save development progress

2025-12-25 23:09:58 +02:00
parent d71853ad7e
commit aa70af062e
351 changed files with 37683 additions and 150156 deletions
--- a/src/DevPortal/StellaOps.DevPortal.Site/public/api/stella.yaml
+++ b/src/DevPortal/StellaOps.DevPortal.Site/public/api/stella.yaml
@@ -476,9 +476,127 @@ components:
          type: array
        traceId:
          type: string
+        cacheHit:
+          type: boolean
+          description: Whether the decision was served from cache.
+        cacheSource:
+          type: string
+          enum:
+            - none
+            - inMemory
+            - redis
+          description: Source of cached data (none for fresh computation, inMemory for L1 cache, redis for Provcache L2).
+        executionTimeMs:
+          type: integer
+          description: Time taken to evaluate the policy in milliseconds.
      required:
        - decision
      type: object
+    provcache.TrustScoreComponent:
+      type: object
+      required:
+        - score
+        - weight
+      properties:
+        score:
+          type: integer
+          minimum: 0
+          maximum: 100
+          description: Component score (0-100).
+        weight:
+          type: number
+          format: float
+          minimum: 0
+          maximum: 1
+          description: Weight of this component in the total score (0.0-1.0).
+    provcache.TrustScoreBreakdown:
+      type: object
+      required:
+        - reachability
+        - sbomCompleteness
+        - vexCoverage
+        - policyFreshness
+        - signerTrust
+      properties:
+        reachability:
+          $ref: '#/components/schemas/provcache.TrustScoreComponent'
+          description: Reachability evidence contribution (weight 25%).
+        sbomCompleteness:
+          $ref: '#/components/schemas/provcache.TrustScoreComponent'
+          description: SBOM completeness contribution (weight 20%).
+        vexCoverage:
+          $ref: '#/components/schemas/provcache.TrustScoreComponent'
+          description: VEX statement coverage contribution (weight 20%).
+        policyFreshness:
+          $ref: '#/components/schemas/provcache.TrustScoreComponent'
+          description: Policy freshness contribution (weight 15%).
+        signerTrust:
+          $ref: '#/components/schemas/provcache.TrustScoreComponent'
+          description: Signer trust contribution (weight 20%).
+    provcache.ReplaySeed:
+      type: object
+      required:
+        - feedIds
+        - ruleIds
+      properties:
+        feedIds:
+          type: array
+          items:
+            type: string
+          description: Advisory feed identifiers used in evaluation.
+        ruleIds:
+          type: array
+          items:
+            type: string
+          description: Policy rule identifiers used in evaluation.
+        frozenEpoch:
+          type: string
+          format: date-time
+          description: Optional frozen epoch timestamp for deterministic replay.
+    provcache.DecisionDigest:
+      type: object
+      required:
+        - digestVersion
+        - veriKey
+        - verdictHash
+        - proofRoot
+        - replaySeed
+        - createdAt
+        - expiresAt
+        - trustScore
+      properties:
+        digestVersion:
+          type: string
+          description: Schema version of this digest format.
+          example: v1
+        veriKey:
+          type: string
+          description: Composite cache key that uniquely identifies the provenance decision context.
+          example: sha256:abc123...
+        verdictHash:
+          type: string
+          description: Hash of sorted dispositions from the evaluation result.
+        proofRoot:
+          type: string
+          description: Merkle root of all evidence chunks used in this decision.
+        replaySeed:
+          $ref: '#/components/schemas/provcache.ReplaySeed'
+        createdAt:
+          type: string
+          format: date-time
+          description: UTC timestamp when this digest was created.
+        expiresAt:
+          type: string
+          format: date-time
+          description: UTC timestamp when this digest expires.
+        trustScore:
+          type: integer
+          minimum: 0
+          maximum: 100
+          description: Composite trust score (0-100) indicating decision confidence.
+        trustScoreBreakdown:
+          $ref: '#/components/schemas/provcache.TrustScoreBreakdown'
+          description: Breakdown of trust score by component.
    scheduler.QueueStatus:
      properties:
        depth: