archive audit attempts

docs-archived/implplan-blocked/audits/src/Zastava/StellaOps.Zastava.Agent/StellaOps.Zastava.Agent.csproj

@@ -0,0 +1,102 @@
+# Audit - StellaOps.Zastava.Agent
+
+## Project
+- Path: ../src/Zastava/StellaOps.Zastava.Agent/StellaOps.Zastava.Agent.csproj
+- Module: ..
+- Kind: Library
+- Audit date (UTC): 2026-01-30
+- Files scanned: 15
+- Files with issues: 14
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true
+- Deterministic: inherited true
+- 100-line rule violations: 9
+- Namespace violations: 14
+- Using directive violations: 0
+- Naming violations (interfaces/fields/const/async): 0
+- Service locator usage (BuildServiceProvider/GetService): 0
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - ../src/Zastava/StellaOps.Zastava.Agent/Backend/RuntimeEventsClient.cs (131 lines)
+  - ../src/Zastava/StellaOps.Zastava.Agent/Configuration/ZastavaAgentOptions.cs (209 lines)
+  - ../src/Zastava/StellaOps.Zastava.Agent/Docker/DockerEventModels.cs (214 lines)
+  - ../src/Zastava/StellaOps.Zastava.Agent/Docker/DockerSocketClient.cs (297 lines)
+  - ../src/Zastava/StellaOps.Zastava.Agent/Worker/AgentServiceCollectionExtensions.cs (113 lines)
+  - ../src/Zastava/StellaOps.Zastava.Agent/Worker/DockerEventHostedService.cs (354 lines)
+  - ../src/Zastava/StellaOps.Zastava.Agent/Worker/HealthCheckHostedService.cs (277 lines)
+  - ../src/Zastava/StellaOps.Zastava.Agent/Worker/RuntimeEventBuffer.cs (305 lines)
+  - ../src/Zastava/StellaOps.Zastava.Agent/Worker/RuntimeEventDispatchService.cs (212 lines)
+- Namespace issues:
+  - ../src/Zastava/StellaOps.Zastava.Agent/Backend/RuntimeEventsClient.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Agent/Configuration/ZastavaAgentOptions.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Agent/Docker/DockerEventModels.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Agent/Docker/DockerSocketClient.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Agent/Docker/IDockerSocketClient.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Agent/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Agent/obj/Debug/net10.0/StellaOps.Zastava.Agent.AssemblyInfo.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Agent/obj/Debug/net10.0/StellaOps.Zastava.Agent.GlobalUsings.g.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Agent/obj/Release/net10.0/StellaOps.Zastava.Agent.GlobalUsings.g.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Agent/Worker/AgentServiceCollectionExtensions.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Agent/Worker/DockerEventHostedService.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Agent/Worker/HealthCheckHostedService.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Agent/Worker/RuntimeEventBuffer.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Agent/Worker/RuntimeEventDispatchService.cs: missing namespace
+- Using directive issues:
+  - none
+- Naming issues:
+  - none
+- Async issues:
+  - none
+- Service locator matches:
+  - none
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Normalize namespaces to file-scoped StellaOps.<Area>.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 15
+- Files with issues: 14
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| ../src/Zastava/StellaOps.Zastava.Agent/Backend/RuntimeEventsClient.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/StellaOps.Zastava.Agent/Configuration/ZastavaAgentOptions.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/StellaOps.Zastava.Agent/Docker/DockerEventModels.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/StellaOps.Zastava.Agent/Docker/DockerSocketClient.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/StellaOps.Zastava.Agent/Docker/IDockerSocketClient.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/StellaOps.Zastava.Agent/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/StellaOps.Zastava.Agent/obj/Debug/net10.0/StellaOps.Zastava.Agent.AssemblyInfo.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/StellaOps.Zastava.Agent/obj/Debug/net10.0/StellaOps.Zastava.Agent.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/StellaOps.Zastava.Agent/obj/Release/net10.0/StellaOps.Zastava.Agent.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/StellaOps.Zastava.Agent/Worker/AgentServiceCollectionExtensions.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/StellaOps.Zastava.Agent/Worker/DockerEventHostedService.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/StellaOps.Zastava.Agent/Worker/HealthCheckHostedService.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/StellaOps.Zastava.Agent/Worker/RuntimeEventBuffer.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/StellaOps.Zastava.Agent/Worker/RuntimeEventDispatchService.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+
+## Testing Fullness Findings
+- Status: FAIL
+- Expected layers (heuristic): Unit
+- Detected test projects: none
+- Missing layers: Unit
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- Add or expand test projects to cover missing layers.
+- Ensure tests use deterministic fixtures and offline harnesses.

docs-archived/implplan-blocked/audits/src/Zastava/StellaOps.Zastava.Observer/StellaOps.Zastava.Observer.csproj

@@ -0,0 +1,187 @@
+# Audit - StellaOps.Zastava.Observer
+
+## Project
+- Path: ../src/Zastava/StellaOps.Zastava.Observer/StellaOps.Zastava.Observer.csproj
+- Module: ..
+- Kind: Library
+- Audit date (UTC): 2026-01-30
+- Files scanned: 50
+- Files with issues: 48
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true
+- Deterministic: inherited true
+- 100-line rule violations: 27
+- Namespace violations: 48
+- Using directive violations: 0
+- Naming violations (interfaces/fields/const/async): 0
+- Service locator usage (BuildServiceProvider/GetService): 0
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - ../src/Zastava/StellaOps.Zastava.Observer/Backend/RuntimeEventsClient.cs (243 lines)
+  - ../src/Zastava/StellaOps.Zastava.Observer/Backend/RuntimePolicyClient.cs (129 lines)
+  - ../src/Zastava/StellaOps.Zastava.Observer/Configuration/ZastavaObserverOptions.cs (256 lines)
+  - ../src/Zastava/StellaOps.Zastava.Observer/ContainerRuntime/ContainerStateTracker.cs (135 lines)
+  - ../src/Zastava/StellaOps.Zastava.Observer/ContainerRuntime/Cri/CriRuntimeClient.cs (255 lines)
+  - ../src/Zastava/StellaOps.Zastava.Observer/ContainerRuntime/Windows/DockerWindowsRuntimeClient.cs (402 lines)
+  - ../src/Zastava/StellaOps.Zastava.Observer/ContainerRuntime/Windows/IWindowsContainerRuntimeClient.cs (115 lines)
+  - ../src/Zastava/StellaOps.Zastava.Observer/ContainerRuntime/Windows/WindowsContainerInfo.cs (105 lines)
+  - ../src/Zastava/StellaOps.Zastava.Observer/ContainerRuntime/Windows/WindowsLibraryHashCollector.cs (180 lines)
+  - ../src/Zastava/StellaOps.Zastava.Observer/DependencyInjection/ObserverServiceCollectionExtensions.cs (184 lines)
+  - ../src/Zastava/StellaOps.Zastava.Observer/obj/Debug/net10.0/Protos/runtime/v1/Runtime.cs (41692 lines)
+  - ../src/Zastava/StellaOps.Zastava.Observer/obj/Debug/net10.0/Protos/runtime/v1/RuntimeGrpc.cs (2380 lines)
+  - ../src/Zastava/StellaOps.Zastava.Observer/Posture/RuntimePostureCache.cs (181 lines)
+  - ../src/Zastava/StellaOps.Zastava.Observer/Posture/RuntimePostureEvaluator.cs (285 lines)
+  - ../src/Zastava/StellaOps.Zastava.Observer/Probes/EbpfProbeManager.cs (463 lines)
+  - ../src/Zastava/StellaOps.Zastava.Observer/Runtime/ElfBuildIdReader.cs (288 lines)
+  - ../src/Zastava/StellaOps.Zastava.Observer/Runtime/RuntimeEventBuffer.cs (302 lines)
+  - ../src/Zastava/StellaOps.Zastava.Observer/Runtime/RuntimeFactsBuilder.cs (358 lines)
+  - ../src/Zastava/StellaOps.Zastava.Observer/Runtime/RuntimeProcessCollector.cs (526 lines)
+  - ../src/Zastava/StellaOps.Zastava.Observer/Runtime/ProcSnapshot/DotNetAssemblyCollector.cs (496 lines)
+  - ../src/Zastava/StellaOps.Zastava.Observer/Runtime/ProcSnapshot/JavaClasspathCollector.cs (419 lines)
+  - ../src/Zastava/StellaOps.Zastava.Observer/Runtime/ProcSnapshot/PhpAutoloadCollector.cs (514 lines)
+  - ../src/Zastava/StellaOps.Zastava.Observer/Runtime/ProcSnapshot/ProcSnapshotCollector.cs (146 lines)
+  - ../src/Zastava/StellaOps.Zastava.Observer/Worker/ContainerLifecycleHostedService.cs (203 lines)
+  - ../src/Zastava/StellaOps.Zastava.Observer/Worker/ContainerRuntimePoller.cs (140 lines)
+  - ../src/Zastava/StellaOps.Zastava.Observer/Worker/RuntimeEventDispatchService.cs (270 lines)
+  - ../src/Zastava/StellaOps.Zastava.Observer/Worker/RuntimeEventFactory.cs (155 lines)
+- Namespace issues:
+  - ../src/Zastava/StellaOps.Zastava.Observer/Backend/IRuntimePolicyClient.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Observer/Backend/RuntimeEventsClient.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Observer/Backend/RuntimeFactsClient.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Observer/Backend/RuntimePolicyClient.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Observer/Backend/RuntimePolicyContracts.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Observer/Backend/RuntimePolicyException.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Observer/Configuration/ReachabilityRuntimeOptions.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Observer/Configuration/ZastavaObserverOptions.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Observer/ContainerRuntime/ContainerStateTracker.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Observer/ContainerRuntime/ContainerStateTrackerFactory.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Observer/ContainerRuntime/Cri/CriConversions.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Observer/ContainerRuntime/Cri/CriModels.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Observer/ContainerRuntime/Cri/CriRuntimeClient.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Observer/ContainerRuntime/Cri/CriRuntimeClientFactory.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Observer/ContainerRuntime/Windows/DockerWindowsRuntimeClient.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Observer/ContainerRuntime/Windows/IWindowsContainerRuntimeClient.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Observer/ContainerRuntime/Windows/WindowsContainerInfo.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Observer/ContainerRuntime/Windows/WindowsLibraryHashCollector.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Observer/DependencyInjection/ObserverServiceCollectionExtensions.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Observer/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Observer/obj/Debug/net10.0/StellaOps.Zastava.Observer.AssemblyInfo.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Observer/obj/Debug/net10.0/StellaOps.Zastava.Observer.GlobalUsings.g.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Observer/obj/Debug/net10.0/Protos/runtime/v1/Runtime.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Observer/obj/Debug/net10.0/Protos/runtime/v1/RuntimeGrpc.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Observer/obj/Release/net10.0/StellaOps.Zastava.Observer.GlobalUsings.g.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Observer/Posture/IRuntimePostureCache.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Observer/Posture/IRuntimePostureEvaluator.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Observer/Posture/RuntimePostureCache.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Observer/Posture/RuntimePostureCacheEntry.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Observer/Posture/RuntimePostureEvaluationResult.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Observer/Posture/RuntimePostureEvaluator.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Observer/Probes/EbpfProbeManager.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Observer/Runtime/ElfBuildIdReader.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Observer/Runtime/RuntimeEventBuffer.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Observer/Runtime/RuntimeFactsBuilder.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Observer/Runtime/RuntimeProcessCollector.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Observer/Runtime/ProcSnapshot/DotNetAssemblyCollector.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Observer/Runtime/ProcSnapshot/JavaClasspathCollector.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Observer/Runtime/ProcSnapshot/PhpAutoloadCollector.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Observer/Runtime/ProcSnapshot/ProcSnapshotCollector.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Observer/Secrets/ObserverSurfaceSecrets.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Observer/Surface/RuntimeSurfaceFsClient.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Observer/Worker/BackoffCalculator.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Observer/Worker/ContainerLifecycleHostedService.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Observer/Worker/ContainerRuntimePoller.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Observer/Worker/ObserverBootstrapService.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Observer/Worker/RuntimeEventDispatchService.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Observer/Worker/RuntimeEventFactory.cs: missing namespace
+- Using directive issues:
+  - none
+- Naming issues:
+  - none
+- Async issues:
+  - none
+- Service locator matches:
+  - none
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Normalize namespaces to file-scoped StellaOps.<Area>.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 50
+- Files with issues: 48
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| ../src/Zastava/StellaOps.Zastava.Observer/Backend/IRuntimePolicyClient.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/StellaOps.Zastava.Observer/Backend/RuntimeEventsClient.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/StellaOps.Zastava.Observer/Backend/RuntimeFactsClient.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/StellaOps.Zastava.Observer/Backend/RuntimePolicyClient.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/StellaOps.Zastava.Observer/Backend/RuntimePolicyContracts.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/StellaOps.Zastava.Observer/Backend/RuntimePolicyException.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/StellaOps.Zastava.Observer/Configuration/ReachabilityRuntimeOptions.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/StellaOps.Zastava.Observer/Configuration/ZastavaObserverOptions.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/StellaOps.Zastava.Observer/ContainerRuntime/ContainerStateTracker.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/StellaOps.Zastava.Observer/ContainerRuntime/ContainerStateTrackerFactory.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/StellaOps.Zastava.Observer/ContainerRuntime/Cri/CriConversions.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/StellaOps.Zastava.Observer/ContainerRuntime/Cri/CriModels.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/StellaOps.Zastava.Observer/ContainerRuntime/Cri/CriRuntimeClient.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/StellaOps.Zastava.Observer/ContainerRuntime/Cri/CriRuntimeClientFactory.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/StellaOps.Zastava.Observer/ContainerRuntime/Windows/DockerWindowsRuntimeClient.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/StellaOps.Zastava.Observer/ContainerRuntime/Windows/IWindowsContainerRuntimeClient.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/StellaOps.Zastava.Observer/ContainerRuntime/Windows/WindowsContainerInfo.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/StellaOps.Zastava.Observer/ContainerRuntime/Windows/WindowsLibraryHashCollector.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/StellaOps.Zastava.Observer/DependencyInjection/ObserverServiceCollectionExtensions.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/StellaOps.Zastava.Observer/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/StellaOps.Zastava.Observer/obj/Debug/net10.0/StellaOps.Zastava.Observer.AssemblyInfo.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/StellaOps.Zastava.Observer/obj/Debug/net10.0/StellaOps.Zastava.Observer.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/StellaOps.Zastava.Observer/obj/Debug/net10.0/Protos/runtime/v1/Runtime.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/StellaOps.Zastava.Observer/obj/Debug/net10.0/Protos/runtime/v1/RuntimeGrpc.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/StellaOps.Zastava.Observer/obj/Release/net10.0/StellaOps.Zastava.Observer.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/StellaOps.Zastava.Observer/Posture/IRuntimePostureCache.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/StellaOps.Zastava.Observer/Posture/IRuntimePostureEvaluator.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/StellaOps.Zastava.Observer/Posture/RuntimePostureCache.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/StellaOps.Zastava.Observer/Posture/RuntimePostureCacheEntry.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/StellaOps.Zastava.Observer/Posture/RuntimePostureEvaluationResult.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/StellaOps.Zastava.Observer/Posture/RuntimePostureEvaluator.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/StellaOps.Zastava.Observer/Probes/EbpfProbeManager.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/StellaOps.Zastava.Observer/Runtime/ElfBuildIdReader.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/StellaOps.Zastava.Observer/Runtime/RuntimeEventBuffer.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/StellaOps.Zastava.Observer/Runtime/RuntimeFactsBuilder.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/StellaOps.Zastava.Observer/Runtime/RuntimeProcessCollector.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/StellaOps.Zastava.Observer/Runtime/ProcSnapshot/DotNetAssemblyCollector.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/StellaOps.Zastava.Observer/Runtime/ProcSnapshot/JavaClasspathCollector.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/StellaOps.Zastava.Observer/Runtime/ProcSnapshot/PhpAutoloadCollector.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/StellaOps.Zastava.Observer/Runtime/ProcSnapshot/ProcSnapshotCollector.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/StellaOps.Zastava.Observer/Secrets/ObserverSurfaceSecrets.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/StellaOps.Zastava.Observer/Surface/RuntimeSurfaceFsClient.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/StellaOps.Zastava.Observer/Worker/BackoffCalculator.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/StellaOps.Zastava.Observer/Worker/ContainerLifecycleHostedService.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/StellaOps.Zastava.Observer/Worker/ContainerRuntimePoller.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/StellaOps.Zastava.Observer/Worker/ObserverBootstrapService.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/StellaOps.Zastava.Observer/Worker/RuntimeEventDispatchService.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/StellaOps.Zastava.Observer/Worker/RuntimeEventFactory.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+
+## Testing Fullness Findings
+- Status: PASS
+- Expected layers (heuristic): Unit
+- Detected test projects: ../src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/StellaOps.Zastava.Observer.Tests.csproj [Unit]
+- Missing layers: none
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- None.

docs-archived/implplan-blocked/audits/src/Zastava/StellaOps.Zastava.Webhook/StellaOps.Zastava.Webhook.csproj

@@ -0,0 +1,132 @@
+# Audit - StellaOps.Zastava.Webhook
+
+## Project
+- Path: ../src/Zastava/StellaOps.Zastava.Webhook/StellaOps.Zastava.Webhook.csproj
+- Module: ..
+- Kind: Library
+- Audit date (UTC): 2026-01-30
+- Files scanned: 32
+- Files with issues: 30
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true
+- Deterministic: inherited true
+- 100-line rule violations: 8
+- Namespace violations: 30
+- Using directive violations: 0
+- Naming violations (interfaces/fields/const/async): 0
+- Service locator usage (BuildServiceProvider/GetService): 0
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - ../src/Zastava/StellaOps.Zastava.Webhook/Admission/AdmissionResponseBuilder.cs (227 lines)
+  - ../src/Zastava/StellaOps.Zastava.Webhook/Admission/AdmissionReviewParser.cs (155 lines)
+  - ../src/Zastava/StellaOps.Zastava.Webhook/Admission/FacetAdmissionValidator.cs (253 lines)
+  - ../src/Zastava/StellaOps.Zastava.Webhook/Admission/RuntimeAdmissionPolicyService.cs (360 lines)
+  - ../src/Zastava/StellaOps.Zastava.Webhook/Backend/RuntimePolicyClient.cs (116 lines)
+  - ../src/Zastava/StellaOps.Zastava.Webhook/Certificates/SecretFileCertificateSource.cs (104 lines)
+  - ../src/Zastava/StellaOps.Zastava.Webhook/Configuration/ZastavaWebhookOptions.cs (180 lines)
+  - ../src/Zastava/StellaOps.Zastava.Webhook/DependencyInjection/ServiceCollectionExtensions.cs (128 lines)
+- Namespace issues:
+  - ../src/Zastava/StellaOps.Zastava.Webhook/Admission/AdmissionEndpoint.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Webhook/Admission/AdmissionRequestContext.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Webhook/Admission/AdmissionResponseBuilder.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Webhook/Admission/AdmissionReviewModels.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Webhook/Admission/AdmissionReviewParser.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Webhook/Admission/FacetAdmissionValidator.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Webhook/Admission/ImageDigestResolver.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Webhook/Admission/RuntimeAdmissionPolicyService.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Webhook/Admission/RuntimePolicyCache.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Webhook/Authority/AuthorityTokenProvider.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Webhook/Backend/IRuntimePolicyClient.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Webhook/Backend/RuntimePolicyClient.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Webhook/Backend/RuntimePolicyException.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Webhook/Backend/RuntimePolicyRequest.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Webhook/Backend/RuntimePolicyResponse.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Webhook/Certificates/CsrCertificateSource.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Webhook/Certificates/IWebhookCertificateProvider.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Webhook/Certificates/SecretFileCertificateSource.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Webhook/Certificates/WebhookCertificateHealthCheck.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Webhook/Configuration/ZastavaWebhookOptions.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Webhook/DependencyInjection/ServiceCollectionExtensions.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Webhook/DependencyInjection/WebhookRuntimeOptionsPostConfigure.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Webhook/Hosting/StartupValidationHostedService.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Webhook/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Webhook/obj/Debug/net10.0/StellaOps.Zastava.Webhook.AssemblyInfo.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Webhook/obj/Debug/net10.0/StellaOps.Zastava.Webhook.GlobalUsings.g.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Webhook/obj/Debug/net10.0/StellaOps.Zastava.Webhook.MvcApplicationPartsAssemblyInfo.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Webhook/obj/Release/net10.0/StellaOps.Zastava.Webhook.GlobalUsings.g.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Webhook/Secrets/WebhookSurfaceSecrets.cs: missing namespace
+  - ../src/Zastava/StellaOps.Zastava.Webhook/Surface/WebhookSurfaceFsClient.cs: missing namespace
+- Using directive issues:
+  - none
+- Naming issues:
+  - none
+- Async issues:
+  - none
+- Service locator matches:
+  - none
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Normalize namespaces to file-scoped StellaOps.<Area>.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 32
+- Files with issues: 30
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| ../src/Zastava/StellaOps.Zastava.Webhook/Admission/AdmissionEndpoint.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/StellaOps.Zastava.Webhook/Admission/AdmissionRequestContext.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/StellaOps.Zastava.Webhook/Admission/AdmissionResponseBuilder.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/StellaOps.Zastava.Webhook/Admission/AdmissionReviewModels.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/StellaOps.Zastava.Webhook/Admission/AdmissionReviewParser.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/StellaOps.Zastava.Webhook/Admission/FacetAdmissionValidator.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/StellaOps.Zastava.Webhook/Admission/ImageDigestResolver.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/StellaOps.Zastava.Webhook/Admission/RuntimeAdmissionPolicyService.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/StellaOps.Zastava.Webhook/Admission/RuntimePolicyCache.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/StellaOps.Zastava.Webhook/Authority/AuthorityTokenProvider.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/StellaOps.Zastava.Webhook/Backend/IRuntimePolicyClient.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/StellaOps.Zastava.Webhook/Backend/RuntimePolicyClient.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/StellaOps.Zastava.Webhook/Backend/RuntimePolicyException.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/StellaOps.Zastava.Webhook/Backend/RuntimePolicyRequest.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/StellaOps.Zastava.Webhook/Backend/RuntimePolicyResponse.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/StellaOps.Zastava.Webhook/Certificates/CsrCertificateSource.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/StellaOps.Zastava.Webhook/Certificates/IWebhookCertificateProvider.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/StellaOps.Zastava.Webhook/Certificates/SecretFileCertificateSource.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/StellaOps.Zastava.Webhook/Certificates/WebhookCertificateHealthCheck.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/StellaOps.Zastava.Webhook/Configuration/ZastavaWebhookOptions.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/StellaOps.Zastava.Webhook/DependencyInjection/ServiceCollectionExtensions.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/StellaOps.Zastava.Webhook/DependencyInjection/WebhookRuntimeOptionsPostConfigure.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/StellaOps.Zastava.Webhook/Hosting/StartupValidationHostedService.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/StellaOps.Zastava.Webhook/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/StellaOps.Zastava.Webhook/obj/Debug/net10.0/StellaOps.Zastava.Webhook.AssemblyInfo.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/StellaOps.Zastava.Webhook/obj/Debug/net10.0/StellaOps.Zastava.Webhook.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/StellaOps.Zastava.Webhook/obj/Debug/net10.0/StellaOps.Zastava.Webhook.MvcApplicationPartsAssemblyInfo.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/StellaOps.Zastava.Webhook/obj/Release/net10.0/StellaOps.Zastava.Webhook.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/StellaOps.Zastava.Webhook/Secrets/WebhookSurfaceSecrets.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/StellaOps.Zastava.Webhook/Surface/WebhookSurfaceFsClient.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+
+## Testing Fullness Findings
+- Status: PASS
+- Expected layers (heuristic): Unit
+- Detected test projects: ../src/Zastava/__Tests/StellaOps.Zastava.Webhook.Tests/StellaOps.Zastava.Webhook.Tests.csproj [Unit]
+- Missing layers: none
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- None.

docs-archived/implplan-blocked/audits/src/Zastava/__Libraries/StellaOps.Zastava.Core/StellaOps.Zastava.Core.csproj

@@ -0,0 +1,125 @@
+# Audit - StellaOps.Zastava.Core
+
+## Project
+- Path: ../src/Zastava/__Libraries/StellaOps.Zastava.Core/StellaOps.Zastava.Core.csproj
+- Module: ..
+- Kind: Library
+- Audit date (UTC): 2026-01-30
+- Files scanned: 28
+- Files with issues: 26
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit true
+- Deterministic: inherited true
+- 100-line rule violations: 9
+- Namespace violations: 26
+- Using directive violations: 0
+- Naming violations (interfaces/fields/const/async): 0
+- Service locator usage (BuildServiceProvider/GetService): 0
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - ../src/Zastava/__Libraries/StellaOps.Zastava.Core/Configuration/ZastavaRuntimeOptions.cs (150 lines)
+  - ../src/Zastava/__Libraries/StellaOps.Zastava.Core/Contracts/RuntimeEvent.cs (189 lines)
+  - ../src/Zastava/__Libraries/StellaOps.Zastava.Core/Contracts/ZastavaContractVersions.cs (174 lines)
+  - ../src/Zastava/__Libraries/StellaOps.Zastava.Core/DependencyInjection/ZastavaServiceCollectionExtensions.cs (119 lines)
+  - ../src/Zastava/__Libraries/StellaOps.Zastava.Core/Http/OfflineStrictModeHandler.cs (148 lines)
+  - ../src/Zastava/__Libraries/StellaOps.Zastava.Core/Security/ZastavaAuthorityTokenProvider.cs (315 lines)
+  - ../src/Zastava/__Libraries/StellaOps.Zastava.Core/Serialization/ZastavaCanonicalJsonSerializer.cs (120 lines)
+  - ../src/Zastava/__Libraries/StellaOps.Zastava.Core/Validation/SurfaceCacheValidator.cs (186 lines)
+  - ../src/Zastava/__Libraries/StellaOps.Zastava.Core/Verdicts/VerdictObserverContracts.cs (246 lines)
+- Namespace issues:
+  - ../src/Zastava/__Libraries/StellaOps.Zastava.Core/Configuration/ZastavaAuthorityOptions.cs: missing namespace
+  - ../src/Zastava/__Libraries/StellaOps.Zastava.Core/Configuration/ZastavaRuntimeOptions.cs: missing namespace
+  - ../src/Zastava/__Libraries/StellaOps.Zastava.Core/Configuration/ZastavaSurfaceSecretsOptions.cs: missing namespace
+  - ../src/Zastava/__Libraries/StellaOps.Zastava.Core/Contracts/AdmissionDecision.cs: missing namespace
+  - ../src/Zastava/__Libraries/StellaOps.Zastava.Core/Contracts/RuntimeEvent.cs: missing namespace
+  - ../src/Zastava/__Libraries/StellaOps.Zastava.Core/Contracts/ZastavaContractVersions.cs: missing namespace
+  - ../src/Zastava/__Libraries/StellaOps.Zastava.Core/DependencyInjection/ZastavaServiceCollectionExtensions.cs: missing namespace
+  - ../src/Zastava/__Libraries/StellaOps.Zastava.Core/Diagnostics/ZastavaLoggerFactoryOptionsConfigurator.cs: missing namespace
+  - ../src/Zastava/__Libraries/StellaOps.Zastava.Core/Diagnostics/ZastavaLogScopeBuilder.cs: missing namespace
+  - ../src/Zastava/__Libraries/StellaOps.Zastava.Core/Diagnostics/ZastavaRuntimeMetrics.cs: missing namespace
+  - ../src/Zastava/__Libraries/StellaOps.Zastava.Core/Hashing/ZastavaHashing.cs: missing namespace
+  - ../src/Zastava/__Libraries/StellaOps.Zastava.Core/Http/OfflineStrictModeHandler.cs: missing namespace
+  - ../src/Zastava/__Libraries/StellaOps.Zastava.Core/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs: missing namespace
+  - ../src/Zastava/__Libraries/StellaOps.Zastava.Core/obj/Debug/net10.0/StellaOps.Zastava.Core.AssemblyInfo.cs: missing namespace
+  - ../src/Zastava/__Libraries/StellaOps.Zastava.Core/obj/Debug/net10.0/StellaOps.Zastava.Core.GlobalUsings.g.cs: missing namespace
+  - ../src/Zastava/__Libraries/StellaOps.Zastava.Core/obj/Release/net10.0/StellaOps.Zastava.Core.GlobalUsings.g.cs: missing namespace
+  - ../src/Zastava/__Libraries/StellaOps.Zastava.Core/Security/IZastavaAuthorityTokenProvider.cs: missing namespace
+  - ../src/Zastava/__Libraries/StellaOps.Zastava.Core/Security/ZastavaAuthorityTokenProvider.cs: missing namespace
+  - ../src/Zastava/__Libraries/StellaOps.Zastava.Core/Security/ZastavaContractValidator.cs: missing namespace
+  - ../src/Zastava/__Libraries/StellaOps.Zastava.Core/Security/ZastavaOperationalToken.cs: missing namespace
+  - ../src/Zastava/__Libraries/StellaOps.Zastava.Core/Serialization/ZastavaCanonicalJsonSerializer.cs: missing namespace
+  - ../src/Zastava/__Libraries/StellaOps.Zastava.Core/Validation/SurfaceCacheValidator.cs: missing namespace
+  - ../src/Zastava/__Libraries/StellaOps.Zastava.Core/Verdicts/IVerdictLedger.cs: missing namespace
+  - ../src/Zastava/__Libraries/StellaOps.Zastava.Core/Verdicts/IVerdictObserver.cs: missing namespace
+  - ../src/Zastava/__Libraries/StellaOps.Zastava.Core/Verdicts/IVerdictValidator.cs: missing namespace
+  - ../src/Zastava/__Libraries/StellaOps.Zastava.Core/Verdicts/VerdictObserverContracts.cs: missing namespace
+- Using directive issues:
+  - none
+- Naming issues:
+  - none
+- Async issues:
+  - none
+- Service locator matches:
+  - none
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Normalize namespaces to file-scoped StellaOps.<Area>.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 28
+- Files with issues: 26
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| ../src/Zastava/__Libraries/StellaOps.Zastava.Core/Configuration/ZastavaAuthorityOptions.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/__Libraries/StellaOps.Zastava.Core/Configuration/ZastavaRuntimeOptions.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/__Libraries/StellaOps.Zastava.Core/Configuration/ZastavaSurfaceSecretsOptions.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/__Libraries/StellaOps.Zastava.Core/Contracts/AdmissionDecision.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/__Libraries/StellaOps.Zastava.Core/Contracts/RuntimeEvent.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/__Libraries/StellaOps.Zastava.Core/Contracts/ZastavaContractVersions.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/__Libraries/StellaOps.Zastava.Core/DependencyInjection/ZastavaServiceCollectionExtensions.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/__Libraries/StellaOps.Zastava.Core/Diagnostics/ZastavaLoggerFactoryOptionsConfigurator.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/__Libraries/StellaOps.Zastava.Core/Diagnostics/ZastavaLogScopeBuilder.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/__Libraries/StellaOps.Zastava.Core/Diagnostics/ZastavaRuntimeMetrics.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/__Libraries/StellaOps.Zastava.Core/Hashing/ZastavaHashing.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/__Libraries/StellaOps.Zastava.Core/Http/OfflineStrictModeHandler.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/__Libraries/StellaOps.Zastava.Core/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/__Libraries/StellaOps.Zastava.Core/obj/Debug/net10.0/StellaOps.Zastava.Core.AssemblyInfo.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/__Libraries/StellaOps.Zastava.Core/obj/Debug/net10.0/StellaOps.Zastava.Core.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/__Libraries/StellaOps.Zastava.Core/obj/Release/net10.0/StellaOps.Zastava.Core.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/__Libraries/StellaOps.Zastava.Core/Security/IZastavaAuthorityTokenProvider.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/__Libraries/StellaOps.Zastava.Core/Security/ZastavaAuthorityTokenProvider.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/__Libraries/StellaOps.Zastava.Core/Security/ZastavaContractValidator.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/__Libraries/StellaOps.Zastava.Core/Security/ZastavaOperationalToken.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/__Libraries/StellaOps.Zastava.Core/Serialization/ZastavaCanonicalJsonSerializer.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/__Libraries/StellaOps.Zastava.Core/Validation/SurfaceCacheValidator.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/__Libraries/StellaOps.Zastava.Core/Verdicts/IVerdictLedger.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/__Libraries/StellaOps.Zastava.Core/Verdicts/IVerdictObserver.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/__Libraries/StellaOps.Zastava.Core/Verdicts/IVerdictValidator.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/__Libraries/StellaOps.Zastava.Core/Verdicts/VerdictObserverContracts.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+
+## Testing Fullness Findings
+- Status: PASS
+- Expected layers (heuristic): Unit
+- Detected test projects: ../src/Zastava/__Tests/StellaOps.Zastava.Core.Tests/StellaOps.Zastava.Core.Tests.csproj [Unit]
+- Missing layers: none
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- None.

docs-archived/implplan-blocked/audits/src/Zastava/__Tests/StellaOps.Zastava.Core.Tests/StellaOps.Zastava.Core.Tests.csproj

@@ -0,0 +1,96 @@
+# Audit - StellaOps.Zastava.Core.Tests
+
+## Project
+- Path: ../src/Zastava/__Tests/StellaOps.Zastava.Core.Tests/StellaOps.Zastava.Core.Tests.csproj
+- Module: ..
+- Kind: Library
+- Audit date (UTC): 2026-01-30
+- Files scanned: 11
+- Files with issues: 11
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit false
+- Deterministic: inherited true
+- 100-line rule violations: 5
+- Namespace violations: 11
+- Using directive violations: 0
+- Naming violations (interfaces/fields/const/async): 0
+- Service locator usage (BuildServiceProvider/GetService): 3
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Core.Tests/Contracts/ZastavaContractVersionsTests.cs (102 lines)
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Core.Tests/DependencyInjection/ZastavaServiceCollectionExtensionsTests.cs (123 lines)
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Core.Tests/Security/ZastavaAuthorityTokenProviderTests.cs (229 lines)
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Core.Tests/Serialization/ZastavaCanonicalJsonSerializerTests.cs (196 lines)
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Core.Tests/Validation/OfflineStrictModeTests.cs (429 lines)
+- Namespace issues:
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Core.Tests/Contracts/ZastavaContractVersionsTests.cs: missing namespace
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Core.Tests/DependencyInjection/ZastavaServiceCollectionExtensionsTests.cs: missing namespace
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Core.Tests/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs: missing namespace
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Core.Tests/obj/Debug/net10.0/SelfRegisteredExtensions.cs: missing namespace
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Core.Tests/obj/Debug/net10.0/StellaOps.Zastava.Core.Tests.AssemblyInfo.cs: missing namespace
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Core.Tests/obj/Debug/net10.0/StellaOps.Zastava.Core.Tests.GlobalUsings.g.cs: missing namespace
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Core.Tests/obj/Debug/net10.0/XunitAutoGeneratedEntryPoint.cs: missing namespace
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Core.Tests/obj/Release/net10.0/StellaOps.Zastava.Core.Tests.GlobalUsings.g.cs: missing namespace
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Core.Tests/Security/ZastavaAuthorityTokenProviderTests.cs: missing namespace
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Core.Tests/Serialization/ZastavaCanonicalJsonSerializerTests.cs: missing namespace
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Core.Tests/Validation/OfflineStrictModeTests.cs: missing namespace
+- Using directive issues:
+  - none
+- Naming issues:
+  - none
+- Async issues:
+  - none
+- Service locator matches:
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Core.Tests/DependencyInjection/ZastavaServiceCollectionExtensionsTests.cs:40 using var provider = services.BuildServiceProvider();
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Core.Tests/DependencyInjection/ZastavaServiceCollectionExtensionsTests.cs:118 using var provider = services.BuildServiceProvider();
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Core.Tests/Validation/OfflineStrictModeTests.cs:337 using var provider = services.BuildServiceProvider();
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Normalize namespaces to file-scoped StellaOps.<Area>.
+- Remove overrides that disable TreatWarningsAsErrors.
+- Replace service locator usage with constructor injection.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 11
+- Files with issues: 11
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| ../src/Zastava/__Tests/StellaOps.Zastava.Core.Tests/Contracts/ZastavaContractVersionsTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/__Tests/StellaOps.Zastava.Core.Tests/DependencyInjection/ZastavaServiceCollectionExtensionsTests.cs | FileLength>100; NamespaceMissing; ServiceLocator | Add file-scoped namespace: namespace StellaOps.<Area>;; Remove service locator usage; use constructor injection.; Split file to stay <= 100 lines. |
+| ../src/Zastava/__Tests/StellaOps.Zastava.Core.Tests/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/__Tests/StellaOps.Zastava.Core.Tests/obj/Debug/net10.0/SelfRegisteredExtensions.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/__Tests/StellaOps.Zastava.Core.Tests/obj/Debug/net10.0/StellaOps.Zastava.Core.Tests.AssemblyInfo.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/__Tests/StellaOps.Zastava.Core.Tests/obj/Debug/net10.0/StellaOps.Zastava.Core.Tests.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/__Tests/StellaOps.Zastava.Core.Tests/obj/Debug/net10.0/XunitAutoGeneratedEntryPoint.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/__Tests/StellaOps.Zastava.Core.Tests/obj/Release/net10.0/StellaOps.Zastava.Core.Tests.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/__Tests/StellaOps.Zastava.Core.Tests/Security/ZastavaAuthorityTokenProviderTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/__Tests/StellaOps.Zastava.Core.Tests/Serialization/ZastavaCanonicalJsonSerializerTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/__Tests/StellaOps.Zastava.Core.Tests/Validation/OfflineStrictModeTests.cs | FileLength>100; NamespaceMissing; ServiceLocator | Add file-scoped namespace: namespace StellaOps.<Area>;; Remove service locator usage; use constructor injection.; Split file to stay <= 100 lines. |
+
+## Testing Fullness Findings
+- Status: FAIL
+- Expected layers (heuristic): Unit
+- Detected test projects: none
+- Missing layers: Unit
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- Add or expand test projects to cover missing layers.
+- Ensure tests use deterministic fixtures and offline harnesses.

docs-archived/implplan-blocked/audits/src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/StellaOps.Zastava.Observer.Tests.csproj

@@ -0,0 +1,117 @@
+# Audit - StellaOps.Zastava.Observer.Tests
+
+## Project
+- Path: ../src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/StellaOps.Zastava.Observer.Tests.csproj
+- Module: ..
+- Kind: Library
+- Audit date (UTC): 2026-01-30
+- Files scanned: 19
+- Files with issues: 19
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit false
+- Deterministic: inherited true
+- 100-line rule violations: 8
+- Namespace violations: 19
+- Using directive violations: 0
+- Naming violations (interfaces/fields/const/async): 0
+- Service locator usage (BuildServiceProvider/GetService): 5
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/ContainerRuntimePollerTests.cs (293 lines)
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/ContainerRuntime/Windows/WindowsContainerRuntimeTests.cs (398 lines)
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/Posture/RuntimePostureEvaluatorTests.cs (204 lines)
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/Runtime/RuntimeEventBufferTests.cs (219 lines)
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/Runtime/RuntimeProcessCollectorTests.cs (157 lines)
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/Secrets/ObserverSurfaceSecretsTests.cs (150 lines)
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/Surface/RuntimeSurfaceFsClientTests.cs (204 lines)
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/Worker/RuntimeEventFactoryTests.cs (113 lines)
+- Namespace issues:
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/ContainerRuntimePollerTests.cs: missing namespace
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/Backend/RuntimeEventsClientTests.cs: missing namespace
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/ContainerRuntime/Windows/WindowsContainerRuntimeTests.cs: missing namespace
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/DependencyInjection/SurfaceEnvironmentRegistrationTests.cs: missing namespace
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs: missing namespace
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/obj/Debug/net10.0/SelfRegisteredExtensions.cs: missing namespace
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/obj/Debug/net10.0/StellaOps.Zastava.Observer.Tests.AssemblyInfo.cs: missing namespace
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/obj/Debug/net10.0/StellaOps.Zastava.Observer.Tests.GlobalUsings.g.cs: missing namespace
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/obj/Debug/net10.0/XunitAutoGeneratedEntryPoint.cs: missing namespace
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/obj/Release/net10.0/StellaOps.Zastava.Observer.Tests.GlobalUsings.g.cs: missing namespace
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/Posture/RuntimePostureEvaluatorTests.cs: missing namespace
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/Runtime/ElfBuildIdReaderTests.cs: missing namespace
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/Runtime/RuntimeEventBufferTests.cs: missing namespace
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/Runtime/RuntimeFactsBuilderTests.cs: missing namespace
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/Runtime/RuntimeProcessCollectorTests.cs: missing namespace
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/Secrets/ObserverSurfaceSecretsTests.cs: missing namespace
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/Surface/RuntimeSurfaceFsClientTests.cs: missing namespace
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/TestSupport/ElfTestFileBuilder.cs: missing namespace
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/Worker/RuntimeEventFactoryTests.cs: missing namespace
+- Using directive issues:
+  - none
+- Naming issues:
+  - none
+- Async issues:
+  - none
+- Service locator matches:
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/DependencyInjection/SurfaceEnvironmentRegistrationTests.cs:46 using var provider = services.BuildServiceProvider();
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/Secrets/ObserverSurfaceSecretsTests.cs:62 using var provider = services.BuildServiceProvider();
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/Secrets/ObserverSurfaceSecretsTests.cs:110 using var provider = services.BuildServiceProvider();
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/Surface/RuntimeSurfaceFsClientTests.cs:63 using var provider = services.BuildServiceProvider();
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/Surface/RuntimeSurfaceFsClientTests.cs:129 using var provider = services.BuildServiceProvider();
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Normalize namespaces to file-scoped StellaOps.<Area>.
+- Remove overrides that disable TreatWarningsAsErrors.
+- Replace service locator usage with constructor injection.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 19
+- Files with issues: 19
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| ../src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/ContainerRuntimePollerTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/Backend/RuntimeEventsClientTests.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/ContainerRuntime/Windows/WindowsContainerRuntimeTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/DependencyInjection/SurfaceEnvironmentRegistrationTests.cs | NamespaceMissing; ServiceLocator | Add file-scoped namespace: namespace StellaOps.<Area>;; Remove service locator usage; use constructor injection. |
+| ../src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/obj/Debug/net10.0/SelfRegisteredExtensions.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/obj/Debug/net10.0/StellaOps.Zastava.Observer.Tests.AssemblyInfo.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/obj/Debug/net10.0/StellaOps.Zastava.Observer.Tests.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/obj/Debug/net10.0/XunitAutoGeneratedEntryPoint.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/obj/Release/net10.0/StellaOps.Zastava.Observer.Tests.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/Posture/RuntimePostureEvaluatorTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/Runtime/ElfBuildIdReaderTests.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/Runtime/RuntimeEventBufferTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/Runtime/RuntimeFactsBuilderTests.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/Runtime/RuntimeProcessCollectorTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/Secrets/ObserverSurfaceSecretsTests.cs | FileLength>100; NamespaceMissing; ServiceLocator | Add file-scoped namespace: namespace StellaOps.<Area>;; Remove service locator usage; use constructor injection.; Split file to stay <= 100 lines. |
+| ../src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/Surface/RuntimeSurfaceFsClientTests.cs | FileLength>100; NamespaceMissing; ServiceLocator | Add file-scoped namespace: namespace StellaOps.<Area>;; Remove service locator usage; use constructor injection.; Split file to stay <= 100 lines. |
+| ../src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/TestSupport/ElfTestFileBuilder.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/__Tests/StellaOps.Zastava.Observer.Tests/Worker/RuntimeEventFactoryTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+
+## Testing Fullness Findings
+- Status: FAIL
+- Expected layers (heuristic): Unit
+- Detected test projects: none
+- Missing layers: Unit
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- Add or expand test projects to cover missing layers.
+- Ensure tests use deterministic fixtures and offline harnesses.

docs-archived/implplan-blocked/audits/src/Zastava/__Tests/StellaOps.Zastava.Webhook.Tests/StellaOps.Zastava.Webhook.Tests.csproj

@@ -0,0 +1,109 @@
+# Audit - StellaOps.Zastava.Webhook.Tests
+
+## Project
+- Path: ../src/Zastava/__Tests/StellaOps.Zastava.Webhook.Tests/StellaOps.Zastava.Webhook.Tests.csproj
+- Module: ..
+- Kind: Library
+- Audit date (UTC): 2026-01-30
+- Files scanned: 16
+- Files with issues: 16
+- File-level report: docs/implplan/audits/csproj-standards/file-audit.csv
+
+## Coding Standards Findings
+- Status: FAIL
+- Nullable: enable
+- TreatWarningsAsErrors: explicit false
+- Deterministic: inherited true
+- 100-line rule violations: 8
+- Namespace violations: 16
+- Using directive violations: 0
+- Naming violations (interfaces/fields/const/async): 0
+- Service locator usage (BuildServiceProvider/GetService): 3
+- Assembly.LoadFrom usage: 0
+
+### Details
+- 100-line files:
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Webhook.Tests/Admission/AdmissionResponseBuilderTests.cs (230 lines)
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Webhook.Tests/Admission/AdmissionReviewParserTests.cs (103 lines)
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Webhook.Tests/Admission/FacetAdmissionValidatorTests.cs (394 lines)
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Webhook.Tests/Admission/RuntimeAdmissionPolicyServiceTests.cs (358 lines)
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Webhook.Tests/Backend/RuntimePolicyClientTests.cs (199 lines)
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Webhook.Tests/DependencyInjection/SurfaceEnvironmentRegistrationTests.cs (113 lines)
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Webhook.Tests/DependencyInjection/SurfaceSecretsRegistrationTests.cs (104 lines)
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Webhook.Tests/Surface/WebhookSurfaceFsClientTests.cs (125 lines)
+- Namespace issues:
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Webhook.Tests/Admission/AdmissionResponseBuilderTests.cs: missing namespace
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Webhook.Tests/Admission/AdmissionReviewParserTests.cs: missing namespace
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Webhook.Tests/Admission/FacetAdmissionValidatorTests.cs: missing namespace
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Webhook.Tests/Admission/RuntimeAdmissionPolicyServiceTests.cs: missing namespace
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Webhook.Tests/Backend/RuntimePolicyClientTests.cs: missing namespace
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Webhook.Tests/Certificates/SecretFileCertificateSourceTests.cs: missing namespace
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Webhook.Tests/Certificates/WebhookCertificateProviderTests.cs: missing namespace
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Webhook.Tests/DependencyInjection/SurfaceEnvironmentRegistrationTests.cs: missing namespace
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Webhook.Tests/DependencyInjection/SurfaceSecretsRegistrationTests.cs: missing namespace
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Webhook.Tests/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs: missing namespace
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Webhook.Tests/obj/Debug/net10.0/SelfRegisteredExtensions.cs: missing namespace
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Webhook.Tests/obj/Debug/net10.0/StellaOps.Zastava.Webhook.Tests.AssemblyInfo.cs: missing namespace
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Webhook.Tests/obj/Debug/net10.0/StellaOps.Zastava.Webhook.Tests.GlobalUsings.g.cs: missing namespace
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Webhook.Tests/obj/Debug/net10.0/XunitAutoGeneratedEntryPoint.cs: missing namespace
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Webhook.Tests/obj/Release/net10.0/StellaOps.Zastava.Webhook.Tests.GlobalUsings.g.cs: missing namespace
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Webhook.Tests/Surface/WebhookSurfaceFsClientTests.cs: missing namespace
+- Using directive issues:
+  - none
+- Naming issues:
+  - none
+- Async issues:
+  - none
+- Service locator matches:
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Webhook.Tests/DependencyInjection/SurfaceEnvironmentRegistrationTests.cs:66 using var provider = services.BuildServiceProvider();
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Webhook.Tests/DependencyInjection/SurfaceSecretsRegistrationTests.cs:64 using var provider = services.BuildServiceProvider();
+  - ../src/Zastava/__Tests/StellaOps.Zastava.Webhook.Tests/Surface/WebhookSurfaceFsClientTests.cs:62 using var provider = services.BuildServiceProvider();
+- Assembly.LoadFrom matches:
+  - none
+
+### Fix Guidance
+- Normalize namespaces to file-scoped StellaOps.<Area>.
+- Remove overrides that disable TreatWarningsAsErrors.
+- Replace service locator usage with constructor injection.
+- Split files over 100 lines into smaller types or partials.
+
+## File-Level Findings
+- Status: FAIL
+- Files scanned: 16
+- Files with issues: 16
+- See docs/implplan/audits/csproj-standards/file-audit.csv for full per-file status.
+
+| File | Issues | Fix guidance |
+| --- | --- | --- |
+| ../src/Zastava/__Tests/StellaOps.Zastava.Webhook.Tests/Admission/AdmissionResponseBuilderTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/__Tests/StellaOps.Zastava.Webhook.Tests/Admission/AdmissionReviewParserTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/__Tests/StellaOps.Zastava.Webhook.Tests/Admission/FacetAdmissionValidatorTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/__Tests/StellaOps.Zastava.Webhook.Tests/Admission/RuntimeAdmissionPolicyServiceTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/__Tests/StellaOps.Zastava.Webhook.Tests/Backend/RuntimePolicyClientTests.cs | FileLength>100; NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>;; Split file to stay <= 100 lines. |
+| ../src/Zastava/__Tests/StellaOps.Zastava.Webhook.Tests/Certificates/SecretFileCertificateSourceTests.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/__Tests/StellaOps.Zastava.Webhook.Tests/Certificates/WebhookCertificateProviderTests.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/__Tests/StellaOps.Zastava.Webhook.Tests/DependencyInjection/SurfaceEnvironmentRegistrationTests.cs | FileLength>100; NamespaceMissing; ServiceLocator | Add file-scoped namespace: namespace StellaOps.<Area>;; Remove service locator usage; use constructor injection.; Split file to stay <= 100 lines. |
+| ../src/Zastava/__Tests/StellaOps.Zastava.Webhook.Tests/DependencyInjection/SurfaceSecretsRegistrationTests.cs | FileLength>100; NamespaceMissing; ServiceLocator | Add file-scoped namespace: namespace StellaOps.<Area>;; Remove service locator usage; use constructor injection.; Split file to stay <= 100 lines. |
+| ../src/Zastava/__Tests/StellaOps.Zastava.Webhook.Tests/obj/Debug/net10.0/.NETCoreApp,Version=v10.0.AssemblyAttributes.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/__Tests/StellaOps.Zastava.Webhook.Tests/obj/Debug/net10.0/SelfRegisteredExtensions.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/__Tests/StellaOps.Zastava.Webhook.Tests/obj/Debug/net10.0/StellaOps.Zastava.Webhook.Tests.AssemblyInfo.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/__Tests/StellaOps.Zastava.Webhook.Tests/obj/Debug/net10.0/StellaOps.Zastava.Webhook.Tests.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/__Tests/StellaOps.Zastava.Webhook.Tests/obj/Debug/net10.0/XunitAutoGeneratedEntryPoint.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/__Tests/StellaOps.Zastava.Webhook.Tests/obj/Release/net10.0/StellaOps.Zastava.Webhook.Tests.GlobalUsings.g.cs | NamespaceMissing | Add file-scoped namespace: namespace StellaOps.<Area>; |
+| ../src/Zastava/__Tests/StellaOps.Zastava.Webhook.Tests/Surface/WebhookSurfaceFsClientTests.cs | FileLength>100; NamespaceMissing; ServiceLocator | Add file-scoped namespace: namespace StellaOps.<Area>;; Remove service locator usage; use constructor injection.; Split file to stay <= 100 lines. |
+
+## Testing Fullness Findings
+- Status: FAIL
+- Expected layers (heuristic): Unit
+- Detected test projects: none
+- Missing layers: Unit
+
+### Manual checks required
+- Observability contract tests for WebService/Worker.
+- Intent tags for regulatory modules (Policy, Authority, Signer, Attestor, EvidenceLocker).
+- Offline execution (tests must run without network access).
+- Coverage matrix alignment (docs/technical/testing/TEST_COVERAGE_MATRIX.md).
+
+### Fix Guidance
+- Add or expand test projects to cover missing layers.
+- Ensure tests use deterministic fixtures and offline harnesses.