Refactor sprint planning docs and add templates

Updated AGENTS.md with implementation planning conventions and stream index. Refactored SPRINT_110_ingestion_evidence.md, SPRINT_125_mirror.md, and SPRINT_300_documentation_process.md to use a topic-oriented template, clarify dependencies, task boards, and checkpoint structure. Archived previous sprint details and added new templates and status snapshot files to docs/implplan.

docs/implplan/task-status-snapshot.md

@@ -0,0 +1,448 @@
+| Sprint | Task ID | Status | Guild | Working directory | Known pre-requisites |
+| --- | --- | --- | --- | --- | --- |
+| SPRINT_110_ingestion_evidence | AIAI-31-008 | TODO | Advisory AI Guild |  | AIAI-31-006; AIAI-31-007 |
+| SPRINT_110_ingestion_evidence | CONCELIER-AIAI-31-002 | DOING | Concelier Core · Concelier WebService Guilds |  | CONCELIER-GRAPH-21-001/002; CARTO-GRAPH-21-002 |
+| SPRINT_110_ingestion_evidence | CONCELIER-AIRGAP-56-001..58-001 | TODO | Concelier Core · AirGap Guilds |  | Link-Not-Merge schema; Evidence Locker attestation contract |
+| SPRINT_110_ingestion_evidence | CONCELIER-ATTEST-73-001/002 | TODO | Concelier Core · Evidence Locker Guild |  | CONCELIER-AIAI-31-002; Evidence Locker contract |
+| SPRINT_110_ingestion_evidence | CONCELIER-CONSOLE-23-001..003 | TODO | Concelier Console Guild |  | Link-Not-Merge schema |
+| SPRINT_110_ingestion_evidence | DOCS-AIAI-31-004 | DOING | Docs Guild · Console Guild |  | CONSOLE-VULN-29-001; CONSOLE-VEX-30-001; SBOM-AIAI-31-001/003 |
+| SPRINT_110_ingestion_evidence | DOCS-AIAI-31-005/006/008/009 | BLOCKED | Docs Guild |  | DOCS-AIAI-31-004; CLI-VULN-29-001; CLI-VEX-30-001; POLICY-ENGINE-31-001; DEVOPS-AIAI-31-001 |
+| SPRINT_110_ingestion_evidence | EXCITITOR-AIAI-31-002 | TODO | Excititor Web/Core Guilds |  | Link-Not-Merge schema; Evidence Locker contract |
+| SPRINT_110_ingestion_evidence | EXCITITOR-AIAI-31-003 | TODO | Excititor Observability Guild |  | EXCITITOR-AIAI-31-002 |
+| SPRINT_110_ingestion_evidence | EXCITITOR-AIAI-31-004 | TODO | Docs Guild · Excititor Guild |  | EXCITITOR-AIAI-31-002 |
+| SPRINT_110_ingestion_evidence | EXCITITOR-AIRGAP-56/57/58 · EXCITITOR-CONN-TRUST-01-001 | TODO | Excititor Guild · AirGap Guilds |  | Link-Not-Merge schema; attestation plan |
+| SPRINT_110_ingestion_evidence | EXCITITOR-ATTEST-01-003 / 73-001 / 73-002 | TODO | Excititor Guild · Evidence Locker Guild |  | EXCITITOR-AIAI-31-002; Evidence Locker contract |
+| SPRINT_110_ingestion_evidence | EXPORT-OBS-51-001 / 54-001 · AIRGAP-TIME-57-001 · CLI-AIRGAP-56-001 · PROV-OBS-53-001 | TODO | Exporter Guild · AirGap Time Guild · CLI Guild |  | MIRROR-CRT-56-001 staffing |
+| SPRINT_110_ingestion_evidence | FEEDCONN-ICSCISA-02-012 / FEEDCONN-KISA-02-008 | BLOCKED | Concelier Feed Owners |  | Feed owner remediation plan |
+| SPRINT_110_ingestion_evidence | MIRROR-CRT-56-001 | TODO | Mirror Creator Guild |  | Staffing decision |
+| SPRINT_110_ingestion_evidence | MIRROR-CRT-56-002 | TODO | Mirror Creator · Security Guilds |  | MIRROR-CRT-56-001; PROV-OBS-53-001 |
+| SPRINT_110_ingestion_evidence | MIRROR-CRT-57-001/002 | TODO | Mirror Creator Guild · AirGap Time Guild |  | MIRROR-CRT-56-001; AIRGAP-TIME-57-001 |
+| SPRINT_110_ingestion_evidence | MIRROR-CRT-58-001/002 | TODO | Mirror Creator Guild · CLI Guild · Exporter Guild |  | MIRROR-CRT-56-001; EXPORT-OBS-54-001; CLI-AIRGAP-56-001 |
+| SPRINT_110_ingestion_evidence | SBOM-AIAI-31-003 | BLOCKED | SBOM Service Guild |  | SBOM-AIAI-31-001; CLI-VULN-29-001; CLI-VEX-30-001 |
+| SPRINT_120_policy_reasoning | LEDGER-29-007 | TODO | Findings Ledger Guild, Observability Guild | src/Findings/StellaOps.Findings.Ledger | Instrument metrics (`ledger_write_latency`, `projection_lag_seconds`, `ledger_events_total`), structured logs, and Merkle anchoring alerts; publish dashboards (Deps: LEDGER-29-006) |
+| SPRINT_120_policy_reasoning | LEDGER-29-007/008 | TODO | Findings Ledger Guild · Observability Guild · QA Guild |  |  |
+| SPRINT_120_policy_reasoning | LEDGER-29-008 | TODO | Findings Ledger Guild, QA Guild | src/Findings/StellaOps.Findings.Ledger | Develop unit/property/integration tests, replay/restore tooling, determinism harness, and load tests at 5M findings/tenant (Deps: LEDGER-29-007) |
+| SPRINT_120_policy_reasoning | LEDGER-29-009 | TODO | Findings Ledger Guild, DevOps Guild | src/Findings/StellaOps.Findings.Ledger | Provide deployment manifests (Helm/Compose), backup/restore guidance, Merkle anchor externalization (optional), and offline kit instructions (Deps: LEDGER-29-008) |
+| SPRINT_120_policy_reasoning | LEDGER-29-009 | TODO | Findings Ledger Guild · DevOps Guild |  |  |
+| SPRINT_120_policy_reasoning | LEDGER-34-101 | TODO | Findings Ledger Guild | src/Findings/StellaOps.Findings.Ledger | Link orchestrator run ledger exports into Findings Ledger provenance chain, index by artifact hash, and expose audit queries (Deps: LEDGER-29-009) |
+| SPRINT_120_policy_reasoning | LEDGER-34-101 | TODO | Findings Ledger Guild |  |  |
+| SPRINT_120_policy_reasoning | LEDGER-AIRGAP-56-001 | TODO | Findings Ledger Guild | src/Findings/StellaOps.Findings.Ledger | Record bundle provenance (`bundle_id`, `merkle_root`, `time_anchor`) on ledger events for advisories/VEX/policies imported via Mirror Bundles |
+| SPRINT_120_policy_reasoning | LEDGER-AIRGAP-56-002 | TODO | Findings Ledger Guild, AirGap Time Guild | src/Findings/StellaOps.Findings.Ledger | Surface staleness metrics for findings and block risk-critical exports when stale beyond thresholds; provide remediation messaging (Deps: LEDGER-AIRGAP-56-001) |
+| SPRINT_120_policy_reasoning | LEDGER-AIRGAP-56/57/58 series | TODO | Findings Ledger Guild · AirGap Guilds · Evidence Locker Guild |  |  |
+| SPRINT_120_policy_reasoning | LEDGER-AIRGAP-57-001 | TODO | Findings Ledger Guild, Evidence Locker Guild | src/Findings/StellaOps.Findings.Ledger | Link findings evidence snapshots to portable evidence bundles and ensure cross-enclave verification works (Deps: LEDGER-AIRGAP-56-002) |
+| SPRINT_120_policy_reasoning | LEDGER-AIRGAP-58-001 | TODO | Findings Ledger Guild, AirGap Controller Guild | src/Findings/StellaOps.Findings.Ledger | Emit timeline events for bundle import impacts (new findings, remediation changes) with sealed-mode context (Deps: LEDGER-AIRGAP-57-001) |
+| SPRINT_120_policy_reasoning | LEDGER-ATTEST-73-001 | TODO | Findings Ledger Guild, Attestor Service Guild | src/Findings/StellaOps.Findings.Ledger | Persist pointers from findings to verification reports and attestation envelopes for explainability |
+| SPRINT_120_policy_reasoning | LEDGER-ATTEST-73-001 | TODO | Findings Ledger Guild · Attestor Service Guild |  |  |
+| SPRINT_121_policy_reasoning | LEDGER-ATTEST-73-002 | TODO | Findings Ledger Guild | src/Findings/StellaOps.Findings.Ledger | Enable search/filter in findings projections by verification result and attestation status (Deps: LEDGER-ATTEST-73-001) |
+| SPRINT_121_policy_reasoning | LEDGER-EXPORT-35-001 | TODO | Findings Ledger Guild | src/Findings/StellaOps.Findings.Ledger | Provide paginated streaming endpoints for advisories, VEX, SBOMs, and findings aligned with export filters, including deterministic ordering and provenance metadata |
+| SPRINT_121_policy_reasoning | LEDGER-OAS-61-001 | TODO | Findings Ledger Guild, API Contracts Guild | src/Findings/StellaOps.Findings.Ledger | Expand Findings Ledger OAS to include projections, evidence lookups, and filter parameters with examples |
+| SPRINT_121_policy_reasoning | LEDGER-OAS-61-002 | TODO | Findings Ledger Guild | src/Findings/StellaOps.Findings.Ledger | Implement `/.well-known/openapi` endpoint and ensure version metadata matches release (Deps: LEDGER-OAS-61-001) |
+| SPRINT_121_policy_reasoning | LEDGER-OAS-62-001 | TODO | Findings Ledger Guild, SDK Generator Guild | src/Findings/StellaOps.Findings.Ledger | Provide SDK test cases for findings pagination, filtering, evidence links; ensure typed models expose provenance (Deps: LEDGER-OAS-61-002) |
+| SPRINT_121_policy_reasoning | LEDGER-OAS-63-001 | TODO | Findings Ledger Guild, API Governance Guild | src/Findings/StellaOps.Findings.Ledger | Support deprecation headers and Notifications for retiring finding endpoints (Deps: LEDGER-OAS-62-001) |
+| SPRINT_121_policy_reasoning | LEDGER-OBS-50-001 | TODO | Findings Ledger Guild, Observability Guild | src/Findings/StellaOps.Findings.Ledger | Integrate telemetry core within ledger writer/projector services, emitting structured logs and trace spans for ledger append, projector replay, and query APIs with tenant context |
+| SPRINT_121_policy_reasoning | LEDGER-OBS-51-001 | TODO | Findings Ledger Guild, DevOps Guild | src/Findings/StellaOps.Findings.Ledger | Publish metrics for ledger latency, projector lag, event throughput, and policy evaluation linkage. Define SLOs (ledger append P95 < 1s, replay lag < 30s) with burn-rate alerts and dashboards (Deps: LEDGER-OBS-50-001) |
+| SPRINT_121_policy_reasoning | LEDGER-OBS-52-001 | TODO | Findings Ledger Guild | src/Findings/StellaOps.Findings.Ledger | Emit timeline events for ledger writes and projector commits (`ledger.event.appended`, `ledger.projection.updated`) with trace ID, policy version, evidence bundle reference placeholders (Deps: LEDGER-OBS-51-001) |
+| SPRINT_121_policy_reasoning | LEDGER-OBS-53-001 | TODO | Findings Ledger Guild, Evidence Locker Guild | src/Findings/StellaOps.Findings.Ledger | Persist evidence bundle references (evaluation/job capsules) alongside ledger entries, exposing lookup API linking findings to evidence manifests and timeline (Deps: LEDGER-OBS-52-001) |
+| SPRINT_121_policy_reasoning | LEDGER-OBS-54-001 | TODO | Findings Ledger Guild, Provenance Guild | src/Findings/StellaOps.Findings.Ledger | Verify attestation references for ledger-derived exports; expose `/ledger/attestations` endpoint returning DSSE verification state and chain-of-custody summary (Deps: LEDGER-OBS-53-001) |
+| SPRINT_121_policy_reasoning | LEDGER-OBS-55-001 | TODO | Findings Ledger Guild, DevOps Guild | src/Findings/StellaOps.Findings.Ledger | Enhance incident mode to record additional replay diagnostics (lag traces, conflict snapshots) and extend retention while active. Emit activation events to timeline + notifier (Deps: LEDGER-OBS-54-001) |
+| SPRINT_121_policy_reasoning | LEDGER-PACKS-42-001 | TODO | Findings Ledger Guild | src/Findings/StellaOps.Findings.Ledger | Provide snapshot/time-travel APIs and digestable exports for task pack simulation and CLI offline mode |
+| SPRINT_121_policy_reasoning | LEDGER-RISK-66-001 | TODO | Findings Ledger Guild, Risk Engine Guild | src/Findings/StellaOps.Findings.Ledger | Add schema migrations for `risk_score`, `risk_severity`, `profile_version`, `explanation_id`, and supporting indexes |
+| SPRINT_121_policy_reasoning | LEDGER-RISK-66-002 | TODO | Findings Ledger Guild | src/Findings/StellaOps.Findings.Ledger | Implement deterministic upsert of scoring results keyed by finding hash/profile version with history audit (Deps: LEDGER-RISK-66-001) |
+| SPRINT_122_policy_reasoning | LEDGER-RISK-67-001 | TODO | Findings Ledger Guild, Risk Engine Guild | src/Findings/StellaOps.Findings.Ledger | Expose query APIs for scored findings with score/severity filters, pagination, and explainability links (Deps: LEDGER-RISK-66-002) |
+| SPRINT_122_policy_reasoning | LEDGER-RISK-68-001 | TODO | Findings Ledger Guild, Export Guild | src/Findings/StellaOps.Findings.Ledger | Enable export of scored findings and simulation results via Export Center integration (Deps: LEDGER-RISK-67-001) |
+| SPRINT_122_policy_reasoning | LEDGER-RISK-69-001 | TODO | Findings Ledger Guild, Observability Guild | src/Findings/StellaOps.Findings.Ledger | Emit metrics/dashboards for scoring latency, result freshness, severity distribution, provider gaps (Deps: LEDGER-RISK-68-001) |
+| SPRINT_122_policy_reasoning | LEDGER-TEN-48-001 | TODO | Findings Ledger Guild | src/Findings/StellaOps.Findings.Ledger | Partition ledger tables by tenant/project, enable RLS, update queries/events, and stamp audit metadata |
+| SPRINT_123_policy_reasoning | EXPORT-CONSOLE-23-001 | TODO | Policy Guild, Scheduler Guild, Observability Guild | src/Policy/StellaOps.Policy.Engine | Build evidence bundle/export generator producing signed manifests, CSV/JSON replay endpoints, and trace attachments; integrate with scheduler jobs and expose progress telemetry |
+| SPRINT_123_policy_reasoning | POLICY-AIRGAP-56-001 | TODO | Policy Guild | src/Policy/StellaOps.Policy.Engine | Support policy pack imports from Mirror Bundles, track `bundle_id` metadata, and ensure deterministic caching |
+| SPRINT_123_policy_reasoning | POLICY-AIRGAP-56-002 | TODO | Policy Guild, Policy Studio Guild | src/Policy/StellaOps.Policy.Engine | Export policy sub-bundles (`stella policy bundle export`) with DSSE signatures for outbound transfer (Deps: POLICY-AIRGAP-56-001) |
+| SPRINT_123_policy_reasoning | POLICY-AIRGAP-57-001 | TODO | Policy Guild, AirGap Policy Guild | src/Policy/StellaOps.Policy.Engine | Enforce sealed-mode guardrails in evaluation (no outbound fetch), surface `AIRGAP_EGRESS_BLOCKED` errors with remediation (Deps: POLICY-AIRGAP-56-002) |
+| SPRINT_123_policy_reasoning | POLICY-AIRGAP-57-002 | TODO | Policy Guild, AirGap Time Guild | src/Policy/StellaOps.Policy.Engine | Annotate rule explanations with staleness information and fallback data (cached EPSS, vendor risk) (Deps: POLICY-AIRGAP-57-001) |
+| SPRINT_123_policy_reasoning | POLICY-AIRGAP-58-001 | TODO | Policy Guild, Notifications Guild | src/Policy/StellaOps.Policy.Engine | Emit notifications when policy packs near staleness thresholds or missing required bundles (Deps: POLICY-AIRGAP-57-002) |
+| SPRINT_123_policy_reasoning | POLICY-AOC-19-001 | TODO | Policy Guild | src/Policy/__Libraries/StellaOps.Policy | Add Roslyn/CI lint preventing ingestion projects from referencing Policy merge/severity helpers; block forbidden writes at compile time |
+| SPRINT_123_policy_reasoning | POLICY-AOC-19-002 | TODO | Policy Guild, Platform Security | src/Policy/__Libraries/StellaOps.Policy | Enforce `effective_finding_*` write gate ensuring only Policy Engine identity can create/update materializations (Deps: POLICY-AOC-19-001) |
+| SPRINT_123_policy_reasoning | POLICY-AOC-19-003 | TODO | Policy Guild | src/Policy/__Libraries/StellaOps.Policy | Update readers/processors to consume only `content.raw`, `identifiers`, and `linkset`. Remove dependencies on legacy normalized fields and refresh fixtures (Deps: POLICY-AOC-19-002) |
+| SPRINT_123_policy_reasoning | POLICY-AOC-19-004 | TODO | Policy Guild, QA Guild | src/Policy/__Libraries/StellaOps.Policy | Add regression tests ensuring policy derived outputs remain deterministic when ingesting revised raw docs (supersedes) and when violations occur (Deps: POLICY-AOC-19-003) |
+| SPRINT_123_policy_reasoning | POLICY-ATTEST-73-001 | TODO | Policy Guild, Attestor Service Guild | src/Policy/StellaOps.Policy.Engine | Introduce VerificationPolicy object: schema, persistence, versioning, and lifecycle |
+| SPRINT_123_policy_reasoning | POLICY-ATTEST-73-002 | TODO | Policy Guild | src/Policy/StellaOps.Policy.Engine | Provide Policy Studio editor with validation, dry-run simulation, and version diff (Deps: POLICY-ATTEST-73-001) |
+| SPRINT_123_policy_reasoning | POLICY-ATTEST-74-001 | TODO | Policy Guild, Attestor Service Guild | src/Policy/StellaOps.Policy.Engine | Integrate verification policies into attestor verification pipeline with caching and waiver support (Deps: POLICY-ATTEST-73-002) |
+| SPRINT_123_policy_reasoning | POLICY-ATTEST-74-002 | TODO | Policy Guild, Console Guild | src/Policy/StellaOps.Policy.Engine | Surface policy evaluations in Console verification reports with rule explanations (Deps: POLICY-ATTEST-74-001) |
+| SPRINT_123_policy_reasoning | POLICY-CONSOLE-23-001 | TODO | Policy Guild, BE-Base Platform Guild | src/Policy/StellaOps.Policy.Engine | Optimize findings/explain APIs for Console: cursor-based pagination at scale, global filter parameters (severity bands, policy version, time window), rule trace summarization, and aggregation hints for dashboard cards. Ensure deterministic ordering and expose provenance refs |
+| SPRINT_124_policy_reasoning | POLICY-CONSOLE-23-002 | TODO | Policy Guild, Product Ops | src/Policy/StellaOps.Policy.Engine | Produce simulation diff metadata (before/after counts, severity deltas, rule impact summaries) and approval state endpoints consumed by Console policy workspace; expose RBAC-aware status transitions (Deps: POLICY-CONSOLE-23-001) |
+| SPRINT_124_policy_reasoning | POLICY-ENGINE-20-002 | BLOCKED (2025-10-26) | Policy Guild | src/Policy/StellaOps.Policy.Engine | Build deterministic evaluator honoring lexical/priority order, first-match semantics, and safe value types (no wall-clock/network access) |
+| SPRINT_124_policy_reasoning | POLICY-ENGINE-20-003 | TODO | Policy Guild, Concelier Core Guild, Excititor Core Guild | src/Policy/StellaOps.Policy.Engine | Implement selection joiners resolving SBOM↔advisory↔VEX tuples using linksets and PURL equivalence tables, with deterministic batching (Deps: POLICY-ENGINE-20-002) |
+| SPRINT_124_policy_reasoning | POLICY-ENGINE-20-004 | TODO | Policy Guild, Platform Storage Guild | src/Policy/StellaOps.Policy.Engine | Ship materialization writer that upserts into `effective_finding_{policyId}` with append-only history, tenant scoping, and trace references (Deps: POLICY-ENGINE-20-003) |
+| SPRINT_124_policy_reasoning | POLICY-ENGINE-20-005 | TODO | Policy Guild, Security Engineering | src/Policy/StellaOps.Policy.Engine | Enforce determinism guard banning wall-clock, RNG, and network usage during evaluation via static analysis + runtime sandbox (Deps: POLICY-ENGINE-20-004) |
+| SPRINT_124_policy_reasoning | POLICY-ENGINE-20-006 | TODO | Policy Guild, Scheduler Worker Guild | src/Policy/StellaOps.Policy.Engine | Implement incremental orchestrator reacting to advisory/vex/SBOM change streams and scheduling partial policy re-evaluations (Deps: POLICY-ENGINE-20-005) |
+| SPRINT_124_policy_reasoning | POLICY-ENGINE-20-007 | TODO | Policy Guild, Observability Guild | src/Policy/StellaOps.Policy.Engine | Emit structured traces/logs of rule hits with sampling controls, metrics (`rules_fired_total`, `vex_overrides_total`), and expose explain trace exports (Deps: POLICY-ENGINE-20-006) |
+| SPRINT_124_policy_reasoning | POLICY-ENGINE-20-008 | TODO | Policy Guild, QA Guild | src/Policy/StellaOps.Policy.Engine | Add unit/property/golden/perf suites covering policy compilation, evaluation correctness, determinism, and SLA targets (Deps: POLICY-ENGINE-20-007) |
+| SPRINT_124_policy_reasoning | POLICY-ENGINE-20-009 | TODO | Policy Guild, Storage Guild | src/Policy/StellaOps.Policy.Engine | Define Mongo schemas/indexes for `policies`, `policy_runs`, and `effective_finding_*`; implement migrations and tenant enforcement (Deps: POLICY-ENGINE-20-008) |
+| SPRINT_124_policy_reasoning | POLICY-ENGINE-27-001 | TODO | Policy Guild | src/Policy/StellaOps.Policy.Engine | Extend compile outputs to include rule coverage metadata, symbol table, inline documentation, and rule index for editor autocomplete; persist deterministic hashes (Deps: POLICY-ENGINE-20-009) |
+| SPRINT_124_policy_reasoning | POLICY-ENGINE-27-002 | TODO | Policy Guild, Observability Guild | src/Policy/StellaOps.Policy.Engine | Enhance simulate endpoints to emit rule firing counts, heatmap aggregates, sampled explain traces with deterministic ordering, and delta summaries for quick/batch sims (Deps: POLICY-ENGINE-27-001) |
+| SPRINT_124_policy_reasoning | POLICY-ENGINE-29-001 | TODO | Policy Guild | src/Policy/StellaOps.Policy.Engine | Implement batch evaluation endpoint (`POST /policy/eval/batch`) returning determinations + rationale chain for sets of `(artifact,purl,version,advisory)` tuples; support pagination and cost budgets (Deps: POLICY-ENGINE-27-004) |
+| SPRINT_124_policy_reasoning | POLICY-ENGINE-29-002 | TODO | Policy Guild, Findings Ledger Guild | src/Policy/StellaOps.Policy.Engine | Provide streaming simulation API comparing two policy versions, returning per-finding deltas without writes; align determinism with Vuln Explorer simulation (Deps: POLICY-ENGINE-29-001) |
+| SPRINT_125_mirror | AIRGAP-TIME-57-001 | TODO | AirGap Time Guild |  | MIRROR-CRT-56-001; MIRROR-CRT-57-002 |
+| SPRINT_125_mirror | CLI-AIRGAP-56-001 | TODO | CLI Guild |  | MIRROR-CRT-56-002; MIRROR-CRT-58-001 |
+| SPRINT_125_mirror | EXPORT-OBS-51-001 / 54-001 | TODO | Exporter Guild |  | MIRROR-CRT-56-001 staffing |
+| SPRINT_125_mirror | MIRROR-CRT-56-001 | TODO | Mirror Creator Guild |  | Staffing decision |
+| SPRINT_125_mirror | MIRROR-CRT-56-002 | TODO | Mirror Creator · Security Guilds |  | MIRROR-CRT-56-001; PROV-OBS-53-001 |
+| SPRINT_125_mirror | MIRROR-CRT-57-001 | TODO | Mirror Creator · DevOps Guild |  | MIRROR-CRT-56-001 |
+| SPRINT_125_mirror | MIRROR-CRT-57-002 | TODO | Mirror Creator · AirGap Time Guild |  | MIRROR-CRT-56-002; AIRGAP-TIME-57-001 |
+| SPRINT_125_mirror | MIRROR-CRT-58-001 | TODO | Mirror Creator · CLI Guild |  | MIRROR-CRT-56-002; CLI-AIRGAP-56-001 |
+| SPRINT_125_mirror | MIRROR-CRT-58-002 | TODO | Mirror Creator · Exporter Guild |  | MIRROR-CRT-56-002; EXPORT-OBS-54-001 |
+| SPRINT_125_mirror | PROV-OBS-53-001 | TODO | Security Guild |  | MIRROR-CRT-56-001 |
+| SPRINT_125_policy_reasoning | POLICY-ENGINE-29-003 | TODO | Policy Guild, SBOM Service Guild | src/Policy/StellaOps.Policy.Engine | Surface path/scope awareness in determinations (signal optional/dev/test downgrade, runtime boost) for Vuln Explorer display (Deps: POLICY-ENGINE-29-002) |
+| SPRINT_125_policy_reasoning | POLICY-ENGINE-29-004 | TODO | Policy Guild, Observability Guild | src/Policy/StellaOps.Policy.Engine | Add metrics/logs for batch evaluation (latency, queue depth) and simulation diff counts; update dashboards (Deps: POLICY-ENGINE-29-003) |
+| SPRINT_125_policy_reasoning | POLICY-ENGINE-30-001 | TODO | Policy Guild, Cartographer Guild | src/Policy/StellaOps.Policy.Engine | Define overlay contract for graph nodes/edges (status, severity, rationale refs, path relevance), expose projection API for Cartographer, and document schema versioning (Deps: POLICY-ENGINE-29-004) |
+| SPRINT_125_policy_reasoning | POLICY-ENGINE-30-002 | TODO | Policy Guild, Cartographer Guild | src/Policy/StellaOps.Policy.Engine | Implement simulation bridge returning on-the-fly overlays for Cartographer/Graph Explorer when invoking Policy Engine simulate; ensure no writes and deterministic outputs (Deps: POLICY-ENGINE-30-001) |
+| SPRINT_125_policy_reasoning | POLICY-ENGINE-30-003 | TODO | Policy Guild, Scheduler Guild, Cartographer Guild | src/Policy/StellaOps.Policy.Engine | Emit change events (`policy.effective.updated`) with graph-friendly payloads so Cartographer overlay worker refreshes nodes/edges within 2 minutes (Deps: POLICY-ENGINE-30-002) |
+| SPRINT_125_policy_reasoning | POLICY-ENGINE-30-101 | TODO | Policy Guild | src/Policy/StellaOps.Policy.Engine | Surface trust weighting configuration (issuer base weights, signature modifiers, recency decay, scope adjustments) for VEX Lens via Policy Studio + API; ensure deterministic evaluation (Deps: POLICY-ENGINE-30-003) |
+| SPRINT_125_policy_reasoning | POLICY-ENGINE-31-001 | TODO | Policy Guild | src/Policy/StellaOps.Policy.Engine | Expose policy knobs for Advisory AI (trust presets, temperature, token limits, plan ranking weights, TTLs) via Policy Studio and config APIs (Deps: POLICY-ENGINE-30-101) |
+| SPRINT_125_policy_reasoning | POLICY-ENGINE-31-002 | TODO | Policy Guild | src/Policy/StellaOps.Policy.Engine | Provide batch endpoint delivering policy context (thresholds, obligations) consumed by Advisory AI remediation planner (Deps: POLICY-ENGINE-31-001) |
+| SPRINT_125_policy_reasoning | POLICY-ENGINE-32-101 | TODO | Policy Guild | src/Policy/StellaOps.Policy.Engine | Define orchestrator `policy_eval` job schema, idempotency keys, and enqueue hooks triggered by advisory/VEX/SBOM events (Deps: POLICY-ENGINE-31-002) |
+| SPRINT_125_policy_reasoning | POLICY-ENGINE-33-101 | TODO | Policy Guild | src/Policy/StellaOps.Policy.Engine | Implement orchestrator-driven policy evaluation workers using SDK heartbeats, respecting throttles, and emitting SLO metrics (Deps: POLICY-ENGINE-32-101) |
+| SPRINT_125_policy_reasoning | POLICY-ENGINE-34-101 | TODO | Policy Guild | src/Policy/StellaOps.Policy.Engine | Publish policy run ledger exports + SLO burn-rate metrics to orchestrator; ensure provenance chain links to Findings Ledger (Deps: POLICY-ENGINE-33-101) |
+| SPRINT_125_policy_reasoning | POLICY-ENGINE-35-201 | TODO | Policy Guild | src/Policy/StellaOps.Policy.Engine | Expose deterministic policy snapshot API and evaluated findings stream keyed by policy version for exporter consumption (Deps: POLICY-ENGINE-34-101) |
+| SPRINT_125_policy_reasoning | POLICY-ENGINE-38-201 | TODO | Policy Guild | src/Policy/StellaOps.Policy.Engine | Emit enriched policy violation events (decision rationale ids, risk bands) via orchestrator event bus for Notifications Studio (Deps: POLICY-ENGINE-35-201) |
+| SPRINT_125_policy_reasoning | POLICY-ENGINE-40-001 | TODO | Policy Guild, Concelier Guild | src/Policy/StellaOps.Policy.Engine | Update severity/status evaluation pipelines to consume multiple source severities per linkset, supporting selection strategies (max, preferred source, policy-defined) (Deps: POLICY-ENGINE-38-201) |
+| SPRINT_125_policy_reasoning | POLICY-ENGINE-40-002 | TODO | Policy Guild, Excititor Guild | src/Policy/StellaOps.Policy.Engine | Accept VEX linkset conflicts and provide rationale references in effective findings; ensure explain traces cite observation IDs (Deps: POLICY-ENGINE-40-001) |
+| SPRINT_126_policy_reasoning | POLICY-ENGINE-40-003 | TODO | Policy Guild, Web Scanner Guild | src/Policy/StellaOps.Policy.Engine | Provide API/SDK utilities for consumers (Web Scanner, Graph Explorer) to request policy decisions with source evidence summaries (top severity sources, conflict counts) (Deps: POLICY-ENGINE-40-002) |
+| SPRINT_126_policy_reasoning | POLICY-ENGINE-50-001 | TODO | Policy Guild, Platform Security | src/Policy/StellaOps.Policy.Engine | Implement SPL compiler: validate YAML, canonicalize, produce signed bundle, store artifact in object storage, write `policy_revisions` with AOC metadata (Deps: POLICY-ENGINE-40-003) |
+| SPRINT_126_policy_reasoning | POLICY-ENGINE-50-002 | TODO | Policy Guild, Runtime Guild | src/Policy/StellaOps.Policy.Engine | Build runtime evaluator executing compiled plans over advisory/vex linksets + SBOM asset metadata with deterministic caching (Redis) and fallback path (Deps: POLICY-ENGINE-50-001) |
+| SPRINT_126_policy_reasoning | POLICY-ENGINE-50-003 | TODO | Policy Guild, Observability Guild | src/Policy/StellaOps.Policy.Engine | Implement evaluation/compilation metrics, tracing, and structured logs (`policy_eval_seconds`, `policy_compiles_total`, explanation sampling) (Deps: POLICY-ENGINE-50-002) |
+| SPRINT_126_policy_reasoning | POLICY-ENGINE-50-004 | TODO | Policy Guild, Platform Events Guild | src/Policy/StellaOps.Policy.Engine | Build event pipeline: subscribe to linkset/SBOM updates, schedule re-eval jobs, emit `policy.effective.updated` events with diff metadata (Deps: POLICY-ENGINE-50-003) |
+| SPRINT_126_policy_reasoning | POLICY-ENGINE-50-005 | TODO | Policy Guild, Storage Guild | src/Policy/StellaOps.Policy.Engine | Design and implement `policy_packs`, `policy_revisions`, `policy_runs`, `policy_artifacts` collections with indexes, TTL, and tenant scoping (Deps: POLICY-ENGINE-50-004) |
+| SPRINT_126_policy_reasoning | POLICY-ENGINE-50-006 | TODO | Policy Guild, QA Guild | src/Policy/StellaOps.Policy.Engine | Implement explainer persistence + retrieval APIs linking decisions to explanation tree and AOC chain (Deps: POLICY-ENGINE-50-005) |
+| SPRINT_126_policy_reasoning | POLICY-ENGINE-50-007 | TODO | Policy Guild, Scheduler Worker Guild | src/Policy/StellaOps.Policy.Engine | Provide evaluation worker host/DI wiring and job orchestration hooks for batch re-evaluations after policy activation (Deps: POLICY-ENGINE-50-006) |
+| SPRINT_126_policy_reasoning | POLICY-ENGINE-60-001 | TODO | Policy Guild, SBOM Service Guild | src/Policy/StellaOps.Policy.Engine | Maintain Redis effective decision maps per asset/snapshot for Graph overlays; implement versioning and eviction strategy (Deps: POLICY-ENGINE-50-007) |
+| SPRINT_126_policy_reasoning | POLICY-ENGINE-60-002 | TODO | Policy Guild, BE-Base Platform Guild | src/Policy/StellaOps.Policy.Engine | Expose simulation bridge for Graph What-if APIs, supporting hypothetical SBOM diffs and draft policies without persisting results (Deps: POLICY-ENGINE-60-001) |
+| SPRINT_126_policy_reasoning | POLICY-ENGINE-70-002 | TODO | Policy Guild, Storage Guild | src/Policy/StellaOps.Policy.Engine | Design and create Mongo collections (`exceptions`, `exception_reviews`, `exception_bindings`) with indexes and migrations; expose repository APIs (Deps: POLICY-ENGINE-60-002) |
+| SPRINT_126_policy_reasoning | POLICY-ENGINE-70-003 | TODO | Policy Guild, Runtime Guild | src/Policy/StellaOps.Policy.Engine | Build Redis exception decision cache (`exceptions_effective_map`) with warm/invalidation logic reacting to `exception.*` events (Deps: POLICY-ENGINE-70-002) |
+| SPRINT_126_policy_reasoning | POLICY-ENGINE-70-004 | TODO | Policy Guild, Observability Guild | src/Policy/StellaOps.Policy.Engine | Extend metrics/tracing/logging for exception application (latency, counts, expiring events) and include AOC references in logs (Deps: POLICY-ENGINE-70-003) |
+| SPRINT_126_policy_reasoning | POLICY-ENGINE-70-005 | TODO | Policy Guild, Scheduler Worker Guild | src/Policy/StellaOps.Policy.Engine | Provide APIs/workers hook for exception activation/expiry (auto start/end) and event emission (`exception.activated/expired`) (Deps: POLICY-ENGINE-70-004) |
+| SPRINT_126_policy_reasoning | POLICY-ENGINE-80-001 | TODO | Policy Guild, Signals Guild | src/Policy/StellaOps.Policy.Engine | Integrate reachability/exploitability inputs into evaluation pipeline (state/score/confidence) with caching and explain support (Deps: POLICY-ENGINE-70-005) |
+| SPRINT_126_policy_reasoning | POLICY-RISK-90-001 | TODO | Policy Guild, Scanner Guild | src/Policy/StellaOps.Policy.Engine | Ingest entropy penalty inputs from Scanner (`entropy.report.json`, `layer_summary.json`), extend trust algebra with configurable weights/caps, and expose explanations/metrics for opaque ratio penalties (`docs/modules/scanner/entropy.md`). |
+| SPRINT_127_policy_reasoning | POLICY-ENGINE-80-002 | TODO | Policy Guild, Storage Guild | src/Policy/StellaOps.Policy.Engine | Create joining layer to read `reachability_facts` efficiently (indexes, projections) and populate Redis overlay caches (Deps: POLICY-ENGINE-80-001) |
+| SPRINT_127_policy_reasoning | POLICY-ENGINE-80-003 | TODO | Policy Guild, Policy Editor Guild | src/Policy/StellaOps.Policy.Engine | Extend SPL predicates/actions to reference reachability state/score/confidence; update compiler validation (Deps: POLICY-ENGINE-80-002) |
+| SPRINT_127_policy_reasoning | POLICY-ENGINE-80-004 | TODO | Policy Guild, Observability Guild | src/Policy/StellaOps.Policy.Engine | Emit metrics (`policy_reachability_applied_total`, `policy_reachability_cache_hit_ratio`) and traces for signals usage (Deps: POLICY-ENGINE-80-003) |
+| SPRINT_127_policy_reasoning | POLICY-OBS-50-001 | TODO | Policy Guild, Observability Guild | src/Policy/StellaOps.Policy.Engine | Integrate telemetry core into policy API + worker hosts, ensuring spans/logs cover compile/evaluate flows with `tenant_id`, `policy_version`, `decision_effect`, and trace IDs |
+| SPRINT_127_policy_reasoning | POLICY-OBS-51-001 | TODO | Policy Guild, DevOps Guild | src/Policy/StellaOps.Policy.Engine | Emit golden-signal metrics (compile latency, evaluate latency, rule hits, override counts) and define SLOs (evaluation P95 <2s). Publish Grafana dashboards + burn-rate alert rules (Deps: POLICY-OBS-50-001) |
+| SPRINT_127_policy_reasoning | POLICY-OBS-52-001 | TODO | Policy Guild | src/Policy/StellaOps.Policy.Engine | Emit timeline events `policy.evaluate.started`, `policy.evaluate.completed`, `policy.decision.recorded` with trace IDs, input digests, and rule summary. Provide contract tests and retry semantics (Deps: POLICY-OBS-51-001) |
+| SPRINT_127_policy_reasoning | POLICY-OBS-53-001 | TODO | Policy Guild, Evidence Locker Guild | src/Policy/StellaOps.Policy.Engine | Produce evaluation evidence bundles (inputs slice, rule trace, engine version, config snapshot) through evidence locker integration; ensure redaction + deterministic manifests (Deps: POLICY-OBS-52-001) |
+| SPRINT_127_policy_reasoning | POLICY-OBS-54-001 | TODO | Policy Guild, Provenance Guild | src/Policy/StellaOps.Policy.Engine | Generate DSSE attestations for evaluation outputs, expose `/evaluations/{id}/attestation`, and link attestation IDs in timeline + console. Provide verification harness (Deps: POLICY-OBS-53-001) |
+| SPRINT_127_policy_reasoning | POLICY-OBS-55-001 | TODO | Policy Guild, DevOps Guild | src/Policy/StellaOps.Policy.Engine | Implement incident mode sampling overrides (full rule trace capture, extended retention) with auto-activation on SLO breach and manual override API. Emit activation events to timeline + notifier (Deps: POLICY-OBS-54-001) |
+| SPRINT_127_policy_reasoning | POLICY-RISK-66-001 | TODO | Risk Profile Schema Guild | src/Policy/StellaOps.Policy.RiskProfile | Develop initial JSON Schema for RiskProfile (signals, transforms, weights, severity, overrides) with validator stubs |
+| SPRINT_127_policy_reasoning | POLICY-RISK-66-002 | TODO | Risk Profile Schema Guild | src/Policy/StellaOps.Policy.RiskProfile | Implement inheritance/merge logic with conflict detection and deterministic content hashing (Deps: POLICY-RISK-66-001) |
+| SPRINT_127_policy_reasoning | POLICY-RISK-66-003 | TODO | Policy Guild, Risk Profile Schema Guild | src/Policy/StellaOps.Policy.Engine | Integrate RiskProfile schema into Policy Engine configuration, ensuring validation and default profile deployment (Deps: POLICY-RISK-66-002) |
+| SPRINT_127_policy_reasoning | POLICY-RISK-66-004 | TODO | Policy Guild, Risk Profile Schema Guild | src/Policy/__Libraries/StellaOps.Policy | Extend Policy libraries to load/save RiskProfile documents, compute content hashes, and surface validation diagnostics (Deps: POLICY-RISK-66-003) |
+| SPRINT_127_policy_reasoning | POLICY-RISK-67-001 | TODO | Policy Guild, Risk Engine Guild | src/Policy/StellaOps.Policy.Engine | Trigger scoring jobs on new/updated findings via Policy Engine orchestration hooks (Deps: POLICY-RISK-66-004) |
+| SPRINT_127_policy_reasoning | POLICY-RISK-67-001 | TODO | Risk Profile Schema Guild, Policy Engine Guild | src/Policy/StellaOps.Policy.RiskProfile | Integrate profile storage and versioning into Policy Store with lifecycle states (draft/publish/deprecate) (Deps: POLICY-RISK-67-001) |
+| SPRINT_128_policy_reasoning | POLICY-RISK-67-002 | TODO | Policy Guild | src/Policy/StellaOps.Policy.Engine | Implement profile lifecycle APIs (`/risk/profiles` create/publish/deprecate) and scope attachment logic (Deps: POLICY-RISK-67-001) |
+| SPRINT_128_policy_reasoning | POLICY-RISK-67-002 | TODO | Risk Profile Schema Guild | src/Policy/StellaOps.Policy.RiskProfile | Publish `.well-known/risk-profile-schema` endpoint and CLI validation tooling (Deps: POLICY-RISK-67-002) |
+| SPRINT_128_policy_reasoning | POLICY-RISK-67-003 | TODO | Policy Guild, Risk Engine Guild | src/Policy/__Libraries/StellaOps.Policy | Provide policy-layer APIs to trigger risk simulations and return distributions/contribution breakdowns (Deps: POLICY-RISK-67-002) |
+| SPRINT_128_policy_reasoning | POLICY-RISK-68-001 | TODO | Policy Guild, Policy Studio Guild | src/Policy/StellaOps.Policy.Engine | Provide simulation API bridging Policy Studio with risk engine; returns distributions and top movers (Deps: POLICY-RISK-67-003) |
+| SPRINT_128_policy_reasoning | POLICY-RISK-68-001 | TODO | Risk Profile Schema Guild, Authority Guild | src/Policy/StellaOps.Policy.RiskProfile | Implement scope selectors, precedence rules, and Authority attachment APIs (Deps: POLICY-RISK-68-001) |
+| SPRINT_128_policy_reasoning | POLICY-RISK-68-002 | TODO | Risk Profile Schema Guild | src/Policy/StellaOps.Policy.RiskProfile | Add override/adjustment support with audit metadata and validation for conflicting rules (Deps: POLICY-RISK-68-001) |
+| SPRINT_128_policy_reasoning | POLICY-RISK-68-002 | TODO | Policy Guild, Export Guild | src/Policy/__Libraries/StellaOps.Policy | Enable exporting/importing RiskProfiles with signatures via policy tooling (CLI + API) (Deps: POLICY-RISK-68-002) |
+| SPRINT_128_policy_reasoning | POLICY-RISK-69-001 | TODO | Policy Guild, Notifications Guild | src/Policy/StellaOps.Policy.Engine | Emit events/notifications on profile publish, deprecate, and severity threshold changes (Deps: POLICY-RISK-68-002) |
+| SPRINT_128_policy_reasoning | POLICY-RISK-70-001 | TODO | Policy Guild, Export Guild | src/Policy/StellaOps.Policy.Engine | Support exporting/importing profiles with signatures for air-gapped bundles (Deps: POLICY-RISK-69-001) |
+| SPRINT_128_policy_reasoning | POLICY-SPL-23-001 | TODO | Policy Guild, Language Infrastructure Guild | src/Policy/__Libraries/StellaOps.Policy | Define SPL v1 YAML + JSON Schema, including advisory rules, VEX precedence, severity mapping, exceptions, and layering metadata. Publish schema resources and validation fixtures |
+| SPRINT_128_policy_reasoning | POLICY-SPL-23-002 | TODO | Policy Guild | src/Policy/__Libraries/StellaOps.Policy | Implement canonicalizer that normalizes policy packs (ordering, defaults), computes content hash, and prepares bundle metadata for AOC/signing (Deps: POLICY-SPL-23-001) |
+| SPRINT_128_policy_reasoning | POLICY-SPL-23-003 | TODO | Policy Guild | src/Policy/__Libraries/StellaOps.Policy | Build policy layering/override engine (global/org/project/env/exception) with field-level precedence matrices; add unit/property tests (Deps: POLICY-SPL-23-002) |
+| SPRINT_128_policy_reasoning | POLICY-SPL-23-004 | TODO | Policy Guild, Audit Guild | src/Policy/__Libraries/StellaOps.Policy | Design explanation tree model (rule hits, inputs, decisions) and persistence structures reused by runtime, UI, and CLI (Deps: POLICY-SPL-23-003) |
+| SPRINT_128_policy_reasoning | POLICY-SPL-23-005 | TODO | Policy Guild, DevEx Guild | src/Policy/__Libraries/StellaOps.Policy | Create migration tool to snapshot existing behavior into baseline SPL packs (`org.core.baseline`), including policy docs and sample bundles (Deps: POLICY-SPL-23-004) |
+| SPRINT_128_policy_reasoning | POLICY-SPL-24-001 | TODO | Policy Guild, Signals Guild | src/Policy/__Libraries/StellaOps.Policy | Extend SPL schema to expose reachability/exploitability predicates and weighting functions; update documentation and fixtures (Deps: POLICY-SPL-23-005) |
+| SPRINT_129_policy_reasoning | POLICY-TEN-48-001 | TODO | Policy Guild | src/Policy/StellaOps.Policy.Engine | Add `tenant_id`/`project_id` columns, enable RLS, update evaluators to require tenant context, and emit rationale IDs including tenant metadata |
+| SPRINT_129_policy_reasoning | REGISTRY-API-27-001 | TODO | Policy Registry Guild | src/Policy/StellaOps.Policy.Registry | Define OpenAPI specification covering workspaces, versions, reviews, simulations, promotions, and attestations; publish typed clients for Console/CLI |
+| SPRINT_129_policy_reasoning | REGISTRY-API-27-002 | TODO | Policy Registry Guild | src/Policy/StellaOps.Policy.Registry | Implement workspace storage (Mongo collections, object storage buckets) with CRUD endpoints, diff history, and retention policies (Deps: REGISTRY-API-27-001) |
+| SPRINT_129_policy_reasoning | REGISTRY-API-27-003 | TODO | Policy Registry Guild | src/Policy/StellaOps.Policy.Registry | Integrate compile endpoint: forward source bundle to Policy Engine, persist diagnostics, symbol table, rule index, and complexity metrics (Deps: REGISTRY-API-27-002) |
+| SPRINT_129_policy_reasoning | REGISTRY-API-27-004 | TODO | Policy Registry Guild | src/Policy/StellaOps.Policy.Registry | Implement quick simulation API with request limits (sample size, timeouts), returning counts, heatmap, sampled explains (Deps: REGISTRY-API-27-003) |
+| SPRINT_129_policy_reasoning | REGISTRY-API-27-005 | TODO | Policy Registry Guild, Scheduler Guild | src/Policy/StellaOps.Policy.Registry | Build batch simulation orchestration: enqueue shards, collect partials, reduce deltas, produce evidence bundles + signed manifest (Deps: REGISTRY-API-27-004) |
+| SPRINT_129_policy_reasoning | REGISTRY-API-27-006 | TODO | Policy Registry Guild | src/Policy/StellaOps.Policy.Registry | Implement review workflow (comments, votes, required approvers, status transitions) with audit trails and webhooks (Deps: REGISTRY-API-27-005) |
+| SPRINT_129_policy_reasoning | REGISTRY-API-27-007 | TODO | Policy Registry Guild, Security Guild | src/Policy/StellaOps.Policy.Registry | Implement publish pipeline: sign source/compiled digests, create attestations, mark version immutable, emit events (Deps: REGISTRY-API-27-006) |
+| SPRINT_129_policy_reasoning | REGISTRY-API-27-008 | TODO | Policy Registry Guild | src/Policy/StellaOps.Policy.Registry | Implement promotion bindings per tenant/environment with canary subsets, rollback path, and environment history (Deps: REGISTRY-API-27-007) |
+| SPRINT_129_policy_reasoning | REGISTRY-API-27-009 | TODO | Policy Registry Guild, Observability Guild | src/Policy/StellaOps.Policy.Registry | Instrument metrics/logs/traces (compile time, diagnostics rate, sim queue depth, approval latency) and expose dashboards (Deps: REGISTRY-API-27-008) |
+| SPRINT_129_policy_reasoning | REGISTRY-API-27-010 | TODO | Policy Registry Guild, QA Guild | src/Policy/StellaOps.Policy.Registry | Build unit/integration/load test suites for compile/sim/review/publish/promote flows; provide seeded fixtures for CI (Deps: REGISTRY-API-27-009) |
+| SPRINT_129_policy_reasoning | RISK-ENGINE-66-001 | TODO | Risk Engine Guild | src/RiskEngine/StellaOps.RiskEngine | Scaffold scoring service (job queue, worker loop, provider registry) with deterministic execution harness |
+| SPRINT_129_policy_reasoning | RISK-ENGINE-66-002 | TODO | Risk Engine Guild | src/RiskEngine/StellaOps.RiskEngine | Implement default transforms (linear, minmax, logistic, piecewise), clamping, gating, and contribution calculator (Deps: RISK-ENGINE-66-001) |
+| SPRINT_129_policy_reasoning | RISK-ENGINE-67-001 | TODO | Risk Engine Guild, Concelier Guild | src/RiskEngine/StellaOps.RiskEngine | Integrate CVSS and KEV providers pulling data from Conseiller; implement reducers (`max`, `any`, `consensus`) (Deps: RISK-ENGINE-66-002) |
+| SPRINT_129_policy_reasoning | RISK-ENGINE-67-002 | TODO | Risk Engine Guild, Excitor Guild | src/RiskEngine/StellaOps.RiskEngine | Integrate VEX gate provider and ensure gating short-circuits scoring as configured (Deps: RISK-ENGINE-67-001) |
+| SPRINT_129_policy_reasoning | RISK-ENGINE-67-003 | TODO | Risk Engine Guild, Policy Engine Guild | src/RiskEngine/StellaOps.RiskEngine | Add fix availability, asset criticality, and internet exposure providers with caching + TTL enforcement (Deps: RISK-ENGINE-67-002) |
+| SPRINT_129_policy_reasoning | RISK-ENGINE-68-001 | TODO | Risk Engine Guild, Findings Ledger Guild | src/RiskEngine/StellaOps.RiskEngine | Persist scoring results + explanation pointers to Findings Ledger; handle incremental updates via input hash (Deps: RISK-ENGINE-67-003) |
+| SPRINT_129_policy_reasoning | RISK-ENGINE-68-002 | TODO | Risk Engine Guild, API Guild | src/RiskEngine/StellaOps.RiskEngine | Expose APIs (`/risk/jobs`, `/risk/results`, `/risk/results/{id}/explanation`); include pagination, filtering, error codes (Deps: RISK-ENGINE-68-001) |
+| SPRINT_129_policy_reasoning | RISK-ENGINE-69-001 | TODO | Risk Engine Guild, Policy Studio Guild | src/RiskEngine/StellaOps.RiskEngine | Implement simulation mode producing distributions and top movers without mutating ledger (Deps: RISK-ENGINE-68-002) |
+| SPRINT_129_policy_reasoning | RISK-ENGINE-69-002 | TODO | Risk Engine Guild, Observability Guild | src/RiskEngine/StellaOps.RiskEngine | Add telemetry (spans, metrics, logs) for provider latency, job throughput, cache hits; define SLO dashboards (Deps: RISK-ENGINE-69-001) |
+| SPRINT_129_policy_reasoning | RISK-ENGINE-70-001 | TODO | Risk Engine Guild, Export Guild | src/RiskEngine/StellaOps.RiskEngine | Support offline provider bundles with manifest verification and missing-data reporting (Deps: RISK-ENGINE-69-002) |
+| SPRINT_129_policy_reasoning | RISK-ENGINE-70-002 | TODO | Risk Engine Guild, Observability Guild | src/RiskEngine/StellaOps.RiskEngine | Integrate runtime evidence provider and reachability provider outputs with caching + TTL (Deps: RISK-ENGINE-70-001) |
+| SPRINT_129_policy_reasoning | VEXLENS-30-001 | TODO | VEX Lens Guild | src/VexLens/StellaOps.VexLens | Implement normalization pipeline for CSAF VEX, OpenVEX, CycloneDX VEX (status mapping, justification mapping, product tree parsing) |
+| SPRINT_129_policy_reasoning | VEXLENS-30-002 | TODO | VEX Lens Guild | src/VexLens/StellaOps.VexLens | Build product mapping library (CPE/CPE2.3/vendor tokens → purl/version) with scope quality scoring and path metadata (Deps: VEXLENS-30-001) |
+| SPRINT_129_policy_reasoning | VEXLENS-30-003 | TODO | VEX Lens Guild, Issuer Directory Guild | src/VexLens/StellaOps.VexLens | Integrate signature verification (Ed25519, DSSE, PKIX) using issuer keys, annotate evidence with verification state and failure reasons (Deps: VEXLENS-30-002) |
+| SPRINT_129_policy_reasoning | VEXLENS-30-004 | TODO | VEX Lens Guild, Policy Guild | src/VexLens/StellaOps.VexLens | Implement trust weighting engine (issuer base weights, signature modifiers, recency decay, justification modifiers, scope score adjustments) controlled by policy config (Deps: VEXLENS-30-003) |
+| SPRINT_129_policy_reasoning | VEXLENS-30-005 | TODO | VEX Lens Guild | src/VexLens/StellaOps.VexLens | Implement consensus algorithm producing `consensus_state`, `confidence`, `weights`, `quorum`, `rationale`; support states: NOT_AFFECTED, AFFECTED, FIXED, UNDER_INVESTIGATION, DISPUTED, INCONCLUSIVE (Deps: VEXLENS-30-004) |
+| SPRINT_129_policy_reasoning | VEXLENS-30-006 | TODO | VEX Lens Guild, Findings Ledger Guild | src/VexLens/StellaOps.VexLens | Materialize consensus projection storage with idempotent workers triggered by VEX/Policy changes; expose change events for downstream consumers (Deps: VEXLENS-30-005) |
+| SPRINT_129_policy_reasoning | VEXLENS-30-007 | TODO | VEX Lens Guild | src/VexLens/StellaOps.VexLens | Expose APIs (`/vex/consensus`, `/vex/consensus/query`, `/vex/consensus/{id}`, `/vex/consensus/simulate`, `/vex/consensus/export`) with pagination, cost budgets, and OpenAPI docs (Deps: VEXLENS-30-006) |
+| SPRINT_129_policy_reasoning | VEXLENS-30-008 | TODO | VEX Lens Guild, Policy Guild | src/VexLens/StellaOps.VexLens | Integrate consensus signals with Policy Engine (thresholds, suppression, simulation inputs) and Vuln Explorer detail view (Deps: VEXLENS-30-007) |
+| SPRINT_129_policy_reasoning | VEXLENS-30-009 | TODO | VEX Lens Guild, Observability Guild | src/VexLens/StellaOps.VexLens | Instrument metrics (`vex_consensus_compute_latency`, `vex_consensus_disputed_total`, `vex_signature_verification_rate`), structured logs, and traces; publish dashboards/alerts (Deps: VEXLENS-30-008) |
+| SPRINT_129_policy_reasoning | VEXLENS-30-010 | TODO | VEX Lens Guild, QA Guild | src/VexLens/StellaOps.VexLens | Develop unit/property/integration/load tests (10M records), determinism harness, fuzz testing for malformed product trees (Deps: VEXLENS-30-009) |
+| SPRINT_129_policy_reasoning | VEXLENS-30-011 | TODO | VEX Lens Guild, DevOps Guild | src/VexLens/StellaOps.VexLens | Provide deployment manifests, caching configuration, scaling guides, offline kit seeds, and runbooks (Deps: VEXLENS-30-010) |
+| SPRINT_129_policy_reasoning | VEXLENS-AIAI-31-001 | TODO | VEX Lens Guild | src/VexLens/StellaOps.VexLens | Expose consensus rationale API enhancements (policy factors, issuer details, mapping issues) for Advisory AI conflict explanations |
+| SPRINT_129_policy_reasoning | VEXLENS-AIAI-31-002 | TODO | VEX Lens Guild | src/VexLens/StellaOps.VexLens | Provide caching hooks for consensus lookups used by Advisory AI (batch endpoints, TTL hints) (Deps: VEXLENS-AIAI-31-001) |
+| SPRINT_129_policy_reasoning | VEXLENS-EXPORT-35-001 | TODO | VEX Lens Guild | src/VexLens/StellaOps.VexLens | Provide consensus snapshot API delivering deterministic JSONL (state, confidence, provenance) for exporter mirror bundles |
+| SPRINT_129_policy_reasoning | VEXLENS-ORCH-33-001 | TODO | VEX Lens Guild | src/VexLens/StellaOps.VexLens | Register `consensus_compute` job type with orchestrator, integrate worker SDK, and expose job planning hooks for consensus batches |
+| SPRINT_129_policy_reasoning | VEXLENS-ORCH-34-001 | TODO | VEX Lens Guild | src/VexLens/StellaOps.VexLens | Emit consensus completion events into orchestrator run ledger and provenance chain, including confidence metadata (Deps: VEXLENS-ORCH-33-001) |
+| SPRINT_129_policy_reasoning | VULN-API-29-001 | TODO | Vuln Explorer API Guild | src/VulnExplorer/StellaOps.VulnExplorer.Api | Define OpenAPI spec (list/detail/query/simulation/workflow/export), query JSON schema, pagination/grouping contracts, and error codes |
+| SPRINT_129_policy_reasoning | VULN-API-29-002 | TODO | Vuln Explorer API Guild | src/VulnExplorer/StellaOps.VulnExplorer.Api | Implement list/query endpoints with policy parameter, grouping, server paging, caching, and cost budgets (Deps: VULN-API-29-001) |
+| SPRINT_129_policy_reasoning | VULN-API-29-003 | TODO | Vuln Explorer API Guild | src/VulnExplorer/StellaOps.VulnExplorer.Api | Implement detail endpoint aggregating evidence, policy rationale, paths (Graph Explorer deep link), and workflow summary (Deps: VULN-API-29-002) |
+| SPRINT_129_policy_reasoning | VULN-API-29-004 | TODO | Vuln Explorer API Guild, Findings Ledger Guild | src/VulnExplorer/StellaOps.VulnExplorer.Api | Expose workflow endpoints (assign, comment, accept-risk, verify-fix, target-fix, reopen) that write ledger events with idempotency + validation (Deps: VULN-API-29-003) |
+| SPRINT_129_policy_reasoning | VULN-API-29-005 | TODO | Vuln Explorer API Guild, Policy Guild | src/VulnExplorer/StellaOps.VulnExplorer.Api | Implement simulation endpoint comparing `policy_from` vs `policy_to`, returning diffs without side effects; hook into Policy Engine batch eval (Deps: VULN-API-29-004) |
+| SPRINT_129_policy_reasoning | VULN-API-29-006 | TODO | Vuln Explorer API Guild | src/VulnExplorer/StellaOps.VulnExplorer.Api | Integrate resolver results with Graph Explorer: include shortest path metadata, line up deep-link parameters, expose `paths` array in details (Deps: VULN-API-29-005) |
+| SPRINT_129_policy_reasoning | VULN-API-29-007 | TODO | Vuln Explorer API Guild, Security Guild | src/VulnExplorer/StellaOps.VulnExplorer.Api | Enforce RBAC/ABAC scopes; implement CSRF/anti-forgery checks for Console; secure attachment URLs; audit logging (Deps: VULN-API-29-006) |
+| SPRINT_129_policy_reasoning | VULN-API-29-008 | TODO | Vuln Explorer API Guild | src/VulnExplorer/StellaOps.VulnExplorer.Api | Build export orchestrator producing signed bundles (manifest, NDJSON, checksums, signature). Integrate with Findings Ledger for evidence and Policy Engine metadata (Deps: VULN-API-29-007) |
+| SPRINT_129_policy_reasoning | VULN-API-29-009 | TODO | Vuln Explorer API Guild, Observability Guild | src/VulnExplorer/StellaOps.VulnExplorer.Api | Instrument metrics (`vuln_list_latency`, `vuln_simulation_latency`, `vuln_export_duration`, `vuln_workflow_events_total`), structured logs, and traces; publish dashboards/alerts (Deps: VULN-API-29-008) |
+| SPRINT_129_policy_reasoning | VULN-API-29-010 | TODO | Vuln Explorer API Guild, QA Guild | src/VulnExplorer/StellaOps.VulnExplorer.Api | Provide unit/integration/perf tests (5M findings), fuzz query validation, determinism harness comparing repeated queries (Deps: VULN-API-29-009) |
+| SPRINT_129_policy_reasoning | VULN-API-29-011 | TODO | Vuln Explorer API Guild, DevOps Guild | src/VulnExplorer/StellaOps.VulnExplorer.Api | Package deployment (Helm/Compose), health checks, CI smoke, offline kit steps, and scaling guidance (Deps: VULN-API-29-010) |
+| SPRINT_131_scanner_surface | `SCANNER-ANALYZERS-DENO-26-009` | TODO | Deno Analyzer Guild, Signals Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Deno) |  | SCANNER-ANALYZERS-DENO-26-008 |
+| SPRINT_131_scanner_surface | `SCANNER-ANALYZERS-DENO-26-010` | TODO | Deno Analyzer Guild, DevOps Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Deno) |  | SCANNER-ANALYZERS-DENO-26-009 |
+| SPRINT_131_scanner_surface | `SCANNER-ANALYZERS-DENO-26-011` | TODO | Deno Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Deno) |  | SCANNER-ANALYZERS-DENO-26-010 |
+| SPRINT_131_scanner_surface | `SCANNER-ANALYZERS-JAVA-21-005` | TODO | Java Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Java) |  | — |
+| SPRINT_131_scanner_surface | `SCANNER-ANALYZERS-JAVA-21-006` | TODO | Java Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Java) |  | SCANNER-ANALYZERS-JAVA-21-005 |
+| SPRINT_131_scanner_surface | `SCANNER-ANALYZERS-JAVA-21-007` | TODO | Java Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Java) |  | SCANNER-ANALYZERS-JAVA-21-006 |
+| SPRINT_131_scanner_surface | `SCANNER-ANALYZERS-JAVA-21-008` | BLOCKED (2025-10-27) | Java Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Java) |  | SCANNER-ANALYZERS-JAVA-21-007 |
+| SPRINT_131_scanner_surface | `SCANNER-ANALYZERS-JAVA-21-009` | TODO | Java Analyzer Guild, QA Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Java) |  | SCANNER-ANALYZERS-JAVA-21-008 |
+| SPRINT_131_scanner_surface | `SCANNER-ANALYZERS-JAVA-21-010` | TODO | Java Analyzer Guild, Signals Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Java) |  | SCANNER-ANALYZERS-JAVA-21-009 |
+| SPRINT_131_scanner_surface | `SCANNER-ANALYZERS-JAVA-21-011` | TODO | Java Analyzer Guild, DevOps Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Java) |  | SCANNER-ANALYZERS-JAVA-21-010 |
+| SPRINT_131_scanner_surface | `SCANNER-ANALYZERS-LANG-11-001` | TODO | StellaOps.Scanner EPDR Guild, Language Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.DotNet) |  | SCANNER-ANALYZERS-LANG-10-309R |
+| SPRINT_132_scanner_surface | `SCANNER-ANALYZERS-LANG-11-002` | TODO | StellaOps.Scanner EPDR Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.DotNet) |  | SCANNER-ANALYZERS-LANG-11-001 |
+| SPRINT_132_scanner_surface | `SCANNER-ANALYZERS-LANG-11-003` | TODO | StellaOps.Scanner EPDR Guild, Signals Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.DotNet) |  | SCANNER-ANALYZERS-LANG-11-002 |
+| SPRINT_132_scanner_surface | `SCANNER-ANALYZERS-LANG-11-004` | TODO | StellaOps.Scanner EPDR Guild, SBOM Service Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.DotNet) |  | SCANNER-ANALYZERS-LANG-11-003 |
+| SPRINT_132_scanner_surface | `SCANNER-ANALYZERS-LANG-11-005` | TODO | StellaOps.Scanner EPDR Guild, QA Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.DotNet) |  | SCANNER-ANALYZERS-LANG-11-004 |
+| SPRINT_132_scanner_surface | `SCANNER-ANALYZERS-NATIVE-20-001` | TODO | Native Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Native) |  | — |
+| SPRINT_132_scanner_surface | `SCANNER-ANALYZERS-NATIVE-20-002` | TODO | Native Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Native) |  | SCANNER-ANALYZERS-NATIVE-20-001 |
+| SPRINT_132_scanner_surface | `SCANNER-ANALYZERS-NATIVE-20-003` | TODO | Native Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Native) |  | SCANNER-ANALYZERS-NATIVE-20-002 |
+| SPRINT_132_scanner_surface | `SCANNER-ANALYZERS-NATIVE-20-004` | TODO | Native Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Native) |  | SCANNER-ANALYZERS-NATIVE-20-003 |
+| SPRINT_132_scanner_surface | `SCANNER-ANALYZERS-NATIVE-20-005` | TODO | Native Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Native) |  | SCANNER-ANALYZERS-NATIVE-20-004 |
+| SPRINT_132_scanner_surface | `SCANNER-ANALYZERS-NATIVE-20-006` | TODO | Native Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Native) |  | SCANNER-ANALYZERS-NATIVE-20-005 |
+| SPRINT_132_scanner_surface | `SCANNER-ANALYZERS-NATIVE-20-007` | TODO | Native Analyzer Guild, SBOM Service Guild (src/Scanner/StellaOps.Scanner.Analyzers.Native) |  | SCANNER-ANALYZERS-NATIVE-20-006 |
+| SPRINT_132_scanner_surface | `SCANNER-ANALYZERS-NATIVE-20-008` | TODO | Native Analyzer Guild, QA Guild (src/Scanner/StellaOps.Scanner.Analyzers.Native) |  | SCANNER-ANALYZERS-NATIVE-20-007 |
+| SPRINT_132_scanner_surface | `SCANNER-ANALYZERS-NATIVE-20-009` | TODO | Native Analyzer Guild, Signals Guild (src/Scanner/StellaOps.Scanner.Analyzers.Native) |  | SCANNER-ANALYZERS-NATIVE-20-008 |
+| SPRINT_132_scanner_surface | `SCANNER-ANALYZERS-NATIVE-20-010` | TODO | Native Analyzer Guild, DevOps Guild (src/Scanner/StellaOps.Scanner.Analyzers.Native) |  | SCANNER-ANALYZERS-NATIVE-20-009 |
+| SPRINT_132_scanner_surface | `SCANNER-ANALYZERS-NODE-22-001` | TODO | Node Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Node) |  | — |
+| SPRINT_132_scanner_surface | `SCANNER-ANALYZERS-NODE-22-002` | TODO | Node Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Node) |  | SCANNER-ANALYZERS-NODE-22-001 |
+| SPRINT_132_scanner_surface | `SCANNER-ANALYZERS-NODE-22-003` | TODO | Node Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Node) |  | SCANNER-ANALYZERS-NODE-22-002 |
+| SPRINT_132_scanner_surface | `SCANNER-ANALYZERS-NODE-22-004` | TODO | Node Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Node) |  | SCANNER-ANALYZERS-NODE-22-003 |
+| SPRINT_132_scanner_surface | `SCANNER-ANALYZERS-NODE-22-005` | TODO | Node Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Node) |  | SCANNER-ANALYZERS-NODE-22-004 |
+| SPRINT_133_scanner_surface | `SCANNER-ANALYZERS-NODE-22-006` | TODO | Node Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Node) |  | SCANNER-ANALYZERS-NODE-22-005 |
+| SPRINT_133_scanner_surface | `SCANNER-ANALYZERS-NODE-22-007` | TODO | Node Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Node) |  | SCANNER-ANALYZERS-NODE-22-006 |
+| SPRINT_133_scanner_surface | `SCANNER-ANALYZERS-NODE-22-008` | TODO | Node Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Node) |  | SCANNER-ANALYZERS-NODE-22-007 |
+| SPRINT_133_scanner_surface | `SCANNER-ANALYZERS-NODE-22-009` | TODO | Node Analyzer Guild, QA Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Node) |  | SCANNER-ANALYZERS-NODE-22-008 |
+| SPRINT_133_scanner_surface | `SCANNER-ANALYZERS-NODE-22-010` | TODO | Node Analyzer Guild, Signals Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Node) |  | SCANNER-ANALYZERS-NODE-22-009 |
+| SPRINT_133_scanner_surface | `SCANNER-ANALYZERS-NODE-22-011` | TODO | Node Analyzer Guild, DevOps Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Node) |  | SCANNER-ANALYZERS-NODE-22-010 |
+| SPRINT_133_scanner_surface | `SCANNER-ANALYZERS-NODE-22-012` | TODO | Node Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Node) |  | SCANNER-ANALYZERS-NODE-22-011 |
+| SPRINT_133_scanner_surface | `SCANNER-ANALYZERS-PHP-27-001` | TODO | PHP Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Php) |  | — |
+| SPRINT_133_scanner_surface | `SCANNER-ANALYZERS-PHP-27-002` | TODO | PHP Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Php) |  | SCANNER-ANALYZERS-PHP-27-001 |
+| SPRINT_133_scanner_surface | `SCANNER-ANALYZERS-PHP-27-003` | TODO | PHP Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Php) |  | SCANNER-ANALYZERS-PHP-27-002 |
+| SPRINT_133_scanner_surface | `SCANNER-ANALYZERS-PHP-27-004` | TODO | PHP Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Php) |  | SCANNER-ANALYZERS-PHP-27-003 |
+| SPRINT_133_scanner_surface | `SCANNER-ANALYZERS-PHP-27-005` | TODO | PHP Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Php) |  | SCANNER-ANALYZERS-PHP-27-004 |
+| SPRINT_133_scanner_surface | `SCANNER-ANALYZERS-PHP-27-006` | TODO | PHP Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Php) |  | SCANNER-ANALYZERS-PHP-27-005 |
+| SPRINT_133_scanner_surface | `SCANNER-ANALYZERS-PHP-27-007` | TODO | PHP Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Php) |  | SCANNER-ANALYZERS-PHP-27-006 |
+| SPRINT_134_scanner_surface | `SCANNER-ANALYZERS-PHP-27-008` | TODO | PHP Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Php) |  | SCANNER-ANALYZERS-PHP-27-002 |
+| SPRINT_134_scanner_surface | `SCANNER-ANALYZERS-PHP-27-009` | TODO | PHP Analyzer Guild, QA Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Php) |  | SCANNER-ANALYZERS-PHP-27-007 |
+| SPRINT_134_scanner_surface | `SCANNER-ANALYZERS-PHP-27-010` | TODO | PHP Analyzer Guild, Signals Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Php) |  | SCANNER-ANALYZERS-PHP-27-009 |
+| SPRINT_134_scanner_surface | `SCANNER-ANALYZERS-PHP-27-011` | TODO | PHP Analyzer Guild, DevOps Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Php) |  | SCANNER-ANALYZERS-PHP-27-010 |
+| SPRINT_134_scanner_surface | `SCANNER-ANALYZERS-PHP-27-012` | TODO | PHP Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Php) |  | SCANNER-ANALYZERS-PHP-27-011 |
+| SPRINT_134_scanner_surface | `SCANNER-ANALYZERS-PYTHON-23-001` | TODO | Python Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Python) |  | — |
+| SPRINT_134_scanner_surface | `SCANNER-ANALYZERS-PYTHON-23-002` | TODO | Python Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Python) |  | SCANNER-ANALYZERS-PYTHON-23-001 |
+| SPRINT_134_scanner_surface | `SCANNER-ANALYZERS-PYTHON-23-003` | TODO | Python Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Python) |  | SCANNER-ANALYZERS-PYTHON-23-002 |
+| SPRINT_134_scanner_surface | `SCANNER-ANALYZERS-PYTHON-23-004` | TODO | Python Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Python) |  | SCANNER-ANALYZERS-PYTHON-23-003 |
+| SPRINT_134_scanner_surface | `SCANNER-ANALYZERS-PYTHON-23-005` | TODO | Python Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Python) |  | SCANNER-ANALYZERS-PYTHON-23-004 |
+| SPRINT_134_scanner_surface | `SCANNER-ANALYZERS-PYTHON-23-006` | TODO | Python Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Python) |  | SCANNER-ANALYZERS-PYTHON-23-005 |
+| SPRINT_134_scanner_surface | `SCANNER-ANALYZERS-PYTHON-23-007` | TODO | Python Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Python) |  | SCANNER-ANALYZERS-PYTHON-23-006 |
+| SPRINT_134_scanner_surface | `SCANNER-ANALYZERS-PYTHON-23-008` | TODO | Python Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Python) |  | SCANNER-ANALYZERS-PYTHON-23-007 |
+| SPRINT_134_scanner_surface | `SCANNER-ANALYZERS-PYTHON-23-009` | TODO | Python Analyzer Guild, QA Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Python) |  | SCANNER-ANALYZERS-PYTHON-23-008 |
+| SPRINT_134_scanner_surface | `SCANNER-ANALYZERS-PYTHON-23-010` | TODO | Python Analyzer Guild, Signals Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Python) |  | SCANNER-ANALYZERS-PYTHON-23-009 |
+| SPRINT_134_scanner_surface | `SCANNER-ANALYZERS-PYTHON-23-011` | TODO | Python Analyzer Guild, DevOps Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Python) |  | SCANNER-ANALYZERS-PYTHON-23-010 |
+| SPRINT_135_scanner_surface | `SCANNER-ANALYZERS-PYTHON-23-012` | TODO | Python Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Analyzers.Lang.Python) |  | SCANNER-ANALYZERS-PYTHON-23-011 |
+| SPRINT_135_scanner_surface | `SCANNER-ANALYZERS-RUBY-28-001` | TODO | Ruby Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Ruby) |  | — |
+| SPRINT_135_scanner_surface | `SCANNER-ANALYZERS-RUBY-28-002` | TODO | Ruby Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Ruby) |  | SCANNER-ANALYZERS-RUBY-28-001 |
+| SPRINT_135_scanner_surface | `SCANNER-ANALYZERS-RUBY-28-003` | TODO | Ruby Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Ruby) |  | SCANNER-ANALYZERS-RUBY-28-002 |
+| SPRINT_135_scanner_surface | `SCANNER-ANALYZERS-RUBY-28-004` | TODO | Ruby Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Ruby) |  | SCANNER-ANALYZERS-RUBY-28-003 |
+| SPRINT_135_scanner_surface | `SCANNER-ANALYZERS-RUBY-28-005` | TODO | Ruby Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Ruby) |  | SCANNER-ANALYZERS-RUBY-28-004 |
+| SPRINT_135_scanner_surface | `SCANNER-ANALYZERS-RUBY-28-006` | TODO | Ruby Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Ruby) |  | SCANNER-ANALYZERS-RUBY-28-005 |
+| SPRINT_135_scanner_surface | `SCANNER-ANALYZERS-RUBY-28-007` | TODO | Ruby Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Ruby) |  | SCANNER-ANALYZERS-RUBY-28-006 |
+| SPRINT_135_scanner_surface | `SCANNER-ANALYZERS-RUBY-28-008` | TODO | Ruby Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Ruby) |  | SCANNER-ANALYZERS-RUBY-28-007 |
+| SPRINT_135_scanner_surface | `SCANNER-ANALYZERS-RUBY-28-009` | TODO | Ruby Analyzer Guild, QA Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Ruby) |  | SCANNER-ANALYZERS-RUBY-28-008 |
+| SPRINT_135_scanner_surface | `SCANNER-ANALYZERS-RUBY-28-010` | TODO | Ruby Analyzer Guild, Signals Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Ruby) |  | SCANNER-ANALYZERS-RUBY-28-009 |
+| SPRINT_135_scanner_surface | `SCANNER-ANALYZERS-RUBY-28-011` | TODO | Ruby Analyzer Guild, DevOps Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Ruby) |  | SCANNER-ANALYZERS-RUBY-28-010 |
+| SPRINT_135_scanner_surface | `SCANNER-ANALYZERS-RUBY-28-012` | TODO | Ruby Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Ruby) |  | SCANNER-ANALYZERS-RUBY-28-011 |
+| SPRINT_135_scanner_surface | `SCANNER-ENTRYTRACE-18-502` | TODO | EntryTrace Guild (src/Scanner/__Libraries/StellaOps.Scanner.EntryTrace) |  | SCANNER-ENTRYTRACE-18-508 |
+| SPRINT_135_scanner_surface | `SCANNER-ENTRYTRACE-18-503` | TODO | EntryTrace Guild (src/Scanner/__Libraries/StellaOps.Scanner.EntryTrace) |  | SCANNER-ENTRYTRACE-18-502 |
+| SPRINT_136_scanner_surface | `SCANNER-EMIT-15-001` | TODO | Scanner Emit Guild (src/Scanner/__Libraries/StellaOps.Scanner.Emit) |  | SCANNER-SURFACE-04 |
+| SPRINT_136_scanner_surface | `SCANNER-ENG-0020` | TODO | Scanner Guild (docs/modules/scanner) |  | — |
+| SPRINT_136_scanner_surface | `SCANNER-ENG-0021` | TODO | Scanner Guild (docs/modules/scanner) |  | — |
+| SPRINT_136_scanner_surface | `SCANNER-ENG-0022` | TODO | Scanner Guild, Policy Guild (docs/modules/scanner) |  | — |
+| SPRINT_136_scanner_surface | `SCANNER-ENG-0023` | TODO | Scanner Guild, Offline Kit Guild, Policy Guild (docs/modules/scanner) |  | — |
+| SPRINT_136_scanner_surface | `SCANNER-ENG-0024` | TODO | Scanner Guild (docs/modules/scanner) |  | — |
+| SPRINT_136_scanner_surface | `SCANNER-ENG-0025` | TODO | Scanner Guild (docs/modules/scanner) |  | — |
+| SPRINT_136_scanner_surface | `SCANNER-ENG-0026` | TODO | Scanner Guild (docs/modules/scanner) |  | — |
+| SPRINT_136_scanner_surface | `SCANNER-ENG-0027` | TODO | Scanner Guild, Policy Guild, Offline Kit Guild (docs/modules/scanner) |  | — |
+| SPRINT_136_scanner_surface | `SCANNER-ENTRYTRACE-18-504` | TODO | EntryTrace Guild (src/Scanner/__Libraries/StellaOps.Scanner.EntryTrace) |  | SCANNER-ENTRYTRACE-18-503 |
+| SPRINT_136_scanner_surface | `SCANNER-ENTRYTRACE-18-505` | TODO | EntryTrace Guild (src/Scanner/__Libraries/StellaOps.Scanner.EntryTrace) |  | SCANNER-ENTRYTRACE-18-504 |
+| SPRINT_136_scanner_surface | `SCANNER-ENTRYTRACE-18-506` | TODO | EntryTrace Guild, Scanner WebService Guild (src/Scanner/__Libraries/StellaOps.Scanner.EntryTrace) |  | SCANNER-ENTRYTRACE-18-505 |
+| SPRINT_136_scanner_surface | `SCANNER-ENV-01` | TODO (2025-11-06) | Scanner Worker Guild (src/Scanner/StellaOps.Scanner.Worker) |  | — |
+| SPRINT_136_scanner_surface | `SCANNER-ENV-02` | TODO (2025-11-06) | Scanner WebService Guild, Ops Guild (src/Scanner/StellaOps.Scanner.WebService) |  | SCANNER-ENV-01 |
+| SPRINT_136_scanner_surface | `SCANNER-ENV-03` | TODO | BuildX Plugin Guild (src/Scanner/StellaOps.Scanner.Sbomer.BuildXPlugin) |  | SCANNER-ENV-02 |
+| SPRINT_136_scanner_surface | `SCANNER-EVENTS-16-301` | BLOCKED (2025-10-26) | Scanner WebService Guild (src/Scanner/StellaOps.Scanner.WebService) |  | — |
+| SPRINT_136_scanner_surface | `SCANNER-GRAPH-21-001` | TODO | Scanner WebService Guild, Cartographer Guild (src/Scanner/StellaOps.Scanner.WebService) |  | — |
+| SPRINT_136_scanner_surface | `SCANNER-LNM-21-001` | TODO | Scanner WebService Guild, Policy Guild (src/Scanner/StellaOps.Scanner.WebService) |  | — |
+| SPRINT_136_scanner_surface | `SCANNER-LNM-21-002` | TODO | Scanner WebService Guild, UI Guild (src/Scanner/StellaOps.Scanner.WebService) |  | SCANNER-LNM-21-001 |
+| SPRINT_136_scanner_surface | `SCANNER-SECRETS-03` | TODO | BuildX Plugin Guild, Security Guild (src/Scanner/StellaOps.Scanner.Sbomer.BuildXPlugin) |  | SCANNER-SECRETS-02 |
+| SPRINT_136_scanner_surface | `SCANNER-SORT-02` | TODO | Scanner Core Guild (src/Scanner/__Libraries/StellaOps.Scanner.Core) |  | SCANNER-EMIT-15-001 |
+| SPRINT_136_scanner_surface | `SCANNER-SURFACE-04` | TODO | Scanner Worker Guild (src/Scanner/StellaOps.Scanner.Worker) |  | SCANNER-SURFACE-01, SURFACE-FS-03 |
+| SPRINT_136_scanner_surface | `SCHED-SURFACE-02` | TODO | Scheduler Worker Guild (src/Scheduler/__Libraries/StellaOps.Scheduler.Worker) |  | SURFACE-FS-02, SCHED-SURFACE-01. Reference `docs/modules/scanner/design/surface-fs-consumers.md` §3 for implementation checklist |
+| SPRINT_136_scanner_surface | `SURFACE-ENV-02` | DOING (2025-11-02) | Scanner Guild (src/Scanner/__Libraries/StellaOps.Scanner.Surface.Env) |  | SURFACE-ENV-01 |
+| SPRINT_136_scanner_surface | `SURFACE-ENV-03` | TODO | Scanner Guild (src/Scanner/__Libraries/StellaOps.Scanner.Surface.Env) |  | SURFACE-ENV-02 |
+| SPRINT_136_scanner_surface | `SURFACE-ENV-04` | TODO | Zastava Guild (src/Scanner/__Libraries/StellaOps.Scanner.Surface.Env) |  | SURFACE-ENV-02 |
+| SPRINT_136_scanner_surface | `SURFACE-ENV-05` | TODO | Ops Guild (src/Scanner/__Libraries/StellaOps.Scanner.Surface.Env) |  | SURFACE-ENV-03, SURFACE-ENV-04 |
+| SPRINT_136_scanner_surface | `SURFACE-FS-03` | TODO | Scanner Guild (src/Scanner/__Libraries/StellaOps.Scanner.Surface.FS) |  | SURFACE-FS-02 |
+| SPRINT_136_scanner_surface | `SURFACE-FS-04` | TODO | Zastava Guild (src/Scanner/__Libraries/StellaOps.Scanner.Surface.FS) |  | SURFACE-FS-02 |
+| SPRINT_136_scanner_surface | `SURFACE-FS-05` | TODO | Scanner Guild, Scheduler Guild (src/Scanner/__Libraries/StellaOps.Scanner.Surface.FS) |  | SURFACE-FS-03 |
+| SPRINT_136_scanner_surface | `SURFACE-FS-06` | TODO | Docs Guild (src/Scanner/__Libraries/StellaOps.Scanner.Surface.FS) |  | SURFACE-FS-02..05 |
+| SPRINT_136_scanner_surface | `SURFACE-FS-07` | TODO | Scanner Guild (src/Scanner/__Libraries/StellaOps.Scanner.Surface.FS) |  | SCANNER-SURFACE-04 |
+| SPRINT_136_scanner_surface | `SURFACE-SECRETS-01` | DOING (2025-11-02) | Scanner Guild, Security Guild (src/Scanner/__Libraries/StellaOps.Scanner.Surface.Secrets) |  | — |
+| SPRINT_136_scanner_surface | `SURFACE-SECRETS-02` | DOING (2025-11-02) | Scanner Guild (src/Scanner/__Libraries/StellaOps.Scanner.Surface.Secrets) |  | SURFACE-SECRETS-01 |
+| SPRINT_136_scanner_surface | `SURFACE-SECRETS-03` | TODO | Scanner Guild (src/Scanner/__Libraries/StellaOps.Scanner.Surface.Secrets) |  | SURFACE-SECRETS-02 |
+| SPRINT_136_scanner_surface | `SURFACE-SECRETS-04` | TODO | Scanner Guild (src/Scanner/__Libraries/StellaOps.Scanner.Surface.Secrets) |  | SURFACE-SECRETS-02 |
+| SPRINT_136_scanner_surface | `SURFACE-SECRETS-05` | TODO | Zastava Guild (src/Scanner/__Libraries/StellaOps.Scanner.Surface.Secrets) |  | SURFACE-SECRETS-02 |
+| SPRINT_136_scanner_surface | `SURFACE-SECRETS-06` | TODO | Ops Guild (src/Scanner/__Libraries/StellaOps.Scanner.Surface.Secrets) |  | SURFACE-SECRETS-03 |
+| SPRINT_136_scanner_surface | `SURFACE-VAL-01` | DOING (2025-11-01) | Scanner Guild, Security Guild (src/Scanner/__Libraries/StellaOps.Scanner.Surface.Validation) |  | SURFACE-FS-01, SURFACE-ENV-01 |
+| SPRINT_136_scanner_surface | `SURFACE-VAL-02` | TODO | Scanner Guild (src/Scanner/__Libraries/StellaOps.Scanner.Surface.Validation) |  | SURFACE-VAL-01, SURFACE-ENV-02, SURFACE-FS-02 |
+| SPRINT_136_scanner_surface | `SURFACE-VAL-03` | TODO | Scanner Guild, Analyzer Guild (src/Scanner/__Libraries/StellaOps.Scanner.Surface.Validation) |  | SURFACE-VAL-02 |
+| SPRINT_136_scanner_surface | `SURFACE-VAL-04` | TODO | Scanner Guild, Zastava Guild (src/Scanner/__Libraries/StellaOps.Scanner.Surface.Validation) |  | SURFACE-VAL-02 |
+| SPRINT_136_scanner_surface | `SURFACE-VAL-05` | TODO | Docs Guild (src/Scanner/__Libraries/StellaOps.Scanner.Surface.Validation) |  | SURFACE-VAL-02 |
+| SPRINT_136_scanner_surface | `ZASTAVA-SURFACE-02` | TODO | Zastava Observer Guild (src/Zastava/StellaOps.Zastava.Observer) |  | SURFACE-FS-02, ZASTAVA-SURFACE-01. Reference `docs/modules/scanner/design/surface-fs-consumers.md` §4 for integration steps |
+| SPRINT_138_scanner_ruby_parity | `SCANNER-ENG-0008` | TODO | EntryTrace Guild, QA Guild (src/Scanner/__Libraries/StellaOps.Scanner.EntryTrace) |  | — |
+| SPRINT_138_scanner_ruby_parity | `SCANNER-ENG-0010` | TODO | PHP Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Php) |  | SCANNER-ANALYZERS-PHP-27-001..012 |
+| SPRINT_138_scanner_ruby_parity | `SCANNER-ENG-0011` | TODO | Language Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Deno) |  | — |
+| SPRINT_138_scanner_ruby_parity | `SCANNER-ENG-0012` | TODO | Language Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Dart) |  | — |
+| SPRINT_138_scanner_ruby_parity | `SCANNER-ENG-0013` | TODO | Swift Analyzer Guild (src/Scanner/StellaOps.Scanner.Analyzers.Lang.Swift) |  | — |
+| SPRINT_138_scanner_ruby_parity | `SCANNER-ENG-0014` | TODO | Runtime Guild, Zastava Guild (docs/modules/scanner) |  | — |
+| SPRINT_140_runtime_signals | GRAPH-INDEX-28-007 | TODO |  |  |  |
+| SPRINT_140_runtime_signals | GRAPH-INDEX-28-008 | TODO |  |  |  |
+| SPRINT_140_runtime_signals | GRAPH-INDEX-28-009 | TODO |  |  |  |
+| SPRINT_140_runtime_signals | GRAPH-INDEX-28-010 | TODO |  |  |  |
+| SPRINT_140_runtime_signals | SBOM-AIAI-31-001 | TODO |  |  |  |
+| SPRINT_140_runtime_signals | SBOM-AIAI-31-002 | TODO |  |  |  |
+| SPRINT_140_runtime_signals | SBOM-CONSOLE-23-001 | TODO |  |  |  |
+| SPRINT_140_runtime_signals | SBOM-CONSOLE-23-002 | TODO |  |  |  |
+| SPRINT_140_runtime_signals | SBOM-ORCH-32-001 | TODO |  |  |  |
+| SPRINT_140_runtime_signals | SBOM-ORCH-33-001 | TODO |  |  |  |
+| SPRINT_140_runtime_signals | SBOM-ORCH-34-001 | TODO |  |  |  |
+| SPRINT_140_runtime_signals | SBOM-SERVICE-21-001 | BLOCKED |  |  |  |
+| SPRINT_140_runtime_signals | SBOM-SERVICE-21-002 | BLOCKED |  |  |  |
+| SPRINT_140_runtime_signals | SBOM-SERVICE-21-003 | BLOCKED |  |  |  |
+| SPRINT_140_runtime_signals | SBOM-SERVICE-21-004 | BLOCKED |  |  |  |
+| SPRINT_140_runtime_signals | SBOM-SERVICE-23-001 | TODO |  |  |  |
+| SPRINT_140_runtime_signals | SBOM-SERVICE-23-002 | TODO |  |  |  |
+| SPRINT_140_runtime_signals | SBOM-VULN-29-001 | TODO |  |  |  |
+| SPRINT_140_runtime_signals | SBOM-VULN-29-002 | TODO |  |  |  |
+| SPRINT_140_runtime_signals | SIGNALS-24-002 | DOING (2025-11-07) |  |  |  |
+| SPRINT_140_runtime_signals | SIGNALS-24-003 | DOING (2025-11-09) |  |  |  |
+| SPRINT_140_runtime_signals | SIGNALS-24-004 | BLOCKED (2025-10-27) |  |  |  |
+| SPRINT_140_runtime_signals | SIGNALS-24-005 | BLOCKED (2025-10-27) |  |  |  |
+| SPRINT_140_runtime_signals | ZASTAVA-ENV-01 | TODO |  |  |  |
+| SPRINT_140_runtime_signals | ZASTAVA-ENV-02 | TODO |  |  |  |
+| SPRINT_140_runtime_signals | ZASTAVA-SECRETS-01 | TODO |  |  |  |
+| SPRINT_140_runtime_signals | ZASTAVA-SECRETS-02 | TODO |  |  |  |
+| SPRINT_140_runtime_signals | ZASTAVA-SURFACE-01 | TODO |  |  |  |
+| SPRINT_140_runtime_signals | ZASTAVA-SURFACE-02 | TODO |  |  |  |
+| SPRINT_160_export_evidence | CLI-REPLAY-187-002 | TODO | CLI Guild · `docs/modules/cli/architecture.md` |  |  |
+| SPRINT_160_export_evidence | DVOFF-64-002 | TODO | DevPortal Offline + AirGap Controller Guilds |  |  |
+| SPRINT_160_export_evidence | EVID-CRYPTO-90-001 | TODO | Evidence Locker + Security Guilds · `ICryptoProviderRegistry` integration |  |  |
+| SPRINT_160_export_evidence | EVID-REPLAY-187-001 | TODO | Evidence Locker Guild · docs/modules/evidence-locker/architecture.md |  |  |
+| SPRINT_160_export_evidence | EXPORT-AIRGAP-56-001/002 | TODO | Exporter + Mirror Creator + DevOps Guilds |  |  |
+| SPRINT_160_export_evidence | EXPORT-AIRGAP-57-001 | TODO | Exporter Service + Evidence Locker Guild |  |  |
+| SPRINT_160_export_evidence | EXPORT-ATTEST-74-001/002 | TODO | Attestation Bundle + Exporter Guilds |  |  |
+| SPRINT_160_export_evidence | EXPORT-ATTEST-75-001/002 | TODO | Attestation Bundle + CLI + Exporter Guilds |  |  |
+| SPRINT_160_export_evidence | EXPORT-CRYPTO-90-001 | TODO | Exporter Service + Security Guilds |  |  |
+| SPRINT_160_export_evidence | EXPORT-OAS-61/62/63 | TODO | Exporter Service + API Governance + SDK Guilds |  |  |
+| SPRINT_160_export_evidence | RUNBOOK-REPLAY-187-004 | TODO | Docs/Ops Guild · `/docs/runbooks/replay_ops.md` |  |  |
+| SPRINT_160_export_evidence | TIMELINE-OBS-52-001 | TODO | Timeline Indexer Guild |  |  |
+| SPRINT_160_export_evidence | TIMELINE-OBS-52-002 | TODO | Timeline Indexer Guild |  |  |
+| SPRINT_160_export_evidence | TIMELINE-OBS-52-003 | TODO | Timeline Indexer Guild |  |  |
+| SPRINT_160_export_evidence | TIMELINE-OBS-52-004 | TODO | Timeline Indexer + Security Guilds |  |  |
+| SPRINT_160_export_evidence | TIMELINE-OBS-53-001 | TODO | Timeline Indexer + Evidence Locker Guilds |  |  |
+| SPRINT_161_evidencelocker | CLI-REPLAY-187-002 | TODO | CLI Guild (`src/Cli/StellaOps.Cli`) |  |  |
+| SPRINT_161_evidencelocker | EVID-CRYPTO-90-001 | TODO | Evidence Locker Guild · Security Guild |  |  |
+| SPRINT_161_evidencelocker | EVID-OBS-54-002 | TODO | Evidence Locker Guild (`src/EvidenceLocker/StellaOps.EvidenceLocker`) |  |  |
+| SPRINT_161_evidencelocker | EVID-REPLAY-187-001 | TODO | Evidence Locker Guild · Replay Delivery Guild |  |  |
+| SPRINT_161_evidencelocker | RUNBOOK-REPLAY-187-004 | TODO | Docs Guild · Ops Guild |  |  |
+| SPRINT_170_notifications_telemetry | NOTIFY-ATTEST-74-001/002 | **DOING / TODO** |  |  |  |
+| SPRINT_170_notifications_telemetry | NOTIFY-ATTEST-74-001/74-002 | TODO → DOING (prep) | Notifications Service Guild · Attestor Service Guild |  |  |
+| SPRINT_170_notifications_telemetry | NOTIFY-OAS-61-001 → 63-001 | **DOING / TODO** |  |  |  |
+| SPRINT_170_notifications_telemetry | NOTIFY-OAS-61-001 → NOTIFY-OAS-63-001 | TODO | Notifications Service Guild · API Contracts Guild · SDK Generator Guild |  |  |
+| SPRINT_170_notifications_telemetry | NOTIFY-OBS-51-001/55-001 | TODO | Notifications Service Guild · Observability Guild |  |  |
+| SPRINT_170_notifications_telemetry | NOTIFY-OBS-51-001/55-001 | TODO |  |  |  |
+| SPRINT_170_notifications_telemetry | NOTIFY-RISK-66-001 → 68-001 | TODO |  |  |  |
+| SPRINT_170_notifications_telemetry | NOTIFY-RISK-66-001 → NOTIFY-RISK-68-001 | TODO | Notifications Service Guild · Risk Engine Guild · Policy Guild |  |  |
+| SPRINT_170_notifications_telemetry | TELEMETRY-OBS-50-001/002 | **DOING / TODO** |  |  |  |
+| SPRINT_170_notifications_telemetry | TELEMETRY-OBS-50-001/50-002 | TODO → DOING (scaffolding) | Telemetry Core Guild |  |  |
+| SPRINT_170_notifications_telemetry | TELEMETRY-OBS-51-001/002 | TODO |  |  |  |
+| SPRINT_170_notifications_telemetry | TELEMETRY-OBS-51-001/51-002 | TODO | Telemetry Core Guild · Observability Guild · Security Guild |  |  |
+| SPRINT_170_notifications_telemetry | TELEMETRY-OBS-55-001/56-001 | TODO | Telemetry Core Guild · Observability Guild |  |  |
+| SPRINT_170_notifications_telemetry | TELEMETRY-OBS-55-001/56-001 | TODO |  |  |  |
+| SPRINT_301_docs_tasks_md_i | DOCS-AIAI-31-004 | DOING (2025-11-07) | Docs Guild · Console Guild |  | DOCS-AIAI-31-003; CONSOLE-VULN-29-001; CONSOLE-VEX-30-001; EXCITITOR-CONSOLE-23-001 |
+| SPRINT_301_docs_tasks_md_i | DOCS-AIAI-31-005 | BLOCKED (2025-11-03) | Docs Guild · DevEx/CLI Guild |  | DOCS-AIAI-31-004; CLI-VULN-29-001; CLI-VEX-30-001 |
+| SPRINT_301_docs_tasks_md_i | DOCS-AIAI-31-006 | BLOCKED (2025-11-03) | Docs Guild · Policy Guild |  | DOCS-AIAI-31-005; POLICY-ENGINE-31-001 |
+| SPRINT_301_docs_tasks_md_i | DOCS-AIAI-31-008 | BLOCKED (2025-11-03) | Docs Guild · SBOM Service Guild |  | DOCS-AIAI-31-007; SBOM-AIAI-31-001 |
+| SPRINT_301_docs_tasks_md_i | DOCS-AIAI-31-009 | BLOCKED (2025-11-03) | Docs Guild · DevOps Guild |  | DOCS-AIAI-31-008; DEVOPS-AIAI-31-001 |
+| SPRINT_301_docs_tasks_md_i | DOCS-AIRGAP-56-001 | TODO | Docs Guild · AirGap Controller Guild |  | — |
+| SPRINT_301_docs_tasks_md_i | DOCS-AIRGAP-56-002 | TODO | Docs Guild · DevOps Guild |  | DOCS-AIRGAP-56-001 |
+| SPRINT_301_docs_tasks_md_i | DOCS-AIRGAP-56-003 | TODO | Docs Guild · Exporter Guild |  | DOCS-AIRGAP-56-002 |
+| SPRINT_301_docs_tasks_md_i | DOCS-AIRGAP-56-004 | TODO | Docs Guild · Deployment Guild |  | DOCS-AIRGAP-56-003 |
+| SPRINT_301_docs_tasks_md_i | DOCS-AIRGAP-57-001 | TODO | Docs Guild · AirGap Time Guild |  | DOCS-AIRGAP-56-004 |
+| SPRINT_301_docs_tasks_md_i | DOCS-AIRGAP-57-002 | TODO | Docs Guild · Console Guild |  | DOCS-AIRGAP-57-001 |
+| SPRINT_301_docs_tasks_md_i | DOCS-CLI-DET-01 | TODO | Docs Guild · DevEx/CLI Guild |  | CLI-SBOM-60-001; CLI-SBOM-60-002 |
+| SPRINT_301_docs_tasks_md_i | DOCS-POLICY-DET-01 | TODO | Docs Guild · Policy Guild |  | POLICY-DET backlog |
+| SPRINT_301_docs_tasks_md_i | DOCS-SCANNER-DET-01 | DOING (2025-11-09) | Docs Guild · Scanner Guild |  | Sprint 136 outputs; scanner determinism fixtures |
+| SPRINT_401_reachability_evidence_chain | AUTH-REACH-401-005 | TODO | Authority & Signer Guilds (`src/Authority/StellaOps.Authority`, `src/Signer/StellaOps.Signer`) |  |  |
+| SPRINT_401_reachability_evidence_chain | BENCH-AUTO-401-019 | TODO | Benchmarks Guild (`docs/benchmarks/vex-evidence-playbook.md`, `scripts/bench/**`) |  |  |
+| SPRINT_401_reachability_evidence_chain | CLI-EDITOR-401-004 | TODO | CLI Guild (`src/Cli/StellaOps.Cli`, `docs/policy/lifecycle.md`) |  |  |
+| SPRINT_401_reachability_evidence_chain | CLI-VEX-401-011 | TODO | verify |  |  |
+| SPRINT_401_reachability_evidence_chain | DOCS-DSL-401-005 | TODO | Docs Guild (`docs/policy/dsl.md`, `docs/policy/lifecycle.md`) |  |  |
+| SPRINT_401_reachability_evidence_chain | DOCS-RUNBOOK-401-017 | TODO | Docs Guild · Ops Guild (`docs/runbooks/reachability-runtime.md`, `docs/reachability/DELIVERY_GUIDE.md`) |  |  |
+| SPRINT_401_reachability_evidence_chain | DOCS-VEX-401-012 | TODO | Docs Guild (`docs/benchmarks/vex-evidence-playbook.md`, `bench/README.md`) |  |  |
+| SPRINT_401_reachability_evidence_chain | DSSE-CLI-401-021 | TODO | CLI Guild · DevOps Guild (`src/Cli/StellaOps.Cli`, `scripts/ci/attest-*`, `docs/modules/attestor/architecture.md`) |  |  |
+| SPRINT_401_reachability_evidence_chain | DSSE-DOCS-401-022 | TODO | Docs Guild · Attestor Guild (`docs/ci/dsse-build-flow.md`, `docs/modules/attestor/architecture.md`) |  |  |
+| SPRINT_401_reachability_evidence_chain | DSSE-LIB-401-020 | TODO | Attestor Guild · Platform Guild (`src/Attestor/StellaOps.Attestation`, `src/Attestor/StellaOps.Attestor.Envelope`) |  |  |
+| SPRINT_401_reachability_evidence_chain | GAP-DOC-008 | TODO | Docs Guild (`docs/reachability/function-level-evidence.md`, `docs/09_API_CLI_REFERENCE.md`, `docs/api/policy.md`) |  |  |
+| SPRINT_401_reachability_evidence_chain | GAP-POL-005 | TODO | Policy Guild (`src/Policy/StellaOps.Policy.Engine`, `docs/modules/policy/architecture.md`, `docs/reachability/function-level-evidence.md`) |  |  |
+| SPRINT_401_reachability_evidence_chain | GAP-REP-004 | TODO | BE-Base Platform Guild (`src/__Libraries/StellaOps.Replay.Core`, `docs/replay/DETERMINISTIC_REPLAY.md`) |  |  |
+| SPRINT_401_reachability_evidence_chain | GAP-SIG-003 | TODO | Signals Guild (`src/Signals/StellaOps.Signals`, `docs/reachability/function-level-evidence.md`) |  |  |
+| SPRINT_401_reachability_evidence_chain | GAP-SYM-007 | TODO | Scanner Worker Guild & Docs Guild (`src/Scanner/StellaOps.Scanner.Models`, `docs/modules/scanner/architecture.md`, `docs/reachability/function-level-evidence.md`) |  |  |
+| SPRINT_401_reachability_evidence_chain | GAP-VEX-006 | TODO | Policy, Excititor, UI, CLI & Notify Guilds (`docs/modules/excititor/architecture.md`, `src/Cli/StellaOps.Cli`, `src/UI/StellaOps.UI`, `docs/09_API_CLI_REFERENCE.md`) |  |  |
+| SPRINT_401_reachability_evidence_chain | GRAPH-CAS-401-001 | TODO | Scanner Worker Guild (`src/Scanner/StellaOps.Scanner.Worker`) |  |  |
+| SPRINT_401_reachability_evidence_chain | POLICY-ENGINE-401-003 | TODO | Policy Guild (`src/Policy/StellaOps.Policy.Engine`, `docs/modules/policy/architecture.md`) |  |  |
+| SPRINT_401_reachability_evidence_chain | POLICY-LIB-401-001 | TODO | Policy Guild (`src/Policy/StellaOps.PolicyDsl`, `docs/policy/dsl.md`) |  |  |
+| SPRINT_401_reachability_evidence_chain | POLICY-LIB-401-002 | TODO | Policy Guild, CLI Guild (`tests/Policy/StellaOps.PolicyDsl.Tests`, `policy/default.dsl`, `docs/policy/lifecycle.md`) |  |  |
+| SPRINT_401_reachability_evidence_chain | POLICY-VEX-401-006 | TODO | Policy Guild (`src/Policy/StellaOps.Policy.Engine`, `src/Policy/__Libraries/StellaOps.Policy`) |  |  |
+| SPRINT_401_reachability_evidence_chain | POLICY-VEX-401-010 | TODO | Policy Guild (`src/Policy/StellaOps.Policy.Engine/Vex`, `docs/modules/policy/architecture.md`, `docs/benchmarks/vex-evidence-playbook.md`) |  |  |
+| SPRINT_401_reachability_evidence_chain | PROV-BACKFILL-401-029 | DOING | Platform Guild (`docs/provenance/inline-dsse.md`, `scripts/publish_attestation_with_provenance.sh`) |  |  |
+| SPRINT_401_reachability_evidence_chain | PROV-INDEX-401-030 | TODO | Platform Guild · Ops Guild (`docs/provenance/inline-dsse.md`, `ops/mongo/indices/events_provenance_indices.js`) |  |  |
+| SPRINT_401_reachability_evidence_chain | QA-DOCS-401-008 | TODO | QA & Docs Guilds (`docs`, `tests/README.md`) |  |  |
+| SPRINT_401_reachability_evidence_chain | REACH-LATTICE-401-023 | TODO | Scanner Guild · Policy Guild (`docs/reachability/lattice.md`, `docs/modules/scanner/architecture.md`, `src/Scanner/StellaOps.Scanner.WebService`) |  |  |
+| SPRINT_401_reachability_evidence_chain | REPLAY-401-004 | TODO | BE-Base Platform Guild (`src/__Libraries/StellaOps.Replay.Core`) |  |  |
+| SPRINT_401_reachability_evidence_chain | RUNTIME-PROBE-401-010 | TODO | Runtime Signals Guild (`src/Signals/StellaOps.Signals.Runtime`, `ops/probes`) |  |  |
+| SPRINT_401_reachability_evidence_chain | SCAN-REACH-401-009 | TODO | Scanner Worker Guild (`src/Scanner/StellaOps.Scanner.Worker`, `src/Scanner/__Libraries`) |  |  |
+| SPRINT_401_reachability_evidence_chain | SCANNER-NATIVE-401-015 | TODO | Scanner Worker Guild (`src/Scanner/__Libraries/StellaOps.Scanner.Symbols.Native`, `src/Scanner/__Libraries/StellaOps.Scanner.CallGraph.Native`) |  |  |
+| SPRINT_401_reachability_evidence_chain | SIG-STORE-401-016 | TODO | Signals Guild · BE-Base Platform Guild (`src/Signals/StellaOps.Signals`, `src/__Libraries/StellaOps.Replay.Core`) |  |  |
+| SPRINT_401_reachability_evidence_chain | SIGN-VEX-401-018 | TODO | Signing Guild (`src/Signer/StellaOps.Signer`, `docs/modules/signer/architecture.md`) |  |  |
+| SPRINT_401_reachability_evidence_chain | SIGNALS-RUNTIME-401-002 | TODO | Signals Guild (`src/Signals/StellaOps.Signals`) |  |  |
+| SPRINT_401_reachability_evidence_chain | SIGNALS-SCORING-401-003 | TODO | Signals Guild (`src/Signals/StellaOps.Signals`) |  |  |
+| SPRINT_401_reachability_evidence_chain | SYMS-BUNDLE-401-014 | TODO | verify |  |  |
+| SPRINT_401_reachability_evidence_chain | SYMS-CLIENT-401-012 | TODO | Symbols Guild (`src/Symbols/StellaOps.Symbols.Client`, `src/Scanner/StellaOps.Scanner.Symbolizer`) |  |  |
+| SPRINT_401_reachability_evidence_chain | SYMS-INGEST-401-013 | TODO | Symbols Guild, DevOps Guild (`src/Symbols/StellaOps.Symbols.Ingestor.Cli`, `docs/specs/SYMBOL_MANIFEST_v1.md`) |  |  |
+| SPRINT_401_reachability_evidence_chain | SYMS-SERVER-401-011 | TODO | Symbols Guild (`src/Symbols/StellaOps.Symbols.Server`) |  |  |
+| SPRINT_401_reachability_evidence_chain | UI-CLI-401-007 | TODO | UI & CLI Guilds (`src/Cli/StellaOps.Cli`, `src/UI/StellaOps.UI`) |  |  |
+| SPRINT_401_reachability_evidence_chain | UNCERTAINTY-POLICY-401-026 | TODO | Policy Guild · Concelier Guild (`docs/policy/dsl.md`, `docs/uncertainty/README.md`) |  |  |
+| SPRINT_401_reachability_evidence_chain | UNCERTAINTY-SCHEMA-401-024 | TODO | Signals Guild (`src/Signals/StellaOps.Signals`, `docs/uncertainty/README.md`) |  |  |
+| SPRINT_401_reachability_evidence_chain | UNCERTAINTY-SCORER-401-025 | TODO | Signals Guild (`src/Signals/StellaOps.Signals.Application`, `docs/uncertainty/README.md`) |  |  |
+| SPRINT_401_reachability_evidence_chain | UNCERTAINTY-UI-401-027 | TODO | UI Guild · CLI Guild (`src/UI/StellaOps.UI`, `src/Cli/StellaOps.Cli`, `docs/uncertainty/README.md`) |  |  |