archive audit attempts

docs-archived/implplan-blocked/audits/src/VexLens/__Libraries/StellaOps.VexLens.Spdx3/StellaOps.VexLens.Spdx3.csproj

@@ -0,0 +1,94 @@
+# Audit - StellaOps.VexLens.Spdx3
+
+## Project
+- Path: ../src/VexLens/__Libraries/StellaOps.VexLens.Spdx3/StellaOps.VexLens.Spdx3.csproj
+- Module: ..
+- Kind: Library
+- Audit date (UTC): 2026-01-30
+- Files scanned: 12
+- Files with issues: 12
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true
+- Deterministic: inherited true
+- 100-line rule violations: 6
+- Namespace violations: 12
+- Using directive violations: 0
+- Naming violations (interfaces/fields/const/async): 0
+- Service locator usage (BuildServiceProvider/GetService): 0
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - ../src/VexLens/__Libraries/StellaOps.VexLens.Spdx3/CombinedSbomVexBuilder.cs (288 lines)
+  - ../src/VexLens/__Libraries/StellaOps.VexLens.Spdx3/CvssMapper.cs (203 lines)
+  - ../src/VexLens/__Libraries/StellaOps.VexLens.Spdx3/IVexToSpdx3Mapper.cs (294 lines)
+  - ../src/VexLens/__Libraries/StellaOps.VexLens.Spdx3/VexStatusMapper.cs (186 lines)
+  - ../src/VexLens/__Libraries/StellaOps.VexLens.Spdx3/VexToSpdx3Mapper.cs (184 lines)
+  - ../src/VexLens/__Libraries/StellaOps.VexLens.Spdx3/VulnerabilityElementBuilder.cs (215 lines)
+- Namespace issues:
+  - ../src/VexLens/__Libraries/StellaOps.VexLens.Spdx3/CombinedSbomVexBuilder.cs: missing namespace
+  - ../src/VexLens/__Libraries/StellaOps.VexLens.Spdx3/CvssMapper.cs: missing namespace
+  - ../src/VexLens/__Libraries/StellaOps.VexLens.Spdx3/IVexToSpdx3Mapper.cs: missing namespace
+  - ../src/VexLens/__Libraries/StellaOps.VexLens.Spdx3/VexStatusMapper.cs: missing namespace
+  - ../src/VexLens/__Libraries/StellaOps.VexLens.Spdx3/VexToSpdx3Mapper.cs: missing namespace
+  - ../src/VexLens/__Libraries/StellaOps.VexLens.Spdx3/VulnerabilityElementBuilder.cs: missing namespace
+  - ../src/VexLens/__Libraries/StellaOps.VexLens.Spdx3/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs: missing namespace
+  - ../src/VexLens/__Libraries/StellaOps.VexLens.Spdx3/obj/Debug/net10.0/StellaOps.VexLens.Spdx3.AssemblyInfo.cs: missing namespace
+  - ../src/VexLens/__Libraries/StellaOps.VexLens.Spdx3/obj/Debug/net10.0/StellaOps.VexLens.Spdx3.GlobalUsings.g.cs: missing namespace
+  - ../src/VexLens/__Libraries/StellaOps.VexLens.Spdx3/obj/Release/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs: missing namespace
+  - ../src/VexLens/__Libraries/StellaOps.VexLens.Spdx3/obj/Release/net10.0/StellaOps.VexLens.Spdx3.AssemblyInfo.cs: missing namespace
+  - ../src/VexLens/__Libraries/StellaOps.VexLens.Spdx3/obj/Release/net10.0/StellaOps.VexLens.Spdx3.GlobalUsings.g.cs: missing namespace
+- Using directive issues:
+  - none
+- Naming issues:
+  - none
+- Async issues:
+  - none
+- Service locator matches:
+  - none
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Normalize namespaces to file-scoped StellaOps.<Area>.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 12
+- Files with issues: 12
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| ../src/VexLens/__Libraries/StellaOps.VexLens.Spdx3/CombinedSbomVexBuilder.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/VexLens/__Libraries/StellaOps.VexLens.Spdx3/CvssMapper.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/VexLens/__Libraries/StellaOps.VexLens.Spdx3/IVexToSpdx3Mapper.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/VexLens/__Libraries/StellaOps.VexLens.Spdx3/VexStatusMapper.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/VexLens/__Libraries/StellaOps.VexLens.Spdx3/VexToSpdx3Mapper.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/VexLens/__Libraries/StellaOps.VexLens.Spdx3/VulnerabilityElementBuilder.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/VexLens/__Libraries/StellaOps.VexLens.Spdx3/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/VexLens/__Libraries/StellaOps.VexLens.Spdx3/obj/Debug/net10.0/StellaOps.VexLens.Spdx3.AssemblyInfo.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/VexLens/__Libraries/StellaOps.VexLens.Spdx3/obj/Debug/net10.0/StellaOps.VexLens.Spdx3.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/VexLens/__Libraries/StellaOps.VexLens.Spdx3/obj/Release/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/VexLens/__Libraries/StellaOps.VexLens.Spdx3/obj/Release/net10.0/StellaOps.VexLens.Spdx3.AssemblyInfo.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/VexLens/__Libraries/StellaOps.VexLens.Spdx3/obj/Release/net10.0/StellaOps.VexLens.Spdx3.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+
+## Testing Fullness Findings
+- Status: PASS
+- Expected layers (heuristic): Unit
+- Detected test projects: ../src/VexLens/__Libraries/__Tests/StellaOps.VexLens.Spdx3.Tests/StellaOps.VexLens.Spdx3.Tests.csproj [Unit]
+- Missing layers: none
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- None.

docs-archived/implplan-blocked/audits/src/VexLens/__Libraries/__Tests/StellaOps.VexLens.Spdx3.Tests/StellaOps.VexLens.Spdx3.Tests.csproj

@@ -0,0 +1,92 @@
+# Audit - StellaOps.VexLens.Spdx3.Tests
+
+## Project
+- Path: ../src/VexLens/__Libraries/__Tests/StellaOps.VexLens.Spdx3.Tests/StellaOps.VexLens.Spdx3.Tests.csproj
+- Module: ..
+- Kind: Library
+- Audit date (UTC): 2026-01-30
+- Files scanned: 11
+- Files with issues: 11
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true
+- Deterministic: inherited true
+- 100-line rule violations: 5
+- Namespace violations: 11
+- Using directive violations: 0
+- Naming violations (interfaces/fields/const/async): 0
+- Service locator usage (BuildServiceProvider/GetService): 0
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - ../src/VexLens/__Libraries/__Tests/StellaOps.VexLens.Spdx3.Tests/CombinedSbomVexBuilderTests.cs (369 lines)
+  - ../src/VexLens/__Libraries/__Tests/StellaOps.VexLens.Spdx3.Tests/CvssMapperTests.cs (144 lines)
+  - ../src/VexLens/__Libraries/__Tests/StellaOps.VexLens.Spdx3.Tests/VexStatusMapperTests.cs (208 lines)
+  - ../src/VexLens/__Libraries/__Tests/StellaOps.VexLens.Spdx3.Tests/VexToSpdx3MapperTests.cs (421 lines)
+  - ../src/VexLens/__Libraries/__Tests/StellaOps.VexLens.Spdx3.Tests/VulnerabilityElementBuilderTests.cs (117 lines)
+- Namespace issues:
+  - ../src/VexLens/__Libraries/__Tests/StellaOps.VexLens.Spdx3.Tests/CombinedSbomVexBuilderTests.cs: missing namespace
+  - ../src/VexLens/__Libraries/__Tests/StellaOps.VexLens.Spdx3.Tests/CvssMapperTests.cs: missing namespace
+  - ../src/VexLens/__Libraries/__Tests/StellaOps.VexLens.Spdx3.Tests/VexStatusMapperTests.cs: missing namespace
+  - ../src/VexLens/__Libraries/__Tests/StellaOps.VexLens.Spdx3.Tests/VexToSpdx3MapperTests.cs: missing namespace
+  - ../src/VexLens/__Libraries/__Tests/StellaOps.VexLens.Spdx3.Tests/VulnerabilityElementBuilderTests.cs: missing namespace
+  - ../src/VexLens/__Libraries/__Tests/StellaOps.VexLens.Spdx3.Tests/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs: missing namespace
+  - ../src/VexLens/__Libraries/__Tests/StellaOps.VexLens.Spdx3.Tests/obj/Debug/net10.0/SelfRegisteredExtensions.cs: missing namespace
+  - ../src/VexLens/__Libraries/__Tests/StellaOps.VexLens.Spdx3.Tests/obj/Debug/net10.0/StellaOps.VexLens.Spdx3.Tests.AssemblyInfo.cs: missing namespace
+  - ../src/VexLens/__Libraries/__Tests/StellaOps.VexLens.Spdx3.Tests/obj/Debug/net10.0/StellaOps.VexLens.Spdx3.Tests.GlobalUsings.g.cs: missing namespace
+  - ../src/VexLens/__Libraries/__Tests/StellaOps.VexLens.Spdx3.Tests/obj/Debug/net10.0/XunitAutoGeneratedEntryPoint.cs: missing namespace
+  - ../src/VexLens/__Libraries/__Tests/StellaOps.VexLens.Spdx3.Tests/obj/Release/net10.0/StellaOps.VexLens.Spdx3.Tests.GlobalUsings.g.cs: missing namespace
+- Using directive issues:
+  - none
+- Naming issues:
+  - none
+- Async issues:
+  - none
+- Service locator matches:
+  - none
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Normalize namespaces to file-scoped StellaOps.<Area>.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 11
+- Files with issues: 11
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| ../src/VexLens/__Libraries/__Tests/StellaOps.VexLens.Spdx3.Tests/CombinedSbomVexBuilderTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/VexLens/__Libraries/__Tests/StellaOps.VexLens.Spdx3.Tests/CvssMapperTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/VexLens/__Libraries/__Tests/StellaOps.VexLens.Spdx3.Tests/VexStatusMapperTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/VexLens/__Libraries/__Tests/StellaOps.VexLens.Spdx3.Tests/VexToSpdx3MapperTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/VexLens/__Libraries/__Tests/StellaOps.VexLens.Spdx3.Tests/VulnerabilityElementBuilderTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/VexLens/__Libraries/__Tests/StellaOps.VexLens.Spdx3.Tests/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/VexLens/__Libraries/__Tests/StellaOps.VexLens.Spdx3.Tests/obj/Debug/net10.0/SelfRegisteredExtensions.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/VexLens/__Libraries/__Tests/StellaOps.VexLens.Spdx3.Tests/obj/Debug/net10.0/StellaOps.VexLens.Spdx3.Tests.AssemblyInfo.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/VexLens/__Libraries/__Tests/StellaOps.VexLens.Spdx3.Tests/obj/Debug/net10.0/StellaOps.VexLens.Spdx3.Tests.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/VexLens/__Libraries/__Tests/StellaOps.VexLens.Spdx3.Tests/obj/Debug/net10.0/XunitAutoGeneratedEntryPoint.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/VexLens/__Libraries/__Tests/StellaOps.VexLens.Spdx3.Tests/obj/Release/net10.0/StellaOps.VexLens.Spdx3.Tests.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+
+## Testing Fullness Findings
+- Status: FAIL
+- Expected layers (heuristic): Unit
+- Detected test projects: none
+- Missing layers: Unit
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- Add or expand test projects to cover missing layers.
+- Ensure tests use deterministic fixtures and offline harnesses.