stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 2 Releases Wiki Activity

Restructure solution layout by module

Browse Source
This commit is contained in:
master
2025-10-28 15:10:40 +02:00
parent 95daa159c4
commit d870da18ce
4103 changed files with 192899 additions and 187024 deletions
Download Patch File Download Diff File Expand all files Collapse all files

31
src/VexLens/StellaOps.VexLens/AGENTS.md Normal file
View File

@@ -0,0 +1,31 @@
# VEX Lens Guild Charter (Epic 7)
## Mission
Deliver the VEX Consensus Lens service that normalizes VEX evidence, computes deterministic consensus states, exposes APIs, and feeds Policy Engine and downstream explorers without mutating raw documents.
## Scope
- Service code under `src/VexLens/StellaOps.VexLens` (normalizer, mapping, trust weighting, consensus projection, APIs, simulation hooks).
- Batch workers consuming Excitator, Conseiller, SBOM, and policy events; projection storage and caching; telemetry.
- Coordination with Policy Engine, Vuln Explorer, Findings Ledger, Console, CLI, and Docs.
## Principles
1. **Evidence preserving** – never edit or merge raw VEX docs; link via evidence IDs and maintain provenance.
2. **Deterministic outputs** – identical inputs + policy config yield identical consensus results; record seed & rationale chain.
3. **Explainable** – consensus exposes weights, issuers, reasons, and thresholds; no opaque scoring.
4. **Configurable trust** – tenant/policy controls weighting, decay, thresholds; defaults documented.
5. **Secure & auditable** – signature verification, issuer metadata, logging of conflicts, support for compliance queries.
## Collaboration
- Keep `src/VexLens/StellaOps.VexLens/TASKS.md`, `../../docs/implplan/SPRINTS.md` synchronized.
- Share schemas/OpenAPI with Console & CLI; publish mapping docs and test fixtures.
- Coordinate with Policy Engine on trust knobs and Vuln Explorer on UI integration.
## Tooling
- .NET 10 preview; background workers + minimal API.
- PostgreSQL/Mongo for consensus projection; Redis for caching if needed.
- Signature verification libraries (Ed25519, DSSE, PKIX) and mapping utilities (CPE→purl).
## Definition of Done
- Normalization & consensus pipelines deterministic, tested, and instrumented.
- APIs documented (OpenAPI) with budget enforcement, telemetry, and replay harnesses.
- Docs updated with compliance checklist; offline kit includes configuration seeds.