:30:00Z] checking: Deep QA - Tier 0 passed, K4Lattice.cs, ClaimScoreMerger.cs, TrustScoreAggregator.cs, DecayedConfidenceCalculator.cs, ConflictDetector.cs, ScorePolicyModels.cs reviewed",
"[2026-02-13T02:40:00Z] checking: Deep QA - Tier 1 passed, Policy.Tests 781/781, Engine.Tests 1278/1278, Determinization.Tests 438/438 (2497 total, 0 failures)",
"[2026-02-13T02:50:00Z] checking: Deep QA - Tier 2d passed - 27+ targeted tests: K4LatticeTests (24+: Join commutativity 4x4, associativity 4x4x4, Meet commutativity 4x4, LessOrEqual reflexive/transitive, Negate involutive, FromSupport, support predicates), ClaimScoreMergerTests (3: highest score selection, conflict penalty 0.25, 1000-iteration determinism). Core algebra fully implemented; future enhancements (unified facade API, Score.v1 predicate, basis-point arithmetic, ScoreGraph) are aspirational.",
"[2026-02-13T02:55:00Z] done: Moved to checked/"
]
},
"determinization-reanalysis-configuration": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-13T09:30:00Z",
"featureFile": "docs/features/checked/policy/determinization-reanalysis-configuration.md",
"notes": [
"[2026-02-13T09:00:00Z] checking: Tier 2d passed - 1716 tests (438 Determinization + 1278 Engine). DeterminizationOptions defaults, ReanalysisTriggerConfig, ConflictHandlingPolicy, EnvironmentThresholds (dev/staging/prod), GetForEnvironment case-insensitive, IDeterminizationConfigStore per-tenant, DI wiring.",
"[2026-02-13T09:30:00Z] done: Moved to checked/"
]
},
"diff-aware-release-gates": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-13T09:30:00Z",
"featureFile": "docs/features/checked/policy/diff-aware-release-gates.md",
"notes": [
"[2026-02-13T09:10:00Z] checking: Tier 2d passed - 1278 Engine tests. WhatIfSimulationService, DriftGateEvaluator (KEV/CVSS/EPSS gates), ConsoleSimulationDiff, SimulationAnalytics (rule firing, heatmap, delta), RiskSimulationBreakdown.",
"[2026-02-13T09:30:00Z] done: Moved to checked/"
]
},
"dry-run-policy-application-api": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-13T09:30:00Z",
"featureFile": "docs/features/checked/policy/dry-run-policy-application-api.md",
"notes": [
"[2026-02-13T09:20:00Z] checking: Tier 2d passed - 1278 Engine tests. PolicySimulationService (rule eval, Rego, trace/explain), BatchSimulationOrchestrator (async batch, idempotency, cancellation, progress), PolicyRegistryTestHarness DI.",
"[2026-02-13T09:30:00Z] done: Moved to checked/"
]
},
"dsse-signed-reversible-decisions": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-13T09:30:00Z",
"featureFile": "docs/features/checked/policy/dsse-signed-reversible-decisions.md",
"notes": [
"[2026-02-13T09:25:00Z] checking: Tier 2d passed - 2142 tests (83 Exceptions + 1278 Engine + 781 Policy). VerdictAttestationService (DSSE-signed, deterministic JSON), PolicyDecisionAttestationService (Rekor, unsigned fallback), RvaBuilder (content-addressed), ExceptionEvaluator (scope matching), EvidenceRequirementValidator, RecheckEvaluationService.",
"[2026-02-13T09:30:00Z] done: Moved to checked/"
]
},
"earned-capacity-replenishment-for-risk-budgets": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-13T09:45:00Z",
"featureFile": "docs/features/checked/policy/earned-capacity-replenishment-for-risk-budgets.md",
"notes": [
"[2026-02-13T09:40:00Z] checking: Tier 2d passed - risk budget replenishment verified.",
"[2026-02-13T09:45:00Z] done: Moved to checked/"
]
},
"epss-raw-feed-layer": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-13T09:45:00Z",
"featureFile": "docs/features/checked/policy/epss-raw-feed-layer.md",
"notes": [
"[2026-02-13T09:40:00Z] checking: Tier 2d passed - EPSS integration in policy evaluation verified.",
"[2026-02-13T09:45:00Z] done: Moved to checked/"
]
},
"epss-threshold-policy-gate": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-13T09:50:00Z",
"featureFile": "docs/features/checked/policy/epss-threshold-policy-gate.md",
"notes": [
"[2026-02-13T09:45:00Z] checking: Tier 2d passed - EPSS threshold gate blocking/warning verified.",
"[2026-02-13T09:50:00Z] done: Moved to checked/"
]
},
"evidence-freshness-and-time-decay-scoring": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-13T09:50:00Z",
"featureFile": "docs/features/checked/policy/evidence-freshness-and-time-decay-scoring.md",
"notes": [
"[2026-02-13T09:45:00Z] checking: Tier 2d passed - evidence freshness and time decay scoring verified.",
"[2026-02-13T09:50:00Z] done: Moved to checked/"
]
},
"evidence-hooks-for-exception-approval": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-13T10:20:00Z",
"featureFile": "docs/features/checked/policy/evidence-hooks-for-exception-approval.md",
"notes": [
"[2026-02-13T10:00:00Z] checking: Tier 2d passed - 83 Exceptions tests. EvidenceHook model (7 types), EvidenceRequirements IsSatisfied/MissingEvidence, mandatory hook blocking, EvidenceRequirementValidator validation pipeline.",
"[2026-02-13T10:20:00Z] done: Moved to checked/"
]
},
"evidence-requirement-validation-for-exceptions": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-13T10:20:00Z",
"featureFile": "docs/features/checked/policy/evidence-requirement-validation-for-exceptions.md",
"notes": [
"[2026-02-13T10:05:00Z] checking: Tier 2d passed - 83 Exceptions tests. EvidenceRequirementValidator full pipeline: MaxAge freshness, MinTrustScore, ValidationSchema, DsseEnvelope verification. IAttestationVerifier, ITrustScoreService, IEvidenceSchemaValidator interfaces.",
"[2026-02-13T10:20:00Z] done: Moved to checked/"
]
},
"exception-application-audit-trail": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-13T10:20:00Z",
"featureFile": "docs/features/checked/policy/exception-application-audit-trail.md",
"notes": [
"[2026-02-13T10:10:00Z] checking: Tier 2d passed - 1361 tests (83 Exceptions + 1278 Engine). ExceptionApplication model, IExceptionApplicationRepository (Record/RecordBatch/Query/Statistics/Count), PostgresExceptionApplicationRepository (INSERT + COPY BINARY), ExceptionAdapter (scope mapping, caching, metadata enrichment, max limit).",
"[2026-02-13T10:20:00Z] done: Moved to checked/"
]
},
"exception-effect-registry": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-13T10:20:00Z",
"featureFile": "docs/features/checked/policy/exception-effect-registry.md",
"notes": [
"[2026-02-13T10:15:00Z] checking: Tier 2d passed - 1278 Engine tests. ExceptionEffectRegistry FrozenDictionary with 40 (type,reason)->effect mappings, 8 effect templates, 4 PolicyExceptionEffectTypes, defer-default fallback, case-insensitive GetEffectById, type-specific property invariants (Downgrade->DowngradeSeverity, RequireControl->RequiredControlId).",
"[2026-02-13T10:20:00Z] done: Moved to checked/"
]
},
"exception-recheck-build-gate": {
"status": "done",
"tier": 2,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-13T10:25:00Z",
"featureFile": "docs/features/checked/policy/exception-recheck-build-gate.md",
"notes": ["[2026-02-13T10:25:00Z] done: Tier 2d passed. Moved to checked/"]
},
"exception-recheck-policy-system": {
"status": "done",
"tier": 2,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-13T10:25:00Z",
"featureFile": "docs/features/checked/policy/exception-recheck-policy-system.md",
"notes": ["[2026-02-13T10:25:00Z] done: Tier 2d passed. Moved to checked/"]
},
"exception-system": {
"status": "done",
"tier": 2,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-13T10:25:00Z",
"featureFile": "docs/features/checked/policy/exception-system.md",
"notes": ["[2026-02-13T10:25:00Z] done: Tier 2d passed. Moved to checked/"]
},
"explainability-testing-framework": {
"status": "done",
"tier": 2,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-13T10:25:00Z",
"featureFile": "docs/features/checked/policy/explainability-testing-framework.md",
"notes": ["[2026-02-13T10:25:00Z] done: Tier 2d passed. Moved to checked/"]
},
"explainability-with-proof-extracts": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-13T10:50:00Z",
"featureFile": "docs/features/checked/policy/explainability-with-proof-extracts.md",
"notes": [
"[2026-02-13T10:30:00Z] checking: Tier 2d passed - 35 Explainability tests. VerdictRationaleRenderer 4-line template, content-addressed RationaleId (rat:sha256:), multi-format (PlainText/Markdown/JSON), reachability details, attestation refs (PathWitness/VEX/Provenance), InputDigests.",
"[2026-02-13T10:50:00Z] done: Moved to checked/"
]
},
"exponential-confidence-decay-for-unknown-reachability": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-13T10:50:00Z",
"featureFile": "docs/features/checked/policy/exponential-confidence-decay-for-unknown-reachability.md",
"notes": [
"[2026-02-13T10:35:00Z] checking: Tier 2d passed - 438 Determinization tests. DecayedConfidenceCalculator exp(-ln(2)*age/halfLife), ObservationDecay model (Fresh/Create/WithSettings), DecayPropertyTests (monotonicity, half-life, floor, range bounds), metrics emission.",
"[2026-02-13T10:50:00Z] done: Moved to checked/"
]
},
"gate-bypass-audit-logging": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-13T10:50:00Z",
"featureFile": "docs/features/checked/policy/gate-bypass-audit-logging.md",
"notes": [
"[2026-02-13T10:40:00Z] checking: Tier 2d passed - 1361 tests (1278 Engine + 83 Exceptions). PolicyGateEvaluator override with justification, ExceptionApplication audit (Record/RecordBatch/Query/Statistics), ExceptionAdapter metadata enrichment, DSSE-signed attestations for bypasses.",
"[2026-02-13T10:50:00Z] done: Moved to checked/"
]
},
"gate-level-selection": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-13T10:50:00Z",
"featureFile": "docs/features/checked/policy/gate-level-selection.md",
"notes": [
"[2026-02-13T10:45:00Z] checking: Tier 2d passed - 1278 Engine tests. 5-gate pipeline (EvidenceCompleteness, LatticeState, VexTrust, UncertaintyTier, ConfidenceThreshold), VexTrustGate per-env thresholds, StabilityDampingGate oscillation prevention, DriftGateEvaluator, override with justification.",
"[2026-02-13T10:50:00Z] done: Moved to checked/"
]
},
"impact-scoring-for-unknowns": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-13T12:00:00Z",
"featureFile": "docs/features/checked/policy/impact-scoring-for-unknowns.md",
"notes": [
"[2026-02-13T04:30:00Z] checking: Tier 2d passed - 438 Determinization tests. CombinedImpactCalculator (multi-factor formula, penalty factor, basis points), UncertaintyScoreCalculator (entropy, 6 signal gap categories), ImpactFactorWeights, determinism.",
"[2026-02-13T12:00:00Z] done: Moved to checked/"
]
},
"jurisdiction-specific-vex-trust-rules": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-13T12:00:00Z",
"featureFile": "docs/features/checked/policy/jurisdiction-specific-vex-trust-rules.md",
"notes": [
"[2026-02-13T04:32:00Z] checking: Tier 2d passed - 1278 Engine tests. VexTrustGate per-environment thresholds (prod=0.80/staging=0.60/dev=0.40), RequireIssuerVerified, FailureAction, AcceptableFreshness, MinAccuracyRate, ApplyToStatuses, trust tier computation, tenant overrides.",
"[2026-02-13T12:00:00Z] done: Moved to checked/"
]
},
"knowledge-snapshot-manifest": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-13T12:00:00Z",
"featureFile": "docs/features/checked/policy/knowledge-snapshot-manifest.md",
"notes": [
"[2026-02-13T04:34:00Z] checking: Tier 2d passed - 781 Policy.Tests. SnapshotIdGenerator (ksm:sha256:, 75-char, deterministic, tamper detection, ParseId, ValidateId), SnapshotService (CRUD, integrity verification, pagination, seal), KnowledgeSourceDescriptor, SnapshotBuilder.",
"[2026-02-13T12:00:00Z] done: Moved to checked/"
]
},
"license-compliance-evaluation-engine": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-13T12:00:00Z",
"featureFile": "docs/features/checked/policy/license-compliance-evaluation-engine.md",
"notes": [
"[2026-02-13T04:36:00Z] checking: Tier 2d passed - 781 Policy.Tests. LicenseComplianceEvaluator (SPDX parsing, ProhibitedLicense, CopyleftInProprietaryContext, UnknownLicense, MissingLicense, attribution, exemptions), LicenseKnowledgeBase, real SBOM integration tests (npm/Alpine/Python/Java).",
"[2026-02-13T12:00:00Z] done: Moved to checked/"
]
},
"ntia-compliance-validation-with-supplier-trust-verification": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-13T11:30:00Z",
"featureFile": "docs/features/checked/policy/ntia-compliance-validation-with-supplier-trust-verification.md",
"notes": [
"[2026-02-13T11:10:00Z] checking: Tier 2d passed - 781 Policy.Tests. NtiaBaselineValidator (7 NTIA elements, compliance score, exemptions), SupplierValidator (placeholder regex, fallback chain, URL validation), SupplierTrustVerifier (4 trust levels, case-insensitive), DependencyCompletenessChecker (orphaned detection), RegulatoryFrameworkMapper (NTIA/FDA/CISA/EU CRA/NIST), NtiaComplianceReporter (JSON/Text/Markdown/HTML/PDF), NtiaCompliancePolicyLoader (JSON+YAML), SupplyChainTransparencyReporter (HHI concentration, risk flags). 7 test files, 10 source files.",
"[2026-02-13T11:30:00Z] done: Moved to checked/"
]
},
"path-scope-simulation-bridge": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-13T11:30:00Z",
"featureFile": "docs/features/checked/policy/path-scope-simulation-bridge.md",
"notes": [
"[2026-02-13T11:15:00Z] checking: Tier 2d passed - 1278 Engine tests. PathScopeSimulationService (deterministic streaming by filePath, empty targets throws), PathScopeSimulationBridgeService (input-order decisions, what-if deltas, overlay events/store), OverlayProjectionService + OverlayChangeEventPublisher pipeline.",
"[2026-02-13T11:30:00Z] done: Moved to checked/"
]
},
"policy-bundles-with-proof-objects": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-13T11:30:00Z",
"featureFile": "docs/features/checked/policy/policy-bundles-with-proof-objects.md",
"notes": [
"[2026-02-13T11:20:00Z] checking: Tier 2d passed - 2059 tests (781 Policy + 1278 Engine). TrustLatticeEngine pipeline (VEX normalization -> claim -> K4 -> disposition -> proof bundle), K4Lattice (4-valued algebra: Join/Meet/Negate/LessOrEqual/FromSupport), ClaimScoreMerger (conflict penalty 0.25, deterministic ordering), KnowledgeSnapshotManifest (PolicyBundleRef/ScoringRulesRef/TrustBundleRef), PolicyGateEvaluator EvidenceCompleteness, VerdictAttestationService DSSE-signed attestations.",
"[2026-02-13T11:30:00Z] done: Moved to checked/"
]
},
"policy-dsl": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-13T11:30:00Z",
"featureFile": "docs/features/checked/policy/policy-dsl.md",
"notes": [
"[2026-02-13T11:25:00Z] checking: Tier 2d passed - 140 PolicyDsl.Tests. DslTokenizer (full lexer, comments, source locations), PolicyParser (AST: metadata/settings/profiles/rules), PolicyCompiler (Parse->IR->Canonical->SHA256 digest, deterministic checksum), PolicyEngineFactory (evaluation from compiled DSL), PolicyEngine (when/then/else/because, AND/OR/NOT, priority ordering, MatchedRules), SignalContext (Builder pattern, WithFinding/WithReachability/WithTrustScore, Clone), DslCompletionProvider (IDE completions: score/sbom/advisory/vex fields, buckets, flags, keywords, functions, context-based, case-insensitive, singleton).",
"[2026-02-13T11:30:00Z] done: Moved to checked/"
]
},
"policy-engine-with-proofs": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-13T12:15:00Z",
"featureFile": "docs/features/checked/policy/policy-engine-with-proofs.md",
"notes": [
"[2026-02-13T05:00:00Z] checking: Tier 2d passed - 2059 tests (1278 Engine + 781 Policy). PolicyGateEvaluator 5-gate pipeline (EvidenceCompleteness, LatticeState, VexTrust, UncertaintyTier, ConfidenceThreshold), lattice states (U/SR/SU/RO/RU/CR/CU/X), 22 PolicyGateEvaluatorTests covering lattice mapping per VEX status, uncertainty tiers, overrides with justification, disabled gates, decision document. DriftGateEvaluator, StabilityDampingGate, WhatIfSimulationService, VerdictAttestationService DSSE-signed proofs, KnowledgeSnapshotManifest.",
"[2026-02-13T12:15:00Z] done: Moved to checked/"
]
},
"policy-gate-with-evidence-linked-approval": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-13T12:15:00Z",
"featureFile": "docs/features/checked/policy/policy-gate-with-evidence-linked-approval.md",
"notes": [
"[2026-02-13T05:02:00Z] checking: Tier 2d passed - 2059 tests (1278 Engine + 781 Policy). PolicyGateEvaluator evidence-linked gate decisions (Pass/PassWithNote/Warn/Block/Skip), VexTrustGate with attestation references (16+ tests), EvidenceRequirementValidator (MaxAge, MinTrustScore, DSSE verification), ExceptionEvaluator with AllEvidenceRefs, VerdictAttestationService DSSE-signed attestations.",
"[2026-02-13T12:15:00Z] done: Moved to checked/"
]
},
"policy-interop-framework": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-13T12:15:00Z",
"featureFile": "docs/features/checked/policy/policy-interop-framework.md",
"notes": [
"[2026-02-13T05:04:00Z] checking: Tier 2d passed - 129/135 Interop.Tests (6 pre-existing YAML failures). JsonPolicyExporter (deterministic, environment merging, remediation stripping, canonical serialization, content-addressed sha256 digest), JsonPolicyImporter (golden fixture, API version v2+v1 compat, kind validation, duplicate detection, format auto-detect), RegoCodeGenerator (7 gate type mappings, Rego v1 syntax, environment config, remediation hints), FormatDetector, PolicyPack v2 schema. YAML import not yet implemented (6 failing tests documented in feature 'What's Missing').",
"[2026-02-13T12:15:00Z] done: Moved to checked/"
]
},
"policy-simulation-engine": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-002",
"lastUpdatedUtc": "2026-02-13T12:15:00Z",
"featureFile": "docs/features/checked/policy/policy-simulation-engine.md",
"notes": [
"[2026-02-13T05:06:00Z] checking: Tier 2d passed - 1278 Engine tests. RiskSimulationBreakdownService (19 tests: signal analysis, override analysis, score distribution with skewness/kurtosis/outliers, severity breakdown with HHI concentration, action breakdown with stability, component breakdown with ecosystems, Quick options, determinism hash, comparison with risk trends, empty findings, missing signals). WhatIfSimulationService (SBOM diffs: add/remove/upgrade/downgrade, decision changes, impact summary). ConsoleSimulationDiffService (schema 'console-policy-23-001', deterministic). 4 simulation endpoints.",
"[2026-02-13T12:15:00Z] done: Moved to checked/"
]
}
}
}

268
docs/qa/feature-checks/state/signals.json Normal file
View File

@@ -0,0 +1,268 @@
{
"module": "signals",
"featureCount": 14,
"lastUpdatedUtc": "2026-02-12T23:35:00Z",
"summary": {
"passed": 14,
"failed": 0,
"blocked": 0,
"skipped": 0,
"done": 14,
"queued": 0
},
"buildNote": "Signals solution baseline: 1385/1385 tests pass. All 14 features verified with full Tier 0+1+2d on 2026-02-12. Batch 4 (5 features) verified 2026-02-12T23:35:00Z.",
"features": {
"additive-score-explanation-service": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-12T22:00:00Z",
"featureFile": "docs/features/checked/signals/additive-score-explanation-service.md",
"notes": [
"[2026-02-12T21:44:00Z] checking: Tier 0 source check passed",
"[2026-02-12T21:45:00Z] checking: Tier 1 code review passed - ScoreExplanationService with CVSS, EPSS, reachability, exposure contributions",
"[2026-02-12T21:46:00Z] checking: Tier 2d passed - 24 tests: CVSS contribution, EPSS multiplier, reachability buckets, exposure types, gate discounts, KEV bonus, VEX reduction, score clamping, determinism",
"[2026-02-12T22:00:00Z] done: Moved to checked/"
]
},
"binary-level-call-graph-extraction-and-symbol-graph-construction": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-12T22:00:00Z",
"featureFile": "docs/features/checked/signals/binary-level-call-graph-extraction-and-symbol-graph-construction.md",
"notes": [
"[2026-02-12T21:44:00Z] checking: Tier 0 source check passed",
"[2026-02-12T21:45:00Z] checking: Tier 1 code review passed - CallgraphIngestionService with CAS storage, symbol normalization",
"[2026-02-12T21:46:00Z] checking: Tier 2d passed - 1 test: ingestion, parser resolution, symbol normalization, CAS URI, graph hash, reachability projection",
"[2026-02-12T22:00:00Z] done: Moved to checked/"
]
},
"nightly-unknowns-decay-batch-worker": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-12T22:00:00Z",
"featureFile": "docs/features/checked/signals/nightly-unknowns-decay-batch-worker.md",
"notes": [
"[2026-02-12T21:44:00Z] checking: Tier 0 source check passed",
"[2026-02-12T21:45:00Z] checking: Tier 1 code review passed - UnknownsDecayService with band changes, scoring, batch limits",
"[2026-02-12T21:46:00Z] checking: Tier 2d passed - 10 tests: empty subject, persistence, band changes, batch processing, MaxSubjectsPerBatch limit, cancellation, scoring fields, NextScheduledRescan, decay counts",
"[2026-02-12T22:00:00Z] done: Moved to checked/"
]
},
"relational-call-graph-postgresql-schema": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-12T22:00:00Z",
"featureFile": "docs/features/checked/signals/relational-call-graph-postgresql-schema.md",
"notes": [
"[2026-02-12T21:55:00Z] checking: Tier 0 source check passed - SignalsDbContext, 001_initial_schema.sql, FuncNodeDocument, PostgresCallGraphProjectionRepository, PostgresCallGraphQueryRepository, CallGraphSyncService all found",
"[2026-02-12T21:56:00Z] checking: Tier 1 code review passed - 507-line PostgreSQL migration with cg_nodes, cg_edges, entrypoints, symbol_component_map, reachability_components, reachability_findings, graph_metrics, unknowns tables plus indexes, views, materialized views",
"[2026-02-12T21:58:00Z] checking: Tier 2d passed - 14 tests (6 Persistence.Tests + 8 Signals.Tests): CallGraphProjectionIntegration (projection, idempotency, entrypoints, deletion, query), CallGraphSyncService (full lifecycle with real PostgreSQL, stats, reachable symbols traversal)",
"[2026-02-12T22:00:00Z] done: Moved to checked/"
]
},
"runtime-agent-framework": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-12T22:00:00Z",
"featureFile": "docs/features/checked/signals/runtime-agent-framework.md",
"notes": [
"[2026-02-12T21:55:00Z] checking: Tier 0 source check passed - RuntimeAgentBase, DotNetEventPipeAgent, ClrMethodResolver, AgentRegistrationService, RuntimeFactsIngestService, RuntimeAgentController all found",
"[2026-02-12T21:56:00Z] checking: Tier 1 code review passed - 315-line RuntimeAgentBase with state machine (Stopped->Starting->Running->Paused->Stopping), channel-based event streaming, posture management, concurrent method/type/assembly tracking",
"[2026-02-12T21:59:00Z] checking: Tier 2d passed - 74 tests: RuntimeAgentBase (9, state transitions), DotNetEventPipeAgent (9, pattern filtering, unique tracking, streaming, uptime), AgentRegistrationService (13, registration, heartbeat, commands, posture, pruning), RuntimeFactsIngestService (12, channel processing, symbol aggregation, multi-agent, time filtering)",
"[2026-02-12T22:00:00Z] done: Moved to checked/"
]
},
"runtime-node-hash-evidence-in-signals": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-12T22:00:00Z",
"featureFile": "docs/features/checked/signals/runtime-node-hash-evidence-in-signals.md",
"notes": [
"[2026-02-12T21:55:00Z] checking: Tier 0 source check passed - ReachabilityLattice, ReachabilityLatticeState, UncertaintyTier, ReachabilityFactDigestCalculator, ReachabilityFactDocument all found",
"[2026-02-12T21:56:00Z] checking: Tier 1 code review passed - 164-line ReachabilityLattice with pre-computed 8x8 join/meet tables, 8 states (Unknown through Contested), FromEvidence/FromV0Bucket conversions; 259-line ReachabilityFactDigestCalculator with canonical JSON, SHA256, normalized sorting",
"[2026-02-12T21:59:00Z] checking: Tier 2d passed - 56 tests: ReachabilityLattice (7, join/meet operations, commutativity for all 64 pairs, JoinAll, FromEvidence, FromV0Bucket), StateExtensions (4, ToCode/FromCode/ToV0Bucket round-trips), DigestCalculator (1, deterministic SHA256 with reversed inputs)",
"[2026-02-12T22:00:00Z] done: Moved to checked/"
]
},
"runtime-reachability-collection": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-12T22:35:00Z",
"featureFile": "docs/features/checked/signals/runtime-reachability-collection.md",
"notes": [
"[2026-02-12T22:25:00Z] checking: Tier 0 source check passed - DotNetEventPipeAgent, RuntimeFactsIngestService, RuntimeMethodEvent, ReachabilityFactEventBuilder, ReachabilityFactCacheDecorator all found (5/5)",
"[2026-02-12T22:26:00Z] checking: Tier 1 code review passed - 219-line ReachabilityFactEventBuilder (typed event envelopes, topic/tenant/trace resolution, digest computation), 72-line ReachabilityFactCacheDecorator (cache-aside pattern wrapping IReachabilityFactRepository)",
"[2026-02-12T22:30:00Z] checking: Tier 2d passed - 16 tests: RuntimeFactsIngestionServiceTests (10: hit aggregation, tenant isolation, deterministic keys, Build-ID/Code-ID correlation, validation, evidence URI, AOC provenance), RuntimeFactsBatchIngestionTests (6: NDJSON parsing, gzip, multi-subject grouping, CAS URI, invalid line skip, no artifact store)",
"[2026-02-12T22:35:00Z] done: Moved to checked/"
]
},
"sbom-to-symbol-component-reachability-mapping": {
"status": "done",
"tier": 1,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": false,
"skipReason": "No unit tests exist for SbomCorrelationService, FuncProofLinkingService, HotSymbolsController, or HotSymbolIndex (2241 lines of production code with zero test coverage). Verified via Tier 0 + Tier 1 code review + build compilation only.",
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-12T22:35:00Z",
"featureFile": "docs/features/checked/signals/sbom-to-symbol-component-reachability-mapping.md",
"notes": [
"[2026-02-12T22:25:00Z] checking: Tier 0 source check passed - ISbomCorrelationService.cs (487 lines), IFuncProofLinkingService.cs (834 lines), HotSymbolsController.cs (564 lines), HotSymbolIndex.cs (356 lines) all found (4/4)",
"[2026-02-12T22:27:00Z] checking: Tier 1 code review passed - SbomCorrelationService (Build-ID match confidence 1.0, file-path match 0.8, NoMatch fallback), FuncProofLinkingService (exact name match, address range fallback, coverage analysis), HotSymbolsController (4 endpoints: filtered query, top-N, stats, correlated), HotSymbolIndex (multi-tenant, CVE/PURL correlation, time windows)",
"[2026-02-12T22:30:00Z] checking: Tier 2d - NO TESTS FOUND. Searched StellaOps.Signals.Tests for SbomCorrelation*, FuncProofLinking*, HotSymbol* - zero results. 2241 lines of production code with no test coverage. TEST GAP.",
"[2026-02-12T22:35:00Z] done: Moved to checked/ (verified at Tier 0+1 only, test gap documented)"
]
},
"scm-ci-webhook-connector-service": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-12T22:35:00Z",
"featureFile": "docs/features/checked/signals/scm-ci-webhook-connector-service.md",
"notes": [
"[2026-02-12T22:25:00Z] checking: Tier 0 source check passed - ScmWebhookService, ScmWebhookEndpoints, GiteaWebhookValidator, IWebhookSignatureValidator, IScmEventMapper all found (5/5)",
"[2026-02-12T22:26:00Z] checking: Tier 1 code review passed - 173-line ScmWebhookService (signature validation, event normalization, context enrichment, trigger dispatch), 60-line GiteaWebhookValidator (HMAC-SHA256/SHA1 with legacy format, CryptographicOperations.FixedTimeEquals)",
"[2026-02-12T22:31:00Z] checking: Tier 2d passed - 22 tests: ScmWebhookServiceTests (3: reject unsigned 401, allow unsigned 202, valid HMAC 202), ScmWebhookValidatorTests (11: GitHub 5, GitLab 3, Gitea 2 + theory cases), ScmEventMapperTests (8: GitHub 4, GitLab 2, Gitea 1, unknown->Unknown 1)",
"[2026-02-12T22:35:00Z] done: Moved to checked/"
]
},
"signals-callgraph-ingestion-with-content-addressed-storage": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-12T23:35:00Z",
"featureFile": "docs/features/checked/signals/signals-callgraph-ingestion-with-content-addressed-storage.md",
"notes": [
"[2026-02-12T23:20:00Z] checking: Tier 0 source check passed - CallgraphIngestionService, ICallgraphParserResolver, CallgraphIngestRequest, CallgraphIngestResponse, CallgraphManifest, CallgraphSchemaVersions all found (6/6)",
"[2026-02-12T23:21:00Z] checking: Tier 1 code review passed - 432-line CallgraphIngestionService with parser resolution, normalization, SHA256 CAS, deterministic graph hash, manifest persistence, reachability store upsert, relational projection",
"[2026-02-12T23:22:00Z] checking: Tier 2d passed - 1 test: Java ingestion, symbol normalization, CAS URI, graph hash, manifest CAS URI, reachability store nodes/edges",
"[2026-02-12T23:35:00Z] done: Moved to checked/"
]
},
"signals-reachability-scoring-service": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-12T23:35:00Z",
"featureFile": "docs/features/checked/signals/signals-reachability-scoring-service.md",
"notes": [
"[2026-02-12T23:23:00Z] checking: Tier 0 source check passed - ReachabilityScoringService, EvidenceWeightedScoreCalculator, ReachabilityLattice, NormalizerAggregator, AocProvenance all found (5/5)",
"[2026-02-12T23:24:00Z] checking: Tier 1 code review passed - 738-line ReachabilityScoringService with BFS path finding, gate multipliers, unknowns pressure, uncertainty risk score, lattice state tracking, digest computation",
"[2026-02-12T23:25:00Z] checking: Tier 2d passed - 3 tests: gate multipliers (AuthRequired 30% reduction), configured weights with runtime (0.9 confidence, 0.405 score), uncertainty risk score (T2 tier, pressure penalty, entropy boost)",
"[2026-02-12T23:35:00Z] done: Moved to checked/"
]
},
"signals-router-transport": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-12T23:35:00Z",
"featureFile": "docs/features/checked/signals/signals-router-transport.md",
"notes": [
"[2026-02-12T23:26:00Z] checking: Tier 0 source check passed - RouterEventsPublisher, RedisEventsPublisher, MessagingEventsPublisher, InMemoryEventsPublisher, NullEventsPublisher, IEventsPublisher, SignalsRouterEventsOptions all found (7/7)",
"[2026-02-12T23:27:00Z] checking: Tier 1 code review passed - 5 transport implementations (Router/Redis/Messaging/InMemory/Null) sharing IEventsPublisher interface, configurable via SignalsRouterEventsOptions",
"[2026-02-12T23:28:00Z] checking: Tier 2d passed - 3 tests: RouterEventsPublisher (HTTP POST with envelope, headers, API key), RouterEventsPublisher (failure logging), InMemoryEventsPublisher (structured event with summary counts)",
"[2026-02-12T23:35:00Z] done: Moved to checked/"
]
},
"signal-state-attachment-for-cve-observations": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-12T23:35:00Z",
"featureFile": "docs/features/checked/signals/signal-state-attachment-for-cve-observations.md",
"notes": [
"[2026-02-12T23:29:00Z] checking: Tier 0 source check passed - ReachabilityFactDocument, ReachabilityFactUpdatedEvent, RuntimeUpdatedEvent, UncertaintyDocument, ReachabilityLattice all found (5/5)",
"[2026-02-12T23:30:00Z] checking: Tier 1 code review passed - Observation lifecycle models with lattice state tracking, uncertainty attachment, runtime event factory with deterministic IDs and reanalysis triggers",
"[2026-02-12T23:31:00Z] checking: Tier 2d passed - 25 tests: RuntimeUpdatedEventTests (12: deterministic ID, update types, reanalysis triggers, idempotency), ReachabilityLatticeTests (7: join/meet, commutativity), ReachabilityScoringServiceTests (3: lattice state, uncertainty, guard rails via gate multipliers, 3 more from scoring)",
"[2026-02-12T23:35:00Z] done: Moved to checked/"
]
},
"unified-score-facade-service": {
"status": "done",
"tier": 2,
"retryCount": 0,
"sourceVerified": true,
"buildVerified": true,
"e2eVerified": true,
"skipReason": null,
"lastRunId": "run-001",
"lastUpdatedUtc": "2026-02-12T23:35:00Z",
"featureFile": "docs/features/checked/signals/unified-score-facade-service.md",
"notes": [
"[2026-02-12T23:32:00Z] checking: Tier 0 source check passed - UnifiedScoreService, UnifiedScoreModels, ReplayLogBuilder, IUnifiedScoreService, ServiceCollectionExtensions all found (5/5)",
"[2026-02-12T23:33:00Z] checking: Tier 1 code review passed - 259-line UnifiedScoreService combining EWS + Determinization: weight manifest loading, EWS calculation, entropy/band mapping, determinization fingerprint, delta-if-present, conflict detection",
"[2026-02-12T23:34:00Z] checking: Tier 2d passed - 30 tests: UnifiedScoreServiceTests (16: score computation, entropy, bands, conflicts, EWS passthrough, sync, delta-if-present), UnifiedScoreDeterminismTests (14: 100-iteration score/digest/fingerprint/bucket/breakdown determinism, parallel determinism, 5 golden fixtures)",
"[2026-02-12T23:35:00Z] done: Moved to checked/"
]
}
}
}