stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 2 Releases Wiki Activity

Doctor plugin checks: implement health check classes and documentation

Browse Source 
Implement remediation-aware health checks across all Doctor plugin modules
(Agent, Attestor, Auth, BinaryAnalysis, Compliance, Crypto, Environment,
EvidenceLocker, Notify, Observability, Operations, Policy, Postgres, Release,
Scanner, Storage, Vex) and their backing library counterparts (AI, Attestation,
Authority, Core, Cryptography, Database, Docker, Integration, Notify,
Observability, Security, ServiceGraph, Sources, Verification).

Each check now emits structured remediation metadata (severity, category,
runbook links, and fix suggestions) consumed by the Doctor dashboard
remediation panel.

Also adds:
- docs/doctor/articles/ knowledge base for check explanations
- Advisory AI search seed and allowlist updates for doctor content
- Sprint plan for doctor checks documentation

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
master
2026-03-27 12:28:00 +02:00
parent fbd24e71de
commit c58a236d70
326 changed files with 18500 additions and 463 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
src/__Libraries/StellaOps.Doctor.Plugins.Cryptography/Checks/CryptoLicenseCheck.cs
View File

@@ -99,7 +99,8 @@ public sealed class CryptoLicenseCheck : IDoctorCheck
.WithRemediation(r => r
.AddManualStep(1, "Verify license", "Check license file exists and is valid")
.AddManualStep(2, "Renew license", "Contact vendor to renew expired licenses")
.AddManualStep(3, "Configure license path", "Set Cryptography:<Provider>:LicensePath in configuration"))
.AddManualStep(3, "Configure license path", "Set Cryptography:<Provider>:LicensePath in configuration")
.WithRunbookUrl("docs/doctor/articles/crypto/crypto-license.md"))
.WithVerification("stella doctor --check check.crypto.license")
.Build());
}

3
src/__Libraries/StellaOps.Doctor.Plugins.Cryptography/Checks/CryptoProCheck.cs
View File

@@ -154,7 +154,8 @@ public sealed class CryptoProCheck : IDoctorCheck
.WithRemediation(r => r
.AddManualStep(1, "Install CryptoPro", "Download and install CryptoPro CSP from cryptopro.ru")
.AddManualStep(2, "Set build flag", "Set STELLAOPS_CRYPTO_PRO=1 environment variable")
.AddManualStep(3, "Configure license", "Configure Cryptography:CryptoPro:LicensePath"))
.AddManualStep(3, "Configure license", "Configure Cryptography:CryptoPro:LicensePath")
.WithRunbookUrl("docs/doctor/articles/crypto/crypto-cryptopro.md"))
.WithVerification("stella doctor --check check.crypto.cryptopro")
.Build());
}

3
src/__Libraries/StellaOps.Doctor.Plugins.Cryptography/Checks/CryptoProviderAvailabilityCheck.cs
View File

@@ -113,7 +113,8 @@ public sealed class CryptoProviderAvailabilityCheck : IDoctorCheck
.WithCauses(issues.ToArray())
.WithRemediation(r => r
.AddManualStep(1, "Check runtime", "Ensure .NET runtime supports required algorithms")
.AddManualStep(2, "Install providers", "Install additional crypto libraries if needed"))
.AddManualStep(2, "Install providers", "Install additional crypto libraries if needed")
.WithRunbookUrl("docs/doctor/articles/crypto/crypto-provider.md"))
.WithVerification("stella doctor --check check.crypto.provider")
.Build());
}

3
src/__Libraries/StellaOps.Doctor.Plugins.Cryptography/Checks/EidasProviderCheck.cs
View File

@@ -91,7 +91,8 @@ public sealed class EidasProviderCheck : IDoctorCheck
.WithCauses(issues.ToArray())
.WithRemediation(r => r
.AddManualStep(1, "Configure provider", "Configure PKCS#11 library or certificate store for eIDAS")
.AddManualStep(2, "Verify trust list", "Ensure EU Trust List is accessible"))
.AddManualStep(2, "Verify trust list", "Ensure EU Trust List is accessible")
.WithRunbookUrl("docs/doctor/articles/crypto/crypto-eidas.md"))
.WithVerification("stella doctor --check check.crypto.eidas")
.Build());
}

3
src/__Libraries/StellaOps.Doctor.Plugins.Cryptography/Checks/FipsComplianceCheck.cs
View File

@@ -55,7 +55,8 @@ public sealed class FipsComplianceCheck : IDoctorCheck
.WithCauses("System FIPS mode is not enabled but configuration requires it")
.WithRemediation(r => r
.AddManualStep(1, "Enable FIPS on Windows", "Set FIPS security policy in Windows Group Policy")
.AddManualStep(2, "Enable FIPS on Linux", "Configure system crypto policy with fips-mode-setup"))
.AddManualStep(2, "Enable FIPS on Linux", "Configure system crypto policy with fips-mode-setup")
.WithRunbookUrl("docs/doctor/articles/crypto/crypto-fips.md"))
.WithVerification("stella doctor --check check.crypto.fips")
.Build());
}

3
src/__Libraries/StellaOps.Doctor.Plugins.Cryptography/Checks/GostProviderCheck.cs
View File

@@ -97,7 +97,8 @@ public sealed class GostProviderCheck : IDoctorCheck
.WithCauses(issues.ToArray())
.WithRemediation(r => r
.AddManualStep(1, "Install provider", "Install the configured GOST provider (OpenSSL GOST engine, CryptoPro CSP, or PKCS#11)")
.AddManualStep(2, "Configure endpoint", "For remote providers, configure the service endpoint"))
.AddManualStep(2, "Configure endpoint", "For remote providers, configure the service endpoint")
.WithRunbookUrl("docs/doctor/articles/crypto/crypto-gost.md"))
.WithVerification("stella doctor --check check.crypto.gost")
.Build());
}

3
src/__Libraries/StellaOps.Doctor.Plugins.Cryptography/Checks/HsmConnectivityCheck.cs
View File

@@ -115,7 +115,8 @@ public sealed class HsmConnectivityCheck : IDoctorCheck
.WithRemediation(r => r
.AddManualStep(1, "Install PKCS#11 library", "Ensure the HSM PKCS#11 library is installed")
.AddManualStep(2, "Check connectivity", "Verify network/USB connectivity to HSM")
.AddManualStep(3, "Verify credentials", "Ensure HSM credentials are configured"))
.AddManualStep(3, "Verify credentials", "Ensure HSM credentials are configured")
.WithRunbookUrl("docs/doctor/articles/crypto/crypto-hsm.md"))
.WithVerification("stella doctor --check check.crypto.hsm")
.Build());
}

3
src/__Libraries/StellaOps.Doctor.Plugins.Cryptography/Checks/SmProviderCheck.cs
View File

@@ -93,7 +93,8 @@ public sealed class SmProviderCheck : IDoctorCheck
.WithCauses(issues.ToArray())
.WithRemediation(r => r
.AddManualStep(1, "Set environment gate", "Set SM_SOFT_ALLOWED=1 to enable SM software providers")
.AddManualStep(2, "Configure SmRemote", "Configure SmRemote:Endpoint for remote SM crypto service"))
.AddManualStep(2, "Configure SmRemote", "Configure SmRemote:Endpoint for remote SM crypto service")
.WithRunbookUrl("docs/doctor/articles/crypto/crypto-sm.md"))
.WithVerification("stella doctor --check check.crypto.sm")
.Build());
}