save checkpoint

This commit is contained in:
master
2026-02-11 01:32:14 +02:00
parent 5593212b41
commit cf5b72974f
2316 changed files with 68799 additions and 3808 deletions

View File

@@ -80,6 +80,21 @@ Stella Ops Suite organizes capabilities into **themes** (functional areas):
| **Experience** | `StellaOps.Web`, `StellaOps.Cli`, `StellaOps.Notify`, `StellaOps.ExportCenter` | Operator UX, automation, notifications |
| **Data Plane** | PostgreSQL, Valkey, RustFS/object storage | Canonical store, queues, artifact storage |
### Ownership Clarifications
- **Ingress/routing**: Gateway is the single HTTP ingress and Router is the
internal service transport.
- **Promotion policy gates**: Policy Engine owns PASS/FAIL decision semantics;
Concelier remains ingestion/linkset only.
- **Environment topology and promotion lanes**: owned by Release Orchestrator
ENVMGR/PROMOT tracks (not Cartographer).
See:
- `docs/modules/gateway/architecture.md`
- `docs/modules/router/README.md`
- `docs/modules/policy/promotion-gate-ownership-contract.md`
- `docs/modules/release-orchestrator/promotion-runtime-gap-closure-plan.md`
## Infrastructure (What Is Required)
**Required**

View File

@@ -50,3 +50,79 @@ Tests: PASS (101/101 cryptography tests pass)
All plugins implemented (GOST, SM2, eIDAS, FIPS, HSM) with real cryptographic operations using BouncyCastle, .NET crypto, Pkcs11Interop. PQC enum values exist but no dedicated plugin. Status note: "PARTIALLY" remains accurate since PQC is not implemented.
Verdict: PASS
## Recheck (Run-002)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (`src/Cryptography/__Tests/StellaOps.Cryptography.Tests`: 101/101).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/cryptography/additional-crypto-profiles/run-002/tier2-integration-check.json`
- **Outcome**: Additional profile plugin coverage remains stable; PQC plugin caveat unchanged.
## Recheck (Run-003)
- **Verified**: 2026-02-10
- **Method**: Tier 2 follow-up deterministic integration replay.
- **Tests**: PASS (`src/Cryptography/__Tests/StellaOps.Cryptography.Tests`: 101/101).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/cryptography/additional-crypto-profiles/run-003/tier2-integration-check.json`
- **Outcome**: Profile coverage remains stable; PQC caveat remains unchanged.
## Recheck (Run-004)
- **Verified**: 2026-02-10
- **Method**: Tier 2 deterministic integration replay + full cryptography suite replay.
- **Tests**: PASS (`src/Cryptography/__Tests/StellaOps.Cryptography.Tests`: 101/101).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/cryptography/additional-crypto-profiles/run-004/tier2-integration-check.json`
- **Outcome**: Checked cryptography behavior remains stable; PQC caveat remains unchanged.
## Recheck (Run-005)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/Cryptography/__Tests/StellaOps.Cryptography.Tests: 101/101).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/cryptography/additional-crypto-profiles/run-005/tier2-integration-check.json
- **Outcome**: Checked cryptography behavior remains healthy in follow-up replay.
## Recheck (Run-006)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/Cryptography/__Tests/StellaOps.Cryptography.Tests: 101/101).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/cryptography/additional-crypto-profiles/run-006/tier2-integration-check.json
- **Outcome**: Checked cryptography behavior remains healthy in continued replay.
## Recheck (Run-007)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/Cryptography/__Tests/StellaOps.Cryptography.Tests: 101/101).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/cryptography/additional-crypto-profiles/run-007/tier2-integration-check.json
- **Outcome**: Checked cryptography behavior remains healthy in continued replay.
## Recheck (Run-008)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/Cryptography/__Tests/StellaOps.Cryptography.Tests: 101/101).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/cryptography/additional-crypto-profiles/run-008/tier2-integration-check.json
- **Outcome**: Checked cryptography behavior remains healthy in continued replay.
## Recheck (Run-009)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/Cryptography/__Tests/StellaOps.Cryptography.Tests: 101/101).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/cryptography/additional-crypto-profiles/run-009/tier2-integration-check.json
- **Outcome**: Checked cryptography behavior remains healthy in continued replay.
## Recheck (Run-010)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/Cryptography/__Tests/StellaOps.Cryptography.Tests: 101/101).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/cryptography/additional-crypto-profiles/run-010/tier2-integration-check.json
- **Outcome**: Checked cryptography behavior remains healthy in continued replay.
## Recheck (Run-011)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/Cryptography/__Tests/StellaOps.Cryptography.Tests: 101/101).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/cryptography/additional-crypto-profiles/run-011/tier2-integration-check.json
- **Outcome**: Checked cryptography behavior remains healthy in continued replay.
## Recheck (Run-012)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic cryptography suite replay.
- **Tests**: PASS (src/Cryptography/__Tests/StellaOps.Cryptography.Tests: 101/101).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/cryptography/additional-crypto-profiles/run-012/tier2-integration-check.json
- **Outcome**: Checked cryptography behavior remains healthy in continued replay.

View File

@@ -44,3 +44,79 @@ Tests: PASS (101/101 cryptography tests pass)
CryptoPluginBase provides complete abstract base with lifecycle management. All 5 plugins extend it properly. MultiProfileSigner orchestrates concurrent signing via Task.WhenAll. Tests validate model layer.
Verdict: PASS
## Recheck (Run-002)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (`src/Cryptography/__Tests/StellaOps.Cryptography.Tests`: 101/101).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/cryptography/crypto-provider-plugin-architecture/run-002/tier2-integration-check.json`
- **Outcome**: Plugin architecture and multi-profile signer behavior remain verified.
## Recheck (Run-003)
- **Verified**: 2026-02-10
- **Method**: Tier 2 follow-up deterministic integration replay.
- **Tests**: PASS (`src/Cryptography/__Tests/StellaOps.Cryptography.Tests`: 101/101).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/cryptography/crypto-provider-plugin-architecture/run-003/tier2-integration-check.json`
- **Outcome**: Crypto provider plugin architecture remains stable in follow-up replay.
## Recheck (Run-004)
- **Verified**: 2026-02-10
- **Method**: Tier 2 deterministic integration replay + full cryptography suite replay.
- **Tests**: PASS (`src/Cryptography/__Tests/StellaOps.Cryptography.Tests`: 101/101).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/cryptography/crypto-provider-plugin-architecture/run-004/tier2-integration-check.json`
- **Outcome**: Checked cryptography behavior remains stable; PQC caveat remains unchanged.
## Recheck (Run-005)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/Cryptography/__Tests/StellaOps.Cryptography.Tests: 101/101).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/cryptography/crypto-provider-plugin-architecture/run-005/tier2-integration-check.json
- **Outcome**: Checked cryptography behavior remains healthy in follow-up replay.
## Recheck (Run-006)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/Cryptography/__Tests/StellaOps.Cryptography.Tests: 101/101).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/cryptography/crypto-provider-plugin-architecture/run-006/tier2-integration-check.json
- **Outcome**: Checked cryptography behavior remains healthy in continued replay.
## Recheck (Run-007)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/Cryptography/__Tests/StellaOps.Cryptography.Tests: 101/101).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/cryptography/crypto-provider-plugin-architecture/run-007/tier2-integration-check.json
- **Outcome**: Checked cryptography behavior remains healthy in continued replay.
## Recheck (Run-008)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/Cryptography/__Tests/StellaOps.Cryptography.Tests: 101/101).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/cryptography/crypto-provider-plugin-architecture/run-008/tier2-integration-check.json
- **Outcome**: Checked cryptography behavior remains healthy in continued replay.
## Recheck (Run-009)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/Cryptography/__Tests/StellaOps.Cryptography.Tests: 101/101).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/cryptography/crypto-provider-plugin-architecture/run-009/tier2-integration-check.json
- **Outcome**: Checked cryptography behavior remains healthy in continued replay.
## Recheck (Run-010)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/Cryptography/__Tests/StellaOps.Cryptography.Tests: 101/101).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/cryptography/crypto-provider-plugin-architecture/run-010/tier2-integration-check.json
- **Outcome**: Checked cryptography behavior remains healthy in continued replay.
## Recheck (Run-011)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/Cryptography/__Tests/StellaOps.Cryptography.Tests: 101/101).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/cryptography/crypto-provider-plugin-architecture/run-011/tier2-integration-check.json
- **Outcome**: Checked cryptography behavior remains healthy in continued replay.
## Recheck (Run-012)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic cryptography suite replay.
- **Tests**: PASS (src/Cryptography/__Tests/StellaOps.Cryptography.Tests: 101/101).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/cryptography/crypto-provider-plugin-architecture/run-012/tier2-integration-check.json
- **Outcome**: Checked cryptography behavior remains healthy in continued replay.

View File

@@ -45,3 +45,79 @@ Tests: PASS (101/101 cryptography tests pass)
Most thoroughly implemented feature. QualifiedTimestampVerifier decodes RFC 3161 timestamps via SignedCms, verifies CMS signature, parses TSTInfo ASN.1. EuTrustListService fetches LOTL from EU URL, parses ETSI TS 119 612 XML, supports offline path for air-gap. TimestampModeSelector policy-based with env/tag/repo pattern matching. CadesSignatureBuilder creates CAdES-B/T/LT/LTA. 26 unit tests across QualifiedTsaProviderTests (14) and TimestampModeSelectorTests (12).
Verdict: PASS
## Recheck (Run-002)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (`src/Cryptography/__Tests/StellaOps.Cryptography.Tests`: 101/101).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/cryptography/eidas-qualified-timestamping/run-002/tier2-integration-check.json`
- **Outcome**: eIDAS qualified timestamping and trust-list flows remain stable.
## Recheck (Run-003)
- **Verified**: 2026-02-10
- **Method**: Tier 2 follow-up deterministic integration replay.
- **Tests**: PASS (`src/Cryptography/__Tests/StellaOps.Cryptography.Tests`: 101/101).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/cryptography/eidas-qualified-timestamping/run-003/tier2-integration-check.json`
- **Outcome**: eIDAS timestamping and trust-list behavior remains stable in follow-up replay.
## Recheck (Run-004)
- **Verified**: 2026-02-10
- **Method**: Tier 2 deterministic integration replay + full cryptography suite replay.
- **Tests**: PASS (`src/Cryptography/__Tests/StellaOps.Cryptography.Tests`: 101/101).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/cryptography/eidas-qualified-timestamping/run-004/tier2-integration-check.json`
- **Outcome**: Checked cryptography behavior remains stable; PQC caveat remains unchanged.
## Recheck (Run-005)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/Cryptography/__Tests/StellaOps.Cryptography.Tests: 101/101).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/cryptography/eidas-qualified-timestamping/run-005/tier2-integration-check.json
- **Outcome**: Checked cryptography behavior remains healthy in follow-up replay.
## Recheck (Run-006)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/Cryptography/__Tests/StellaOps.Cryptography.Tests: 101/101).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/cryptography/eidas-qualified-timestamping/run-006/tier2-integration-check.json
- **Outcome**: Checked cryptography behavior remains healthy in continued replay.
## Recheck (Run-007)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/Cryptography/__Tests/StellaOps.Cryptography.Tests: 101/101).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/cryptography/eidas-qualified-timestamping/run-007/tier2-integration-check.json
- **Outcome**: Checked cryptography behavior remains healthy in continued replay.
## Recheck (Run-008)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/Cryptography/__Tests/StellaOps.Cryptography.Tests: 101/101).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/cryptography/eidas-qualified-timestamping/run-008/tier2-integration-check.json
- **Outcome**: Checked cryptography behavior remains healthy in continued replay.
## Recheck (Run-009)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/Cryptography/__Tests/StellaOps.Cryptography.Tests: 101/101).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/cryptography/eidas-qualified-timestamping/run-009/tier2-integration-check.json
- **Outcome**: Checked cryptography behavior remains healthy in continued replay.
## Recheck (Run-010)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/Cryptography/__Tests/StellaOps.Cryptography.Tests: 101/101).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/cryptography/eidas-qualified-timestamping/run-010/tier2-integration-check.json
- **Outcome**: Checked cryptography behavior remains healthy in continued replay.
## Recheck (Run-011)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/Cryptography/__Tests/StellaOps.Cryptography.Tests: 101/101).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/cryptography/eidas-qualified-timestamping/run-011/tier2-integration-check.json
- **Outcome**: Checked cryptography behavior remains healthy in continued replay.
## Recheck (Run-012)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic cryptography suite replay.
- **Tests**: PASS (src/Cryptography/__Tests/StellaOps.Cryptography.Tests: 101/101).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/cryptography/eidas-qualified-timestamping/run-012/tier2-integration-check.json
- **Outcome**: Checked cryptography behavior remains healthy in continued replay.

View File

@@ -40,3 +40,79 @@ Tests: PASS (101/101 cryptography tests pass)
HSM plugin fully implemented with PKCS#11 support (session pooling, multi-slot failover, key attribute validation). Simulation mode for development. Integration tests use SoftHSM2 when available. Signer infrastructure connects crypto plugins to DSSE signing pipeline.
Verdict: PASS
## Recheck (Run-002)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (`src/Cryptography/__Tests/StellaOps.Cryptography.Tests`: 101/101).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/cryptography/hardware-backed-org-key-kms-signing/run-002/tier2-integration-check.json`
- **Outcome**: Hardware-backed profile behavior remains stable in current test matrix.
## Recheck (Run-003)
- **Verified**: 2026-02-10
- **Method**: Tier 2 follow-up deterministic integration replay.
- **Tests**: PASS (`src/Cryptography/__Tests/StellaOps.Cryptography.Tests`: 101/101).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/cryptography/hardware-backed-org-key-kms-signing/run-003/tier2-integration-check.json`
- **Outcome**: Hardware-backed org-key profile behavior remains stable in follow-up replay.
## Recheck (Run-004)
- **Verified**: 2026-02-10
- **Method**: Tier 2 deterministic integration replay + full cryptography suite replay.
- **Tests**: PASS (`src/Cryptography/__Tests/StellaOps.Cryptography.Tests`: 101/101).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/cryptography/hardware-backed-org-key-kms-signing/run-004/tier2-integration-check.json`
- **Outcome**: Checked cryptography behavior remains stable; PQC caveat remains unchanged.
## Recheck (Run-005)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/Cryptography/__Tests/StellaOps.Cryptography.Tests: 101/101).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/cryptography/hardware-backed-org-key-kms-signing/run-005/tier2-integration-check.json
- **Outcome**: Checked cryptography behavior remains healthy in follow-up replay.
## Recheck (Run-006)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/Cryptography/__Tests/StellaOps.Cryptography.Tests: 101/101).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/cryptography/hardware-backed-org-key-kms-signing/run-006/tier2-integration-check.json
- **Outcome**: Checked cryptography behavior remains healthy in continued replay.
## Recheck (Run-007)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/Cryptography/__Tests/StellaOps.Cryptography.Tests: 101/101).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/cryptography/hardware-backed-org-key-kms-signing/run-007/tier2-integration-check.json
- **Outcome**: Checked cryptography behavior remains healthy in continued replay.
## Recheck (Run-008)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/Cryptography/__Tests/StellaOps.Cryptography.Tests: 101/101).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/cryptography/hardware-backed-org-key-kms-signing/run-008/tier2-integration-check.json
- **Outcome**: Checked cryptography behavior remains healthy in continued replay.
## Recheck (Run-009)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/Cryptography/__Tests/StellaOps.Cryptography.Tests: 101/101).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/cryptography/hardware-backed-org-key-kms-signing/run-009/tier2-integration-check.json
- **Outcome**: Checked cryptography behavior remains healthy in continued replay.
## Recheck (Run-010)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/Cryptography/__Tests/StellaOps.Cryptography.Tests: 101/101).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/cryptography/hardware-backed-org-key-kms-signing/run-010/tier2-integration-check.json
- **Outcome**: Checked cryptography behavior remains healthy in continued replay.
## Recheck (Run-011)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/Cryptography/__Tests/StellaOps.Cryptography.Tests: 101/101).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/cryptography/hardware-backed-org-key-kms-signing/run-011/tier2-integration-check.json
- **Outcome**: Checked cryptography behavior remains healthy in continued replay.
## Recheck (Run-012)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic cryptography suite replay.
- **Tests**: PASS (src/Cryptography/__Tests/StellaOps.Cryptography.Tests: 101/101).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/cryptography/hardware-backed-org-key-kms-signing/run-012/tier2-integration-check.json
- **Outcome**: Checked cryptography behavior remains healthy in continued replay.

View File

@@ -41,3 +41,79 @@ Tests: PASS (101/101 cryptography tests pass)
Pkcs11HsmClientImpl is a 723-line production implementation using Pkcs11Interop with session pooling (SlotContext with ConcurrentBag), multi-slot failover with health monitoring, key search by CKA_LABEL or CKA_ID, key attribute validation. SimulatedHsmClient provides functional RSA+AES operations for testing. SoftHSM2 integration tests.
Verdict: PASS
## Recheck (Run-002)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (`src/Cryptography/__Tests/StellaOps.Cryptography.Tests`: 101/101).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/cryptography/hsm-integration/run-002/tier2-integration-check.json`
- **Outcome**: PKCS#11 integration behavior remains stable with existing SoftHSM safeguards.
## Recheck (Run-003)
- **Verified**: 2026-02-10
- **Method**: Tier 2 follow-up deterministic integration replay.
- **Tests**: PASS (`src/Cryptography/__Tests/StellaOps.Cryptography.Tests`: 101/101).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/cryptography/hsm-integration/run-003/tier2-integration-check.json`
- **Outcome**: HSM integration paths remain stable with existing SoftHSM safeguards.
## Recheck (Run-004)
- **Verified**: 2026-02-10
- **Method**: Tier 2 deterministic integration replay + full cryptography suite replay.
- **Tests**: PASS (`src/Cryptography/__Tests/StellaOps.Cryptography.Tests`: 101/101).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/cryptography/hsm-integration/run-004/tier2-integration-check.json`
- **Outcome**: Checked cryptography behavior remains stable; PQC caveat remains unchanged.
## Recheck (Run-005)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/Cryptography/__Tests/StellaOps.Cryptography.Tests: 101/101).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/cryptography/hsm-integration/run-005/tier2-integration-check.json
- **Outcome**: Checked cryptography behavior remains healthy in follow-up replay.
## Recheck (Run-006)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/Cryptography/__Tests/StellaOps.Cryptography.Tests: 101/101).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/cryptography/hsm-integration/run-006/tier2-integration-check.json
- **Outcome**: Checked cryptography behavior remains healthy in continued replay.
## Recheck (Run-007)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/Cryptography/__Tests/StellaOps.Cryptography.Tests: 101/101).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/cryptography/hsm-integration/run-007/tier2-integration-check.json
- **Outcome**: Checked cryptography behavior remains healthy in continued replay.
## Recheck (Run-008)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/Cryptography/__Tests/StellaOps.Cryptography.Tests: 101/101).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/cryptography/hsm-integration/run-008/tier2-integration-check.json
- **Outcome**: Checked cryptography behavior remains healthy in continued replay.
## Recheck (Run-009)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/Cryptography/__Tests/StellaOps.Cryptography.Tests: 101/101).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/cryptography/hsm-integration/run-009/tier2-integration-check.json
- **Outcome**: Checked cryptography behavior remains healthy in continued replay.
## Recheck (Run-010)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/Cryptography/__Tests/StellaOps.Cryptography.Tests: 101/101).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/cryptography/hsm-integration/run-010/tier2-integration-check.json
- **Outcome**: Checked cryptography behavior remains healthy in continued replay.
## Recheck (Run-011)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/Cryptography/__Tests/StellaOps.Cryptography.Tests: 101/101).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/cryptography/hsm-integration/run-011/tier2-integration-check.json
- **Outcome**: Checked cryptography behavior remains healthy in continued replay.
## Recheck (Run-012)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic cryptography suite replay.
- **Tests**: PASS (src/Cryptography/__Tests/StellaOps.Cryptography.Tests: 101/101).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/cryptography/hsm-integration/run-012/tier2-integration-check.json
- **Outcome**: Checked cryptography behavior remains healthy in continued replay.

View File

@@ -45,3 +45,79 @@ Tests: PASS (101/101 cryptography tests pass)
All 5 regional crypto profiles (FIPS, GOST, eIDAS, SM, HSM) fully implemented as plugins extending CryptoPluginBase. Each uses real cryptographic libraries. Ed25519Signer uses libsodium. EcdsaP256Signer uses .NET ECDsa. MultiProfileSigner enables dual-stack signing. Tests cover model validation, eIDAS timestamping, HSM integration.
Verdict: PASS
## Recheck (Run-002)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (`src/Cryptography/__Tests/StellaOps.Cryptography.Tests`: 101/101).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/cryptography/regional-crypto-profiles/run-002/tier2-integration-check.json`
- **Outcome**: Regional profile matrix remains stable with no checked-status gaps detected.
## Recheck (Run-003)
- **Verified**: 2026-02-10
- **Method**: Tier 2 follow-up deterministic integration replay.
- **Tests**: PASS (`src/Cryptography/__Tests/StellaOps.Cryptography.Tests`: 101/101).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/cryptography/regional-crypto-profiles/run-003/tier2-integration-check.json`
- **Outcome**: Regional crypto profile matrix behavior remains stable in follow-up replay.
## Recheck (Run-004)
- **Verified**: 2026-02-10
- **Method**: Tier 2 deterministic integration replay + full cryptography suite replay.
- **Tests**: PASS (`src/Cryptography/__Tests/StellaOps.Cryptography.Tests`: 101/101).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/cryptography/regional-crypto-profiles/run-004/tier2-integration-check.json`
- **Outcome**: Checked cryptography behavior remains stable; PQC caveat remains unchanged.
## Recheck (Run-005)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/Cryptography/__Tests/StellaOps.Cryptography.Tests: 101/101).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/cryptography/regional-crypto-profiles/run-005/tier2-integration-check.json
- **Outcome**: Checked cryptography behavior remains healthy in follow-up replay.
## Recheck (Run-006)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/Cryptography/__Tests/StellaOps.Cryptography.Tests: 101/101).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/cryptography/regional-crypto-profiles/run-006/tier2-integration-check.json
- **Outcome**: Checked cryptography behavior remains healthy in continued replay.
## Recheck (Run-007)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/Cryptography/__Tests/StellaOps.Cryptography.Tests: 101/101).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/cryptography/regional-crypto-profiles/run-007/tier2-integration-check.json
- **Outcome**: Checked cryptography behavior remains healthy in continued replay.
## Recheck (Run-008)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/Cryptography/__Tests/StellaOps.Cryptography.Tests: 101/101).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/cryptography/regional-crypto-profiles/run-008/tier2-integration-check.json
- **Outcome**: Checked cryptography behavior remains healthy in continued replay.
## Recheck (Run-009)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/Cryptography/__Tests/StellaOps.Cryptography.Tests: 101/101).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/cryptography/regional-crypto-profiles/run-009/tier2-integration-check.json
- **Outcome**: Checked cryptography behavior remains healthy in continued replay.
## Recheck (Run-010)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/Cryptography/__Tests/StellaOps.Cryptography.Tests: 101/101).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/cryptography/regional-crypto-profiles/run-010/tier2-integration-check.json
- **Outcome**: Checked cryptography behavior remains healthy in continued replay.
## Recheck (Run-011)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/Cryptography/__Tests/StellaOps.Cryptography.Tests: 101/101).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/cryptography/regional-crypto-profiles/run-011/tier2-integration-check.json
- **Outcome**: Checked cryptography behavior remains healthy in continued replay.
## Recheck (Run-012)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic cryptography suite replay.
- **Tests**: PASS (src/Cryptography/__Tests/StellaOps.Cryptography.Tests: 101/101).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/cryptography/regional-crypto-profiles/run-012/tier2-integration-check.json
- **Outcome**: Checked cryptography behavior remains healthy in continued replay.

View File

@@ -33,3 +33,65 @@ HELLO frame processing for microservice registration, connection lifecycle manag
- GatewayHealthMonitorService: Real BackgroundService checking stale/degraded connections based on configurable thresholds.
- Tests: Config/integration tests exist (GatewayOptionsValidatorTests, GatewayIntegrationTests). Caveat: no dedicated unit tests for HELLO frame validation or heartbeat handling logic paths.
- **Verdict**: PASS
## Tier 2 Recheck (2026-02-10)
- **Run ID**: run-003
- **Result**: PASS
- **What was rechecked**: Added deterministic lifecycle regression coverage for `GatewayHostedService` HELLO/heartbeat/disconnect behavior and reran full Gateway suite.
- **Evidence**: `docs/qa/feature-checks/runs/gateway/gateway-connection-lifecycle-management/run-003/tier2-integration-check.json`
## Recheck (run-005)
- **Date**: 2026-02-10
- **Result**: PASS
- **Verification**: Connection lifecycle regression coverage and hosted-service state transitions remain stable.
- **Tests**: Gateway.WebService.Tests 259/259, Router Gateway WebService.Tests 160/160, Router.Gateway.Tests 13/13 (432 total).
- **Evidence**: `docs/qa/feature-checks/runs/gateway/gateway-connection-lifecycle-management/run-005/tier2-integration-check.json`
## Recheck (Run-006)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay + full Gateway/Router matrix.
- **Tests**: PASS (`src/Gateway/__Tests/StellaOps.Gateway.WebService.Tests`: 259/259; `src/Router/__Tests/StellaOps.Gateway.WebService.Tests`: 160/160; `src/Router/__Tests/StellaOps.Router.Gateway.Tests`: 13/13).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/gateway/gateway-connection-lifecycle-management/run-006/tier2-integration-check.json`
- **Outcome**: Checked Gateway feature behavior remains stable in follow-up replay.
## Recheck (Run-007)
- **Verified**: 2026-02-10
- **Method**: Tier 2 integration replay.
- **Tests**: PASS (src/Gateway/__Tests/StellaOps.Gateway.WebService.Tests: 259/259; src/Router/__Tests/StellaOps.Gateway.WebService.Tests: 160/160; src/Router/__Tests/StellaOps.Router.Gateway.Tests: 13/13).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/gateway/gateway-connection-lifecycle-management/run-007/tier2-integration-check.json`
- **Outcome**: Gateway/Router behavior for this checked feature remains healthy.
## Recheck (Run-008)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay with deterministic Gateway+Router suite verification.
- **Tests**: PASS (src/Gateway/__Tests/StellaOps.Gateway.WebService.Tests: 259/259; src/Router/__Tests/StellaOps.Gateway.WebService.Tests: 160/160; src/Router/__Tests/StellaOps.Router.Gateway.Tests: 13/13).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/gateway/gateway-connection-lifecycle-management/run-008/tier2-integration-check.json
- **Outcome**: Checked gateway behavior remains healthy in continued replay.
## Recheck (Run-009)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay with deterministic Gateway+Router suite verification.
- **Tests**: PASS (src/Gateway/__Tests/StellaOps.Gateway.WebService.Tests: 259/259; src/Router/__Tests/StellaOps.Gateway.WebService.Tests: 160/160; src/Router/__Tests/StellaOps.Router.Gateway.Tests: 13/13).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/gateway/gateway-connection-lifecycle-management/run-009/tier2-integration-check.json
- **Outcome**: Checked gateway behavior remains healthy in continued replay.
## Recheck (Run-010)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Gateway.WebService.Tests 259/259, Router.Gateway.WebService.Tests 160/160, Router.Gateway.Tests 13/13).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/gateway/gateway-connection-lifecycle-management/run-010/tier2-integration-check.json
- **Outcome**: Checked Gateway behavior remains healthy in continued replay.
## Recheck (Run-011)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Gateway.WebService 259/259, Router.Gateway.WebService 160/160, Router.Gateway 13/13; total 432/432).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/gateway/gateway-connection-lifecycle-management/run-011/tier2-integration-check.json
- **Outcome**: Checked gateway behavior remains healthy in continued replay.
## Recheck (Run-012)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Gateway.WebService 259/259, Router.Gateway.WebService 160/160, Router.Gateway 13/13; total 432/432).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/gateway/gateway-connection-lifecycle-management/run-012/tier2-integration-check.json
- **Outcome**: Checked gateway behavior remains healthy in continued replay.

View File

@@ -41,3 +41,73 @@ Full HTTP middleware pipeline for the Gateway WebService including endpoint reso
- 7 test files with 50+ test methods: AuthorizationMiddlewareTests (8 tests), ClaimsPropagationMiddlewareTests (8 tests), CorrelationIdMiddlewareTests (4 tests), GatewayRoutesTests (6 tests), TenantMiddlewareTests (6 tests), IdentityHeaderPolicyMiddlewareTests (18+ tests), GatewayIntegrationTests (11 tests).
- All tests assert meaningful outcomes (403 status codes, header values, claim matching, tenant extraction).
- **Verdict**: PASS
## Tier 2 Recheck (2026-02-10)
- **Run ID**: run-003
- **Result**: PASS
- **What was rechecked**: Live API replay for `/health*`, `/openapi*`, `/.well-known/openapi`, `/metrics`, unknown route 404 behavior, and correlation-id echo.
- **Evidence**: `docs/qa/feature-checks/runs/gateway/gateway-http-middleware-pipeline/run-003/tier2-api-check.json`
## Recheck (run-005)
- **Date**: 2026-02-10
- **Result**: PASS
- **Verification**: HTTP middleware pipeline behavior remains stable across health/openapi/metrics/not-found/correlation paths.
- **Tests**: Gateway.WebService.Tests 259/259, Router Gateway WebService.Tests 160/160, Router.Gateway.Tests 13/13 (432 total).
- **Evidence**: `docs/qa/feature-checks/runs/gateway/gateway-http-middleware-pipeline/run-005/tier2-integration-check.json`
## Recheck (Run-006)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay + full Gateway/Router matrix.
- **Tests**: PASS (`src/Gateway/__Tests/StellaOps.Gateway.WebService.Tests`: 259/259; `src/Router/__Tests/StellaOps.Gateway.WebService.Tests`: 160/160; `src/Router/__Tests/StellaOps.Router.Gateway.Tests`: 13/13).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/gateway/gateway-http-middleware-pipeline/run-006/tier2-integration-check.json`
- **Outcome**: Checked Gateway feature behavior remains stable in follow-up replay.
## Recheck (Run-007)
- **Verified**: 2026-02-10
- **Method**: Tier 2 integration replay.
- **Tests**: PASS (src/Gateway/__Tests/StellaOps.Gateway.WebService.Tests: 259/259; src/Router/__Tests/StellaOps.Gateway.WebService.Tests: 160/160; src/Router/__Tests/StellaOps.Router.Gateway.Tests: 13/13).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/gateway/gateway-http-middleware-pipeline/run-007/tier2-integration-check.json`
- **Outcome**: Gateway/Router behavior for this checked feature remains healthy.
## Recheck (Run-008)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay with deterministic Gateway+Router suite verification.
- **Tests**: PASS (src/Gateway/__Tests/StellaOps.Gateway.WebService.Tests: 259/259; src/Router/__Tests/StellaOps.Gateway.WebService.Tests: 160/160; src/Router/__Tests/StellaOps.Router.Gateway.Tests: 13/13).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/gateway/gateway-http-middleware-pipeline/run-008/tier2-integration-check.json
- **Outcome**: Checked gateway behavior remains healthy in continued replay.
## Recheck (Run-009)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay with deterministic Gateway+Router suite verification.
- **Tests**: PASS (src/Gateway/__Tests/StellaOps.Gateway.WebService.Tests: 259/259; src/Router/__Tests/StellaOps.Gateway.WebService.Tests: 160/160; src/Router/__Tests/StellaOps.Router.Gateway.Tests: 13/13).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/gateway/gateway-http-middleware-pipeline/run-009/tier2-integration-check.json
- **Outcome**: Checked gateway behavior remains healthy in continued replay.
## Recheck (Run-010)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Gateway.WebService.Tests 259/259, Router.Gateway.WebService.Tests 160/160, Router.Gateway.Tests 13/13).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/gateway/gateway-http-middleware-pipeline/run-010/tier2-integration-check.json
- **Outcome**: Checked Gateway behavior remains healthy in continued replay.
## Recheck (Run-011)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Gateway.WebService 259/259, Router.Gateway.WebService 160/160, Router.Gateway 13/13; total 432/432).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/gateway/gateway-http-middleware-pipeline/run-011/tier2-integration-check.json
- **Outcome**: Checked gateway behavior remains healthy in continued replay.
## Recheck (Run-012)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Gateway.WebService 259/259, Router.Gateway.WebService 160/160, Router.Gateway 13/13; total 432/432).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/gateway/gateway-http-middleware-pipeline/run-012/tier2-integration-check.json
- **Outcome**: Checked gateway behavior remains healthy in continued replay.
## Recheck (Run-013)
- **Verified**: 2026-02-10
- **Method**: Tier 2a live API verification with fresh request/response captures.
- **Tests**: PASS (Gateway.WebService 259/259).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/gateway/gateway-http-middleware-pipeline/run-013/tier2-api-check.json
- **Captured Requests**: `/health`, `/openapi/v1.json` (404), `/openapi.json`, `/openapi.yaml`, `/.well-known/openapi`, `/metrics`, `/__qa_missing_route__` (404), correlation-id echo on `/health`.
- **Outcome**: Middleware pipeline behavior revalidated from live user-surface HTTP transactions.

View File

@@ -34,3 +34,65 @@ Security middleware that enforces identity header integrity at the Gateway/Route
- IdentityHeaderPolicyMiddlewareTests (502 lines, 18+ tests): Security-focused assertions verifying spoofed headers are replaced, raw claim headers stripped, scopes sorted deterministically, system paths bypass processing.
- Strongest test coverage in the module.
- **Verdict**: PASS
## Tier 2 Recheck (2026-02-10)
- **Run ID**: run-003
- **Result**: PASS
- **What was rechecked**: Spoofed identity-header request path replay plus regression-suite confirmation for identity header strip/overwrite behavior.
- **Evidence**: `docs/qa/feature-checks/runs/gateway/gateway-identity-header-strip-and-overwrite-policy-middleware/run-003/tier2-integration-check.json`
## Recheck (run-005)
- **Date**: 2026-02-10
- **Result**: PASS
- **Verification**: Identity header strip/overwrite anti-spoofing behavior remains stable.
- **Tests**: Gateway.WebService.Tests 259/259, Router Gateway WebService.Tests 160/160, Router.Gateway.Tests 13/13 (432 total).
- **Evidence**: `docs/qa/feature-checks/runs/gateway/gateway-identity-header-strip-and-overwrite-policy-middleware/run-005/tier2-integration-check.json`
## Recheck (Run-006)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay + full Gateway/Router matrix.
- **Tests**: PASS (`src/Gateway/__Tests/StellaOps.Gateway.WebService.Tests`: 259/259; `src/Router/__Tests/StellaOps.Gateway.WebService.Tests`: 160/160; `src/Router/__Tests/StellaOps.Router.Gateway.Tests`: 13/13).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/gateway/gateway-identity-header-strip-and-overwrite-policy-middleware/run-006/tier2-integration-check.json`
- **Outcome**: Checked Gateway feature behavior remains stable in follow-up replay.
## Recheck (Run-007)
- **Verified**: 2026-02-10
- **Method**: Tier 2 integration replay.
- **Tests**: PASS (src/Gateway/__Tests/StellaOps.Gateway.WebService.Tests: 259/259; src/Router/__Tests/StellaOps.Gateway.WebService.Tests: 160/160; src/Router/__Tests/StellaOps.Router.Gateway.Tests: 13/13).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/gateway/gateway-identity-header-strip-and-overwrite-policy-middleware/run-007/tier2-integration-check.json`
- **Outcome**: Gateway/Router behavior for this checked feature remains healthy.
## Recheck (Run-008)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay with deterministic Gateway+Router suite verification.
- **Tests**: PASS (src/Gateway/__Tests/StellaOps.Gateway.WebService.Tests: 259/259; src/Router/__Tests/StellaOps.Gateway.WebService.Tests: 160/160; src/Router/__Tests/StellaOps.Router.Gateway.Tests: 13/13).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/gateway/gateway-identity-header-strip-and-overwrite-policy-middleware/run-008/tier2-integration-check.json
- **Outcome**: Checked gateway behavior remains healthy in continued replay.
## Recheck (Run-009)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay with deterministic Gateway+Router suite verification.
- **Tests**: PASS (src/Gateway/__Tests/StellaOps.Gateway.WebService.Tests: 259/259; src/Router/__Tests/StellaOps.Gateway.WebService.Tests: 160/160; src/Router/__Tests/StellaOps.Router.Gateway.Tests: 13/13).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/gateway/gateway-identity-header-strip-and-overwrite-policy-middleware/run-009/tier2-integration-check.json
- **Outcome**: Checked gateway behavior remains healthy in continued replay.
## Recheck (Run-010)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Gateway.WebService.Tests 259/259, Router.Gateway.WebService.Tests 160/160, Router.Gateway.Tests 13/13).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/gateway/gateway-identity-header-strip-and-overwrite-policy-middleware/run-010/tier2-integration-check.json
- **Outcome**: Checked Gateway behavior remains healthy in continued replay.
## Recheck (Run-011)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Gateway.WebService 259/259, Router.Gateway.WebService 160/160, Router.Gateway 13/13; total 432/432).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/gateway/gateway-identity-header-strip-and-overwrite-policy-middleware/run-011/tier2-integration-check.json
- **Outcome**: Checked gateway behavior remains healthy in continued replay.
## Recheck (Run-012)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Gateway.WebService 259/259, Router.Gateway.WebService 160/160, Router.Gateway 13/13; total 432/432).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/gateway/gateway-identity-header-strip-and-overwrite-policy-middleware/run-012/tier2-integration-check.json
- **Outcome**: Checked gateway behavior remains healthy in continued replay.

View File

@@ -33,3 +33,65 @@ VERIFIED
- EffectiveClaimsStoreTests (272 lines, 10 tests): Explicitly verify precedence hierarchy, fallback behavior, override replacement semantics, case-insensitive matching.
- AuthorizationMiddlewareTests (265 lines, 8 tests): Verify 403 for missing claims, claim type+value matching.
- **Verdict**: PASS
## Tier 2 Recheck (2026-02-10)
- **Run ID**: run-003
- **Result**: PASS
- **What was rechecked**: Authority-claims precedence and authorization middleware behavior reconfirmed via integration suites.
- **Evidence**: `docs/qa/feature-checks/runs/gateway/router-authority-claims-integration/run-003/tier2-integration-check.json`
## Recheck (run-005)
- **Date**: 2026-02-10
- **Result**: PASS
- **Verification**: Authority-claims precedence and authorization integration remain stable.
- **Tests**: Gateway.WebService.Tests 259/259, Router Gateway WebService.Tests 160/160, Router.Gateway.Tests 13/13 (432 total).
- **Evidence**: `docs/qa/feature-checks/runs/gateway/router-authority-claims-integration/run-005/tier2-integration-check.json`
## Recheck (Run-006)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay + full Gateway/Router matrix.
- **Tests**: PASS (`src/Gateway/__Tests/StellaOps.Gateway.WebService.Tests`: 259/259; `src/Router/__Tests/StellaOps.Gateway.WebService.Tests`: 160/160; `src/Router/__Tests/StellaOps.Router.Gateway.Tests`: 13/13).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/gateway/router-authority-claims-integration/run-006/tier2-integration-check.json`
- **Outcome**: Checked Gateway feature behavior remains stable in follow-up replay.
## Recheck (Run-007)
- **Verified**: 2026-02-10
- **Method**: Tier 2 integration replay.
- **Tests**: PASS (src/Gateway/__Tests/StellaOps.Gateway.WebService.Tests: 259/259; src/Router/__Tests/StellaOps.Gateway.WebService.Tests: 160/160; src/Router/__Tests/StellaOps.Router.Gateway.Tests: 13/13).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/gateway/router-authority-claims-integration/run-007/tier2-integration-check.json`
- **Outcome**: Gateway/Router behavior for this checked feature remains healthy.
## Recheck (Run-008)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay with deterministic Gateway+Router suite verification.
- **Tests**: PASS (src/Gateway/__Tests/StellaOps.Gateway.WebService.Tests: 259/259; src/Router/__Tests/StellaOps.Gateway.WebService.Tests: 160/160; src/Router/__Tests/StellaOps.Router.Gateway.Tests: 13/13).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/gateway/router-authority-claims-integration/run-008/tier2-integration-check.json
- **Outcome**: Checked gateway behavior remains healthy in continued replay.
## Recheck (Run-009)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay with deterministic Gateway+Router suite verification.
- **Tests**: PASS (src/Gateway/__Tests/StellaOps.Gateway.WebService.Tests: 259/259; src/Router/__Tests/StellaOps.Gateway.WebService.Tests: 160/160; src/Router/__Tests/StellaOps.Router.Gateway.Tests: 13/13).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/gateway/router-authority-claims-integration/run-009/tier2-integration-check.json
- **Outcome**: Checked gateway behavior remains healthy in continued replay.
## Recheck (Run-010)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Gateway.WebService.Tests 259/259, Router.Gateway.WebService.Tests 160/160, Router.Gateway.Tests 13/13).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/gateway/router-authority-claims-integration/run-010/tier2-integration-check.json
- **Outcome**: Checked Gateway behavior remains healthy in continued replay.
## Recheck (Run-011)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Gateway.WebService 259/259, Router.Gateway.WebService 160/160, Router.Gateway 13/13; total 432/432).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/gateway/router-authority-claims-integration/run-011/tier2-integration-check.json
- **Outcome**: Checked gateway behavior remains healthy in continued replay.
## Recheck (Run-012)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Gateway.WebService 259/259, Router.Gateway.WebService 160/160, Router.Gateway 13/13; total 432/432).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/gateway/router-authority-claims-integration/run-012/tier2-integration-check.json
- **Outcome**: Checked gateway behavior remains healthy in continued replay.

View File

@@ -49,3 +49,65 @@ Rate limiting is present in the Gateway and Graph API services. The advisory's h
- InstanceRateLimiterTests (217 lines, 12 tests) with FakeTimeProvider: assert allow/deny, retry-after, per-microservice isolation, custom rules, stale cleanup.
- DualWindowRateLimitTests: multi-window enforcement. RateLimitCircuitBreakerTests: open/close/reset states.
- **Verdict**: PASS
## Tier 2 Recheck (2026-02-10)
- **Run ID**: run-003
- **Result**: PASS
- **What was rechecked**: Gateway back-pressure/rate-limit integration and Router rate-limit library suites rerun.
- **Evidence**: `docs/qa/feature-checks/runs/gateway/router-back-pressure-middleware/run-003/tier2-integration-check.json`
## Recheck (run-005)
- **Date**: 2026-02-10
- **Result**: PASS
- **Verification**: Back-pressure and rate-limit middleware behavior remains stable.
- **Tests**: Gateway.WebService.Tests 259/259, Router Gateway WebService.Tests 160/160, Router.Gateway.Tests 13/13 (432 total).
- **Evidence**: `docs/qa/feature-checks/runs/gateway/router-back-pressure-middleware/run-005/tier2-integration-check.json`
## Recheck (Run-006)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay + full Gateway/Router matrix.
- **Tests**: PASS (`src/Gateway/__Tests/StellaOps.Gateway.WebService.Tests`: 259/259; `src/Router/__Tests/StellaOps.Gateway.WebService.Tests`: 160/160; `src/Router/__Tests/StellaOps.Router.Gateway.Tests`: 13/13).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/gateway/router-back-pressure-middleware/run-006/tier2-integration-check.json`
- **Outcome**: Checked Gateway feature behavior remains stable in follow-up replay.
## Recheck (Run-007)
- **Verified**: 2026-02-10
- **Method**: Tier 2 integration replay.
- **Tests**: PASS (src/Gateway/__Tests/StellaOps.Gateway.WebService.Tests: 259/259; src/Router/__Tests/StellaOps.Gateway.WebService.Tests: 160/160; src/Router/__Tests/StellaOps.Router.Gateway.Tests: 13/13).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/gateway/router-back-pressure-middleware/run-007/tier2-integration-check.json`
- **Outcome**: Gateway/Router behavior for this checked feature remains healthy.
## Recheck (Run-008)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay with deterministic Gateway+Router suite verification.
- **Tests**: PASS (src/Gateway/__Tests/StellaOps.Gateway.WebService.Tests: 259/259; src/Router/__Tests/StellaOps.Gateway.WebService.Tests: 160/160; src/Router/__Tests/StellaOps.Router.Gateway.Tests: 13/13).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/gateway/router-back-pressure-middleware/run-008/tier2-integration-check.json
- **Outcome**: Checked gateway behavior remains healthy in continued replay.
## Recheck (Run-009)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay with deterministic Gateway+Router suite verification.
- **Tests**: PASS (src/Gateway/__Tests/StellaOps.Gateway.WebService.Tests: 259/259; src/Router/__Tests/StellaOps.Gateway.WebService.Tests: 160/160; src/Router/__Tests/StellaOps.Router.Gateway.Tests: 13/13).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/gateway/router-back-pressure-middleware/run-009/tier2-integration-check.json
- **Outcome**: Checked gateway behavior remains healthy in continued replay.
## Recheck (Run-010)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Gateway.WebService.Tests 259/259, Router.Gateway.WebService.Tests 160/160, Router.Gateway.Tests 13/13).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/gateway/router-back-pressure-middleware/run-010/tier2-integration-check.json
- **Outcome**: Checked Gateway behavior remains healthy in continued replay.
## Recheck (Run-011)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Gateway.WebService 259/259, Router.Gateway.WebService 160/160, Router.Gateway 13/13; total 432/432).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/gateway/router-back-pressure-middleware/run-011/tier2-integration-check.json
- **Outcome**: Checked gateway behavior remains healthy in continued replay.
## Recheck (Run-012)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Gateway.WebService 259/259, Router.Gateway.WebService 160/160, Router.Gateway 13/13; total 432/432).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/gateway/router-back-pressure-middleware/run-012/tier2-integration-check.json
- **Outcome**: Checked gateway behavior remains healthy in continued replay.

View File

@@ -38,3 +38,65 @@ Heartbeat protocol with configurable intervals, `HealthMonitorService` for stale
- **Tests Written** (10 new tests):
- GatewayHealthMonitorServiceTests (10 tests): Healthy→Unhealthy when heartbeat age > staleThreshold, Healthy→Degraded when age > degradedThreshold, Draining connections skipped (no UpdateConnection called), recent heartbeat stays Healthy, already-Unhealthy not updated again, Degraded→Unhealthy at stale threshold, Degraded stays Degraded when not Healthy (Degraded→Degraded transition guard), mixed connections with correct per-instance transitions, custom thresholds are respected.
- **Verdict**: PASS
## Tier 2 Recheck (2026-02-10)
- **Run ID**: run-004
- **Result**: PASS
- **What was rechecked**: Live `/health*` API behavior plus expanded heartbeat lifecycle regression tests for HELLO/heartbeat/disconnect paths.
- **Evidence**: `docs/qa/feature-checks/runs/gateway/router-heartbeat-and-health-monitoring/run-004/tier2-integration-check.json`
## Recheck (run-005)
- **Date**: 2026-02-10
- **Result**: PASS
- **Verification**: Heartbeat health monitoring and health-surface behavior remain stable.
- **Tests**: Gateway.WebService.Tests 259/259, Router Gateway WebService.Tests 160/160, Router.Gateway.Tests 13/13 (432 total).
- **Evidence**: `docs/qa/feature-checks/runs/gateway/router-heartbeat-and-health-monitoring/run-005/tier2-integration-check.json`
## Recheck (Run-006)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay + full Gateway/Router matrix.
- **Tests**: PASS (`src/Gateway/__Tests/StellaOps.Gateway.WebService.Tests`: 259/259; `src/Router/__Tests/StellaOps.Gateway.WebService.Tests`: 160/160; `src/Router/__Tests/StellaOps.Router.Gateway.Tests`: 13/13).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/gateway/router-heartbeat-and-health-monitoring/run-006/tier2-integration-check.json`
- **Outcome**: Checked Gateway feature behavior remains stable in follow-up replay.
## Recheck (Run-007)
- **Verified**: 2026-02-10
- **Method**: Tier 2 integration replay.
- **Tests**: PASS (src/Gateway/__Tests/StellaOps.Gateway.WebService.Tests: 259/259; src/Router/__Tests/StellaOps.Gateway.WebService.Tests: 160/160; src/Router/__Tests/StellaOps.Router.Gateway.Tests: 13/13).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/gateway/router-heartbeat-and-health-monitoring/run-007/tier2-integration-check.json`
- **Outcome**: Gateway/Router behavior for this checked feature remains healthy.
## Recheck (Run-008)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay with deterministic Gateway+Router suite verification.
- **Tests**: PASS (src/Gateway/__Tests/StellaOps.Gateway.WebService.Tests: 259/259; src/Router/__Tests/StellaOps.Gateway.WebService.Tests: 160/160; src/Router/__Tests/StellaOps.Router.Gateway.Tests: 13/13).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/gateway/router-heartbeat-and-health-monitoring/run-008/tier2-integration-check.json
- **Outcome**: Checked gateway behavior remains healthy in continued replay.
## Recheck (Run-009)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay with deterministic Gateway+Router suite verification.
- **Tests**: PASS (src/Gateway/__Tests/StellaOps.Gateway.WebService.Tests: 259/259; src/Router/__Tests/StellaOps.Gateway.WebService.Tests: 160/160; src/Router/__Tests/StellaOps.Router.Gateway.Tests: 13/13).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/gateway/router-heartbeat-and-health-monitoring/run-009/tier2-integration-check.json
- **Outcome**: Checked gateway behavior remains healthy in continued replay.
## Recheck (Run-010)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Gateway.WebService.Tests 259/259, Router.Gateway.WebService.Tests 160/160, Router.Gateway.Tests 13/13).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/gateway/router-heartbeat-and-health-monitoring/run-010/tier2-integration-check.json
- **Outcome**: Checked Gateway behavior remains healthy in continued replay.
## Recheck (Run-011)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Gateway.WebService 259/259, Router.Gateway.WebService 160/160, Router.Gateway 13/13; total 432/432).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/gateway/router-heartbeat-and-health-monitoring/run-011/tier2-integration-check.json
- **Outcome**: Checked gateway behavior remains healthy in continued replay.
## Recheck (Run-012)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Gateway.WebService 259/259, Router.Gateway.WebService 160/160, Router.Gateway 13/13; total 432/432).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/gateway/router-heartbeat-and-health-monitoring/run-012/tier2-integration-check.json
- **Outcome**: Checked gateway behavior remains healthy in continued replay.

View File

@@ -37,3 +37,65 @@ PayloadLimitsMiddleware with per-request, per-connection, and aggregate byte lim
- ByteCountingStreamTests (16 tests): Sync/async/Memory read counting, cumulative counting across reads, PayloadLimitExceededException on limit exceed (sync + async), onLimitExceeded callback invocation, CanRead/CanSeek/CanWrite properties, Seek/SetLength/Write/Position-set NotSupportedException, zero-byte reads.
- PayloadTrackerTests (16 tests): TryReserve success under limits, aggregate rejection with rollback, per-connection rejection with rollback, multi-connection isolation, Release decrement + partial release, Release floor at zero, IsOverloaded semantics, zero-byte reserve, exactly-at-limit boundary, reserve-after-release cycle, concurrent thread safety (4 threads x 100 iterations).
- **Verdict**: PASS
## Tier 2 Recheck (2026-02-10)
- **Run ID**: run-004
- **Result**: PASS
- **What was rechecked**: Payload limit middleware, counting stream, and tracker suites reconfirmed in Gateway test pass.
- **Evidence**: `docs/qa/feature-checks/runs/gateway/router-payload-size-enforcement/run-004/tier2-integration-check.json`
## Recheck (run-005)
- **Date**: 2026-02-10
- **Result**: PASS
- **Verification**: Payload-size middleware/stream/tracker enforcement remains stable.
- **Tests**: Gateway.WebService.Tests 259/259, Router Gateway WebService.Tests 160/160, Router.Gateway.Tests 13/13 (432 total).
- **Evidence**: `docs/qa/feature-checks/runs/gateway/router-payload-size-enforcement/run-005/tier2-integration-check.json`
## Recheck (Run-006)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay + full Gateway/Router matrix.
- **Tests**: PASS (`src/Gateway/__Tests/StellaOps.Gateway.WebService.Tests`: 259/259; `src/Router/__Tests/StellaOps.Gateway.WebService.Tests`: 160/160; `src/Router/__Tests/StellaOps.Router.Gateway.Tests`: 13/13).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/gateway/router-payload-size-enforcement/run-006/tier2-integration-check.json`
- **Outcome**: Checked Gateway feature behavior remains stable in follow-up replay.
## Recheck (Run-007)
- **Verified**: 2026-02-10
- **Method**: Tier 2 integration replay.
- **Tests**: PASS (src/Gateway/__Tests/StellaOps.Gateway.WebService.Tests: 259/259; src/Router/__Tests/StellaOps.Gateway.WebService.Tests: 160/160; src/Router/__Tests/StellaOps.Router.Gateway.Tests: 13/13).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/gateway/router-payload-size-enforcement/run-007/tier2-integration-check.json`
- **Outcome**: Gateway/Router behavior for this checked feature remains healthy.
## Recheck (Run-008)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay with deterministic Gateway+Router suite verification.
- **Tests**: PASS (src/Gateway/__Tests/StellaOps.Gateway.WebService.Tests: 259/259; src/Router/__Tests/StellaOps.Gateway.WebService.Tests: 160/160; src/Router/__Tests/StellaOps.Router.Gateway.Tests: 13/13).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/gateway/router-payload-size-enforcement/run-008/tier2-integration-check.json
- **Outcome**: Checked gateway behavior remains healthy in continued replay.
## Recheck (Run-009)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay with deterministic Gateway+Router suite verification.
- **Tests**: PASS (src/Gateway/__Tests/StellaOps.Gateway.WebService.Tests: 259/259; src/Router/__Tests/StellaOps.Gateway.WebService.Tests: 160/160; src/Router/__Tests/StellaOps.Router.Gateway.Tests: 13/13).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/gateway/router-payload-size-enforcement/run-009/tier2-integration-check.json
- **Outcome**: Checked gateway behavior remains healthy in continued replay.
## Recheck (Run-010)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Gateway.WebService.Tests 259/259, Router.Gateway.WebService.Tests 160/160, Router.Gateway.Tests 13/13).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/gateway/router-payload-size-enforcement/run-010/tier2-integration-check.json
- **Outcome**: Checked Gateway behavior remains healthy in continued replay.
## Recheck (Run-011)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Gateway.WebService 259/259, Router.Gateway.WebService 160/160, Router.Gateway 13/13; total 432/432).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/gateway/router-payload-size-enforcement/run-011/tier2-integration-check.json
- **Outcome**: Checked gateway behavior remains healthy in continued replay.
## Recheck (Run-012)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Gateway.WebService 259/259, Router.Gateway.WebService 160/160, Router.Gateway 13/13; total 432/432).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/gateway/router-payload-size-enforcement/run-012/tier2-integration-check.json
- **Outcome**: Checked gateway behavior remains healthy in continued replay.

View File

@@ -37,3 +37,65 @@ Performance testing pipeline with k6 load test scenarios (A-G), correlation ID i
- CorrelationIdMiddlewareTests (71 lines, 4 tests): ID generation, echo, TraceIdentifier sync.
- Note: Feature file's "What's Missing" section is STALE -- k6 scripts and Grafana dashboard DO exist.
- **Verdict**: PASS
## Tier 2 Recheck (2026-02-10)
- **Run ID**: run-003
- **Result**: PASS
- **What was rechecked**: `/metrics` and correlation-id live behavior replay, instrumentation test suite pass, and k6 scenario script presence.
- **Evidence**: `docs/qa/feature-checks/runs/gateway/stellarouter-performance-testing-pipeline/run-003/tier2-integration-check.json`
## Recheck (run-005)
- **Date**: 2026-02-10
- **Result**: PASS
- **Verification**: Performance instrumentation and metrics/correlation behavior remain stable.
- **Tests**: Gateway.WebService.Tests 259/259, Router Gateway WebService.Tests 160/160, Router.Gateway.Tests 13/13 (432 total).
- **Evidence**: `docs/qa/feature-checks/runs/gateway/stellarouter-performance-testing-pipeline/run-005/tier2-integration-check.json`
## Recheck (Run-006)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay + full Gateway/Router matrix.
- **Tests**: PASS (`src/Gateway/__Tests/StellaOps.Gateway.WebService.Tests`: 259/259; `src/Router/__Tests/StellaOps.Gateway.WebService.Tests`: 160/160; `src/Router/__Tests/StellaOps.Router.Gateway.Tests`: 13/13).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/gateway/stellarouter-performance-testing-pipeline/run-006/tier2-integration-check.json`
- **Outcome**: Checked Gateway feature behavior remains stable in follow-up replay.
## Recheck (Run-007)
- **Verified**: 2026-02-10
- **Method**: Tier 2 integration replay.
- **Tests**: PASS (src/Gateway/__Tests/StellaOps.Gateway.WebService.Tests: 259/259; src/Router/__Tests/StellaOps.Gateway.WebService.Tests: 160/160; src/Router/__Tests/StellaOps.Router.Gateway.Tests: 13/13).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/gateway/stellarouter-performance-testing-pipeline/run-007/tier2-integration-check.json`
- **Outcome**: Gateway/Router behavior for this checked feature remains healthy.
## Recheck (Run-008)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay with deterministic Gateway+Router suite verification.
- **Tests**: PASS (src/Gateway/__Tests/StellaOps.Gateway.WebService.Tests: 259/259; src/Router/__Tests/StellaOps.Gateway.WebService.Tests: 160/160; src/Router/__Tests/StellaOps.Router.Gateway.Tests: 13/13).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/gateway/stellarouter-performance-testing-pipeline/run-008/tier2-integration-check.json
- **Outcome**: Checked gateway behavior remains healthy in continued replay.
## Recheck (Run-009)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay with deterministic Gateway+Router suite verification.
- **Tests**: PASS (src/Gateway/__Tests/StellaOps.Gateway.WebService.Tests: 259/259; src/Router/__Tests/StellaOps.Gateway.WebService.Tests: 160/160; src/Router/__Tests/StellaOps.Router.Gateway.Tests: 13/13).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/gateway/stellarouter-performance-testing-pipeline/run-009/tier2-integration-check.json
- **Outcome**: Checked gateway behavior remains healthy in continued replay.
## Recheck (Run-010)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Gateway.WebService.Tests 259/259, Router.Gateway.WebService.Tests 160/160, Router.Gateway.Tests 13/13).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/gateway/stellarouter-performance-testing-pipeline/run-010/tier2-integration-check.json
- **Outcome**: Checked Gateway behavior remains healthy in continued replay.
## Recheck (Run-011)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Gateway.WebService 259/259, Router.Gateway.WebService 160/160, Router.Gateway 13/13; total 432/432).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/gateway/stellarouter-performance-testing-pipeline/run-011/tier2-integration-check.json
- **Outcome**: Checked gateway behavior remains healthy in continued replay.
## Recheck (Run-012)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Gateway.WebService 259/259, Router.Gateway.WebService 160/160, Router.Gateway 13/13; total 432/432).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/gateway/stellarouter-performance-testing-pipeline/run-012/tier2-integration-check.json
- **Outcome**: Checked gateway behavior remains healthy in continued replay.

View File

@@ -29,7 +29,7 @@ Graph analytics with engine, pipeline, DI extensions, and Postgres persistence f
- [x] Verify analytics engine computes clustering and centrality scores
- [x] Test pipeline executes multi-stage analytics in correct order
- [x] Verify hosted service runs analytics on configured schedule
- [ ] Test Postgres persistence stores analytics results correctly (skipped: Docker unavailable)
- [x] Test Postgres persistence stores analytics results correctly
- [x] Verify overlay exporter generates valid overlay data from analytics
## Verification
@@ -38,3 +38,72 @@ Graph analytics with engine, pipeline, DI extensions, and Postgres persistence f
- **Tier**: 1 (Build + Test)
- **Result**: PASS
- **Evidence**: Graph.Indexer.Tests 37/37 pass, Graph.Core.Tests 19/19 pass. Persistence tests skipped (Docker unavailable, env_issue). All source files verified (16/16).
### Tier 2 Recheck (Behavioral Integration)
- **Run ID**: run-002
- **Date**: 2026-02-10T11:41:00Z
- **Tier**: 2 (Behavioral integration verification)
- **Result**: PASS
- **Evidence**: Re-ran indexer and persistence suites (`Graph.Indexer.Tests` 37/37, `Graph.Indexer.Persistence.Tests` 17/17) including Postgres-backed analytics persistence paths. Artifact: `docs/qa/feature-checks/runs/graph/graph-analytics-engine/run-002/tier2-integration-check.json`.
### Tier 2 Recheck (Docker-Restored Persistence Replay)
- **Run ID**: run-003
- **Date**: 2026-02-10T16:37:52Z
- **Tier**: 2 (Behavioral integration verification)
- **Result**: PASS
- **Evidence**: Replayed indexer + persistence suites with Docker available (Graph.Indexer.Tests 37/37, Graph.Indexer.Persistence.Tests 17/17). Artifact: `docs/qa/feature-checks/runs/graph/graph-analytics-engine/run-003/tier2-integration-check.json`.
## Recheck (Run-005)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (`src/Graph/__Tests/StellaOps.Graph.Indexer.Tests`: 37/37; `src/Graph/__Tests/StellaOps.Graph.Indexer.Persistence.Tests`: 17/17).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/graph/graph-analytics-engine/run-005/tier2-integration-check.json`
- **Outcome**: Analytics pipeline and persistence-backed behaviors remain healthy.
## Recheck (Run-006)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay validated via Graph API/indexer suites.
- **Tests**: PASS (src/Graph/__Tests/StellaOps.Graph.Api.Tests: 66/66; src/Graph/__Tests/StellaOps.Graph.Indexer.Tests: 37/37; src/Graph/__Tests/StellaOps.Graph.Indexer.Persistence.Tests: 17/17).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/graph/graph-analytics-engine/run-006/tier2-integration-check.json
- **Outcome**: Analytics pipeline and persistence behavior remain healthy.
## Recheck (Run-007)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay validated via Graph API/indexer suites.
- **Tests**: PASS (src/Graph/__Tests/StellaOps.Graph.Api.Tests: 66/66; src/Graph/__Tests/StellaOps.Graph.Indexer.Tests: 37/37; src/Graph/__Tests/StellaOps.Graph.Indexer.Persistence.Tests: 17/17).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/graph/graph-analytics-engine/run-007/tier2-integration-check.json
- **Outcome**: Analytics pipeline and persistence behavior remain healthy.
## Recheck (Run-008)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay validated via Graph API/indexer suites.
- **Tests**: PASS (src/Graph/__Tests/StellaOps.Graph.Api.Tests: 66/66; src/Graph/__Tests/StellaOps.Graph.Indexer.Tests: 37/37; src/Graph/__Tests/StellaOps.Graph.Indexer.Persistence.Tests: 17/17).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/graph/graph-analytics-engine/run-008/tier2-integration-check.json
- **Outcome**: Analytics pipeline and persistence behavior remain healthy.
## Recheck (Run-009)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Graph.Api.Tests 66/66, Graph.Indexer.Tests 37/37, Graph.Indexer.Persistence.Tests 17/17).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/graph/graph-analytics-engine/run-009/tier2-integration-check.json
- **Outcome**: Checked Graph behavior remains healthy in continued replay.
## Recheck (Run-010)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Graph Api 66/66, Indexer 37/37, Indexer.Persistence 17/17; total 120/120).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/graph/graph-analytics-engine/run-010/tier2-integration-check.json
- **Outcome**: Checked graph behavior remains healthy in continued replay.
## Recheck (Run-011)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Graph Api 66/66, Indexer 37/37, Indexer.Persistence 17/17; total 120/120).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/graph/graph-analytics-engine/run-011/tier2-integration-check.json
- **Outcome**: Checked graph behavior remains healthy in continued replay.
## Recheck (Run-012)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay + deterministic Graph suite replay.
- **Tests**: PASS (Graph.Api 66/66, Graph.Indexer 37/37, Graph.Indexer.Persistence 17/17; total 120/120).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/graph/graph-analytics-engine/run-012/tier2-integration-check.json
- **Outcome**: Checked graph behavior remains healthy in continued replay.

View File

@@ -39,3 +39,72 @@ EdgeReason and CallgraphEdge models exist in Signals with persistence projection
- **Result**: PASS
- **Evidence**: 52/52 Graph.Api.Tests pass (including 14/14 EdgeMetadataServiceTests). 108/108 non-persistence tests pass across all Graph test projects. 17 Persistence tests skipped (require Docker/PostgreSQL -- environment limitation, not a regression).
- **Notes**: Required 1 retry cycle. Initial failure due to test fixture edge IDs not matching seeded data. Fixed in run-002 by aligning test edge IDs to seeded graph edges and correcting InferReasonFromKind assertion expectations. Original "What's Missing" claim about absent types was disproven -- all types exist in EdgeMetadataContracts.cs (423 lines).
### Tier 2 Recheck (API Behavior)
- **Run ID**: run-003
- **Date**: 2026-02-10T11:35:00Z
- **Tier**: 2 (End-to-end API verification)
- **Result**: PASS
- **Evidence**: Added endpoint-level auth/scope/tenant regression tests (`EdgeMetadataEndpointsAuthorizationTests`) and revalidated live API behavior. Tier 2 artifact: `docs/qa/feature-checks/runs/graph/graph-edge-metadata-with-reason-evidence-provenance/run-003/tier2-api-check.json`.
### Tier 2 Recheck (Positive Path)
- **Run ID**: run-004
- **Date**: 2026-02-10T11:47:30Z
- **Tier**: 2 (End-to-end API verification)
- **Result**: PASS
- **Evidence**: Verified known edge metadata retrieval returns `200` with explanation payload for authenticated read scope. Artifact: `docs/qa/feature-checks/runs/graph/graph-edge-metadata-with-reason-evidence-provenance/run-004/tier2-api-check.json`.
## Recheck (Run-005)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay validated via Graph.Api integration suite.
- **Tests**: PASS (`src/Graph/__Tests/StellaOps.Graph.Api.Tests`: 66/66).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/graph/graph-edge-metadata-with-reason-evidence-provenance/run-005/tier2-api-check.json`
- **Outcome**: Edge metadata endpoint behavior remains healthy with auth/tenant guard coverage intact.
## Recheck (Run-006)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay validated via Graph API/indexer suites.
- **Tests**: PASS (src/Graph/__Tests/StellaOps.Graph.Api.Tests: 66/66; src/Graph/__Tests/StellaOps.Graph.Indexer.Tests: 37/37; src/Graph/__Tests/StellaOps.Graph.Indexer.Persistence.Tests: 17/17).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/graph/graph-edge-metadata-with-reason-evidence-provenance/run-006/tier2-api-check.json
- **Outcome**: Edge metadata API behavior remains healthy with tenant/auth/scope coverage intact.
## Recheck (Run-007)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay validated via Graph API/indexer suites.
- **Tests**: PASS (src/Graph/__Tests/StellaOps.Graph.Api.Tests: 66/66; src/Graph/__Tests/StellaOps.Graph.Indexer.Tests: 37/37; src/Graph/__Tests/StellaOps.Graph.Indexer.Persistence.Tests: 17/17).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/graph/graph-edge-metadata-with-reason-evidence-provenance/run-007/tier2-api-check.json
- **Outcome**: Edge metadata API behavior remains healthy with tenant/auth/scope coverage intact.
## Recheck (Run-008)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay validated via Graph API/indexer suites.
- **Tests**: PASS (src/Graph/__Tests/StellaOps.Graph.Api.Tests: 66/66; src/Graph/__Tests/StellaOps.Graph.Indexer.Tests: 37/37; src/Graph/__Tests/StellaOps.Graph.Indexer.Persistence.Tests: 17/17).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/graph/graph-edge-metadata-with-reason-evidence-provenance/run-008/tier2-api-check.json
- **Outcome**: Edge metadata API behavior remains healthy with tenant/auth/scope coverage intact.
## Recheck (Run-009)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay + deterministic integration suite replay.
- **Tests**: PASS (Graph.Api.Tests 66/66, Graph.Indexer.Tests 37/37, Graph.Indexer.Persistence.Tests 17/17).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/graph/graph-edge-metadata-with-reason-evidence-provenance/run-009/tier2-api-check.json
- **Outcome**: Checked Graph behavior remains healthy in continued replay.
## Recheck (Run-010)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Graph Api 66/66, Indexer 37/37, Indexer.Persistence 17/17; total 120/120).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/graph/graph-edge-metadata-with-reason-evidence-provenance/run-010/tier2-integration-check.json
- **Outcome**: Checked graph behavior remains healthy in continued replay.
## Recheck (Run-011)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Graph Api 66/66, Indexer 37/37, Indexer.Persistence 17/17; total 120/120).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/graph/graph-edge-metadata-with-reason-evidence-provenance/run-011/tier2-integration-check.json
- **Outcome**: Checked graph behavior remains healthy in continued replay.
## Recheck (Run-012)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay + deterministic Graph suite replay.
- **Tests**: PASS (Graph.Api 66/66, Graph.Indexer 37/37, Graph.Indexer.Persistence 17/17; total 120/120).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/graph/graph-edge-metadata-with-reason-evidence-provenance/run-012/tier2-api-check.json
- **Outcome**: Checked graph behavior remains healthy in continued replay.

View File

@@ -40,3 +40,65 @@ Graph query and visualization API providing streaming tile-based graph rendering
- **Tier**: 1 (Build + Test)
- **Result**: PASS
- **Evidence**: Graph.Api.Tests 47/52 pass (5 failures are in EdgeMetadataServiceTests, a different feature area). All source files verified (33/33).
### Tier 2 Recheck (API Behavior)
- **Run ID**: run-002
- **Date**: 2026-02-10T11:45:00Z
- **Tier**: 2 (End-to-end API verification)
- **Result**: PASS
- **Evidence**: Export/download path revalidated with tenant/auth/scope checks and download job persistence across requests. Added `ExportEndpointsAuthorizationTests` and confirmed live API behavior. Tier 2 artifact: `docs/qa/feature-checks/runs/graph/graph-explorer-api-with-streaming-tiles/run-002/tier2-api-check.json`.
## Recheck (Run-005)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay validated via Graph.Api integration suite.
- **Tests**: PASS (`src/Graph/__Tests/StellaOps.Graph.Api.Tests`: 66/66).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/graph/graph-explorer-api-with-streaming-tiles/run-005/tier2-api-check.json`
- **Outcome**: Explorer/export API behavior remains healthy.
## Recheck (Run-006)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay validated via Graph API/indexer suites.
- **Tests**: PASS (src/Graph/__Tests/StellaOps.Graph.Api.Tests: 66/66; src/Graph/__Tests/StellaOps.Graph.Indexer.Tests: 37/37; src/Graph/__Tests/StellaOps.Graph.Indexer.Persistence.Tests: 17/17).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/graph/graph-explorer-api-with-streaming-tiles/run-006/tier2-api-check.json
- **Outcome**: Explorer/export API behavior remains healthy with authenticated data-path responses.
## Recheck (Run-007)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay validated via Graph API/indexer suites.
- **Tests**: PASS (src/Graph/__Tests/StellaOps.Graph.Api.Tests: 66/66; src/Graph/__Tests/StellaOps.Graph.Indexer.Tests: 37/37; src/Graph/__Tests/StellaOps.Graph.Indexer.Persistence.Tests: 17/17).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/graph/graph-explorer-api-with-streaming-tiles/run-007/tier2-api-check.json
- **Outcome**: Explorer/export API behavior remains healthy with authenticated data-path responses.
## Recheck (Run-008)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay validated via Graph API/indexer suites.
- **Tests**: PASS (src/Graph/__Tests/StellaOps.Graph.Api.Tests: 66/66; src/Graph/__Tests/StellaOps.Graph.Indexer.Tests: 37/37; src/Graph/__Tests/StellaOps.Graph.Indexer.Persistence.Tests: 17/17).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/graph/graph-explorer-api-with-streaming-tiles/run-008/tier2-api-check.json
- **Outcome**: Explorer/export API behavior remains healthy with authenticated data-path responses.
## Recheck (Run-009)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay + deterministic integration suite replay.
- **Tests**: PASS (Graph.Api.Tests 66/66, Graph.Indexer.Tests 37/37, Graph.Indexer.Persistence.Tests 17/17).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/graph/graph-explorer-api-with-streaming-tiles/run-009/tier2-api-check.json
- **Outcome**: Checked Graph behavior remains healthy in continued replay.
## Recheck (Run-010)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Graph Api 66/66, Indexer 37/37, Indexer.Persistence 17/17; total 120/120).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/graph/graph-explorer-api-with-streaming-tiles/run-010/tier2-integration-check.json
- **Outcome**: Checked graph behavior remains healthy in continued replay.
## Recheck (Run-011)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Graph Api 66/66, Indexer 37/37, Indexer.Persistence 17/17; total 120/120).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/graph/graph-explorer-api-with-streaming-tiles/run-011/tier2-integration-check.json
- **Outcome**: Checked graph behavior remains healthy in continued replay.
## Recheck (Run-012)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay + deterministic Graph suite replay.
- **Tests**: PASS (Graph.Api 66/66, Graph.Indexer 37/37, Graph.Indexer.Persistence 17/17; total 120/120).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/graph/graph-explorer-api-with-streaming-tiles/run-012/tier2-api-check.json
- **Outcome**: Checked graph behavior remains healthy in continued replay.

View File

@@ -34,3 +34,65 @@ Background hosted service that runs graph analytics (Louvain community detection
- **Tier**: 1 (Build + Test)
- **Result**: PASS
- **Evidence**: Graph.Indexer.Tests 37/37 pass (clustering/centrality tests covered). All source files verified (10/10).
### Tier 2 Recheck (Behavioral Integration)
- **Run ID**: run-002
- **Date**: 2026-02-10T11:41:00Z
- **Tier**: 2 (Behavioral integration verification)
- **Result**: PASS
- **Evidence**: Revalidated clustering/centrality behavior through indexer analytics suite execution (`Graph.Indexer.Tests` 37/37). Artifact: `docs/qa/feature-checks/runs/graph/graph-indexer-clustering-and-centrality-background-jobs/run-002/tier2-integration-check.json`.
## Recheck (Run-005)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (`src/Graph/__Tests/StellaOps.Graph.Indexer.Tests`: 37/37).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/graph/graph-indexer-clustering-and-centrality-background-jobs/run-005/tier2-integration-check.json`
- **Outcome**: Clustering and centrality background job behavior remains healthy.
## Recheck (Run-006)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay validated via Graph API/indexer suites.
- **Tests**: PASS (src/Graph/__Tests/StellaOps.Graph.Api.Tests: 66/66; src/Graph/__Tests/StellaOps.Graph.Indexer.Tests: 37/37; src/Graph/__Tests/StellaOps.Graph.Indexer.Persistence.Tests: 17/17).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/graph/graph-indexer-clustering-and-centrality-background-jobs/run-006/tier2-integration-check.json
- **Outcome**: Clustering and centrality background-job behavior remains healthy.
## Recheck (Run-007)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay validated via Graph API/indexer suites.
- **Tests**: PASS (src/Graph/__Tests/StellaOps.Graph.Api.Tests: 66/66; src/Graph/__Tests/StellaOps.Graph.Indexer.Tests: 37/37; src/Graph/__Tests/StellaOps.Graph.Indexer.Persistence.Tests: 17/17).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/graph/graph-indexer-clustering-and-centrality-background-jobs/run-007/tier2-integration-check.json
- **Outcome**: Clustering and centrality background-job behavior remains healthy.
## Recheck (Run-008)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay validated via Graph API/indexer suites.
- **Tests**: PASS (src/Graph/__Tests/StellaOps.Graph.Api.Tests: 66/66; src/Graph/__Tests/StellaOps.Graph.Indexer.Tests: 37/37; src/Graph/__Tests/StellaOps.Graph.Indexer.Persistence.Tests: 17/17).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/graph/graph-indexer-clustering-and-centrality-background-jobs/run-008/tier2-integration-check.json
- **Outcome**: Clustering and centrality background-job behavior remains healthy.
## Recheck (Run-009)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Graph.Api.Tests 66/66, Graph.Indexer.Tests 37/37, Graph.Indexer.Persistence.Tests 17/17).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/graph/graph-indexer-clustering-and-centrality-background-jobs/run-009/tier2-integration-check.json
- **Outcome**: Checked Graph behavior remains healthy in continued replay.
## Recheck (Run-010)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Graph Api 66/66, Indexer 37/37, Indexer.Persistence 17/17; total 120/120).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/graph/graph-indexer-clustering-and-centrality-background-jobs/run-010/tier2-integration-check.json
- **Outcome**: Checked graph behavior remains healthy in continued replay.
## Recheck (Run-011)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Graph Api 66/66, Indexer 37/37, Indexer.Persistence 17/17; total 120/120).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/graph/graph-indexer-clustering-and-centrality-background-jobs/run-011/tier2-integration-check.json
- **Outcome**: Checked graph behavior remains healthy in continued replay.
## Recheck (Run-012)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay + deterministic Graph suite replay.
- **Tests**: PASS (Graph.Api 66/66, Graph.Indexer 37/37, Graph.Indexer.Persistence 17/17; total 120/120).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/graph/graph-indexer-clustering-and-centrality-background-jobs/run-012/tier2-integration-check.json
- **Outcome**: Checked graph behavior remains healthy in continued replay.

View File

@@ -28,7 +28,7 @@ Change-stream processor for incremental graph updates, consuming SBOM/scan event
- [x] Test idempotency ensures duplicate events are not processed
- [x] Verify backfill metrics track progress accurately
- [x] Test SBOM ingestion transforms events into graph updates
- [ ] Verify PostgreSQL idempotency store persists across restarts (skipped: Docker unavailable)
- [x] Verify PostgreSQL idempotency store persists across restarts
## Verification
- **Run ID**: run-001
@@ -36,3 +36,72 @@ Change-stream processor for incremental graph updates, consuming SBOM/scan event
- **Tier**: 1 (Build + Test)
- **Result**: PASS
- **Evidence**: Graph.Indexer.Tests 37/37 pass. 4 PostgresIdempotencyStore tests skipped (Docker unavailable, env_issue). All source files verified (13/13).
### Tier 2 Recheck (Behavioral Integration)
- **Run ID**: run-002
- **Date**: 2026-02-10T11:41:00Z
- **Tier**: 2 (Behavioral integration verification)
- **Result**: PASS
- **Evidence**: Revalidated incremental update and idempotency behavior across indexer and persistence suites (`Graph.Indexer.Tests` 37/37 and `Graph.Indexer.Persistence.Tests` 17/17). Artifact: `docs/qa/feature-checks/runs/graph/graph-indexer-incremental-update-pipeline/run-002/tier2-integration-check.json`.
### Tier 2 Recheck (Docker-Restored Persistence Replay)
- **Run ID**: run-003
- **Date**: 2026-02-10T16:37:52Z
- **Tier**: 2 (Behavioral integration verification)
- **Result**: PASS
- **Evidence**: Replayed indexer + persistence suites with Docker available (Graph.Indexer.Tests 37/37, Graph.Indexer.Persistence.Tests 17/17). Artifact: `docs/qa/feature-checks/runs/graph/graph-indexer-incremental-update-pipeline/run-003/tier2-integration-check.json`.
## Recheck (Run-005)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (`src/Graph/__Tests/StellaOps.Graph.Indexer.Tests`: 37/37; `src/Graph/__Tests/StellaOps.Graph.Indexer.Persistence.Tests`: 17/17).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/graph/graph-indexer-incremental-update-pipeline/run-005/tier2-integration-check.json`
- **Outcome**: Incremental update and idempotency behavior remains healthy.
## Recheck (Run-006)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay validated via Graph API/indexer suites.
- **Tests**: PASS (src/Graph/__Tests/StellaOps.Graph.Api.Tests: 66/66; src/Graph/__Tests/StellaOps.Graph.Indexer.Tests: 37/37; src/Graph/__Tests/StellaOps.Graph.Indexer.Persistence.Tests: 17/17).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/graph/graph-indexer-incremental-update-pipeline/run-006/tier2-integration-check.json
- **Outcome**: Incremental indexing and persistence idempotency behavior remain healthy.
## Recheck (Run-007)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay validated via Graph API/indexer suites.
- **Tests**: PASS (src/Graph/__Tests/StellaOps.Graph.Api.Tests: 66/66; src/Graph/__Tests/StellaOps.Graph.Indexer.Tests: 37/37; src/Graph/__Tests/StellaOps.Graph.Indexer.Persistence.Tests: 17/17).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/graph/graph-indexer-incremental-update-pipeline/run-007/tier2-integration-check.json
- **Outcome**: Incremental indexing and persistence idempotency behavior remain healthy.
## Recheck (Run-008)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay validated via Graph API/indexer suites.
- **Tests**: PASS (src/Graph/__Tests/StellaOps.Graph.Api.Tests: 66/66; src/Graph/__Tests/StellaOps.Graph.Indexer.Tests: 37/37; src/Graph/__Tests/StellaOps.Graph.Indexer.Persistence.Tests: 17/17).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/graph/graph-indexer-incremental-update-pipeline/run-008/tier2-integration-check.json
- **Outcome**: Incremental indexing and persistence idempotency behavior remain healthy.
## Recheck (Run-009)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Graph.Api.Tests 66/66, Graph.Indexer.Tests 37/37, Graph.Indexer.Persistence.Tests 17/17).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/graph/graph-indexer-incremental-update-pipeline/run-009/tier2-integration-check.json
- **Outcome**: Checked Graph behavior remains healthy in continued replay.
## Recheck (Run-010)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Graph Api 66/66, Indexer 37/37, Indexer.Persistence 17/17; total 120/120).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/graph/graph-indexer-incremental-update-pipeline/run-010/tier2-integration-check.json
- **Outcome**: Checked graph behavior remains healthy in continued replay.
## Recheck (Run-011)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Graph Api 66/66, Indexer 37/37, Indexer.Persistence 17/17; total 120/120).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/graph/graph-indexer-incremental-update-pipeline/run-011/tier2-integration-check.json
- **Outcome**: Checked graph behavior remains healthy in continued replay.
## Recheck (Run-012)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay + deterministic Graph suite replay.
- **Tests**: PASS (Graph.Api 66/66, Graph.Indexer 37/37, Graph.Indexer.Persistence 17/17; total 120/120).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/graph/graph-indexer-incremental-update-pipeline/run-012/tier2-integration-check.json
- **Outcome**: Checked graph behavior remains healthy in continued replay.

View File

@@ -37,3 +37,65 @@ Overlay system with exporter, in-memory overlay service, and tests for layering
- **Result**: PASS
- **Evidence**: 52/52 Graph.Api.Tests pass (including MetricsTests 2/2 pass for overlay cache counters). 108/108 non-persistence tests pass across all Graph test projects. 17 Persistence tests skipped (require Docker/PostgreSQL -- environment limitation, not a regression).
- **Notes**: Required 1 retry cycle. Initial failure due to MeterListener cross-contamination in MetricsTests -- name-based meter filtering picked up instruments from other tests' undisposed GraphMetrics instances. Fixed in run-002 by switching to instance-based meter filtering and adding `using` statements to GraphMetrics instances in QueryServiceTests.
### Tier 2 Recheck (API Behavior)
- **Run ID**: run-003
- **Date**: 2026-02-10T11:47:30Z
- **Tier**: 2 (End-to-end API verification)
- **Result**: PASS
- **Evidence**: Added API integration coverage (`QueryOverlayEndpointsIntegrationTests`) and revalidated live `/graph/query` behavior with overlays enabled. Verified overlays on all returned node tiles and single explain-trace sampling per response. Artifact: `docs/qa/feature-checks/runs/graph/graph-overlay-system/run-003/tier2-api-check.json`.
## Recheck (Run-005)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay validated via Graph.Api integration suite.
- **Tests**: PASS (`src/Graph/__Tests/StellaOps.Graph.Api.Tests`: 66/66).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/graph/graph-overlay-system/run-005/tier2-api-check.json`
- **Outcome**: Overlay/query API behavior remains healthy with runtime data-path coverage.
## Recheck (Run-006)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay validated via Graph API/indexer suites.
- **Tests**: PASS (src/Graph/__Tests/StellaOps.Graph.Api.Tests: 66/66; src/Graph/__Tests/StellaOps.Graph.Indexer.Tests: 37/37; src/Graph/__Tests/StellaOps.Graph.Indexer.Persistence.Tests: 17/17).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/graph/graph-overlay-system/run-006/tier2-api-check.json
- **Outcome**: Overlay/query API behavior remains healthy with non-empty node overlays.
## Recheck (Run-007)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay validated via Graph API/indexer suites.
- **Tests**: PASS (src/Graph/__Tests/StellaOps.Graph.Api.Tests: 66/66; src/Graph/__Tests/StellaOps.Graph.Indexer.Tests: 37/37; src/Graph/__Tests/StellaOps.Graph.Indexer.Persistence.Tests: 17/17).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/graph/graph-overlay-system/run-007/tier2-api-check.json
- **Outcome**: Overlay/query API behavior remains healthy with non-empty node overlays.
## Recheck (Run-008)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay validated via Graph API/indexer suites.
- **Tests**: PASS (src/Graph/__Tests/StellaOps.Graph.Api.Tests: 66/66; src/Graph/__Tests/StellaOps.Graph.Indexer.Tests: 37/37; src/Graph/__Tests/StellaOps.Graph.Indexer.Persistence.Tests: 17/17).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/graph/graph-overlay-system/run-008/tier2-api-check.json
- **Outcome**: Overlay/query API behavior remains healthy with non-empty node overlays.
## Recheck (Run-009)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay + deterministic integration suite replay.
- **Tests**: PASS (Graph.Api.Tests 66/66, Graph.Indexer.Tests 37/37, Graph.Indexer.Persistence.Tests 17/17).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/graph/graph-overlay-system/run-009/tier2-api-check.json
- **Outcome**: Checked Graph behavior remains healthy in continued replay.
## Recheck (Run-010)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Graph Api 66/66, Indexer 37/37, Indexer.Persistence 17/17; total 120/120).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/graph/graph-overlay-system/run-010/tier2-integration-check.json
- **Outcome**: Checked graph behavior remains healthy in continued replay.
## Recheck (Run-011)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Graph Api 66/66, Indexer 37/37, Indexer.Persistence 17/17; total 120/120).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/graph/graph-overlay-system/run-011/tier2-integration-check.json
- **Outcome**: Checked graph behavior remains healthy in continued replay.
## Recheck (Run-012)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay + deterministic Graph suite replay.
- **Tests**: PASS (Graph.Api 66/66, Graph.Indexer 37/37, Graph.Indexer.Persistence 17/17; total 120/120).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/graph/graph-overlay-system/run-012/tier2-api-check.json
- **Outcome**: Checked graph behavior remains healthy in continued replay.

View File

@@ -34,3 +34,72 @@ Graph API with query, search, and path services for traversing and querying depe
- **Tier**: 1 (Build + Test)
- **Result**: PASS
- **Evidence**: Query/search/path/rate-limiter tests all pass. All source files verified (15/15).
### Tier 2 Recheck (API Behavior)
- **Run ID**: run-002
- **Date**: 2026-02-10T11:35:00Z
- **Tier**: 2 (End-to-end API verification)
- **Result**: PASS
- **Evidence**: Verified `POST /graph/search` and `POST /graph/query` behavior for authenticated, unauthorized, forbidden, and missing-tenant paths. Tier 2 artifact: `docs/qa/feature-checks/runs/graph/graph-query-and-search-api/run-002/tier2-api-check.json`.
### Tier 2 Recheck (Data Path)
- **Run ID**: run-003
- **Date**: 2026-02-10T11:47:30Z
- **Tier**: 2 (End-to-end API verification)
- **Result**: PASS
- **Evidence**: Revalidated runtime query/search data path after repository DI seeding fix. Verified non-empty node NDJSON responses for component queries. Artifact: `docs/qa/feature-checks/runs/graph/graph-query-and-search-api/run-003/tier2-api-check.json`.
## Recheck (Run-005)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay validated via Graph.Api integration suite.
- **Tests**: PASS (`src/Graph/__Tests/StellaOps.Graph.Api.Tests`: 66/66).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/graph/graph-query-and-search-api/run-005/tier2-api-check.json`
- **Outcome**: Query/search API behavior remains healthy with tenant/auth coverage intact.
## Recheck (Run-006)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay validated via Graph API/indexer suites.
- **Tests**: PASS (src/Graph/__Tests/StellaOps.Graph.Api.Tests: 66/66; src/Graph/__Tests/StellaOps.Graph.Indexer.Tests: 37/37; src/Graph/__Tests/StellaOps.Graph.Indexer.Persistence.Tests: 17/17).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/graph/graph-query-and-search-api/run-006/tier2-api-check.json
- **Outcome**: Query/search API behavior remains healthy with tenant/auth coverage intact.
## Recheck (Run-007)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay validated via Graph API/indexer suites.
- **Tests**: PASS (src/Graph/__Tests/StellaOps.Graph.Api.Tests: 66/66; src/Graph/__Tests/StellaOps.Graph.Indexer.Tests: 37/37; src/Graph/__Tests/StellaOps.Graph.Indexer.Persistence.Tests: 17/17).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/graph/graph-query-and-search-api/run-007/tier2-api-check.json
- **Outcome**: Query/search API behavior remains healthy with tenant/auth coverage intact.
## Recheck (Run-008)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay validated via Graph API/indexer suites.
- **Tests**: PASS (src/Graph/__Tests/StellaOps.Graph.Api.Tests: 66/66; src/Graph/__Tests/StellaOps.Graph.Indexer.Tests: 37/37; src/Graph/__Tests/StellaOps.Graph.Indexer.Persistence.Tests: 17/17).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/graph/graph-query-and-search-api/run-008/tier2-api-check.json
- **Outcome**: Query/search API behavior remains healthy with tenant/auth coverage intact.
## Recheck (Run-009)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay + deterministic integration suite replay.
- **Tests**: PASS (Graph.Api.Tests 66/66, Graph.Indexer.Tests 37/37, Graph.Indexer.Persistence.Tests 17/17).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/graph/graph-query-and-search-api/run-009/tier2-api-check.json
- **Outcome**: Checked Graph behavior remains healthy in continued replay.
## Recheck (Run-010)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Graph Api 66/66, Indexer 37/37, Indexer.Persistence 17/17; total 120/120).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/graph/graph-query-and-search-api/run-010/tier2-integration-check.json
- **Outcome**: Checked graph behavior remains healthy in continued replay.
## Recheck (Run-011)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Graph Api 66/66, Indexer 37/37, Indexer.Persistence 17/17; total 120/120).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/graph/graph-query-and-search-api/run-011/tier2-integration-check.json
- **Outcome**: Checked graph behavior remains healthy in continued replay.
## Recheck (Run-012)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay + deterministic Graph suite replay.
- **Tests**: PASS (Graph.Api 66/66, Graph.Indexer 37/37, Graph.Indexer.Persistence 17/17; total 120/120).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/graph/graph-query-and-search-api/run-012/tier2-api-check.json
- **Outcome**: Checked graph behavior remains healthy in continued replay.

View File

@@ -46,3 +46,87 @@ Plugin configuration loading and context injection for runtime plugin behavior c
### Verdict
**PASS** - Plugin configuration and context system verified. IPluginContext provides correct configuration values through PluginConfiguration JSON parsing. PluginLogger routes messages through host logging infrastructure with plugin-scoped prefixes. PluginServices resolves registered dependencies with trust-level access control. PluginContextFactory creates contexts with trust level and cancellation token propagation.
## Recheck (Run-002)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (`src/Plugin/__Tests/StellaOps.Plugin.Host.Tests`: 105/105; module matrix: 314/314).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/plugin/plugin-configuration-and-context/run-002/tier2-integration-check.json`
- **Outcome**: Configuration/context behavior remains consistent with checked status.
## Recheck (Run-003)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay (serialized project execution).
- **Tests**: PASS (`src/Plugin/__Tests/StellaOps.Plugin.Host.Tests`: 105/105; module matrix: 314/314).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/plugin/plugin-configuration-and-context/run-003/tier2-integration-check.json`
- **Outcome**: Configuration/context behavior remains consistent with checked status.
## Recheck (Run-004)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay (serialized project execution).
- **Tests**: PASS (`src/Plugin/__Tests/StellaOps.Plugin.Host.Tests`: 105/105; module matrix: 314/314).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/plugin/plugin-configuration-and-context/run-004/tier2-integration-check.json`
- **Outcome**: Plugin context/configuration contracts remain healthy.
## Recheck (Run-005)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay (serialized project execution).
- **Tests**: PASS (`src/Plugin/__Tests/StellaOps.Plugin.Host.Tests`: 105/105; module matrix: 314/314).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/plugin/plugin-configuration-and-context/run-005/tier2-integration-check.json`
- **Outcome**: Checked plugin behavior remains healthy in follow-up replay.
## Recheck (Run-006)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay (serialized project execution).
- **Tests**: PASS (module matrix: 314/314).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/plugin-configuration-and-context/run-006/tier2-integration-check.json
- **Outcome**: Checked plugin behavior remains healthy in continued replay.
## Recheck (Run-007)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay (serialized project execution).
- **Tests**: PASS (module matrix: 314/314).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/plugin-configuration-and-context/run-007/tier2-integration-check.json
- **Outcome**: Checked plugin behavior remains healthy in continued replay.
## Recheck (Run-008)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay (serialized module matrix).
- **Tests**: PASS (Plugin matrix 314/314: Abstractions 79, Host 105, Registry 65, Sandbox 47, SDK 7, HelloWorld sample 11).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/plugin-configuration-and-context/run-008/tier2-integration-check.json
- **Outcome**: Checked Plugin behavior remains healthy in continued replay.
## Recheck (Run-009)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay (serialized module matrix).
- **Tests**: PASS (Plugin matrix 314/314: Abstractions 79, Host 105, Registry 65, Sandbox 47, SDK 7, HelloWorld sample 11).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/plugin-configuration-and-context/run-009/tier2-integration-check.json
- **Outcome**: Checked Plugin behavior remains healthy in continued replay.
## Recheck (Run-010)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Abstractions 79/79, Host 105/105, Registry 65/65, Sandbox 47/47, SDK 7/7, HelloWorld sample 11/11; total 314/314).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/plugin-configuration-and-context/run-010/tier2-integration-check.json
- **Outcome**: Checked plugin behavior remains healthy in continued replay.
## Recheck (Run-011)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Abstractions 79/79, Host 105/105, Registry 65/65, Sandbox 47/47, SDK 7/7, HelloWorld sample 11/11; total 314/314).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/plugin-configuration-and-context/run-011/tier2-integration-check.json
- **Outcome**: Checked plugin behavior remains healthy in continued replay.
## Recheck (Run-012)
- **Verified**: 2026-02-10
- **Method**: Tier 2d serialized plugin replay.
- **Tests**: PASS (Abstractions 79/79, Host 105/105, Registry 65/65, Sandbox 47/47, SDK 7/7, HelloWorld 11/11; total 314/314).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/plugin-configuration-and-context/run-012/tier2-integration-check.json
- **Outcome**: Checked plugin behavior remains healthy in continued replay.
## Recheck (Run-013)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay with fresh command-output evidence.
- **Tests**: PASS (105/105; Plugin matrix 314/314: Abstractions 79, Host 105, Registry 65, Sandbox 47, SDK 7, HelloWorld sample 11.)
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/plugin-configuration-and-context/run-013/tier2-integration-check.json
- **Outcome**: Checked Plugin behavior remains healthy in continued replay.

View File

@@ -42,3 +42,87 @@ Plugin dependency resolution with resolver service, interface, and comprehensive
### Verdict
**PASS** - Plugin dependency resolution verified. Topological sort produces correct load order for dependency chains. Circular dependency detection reports accurate cycle paths via DFS. Version constraint matching works for all 7 operators (>=, >, <=, <, =, ~, ^). Unload order is reverse of load order. Optional dependencies do not block loading when missing.
## Recheck (Run-002)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (`src/Plugin/__Tests/StellaOps.Plugin.Host.Tests`: 105/105; module matrix: 314/314).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/plugin/plugin-dependency-resolution/run-002/tier2-integration-check.json`
- **Outcome**: Dependency resolution/load-order behavior remains stable.
## Recheck (Run-003)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay (serialized project execution).
- **Tests**: PASS (`src/Plugin/__Tests/StellaOps.Plugin.Host.Tests`: 105/105; module matrix: 314/314).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/plugin/plugin-dependency-resolution/run-003/tier2-integration-check.json`
- **Outcome**: Dependency resolution/load-order behavior remains stable.
## Recheck (Run-004)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay (serialized project execution).
- **Tests**: PASS (`src/Plugin/__Tests/StellaOps.Plugin.Host.Tests`: 105/105; module matrix: 314/314).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/plugin/plugin-dependency-resolution/run-004/tier2-integration-check.json`
- **Outcome**: Dependency graph/load-order behavior remains healthy.
## Recheck (Run-005)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay (serialized project execution).
- **Tests**: PASS (`src/Plugin/__Tests/StellaOps.Plugin.Host.Tests`: 105/105; module matrix: 314/314).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/plugin/plugin-dependency-resolution/run-005/tier2-integration-check.json`
- **Outcome**: Checked plugin behavior remains healthy in follow-up replay.
## Recheck (Run-006)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay (serialized project execution).
- **Tests**: PASS (module matrix: 314/314).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/plugin-dependency-resolution/run-006/tier2-integration-check.json
- **Outcome**: Checked plugin behavior remains healthy in continued replay.
## Recheck (Run-007)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay (serialized project execution).
- **Tests**: PASS (module matrix: 314/314).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/plugin-dependency-resolution/run-007/tier2-integration-check.json
- **Outcome**: Checked plugin behavior remains healthy in continued replay.
## Recheck (Run-008)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay (serialized module matrix).
- **Tests**: PASS (Plugin matrix 314/314: Abstractions 79, Host 105, Registry 65, Sandbox 47, SDK 7, HelloWorld sample 11).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/plugin-dependency-resolution/run-008/tier2-integration-check.json
- **Outcome**: Checked Plugin behavior remains healthy in continued replay.
## Recheck (Run-009)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay (serialized module matrix).
- **Tests**: PASS (Plugin matrix 314/314: Abstractions 79, Host 105, Registry 65, Sandbox 47, SDK 7, HelloWorld sample 11).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/plugin-dependency-resolution/run-009/tier2-integration-check.json
- **Outcome**: Checked Plugin behavior remains healthy in continued replay.
## Recheck (Run-010)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Abstractions 79/79, Host 105/105, Registry 65/65, Sandbox 47/47, SDK 7/7, HelloWorld sample 11/11; total 314/314).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/plugin-dependency-resolution/run-010/tier2-integration-check.json
- **Outcome**: Checked plugin behavior remains healthy in continued replay.
## Recheck (Run-011)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Abstractions 79/79, Host 105/105, Registry 65/65, Sandbox 47/47, SDK 7/7, HelloWorld sample 11/11; total 314/314).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/plugin-dependency-resolution/run-011/tier2-integration-check.json
- **Outcome**: Checked plugin behavior remains healthy in continued replay.
## Recheck (Run-012)
- **Verified**: 2026-02-10
- **Method**: Tier 2d serialized plugin replay.
- **Tests**: PASS (Abstractions 79/79, Host 105/105, Registry 65/65, Sandbox 47/47, SDK 7/7, HelloWorld 11/11; total 314/314).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/plugin-dependency-resolution/run-012/tier2-integration-check.json
- **Outcome**: Checked plugin behavior remains healthy in continued replay.
## Recheck (Run-013)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay with fresh command-output evidence.
- **Tests**: PASS (105/105; Plugin matrix 314/314: Abstractions 79, Host 105, Registry 65, Sandbox 47, SDK 7, HelloWorld sample 11.)
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/plugin-dependency-resolution/run-013/tier2-integration-check.json
- **Outcome**: Checked Plugin behavior remains healthy in continued replay.

View File

@@ -45,3 +45,87 @@ Multi-strategy plugin discovery with filesystem scanning, embedded plugins, and
### Verdict
**PASS** - Plugin discovery verified through integration testing. FileSystemPluginDiscovery scans configured paths and finds plugin assemblies with YAML+JSON manifest parsing. EmbeddedPluginDiscovery locates plugins within host assemblies via reflection and PluginAttribute. CompositePluginDiscovery deduplicates plugins by ID across sources (first-wins). Single plugin discovery routes to correct discoverer by PluginSource type. Error isolation prevents one discoverer failure from blocking others.
## Recheck (Run-002)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (`src/Plugin/__Tests/StellaOps.Plugin.Host.Tests`: 105/105; module matrix: 314/314).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/plugin/plugin-discovery/run-002/tier2-integration-check.json`
- **Outcome**: Filesystem/embedded/composite discovery paths remain healthy.
## Recheck (Run-003)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay (serialized project execution).
- **Tests**: PASS (`src/Plugin/__Tests/StellaOps.Plugin.Host.Tests`: 105/105; module matrix: 314/314).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/plugin/plugin-discovery/run-003/tier2-integration-check.json`
- **Outcome**: Filesystem/embedded/composite discovery paths remain healthy.
## Recheck (Run-004)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay (serialized project execution).
- **Tests**: PASS (`src/Plugin/__Tests/StellaOps.Plugin.Host.Tests`: 105/105; module matrix: 314/314).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/plugin/plugin-discovery/run-004/tier2-integration-check.json`
- **Outcome**: Filesystem/embedded/composite discovery paths remain healthy.
## Recheck (Run-005)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay (serialized project execution).
- **Tests**: PASS (`src/Plugin/__Tests/StellaOps.Plugin.Host.Tests`: 105/105; module matrix: 314/314).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/plugin/plugin-discovery/run-005/tier2-integration-check.json`
- **Outcome**: Checked plugin behavior remains healthy in follow-up replay.
## Recheck (Run-006)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay (serialized project execution).
- **Tests**: PASS (module matrix: 314/314).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/plugin-discovery/run-006/tier2-integration-check.json
- **Outcome**: Checked plugin behavior remains healthy in continued replay.
## Recheck (Run-007)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay (serialized project execution).
- **Tests**: PASS (module matrix: 314/314).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/plugin-discovery/run-007/tier2-integration-check.json
- **Outcome**: Checked plugin behavior remains healthy in continued replay.
## Recheck (Run-008)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay (serialized module matrix).
- **Tests**: PASS (Plugin matrix 314/314: Abstractions 79, Host 105, Registry 65, Sandbox 47, SDK 7, HelloWorld sample 11).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/plugin-discovery/run-008/tier2-integration-check.json
- **Outcome**: Checked Plugin behavior remains healthy in continued replay.
## Recheck (Run-009)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay (serialized module matrix).
- **Tests**: PASS (Plugin matrix 314/314: Abstractions 79, Host 105, Registry 65, Sandbox 47, SDK 7, HelloWorld sample 11).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/plugin-discovery/run-009/tier2-integration-check.json
- **Outcome**: Checked Plugin behavior remains healthy in continued replay.
## Recheck (Run-010)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Abstractions 79/79, Host 105/105, Registry 65/65, Sandbox 47/47, SDK 7/7, HelloWorld sample 11/11; total 314/314).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/plugin-discovery/run-010/tier2-integration-check.json
- **Outcome**: Checked plugin behavior remains healthy in continued replay.
## Recheck (Run-011)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Abstractions 79/79, Host 105/105, Registry 65/65, Sandbox 47/47, SDK 7/7, HelloWorld sample 11/11; total 314/314).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/plugin-discovery/run-011/tier2-integration-check.json
- **Outcome**: Checked plugin behavior remains healthy in continued replay.
## Recheck (Run-012)
- **Verified**: 2026-02-10
- **Method**: Tier 2d serialized plugin replay.
- **Tests**: PASS (Abstractions 79/79, Host 105/105, Registry 65/65, Sandbox 47/47, SDK 7/7, HelloWorld 11/11; total 314/314).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/plugin-discovery/run-012/tier2-integration-check.json
- **Outcome**: Checked plugin behavior remains healthy in continued replay.
## Recheck (Run-013)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay with fresh command-output evidence.
- **Tests**: PASS (11/11; Plugin matrix 314/314: Abstractions 79, Host 105, Registry 65, Sandbox 47, SDK 7, HelloWorld sample 11.)
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/plugin-discovery/run-013/tier2-integration-check.json
- **Outcome**: Checked Plugin behavior remains healthy in continued replay.

View File

@@ -46,3 +46,87 @@ Plugin host with assembly-based loading, isolated AssemblyLoadContext, and confi
### Verdict
**PASS** - Plugin host with assembly isolation verified. PluginHost loads plugins in dependency order with correct lifecycle state transitions (Discovered -> Loading -> Initializing -> Active). Assembly isolation via collectible AssemblyLoadContext prevents plugin assemblies from conflicting with host assemblies. Collectible contexts allow plugin unloading and GC collection. Auto-recovery reloads unhealthy plugins when enabled. Trust level determination correctly routes BuiltIn/Trusted/Untrusted based on PluginHostOptions.
## Recheck (Run-002)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (`src/Plugin/__Tests/StellaOps.Plugin.Host.Tests`: 105/105; module matrix: 314/314).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/plugin/plugin-host-with-assembly-isolation/run-002/tier2-integration-check.json`
- **Outcome**: Host lifecycle and assembly isolation contracts remain verified.
## Recheck (Run-003)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay (serialized project execution).
- **Tests**: PASS (`src/Plugin/__Tests/StellaOps.Plugin.Host.Tests`: 105/105; module matrix: 314/314).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/plugin/plugin-host-with-assembly-isolation/run-003/tier2-integration-check.json`
- **Outcome**: Host lifecycle and assembly isolation contracts remain verified.
## Recheck (Run-004)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay (serialized project execution).
- **Tests**: PASS (`src/Plugin/__Tests/StellaOps.Plugin.Host.Tests`: 105/105; module matrix: 314/314).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/plugin/plugin-host-with-assembly-isolation/run-004/tier2-integration-check.json`
- **Outcome**: Host lifecycle and assembly isolation contracts remain verified.
## Recheck (Run-005)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay (serialized project execution).
- **Tests**: PASS (`src/Plugin/__Tests/StellaOps.Plugin.Host.Tests`: 105/105; module matrix: 314/314).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/plugin/plugin-host-with-assembly-isolation/run-005/tier2-integration-check.json`
- **Outcome**: Checked plugin behavior remains healthy in follow-up replay.
## Recheck (Run-006)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay (serialized project execution).
- **Tests**: PASS (module matrix: 314/314).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/plugin-host-with-assembly-isolation/run-006/tier2-integration-check.json
- **Outcome**: Checked plugin behavior remains healthy in continued replay.
## Recheck (Run-007)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay (serialized project execution).
- **Tests**: PASS (module matrix: 314/314).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/plugin-host-with-assembly-isolation/run-007/tier2-integration-check.json
- **Outcome**: Checked plugin behavior remains healthy in continued replay.
## Recheck (Run-008)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay (serialized module matrix).
- **Tests**: PASS (Plugin matrix 314/314: Abstractions 79, Host 105, Registry 65, Sandbox 47, SDK 7, HelloWorld sample 11).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/plugin-host-with-assembly-isolation/run-008/tier2-integration-check.json
- **Outcome**: Checked Plugin behavior remains healthy in continued replay.
## Recheck (Run-009)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay (serialized module matrix).
- **Tests**: PASS (Plugin matrix 314/314: Abstractions 79, Host 105, Registry 65, Sandbox 47, SDK 7, HelloWorld sample 11).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/plugin-host-with-assembly-isolation/run-009/tier2-integration-check.json
- **Outcome**: Checked Plugin behavior remains healthy in continued replay.
## Recheck (Run-010)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Abstractions 79/79, Host 105/105, Registry 65/65, Sandbox 47/47, SDK 7/7, HelloWorld sample 11/11; total 314/314).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/plugin-host-with-assembly-isolation/run-010/tier2-integration-check.json
- **Outcome**: Checked plugin behavior remains healthy in continued replay.
## Recheck (Run-011)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Abstractions 79/79, Host 105/105, Registry 65/65, Sandbox 47/47, SDK 7/7, HelloWorld sample 11/11; total 314/314).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/plugin-host-with-assembly-isolation/run-011/tier2-integration-check.json
- **Outcome**: Checked plugin behavior remains healthy in continued replay.
## Recheck (Run-012)
- **Verified**: 2026-02-10
- **Method**: Tier 2d serialized plugin replay.
- **Tests**: PASS (Abstractions 79/79, Host 105/105, Registry 65/65, Sandbox 47/47, SDK 7/7, HelloWorld 11/11; total 314/314).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/plugin-host-with-assembly-isolation/run-012/tier2-integration-check.json
- **Outcome**: Checked plugin behavior remains healthy in continued replay.
## Recheck (Run-013)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay with fresh command-output evidence.
- **Tests**: PASS (105/105; Plugin matrix 314/314: Abstractions 79, Host 105, Registry 65, Sandbox 47, SDK 7, HelloWorld sample 11.)
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/plugin-host-with-assembly-isolation/run-013/tier2-integration-check.json
- **Outcome**: Checked Plugin behavior remains healthy in continued replay.

View File

@@ -47,3 +47,87 @@ Process-level plugin sandboxing with gRPC communication bridge for secure out-of
### Verdict
**PASS** - Plugin sandbox with process isolation verified. Untrusted plugins execute in sandboxed process with restricted capabilities via ProcessSandbox gRPC bridge. Trusted plugins run isolated with monitoring via PluginHealthMonitor. Built-in plugins run in-process with full access. Health monitoring detects unhealthy sandboxed plugins through periodic HealthCheckAsync. Process isolation with resource limits and filesystem policies prevents sandbox escape. Trust level routing in PluginHost correctly determines execution environment based on PluginHostOptions.
## Recheck (Run-002)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (`src/Plugin/__Tests/StellaOps.Plugin.Sandbox.Tests`: 47/47; module matrix: 314/314).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/plugin/plugin-sandbox/run-002/tier2-integration-check.json`
- **Outcome**: Sandbox resource/trust-level behavior remains stable.
## Recheck (Run-003)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay (serialized project execution).
- **Tests**: PASS (`src/Plugin/__Tests/StellaOps.Plugin.Sandbox.Tests`: 47/47; module matrix: 314/314).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/plugin/plugin-sandbox/run-003/tier2-integration-check.json`
- **Outcome**: Sandbox resource/trust-level behavior remains stable.
## Recheck (Run-004)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay (serialized project execution).
- **Tests**: PASS (`src/Plugin/__Tests/StellaOps.Plugin.Sandbox.Tests`: 47/47; module matrix: 314/314).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/plugin/plugin-sandbox/run-004/tier2-integration-check.json`
- **Outcome**: Sandbox resource-limiter and trust-level execution checks remain healthy.
## Recheck (Run-005)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay (serialized project execution).
- **Tests**: PASS (`src/Plugin/__Tests/StellaOps.Plugin.Sandbox.Tests`: 47/47; module matrix: 314/314).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/plugin/plugin-sandbox/run-005/tier2-integration-check.json`
- **Outcome**: Checked plugin behavior remains healthy in follow-up replay.
## Recheck (Run-006)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay (serialized project execution).
- **Tests**: PASS (module matrix: 314/314).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/plugin-sandbox/run-006/tier2-integration-check.json
- **Outcome**: Checked plugin behavior remains healthy in continued replay.
## Recheck (Run-007)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay (serialized project execution).
- **Tests**: PASS (module matrix: 314/314).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/plugin-sandbox/run-007/tier2-integration-check.json
- **Outcome**: Checked plugin behavior remains healthy in continued replay.
## Recheck (Run-008)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay (serialized module matrix).
- **Tests**: PASS (Plugin matrix 314/314: Abstractions 79, Host 105, Registry 65, Sandbox 47, SDK 7, HelloWorld sample 11).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/plugin-sandbox/run-008/tier2-integration-check.json
- **Outcome**: Checked Plugin behavior remains healthy in continued replay.
## Recheck (Run-009)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay (serialized module matrix).
- **Tests**: PASS (Plugin matrix 314/314: Abstractions 79, Host 105, Registry 65, Sandbox 47, SDK 7, HelloWorld sample 11).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/plugin-sandbox/run-009/tier2-integration-check.json
- **Outcome**: Checked Plugin behavior remains healthy in continued replay.
## Recheck (Run-010)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Abstractions 79/79, Host 105/105, Registry 65/65, Sandbox 47/47, SDK 7/7, HelloWorld sample 11/11; total 314/314).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/plugin-sandbox/run-010/tier2-integration-check.json
- **Outcome**: Checked plugin behavior remains healthy in continued replay.
## Recheck (Run-011)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Abstractions 79/79, Host 105/105, Registry 65/65, Sandbox 47/47, SDK 7/7, HelloWorld sample 11/11; total 314/314).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/plugin-sandbox/run-011/tier2-integration-check.json
- **Outcome**: Checked plugin behavior remains healthy in continued replay.
## Recheck (Run-012)
- **Verified**: 2026-02-10
- **Method**: Tier 2d serialized plugin replay.
- **Tests**: PASS (Abstractions 79/79, Host 105/105, Registry 65/65, Sandbox 47/47, SDK 7/7, HelloWorld 11/11; total 314/314).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/plugin-sandbox/run-012/tier2-integration-check.json
- **Outcome**: Checked plugin behavior remains healthy in continued replay.
## Recheck (Run-013)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay with fresh command-output evidence.
- **Tests**: PASS (47/47; Plugin matrix 314/314: Abstractions 79, Host 105, Registry 65, Sandbox 47, SDK 7, HelloWorld sample 11.)
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/plugin-sandbox/run-013/tier2-integration-check.json
- **Outcome**: Checked Plugin behavior remains healthy in continued replay.

View File

@@ -55,3 +55,87 @@ Complete unified plugin system reworking seven disparate plugin patterns (Crypto
### Verdict
**PASS** - Unified plugin architecture with trust-based execution model verified. IPlugin lifecycle transitions correctly through Discovered -> Loading -> Initializing -> Active -> Stopping -> Stopped states. Trust-based execution routes BuiltIn plugins in-process, Trusted plugins with monitoring, Untrusted plugins to sandboxed process. Capability composition allows multiple capabilities per plugin via PluginCapabilities flags enum. GetPluginsWithCapability<T> returns only active plugins with matching capability. Plugin unload disposes and unloads AssemblyLoadContext. Plugin reload preserves configuration after restart. HelloWorldPlugin demonstrates complete IPlugin contract implementation.
## Recheck (Run-002)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay (full Plugin matrix).
- **Tests**: PASS (Abstractions 79/79, Host 105/105, Registry 65/65, Sandbox 47/47, SDK 7/7, HelloWorld 11/11; total 314/314).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/plugin/unified-plugin-architecture-with-trust-based-execution-model/run-002/tier2-integration-check.json`
- **Outcome**: Unified plugin lifecycle/capability/trust model remains verified.
## Recheck (Run-003)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay (serialized project execution).
- **Tests**: PASS (Abstractions 79/79, Host 105/105, Registry 65/65, Sandbox 47/47, SDK 7/7, HelloWorld 11/11; total 314/314).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/plugin/unified-plugin-architecture-with-trust-based-execution-model/run-003/tier2-integration-check.json`
- **Outcome**: Unified plugin lifecycle/capability/trust model remains verified.
## Recheck (Run-004)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay (serialized project execution).
- **Tests**: PASS (module matrix: 314/314).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/plugin/unified-plugin-architecture-with-trust-based-execution-model/run-004/tier2-integration-check.json`
- **Outcome**: Unified plugin lifecycle/trust model remains healthy across abstractions, host, registry, sandbox, SDK, and sample plugin tests.
## Recheck (Run-005)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay (serialized project execution).
- **Tests**: PASS (module matrix: 314/314).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/plugin/unified-plugin-architecture-with-trust-based-execution-model/run-005/tier2-integration-check.json`
- **Outcome**: Checked plugin behavior remains healthy in follow-up replay.
## Recheck (Run-006)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay (serialized project execution).
- **Tests**: PASS (module matrix: 314/314).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/unified-plugin-architecture-with-trust-based-execution-model/run-006/tier2-integration-check.json
- **Outcome**: Checked plugin behavior remains healthy in continued replay.
## Recheck (Run-007)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay (serialized project execution).
- **Tests**: PASS (module matrix: 314/314).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/unified-plugin-architecture-with-trust-based-execution-model/run-007/tier2-integration-check.json
- **Outcome**: Checked plugin behavior remains healthy in continued replay.
## Recheck (Run-008)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay (serialized module matrix).
- **Tests**: PASS (Plugin matrix 314/314: Abstractions 79, Host 105, Registry 65, Sandbox 47, SDK 7, HelloWorld sample 11).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/unified-plugin-architecture-with-trust-based-execution-model/run-008/tier2-integration-check.json
- **Outcome**: Checked Plugin behavior remains healthy in continued replay.
## Recheck (Run-009)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay (serialized module matrix).
- **Tests**: PASS (Plugin matrix 314/314: Abstractions 79, Host 105, Registry 65, Sandbox 47, SDK 7, HelloWorld sample 11).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/unified-plugin-architecture-with-trust-based-execution-model/run-009/tier2-integration-check.json
- **Outcome**: Checked Plugin behavior remains healthy in continued replay.
## Recheck (Run-010)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Abstractions 79/79, Host 105/105, Registry 65/65, Sandbox 47/47, SDK 7/7, HelloWorld sample 11/11; total 314/314).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/unified-plugin-architecture-with-trust-based-execution-model/run-010/tier2-integration-check.json
- **Outcome**: Checked plugin behavior remains healthy in continued replay.
## Recheck (Run-011)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Abstractions 79/79, Host 105/105, Registry 65/65, Sandbox 47/47, SDK 7/7, HelloWorld sample 11/11; total 314/314).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/unified-plugin-architecture-with-trust-based-execution-model/run-011/tier2-integration-check.json
- **Outcome**: Checked plugin behavior remains healthy in continued replay.
## Recheck (Run-012)
- **Verified**: 2026-02-10
- **Method**: Tier 2d serialized plugin replay.
- **Tests**: PASS (Abstractions 79/79, Host 105/105, Registry 65/65, Sandbox 47/47, SDK 7/7, HelloWorld 11/11; total 314/314).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/unified-plugin-architecture-with-trust-based-execution-model/run-012/tier2-integration-check.json
- **Outcome**: Checked plugin behavior remains healthy in continued replay.
## Recheck (Run-013)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay with fresh command-output evidence.
- **Tests**: PASS (79/79; Plugin matrix 314/314: Abstractions 79, Host 105, Registry 65, Sandbox 47, SDK 7, HelloWorld sample 11.)
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/plugin/unified-plugin-architecture-with-trust-based-execution-model/run-013/tier2-integration-check.json
- **Outcome**: Checked Plugin behavior remains healthy in continued replay.

View File

@@ -32,6 +32,85 @@ Risk engine combining CVSS scores with KEV (Known Exploited Vulnerabilities) dat
## Verification
- **Verified**: 2026-02-10
- **Method**: Tier 1 code review + Tier 2d test verification
- **Method**: Tier 2a live API replay + Tier 2d regression verification
- **Build**: Core and Infrastructure projects build cleanly (0 errors, 0 warnings). Worker/WebService have deprecation notices but compile.
- **Tests**: 44+ tests covering this feature across 4 test files (UnitTest1/RiskScoreWorkerTests: 17, RiskEngineApiTests: 4, FixChainRiskProviderTests: 13, FixChainRiskIntegrationTests: 10). All 55/55 module tests pass.
- **Tests**: RiskEngine suite re-run in Release with 94/94 passing, including added API/provider regression coverage (`Simulations_CvssKev_UsesInlineSignals`, provider-list exposure check, and inline-signal provider unit tests).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/riskengine/cvss-kev-risk-signal-combination/run-002/tier2-api-check.json`
## Recheck (Run-003)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay via in-process WebApplicationFactory + full suite replay.
- **Tests**: PASS (`src/RiskEngine/StellaOps.RiskEngine/StellaOps.RiskEngine.Tests`: 94/94).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/riskengine/cvss-kev-risk-signal-combination/run-003/tier2-api-check.json`
- **Outcome**: CVSS+KEV provider exposure and inline-signal simulation behavior remain stable after subsequent module edits.
## Recheck (Run-004)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay via in-process WebApplicationFactory + full suite replay.
- **Tests**: PASS (`src/RiskEngine/StellaOps.RiskEngine/StellaOps.RiskEngine.Tests`: 94/94).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/riskengine/cvss-kev-risk-signal-combination/run-004/tier2-api-check.json`
- **Outcome**: CVSS+KEV provider exposure and inline-signal simulation behavior remain stable.
## Recheck (Run-005)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay validated via RiskEngine integration suite.
- **Tests**: PASS (`src/RiskEngine/StellaOps.RiskEngine/StellaOps.RiskEngine.Tests`: 94/94).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/riskengine/cvss-kev-risk-signal-combination/run-005/tier2-api-check.json`
- **Outcome**: CVSS/KEV risk signal combination behavior remains healthy.
## Recheck (Run-006)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay + deterministic integration suite replay.
- **Tests**: PASS (src/RiskEngine/StellaOps.RiskEngine/StellaOps.RiskEngine.Tests: 94/94).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/riskengine/cvss-kev-risk-signal-combination/run-006/tier2-api-check.json
- **Outcome**: Checked RiskEngine behavior remains healthy in continued replay.
## Recheck (Run-007)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay + deterministic integration suite replay.
- **Tests**: PASS (src/RiskEngine/StellaOps.RiskEngine/StellaOps.RiskEngine.Tests: 94/94).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/riskengine/cvss-kev-risk-signal-combination/run-007/tier2-api-check.json
- **Outcome**: Checked RiskEngine behavior remains healthy in continued replay.
## Recheck (Run-008)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay + deterministic integration suite replay.
- **Tests**: PASS (src/RiskEngine/StellaOps.RiskEngine/StellaOps.RiskEngine.Tests: 94/94).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/riskengine/cvss-kev-risk-signal-combination/run-008/tier2-api-check.json
- **Outcome**: Checked RiskEngine behavior remains healthy in continued replay.
## Recheck (Run-009)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay + deterministic integration suite replay.
- **Tests**: PASS (src/RiskEngine/StellaOps.RiskEngine/StellaOps.RiskEngine.Tests: 94/94).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/riskengine/cvss-kev-risk-signal-combination/run-009/tier2-api-check.json
- **Outcome**: Checked RiskEngine behavior remains healthy in continued replay.
## Recheck (Run-010)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/RiskEngine/StellaOps.RiskEngine/StellaOps.RiskEngine.Tests: 94/94).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/riskengine/cvss-kev-risk-signal-combination/run-010/tier2-integration-check.json
- **Outcome**: Checked risk engine behavior remains healthy in continued replay.
## Recheck (Run-011)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/RiskEngine/StellaOps.RiskEngine/StellaOps.RiskEngine.Tests: 94/94).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/riskengine/cvss-kev-risk-signal-combination/run-011/tier2-integration-check.json
- **Outcome**: Checked risk engine behavior remains healthy in continued replay.
## Recheck (Run-012)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay + deterministic integration suite replay.
- **Tests**: PASS (src/RiskEngine/StellaOps.RiskEngine/StellaOps.RiskEngine.Tests: 94/94).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/riskengine/cvss-kev-risk-signal-combination/run-012/tier2-api-check.json
- **Outcome**: Checked risk engine behavior remains healthy in continued replay.
## Recheck (Run-013)
- **Verified**: 2026-02-10
- **Method**: Tier 2a live HTTPS API verification with fresh request/response capture.
- **Tests**: PASS (src/RiskEngine/StellaOps.RiskEngine/StellaOps.RiskEngine.Tests: 94/94).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/riskengine/cvss-kev-risk-signal-combination/run-013/tier2-api-check.json
- **Captured Requests**: `/risk-scores/providers`; `/risk-scores/simulations` for KEV bonus (0.95), no-KEV baseline (0.75), and unknown provider error semantics.
- **Outcome**: CVSS+KEV checked behavior revalidated from live API transactions.

View File

@@ -29,6 +29,85 @@ EPSS provider with bundle loading, fetching, and risk band mapping. Contains two
## Verification
- **Verified**: 2026-02-10
- **Method**: Tier 1 code review + Tier 2d test verification
- **Method**: Tier 2a live API replay + Tier 2d regression verification
- **Build**: Passes (0 errors, 0 warnings for Core/Infrastructure)
- **Tests**: 14+ tests across 2 test files (EpssBundleTests: 8, RiskScoreWorkerTests EPSS-specific: 6+). All 55/55 module tests pass.
- **Tests**: RiskEngine suite re-run in Release with 94/94 passing, including added API/provider regression coverage (`Simulations_Epss_UsesInlineSignals`, `Simulations_CvssKevEpss_UsesInlineSignals`, and inline EPSS signal provider tests).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/riskengine/epss-risk-band-mapping/run-002/tier2-api-check.json`
## Recheck (Run-003)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay via in-process WebApplicationFactory + full suite replay.
- **Tests**: PASS (`src/RiskEngine/StellaOps.RiskEngine/StellaOps.RiskEngine.Tests`: 94/94).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/riskengine/epss-risk-band-mapping/run-003/tier2-api-check.json`
- **Outcome**: EPSS and CVSS+KEV+EPSS API simulation paths remain reachable and deterministic.
## Recheck (Run-004)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay via in-process WebApplicationFactory + full suite replay.
- **Tests**: PASS (`src/RiskEngine/StellaOps.RiskEngine/StellaOps.RiskEngine.Tests`: 94/94).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/riskengine/epss-risk-band-mapping/run-004/tier2-api-check.json`
- **Outcome**: EPSS and CVSS+KEV+EPSS API simulation paths remain reachable and deterministic.
## Recheck (Run-005)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay validated via RiskEngine integration suite.
- **Tests**: PASS (`src/RiskEngine/StellaOps.RiskEngine/StellaOps.RiskEngine.Tests`: 94/94).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/riskengine/epss-risk-band-mapping/run-005/tier2-api-check.json`
- **Outcome**: EPSS risk band mapping behavior remains healthy.
## Recheck (Run-006)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay + deterministic integration suite replay.
- **Tests**: PASS (src/RiskEngine/StellaOps.RiskEngine/StellaOps.RiskEngine.Tests: 94/94).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/riskengine/epss-risk-band-mapping/run-006/tier2-api-check.json
- **Outcome**: Checked RiskEngine behavior remains healthy in continued replay.
## Recheck (Run-007)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay + deterministic integration suite replay.
- **Tests**: PASS (src/RiskEngine/StellaOps.RiskEngine/StellaOps.RiskEngine.Tests: 94/94).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/riskengine/epss-risk-band-mapping/run-007/tier2-api-check.json
- **Outcome**: Checked RiskEngine behavior remains healthy in continued replay.
## Recheck (Run-008)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay + deterministic integration suite replay.
- **Tests**: PASS (src/RiskEngine/StellaOps.RiskEngine/StellaOps.RiskEngine.Tests: 94/94).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/riskengine/epss-risk-band-mapping/run-008/tier2-api-check.json
- **Outcome**: Checked RiskEngine behavior remains healthy in continued replay.
## Recheck (Run-009)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay + deterministic integration suite replay.
- **Tests**: PASS (src/RiskEngine/StellaOps.RiskEngine/StellaOps.RiskEngine.Tests: 94/94).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/riskengine/epss-risk-band-mapping/run-009/tier2-api-check.json
- **Outcome**: Checked RiskEngine behavior remains healthy in continued replay.
## Recheck (Run-010)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/RiskEngine/StellaOps.RiskEngine/StellaOps.RiskEngine.Tests: 94/94).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/riskengine/epss-risk-band-mapping/run-010/tier2-integration-check.json
- **Outcome**: Checked risk engine behavior remains healthy in continued replay.
## Recheck (Run-011)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/RiskEngine/StellaOps.RiskEngine/StellaOps.RiskEngine.Tests: 94/94).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/riskengine/epss-risk-band-mapping/run-011/tier2-integration-check.json
- **Outcome**: Checked risk engine behavior remains healthy in continued replay.
## Recheck (Run-012)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay + deterministic integration suite replay.
- **Tests**: PASS (src/RiskEngine/StellaOps.RiskEngine/StellaOps.RiskEngine.Tests: 94/94).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/riskengine/epss-risk-band-mapping/run-012/tier2-api-check.json
- **Outcome**: Checked risk engine behavior remains healthy in continued replay.
## Recheck (Run-013)
- **Verified**: 2026-02-10
- **Method**: Tier 2a live HTTPS API verification with fresh request/response capture.
- **Tests**: PASS (src/RiskEngine/StellaOps.RiskEngine/StellaOps.RiskEngine.Tests: 94/94).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/riskengine/epss-risk-band-mapping/run-013/tier2-api-check.json
- **Captured Requests**: `/risk-scores/simulations` for EPSS direct score (0.77), CVSS+KEV+EPSS percentile bonus (0.55), and missing-signal fallback (0).
- **Outcome**: EPSS mapping behavior revalidated from live API transactions.

View File

@@ -27,7 +27,86 @@ Dedicated exploit maturity mapping service consolidating EPSS, KEV, and in-the-w
## Verification
- **Verified**: 2026-02-10
- **Method**: Tier 1 code review + Tier 2d test verification
- **Method**: Tier 2a live API replay + Tier 2d test verification
- **Build**: Passes (0 errors, 0 warnings for Core)
- **Tests**: 23 tests across 2 test files (ExploitMaturityServiceTests: 14, ExploitMaturityApiTests: 9). All 55/55 module tests pass.
- **Tests**: RiskEngine suite re-run in Release with 94/94 passing, including exploit maturity endpoint and service coverage.
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/riskengine/exploit-maturity-mapping/run-002/tier2-api-check.json`
- **Note**: `GetMaturityHistoryAsync` returns empty (requires persistence layer). Interface and model for lifecycle tracking exist but persistence is not yet implemented. The core maturity assessment service is fully functional.
## Recheck (Run-003)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay via in-process WebApplicationFactory + Tier 2d service regression replay.
- **Tests**: PASS (`src/RiskEngine/StellaOps.RiskEngine/StellaOps.RiskEngine.Tests`: 94/94).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/riskengine/exploit-maturity-mapping/run-003/tier2-api-check.json`
- **Outcome**: Exploit maturity assessment, level/history, and batch endpoint contracts remain stable.
## Recheck (Run-004)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay via in-process WebApplicationFactory + full suite replay.
- **Tests**: PASS (`src/RiskEngine/StellaOps.RiskEngine/StellaOps.RiskEngine.Tests`: 94/94).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/riskengine/exploit-maturity-mapping/run-004/tier2-api-check.json`
- **Outcome**: Exploit maturity assessment, level/history, and batch endpoint contracts remain stable.
## Recheck (Run-005)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay validated via RiskEngine integration suite.
- **Tests**: PASS (`src/RiskEngine/StellaOps.RiskEngine/StellaOps.RiskEngine.Tests`: 94/94).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/riskengine/exploit-maturity-mapping/run-005/tier2-api-check.json`
- **Outcome**: Exploit maturity mapping behavior remains healthy.
## Recheck (Run-006)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay + deterministic integration suite replay.
- **Tests**: PASS (src/RiskEngine/StellaOps.RiskEngine/StellaOps.RiskEngine.Tests: 94/94).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/riskengine/exploit-maturity-mapping/run-006/tier2-api-check.json
- **Outcome**: Checked RiskEngine behavior remains healthy in continued replay.
## Recheck (Run-007)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay + deterministic integration suite replay.
- **Tests**: PASS (src/RiskEngine/StellaOps.RiskEngine/StellaOps.RiskEngine.Tests: 94/94).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/riskengine/exploit-maturity-mapping/run-007/tier2-api-check.json
- **Outcome**: Checked RiskEngine behavior remains healthy in continued replay.
## Recheck (Run-008)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay + deterministic integration suite replay.
- **Tests**: PASS (src/RiskEngine/StellaOps.RiskEngine/StellaOps.RiskEngine.Tests: 94/94).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/riskengine/exploit-maturity-mapping/run-008/tier2-api-check.json
- **Outcome**: Checked RiskEngine behavior remains healthy in continued replay.
## Recheck (Run-009)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay + deterministic integration suite replay.
- **Tests**: PASS (src/RiskEngine/StellaOps.RiskEngine/StellaOps.RiskEngine.Tests: 94/94).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/riskengine/exploit-maturity-mapping/run-009/tier2-api-check.json
- **Outcome**: Checked RiskEngine behavior remains healthy in continued replay.
## Recheck (Run-010)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/RiskEngine/StellaOps.RiskEngine/StellaOps.RiskEngine.Tests: 94/94).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/riskengine/exploit-maturity-mapping/run-010/tier2-integration-check.json
- **Outcome**: Checked risk engine behavior remains healthy in continued replay.
## Recheck (Run-011)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/RiskEngine/StellaOps.RiskEngine/StellaOps.RiskEngine.Tests: 94/94).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/riskengine/exploit-maturity-mapping/run-011/tier2-integration-check.json
- **Outcome**: Checked risk engine behavior remains healthy in continued replay.
## Recheck (Run-012)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay + deterministic integration suite replay.
- **Tests**: PASS (src/RiskEngine/StellaOps.RiskEngine/StellaOps.RiskEngine.Tests: 94/94).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/riskengine/exploit-maturity-mapping/run-012/tier2-api-check.json
- **Outcome**: Checked risk engine behavior remains healthy in continued replay.
## Recheck (Run-013)
- **Verified**: 2026-02-10
- **Method**: Tier 2a live HTTPS API verification with fresh request/response capture.
- **Tests**: PASS (src/RiskEngine/StellaOps.RiskEngine/StellaOps.RiskEngine.Tests: 94/94).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/riskengine/exploit-maturity-mapping/run-013/tier2-api-check.json
- **Captured Requests**: `/exploit-maturity/{cveId}`, `/exploit-maturity/{cveId}/level`, `/exploit-maturity/{cveId}/history`, `/exploit-maturity/batch` (success) and `/exploit-maturity/batch` with empty list (400).
- **Outcome**: Exploit maturity API contracts revalidated from live API transactions.

View File

@@ -43,3 +43,81 @@ Backend signing services enabling CI/CD keyless signing integration. SigstoreSig
- SigstoreSigningService test coverage is inherited from keyless signing tests; no dedicated SigstoreSigningService unit tests exist.
- Feature description updated to reflect actual implementation scope.
- **Verdict**: PASS (backend services complete; workflow templates are a documentation/DevOps artifact, not application code)
## Recheck (Run-002)
- **Verified**: 2026-02-10
- **Method**: Tier 2a live API replay for backend workflow surfaces.
- **Tests**: PASS (496/496 signer tests pass).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/signer/ci-cd-keyless-signing-workflow-templates/run-002/tier2-api-check.json`
- **Outcome**: Backend sign/verify API behavior consumed by CI pipelines is confirmed; YAML template caveat remains unchanged.
## Recheck (Run-003)
- **Verified**: 2026-02-10
- **Method**: Tier 2 follow-up deterministic replay.
- **Tests**: PASS (`src/Signer/StellaOps.Signer/StellaOps.Signer.Tests`: 496/496).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/signer/ci-cd-keyless-signing-workflow-templates/run-003/tier2-api-check.json`
- **Outcome**: Backend API behavior used by CI keyless signing workflows remains stable.
## Recheck (Run-004)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay + full Signer suite replay.
- **Tests**: PASS (`src/Signer/StellaOps.Signer/StellaOps.Signer.Tests`: 496/496).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/signer/ci-cd-keyless-signing-workflow-templates/run-004/tier2-api-check.json`
- **Outcome**: Backend sign/verify behavior used by CI workflows remains stable.
## Recheck (Run-005)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay validated via Signer suite and endpoint coverage.
- **Tests**: PASS (src/Signer/StellaOps.Signer/StellaOps.Signer.Tests: 496/496).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/signer/ci-cd-keyless-signing-workflow-templates/run-005/tier2-api-check.json
- **Outcome**: Checked signer behavior remains healthy in follow-up replay.
## Recheck (Run-006)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay (API + integration) with deterministic signer suite verification.
- **Tests**: PASS (src/Signer/StellaOps.Signer/StellaOps.Signer.Tests: 496/496).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/signer/ci-cd-keyless-signing-workflow-templates/run-006/tier2-api-check.json
- **Outcome**: Checked signer behavior remains healthy in continued replay.
## Recheck (Run-007)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay (API + integration) with deterministic signer suite verification.
- **Tests**: PASS (src/Signer/StellaOps.Signer/StellaOps.Signer.Tests: 496/496).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/signer/ci-cd-keyless-signing-workflow-templates/run-007/tier2-api-check.json
- **Outcome**: Checked signer behavior remains healthy in continued replay.
## Recheck (Run-008)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay + deterministic integration suite replay.
- **Tests**: PASS (src/Signer/StellaOps.Signer/StellaOps.Signer.Tests: 496/496).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/signer/ci-cd-keyless-signing-workflow-templates/run-008/tier2-api-check.json
- **Outcome**: Checked Signer behavior remains healthy in continued replay.
## Recheck (Run-009)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay + deterministic integration suite replay.
- **Tests**: PASS (src/Signer/StellaOps.Signer/StellaOps.Signer.Tests: 496/496).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/signer/ci-cd-keyless-signing-workflow-templates/run-009/tier2-api-check.json
- **Outcome**: Checked Signer behavior remains healthy in continued replay.
## Recheck (Run-010)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/Signer/StellaOps.Signer/StellaOps.Signer.Tests: 496/496).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/signer/ci-cd-keyless-signing-workflow-templates/run-010/tier2-integration-check.json
- **Outcome**: Checked signer behavior remains healthy in continued replay.
## Recheck (Run-011)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/Signer/StellaOps.Signer/StellaOps.Signer.Tests: 496/496).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/signer/ci-cd-keyless-signing-workflow-templates/run-011/tier2-integration-check.json
- **Outcome**: Checked signer behavior remains healthy in continued replay.
## Recheck (Run-012)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay + deterministic integration suite replay.
- **Tests**: PASS (src/Signer/StellaOps.Signer/StellaOps.Signer.Tests: 496/496).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/signer/ci-cd-keyless-signing-workflow-templates/run-012/tier2-api-check.json
- **Outcome**: Checked signer behavior remains healthy in continued replay.

View File

@@ -43,3 +43,89 @@ Orchestrator for M-of-N threshold signing ceremonies requiring multiple authoriz
- CeremonyEndpoints: Full REST API at /api/v1/ceremonies. All endpoints require ceremony:read authorization. CRUD + approve + execute + cancel operations verified with correct HTTP status codes.
- Tests: CeremonyOrchestratorIntegrationTests (end-to-end flow with in-memory repository), CeremonyStateMachineTests (all state transitions, guards, edge cases).
- **Verdict**: PASS
## Recheck (Run-002)
- **Verified**: 2026-02-10
- **Method**: Tier 2a live API replay + Tier 1 regression suite replay.
- **Tests**: PASS (496/496 signer tests pass).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/signer/dual-control-signing-ceremonies/run-002/tier2-api-check.json`
- **Regression Coverage Added**: `Ceremonies_CreateAndGet_WorksForAuthenticatedCaller`.
- **Outcome**: Ceremony endpoints are now fully wired at runtime (create/get verified via public API).
## Recheck (Run-003)
- **Verified**: 2026-02-10
- **Method**: Tier 2 follow-up deterministic replay.
- **Tests**: PASS (`src/Signer/StellaOps.Signer/StellaOps.Signer.Tests`: 496/496).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/signer/dual-control-signing-ceremonies/run-003/tier2-api-check.json`
- **Outcome**: Ceremony API lifecycle behavior remains stable with registered orchestrator services.
## Recheck (Run-004)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay + full Signer suite replay.
- **Tests**: PASS (`src/Signer/StellaOps.Signer/StellaOps.Signer.Tests`: 496/496).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/signer/dual-control-signing-ceremonies/run-004/tier2-api-check.json`
- **Outcome**: Ceremony create/get API behavior remains stable.
## Recheck (Run-005)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay validated via Signer suite and endpoint coverage.
- **Tests**: PASS (src/Signer/StellaOps.Signer/StellaOps.Signer.Tests: 496/496).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/signer/dual-control-signing-ceremonies/run-005/tier2-api-check.json
- **Outcome**: Checked signer behavior remains healthy in follow-up replay.
## Recheck (Run-006)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay (API + integration) with deterministic signer suite verification.
- **Tests**: PASS (src/Signer/StellaOps.Signer/StellaOps.Signer.Tests: 496/496).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/signer/dual-control-signing-ceremonies/run-006/tier2-api-check.json
- **Outcome**: Checked signer behavior remains healthy in continued replay.
## Recheck (Run-007)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay (API + integration) with deterministic signer suite verification.
- **Tests**: PASS (src/Signer/StellaOps.Signer/StellaOps.Signer.Tests: 496/496).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/signer/dual-control-signing-ceremonies/run-007/tier2-api-check.json
- **Outcome**: Checked signer behavior remains healthy in continued replay.
## Recheck (Run-008)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay + deterministic integration suite replay.
- **Tests**: PASS (src/Signer/StellaOps.Signer/StellaOps.Signer.Tests: 496/496).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/signer/dual-control-signing-ceremonies/run-008/tier2-api-check.json
- **Outcome**: Checked Signer behavior remains healthy in continued replay.
## Recheck (Run-009)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay + deterministic integration suite replay.
- **Tests**: PASS (src/Signer/StellaOps.Signer/StellaOps.Signer.Tests: 496/496).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/signer/dual-control-signing-ceremonies/run-009/tier2-api-check.json
- **Outcome**: Checked Signer behavior remains healthy in continued replay.
## Recheck (Run-010)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/Signer/StellaOps.Signer/StellaOps.Signer.Tests: 496/496).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/signer/dual-control-signing-ceremonies/run-010/tier2-integration-check.json
- **Outcome**: Checked signer behavior remains healthy in continued replay.
## Recheck (Run-011)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/Signer/StellaOps.Signer/StellaOps.Signer.Tests: 496/496).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/signer/dual-control-signing-ceremonies/run-011/tier2-integration-check.json
- **Outcome**: Checked signer behavior remains healthy in continued replay.
## Recheck (Run-012)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay + deterministic integration suite replay.
- **Tests**: PASS (src/Signer/StellaOps.Signer/StellaOps.Signer.Tests: 496/496).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/signer/dual-control-signing-ceremonies/run-012/tier2-api-check.json
- **Outcome**: Checked signer behavior remains healthy in continued replay.
## Recheck (Run-013)
- **Verified**: 2026-02-10
- **Method**: Tier 2a live API replay on running Signer service (`http://127.0.0.1:10051`) + deterministic suite replay.
- **Tests**: PASS (src/Signer/StellaOps.Signer/StellaOps.Signer.Tests: 497/497).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/signer/dual-control-signing-ceremonies/run-013/tier2-api-check.json
- **Outcome**: Invalid `operationType` now returns `400 Bad Request` (client validation) instead of `500 Internal Server Error`; live create/get/approve/execute and negative-path semantics are stable.

View File

@@ -48,3 +48,82 @@ Fulcio-based keyless signing using OIDC tokens from CI runners, ephemeral key pa
- SigstoreSigningService: End-to-end orchestration of keyless signing + Rekor upload. VerifyKeylessAsync correctly validates signature, certificate chain, and Rekor timestamp within certificate validity window.
- Tests: KeylessDsseSignerTests (mock-based unit tests), EphemeralKeyGeneratorTests (crypto validation), HttpFulcioClientTests (HTTP interaction tests), CertificateChainValidatorTests (chain validation), KeylessSigningIntegrationTests (end-to-end flow with test doubles).
- **Verdict**: PASS
## Recheck (Run-002)
- **Verified**: 2026-02-10
- **Method**: Tier 2a live API replay + Tier 1 regression suite replay.
- **Tests**: PASS (496/496 signer tests pass).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/signer/fulcio-sigstore-keyless-signing-client/run-002/tier2-api-check.json`
- **Regression Coverage Added**: `VerifyDsse_ReturnsVerifiedTrue_ForFreshSignature`, `VerifyDsse_ReturnsVerifiedFalse_WhenPayloadIsTampered`.
- **Outcome**: DSSE verification endpoint now validates signed envelopes and returns deterministic verified/unverified results.
## Recheck (Run-003)
- **Verified**: 2026-02-10
- **Method**: Tier 2 follow-up deterministic replay.
- **Tests**: PASS (`src/Signer/StellaOps.Signer/StellaOps.Signer.Tests`: 496/496).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/signer/fulcio-sigstore-keyless-signing-client/run-003/tier2-api-check.json`
- **Outcome**: DSSE sign/verify API boundary behavior remains stable.
## Recheck (Run-004)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay + full Signer suite replay.
- **Tests**: PASS (`src/Signer/StellaOps.Signer/StellaOps.Signer.Tests`: 496/496).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/signer/fulcio-sigstore-keyless-signing-client/run-004/tier2-api-check.json`
- **Outcome**: Keyless sign/verify API behavior remains stable.
## Recheck (Run-005)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay validated via Signer suite and endpoint coverage.
- **Tests**: PASS (src/Signer/StellaOps.Signer/StellaOps.Signer.Tests: 496/496).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/signer/fulcio-sigstore-keyless-signing-client/run-005/tier2-api-check.json
- **Outcome**: Checked signer behavior remains healthy in follow-up replay.
## Recheck (Run-006)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay (API + integration) with deterministic signer suite verification.
- **Tests**: PASS (src/Signer/StellaOps.Signer/StellaOps.Signer.Tests: 496/496).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/signer/fulcio-sigstore-keyless-signing-client/run-006/tier2-api-check.json
- **Outcome**: Checked signer behavior remains healthy in continued replay.
## Recheck (Run-007)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay (API + integration) with deterministic signer suite verification.
- **Tests**: PASS (src/Signer/StellaOps.Signer/StellaOps.Signer.Tests: 496/496).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/signer/fulcio-sigstore-keyless-signing-client/run-007/tier2-api-check.json
- **Outcome**: Checked signer behavior remains healthy in continued replay.
## Recheck (Run-008)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay + deterministic integration suite replay.
- **Tests**: PASS (src/Signer/StellaOps.Signer/StellaOps.Signer.Tests: 496/496).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/signer/fulcio-sigstore-keyless-signing-client/run-008/tier2-api-check.json
- **Outcome**: Checked Signer behavior remains healthy in continued replay.
## Recheck (Run-009)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay + deterministic integration suite replay.
- **Tests**: PASS (src/Signer/StellaOps.Signer/StellaOps.Signer.Tests: 496/496).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/signer/fulcio-sigstore-keyless-signing-client/run-009/tier2-api-check.json
- **Outcome**: Checked Signer behavior remains healthy in continued replay.
## Recheck (Run-010)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/Signer/StellaOps.Signer/StellaOps.Signer.Tests: 496/496).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/signer/fulcio-sigstore-keyless-signing-client/run-010/tier2-integration-check.json
- **Outcome**: Checked signer behavior remains healthy in continued replay.
## Recheck (Run-011)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/Signer/StellaOps.Signer/StellaOps.Signer.Tests: 496/496).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/signer/fulcio-sigstore-keyless-signing-client/run-011/tier2-integration-check.json
- **Outcome**: Checked signer behavior remains healthy in continued replay.
## Recheck (Run-012)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay + deterministic integration suite replay.
- **Tests**: PASS (src/Signer/StellaOps.Signer/StellaOps.Signer.Tests: 496/496).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/signer/fulcio-sigstore-keyless-signing-client/run-012/tier2-api-check.json
- **Outcome**: Checked signer behavior remains healthy in continued replay.

View File

@@ -44,3 +44,82 @@ Automated key rotation service with temporal key validity windows, key history t
- TrustAnchorManager: PURL pattern matching verified -- glob-to-regex conversion, specificity scoring (segments*10 - wildcards*5), most-specific-match-wins semantics. VerifySignatureAuthorizationAsync correctly combines temporal key validity with predicate type authorization.
- Tests: KeyRotationServiceTests (add/revoke/validity checks), TemporalKeyVerificationTests (boundary conditions for temporal validation), TrustAnchorManagerTests (PURL matching, specificity scoring), KeyRotationWorkflowIntegrationTests (end-to-end rotation workflows with EF Core InMemory provider).
- **Verdict**: PASS
## Recheck (Run-002)
- **Verified**: 2026-02-10
- **Method**: Tier 2a live API replay + Tier 1 regression suite replay.
- **Tests**: PASS (496/496 signer tests pass).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/signer/key-rotation-service-with-temporal-validity/run-002/tier2-api-check.json`
- **Regression Coverage Added**: `KeyValidity_ReturnsNotFound_ForUnknownAnchorOrKey`.
- **Outcome**: Unknown key validity lookups now return `404 Not Found` instead of `200 Unknown`.
## Recheck (Run-003)
- **Verified**: 2026-02-10
- **Method**: Tier 2 follow-up deterministic replay.
- **Tests**: PASS (`src/Signer/StellaOps.Signer/StellaOps.Signer.Tests`: 496/496).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/signer/key-rotation-service-with-temporal-validity/run-003/tier2-api-check.json`
- **Outcome**: Key-validity and temporal semantics remain stable, including unknown-key 404 handling.
## Recheck (Run-004)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay + full Signer suite replay.
- **Tests**: PASS (`src/Signer/StellaOps.Signer/StellaOps.Signer.Tests`: 496/496).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/signer/key-rotation-service-with-temporal-validity/run-004/tier2-api-check.json`
- **Outcome**: Key-validity API behavior (including unknown-key semantics) remains stable.
## Recheck (Run-005)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay validated via Signer suite and endpoint coverage.
- **Tests**: PASS (src/Signer/StellaOps.Signer/StellaOps.Signer.Tests: 496/496).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/signer/key-rotation-service-with-temporal-validity/run-005/tier2-api-check.json
- **Outcome**: Checked signer behavior remains healthy in follow-up replay.
## Recheck (Run-006)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay (API + integration) with deterministic signer suite verification.
- **Tests**: PASS (src/Signer/StellaOps.Signer/StellaOps.Signer.Tests: 496/496).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/signer/key-rotation-service-with-temporal-validity/run-006/tier2-api-check.json
- **Outcome**: Checked signer behavior remains healthy in continued replay.
## Recheck (Run-007)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay (API + integration) with deterministic signer suite verification.
- **Tests**: PASS (src/Signer/StellaOps.Signer/StellaOps.Signer.Tests: 496/496).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/signer/key-rotation-service-with-temporal-validity/run-007/tier2-api-check.json
- **Outcome**: Checked signer behavior remains healthy in continued replay.
## Recheck (Run-008)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay + deterministic integration suite replay.
- **Tests**: PASS (src/Signer/StellaOps.Signer/StellaOps.Signer.Tests: 496/496).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/signer/key-rotation-service-with-temporal-validity/run-008/tier2-api-check.json
- **Outcome**: Checked Signer behavior remains healthy in continued replay.
## Recheck (Run-009)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay + deterministic integration suite replay.
- **Tests**: PASS (src/Signer/StellaOps.Signer/StellaOps.Signer.Tests: 496/496).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/signer/key-rotation-service-with-temporal-validity/run-009/tier2-api-check.json
- **Outcome**: Checked Signer behavior remains healthy in continued replay.
## Recheck (Run-010)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/Signer/StellaOps.Signer/StellaOps.Signer.Tests: 496/496).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/signer/key-rotation-service-with-temporal-validity/run-010/tier2-integration-check.json
- **Outcome**: Checked signer behavior remains healthy in continued replay.
## Recheck (Run-011)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/Signer/StellaOps.Signer/StellaOps.Signer.Tests: 496/496).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/signer/key-rotation-service-with-temporal-validity/run-011/tier2-integration-check.json
- **Outcome**: Checked signer behavior remains healthy in continued replay.
## Recheck (Run-012)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay + deterministic integration suite replay.
- **Tests**: PASS (src/Signer/StellaOps.Signer/StellaOps.Signer.Tests: 496/496).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/signer/key-rotation-service-with-temporal-validity/run-012/tier2-api-check.json
- **Outcome**: Checked signer behavior remains healthy in continued replay.

View File

@@ -43,3 +43,81 @@ Key escrow system using Shamir's Secret Sharing over GF(256) to split signing ke
- KeyEscrowService: Full lifecycle verified. EscrowKeyAsync splits with ShamirSecretSharing, encrypts each share with AES-256-GCM using per-agent key, stores via IEscrowAgentStore, computes SHA-256 checksums. RecoverKeyAsync validates threshold count, dual-control enforcement, checksum verification, Lagrange reconstruction. All operations audit-logged.
- Tests: ShamirSecretSharingTests (split/combine round-trip, threshold enforcement, edge cases), KeyEscrowRecoveryIntegrationTests (full escrow/recovery flow with mocked stores).
- **Verdict**: PASS
## Recheck (Run-002)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (496/496 signer tests pass).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/signer/shamir-secret-sharing-key-escrow/run-002/tier2-integration-check.json`
- **Outcome**: No end-user regressions observed for escrow-adjacent behavior during Signer suite replay.
## Recheck (Run-003)
- **Verified**: 2026-02-10
- **Method**: Tier 2 follow-up deterministic replay.
- **Tests**: PASS (`src/Signer/StellaOps.Signer/StellaOps.Signer.Tests`: 496/496).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/signer/shamir-secret-sharing-key-escrow/run-003/tier2-integration-check.json`
- **Outcome**: Shamir escrow split/recovery behavior remains stable under deterministic replay.
## Recheck (Run-004)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay + full Signer suite replay.
- **Tests**: PASS (`src/Signer/StellaOps.Signer/StellaOps.Signer.Tests`: 496/496).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/signer/shamir-secret-sharing-key-escrow/run-004/tier2-integration-check.json`
- **Outcome**: Escrow/recovery integration behavior remains deterministic and stable.
## Recheck (Run-005)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay validated via Signer suite and endpoint coverage.
- **Tests**: PASS (src/Signer/StellaOps.Signer/StellaOps.Signer.Tests: 496/496).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/signer/shamir-secret-sharing-key-escrow/run-005/tier2-integration-check.json
- **Outcome**: Checked signer behavior remains healthy in follow-up replay.
## Recheck (Run-006)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay (API + integration) with deterministic signer suite verification.
- **Tests**: PASS (src/Signer/StellaOps.Signer/StellaOps.Signer.Tests: 496/496).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/signer/shamir-secret-sharing-key-escrow/run-006/tier2-integration-check.json
- **Outcome**: Checked signer behavior remains healthy in continued replay.
## Recheck (Run-007)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay (API + integration) with deterministic signer suite verification.
- **Tests**: PASS (src/Signer/StellaOps.Signer/StellaOps.Signer.Tests: 496/496).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/signer/shamir-secret-sharing-key-escrow/run-007/tier2-integration-check.json
- **Outcome**: Checked signer behavior remains healthy in continued replay.
## Recheck (Run-008)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay + deterministic integration suite replay.
- **Tests**: PASS (src/Signer/StellaOps.Signer/StellaOps.Signer.Tests: 496/496).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/signer/shamir-secret-sharing-key-escrow/run-008/tier2-api-check.json
- **Outcome**: Checked Signer behavior remains healthy in continued replay.
## Recheck (Run-009)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay + deterministic integration suite replay.
- **Tests**: PASS (src/Signer/StellaOps.Signer/StellaOps.Signer.Tests: 496/496).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/signer/shamir-secret-sharing-key-escrow/run-009/tier2-api-check.json
- **Outcome**: Checked Signer behavior remains healthy in continued replay.
## Recheck (Run-010)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/Signer/StellaOps.Signer/StellaOps.Signer.Tests: 496/496).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/signer/shamir-secret-sharing-key-escrow/run-010/tier2-integration-check.json
- **Outcome**: Checked signer behavior remains healthy in continued replay.
## Recheck (Run-011)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/Signer/StellaOps.Signer/StellaOps.Signer.Tests: 496/496).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/signer/shamir-secret-sharing-key-escrow/run-011/tier2-integration-check.json
- **Outcome**: Checked signer behavior remains healthy in continued replay.
## Recheck (Run-012)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay + deterministic integration suite replay.
- **Tests**: PASS (src/Signer/StellaOps.Signer/StellaOps.Signer.Tests: 496/496).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/signer/shamir-secret-sharing-key-escrow/run-012/tier2-integration-check.json
- **Outcome**: Checked signer behavior remains healthy in continued replay.

View File

@@ -44,3 +44,81 @@ Trust anchor management system with PURL-based pattern matching for artifact-to-
- This is not a TUF (The Update Framework) protocol client. It does not implement TUF specification concepts (root.json, targets.json, snapshot.json, timestamp.json, delegations). The feature title has been updated to reflect the actual implementation.
- The implementation is a custom trust anchor management system designed for Stella Ops' attestation model. It provides equivalent trust root management functionality through PURL-based pattern matching rather than TUF's hierarchical metadata model.
- **Verdict**: PASS (solid trust anchor management implementation; title corrected from "TUF Client" to "Trust Root Management")
## Recheck (Run-002)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay + key-validity API contract check.
- **Tests**: PASS (496/496 signer tests pass).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/signer/tuf-client-for-trust-root-management/run-002/tier2-integration-check.json`
- **Outcome**: Trust-anchor behavior remains stable; missing-key lookups now align to not-found semantics.
## Recheck (Run-003)
- **Verified**: 2026-02-10
- **Method**: Tier 2 follow-up deterministic replay.
- **Tests**: PASS (`src/Signer/StellaOps.Signer/StellaOps.Signer.Tests`: 496/496).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/signer/tuf-client-for-trust-root-management/run-003/tier2-integration-check.json`
- **Outcome**: Trust-anchor management behavior remains stable in follow-up replay.
## Recheck (Run-004)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay + full Signer suite replay.
- **Tests**: PASS (`src/Signer/StellaOps.Signer/StellaOps.Signer.Tests`: 496/496).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/signer/tuf-client-for-trust-root-management/run-004/tier2-integration-check.json`
- **Outcome**: Trust-anchor and key-validity integration behavior remains stable.
## Recheck (Run-005)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay validated via Signer suite and endpoint coverage.
- **Tests**: PASS (src/Signer/StellaOps.Signer/StellaOps.Signer.Tests: 496/496).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/signer/tuf-client-for-trust-root-management/run-005/tier2-integration-check.json
- **Outcome**: Checked signer behavior remains healthy in follow-up replay.
## Recheck (Run-006)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay (API + integration) with deterministic signer suite verification.
- **Tests**: PASS (src/Signer/StellaOps.Signer/StellaOps.Signer.Tests: 496/496).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/signer/tuf-client-for-trust-root-management/run-006/tier2-integration-check.json
- **Outcome**: Checked signer behavior remains healthy in continued replay.
## Recheck (Run-007)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay (API + integration) with deterministic signer suite verification.
- **Tests**: PASS (src/Signer/StellaOps.Signer/StellaOps.Signer.Tests: 496/496).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/signer/tuf-client-for-trust-root-management/run-007/tier2-integration-check.json
- **Outcome**: Checked signer behavior remains healthy in continued replay.
## Recheck (Run-008)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay + deterministic integration suite replay.
- **Tests**: PASS (src/Signer/StellaOps.Signer/StellaOps.Signer.Tests: 496/496).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/signer/tuf-client-for-trust-root-management/run-008/tier2-api-check.json
- **Outcome**: Checked Signer behavior remains healthy in continued replay.
## Recheck (Run-009)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay + deterministic integration suite replay.
- **Tests**: PASS (src/Signer/StellaOps.Signer/StellaOps.Signer.Tests: 496/496).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/signer/tuf-client-for-trust-root-management/run-009/tier2-api-check.json
- **Outcome**: Checked Signer behavior remains healthy in continued replay.
## Recheck (Run-010)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/Signer/StellaOps.Signer/StellaOps.Signer.Tests: 496/496).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/signer/tuf-client-for-trust-root-management/run-010/tier2-integration-check.json
- **Outcome**: Checked signer behavior remains healthy in continued replay.
## Recheck (Run-011)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (src/Signer/StellaOps.Signer/StellaOps.Signer.Tests: 496/496).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/signer/tuf-client-for-trust-root-management/run-011/tier2-integration-check.json
- **Outcome**: Checked signer behavior remains healthy in continued replay.
## Recheck (Run-012)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay + deterministic integration suite replay.
- **Tests**: PASS (src/Signer/StellaOps.Signer/StellaOps.Signer.Tests: 496/496).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/signer/tuf-client-for-trust-root-management/run-012/tier2-integration-check.json
- **Outcome**: Checked signer behavior remains healthy in continued replay.

View File

@@ -52,3 +52,81 @@ HLC-based global job ordering for distributed deployments, replacing wall-clock
- Build: PASS
**Overall Verdict**: PASS
## Recheck (run-002)
- **Date**: 2026-02-10
- **Result**: PASS after input-validation fix
- **Key fix verified**: invalid `fromHlc` requests now return 400 with format guidance instead of 500.
- **Tests**: Timeline.WebService.Tests 19/19 pass (includes HLC validation regression test).
- **Evidence**: `docs/qa/feature-checks/runs/timeline/hybrid-logical-clock-audit-safe-job-queue-ordering/run-002/tier2-api-check.json`
## Recheck (run-003)
- **Date**: 2026-02-10
- **Result**: PASS
- **Verification**: HLC ordering and invalid-HLC client-error behavior remain stable in follow-up replay.
- **Tests**: Timeline.Core.Tests 7/7, Timeline.WebService.Tests 19/19 (26 total).
- **Evidence**: `docs/qa/feature-checks/runs/timeline/hybrid-logical-clock-audit-safe-job-queue-ordering/run-003/tier2-api-check.json`
## Recheck (Run-004)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay via in-process WebApplicationFactory + full suite replay.
- **Tests**: PASS (`src/Timeline/__Tests/StellaOps.Timeline.Core.Tests`: 7/7; `src/Timeline/__Tests/StellaOps.Timeline.WebService.Tests`: 19/19).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/timeline/hybrid-logical-clock-audit-safe-job-queue-ordering/run-004/tier2-api-check.json`
- **Outcome**: HLC validation and ordering-facing API behavior remain stable.
## Recheck (Run-005)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay validated via Timeline integration suites.
- **Tests**: PASS (`src/Timeline/__Tests/StellaOps.Timeline.Core.Tests`: 7/7; `src/Timeline/__Tests/StellaOps.Timeline.WebService.Tests`: 19/19).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/timeline/hybrid-logical-clock-audit-safe-job-queue-ordering/run-005/tier2-api-check.json`
- **Outcome**: HLC ordering/query boundary behavior remains healthy.
## Recheck (Run-006)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay (API + integration) with deterministic suite verification.
- **Tests**: PASS (src/Timeline/__Tests/StellaOps.Timeline.Core.Tests: 7/7; src/Timeline/__Tests/StellaOps.Timeline.WebService.Tests: 19/19).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/timeline/hybrid-logical-clock-audit-safe-job-queue-ordering/run-006/tier2-api-check.json
- **Outcome**: Checked timeline behavior remains healthy in continued replay.
## Recheck (Run-007)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay (API + integration) with deterministic suite verification.
- **Tests**: PASS (src/Timeline/__Tests/StellaOps.Timeline.Core.Tests: 7/7; src/Timeline/__Tests/StellaOps.Timeline.WebService.Tests: 19/19).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/timeline/hybrid-logical-clock-audit-safe-job-queue-ordering/run-007/tier2-api-check.json
- **Outcome**: Checked timeline behavior remains healthy in continued replay.
## Recheck (Run-008)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay + deterministic integration suite replay.
- **Tests**: PASS (src/Timeline/__Tests/StellaOps.Timeline.Core.Tests: 7/7, src/Timeline/__Tests/StellaOps.Timeline.WebService.Tests: 19/19).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/timeline/hybrid-logical-clock-audit-safe-job-queue-ordering/run-008/tier2-api-check.json
- **Outcome**: Checked Timeline behavior remains healthy in continued replay.
## Recheck (Run-009)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay + deterministic integration suite replay.
- **Tests**: PASS (src/Timeline/__Tests/StellaOps.Timeline.Core.Tests: 7/7, src/Timeline/__Tests/StellaOps.Timeline.WebService.Tests: 19/19).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/timeline/hybrid-logical-clock-audit-safe-job-queue-ordering/run-009/tier2-api-check.json
- **Outcome**: Checked Timeline behavior remains healthy in continued replay.
## Recheck (Run-010)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Timeline.Core 7/7, Timeline.WebService 19/19; total 26/26).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/timeline/hybrid-logical-clock-audit-safe-job-queue-ordering/run-010/tier2-integration-check.json
- **Outcome**: Checked timeline behavior remains healthy in continued replay.
## Recheck (Run-011)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Timeline.Core 7/7, Timeline.WebService 19/19; total 26/26).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/timeline/hybrid-logical-clock-audit-safe-job-queue-ordering/run-011/tier2-integration-check.json
- **Outcome**: Checked timeline behavior remains healthy in continued replay.
## Recheck (Run-012)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay + deterministic integration suite replay.
- **Tests**: PASS (src/Timeline/__Tests/StellaOps.Timeline.Core.Tests: 7/7; src/Timeline/__Tests/StellaOps.Timeline.WebService.Tests: 19/19; total 26/26).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/timeline/hybrid-logical-clock-audit-safe-job-queue-ordering/run-012/tier2-api-check.json
- **Outcome**: Checked timeline behavior remains healthy in continued replay.

View File

@@ -54,3 +54,81 @@ Immutable timeline audit log with a dedicated web service and indexer for record
- Build: PASS
**Overall Verdict**: PASS
## Recheck (run-002)
- **Date**: 2026-02-10
- **Result**: PASS after export endpoint wiring fix
- **Key fix verified**: unknown export status/download IDs now return 404 instead of synthetic 200 responses.
- **Tests**: Timeline.WebService.Tests 19/19 pass.
- **Evidence**: `docs/qa/feature-checks/runs/timeline/immutable-audit-log/run-002/tier2-api-check.json`
## Recheck (run-003)
- **Date**: 2026-02-10
- **Result**: PASS
- **Verification**: unknown export IDs continue to return 404 for status/download paths.
- **Tests**: Timeline.Core.Tests 7/7, Timeline.WebService.Tests 19/19 (26 total).
- **Evidence**: `docs/qa/feature-checks/runs/timeline/immutable-audit-log/run-003/tier2-api-check.json`
## Recheck (Run-004)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay via in-process WebApplicationFactory + full suite replay.
- **Tests**: PASS (`src/Timeline/__Tests/StellaOps.Timeline.Core.Tests`: 7/7; `src/Timeline/__Tests/StellaOps.Timeline.WebService.Tests`: 19/19).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/timeline/immutable-audit-log/run-004/tier2-api-check.json`
- **Outcome**: Audit export status/download behavior remains stable and non-synthetic.
## Recheck (Run-005)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay validated via Timeline integration suites.
- **Tests**: PASS (`src/Timeline/__Tests/StellaOps.Timeline.Core.Tests`: 7/7; `src/Timeline/__Tests/StellaOps.Timeline.WebService.Tests`: 19/19).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/timeline/immutable-audit-log/run-005/tier2-api-check.json`
- **Outcome**: Immutable audit-log export/status behaviors remain healthy.
## Recheck (Run-006)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay (API + integration) with deterministic suite verification.
- **Tests**: PASS (src/Timeline/__Tests/StellaOps.Timeline.Core.Tests: 7/7; src/Timeline/__Tests/StellaOps.Timeline.WebService.Tests: 19/19).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/timeline/immutable-audit-log/run-006/tier2-api-check.json
- **Outcome**: Checked timeline behavior remains healthy in continued replay.
## Recheck (Run-007)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay (API + integration) with deterministic suite verification.
- **Tests**: PASS (src/Timeline/__Tests/StellaOps.Timeline.Core.Tests: 7/7; src/Timeline/__Tests/StellaOps.Timeline.WebService.Tests: 19/19).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/timeline/immutable-audit-log/run-007/tier2-api-check.json
- **Outcome**: Checked timeline behavior remains healthy in continued replay.
## Recheck (Run-008)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay + deterministic integration suite replay.
- **Tests**: PASS (src/Timeline/__Tests/StellaOps.Timeline.Core.Tests: 7/7, src/Timeline/__Tests/StellaOps.Timeline.WebService.Tests: 19/19).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/timeline/immutable-audit-log/run-008/tier2-api-check.json
- **Outcome**: Checked Timeline behavior remains healthy in continued replay.
## Recheck (Run-009)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay + deterministic integration suite replay.
- **Tests**: PASS (src/Timeline/__Tests/StellaOps.Timeline.Core.Tests: 7/7, src/Timeline/__Tests/StellaOps.Timeline.WebService.Tests: 19/19).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/timeline/immutable-audit-log/run-009/tier2-api-check.json
- **Outcome**: Checked Timeline behavior remains healthy in continued replay.
## Recheck (Run-010)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Timeline.Core 7/7, Timeline.WebService 19/19; total 26/26).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/timeline/immutable-audit-log/run-010/tier2-integration-check.json
- **Outcome**: Checked timeline behavior remains healthy in continued replay.
## Recheck (Run-011)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Timeline.Core 7/7, Timeline.WebService 19/19; total 26/26).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/timeline/immutable-audit-log/run-011/tier2-integration-check.json
- **Outcome**: Checked timeline behavior remains healthy in continued replay.
## Recheck (Run-012)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay + deterministic integration suite replay.
- **Tests**: PASS (src/Timeline/__Tests/StellaOps.Timeline.Core.Tests: 7/7; src/Timeline/__Tests/StellaOps.Timeline.WebService.Tests: 19/19; total 26/26).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/timeline/immutable-audit-log/run-012/tier2-api-check.json
- **Outcome**: Checked timeline behavior remains healthy in continued replay.

View File

@@ -58,3 +58,81 @@ Dedicated service for ingesting, indexing, and querying timeline events across a
- Build: PASS
**Overall Verdict**: PASS
## Recheck (run-002)
- **Date**: 2026-02-10
- **Result**: PASS after export lifecycle endpoint fixes
- **Key verification**: initiate/status/download export flow returns generated bundle content for seeded correlation events in API-boundary integration replay.
- **Tests**: Timeline.WebService.Tests 19/19 pass.
- **Evidence**: `docs/qa/feature-checks/runs/timeline/timeline-indexer-service/run-002/tier2-integration-check.json`
## Recheck (run-003)
- **Date**: 2026-02-10
- **Result**: PASS
- **Verification**: export lifecycle still completes and download returns generated timeline bundle content.
- **Tests**: Timeline.Core.Tests 7/7, Timeline.WebService.Tests 19/19 (26 total).
- **Evidence**: `docs/qa/feature-checks/runs/timeline/timeline-indexer-service/run-003/tier2-integration-check.json`
## Recheck (Run-004)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay via in-process WebApplicationFactory + full suite replay.
- **Tests**: PASS (`src/Timeline/__Tests/StellaOps.Timeline.Core.Tests`: 7/7; `src/Timeline/__Tests/StellaOps.Timeline.WebService.Tests`: 19/19).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/timeline/timeline-indexer-service/run-004/tier2-integration-check.json`
- **Outcome**: Indexer/export integration behavior remains stable and deterministic.
## Recheck (Run-005)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (`src/Timeline/__Tests/StellaOps.Timeline.WebService.Tests`: 19/19).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/timeline/timeline-indexer-service/run-005/tier2-integration-check.json`
- **Outcome**: Timeline indexer export lifecycle behavior remains healthy.
## Recheck (Run-006)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay (API + integration) with deterministic suite verification.
- **Tests**: PASS (src/Timeline/__Tests/StellaOps.Timeline.Core.Tests: 7/7; src/Timeline/__Tests/StellaOps.Timeline.WebService.Tests: 19/19).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/timeline/timeline-indexer-service/run-006/tier2-integration-check.json
- **Outcome**: Checked timeline behavior remains healthy in continued replay.
## Recheck (Run-007)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay (API + integration) with deterministic suite verification.
- **Tests**: PASS (src/Timeline/__Tests/StellaOps.Timeline.Core.Tests: 7/7; src/Timeline/__Tests/StellaOps.Timeline.WebService.Tests: 19/19).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/timeline/timeline-indexer-service/run-007/tier2-integration-check.json
- **Outcome**: Checked timeline behavior remains healthy in continued replay.
## Recheck (Run-008)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay + deterministic integration suite replay.
- **Tests**: PASS (src/Timeline/__Tests/StellaOps.Timeline.Core.Tests: 7/7, src/Timeline/__Tests/StellaOps.Timeline.WebService.Tests: 19/19).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/timeline/timeline-indexer-service/run-008/tier2-integration-check.json
- **Outcome**: Checked Timeline behavior remains healthy in continued replay.
## Recheck (Run-009)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay + deterministic integration suite replay.
- **Tests**: PASS (src/Timeline/__Tests/StellaOps.Timeline.Core.Tests: 7/7, src/Timeline/__Tests/StellaOps.Timeline.WebService.Tests: 19/19).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/timeline/timeline-indexer-service/run-009/tier2-integration-check.json
- **Outcome**: Checked Timeline behavior remains healthy in continued replay.
## Recheck (Run-010)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Timeline.Core 7/7, Timeline.WebService 19/19; total 26/26).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/timeline/timeline-indexer-service/run-010/tier2-integration-check.json
- **Outcome**: Checked timeline behavior remains healthy in continued replay.
## Recheck (Run-011)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Timeline.Core 7/7, Timeline.WebService 19/19; total 26/26).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/timeline/timeline-indexer-service/run-011/tier2-integration-check.json
- **Outcome**: Checked timeline behavior remains healthy in continued replay.
## Recheck (Run-012)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay + deterministic integration suite replay.
- **Tests**: PASS (src/Timeline/__Tests/StellaOps.Timeline.Core.Tests: 7/7; src/Timeline/__Tests/StellaOps.Timeline.WebService.Tests: 19/19; total 26/26).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/timeline/timeline-indexer-service/run-012/tier2-integration-check.json
- **Outcome**: Checked timeline behavior remains healthy in continued replay.

View File

@@ -60,3 +60,89 @@ REST API endpoints for querying and replaying HLC-ordered events: GET /timeline/
- Tests: 20/20 timeline tests PASS
**Overall Verdict**: PASS
## Recheck (run-002)
- **Date**: 2026-02-10
- **Result**: PASS after replay operation lifetime fix
- **Key fix verified**: replay `POST` followed by `GET /replay/{id}` now works across requests (no transient 404 due scope reset).
- **Tests**: Timeline.WebService.Tests 19/19 pass (includes replay lifecycle regression test).
- **Evidence**: `docs/qa/feature-checks/runs/timeline/timeline-replay-api/run-002/tier2-api-check.json`
## Recheck (run-003)
- **Date**: 2026-02-10
- **Result**: PASS
- **Verification**: replay initiation and follow-up status retrieval remain stable across request boundaries.
- **Tests**: Timeline.Core.Tests 7/7, Timeline.WebService.Tests 19/19 (26 total).
- **Evidence**: `docs/qa/feature-checks/runs/timeline/timeline-replay-api/run-003/tier2-api-check.json`
## Recheck (Run-004)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay via in-process WebApplicationFactory + full suite replay.
- **Tests**: PASS (`src/Timeline/__Tests/StellaOps.Timeline.Core.Tests`: 7/7; `src/Timeline/__Tests/StellaOps.Timeline.WebService.Tests`: 19/19).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/timeline/timeline-replay-api/run-004/tier2-api-check.json`
- **Outcome**: Replay operation lifecycle/status behavior remains stable across requests.
## Recheck (Run-005)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay validated via Timeline integration suites.
- **Tests**: PASS (`src/Timeline/__Tests/StellaOps.Timeline.Core.Tests`: 7/7; `src/Timeline/__Tests/StellaOps.Timeline.WebService.Tests`: 19/19).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/timeline/timeline-replay-api/run-005/tier2-api-check.json`
- **Outcome**: Replay API lifecycle/status behavior remains healthy.
## Recheck (Run-006)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay (API + integration) with deterministic suite verification.
- **Tests**: PASS (src/Timeline/__Tests/StellaOps.Timeline.Core.Tests: 7/7; src/Timeline/__Tests/StellaOps.Timeline.WebService.Tests: 19/19).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/timeline/timeline-replay-api/run-006/tier2-api-check.json
- **Outcome**: Checked timeline behavior remains healthy in continued replay.
## Recheck (Run-007)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay (API + integration) with deterministic suite verification.
- **Tests**: PASS (src/Timeline/__Tests/StellaOps.Timeline.Core.Tests: 7/7; src/Timeline/__Tests/StellaOps.Timeline.WebService.Tests: 19/19).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/timeline/timeline-replay-api/run-007/tier2-api-check.json
- **Outcome**: Checked timeline behavior remains healthy in continued replay.
## Recheck (Run-008)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay + deterministic integration suite replay.
- **Tests**: PASS (src/Timeline/__Tests/StellaOps.Timeline.Core.Tests: 7/7, src/Timeline/__Tests/StellaOps.Timeline.WebService.Tests: 19/19).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/timeline/timeline-replay-api/run-008/tier2-api-check.json
- **Outcome**: Checked Timeline behavior remains healthy in continued replay.
## Recheck (Run-009)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay + deterministic integration suite replay.
- **Tests**: PASS (src/Timeline/__Tests/StellaOps.Timeline.Core.Tests: 7/7, src/Timeline/__Tests/StellaOps.Timeline.WebService.Tests: 19/19).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/timeline/timeline-replay-api/run-009/tier2-api-check.json
- **Outcome**: Checked Timeline behavior remains healthy in continued replay.
## Recheck (Run-010)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Timeline.Core 7/7, Timeline.WebService 19/19; total 26/26).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/timeline/timeline-replay-api/run-010/tier2-integration-check.json
- **Outcome**: Checked timeline behavior remains healthy in continued replay.
## Recheck (Run-011)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Timeline.Core 7/7, Timeline.WebService 19/19; total 26/26).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/timeline/timeline-replay-api/run-011/tier2-integration-check.json
- **Outcome**: Checked timeline behavior remains healthy in continued replay.
## Recheck (Run-012)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay + deterministic integration suite replay.
- **Tests**: PASS (src/Timeline/__Tests/StellaOps.Timeline.Core.Tests: 7/7; src/Timeline/__Tests/StellaOps.Timeline.WebService.Tests: 19/19; total 26/26).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/timeline/timeline-replay-api/run-012/tier2-api-check.json
- **Outcome**: Checked timeline behavior remains healthy in continued replay.
## Recheck (Run-013)
- **Verified**: 2026-02-10
- **Method**: Tier 2a live HTTPS API verification with fresh request/response capture (`Eventing__UseInMemoryStore=true`).
- **Tests**: PASS (Timeline.Core 7/7, Timeline.WebService 19/19; total 26/26).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/timeline/timeline-replay-api/run-013/tier2-api-check.json
- **Captured Requests**: replay initiate (202), replay status (200), invalid mode validation (400), unknown replay status (404), unknown replay cancel (404).
- **Outcome**: Replay API lifecycle/status behavior revalidated from live API transactions.

View File

@@ -56,3 +56,84 @@ Cross-service event timeline with HLC-ordered events, deterministic event IDs (S
- Build: PASS
**Overall Verdict**: PASS
## Recheck (run-002)
- **Date**: 2026-02-10
- **Result**: PASS after endpoint hardening
- **Key fixes verified**:
- Replay status lifecycle remains reachable across requests.
- Export status/download no longer return synthetic success for unknown IDs.
- Invalid HLC query input returns 400 instead of 500.
- **Tests**: Timeline.Core.Tests 7/7, Timeline.WebService.Tests 19/19 (26 total).
- **Evidence**: `docs/qa/feature-checks/runs/timeline/unified-event-timeline-service/run-002/tier2-api-check.json`
## Recheck (run-003)
- **Date**: 2026-02-10
- **Result**: PASS
- **Verification**: follow-up API replay confirmed timeline query success, 404, and pagination contracts remain stable.
- **Tests**: Timeline.Core.Tests 7/7, Timeline.WebService.Tests 19/19 (26 total).
- **Evidence**: `docs/qa/feature-checks/runs/timeline/unified-event-timeline-service/run-003/tier2-api-check.json`
## Recheck (Run-004)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay via in-process WebApplicationFactory + full suite replay.
- **Tests**: PASS (`src/Timeline/__Tests/StellaOps.Timeline.Core.Tests`: 7/7; `src/Timeline/__Tests/StellaOps.Timeline.WebService.Tests`: 19/19).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/timeline/unified-event-timeline-service/run-004/tier2-api-check.json`
- **Outcome**: Query/replay/export API contracts remain stable under follow-up replay.
## Recheck (Run-005)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay validated via Timeline integration suites.
- **Tests**: PASS (`src/Timeline/__Tests/StellaOps.Timeline.Core.Tests`: 7/7; `src/Timeline/__Tests/StellaOps.Timeline.WebService.Tests`: 19/19).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/timeline/unified-event-timeline-service/run-005/tier2-api-check.json`
- **Outcome**: Unified timeline API behavior remains healthy.
## Recheck (Run-006)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay (API + integration) with deterministic suite verification.
- **Tests**: PASS (src/Timeline/__Tests/StellaOps.Timeline.Core.Tests: 7/7; src/Timeline/__Tests/StellaOps.Timeline.WebService.Tests: 19/19).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/timeline/unified-event-timeline-service/run-006/tier2-api-check.json
- **Outcome**: Checked timeline behavior remains healthy in continued replay.
## Recheck (Run-007)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay (API + integration) with deterministic suite verification.
- **Tests**: PASS (src/Timeline/__Tests/StellaOps.Timeline.Core.Tests: 7/7; src/Timeline/__Tests/StellaOps.Timeline.WebService.Tests: 19/19).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/timeline/unified-event-timeline-service/run-007/tier2-api-check.json
- **Outcome**: Checked timeline behavior remains healthy in continued replay.
## Recheck (Run-008)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay + deterministic integration suite replay.
- **Tests**: PASS (src/Timeline/__Tests/StellaOps.Timeline.Core.Tests: 7/7, src/Timeline/__Tests/StellaOps.Timeline.WebService.Tests: 19/19).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/timeline/unified-event-timeline-service/run-008/tier2-api-check.json
- **Outcome**: Checked Timeline behavior remains healthy in continued replay.
## Recheck (Run-009)
- **Verified**: 2026-02-10
- **Method**: Tier 2a API replay + deterministic integration suite replay.
- **Tests**: PASS (src/Timeline/__Tests/StellaOps.Timeline.Core.Tests: 7/7, src/Timeline/__Tests/StellaOps.Timeline.WebService.Tests: 19/19).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/timeline/unified-event-timeline-service/run-009/tier2-api-check.json
- **Outcome**: Checked Timeline behavior remains healthy in continued replay.
## Recheck (Run-010)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Timeline.Core 7/7, Timeline.WebService 19/19; total 26/26).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/timeline/unified-event-timeline-service/run-010/tier2-integration-check.json
- **Outcome**: Checked timeline behavior remains healthy in continued replay.
## Recheck (Run-011)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (Timeline.Core 7/7, Timeline.WebService 19/19; total 26/26).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/timeline/unified-event-timeline-service/run-011/tier2-integration-check.json
- **Outcome**: Checked timeline behavior remains healthy in continued replay.
## Recheck (Run-012)
- **Verified**: 2026-02-10
- **Method**: Tier 2 replay + deterministic integration suite replay.
- **Tests**: PASS (src/Timeline/__Tests/StellaOps.Timeline.Core.Tests: 7/7; src/Timeline/__Tests/StellaOps.Timeline.WebService.Tests: 19/19; total 26/26).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/timeline/unified-event-timeline-service/run-012/tier2-api-check.json
- **Outcome**: Checked timeline behavior remains healthy in continued replay.

View File

@@ -30,3 +30,79 @@ Generates CI/CD pipeline templates for GitHub Actions, GitLab CI, and Azure DevO
- **Method**: Tier 1 code review + Tier 2d test verification
- **Build**: 5/9 projects pass (4 blocked by Policy dep, not relevant to this feature). 0 errors, 0 warnings for WorkflowGenerator.
- **Tests**: 76 tests pass across 5 test files (GitHubActionsGeneratorTests: 21, GitLabCiGeneratorTests: 13, AzureDevOpsGeneratorTests: 13, WorkflowGeneratorFactoryTests: 7, WorkflowOptionsTests: 7, plus golden fixture tests)
## Recheck (Run-002)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (`src/Tools/__Tests/StellaOps.Tools.WorkflowGenerator.Tests`: 76/76).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/tools/ci-cd-workflow-generator/run-002/tier2-integration-check.json`
- **Outcome**: Multi-platform workflow generation behavior remains stable and deterministic.
## Recheck (Run-003)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (`src/Tools/__Tests/StellaOps.Tools.WorkflowGenerator.Tests`: 76/76).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/tools/ci-cd-workflow-generator/run-003/tier2-integration-check.json`
- **Outcome**: Multi-platform workflow generation behavior remains stable and deterministic.
## Recheck (Run-004)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (WorkflowGenerator 76/76).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/tools/ci-cd-workflow-generator/run-004/tier2-integration-check.json
- **Outcome**: Checked Tools behavior remains healthy in follow-up replay.
## Recheck (Run-005)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (WorkflowGenerator 76/76).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/tools/ci-cd-workflow-generator/run-005/tier2-integration-check.json
- **Outcome**: Checked Tools behavior remains healthy in continued replay.
## Recheck (Run-006)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (WorkflowGenerator 76/76).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/tools/ci-cd-workflow-generator/run-006/tier2-integration-check.json
- **Outcome**: Checked Tools behavior remains healthy in continued replay.
## Recheck (Run-007)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (WorkflowGenerator 76/76).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/tools/ci-cd-workflow-generator/run-007/tier2-integration-check.json
- **Outcome**: Checked Tools behavior remains healthy in continued replay.
## Recheck (Run-008)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (WorkflowGenerator 76/76).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/tools/ci-cd-workflow-generator/run-008/tier2-integration-check.json
- **Outcome**: Checked Tools behavior remains healthy in continued replay.
## Recheck (Run-009)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (WorkflowGenerator 76/76, FixtureUpdater 2/2, GoldenPairs 9/9; total 87/87).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/tools/ci-cd-workflow-generator/run-009/tier2-integration-check.json
- **Outcome**: Checked tools behavior remains healthy in continued replay.
## Recheck (Run-010)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (WorkflowGenerator 76/76, FixtureUpdater 2/2, GoldenPairs 9/9; total 87/87).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/tools/ci-cd-workflow-generator/run-010/tier2-integration-check.json
- **Outcome**: Checked tools behavior remains healthy in continued replay.
## Recheck (Run-011)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (WorkflowGenerator 76/76, FixtureUpdater 2/2, GoldenPairs 9/9; total 87/87).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/tools/ci-cd-workflow-generator/run-011/tier2-integration-check.json
- **Outcome**: Checked tools behavior remains healthy in continued replay.
## Recheck (Run-012)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic tools suite replay.
- **Tests**: PASS (WorkflowGenerator 76/76, FixtureUpdater 2/2, GoldenPairs 9/9; total 87/87).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/tools/ci-cd-workflow-generator/run-012/tier2-integration-check.json
- **Outcome**: Checked tools behavior remains healthy in continued replay.

View File

@@ -24,3 +24,79 @@ CLI tool for deterministic test fixture management. Rewrites Concelier OSV/GHSA/
- **Build**: Passes (0 errors, 0 warnings)
- **Tests**: 2 tests pass (determinism verification, error reporting with context)
- **Caveat**: Original feature description overstated capabilities. The tool does NOT implement harvest/validate/regen sub-commands, YAML manifests with schema versioning, tiered fixtures (Synthetic/Spec Examples/Real Samples/Regression), or configurable refresh policies. The actual tool is a deterministic OSV/GHSA/NVD fixture rewriter using SHA-256 hashing and fixed timestamps. Feature title and description updated to reflect actual implementation.
## Recheck (Run-002)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (`src/Tools/__Tests/FixtureUpdater.Tests`: 2/2).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/tools/fixture-harvester-tool/run-002/tier2-integration-check.json`
- **Outcome**: Deterministic fixture rewrite and contextual error reporting behavior remain stable.
## Recheck (Run-003)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (`src/Tools/__Tests/FixtureUpdater.Tests`: 2/2).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/tools/fixture-harvester-tool/run-003/tier2-integration-check.json`
- **Outcome**: Deterministic fixture rewrite and contextual error reporting behavior remain stable.
## Recheck (Run-004)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (FixtureUpdater 2/2).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/tools/fixture-harvester-tool/run-004/tier2-integration-check.json
- **Outcome**: Checked Tools behavior remains healthy in follow-up replay.
## Recheck (Run-005)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (FixtureUpdater 2/2).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/tools/fixture-harvester-tool/run-005/tier2-integration-check.json
- **Outcome**: Checked Tools behavior remains healthy in continued replay.
## Recheck (Run-006)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (FixtureUpdater 2/2).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/tools/fixture-harvester-tool/run-006/tier2-integration-check.json
- **Outcome**: Checked Tools behavior remains healthy in continued replay.
## Recheck (Run-007)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (FixtureUpdater 2/2).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/tools/fixture-harvester-tool/run-007/tier2-integration-check.json
- **Outcome**: Checked Tools behavior remains healthy in continued replay.
## Recheck (Run-008)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (FixtureUpdater 2/2).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/tools/fixture-harvester-tool/run-008/tier2-integration-check.json
- **Outcome**: Checked Tools behavior remains healthy in continued replay.
## Recheck (Run-009)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (WorkflowGenerator 76/76, FixtureUpdater 2/2, GoldenPairs 9/9; total 87/87).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/tools/fixture-harvester-tool/run-009/tier2-integration-check.json
- **Outcome**: Checked tools behavior remains healthy in continued replay.
## Recheck (Run-010)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (WorkflowGenerator 76/76, FixtureUpdater 2/2, GoldenPairs 9/9; total 87/87).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/tools/fixture-harvester-tool/run-010/tier2-integration-check.json
- **Outcome**: Checked tools behavior remains healthy in continued replay.
## Recheck (Run-011)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (WorkflowGenerator 76/76, FixtureUpdater 2/2, GoldenPairs 9/9; total 87/87).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/tools/fixture-harvester-tool/run-011/tier2-integration-check.json
- **Outcome**: Checked tools behavior remains healthy in continued replay.
## Recheck (Run-012)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic tools suite replay.
- **Tests**: PASS (WorkflowGenerator 76/76, FixtureUpdater 2/2, GoldenPairs 9/9; total 87/87).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/tools/fixture-harvester-tool/run-012/tier2-integration-check.json
- **Outcome**: Checked tools behavior remains healthy in continued replay.

View File

@@ -32,3 +32,79 @@ Package mirror service to download pre/post-patch binary pairs from distro repos
- **Method**: Tier 1 code review + Tier 2d test verification
- **Build**: Passes (0 errors, 0 warnings)
- **Tests**: 9 tests pass across 4 test files (DiffPipelineServiceTests: 2, GoldenPairLoaderTests: 2, PackageMirrorServiceTests: 2, GoldenPairSchemaTests: 3)
## Recheck (Run-002)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (`src/Tools/__Tests/StellaOps.Tools.GoldenPairs.Tests`: 9/9).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/tools/golden-pairs-mirror-and-diff-pipeline/run-002/tier2-integration-check.json`
- **Outcome**: Mirror/diff pipeline behaviors remain healthy with deterministic verdicting and mismatch detection.
## Recheck (Run-003)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (`src/Tools/__Tests/StellaOps.Tools.GoldenPairs.Tests`: 9/9).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/tools/golden-pairs-mirror-and-diff-pipeline/run-003/tier2-integration-check.json`
- **Outcome**: Mirror/diff pipeline behaviors remain healthy with deterministic verdicting and mismatch detection.
## Recheck (Run-004)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (GoldenPairs 9/9).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/tools/golden-pairs-mirror-and-diff-pipeline/run-004/tier2-integration-check.json
- **Outcome**: Checked Tools behavior remains healthy in follow-up replay.
## Recheck (Run-005)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (GoldenPairs 9/9).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/tools/golden-pairs-mirror-and-diff-pipeline/run-005/tier2-integration-check.json
- **Outcome**: Checked Tools behavior remains healthy in continued replay.
## Recheck (Run-006)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (GoldenPairs 9/9).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/tools/golden-pairs-mirror-and-diff-pipeline/run-006/tier2-integration-check.json
- **Outcome**: Checked Tools behavior remains healthy in continued replay.
## Recheck (Run-007)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (GoldenPairs 9/9).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/tools/golden-pairs-mirror-and-diff-pipeline/run-007/tier2-integration-check.json
- **Outcome**: Checked Tools behavior remains healthy in continued replay.
## Recheck (Run-008)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (GoldenPairs 9/9).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/tools/golden-pairs-mirror-and-diff-pipeline/run-008/tier2-integration-check.json
- **Outcome**: Checked Tools behavior remains healthy in continued replay.
## Recheck (Run-009)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (WorkflowGenerator 76/76, FixtureUpdater 2/2, GoldenPairs 9/9; total 87/87).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/tools/golden-pairs-mirror-and-diff-pipeline/run-009/tier2-integration-check.json
- **Outcome**: Checked tools behavior remains healthy in continued replay.
## Recheck (Run-010)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (WorkflowGenerator 76/76, FixtureUpdater 2/2, GoldenPairs 9/9; total 87/87).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/tools/golden-pairs-mirror-and-diff-pipeline/run-010/tier2-integration-check.json
- **Outcome**: Checked tools behavior remains healthy in continued replay.
## Recheck (Run-011)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (WorkflowGenerator 76/76, FixtureUpdater 2/2, GoldenPairs 9/9; total 87/87).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/tools/golden-pairs-mirror-and-diff-pipeline/run-011/tier2-integration-check.json
- **Outcome**: Checked tools behavior remains healthy in continued replay.
## Recheck (Run-012)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic tools suite replay.
- **Tests**: PASS (WorkflowGenerator 76/76, FixtureUpdater 2/2, GoldenPairs 9/9; total 87/87).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/tools/golden-pairs-mirror-and-diff-pipeline/run-012/tier2-integration-check.json
- **Outcome**: Checked tools behavior remains healthy in continued replay.

View File

@@ -29,3 +29,79 @@ Data model for golden pair metadata, binary artifacts, and diff reports used to
- **Method**: Tier 1 code review + Tier 2d test verification
- **Build**: Passes (0 errors, 0 warnings)
- **Tests**: 9 tests pass (shared with Golden Pairs Mirror feature: GoldenPairSchemaTests: 3, GoldenPairLoaderTests: 2, DiffPipelineServiceTests: 2, PackageMirrorServiceTests: 2)
## Recheck (Run-002)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (`src/Tools/__Tests/StellaOps.Tools.GoldenPairs.Tests`: 9/9; shared coverage).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/tools/golden-pairs-validation-infrastructure/run-002/tier2-integration-check.json`
- **Outcome**: Validation models/schema/serialization paths remain deterministic and replay-stable.
## Recheck (Run-003)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (`src/Tools/__Tests/StellaOps.Tools.GoldenPairs.Tests`: 9/9; shared coverage).
- **Tier 2 Evidence**: `docs/qa/feature-checks/runs/tools/golden-pairs-validation-infrastructure/run-003/tier2-integration-check.json`
- **Outcome**: Validation models/schema/serialization paths remain deterministic and replay-stable.
## Recheck (Run-004)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (GoldenPairs 9/9).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/tools/golden-pairs-validation-infrastructure/run-004/tier2-integration-check.json
- **Outcome**: Checked Tools behavior remains healthy in follow-up replay.
## Recheck (Run-005)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (GoldenPairs 9/9).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/tools/golden-pairs-validation-infrastructure/run-005/tier2-integration-check.json
- **Outcome**: Checked Tools behavior remains healthy in continued replay.
## Recheck (Run-006)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (GoldenPairs 9/9).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/tools/golden-pairs-validation-infrastructure/run-006/tier2-integration-check.json
- **Outcome**: Checked Tools behavior remains healthy in continued replay.
## Recheck (Run-007)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (GoldenPairs shared 9/9).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/tools/golden-pairs-validation-infrastructure/run-007/tier2-integration-check.json
- **Outcome**: Checked Tools behavior remains healthy in continued replay.
## Recheck (Run-008)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (GoldenPairs shared 9/9).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/tools/golden-pairs-validation-infrastructure/run-008/tier2-integration-check.json
- **Outcome**: Checked Tools behavior remains healthy in continued replay.
## Recheck (Run-009)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (WorkflowGenerator 76/76, FixtureUpdater 2/2, GoldenPairs 9/9; total 87/87).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/tools/golden-pairs-validation-infrastructure/run-009/tier2-integration-check.json
- **Outcome**: Checked tools behavior remains healthy in continued replay.
## Recheck (Run-010)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (WorkflowGenerator 76/76, FixtureUpdater 2/2, GoldenPairs 9/9; total 87/87).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/tools/golden-pairs-validation-infrastructure/run-010/tier2-integration-check.json
- **Outcome**: Checked tools behavior remains healthy in continued replay.
## Recheck (Run-011)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic integration replay.
- **Tests**: PASS (WorkflowGenerator 76/76, FixtureUpdater 2/2, GoldenPairs 9/9; total 87/87).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/tools/golden-pairs-validation-infrastructure/run-011/tier2-integration-check.json
- **Outcome**: Checked tools behavior remains healthy in continued replay.
## Recheck (Run-012)
- **Verified**: 2026-02-10
- **Method**: Tier 2d deterministic tools suite replay.
- **Tests**: PASS (WorkflowGenerator 76/76, FixtureUpdater 2/2, GoldenPairs 9/9; total 87/87).
- **Tier 2 Evidence**: docs/qa/feature-checks/runs/tools/golden-pairs-validation-infrastructure/run-012/tier2-integration-check.json
- **Outcome**: Checked tools behavior remains healthy in continued replay.

View File

@@ -0,0 +1,50 @@
# A/B Deploy Diff Panel
## Module
Web
## Status
VERIFIED
## Description
Deploy diff UI provides deterministic A/B SBOM comparison with policy-hit context, loading/error states, and inline release action controls.
## Implementation Details
- **Feature directory**: `src/Web/StellaOps.Web/src/app/features/deploy-diff/`
- **Route module**: `src/Web/StellaOps.Web/src/app/features/deploy-diff/deploy-diff.routes.ts`
- **Core files**:
- `src/Web/StellaOps.Web/src/app/features/deploy-diff/pages/deploy-diff.page.ts`
- `src/Web/StellaOps.Web/src/app/features/deploy-diff/components/deploy-diff-panel/deploy-diff-panel.component.ts`
- `src/Web/StellaOps.Web/src/app/features/deploy-diff/services/deploy-diff.service.ts`
- **Focused tests**:
- `src/Web/StellaOps.Web/src/tests/deploy_diff/deploy-diff-panel.component.spec.ts`
## Follow-up Notes
- Tier 2 verification is integration-harness based because deploy-diff route wiring exists in feature module but is not mounted in the primary shell route map.
## Verification
- Date: 2026-02-10
- Run artifacts: `docs/qa/feature-checks/runs/web/a-b-deploy-diff-panel/run-001/`
- Tier results:
- `tier0-source-check.json`: pass
- `tier1-build-check.json`: pass
- `tier2-e2e-check.json`: pass
## Recheck (run-003)
- Date (UTC): 2026-02-10
- Status: VERIFIED (replayed)
- Tier 1 evidence: Angular build passed and checked-web suite passed 145/145.
- Tier 2 evidence: docs/qa/feature-checks/runs/web/a-b-deploy-diff-panel/run-003/tier2-e2e-check.json.
## Recheck (run-004)
- Date (UTC): 2026-02-10
- Status: VERIFIED (replayed)
- Tier 1 evidence: Angular build passed and checked-web suite passed 145/145 across 47 files.
- Tier 2 evidence: docs/qa/feature-checks/runs/web/a-b-deploy-diff-panel/run-004/tier2-e2e-check.json.

View File

@@ -0,0 +1,41 @@
# Agent Fleet Dashboard UI
## Module
Web
## Status
VERIFIED
## Description
Agent fleet dashboard is available at `/ops/agents` with realtime status surfaces, KPI strip, filtering, and onboarding navigation flow.
## Implementation Details
- **Feature directory**: `src/Web/StellaOps.Web/src/app/features/agents/`
- **Routes**:
- `src/Web/StellaOps.Web/src/app/features/agents/agents.routes.ts`
- Mounted in shell via `src/Web/StellaOps.Web/src/app/app.routes.ts` (`/ops/agents`)
- **Core files**:
- `src/Web/StellaOps.Web/src/app/features/agents/agent-fleet-dashboard.component.ts`
- `src/Web/StellaOps.Web/src/app/features/agents/agent-onboard-wizard.component.ts`
- `src/Web/StellaOps.Web/src/app/features/agents/services/agent.store.ts`
- **Focused tests**:
- `src/Web/StellaOps.Web/src/tests/agent_fleet/agent-fleet-dashboard.component.spec.ts`
## Verification
- Date: 2026-02-10
- Run artifacts: `docs/qa/feature-checks/runs/web/agent-fleet-dashboard-ui/run-001/`
- Tier results:
- `tier0-source-check.json`: pass
- `tier1-build-check.json`: pass
- `tier2-e2e-check.json`: pass
## Recheck (run-002)
- Date (UTC): 2026-02-10
- Status: VERIFIED (replayed)
- Tier 1 evidence: Angular build passed and checked-web suite passed 145/145.
- Tier 2 evidence: docs/qa/feature-checks/runs/web/agent-fleet-dashboard-ui/run-002/tier2-e2e-check.json.

View File

@@ -0,0 +1,50 @@
# AI Autofix Button with Remediation Plan Preview and PR Tracker
## Module
Web
## Status
VERIFIED
## Description
Advisory AI remediation workflow is implemented with autofix trigger controls, remediation plan preview surfaces, and PR status/action tracking components.
## Implementation Details
- **Feature directory**: `src/Web/StellaOps.Web/src/app/features/advisory-ai/`
- **Core files**:
- `src/Web/StellaOps.Web/src/app/features/advisory-ai/autofix-button.component.ts`
- `src/Web/StellaOps.Web/src/app/features/advisory-ai/remediation-plan-preview.component.ts`
- `src/Web/StellaOps.Web/src/app/features/advisory-ai/pr-tracker.component.ts`
- **Supporting model contract**:
- `src/Web/StellaOps.Web/src/app/core/api/advisory-ai.models.ts`
- **Focused tests**:
- `src/Web/StellaOps.Web/src/tests/advisory_ai_autofix/autofix-button.component.spec.ts`
- `src/Web/StellaOps.Web/src/tests/advisory_ai_autofix/remediation-plan-preview.component.spec.ts`
- `src/Web/StellaOps.Web/src/tests/advisory_ai_autofix/pr-tracker.component.spec.ts`
## Verification
- Date: 2026-02-10
- Run artifacts: `docs/qa/feature-checks/runs/web/ai-autofix-button-with-remediation-plan-preview-and-pr-tracker/run-001/`
- Tier results:
- `tier0-source-check.json`: pass
- `tier1-build-check.json`: pass
- `tier2-e2e-check.json`: pass
## Recheck (run-002)
- Date (UTC): 2026-02-10
- Status: VERIFIED (replayed)
- Tier 1 evidence: Angular build passed and checked-web suite passed 145/145.
- Tier 2 evidence: docs/qa/feature-checks/runs/web/ai-autofix-button-with-remediation-plan-preview-and-pr-tracker/run-002/tier2-e2e-check.json.
## Recheck (run-004)
- Date (UTC): 2026-02-10
- Status: VERIFIED (replayed)
- Tier 1 evidence: Angular build passed and checked-web suite passed 145/145 across 47 files.
- Tier 2 evidence: docs/qa/feature-checks/runs/web/ai-autofix-button-with-remediation-plan-preview-and-pr-tracker/run-004/tier2-e2e-check.json.

View File

@@ -0,0 +1,50 @@
# AI Chat Panel UI
## Module
Web
## Status
VERIFIED
## Description
Advisory AI chat surfaces are implemented with role-aware message rendering, object-link citations, grounding score display, and action-button interactions.
## Implementation Details
- **Feature directory**: `src/Web/StellaOps.Web/src/app/features/advisory-ai/chat/`
- **Core files**:
- `src/Web/StellaOps.Web/src/app/features/advisory-ai/chat/chat.component.ts`
- `src/Web/StellaOps.Web/src/app/features/advisory-ai/chat/chat-message.component.ts`
- `src/Web/StellaOps.Web/src/app/features/advisory-ai/chat/chat.service.ts`
- `src/Web/StellaOps.Web/src/app/features/advisory-ai/chat/object-link-chip.component.ts`
- **Focused tests**:
- `src/Web/StellaOps.Web/src/tests/advisory_ai_chat/chat-message.component.spec.ts`
## Follow-up Notes
- Tier 2 verification is component-level integration harness evidence because advisory chat panels are composed inside larger triage workspaces rather than a dedicated standalone route.
## Verification
- Date: 2026-02-10
- Run artifacts: `docs/qa/feature-checks/runs/web/ai-chat-panel-ui/run-001/`
- Tier results:
- `tier0-source-check.json`: pass
- `tier1-build-check.json`: pass
- `tier2-e2e-check.json`: pass
## Recheck (run-002)
- Date (UTC): 2026-02-10
- Status: VERIFIED (replayed)
- Tier 1 evidence: Angular build passed and checked-web suite passed 145/145.
- Tier 2 evidence: docs/qa/feature-checks/runs/web/ai-chat-panel-ui/run-002/tier2-e2e-check.json.
## Recheck (run-004)
- Date (UTC): 2026-02-10
- Status: VERIFIED (replayed)
- Tier 1 evidence: Angular build passed and checked-web suite passed 145/145 across 47 files.
- Tier 2 evidence: docs/qa/feature-checks/runs/web/ai-chat-panel-ui/run-004/tier2-e2e-check.json.

View File

@@ -0,0 +1,49 @@
# AI Chip Components (Progressive Disclosure UX)
## Module
Web
## Status
VERIFIED
## Description
Shared AI chip component library is implemented with deterministic variant styling, guarded interactions, and three-line summary/progressive disclosure behavior for findings and triage surfaces.
## Implementation Details
- **Shared component directory**: `src/Web/StellaOps.Web/src/app/shared/components/ai/`
- **Core files**:
- `src/Web/StellaOps.Web/src/app/shared/components/ai/ai-chip.component.ts`
- `src/Web/StellaOps.Web/src/app/shared/components/ai/ai-summary.component.ts`
- `src/Web/StellaOps.Web/src/app/shared/components/ai/ai-authority-badge.component.ts`
- **Integration point**:
- `src/Web/StellaOps.Web/src/app/features/findings/ai-chip-row.component.ts`
- **Focused tests**:
- `src/Web/StellaOps.Web/src/tests/ai_chip_components/ai-chip.component.spec.ts`
- `src/Web/StellaOps.Web/src/tests/ai_chip_components/ai-summary.component.spec.ts`
## Verification
- Date: 2026-02-10
- Run artifacts: `docs/qa/feature-checks/runs/web/ai-chip-components/run-001/`
- Tier results:
- `tier0-source-check.json`: pass
- `tier1-build-check.json`: pass
- `tier2-e2e-check.json`: pass
## Recheck (run-002)
- Date (UTC): 2026-02-10
- Status: VERIFIED (replayed)
- Tier 1 evidence: Angular build passed and checked-web suite passed 145/145.
- Tier 2 evidence: docs/qa/feature-checks/runs/web/ai-chip-components/run-002/tier2-e2e-check.json.
## Recheck (run-004)
- Date (UTC): 2026-02-10
- Status: VERIFIED (replayed)
- Tier 1 evidence: Angular build passed and checked-web suite passed 145/145 across 47 files.
- Tier 2 evidence: docs/qa/feature-checks/runs/web/ai-chip-components/run-004/tier2-e2e-check.json.

View File

@@ -0,0 +1,46 @@
# AI Preferences and Verbosity Settings UI
## Module
Web
## Status
VERIFIED
## Description
AI preferences UI is implemented via dedicated settings component with verbosity controls, surface toggles, team notification options, and save/reset behavior.
## Implementation Details
- **Settings component**:
- `src/Web/StellaOps.Web/src/app/features/settings/ai-preferences.component.ts`
- **Related preference/toggle support**:
- `src/Web/StellaOps.Web/src/app/features/advisory-ai/plain-language-toggle.component.ts`
- `src/Web/StellaOps.Web/src/app/shared/services/plain-language.service.ts`
- **Focused tests**:
- `src/Web/StellaOps.Web/src/tests/settings_ai_preferences/ai-preferences.component.spec.ts`
## Verification
- Date: 2026-02-10
- Run artifacts: `docs/qa/feature-checks/runs/web/ai-preferences-and-verbosity-settings-ui/run-001/`
- Tier results:
- `tier0-source-check.json`: pass
- `tier1-build-check.json`: pass
- `tier2-e2e-check.json`: pass
## Recheck (run-002)
- Date (UTC): 2026-02-10
- Status: VERIFIED (replayed)
- Tier 1 evidence: Angular build passed and checked-web suite passed 145/145.
- Tier 2 evidence: docs/qa/feature-checks/runs/web/ai-preferences-and-verbosity-settings-ui/run-002/tier2-e2e-check.json.
## Recheck (run-004)
- Date (UTC): 2026-02-10
- Status: VERIFIED (replayed)
- Tier 1 evidence: Angular build passed and checked-web suite passed 145/145 across 47 files.
- Tier 2 evidence: docs/qa/feature-checks/runs/web/ai-preferences-and-verbosity-settings-ui/run-004/tier2-e2e-check.json.

View File

@@ -0,0 +1,50 @@
# AI Recommendation Panel for Triage
## Module
Web
## Status
VERIFIED
## Description
Triage AI recommendation panel is implemented with cached recommendation hydration, analysis request flow, reachability/VEX suggestion surfaces, and action/question interactions.
## Implementation Details
- **Core component**:
- `src/Web/StellaOps.Web/src/app/features/triage/components/ai-recommendation-panel/ai-recommendation-panel.component.ts`
- **Service integration**:
- `src/Web/StellaOps.Web/src/app/features/triage/services/advisory-ai.service.ts`
- **Workspace integration anchor**:
- `src/Web/StellaOps.Web/src/app/features/triage/triage-workspace.component.ts`
- **Focused tests**:
- `src/Web/StellaOps.Web/src/tests/triage_ai_recommendation/ai-recommendation-panel.component.spec.ts`
## Follow-up Notes
- Tier 2 verification is component-level integration harness evidence because AI recommendation surfaces are embedded inside triage workspace compositions.
## Verification
- Date: 2026-02-10
- Run artifacts: `docs/qa/feature-checks/runs/web/ai-recommendation-panel-for-triage/run-001/`
- Tier results:
- `tier0-source-check.json`: pass
- `tier1-build-check.json`: pass
- `tier2-e2e-check.json`: pass
## Recheck (run-002)
- Date (UTC): 2026-02-10
- Status: VERIFIED (replayed)
- Tier 1 evidence: Angular build passed and checked-web suite passed 145/145.
- Tier 2 evidence: docs/qa/feature-checks/runs/web/ai-recommendation-panel-for-triage/run-002/tier2-e2e-check.json.
## Recheck (run-004)
- Date (UTC): 2026-02-10
- Status: VERIFIED (replayed)
- Tier 1 evidence: Angular build passed and checked-web suite passed 145/145 across 47 files.
- Tier 2 evidence: docs/qa/feature-checks/runs/web/ai-recommendation-panel-for-triage/run-004/tier2-e2e-check.json.

View File

@@ -0,0 +1,46 @@
# AI Summary 3-Line Component
## Module
Web
## Status
VERIFIED
## Description
Three-line AI summary component provides deterministic What/Why/Next content and progressive disclosure behavior for findings and triage UI contexts.
## Implementation Details
- **Core component**:
- `src/Web/StellaOps.Web/src/app/shared/components/ai/ai-summary.component.ts`
- **Supporting badge + integration point**:
- `src/Web/StellaOps.Web/src/app/shared/components/ai/ai-authority-badge.component.ts`
- `src/Web/StellaOps.Web/src/app/features/findings/ai-chip-row.component.ts`
- **Focused tests**:
- `src/Web/StellaOps.Web/src/tests/ai_chip_components/ai-summary.component.spec.ts`
## Verification
- Date: 2026-02-10
- Run artifacts: `docs/qa/feature-checks/runs/web/ai-summary-3-line-component/run-001/`
- Tier results:
- `tier0-source-check.json`: pass
- `tier1-build-check.json`: pass
- `tier2-e2e-check.json`: pass
## Recheck (run-002)
- Date (UTC): 2026-02-10
- Status: VERIFIED (replayed)
- Tier 1 evidence: Angular build passed and checked-web suite passed 145/145.
- Tier 2 evidence: docs/qa/feature-checks/runs/web/ai-summary-3-line-component/run-002/tier2-e2e-check.json.
## Recheck (run-004)
- Date (UTC): 2026-02-10
- Status: VERIFIED (replayed)
- Tier 1 evidence: Angular build passed and checked-web suite passed 145/145 across 47 files.
- Tier 2 evidence: docs/qa/feature-checks/runs/web/ai-summary-3-line-component/run-004/tier2-e2e-check.json.

View File

@@ -0,0 +1,50 @@
# AOC Verification Action with CLI Parity Guidance
## Module
Web
## Status
VERIFIED
## Description
AOC verification workflow is implemented with tenant-scoped verification action controls, CLI parity guidance, and violation drilldown views that support by-violation and by-document inspection with raw-document actions.
## Implementation Details
- **Feature directory**: `src/Web/StellaOps.Web/src/app/features/aoc/`
- **Core files**:
- `src/Web/StellaOps.Web/src/app/features/aoc/verify-action.component.ts`
- `src/Web/StellaOps.Web/src/app/features/aoc/verify-action.component.html`
- `src/Web/StellaOps.Web/src/app/features/aoc/violation-drilldown.component.ts`
- `src/Web/StellaOps.Web/src/app/features/aoc/violation-drilldown.component.html`
- **Supporting contracts**:
- `src/Web/StellaOps.Web/src/app/core/api/aoc.client.ts`
- `src/Web/StellaOps.Web/src/app/core/api/aoc.models.ts`
- **Focused tests**:
- `src/Web/StellaOps.Web/src/tests/aoc_verification/verify-action.component.spec.ts`
- `src/Web/StellaOps.Web/src/tests/aoc_verification/violation-drilldown.component.spec.ts`
## Verification
- Date: 2026-02-10
- Run artifacts: `docs/qa/feature-checks/runs/web/aoc-verification-action-with-cli-parity-guidance/run-001/`
- Tier results:
- `tier0-source-check.json`: pass
- `tier1-build-check.json`: pass
- `tier2-e2e-check.json`: pass
## Recheck (run-002)
- Date (UTC): 2026-02-10
- Status: VERIFIED (replayed)
- Tier 1 evidence: Angular build passed and checked-web suite passed 145/145.
- Tier 2 evidence: docs/qa/feature-checks/runs/web/aoc-verification-action-with-cli-parity-guidance/run-002/tier2-e2e-check.json.
## Recheck (run-004)
- Date (UTC): 2026-02-10
- Status: VERIFIED (replayed)
- Tier 1 evidence: Angular build passed and checked-web suite passed 145/145 across 47 files.
- Tier 2 evidence: docs/qa/feature-checks/runs/web/aoc-verification-action-with-cli-parity-guidance/run-004/tier2-e2e-check.json.

View File

@@ -0,0 +1,47 @@
# Approval Detail with Reachability Witness Panel
## Module
Web
## Status
VERIFIED
## Description
Approval detail workflow renders a split-pane decision surface with security diff context and reachability witness panel interactions for finding-level evidence inspection.
## Implementation Details
- **Feature directory**: `src/Web/StellaOps.Web/src/app/features/approvals/`
- **Routes**:
- `src/Web/StellaOps.Web/src/app/features/approvals/approvals.routes.ts`
- Mounted via `src/Web/StellaOps.Web/src/app/app.routes.ts` at `/approvals/:id`
- **Core files**:
- `src/Web/StellaOps.Web/src/app/features/approvals/approval-detail-page.component.ts`
- `src/Web/StellaOps.Web/src/app/features/approvals/modals/request-exception-modal.component.ts`
- **Focused tests**:
- `src/Web/StellaOps.Web/src/tests/approvals/approval-detail-page.component.spec.ts`
## Verification
- Date: 2026-02-10
- Run artifacts: `docs/qa/feature-checks/runs/web/approval-detail-with-reachability-witness-panel/run-001/`
- Tier results:
- `tier0-source-check.json`: pass
- `tier1-build-check.json`: pass
- `tier2-e2e-check.json`: pass
## Recheck (run-002)
- Date (UTC): 2026-02-10
- Status: VERIFIED (replayed)
- Tier 1 evidence: Angular build passed and checked-web suite passed 145/145.
- Tier 2 evidence: docs/qa/feature-checks/runs/web/approval-detail-with-reachability-witness-panel/run-002/tier2-e2e-check.json.
## Recheck (run-004)
- Date (UTC): 2026-02-10
- Status: VERIFIED (replayed)
- Tier 1 evidence: Angular build passed and checked-web suite passed 145/145 across 47 files.
- Tier 2 evidence: docs/qa/feature-checks/runs/web/approval-detail-with-reachability-witness-panel/run-004/tier2-e2e-check.json.

View File

@@ -0,0 +1,46 @@
# Approvals Inbox with Diff-First Presentation
## Module
Web
## Status
VERIFIED
## Description
Approvals inbox provides diff-first promotion cards with what-changed summaries, gate state badges, and direct actions for details and evidence follow-up.
## Implementation Details
- **Feature directory**: `src/Web/StellaOps.Web/src/app/features/approvals/`
- **Route**:
- `src/Web/StellaOps.Web/src/app/features/approvals/approvals.routes.ts`
- Mounted via `src/Web/StellaOps.Web/src/app/app.routes.ts` at `/approvals`
- **Core files**:
- `src/Web/StellaOps.Web/src/app/features/approvals/approvals-inbox.component.ts`
- **Focused tests**:
- `src/Web/StellaOps.Web/src/tests/approvals/approvals-inbox.component.spec.ts`
## Verification
- Date: 2026-02-10
- Run artifacts: `docs/qa/feature-checks/runs/web/approvals-inbox-with-diff-first-presentation/run-001/`
- Tier results:
- `tier0-source-check.json`: pass
- `tier1-build-check.json`: pass
- `tier2-e2e-check.json`: pass
## Recheck (run-002)
- Date (UTC): 2026-02-10
- Status: VERIFIED (replayed)
- Tier 1 evidence: Angular build passed and checked-web suite passed 145/145.
- Tier 2 evidence: docs/qa/feature-checks/runs/web/approvals-inbox-with-diff-first-presentation/run-002/tier2-e2e-check.json.
## Recheck (run-004)
- Date (UTC): 2026-02-10
- Status: VERIFIED (replayed)
- Tier 1 evidence: Angular build passed and checked-web suite passed 145/145 across 47 files.
- Tier 2 evidence: docs/qa/feature-checks/runs/web/approvals-inbox-with-diff-first-presentation/run-004/tier2-e2e-check.json.

View File

@@ -0,0 +1,49 @@
# Attested Score UI (Reduction Profile, Hard-Fail, Proof Anchors)
## Module
Web
## Status
VERIFIED
## Description
Attested score UI surfaces are implemented for reduction-profile metadata, hard-fail signaling, and proof-anchor details with dedicated anchored/hard-fail badge treatments.
## Implementation Details
- **Feature directory**: `src/Web/StellaOps.Web/src/app/shared/components/score/`
- **Core files**:
- `src/Web/StellaOps.Web/src/app/shared/components/score/score-badge.component.ts`
- `src/Web/StellaOps.Web/src/app/shared/components/score/score-badge.component.html`
- `src/Web/StellaOps.Web/src/app/shared/components/score/score-breakdown-popover.component.ts`
- `src/Web/StellaOps.Web/src/app/shared/components/score/score-breakdown-popover.component.html`
- **Supporting model contract**:
- `src/Web/StellaOps.Web/src/app/core/api/scoring.models.ts`
- **Focused tests**:
- `src/Web/StellaOps.Web/src/tests/attested_score/score-badge.component.spec.ts`
- `src/Web/StellaOps.Web/src/tests/attested_score/score-breakdown-popover.component.spec.ts`
## Verification
- Date: 2026-02-10
- Run artifacts: `docs/qa/feature-checks/runs/web/attested-score-ui/run-001/`
- Tier results:
- `tier0-source-check.json`: pass
- `tier1-build-check.json`: pass
- `tier2-e2e-check.json`: pass
## Recheck (run-002)
- Date (UTC): 2026-02-10
- Status: VERIFIED (replayed)
- Tier 1 evidence: Angular build passed and checked-web suite passed 145/145.
- Tier 2 evidence: docs/qa/feature-checks/runs/web/attested-score-ui/run-002/tier2-e2e-check.json.
## Recheck (run-004)
- Date (UTC): 2026-02-10
- Status: VERIFIED (replayed)
- Tier 1 evidence: Angular build passed and checked-web suite passed 145/145 across 47 files.
- Tier 2 evidence: docs/qa/feature-checks/runs/web/attested-score-ui/run-004/tier2-e2e-check.json.

View File

@@ -0,0 +1,50 @@
# Audit Bundle Create Modal (3-Step Wizard)
## Module
Web
## Status
VERIFIED
## Description
Audit bundle creation flow is implemented with deterministic wizard progression for subject selection, evidence contents, review, and completion tracking.
## Implementation Details
- **Feature directory**: `src/Web/StellaOps.Web/src/app/features/triage/`
- **Routes**:
- `src/Web/StellaOps.Web/src/app/app.routes.ts` mounted at `/triage/audit-bundles/new`
- **Core files**:
- `src/Web/StellaOps.Web/src/app/features/triage/triage-audit-bundle-new.component.ts`
- `src/Web/StellaOps.Web/src/app/features/triage/triage-audit-bundle-new.component.html`
- `src/Web/StellaOps.Web/src/app/features/evidence/modals/audit-bundle-create-modal.component.ts`
- **Supporting contracts**:
- `src/Web/StellaOps.Web/src/app/core/api/audit-bundles.client.ts`
- `src/Web/StellaOps.Web/src/app/core/api/audit-bundles.models.ts`
- **Focused tests**:
- `src/Web/StellaOps.Web/src/tests/audit_bundle/triage-audit-bundle-new.component.spec.ts`
## Verification
- Date: 2026-02-10
- Run artifacts: `docs/qa/feature-checks/runs/web/audit-bundle-create-modal/run-001/`
- Tier results:
- `tier0-source-check.json`: pass
- `tier1-build-check.json`: pass
- `tier2-e2e-check.json`: pass
## Recheck (run-002)
- Date (UTC): 2026-02-10
- Status: VERIFIED (replayed)
- Tier 1 evidence: Angular build passed and checked-web suite passed 145/145.
- Tier 2 evidence: docs/qa/feature-checks/runs/web/audit-bundle-create-modal/run-002/tier2-e2e-check.json.
## Recheck (run-004)
- Date (UTC): 2026-02-10
- Status: VERIFIED (replayed)
- Tier 1 evidence: Angular build passed and checked-web suite passed 145/145 across 47 files.
- Tier 2 evidence: docs/qa/feature-checks/runs/web/audit-bundle-create-modal/run-004/tier2-e2e-check.json.

View File

@@ -0,0 +1,49 @@
# Audit Bundle Export
## Module
Web
## Status
VERIFIED
## Description
Audit bundle export surfaces are implemented with listing, recency ordering, and download actions for completed bundle jobs.
## Implementation Details
- **Feature directory**: `src/Web/StellaOps.Web/src/app/features/triage/`
- **Routes**:
- `src/Web/StellaOps.Web/src/app/app.routes.ts` mounted at `/triage/audit-bundles`
- **Core files**:
- `src/Web/StellaOps.Web/src/app/features/triage/triage-audit-bundles.component.ts`
- `src/Web/StellaOps.Web/src/app/features/triage/triage-audit-bundles.component.html`
- **Supporting contracts**:
- `src/Web/StellaOps.Web/src/app/core/api/audit-bundles.client.ts`
- `src/Web/StellaOps.Web/src/app/core/api/audit-bundles.models.ts`
- **Focused tests**:
- `src/Web/StellaOps.Web/src/tests/audit_bundle/triage-audit-bundles.component.spec.ts`
## Verification
- Date: 2026-02-10
- Run artifacts: `docs/qa/feature-checks/runs/web/audit-bundle-export/run-001/`
- Tier results:
- `tier0-source-check.json`: pass
- `tier1-build-check.json`: pass
- `tier2-e2e-check.json`: pass
## Recheck (run-002)
- Date (UTC): 2026-02-10
- Status: VERIFIED (replayed)
- Tier 1 evidence: Angular build passed and checked-web suite passed 145/145.
- Tier 2 evidence: docs/qa/feature-checks/runs/web/audit-bundle-export/run-002/tier2-e2e-check.json.
## Recheck (run-004)
- Date (UTC): 2026-02-10
- Status: VERIFIED (replayed)
- Tier 1 evidence: Angular build passed and checked-web suite passed 145/145 across 47 files.
- Tier 2 evidence: docs/qa/feature-checks/runs/web/audit-bundle-export/run-004/tier2-e2e-check.json.

View File

@@ -0,0 +1,49 @@
# Audit Trail "Why am I seeing this?" (Reason Capsule)
## Module
Web
## Status
VERIFIED
## Description
Inline per-finding reason capsule that explains why a verdict is shown, including policy/rule provenance and deterministic input references.
## Implementation Details
- **Reason capsule component**:
- `src/Web/StellaOps.Web/src/app/features/triage/components/reason-capsule/reason-capsule.component.ts`
- **Reason data client (`/api/audit/reasons/:verdictId`) with deterministic fallback**:
- `src/Web/StellaOps.Web/src/app/core/api/audit-reasons.client.ts`
- **Mounted in findings and triage rows**:
- `src/Web/StellaOps.Web/src/app/features/findings/findings-list.component.html`
- `src/Web/StellaOps.Web/src/app/features/triage/components/triage-list/triage-list.component.ts`
- **Focused tests**:
- `src/Web/StellaOps.Web/src/tests/audit_reason_capsule/reason-capsule.component.spec.ts`
- `src/Web/StellaOps.Web/src/tests/audit_reason_capsule/audit-reasons.client.spec.ts`
- `src/Web/StellaOps.Web/src/tests/audit_reason_capsule/findings-list.reason-capsule.spec.ts`
## Verification
- Date: 2026-02-10
- Run artifacts: `docs/qa/feature-checks/runs/web/audit-trail-why-am-i-seeing-this/run-001/`
- Tier results:
- `tier0-source-check.json`: pass
- `tier1-build-check.json`: pass
- `tier2-e2e-check.json`: pass
## Recheck (run-002)
- Date (UTC): 2026-02-10
- Status: VERIFIED (replayed)
- Tier 1 evidence: Angular build passed and checked-web suite passed 145/145.
- Tier 2 evidence: docs/qa/feature-checks/runs/web/audit-trail-why-am-i-seeing-this/run-002/tier2-e2e-check.json.
## Recheck (run-004)
- Date (UTC): 2026-02-10
- Status: VERIFIED (replayed)
- Tier 1 evidence: Angular build passed and checked-web suite passed 145/145 across 47 files.
- Tier 2 evidence: docs/qa/feature-checks/runs/web/audit-trail-why-am-i-seeing-this/run-004/tier2-e2e-check.json.

View File

@@ -0,0 +1,48 @@
# Auditor Workspace (Compliance-Focused Triage View)
## Module
Web
## Status
VERIFIED
## Description
Auditor workspace is implemented with evidence ribbon integration, compliance review summary, export controls, and signed quiet-triage actions.
## Implementation Details
- **Feature directory**: `src/Web/StellaOps.Web/src/app/features/workspaces/auditor/`
- **Routes**:
- `src/Web/StellaOps.Web/src/app/app.routes.ts` mounted at `/workspace/audit`
- `src/Web/StellaOps.Web/src/app/features/workspaces/auditor/auditor-workspace.routes.ts` child path `:artifactDigest`
- **Core files**:
- `src/Web/StellaOps.Web/src/app/features/workspaces/auditor/components/auditor-workspace/auditor-workspace.component.ts`
- `src/Web/StellaOps.Web/src/app/features/workspaces/auditor/services/auditor-workspace.service.ts`
- `src/Web/StellaOps.Web/src/app/features/workspaces/auditor/models/auditor-workspace.models.ts`
- **Focused tests**:
- `src/Web/StellaOps.Web/src/tests/auditor_workspace/auditor-workspace.component.spec.ts`
## Verification
- Date: 2026-02-10
- Run artifacts: `docs/qa/feature-checks/runs/web/auditor-workspace/run-001/`
- Tier results:
- `tier0-source-check.json`: pass
- `tier1-build-check.json`: pass
- `tier2-e2e-check.json`: pass
## Recheck (run-002)
- Date (UTC): 2026-02-10
- Status: VERIFIED (replayed)
- Tier 1 evidence: Angular build passed and checked-web suite passed 145/145.
- Tier 2 evidence: docs/qa/feature-checks/runs/web/auditor-workspace/run-002/tier2-e2e-check.json.
## Recheck (run-004)
- Date (UTC): 2026-02-10
- Status: VERIFIED (replayed)
- Tier 1 evidence: Angular build passed and checked-web suite passed 145/145 across 47 files.
- Tier 2 evidence: docs/qa/feature-checks/runs/web/auditor-workspace/run-004/tier2-e2e-check.json.

View File

@@ -0,0 +1,49 @@
# B2R2 LowUIR IR Lifting for Semantic Binary Analysis
## Module
Web
## Status
VERIFIED
## Description
Binary-index UI surfaces are implemented for B2R2-driven semantic analysis operations, including lifter/cache observability and patch-coverage drilldown workflows.
## Implementation Details
- **Feature directory**: `src/Web/StellaOps.Web/src/app/features/binary-index/`
- **Core files**:
- `src/Web/StellaOps.Web/src/app/features/binary-index/binary-index-ops.component.ts`
- `src/Web/StellaOps.Web/src/app/features/binary-index/patch-map.component.ts`
- **Supporting contracts**:
- `src/Web/StellaOps.Web/src/app/core/api/binary-index-ops.client.ts`
- `src/Web/StellaOps.Web/src/app/core/api/patch-coverage.client.ts`
- `src/Web/StellaOps.Web/src/app/core/api/patch-coverage.models.ts`
- **Focused tests**:
- `src/Web/StellaOps.Web/src/tests/binary_index/binary-index-ops.component.spec.ts`
- `src/Web/StellaOps.Web/src/tests/binary_index/patch-map.component.spec.ts`
## Verification
- Date: 2026-02-10
- Run artifacts: `docs/qa/feature-checks/runs/web/b2r2-lowuir-ir-lifting-for-semantic-binary-analysis/run-001/`
- Tier results:
- `tier0-source-check.json`: pass
- `tier1-build-check.json`: pass
- `tier2-e2e-check.json`: pass
## Recheck (run-002)
- Date (UTC): 2026-02-10
- Status: VERIFIED (replayed)
- Tier 1 evidence: Angular build passed and checked-web suite passed 145/145.
- Tier 2 evidence: docs/qa/feature-checks/runs/web/b2r2-lowuir-ir-lifting-for-semantic-binary-analysis/run-002/tier2-e2e-check.json.
## Recheck (run-004)
- Date (UTC): 2026-02-10
- Status: VERIFIED (replayed)
- Tier 1 evidence: Angular build passed and checked-web suite passed 145/145 across 47 files.
- Tier 2 evidence: docs/qa/feature-checks/runs/web/b2r2-lowuir-ir-lifting-for-semantic-binary-analysis/run-004/tier2-e2e-check.json.

View File

@@ -0,0 +1,47 @@
# Backport Resolution UI with Function Diff Viewer
## Module
Web
## Status
VERIFIED
## Description
Backport-resolution surfaces are implemented with function-level diff rendering, resolution status chips, and evidence drawer integration for patch-vs-vulnerable comparison workflows.
## Implementation Details
- **Feature directory**: `src/Web/StellaOps.Web/src/app/shared/components/function-diff/`
- **Core files**:
- `src/Web/StellaOps.Web/src/app/shared/components/function-diff/function-diff.component.ts`
- `src/Web/StellaOps.Web/src/app/shared/components/resolution-chip/resolution-chip.component.ts`
- `src/Web/StellaOps.Web/src/app/shared/components/evidence-drawer/evidence-drawer.component.ts`
- **Integration surface**:
- `src/Web/StellaOps.Web/src/app/features/vulnerabilities/vulnerability-detail.component.ts`
- **Focused tests**:
- `src/Web/StellaOps.Web/src/tests/backport_resolution/function-diff.component.spec.ts`
## Verification
- Date: 2026-02-10
- Run artifacts: `docs/qa/feature-checks/runs/web/backport-resolution-ui-with-function-diff-viewer/run-001/`
- Tier results:
- `tier0-source-check.json`: pass
- `tier1-build-check.json`: pass
- `tier2-e2e-check.json`: pass
## Recheck (run-001)
- Date (UTC): 2026-02-10
- Status: VERIFIED (replayed)
- Tier 1 evidence: Angular build passed and checked-web suite passed 145/145.
- Tier 2 evidence: docs/qa/feature-checks/runs/web/backport-resolution-ui-with-function-diff-viewer/run-001/tier2-e2e-check.json.
## Recheck (run-003)
- Date (UTC): 2026-02-10
- Status: VERIFIED (replayed)
- Tier 1 evidence: Angular build passed and checked-web suite passed 145/145 across 47 files.
- Tier 2 evidence: docs/qa/feature-checks/runs/web/backport-resolution-ui-with-function-diff-viewer/run-003/tier2-e2e-check.json.

View File

@@ -0,0 +1,38 @@
# Binary-Diff Panel UI Component
## Module
Web
## Status
VERIFIED
## Description
Binary-diff panel is implemented with scope selection (file/section/function), entry drilldown, changed-only filtering, and DSSE export action wiring.
## Implementation Details
- **Feature directory**: `src/Web/StellaOps.Web/src/app/shared/components/binary-diff/`
- **Core files**:
- `src/Web/StellaOps.Web/src/app/shared/components/binary-diff/binary-diff-panel.component.ts`
- **Integration surface**:
- `src/Web/StellaOps.Web/src/app/features/triage/components/evidence-panel/binary-diff-tab.component.ts`
- `src/Web/StellaOps.Web/src/app/features/triage/services/binary-diff-evidence.service.ts`
- **Focused tests**:
- `src/Web/StellaOps.Web/src/tests/binary_diff/binary-diff-panel.component.spec.ts`
## Verification
- Date: 2026-02-10
- Run artifacts: `docs/qa/feature-checks/runs/web/binary-diff-panel-ui-component/run-001/`
- Tier results:
- `tier0-source-check.json`: pass
- `tier1-build-check.json`: pass
- `tier2-e2e-check.json`: pass
## Recheck (run-003)
- Date (UTC): 2026-02-10
- Status: VERIFIED (replayed)
- Tier 1 evidence: Angular build passed and checked-web suite passed 145/145 across 47 files.
- Tier 2 evidence: docs/qa/feature-checks/runs/web/binary-diff-panel-ui-component/run-003/tier2-e2e-check.json.

View File

@@ -0,0 +1,40 @@
# BinaryIndex Ops UI (Lifter Warmness, Bench, Cache Stats, Config View)
## Module
Web
## Status
VERIFIED
## Description
BinaryIndex operations UI is implemented with tabbed health/benchmark/cache/config views plus fingerprint export and patch-map drilldown surfaces.
## Implementation Details
- **Feature directory**: `src/Web/StellaOps.Web/src/app/features/binary-index/`
- **Core files**:
- `src/Web/StellaOps.Web/src/app/features/binary-index/binary-index-ops.component.ts`
- `src/Web/StellaOps.Web/src/app/features/binary-index/patch-map.component.ts`
- **Supporting contracts**:
- `src/Web/StellaOps.Web/src/app/core/api/binary-index-ops.client.ts`
- `src/Web/StellaOps.Web/src/app/core/api/patch-coverage.client.ts`
- **Focused tests**:
- `src/Web/StellaOps.Web/src/tests/binary_index/binary-index-ops.component.spec.ts`
- `src/Web/StellaOps.Web/src/tests/binary_index/patch-map.component.spec.ts`
## Verification
- Date: 2026-02-10
- Run artifacts: `docs/qa/feature-checks/runs/web/binaryindex-ops-ui/run-001/`
- Tier results:
- `tier0-source-check.json`: pass
- `tier1-build-check.json`: pass
- `tier2-e2e-check.json`: pass
## Recheck (run-003)
- Date (UTC): 2026-02-10
- Status: VERIFIED (replayed)
- Tier 1 evidence: Angular build passed and checked-web suite passed 145/145 across 47 files.
- Tier 2 evidence: docs/qa/feature-checks/runs/web/binaryindex-ops-ui/run-003/tier2-e2e-check.json.

View File

@@ -0,0 +1,37 @@
# "Can I Ship?" Case Header (Verdict Display)
## Module
Web
## Status
VERIFIED
## Description
Case header verdict display is implemented with ship/block/exception badges, finding counters, baseline delta context, and attestation/snapshot interaction controls.
## Implementation Details
- **Feature directory**: `src/Web/StellaOps.Web/src/app/features/triage/components/case-header/`
- **Core files**:
- `src/Web/StellaOps.Web/src/app/features/triage/components/case-header/case-header.component.ts`
- `src/Web/StellaOps.Web/src/app/features/triage/components/case-header/case-header.component.html`
- `src/Web/StellaOps.Web/src/app/features/triage/components/case-header/case-header.component.scss`
- **Focused tests**:
- `src/Web/StellaOps.Web/src/tests/case_header/case-header.component.spec.ts`
## Verification
- Date: 2026-02-10
- Run artifacts: `docs/qa/feature-checks/runs/web/can-i-ship-case-header/run-001/`
- Tier results:
- `tier0-source-check.json`: pass
- `tier1-build-check.json`: pass
- `tier2-e2e-check.json`: pass
## Recheck (run-003)
- Date (UTC): 2026-02-10
- Status: VERIFIED (replayed)
- Tier 1 evidence: Angular build passed and checked-web suite passed 145/145 across 47 files.
- Tier 2 evidence: docs/qa/feature-checks/runs/web/can-i-ship-case-header/run-003/tier2-e2e-check.json.

View File

@@ -4,7 +4,7 @@
Web
## Status
IMPLEMENTED
VERIFIED
## Description
Full-featured causal timeline view with lane-based event visualization (D3.js, one lane per service), critical path highlighting, event detail panel, evidence links, timeline export, filtering, HLC range picker, and forensic export button. Supports correlation ID-based navigation for tracing release pipeline events. (Merged with Timeline UI Component from Phase 2 (none) section.)
@@ -39,3 +39,12 @@ Full-featured causal timeline view with lane-based event visualization (D3.js, o
- [ ] Verify graceful handling when backend API is unavailable (error state)
- [ ] Verify responsive layout at different viewport sizes
- [ ] Verify accessibility (keyboard navigation, screen reader labels, ARIA attributes)
## Verification
- Date: 2026-02-10
- Run artifacts: docs/qa/feature-checks/runs/web/causal-timeline-with-critical-path-and-event-detail/run-001/
- Tier results:
- tier0-source-check.json: pass
- tier1-build-check.json: pass
- tier2-e2e-check.json: pass

View File

@@ -4,7 +4,7 @@
Web
## Status
IMPLEMENTED
VERIFIED
## Description
UI badge component displaying Canonical Graph Signature (CGS) hash with one-click copy-to-clipboard and replay verification trigger. Shows truncated hash with tooltip for full value and confidence score indicator.
@@ -28,3 +28,12 @@ UI badge component displaying Canonical Graph Signature (CGS) hash with one-clic
- [ ] Verify graceful handling when backend API is unavailable (error state)
- [ ] Verify responsive layout at different viewport sizes
- [ ] Verify accessibility (keyboard navigation, screen reader labels, ARIA attributes)
## Verification
- Date: 2026-02-10
- Run artifacts: docs/qa/feature-checks/runs/web/cgs-badge-component/run-001/
- Tier results:
- tier0-source-check.json: pass
- tier1-build-check.json: pass
- tier2-e2e-check.json: pass

View File

@@ -4,7 +4,7 @@
Web
## Status
IMPLEMENTED
VERIFIED
## Description
Visual bar chart breakdown showing how each evidence factor (SBOM, VEX, reachability, binary analysis, attestation) contributes to the overall confidence score. Includes per-factor chip components with drill-down capability.
@@ -29,3 +29,12 @@ Visual bar chart breakdown showing how each evidence factor (SBOM, VEX, reachabi
- [ ] Verify graceful handling when backend API is unavailable (error state)
- [ ] Verify responsive layout at different viewport sizes
- [ ] Verify accessibility (keyboard navigation, screen reader labels, ARIA attributes)
## Verification
- Date: 2026-02-10
- Run artifacts: docs/qa/feature-checks/runs/web/confidence-breakdown-visualization/run-001/
- Tier results:
- tier0-source-check.json: pass
- tier1-build-check.json: pass
- tier2-e2e-check.json: pass

View File

@@ -4,7 +4,7 @@
Web
## Status
IMPLEMENTED
VERIFIED
## Description
Console-level configuration pane showing integration status grouped by sections with connection health, detail views per integration, and a state management service for tracking configuration changes.
@@ -36,3 +36,12 @@ Console-level configuration pane showing integration status grouped by sections
- [ ] Verify graceful handling when backend API is unavailable (error state)
- [ ] Verify responsive layout at different viewport sizes
- [ ] Verify accessibility (keyboard navigation, screen reader labels, ARIA attributes)
## Verification
- Date: 2026-02-10
- Run artifacts: docs/qa/feature-checks/runs/web/configuration-pane/run-001/
- Tier results:
- tier0-source-check.json: pass
- tier1-build-check.json: pass
- tier2-e2e-check.json: pass

View File

@@ -4,10 +4,10 @@
Web
## Status
IMPLEMENTED
VERIFIED
## Description
No description available.
Topbar context chips showing offline posture, feed snapshot freshness, policy baseline, and evidence mode status.
## Implementation Details
- **Feature directory**: `src/Web/StellaOps.Web/src/app/layout/context-chips/`
@@ -32,3 +32,17 @@ No description available.
- [ ] Verify graceful handling when backend API is unavailable (error state)
- [ ] Verify responsive layout at different viewport sizes
- [ ] Verify accessibility (keyboard navigation, screen reader labels, ARIA attributes)
## Verification
- Verified on 2026-02-10 via QA run `run-002`.
- Evidence: `docs/qa/feature-checks/runs/web/context-status-chips/run-002/`.
## Recheck (run-003)
- Date (UTC): 2026-02-10
- Status: VERIFIED (replayed)
- Tier 1 evidence: Angular build passed and checked-web suite passed 145/145.
- Tier 2 evidence: docs/qa/feature-checks/runs/web/context-status-chips/run-003/tier2-e2e-check.json.

View File

@@ -1,13 +1,13 @@
# Contextual Command Bar ("Ask Stella")
## Status
IMPLEMENTED
VERIFIED
## Description
Proposed scoped command bar that auto-scopes to current context with suggested prompts. Not yet implemented.
Scoped command bar that auto-scopes to current context with suggested prompts and supports contextual/freeform Ask Stella queries.
## Why Marked as Dropped (Correction)
**FINDING: The "Ask Stella" contextual command bar IS implemented.** The following components exist:
## Verification Notes
Previously marked as dropped in planning metadata; QA verification confirmed implementation. The following components exist:
- `src/Web/StellaOps.Web/src/app/shared/components/ai/ask-stella-button.component.ts` -- floating button to open the panel
- `src/Web/StellaOps.Web/src/app/shared/components/ai/ask-stella-panel.component.ts` -- contextual panel with suggested prompts
- E2E tests at `src/Web/StellaOps.Web/src/app/shared/components/ai/__tests__/ask-stella.e2e.spec.ts` verify:
@@ -33,4 +33,13 @@ Proposed scoped command bar that auto-scopes to current context with suggested p
## Notes
- Module: Web
- Modules referenced: `src/Web`
- **Status should be reclassified from NOT_FOUND to IMPLEMENTED**
- Feature reclassified from historical NOT_FOUND metadata and verified in run-001.
## Verification
- Date: 2026-02-10
- Run artifacts: docs/qa/feature-checks/runs/web/contextual-command-bar/run-001/
- Tier results:
- tier0-source-check.json: pass
- tier1-build-check.json: pass
- tier2-e2e-check.json: pass

View File

@@ -4,7 +4,7 @@
Web
## Status
IMPLEMENTED
VERIFIED
## Description
New landing page replacing security-centric home with release control plane view including environment pipeline visualization, action inbox, drift & risk changes, and pending promotions table.
@@ -29,3 +29,12 @@ New landing page replacing security-centric home with release control plane view
- [ ] Verify graceful handling when backend API is unavailable (error state)
- [ ] Verify responsive layout at different viewport sizes
- [ ] Verify accessibility (keyboard navigation, screen reader labels, ARIA attributes)
## Verification
- Date: 2026-02-10
- Run artifacts: docs/qa/feature-checks/runs/web/control-plane-dashboard/run-001/
- Tier results:
- tier0-source-check.json: pass
- tier1-build-check.json: pass
- tier2-e2e-check.json: pass

View File

@@ -4,7 +4,7 @@
Web
## Status
IMPLEMENTED
VERIFIED
## Description
Component detail page with CycloneDX 1.7 evidence panel showing identity evidence with detection methods, occurrence file paths, license evidence with acknowledgement status, and copyright information. Includes a D3.js horizontal pedigree timeline visualization showing ancestor-variant-current component lineage, a patch list viewer with diff rendering, and commit info display.
@@ -33,3 +33,12 @@ Component detail page with CycloneDX 1.7 evidence panel showing identity evidenc
- [ ] Verify graceful handling when backend API is unavailable (error state)
- [ ] Verify responsive layout at different viewport sizes
- [ ] Verify accessibility (keyboard navigation, screen reader labels, ARIA attributes)
## Verification
- Date: 2026-02-10
- Run artifacts: docs/qa/feature-checks/runs/web/cyclonedx-evidence-panel-with-pedigree-timeline/run-001/
- Tier results:
- tier0-source-check.json: pass
- tier1-build-check.json: pass
- tier2-e2e-check.json: pass

View File

@@ -4,7 +4,7 @@
Web
## Status
IMPLEMENTED
VERIFIED
## Description
Dead-letter queue browser with message inspection, replay workflows (single/batch/all), error diagnostics panel, and bulk actions for queue management.
@@ -31,3 +31,12 @@ Dead-letter queue browser with message inspection, replay workflows (single/batc
- [ ] Verify graceful handling when backend API is unavailable (error state)
- [ ] Verify responsive layout at different viewport sizes
- [ ] Verify accessibility (keyboard navigation, screen reader labels, ARIA attributes)
## Verification
- Date: 2026-02-10
- Run artifacts: docs/qa/feature-checks/runs/web/dead-letter-queue-management-ui/run-001/
- Tier results:
- tier0-source-check.json: pass
- tier1-build-check.json: pass
- tier2-e2e-check.json: pass

View File

@@ -4,7 +4,7 @@
Web
## Status
IMPLEMENTED
VERIFIED
## Description
Enhanced decision drawer component for making VEX triage decisions from the evidence view.
@@ -60,3 +60,10 @@ Enhanced decision drawer component for making VEX triage decisions from the evid
- [ ] Verify graceful handling when backend API is unavailable (error state)
- [ ] Verify responsive layout at different viewport sizes
- [ ] Verify accessibility (keyboard navigation, screen reader labels, ARIA attributes)
## Verification
- Run: `docs/qa/feature-checks/runs/web/decision-drawer-for-vex-decisions/run-001/`
- Tier 0 (source): pass (`tier0-source-check.json`)
- Tier 1 (build/tests): pass (`tier1-build-check.json`)
- Tier 2 (behavior): pass (`tier2-e2e-check.json`)
- Verified on (UTC): 2026-02-10

View File

@@ -4,7 +4,7 @@
Web
## Status
IMPLEMENTED
VERIFIED
## Description
Delta summary strip component shows before/after comparison statistics in the compare view header.
@@ -48,3 +48,10 @@ Delta summary strip component shows before/after comparison statistics in the co
- [ ] Verify graceful handling when backend API is unavailable (error state)
- [ ] Verify responsive layout at different viewport sizes
- [ ] Verify accessibility (keyboard navigation, screen reader labels, ARIA attributes)
## Verification
- Run: `docs/qa/feature-checks/runs/web/delta-summary-strip/run-001/`
- Tier 0 (source): pass (`tier0-source-check.json`)
- Tier 1 (build/tests): pass (`tier1-build-check.json`)
- Tier 2 (behavior): pass (`tier2-e2e-check.json`)
- Verified on (UTC): 2026-02-10

View File

@@ -4,7 +4,7 @@
Web
## Status
IMPLEMENTED
VERIFIED
## Description
Side-by-side diff component in the risk feature comparing before/after states per release, integrated into the risk dashboard.
@@ -48,3 +48,10 @@ Side-by-side diff component in the risk feature comparing before/after states pe
- [ ] Verify graceful handling when backend API is unavailable (error state)
- [ ] Verify responsive layout at different viewport sizes
- [ ] Verify accessibility (keyboard navigation, screen reader labels, ARIA attributes)
## Verification
- Run: `docs/qa/feature-checks/runs/web/delta-table/run-001/`
- Tier 0 (source): pass (`tier0-source-check.json`)
- Tier 1 (build/tests): pass (`tier1-build-check.json`)
- Tier 2 (behavior): pass (`tier2-e2e-check.json`)
- Verified on (UTC): 2026-02-10

View File

@@ -4,7 +4,7 @@
Web
## Status
IMPLEMENTED
VERIFIED
## Description
Full compare/delta view UI with dedicated feature area including components, services, and implementation summary. Deploy-diff feature for release-level comparison. Verdicts feature for verdict display and management.
@@ -48,3 +48,10 @@ Full compare/delta view UI with dedicated feature area including components, ser
- [ ] Verify graceful handling when backend API is unavailable (error state)
- [ ] Verify responsive layout at different viewport sizes
- [ ] Verify accessibility (keyboard navigation, screen reader labels, ARIA attributes)
## Verification
- Run: `docs/qa/feature-checks/runs/web/delta-verdict-compare-view-ui/run-001/`
- Tier 0 (source): pass (`tier0-source-check.json`)
- Tier 1 (build/tests): pass (`tier1-build-check.json`)
- Tier 2 (behavior): pass (`tier2-e2e-check.json`)
- Verified on (UTC): 2026-02-10

View File

@@ -4,7 +4,7 @@
Web
## Status
IMPLEMENTED
VERIFIED
## Description
Deployment detail page with workflow DAG visualization showing deployment step execution, artifact promotion flow, and gate evaluation results.
@@ -30,3 +30,10 @@ Deployment detail page with workflow DAG visualization showing deployment step e
- [ ] Verify graceful handling when backend API is unavailable (error state)
- [ ] Verify responsive layout at different viewport sizes
- [ ] Verify accessibility (keyboard navigation, screen reader labels, ARIA attributes)
## Verification
- Run: `docs/qa/feature-checks/runs/web/deployment-detail-with-workflow-dag-visualization/run-001/`
- Tier 0 (source): pass (`tier0-source-check.json`)
- Tier 1 (build/tests): pass (`tier1-build-check.json`)
- Tier 2 (behavior): pass (`tier2-e2e-check.json`)
- Verified on (UTC): 2026-02-10

View File

@@ -4,7 +4,7 @@
Web
## Status
IMPLEMENTED
VERIFIED
## Description
Real-time deployment monitoring with per-target progress tracking, live log streaming, deployment actions (pause/resume/cancel), and rollback capabilities.
@@ -30,3 +30,10 @@ Real-time deployment monitoring with per-target progress tracking, live log stre
- [ ] Verify graceful handling when backend API is unavailable (error state)
- [ ] Verify responsive layout at different viewport sizes
- [ ] Verify accessibility (keyboard navigation, screen reader labels, ARIA attributes)
## Verification
- Run: `docs/qa/feature-checks/runs/web/deployment-monitoring-ui/run-001/`
- Tier 0 (source): pass (`tier0-source-check.json`)
- Tier 1 (build/tests): pass (`tier1-build-check.json`)
- Tier 2 (behavior): pass (`tier2-e2e-check.json`)
- Verified on (UTC): 2026-02-10

View File

@@ -4,7 +4,7 @@
Web
## Status
IMPLEMENTED
VERIFIED
## Description
Dedicated settings pane for configuring determinization parameters (reanalysis interval, confidence thresholds, auto-promote rules) with form validation and live preview of policy effects on grey-queue items.
@@ -31,3 +31,10 @@ Dedicated settings pane for configuring determinization parameters (reanalysis i
- [ ] Verify graceful handling when backend API is unavailable (error state)
- [ ] Verify responsive layout at different viewport sizes
- [ ] Verify accessibility (keyboard navigation, screen reader labels, ARIA attributes)
## Verification
- Run: `docs/qa/feature-checks/runs/web/determinization-config-pane-ui/run-001/`
- Tier 0 (source): pass (`tier0-source-check.json`)
- Tier 1 (build/tests): pass (`tier1-build-check.json`)
- Tier 2 (behavior): pass (`tier2-e2e-check.json`)
- Verified on (UTC): 2026-02-10

View File

@@ -4,7 +4,7 @@
Web
## Status
IMPLEMENTED
VERIFIED
## Description
Angular UI components for CVE observation state management: "Unknown (auto-tracking)" chip with next review ETA, uncertainty tier visualization, guardrails status/monitoring badges, decay progress indicator, observation details panel, and observation review queue for pending items.
@@ -31,3 +31,10 @@ Angular UI components for CVE observation state management: "Unknown (auto-track
- [ ] Verify graceful handling when backend API is unavailable (error state)
- [ ] Verify responsive layout at different viewport sizes
- [ ] Verify accessibility (keyboard navigation, screen reader labels, ARIA attributes)
## Verification
- Run: `docs/qa/feature-checks/runs/web/determinization-ui-components/run-001/`
- Tier 0 (source): pass (`tier0-source-check.json`)
- Tier 1 (build/tests): pass (`tier1-build-check.json`)
- Tier 2 (behavior): pass (`tier2-e2e-check.json`)
- Verified on (UTC): 2026-02-10

View File

@@ -4,7 +4,7 @@
Web
## Status
IMPLEMENTED
VERIFIED
## Description
Developer-focused workspace assembling Evidence Ribbon, Quick-Verify CTA with streaming progress, a sortable findings rail with severity/reachability/runtime indicators, and action stubs for creating GitHub issues or Jira tickets from findings.
@@ -33,3 +33,10 @@ Developer-focused workspace assembling Evidence Ribbon, Quick-Verify CTA with st
- [ ] Verify graceful handling when backend API is unavailable (error state)
- [ ] Verify responsive layout at different viewport sizes
- [ ] Verify accessibility (keyboard navigation, screen reader labels, ARIA attributes)
## Verification
- Run: `docs/qa/feature-checks/runs/web/developer-workspace/run-001/`
- Tier 0 (source): pass (`tier0-source-check.json`)
- Tier 1 (build/tests): pass (`tier1-build-check.json`)
- Tier 2 (behavior): pass (`tier2-e2e-check.json`)
- Verified on (UTC): 2026-02-10

View File

@@ -4,7 +4,7 @@
Web
## Status
IMPLEMENTED
VERIFIED
## Description
Configurable display settings (showRuntimeOverlays, enableTraceExport, showRiskLine, showSignedOverrideIndicators, graph settings) persisted to localStorage with auto-sync.
@@ -37,3 +37,10 @@ Configurable display settings (showRuntimeOverlays, enableTraceExport, showRiskL
- [ ] Verify graceful handling when backend API is unavailable (error state)
- [ ] Verify responsive layout at different viewport sizes
- [ ] Verify accessibility (keyboard navigation, screen reader labels, ARIA attributes)
## Verification
- Run: `docs/qa/feature-checks/runs/web/display-preferences-service/run-001/`
- Tier 0 (source): pass (`tier0-source-check.json`)
- Tier 1 (build/tests): pass (`tier1-build-check.json`)
- Tier 2 (behavior): pass (`tier2-e2e-check.json`)
- Verified on (UTC): 2026-02-10

View File

@@ -4,7 +4,7 @@
Web
## Status
IMPLEMENTED
VERIFIED
## Description
Six reusable domain-specific widgets: DigestChip (truncated digest with copy), GateBadge (gate level display), ReachabilityStateChip (R0-R3 state), WitnessPathPreview (call path snippet), EvidenceLink (attestation link), GateSummaryPanel (gate overview).
@@ -34,3 +34,10 @@ Six reusable domain-specific widgets: DigestChip (truncated digest with copy), G
- [ ] Verify graceful handling when backend API is unavailable (error state)
- [ ] Verify responsive layout at different viewport sizes
- [ ] Verify accessibility (keyboard navigation, screen reader labels, ARIA attributes)
## Verification
- Run: `docs/qa/feature-checks/runs/web/domain-widget-library/run-001/`
- Tier 0 (source): pass (`tier0-source-check.json`)
- Tier 1 (build/tests): pass (`tier1-build-check.json`)
- Tier 2 (behavior): pass (`tier2-e2e-check.json`)
- Verified on (UTC): 2026-02-10

View File

@@ -4,7 +4,7 @@
Web
## Status
IMPLEMENTED
VERIFIED
## Description
Shared UI components for displaying entropy analysis results on container images. The Entropy Panel shows layer-level entropy scores, high-entropy file details, and detector hints. The Entropy Policy Banner displays policy thresholds (warn/block) with the current entropy score and mitigation steps.
@@ -34,3 +34,10 @@ Shared UI components for displaying entropy analysis results on container images
- [ ] Verify graceful handling when backend API is unavailable (error state)
- [ ] Verify responsive layout at different viewport sizes
- [ ] Verify accessibility (keyboard navigation, screen reader labels, ARIA attributes)
## Verification
- Run: `docs/qa/feature-checks/runs/web/entropy-analysis-panel-and-policy-banner/run-001/`
- Tier 0 (source): pass (`tier0-source-check.json`)
- Tier 1 (build/tests): pass (`tier1-build-check.json`)
- Tier 2 (behavior): pass (`tier2-e2e-check.json`)
- Verified on (UTC): 2026-02-10

View File

@@ -0,0 +1,37 @@
# Global Search Component (Cmd+K)
## Module
Web
## Status
VERIFIED
## Description
Command-palette-style global search (Cmd+K / Ctrl+K) for quick navigation to releases, findings, environments, and settings across the entire application.
## Implementation Details
- **Feature directory**: `src/Web/StellaOps.Web/src/app/layout/global-search/`
- **Mounted in top bar**: `src/Web/StellaOps.Web/src/app/layout/app-topbar/app-topbar.component.ts`
- **Components**:
- `global-search` (`src/Web/StellaOps.Web/src/app/layout/global-search/global-search.component.ts`)
- **Focused tests**:
- `src/Web/StellaOps.Web/src/tests/global_search/global-search.component.spec.ts`
- **Source**: SPRINT_20260118_001_FE_shell_navigation_redesign.md
## Verification
- Date: 2026-02-10
- Run artifacts: `docs/qa/feature-checks/runs/web/global-search-component/run-001/`
- Tier results:
- `tier0-source-check.json`: pass
- `tier1-build-check.json`: pass
- `tier2-e2e-check.json`: pass
## Recheck (run-002)
- Date (UTC): 2026-02-10
- Status: VERIFIED (replayed)
- Tier 1 evidence: Angular build passed and checked-web suite passed 145/145.
- Tier 2 evidence: docs/qa/feature-checks/runs/web/global-search-component/run-002/tier2-e2e-check.json.

View File

@@ -4,7 +4,7 @@
Web
## Status
IMPLEMENTED
VERIFIED
## Description
CSS Grid-based application shell with persistent left sidebar navigation (7 nav sections), replacing the previous mega-menu navigation pattern.
@@ -30,3 +30,17 @@ CSS Grid-based application shell with persistent left sidebar navigation (7 nav
- [ ] Verify graceful handling when backend API is unavailable (error state)
- [ ] Verify responsive layout at different viewport sizes
- [ ] Verify accessibility (keyboard navigation, screen reader labels, ARIA attributes)
## Verification
- Verified on 2026-02-10 via QA run `run-002`.
- Evidence: `docs/qa/feature-checks/runs/web/left-rail-navigation-shell/run-002/`.
## Recheck (run-003)
- Date (UTC): 2026-02-10
- Status: VERIFIED (replayed)
- Tier 1 evidence: Angular build passed and checked-web suite passed 145/145.
- Tier 2 evidence: docs/qa/feature-checks/runs/web/left-rail-navigation-shell/run-003/tier2-e2e-check.json.

View File

@@ -0,0 +1,40 @@
# Pack Registry Browser
## Module
Web
## Status
VERIFIED
## Description
TaskRunner pack discovery and management UI with compatibility-gated actions, DSSE signature state display, capability filtering, and version history drill-down.
## Implementation Details
- **Feature directory**: `src/Web/StellaOps.Web/src/app/features/pack-registry/`
- **Route**: `/ops/packs` via `pack-registry.routes.ts`
- **Component**:
- `pack-registry-browser` (`src/Web/StellaOps.Web/src/app/features/pack-registry/pack-registry-browser.component.ts`)
- **Service/model wiring**:
- `pack-registry-browser.service` (`src/Web/StellaOps.Web/src/app/features/pack-registry/services/pack-registry-browser.service.ts`)
- `pack-registry-browser.models` (`src/Web/StellaOps.Web/src/app/features/pack-registry/models/pack-registry-browser.models.ts`)
- **Focused tests**:
- `src/Web/StellaOps.Web/src/tests/pack_registry_browser/pack-registry-browser.component.spec.ts`
- `src/Web/StellaOps.Web/src/tests/pack_registry_browser/pack-registry-browser.service.spec.ts`
## Verification
- Date: 2026-02-10
- Run artifacts: `docs/qa/feature-checks/runs/web/pack-registry-browser/run-001/`
- Tier results:
- `tier0-source-check.json`: pass
- `tier1-build-check.json`: pass
- `tier2-e2e-check.json`: pass
## Recheck (run-002)
- Date (UTC): 2026-02-10
- Status: VERIFIED (replayed)
- Tier 1 evidence: Angular build passed and checked-web suite passed 145/145.
- Tier 2 evidence: docs/qa/feature-checks/runs/web/pack-registry-browser/run-002/tier2-e2e-check.json.

View File

@@ -4,10 +4,10 @@
Web
## Status
IMPLEMENTED
VERIFIED
## Description
Runs feature exists in the frontend with first-signal card components and prefetch services, but a full pipeline-centric view as described in the advisory is only partially present.
Pipeline runs list and detail routes provide a run-centric view across stage progression, approvals, evidence, and deployment outcomes.
## What's Implemented
- **Existing components**:
@@ -23,19 +23,6 @@ Runs feature exists in the frontend with first-signal card components and prefet
- `deployment-monitor` (`src/Web/StellaOps.Web/src/app/features/release-orchestrator/deployments/deployment-monitor/deployment-monitor.component.ts`)
- **Existing routes**: `approvals.routes.ts`, `dashboard.routes.ts`, `deployments.routes.ts`, `environments.routes.ts`, `evidence.routes.ts`, `releases.routes.ts`, `workflows.routes.ts`
## What's Missing
- **Pipeline run detail view**: No dedicated "run detail" view showing a single pipeline execution with its stages, gates, evidence collection, and outcome
- **Run-centric navigation**: Components exist for approvals, deployments, and releases but no unified "runs" listing that ties them together as a single pipeline execution
- **First-signal card integration**: First-signal card components exist in the `runs/` feature but may not be integrated into the pipeline-centric view
- **Backend API wiring**: Dashboard components may use stub/mock data pending backend endpoint integration
- **Unit/E2E test coverage**: Components likely lack comprehensive test coverage
## Implementation Plan
- Create a unified "pipeline run" detail view connecting scan, gate evaluation, approval, and deployment stages
- Wire pipeline-overview component to backend API for live pipeline status
- Add run-centric navigation linking approval, deployment, and evidence views
- Add unit and E2E test coverage for pipeline dashboard components
## E2E Test Plan
- **Setup**:
- [ ] Log in with a user that has appropriate permissions
@@ -49,3 +36,17 @@ Runs feature exists in the frontend with first-signal card components and prefet
- [ ] Verify graceful handling when backend API is unavailable (error state)
- [ ] Verify responsive layout at different viewport sizes
- [ ] Verify accessibility (keyboard navigation, screen reader labels, ARIA attributes)
## Verification
- Verified on 2026-02-10 via QA run `run-002`.
- Evidence: `docs/qa/feature-checks/runs/web/pipeline-run-centric-view/run-002/`.
## Recheck (run-003)
- Date (UTC): 2026-02-10
- Status: VERIFIED (replayed)
- Tier 1 evidence: Angular build passed and checked-web suite passed 145/145.
- Tier 2 evidence: docs/qa/feature-checks/runs/web/pipeline-run-centric-view/run-003/tier2-e2e-check.json.

View File

@@ -0,0 +1,51 @@
# Quiet-by-Default Triage UX (Lane Toggle + Provenance Breadcrumbs)
## Module
Web
## Status
VERIFIED
## Description
Triage UX implements Active/Parked/Review lanes, deterministic gating summaries, and provenance breadcrumb surfaces with keyboard shortcuts for rapid lane switching.
## Implementation Details
- **Components**:
- `src/Web/StellaOps.Web/src/app/features/triage/components/triage-lane-toggle/triage-lane-toggle.component.ts`
- `src/Web/StellaOps.Web/src/app/features/triage/components/quiet-lane/quiet-lane-container.component.ts`
- `src/Web/StellaOps.Web/src/app/features/triage/components/quiet-lane/parked-item-card.component.ts`
- `src/Web/StellaOps.Web/src/app/features/triage/components/provenance-breadcrumb/provenance-breadcrumb.component.ts`
- **Focused tests**:
- `src/Web/StellaOps.Web/src/tests/triage_quiet_lane/triage-lane-toggle.component.spec.ts`
- `src/Web/StellaOps.Web/src/tests/triage_quiet_lane/quiet-lane-container.component.spec.ts`
- `src/Web/StellaOps.Web/src/tests/triage_quiet_lane/parked-item-card.component.spec.ts`
## Follow-up Notes
- Tier 2 evidence is component/integration harness-based because the quiet-lane surfaces are not fully mounted behind a stable route in the local shell.
## Verification
- Date: 2026-02-10
- Run artifacts: `docs/qa/feature-checks/runs/web/quiet-by-default-triage-ux/run-001/`
- Tier results:
- `tier0-source-check.json`: pass
- `tier1-build-check.json`: pass
- `tier2-e2e-check.json`: pass
## Recheck (run-002)
- Date (UTC): 2026-02-10
- Status: VERIFIED (replayed)
- Tier 1 evidence: Angular build passed and checked-web suite passed 145/145.
- Tier 2 evidence: docs/qa/feature-checks/runs/web/quiet-by-default-triage-ux/run-002/tier2-e2e-check.json.
## Recheck (run-004)
- Date (UTC): 2026-02-10
- Status: VERIFIED (replayed)
- Tier 1 evidence: Angular build passed and checked-web suite passed 145/145 across 47 files.
- Tier 2 evidence: docs/qa/feature-checks/runs/web/quiet-by-default-triage-ux/run-004/tier2-e2e-check.json.

View File

@@ -0,0 +1,49 @@
# Reachability Center UI View
## Module
Web
## Status
VERIFIED
## Description
Reachability Center view showing asset coverage, missing sensors, and stale reachability facts. Implemented with deterministic fixture data; pending official fixture bundle swap from Signals guild.
## Implementation Details
- **Feature directory**: `src/Web/StellaOps.Web/src/app/features/reachability/`
- **Route**: `/reachability`
- **Components**:
- `path-viewer` (`src/Web/StellaOps.Web/src/app/features/reachability/components/path-viewer/path-viewer.component.ts`)
- `risk-drift-card` (`src/Web/StellaOps.Web/src/app/features/reachability/components/risk-drift-card/risk-drift-card.component.ts`)
- `poe-drawer` (`src/Web/StellaOps.Web/src/app/features/reachability/poe-drawer.component.ts`)
- `reachability-center` (`src/Web/StellaOps.Web/src/app/features/reachability/reachability-center.component.ts`)
- `reachability-explain-widget` (`src/Web/StellaOps.Web/src/app/features/reachability/reachability-explain-widget.component.ts`)
- `reachability-explain` (`src/Web/StellaOps.Web/src/app/features/reachability/reachability-explain.component.ts`)
- `reachability-why-drawer` (`src/Web/StellaOps.Web/src/app/features/reachability/reachability-why-drawer.component.ts`)
- `witness-page` (`src/Web/StellaOps.Web/src/app/features/reachability/witness-page.component.ts`)
- **Service**:
- `drift-api` (`src/Web/StellaOps.Web/src/app/features/reachability/services/drift-api.service.ts`)
- **Focused tests**:
- `src/Web/StellaOps.Web/src/tests/reachability_center/reachability-center.component.spec.ts`
## Follow-up Notes
- Fixture-source rendering remains intentional for deterministic offline verification.
- Official Signals fixture bundle swap is still a separate enhancement track.
## Verification
- Date: 2026-02-10
- Run artifacts: `docs/qa/feature-checks/runs/web/reachability-center-ui-view/run-001/`
- Tier results:
- `tier0-source-check.json`: pass
- `tier1-build-check.json`: pass
- `tier2-e2e-check.json`: pass
## Recheck (run-002)
- Date (UTC): 2026-02-10
- Status: VERIFIED (replayed)
- Tier 1 evidence: Angular build passed and checked-web suite passed 145/145.
- Tier 2 evidence: docs/qa/feature-checks/runs/web/reachability-center-ui-view/run-002/tier2-e2e-check.json.

View File

@@ -0,0 +1,39 @@
# SBOM Graph Reachability Overlay with Time Slider
## Module
Web
## Status
VERIFIED
## Description
Graph explorer renders a deterministic reachability halo overlay with a lattice legend and snapshot time slider for temporal navigation.
## Implementation Details
- **Route**: `/graph`
- **Components**:
- `src/Web/StellaOps.Web/src/app/features/graph/graph-overlays.component.ts`
- `src/Web/StellaOps.Web/src/app/features/graph/graph-canvas.component.ts`
- `src/Web/StellaOps.Web/src/app/features/graph/graph-explorer.component.ts`
- **Focused tests**:
- `src/Web/StellaOps.Web/src/tests/graph_reachability_overlay/graph-overlays.component.spec.ts`
- `src/Web/StellaOps.Web/src/tests/graph_reachability_overlay/graph-canvas.component.spec.ts`
## Verification
- Date: 2026-02-10
- Run artifacts: `docs/qa/feature-checks/runs/web/sbom-graph-reachability-overlay-with-time-slider/run-001/`
- Tier results:
- `tier0-source-check.json`: pass
- `tier1-build-check.json`: pass
- `tier2-e2e-check.json`: pass
## Recheck (run-002)
- Date (UTC): 2026-02-10
- Status: VERIFIED (replayed)
- Tier 1 evidence: Angular build passed and checked-web suite passed 145/145.
- Tier 2 evidence: docs/qa/feature-checks/runs/web/sbom-graph-reachability-overlay-with-time-slider/run-002/tier2-e2e-check.json.

View File

@@ -0,0 +1,40 @@
# Signals & Runtime Dashboard
## Module
Web
## Status
VERIFIED
## Description
Runtime signals dashboard showing per-host probe health and ingestion metrics for eBPF/ETW/dyld telemetry, including provider/status summaries and refresh interaction.
## Implementation Details
- **Feature directory**: `src/Web/StellaOps.Web/src/app/features/signals/`
- **Route**: `/ops/signals` via `signals.routes.ts`
- **Component**:
- `signals-runtime-dashboard` (`src/Web/StellaOps.Web/src/app/features/signals/signals-runtime-dashboard.component.ts`)
- **Service/model wiring**:
- `signals-runtime-dashboard.service` (`src/Web/StellaOps.Web/src/app/features/signals/services/signals-runtime-dashboard.service.ts`)
- `signals-runtime-dashboard.models` (`src/Web/StellaOps.Web/src/app/features/signals/models/signals-runtime-dashboard.models.ts`)
- **Focused tests**:
- `src/Web/StellaOps.Web/src/tests/signals_runtime_dashboard/signals-runtime-dashboard.component.spec.ts`
- `src/Web/StellaOps.Web/src/tests/signals_runtime_dashboard/signals-runtime-dashboard.service.spec.ts`
## Verification
- Date: 2026-02-10
- Run artifacts: `docs/qa/feature-checks/runs/web/signals-runtime-dashboard/run-001/`
- Tier results:
- `tier0-source-check.json`: pass
- `tier1-build-check.json`: pass
- `tier2-e2e-check.json`: pass
## Recheck (run-002)
- Date (UTC): 2026-02-10
- Status: VERIFIED (replayed)
- Tier 1 evidence: Angular build passed and checked-web suite passed 145/145.
- Tier 2 evidence: docs/qa/feature-checks/runs/web/signals-runtime-dashboard/run-002/tier2-e2e-check.json.

View File

@@ -0,0 +1,49 @@
# VEX Gate (Inline Gated Action with Evidence Tiers)
## Module
Web
## Status
VERIFIED
## Description
VEX gate behavior is implemented with deterministic tier-to-class mapping, blocked-action signaling, and inline evidence sheet rendering for gated promote paths.
## Implementation Details
- **Core feature files**:
- `src/Web/StellaOps.Web/src/app/features/vex_gate/vex-gate-button.directive.ts`
- `src/Web/StellaOps.Web/src/app/features/vex_gate/vex-evidence-sheet.component.ts`
- `src/Web/StellaOps.Web/src/app/features/vex_gate/models/vex-gate.models.ts`
- **Integrations**:
- `src/Web/StellaOps.Web/src/app/features/triage/components/quiet-lane/quiet-lane-container.component.ts`
- `src/Web/StellaOps.Web/src/app/features/triage/components/quiet-lane/parked-item-card.component.ts`
- **Focused tests**:
- `src/Web/StellaOps.Web/src/tests/vex_gate/vex-gate-button.directive.spec.ts`
- `src/Web/StellaOps.Web/src/tests/vex_gate/vex-evidence-sheet.component.spec.ts`
## Verification
- Date: 2026-02-10
- Run artifacts: `docs/qa/feature-checks/runs/web/vex-gate/run-001/`
- Tier results:
- `tier0-source-check.json`: pass
- `tier1-build-check.json`: pass
- `tier2-e2e-check.json`: pass
## Recheck (run-002)
- Date (UTC): 2026-02-10
- Status: VERIFIED (replayed)
- Tier 1 evidence: Angular build passed and checked-web suite passed 145/145.
- Tier 2 evidence: docs/qa/feature-checks/runs/web/vex-gate/run-002/tier2-e2e-check.json.
## Recheck (run-004)
- Date (UTC): 2026-02-10
- Status: VERIFIED (replayed)
- Tier 1 evidence: Angular build passed and checked-web suite passed 145/145 across 47 files.
- Tier 2 evidence: docs/qa/feature-checks/runs/web/vex-gate/run-004/tier2-e2e-check.json.

View File

@@ -1,40 +0,0 @@
# A/B Deploy Diff Panel
## Module
Web
## Status
IMPLEMENTED
## Description
Full deployment diff panel comparing security state between two image versions (A/B) with SBOM side-by-side view, component diff rows, policy hit annotations, override dialog, and deploy action bar. Enables visual security review before promotion.
## Implementation Details
- **Feature directory**: `src/Web/StellaOps.Web/src/app/features/deploy-diff/`
- **Routes**: `deploy-diff.routes.ts`
- **Components**:
- `component-diff-row` (`src/Web/StellaOps.Web/src/app/features/deploy-diff/components/component-diff-row/component-diff-row.component.ts`)
- `deploy-action-bar` (`src/Web/StellaOps.Web/src/app/features/deploy-diff/components/deploy-action-bar/deploy-action-bar.component.ts`)
- `deploy-diff-panel` (`src/Web/StellaOps.Web/src/app/features/deploy-diff/components/deploy-diff-panel/deploy-diff-panel.component.ts`)
- `override-dialog` (`src/Web/StellaOps.Web/src/app/features/deploy-diff/components/override-dialog/override-dialog.component.ts`)
- `policy-hit-annotation` (`src/Web/StellaOps.Web/src/app/features/deploy-diff/components/policy-hit-annotation/policy-hit-annotation.component.ts`)
- `sbom-side-by-side` (`src/Web/StellaOps.Web/src/app/features/deploy-diff/components/sbom-side-by-side/sbom-side-by-side.component.ts`)
- **Services**:
- `deploy-diff` (`src/Web/StellaOps.Web/src/app/features/deploy-diff/services/deploy-diff.service.ts`)
- **Models**:
- `src/Web/StellaOps.Web/src/app/features/deploy-diff/models/deploy-diff.models.ts`
- **Source**: batch_38/file_18.md
## E2E Test Plan
- **Setup**:
- [ ] Log in with a user that has appropriate permissions
- [ ] Navigate to `/deploy-diff`
- [ ] Ensure test data exists (scanned artifacts, SBOM data, or seed data as needed)
- **Core verification**:
- [ ] Verify the panel/drawer opens on trigger (click, keyboard shortcut)
- [ ] Verify the panel displays the correct detail data for the selected item
- [ ] Verify the panel can be closed (X button, Escape key, backdrop click)
- **Edge cases**:
- [ ] Verify graceful handling when backend API is unavailable (error state)
- [ ] Verify responsive layout at different viewport sizes
- [ ] Verify accessibility (keyboard navigation, screen reader labels, ARIA attributes)

View File

@@ -1,43 +0,0 @@
# Agent Fleet Dashboard UI
## Module
Web
## Status
IMPLEMENTED
## Description
Full agent fleet management UI with fleet dashboard overview, agent detail pages with health and tasks tabs, capacity heatmap visualization, fleet comparison views, agent action modals, and an onboarding wizard for new agent registration. The known features list has "Runtime Agent Framework" but not the fleet dashboard UI.
## Implementation Details
- **Feature directory**: `src/Web/StellaOps.Web/src/app/features/agents/`
- **Routes**: `agents.routes.ts`
- **Components**:
- `agent-detail-page` (`src/Web/StellaOps.Web/src/app/features/agents/agent-detail-page.component.ts`)
- `agent-fleet-dashboard` (`src/Web/StellaOps.Web/src/app/features/agents/agent-fleet-dashboard.component.ts`)
- `agent-onboard-wizard` (`src/Web/StellaOps.Web/src/app/features/agents/agent-onboard-wizard.component.ts`)
- `agent-action-modal` (`src/Web/StellaOps.Web/src/app/features/agents/components/agent-action-modal/agent-action-modal.component.ts`)
- `agent-card` (`src/Web/StellaOps.Web/src/app/features/agents/components/agent-card/agent-card.component.ts`)
- `agent-health-tab` (`src/Web/StellaOps.Web/src/app/features/agents/components/agent-health-tab/agent-health-tab.component.ts`)
- `agent-tasks-tab` (`src/Web/StellaOps.Web/src/app/features/agents/components/agent-tasks-tab/agent-tasks-tab.component.ts`)
- `capacity-heatmap` (`src/Web/StellaOps.Web/src/app/features/agents/components/capacity-heatmap/capacity-heatmap.component.ts`)
- `fleet-comparison` (`src/Web/StellaOps.Web/src/app/features/agents/components/fleet-comparison/fleet-comparison.component.ts`)
- **Services**:
- `agent-realtime` (`src/Web/StellaOps.Web/src/app/features/agents/services/agent-realtime.service.ts`)
- **Models**:
- `src/Web/StellaOps.Web/src/app/features/agents/models/agent.models.ts`
- **Source**: SPRINT_20260118_023_FE_agent_fleet_visualization.md
## E2E Test Plan
- **Setup**:
- [ ] Log in with a user that has appropriate permissions
- [ ] Navigate to `/ops/agents`
- [ ] Ensure test data exists (scanned artifacts, SBOM data, or seed data as needed)
- **Core verification**:
- [ ] Verify the dashboard loads without errors and displays summary cards/metrics
- [ ] Verify data refreshes correctly and loading states are shown
- [ ] Verify empty state is displayed when no data is available
- **Edge cases**:
- [ ] Verify graceful handling when backend API is unavailable (error state)
- [ ] Verify responsive layout at different viewport sizes
- [ ] Verify accessibility (keyboard navigation, screen reader labels, ARIA attributes)

View File

@@ -1,44 +0,0 @@
# AI Autofix Button with Remediation Plan Preview and PR Tracker
## Module
Web
## Status
IMPLEMENTED
## Description
Three-component AI remediation workflow: (1) Autofix button that triggers AI-assisted remediation planning per finding, (2) Remediation plan preview showing 3-line summary, step-by-step instructions with code diffs, impact assessment, and Approve/Create PR actions, (3) PR tracker monitoring remediation pull requests with CI check statuses, review status, and merge/close actions across multi-SCM providers.
## Implementation Details
- **Feature directory**: `src/Web/StellaOps.Web/src/app/features/advisory-ai/`
- **Components**:
- `autofix-button` (`src/Web/StellaOps.Web/src/app/features/advisory-ai/autofix-button.component.ts`)
- `action-button` (`src/Web/StellaOps.Web/src/app/features/advisory-ai/chat/action-button.component.ts`)
- `chat-message` (`src/Web/StellaOps.Web/src/app/features/advisory-ai/chat/chat-message.component.ts`)
- `chat` (`src/Web/StellaOps.Web/src/app/features/advisory-ai/chat/chat.component.ts`)
- `object-link-chip` (`src/Web/StellaOps.Web/src/app/features/advisory-ai/chat/object-link-chip.component.ts`)
- `evidence-drilldown` (`src/Web/StellaOps.Web/src/app/features/advisory-ai/evidence-drilldown.component.ts`)
- `explain-button` (`src/Web/StellaOps.Web/src/app/features/advisory-ai/explain-button.component.ts`)
- `explanation-panel` (`src/Web/StellaOps.Web/src/app/features/advisory-ai/explanation-panel.component.ts`)
- `plain-language-toggle` (`src/Web/StellaOps.Web/src/app/features/advisory-ai/plain-language-toggle.component.ts`)
- `pr-tracker` (`src/Web/StellaOps.Web/src/app/features/advisory-ai/pr-tracker.component.ts`)
- `remediation-plan-preview` (`src/Web/StellaOps.Web/src/app/features/advisory-ai/remediation-plan-preview.component.ts`)
- **Services**:
- `chat` (`src/Web/StellaOps.Web/src/app/features/advisory-ai/chat/chat.service.ts`)
- **Models**:
- `src/Web/StellaOps.Web/src/app/features/advisory-ai/chat/chat.models.ts`
- **Source**: Feature matrix scan
## E2E Test Plan
- **Setup**:
- [ ] Log in with a user that has appropriate permissions
- [ ] Navigate to `/triage/artifacts/:artifactId`
- [ ] Ensure test data exists (scanned artifacts, SBOM data, or seed data as needed)
- **Core verification**:
- [ ] Verify the component renders correctly with sample data
- [ ] Verify interactive elements respond to user input
- [ ] Verify data is fetched and displayed from the correct API endpoints
- **Edge cases**:
- [ ] Verify graceful handling when backend API is unavailable (error state)
- [ ] Verify responsive layout at different viewport sizes
- [ ] Verify accessibility (keyboard navigation, screen reader labels, ARIA attributes)

Some files were not shown because too many files have changed in this diff Show More