sprints update

docs/implplan/blocked_tree.md

@@ -1,4 +1,4 @@
-# Blocked Task Dependency Tree (as of 2025-11-23)
+# Blocked Task Dependency Tree (as of 2025-11-25)
 
 - Concelier ingestion & Link-Not-Merge
   - MIRROR-CRT-56-001 (DONE; thin bundle v1 sample + hashes published)
@@ -21,11 +21,15 @@
 
 - Concelier orchestrator / policy / risk chain
   - POLICY-20-001 (API contract; DOING in Sprint 0114) -> CONCELIER-POLICY-20-003 -> CONCELIER-POLICY-23-001 -> CONCELIER-POLICY-23-002
-  - POLICY-AUTH-SIGNALS-LIB-115 (shared contract NuGet 0.1.0-alpha, Sprint 0115)
-    - CONCELIER-RISK-66-001 -> 66-002 -> 67-001 -> 68-001 -> 69-001
-    - CONCELIER-SIG-26-001
-    - CONCELIER-TEN-48-001
+  - POLICY-AUTH-SIGNALS-LIB-115 ✅ (0.1.0-alpha published 2025-11-19; shared contract available in `local-nugets/`)
+    - CONCELIER-RISK-66-001 -> 66-002 -> 67-001 -> 68-001 -> 69-001 (still blocked on POLICY-20-001 outputs and AUTH-TEN-47-001 adoption)
+    - CONCELIER-SIG-26-001 (blocked on SIGNALS-24-002 runtime feed)
+    - CONCELIER-TEN-48-001 (blocked on AUTH-TEN-47-001 and POLICY chain)
     - CONCELIER-VEXLENS-30-001 (also needs PREP-CONCELIER-VULN-29-001 & VEXLENS-30-005)
+  - VEX Lens chain (Sprint 0129)
+    - VEXLENS-30-001 blocked: normalization schema, issuer directory inputs, and API governance guidance not published.
+  - TaskRunner chain (Sprint 0157)
+    - TASKRUN-41-001 blocked: TaskRunner architecture/API contract and upstream Sprint 120/130/140 inputs not published; downstream airgap/OAS/OBS tasks inherit the block.
   - CONCELIER-VULN-29-004 <- CONCELIER-VULN-29-001
   - CONCELIER-ORCH-32-001 (needs CI/clean runner) -> 32-002 -> 33-001 -> 34-001
   - CONCELIER mirror/export chain
@@ -53,6 +57,9 @@
   - POLICY-CONSOLE-23-001 (needs Console API contract)
   - EXPORT-CONSOLE-23-001 (needs export bundle/job spec)
 
+- Findings Ledger
+  - LEDGER-29-006 ✅ (2025-10-19; attachment encryption & signed URLs delivered) 
+
 - Findings Ledger (Policy Engine sprints 0120–0122)
   - LEDGER-OAS-61-001 -> 61-002 -> 62-001 -> 63-001
   - LEDGER-AIRGAP-56-002 -> 57-001 -> 58-001
@@ -79,10 +86,24 @@
   - SCANNER-ANALYZERS-RUBY-28-006 (dev) packages CLI/docs; release packaging tracked in DevOps sprints.
 
 - Excititor graph & air-gap
-  - EXCITITOR-GRAPH-24-101 <- 21-005 ingest overlays
-  - EXCITITOR-GRAPH-24-102 <- 24-101
-  - EXCITITOR-AIRGAP-57-001 <- 56-001 wiring
-  - EXCITITOR-AIRGAP-58-001 <- 56-001 storage layout + Export Center manifest
+  - EXCITITOR-GRAPH-24-101 <- 21-005 ingest overlays (DONE 2025-11-24)
+  - EXCITITOR-GRAPH-24-102 <- 24-101 (DONE 2025-11-24)
+  - EXCITITOR-AIRGAP-57-001 <- 56-001 wiring (DONE 2025-11-24)
+  - EXCITITOR-AIRGAP-58-001 <- 56-001 storage layout + Export Center manifest (DONE 2025-11-24)
+
+- Program management
+  - MIRROR-COORD-55-001 DONE (2025-11-24); coordination note `docs/implplan/updates/2025-11-24-mirror-coord-55-001.md`.
+
+- Mirror DSSE
+  - MIRROR-DSSE-REV-1501 ✅ (2025-11-24; DSSE revision note published `docs/implplan/updates/2025-11-24-mirror-dsse-rev-1501.md`).
+- Mirror time anchors
+  - AIRGAP-TIME-CONTRACT-1501 ✅ (2025-11-24; time contract note `docs/implplan/updates/2025-11-24-airgap-time-contract-1501.md`).
+- Mirror orchestration hooks
+  - EXPORT-MIRROR-ORCH-1501 ✅ (2025-11-24; hook note `docs/implplan/updates/2025-11-24-export-mirror-orch-1501.md`).
+
+- Attestation coordination
+  - ELOCKER-CONTRACT-2001 DONE (2025-11-24); ATTEST-PLAN-2001 DONE (2025-11-24).
+  - CONCELIER-ATTEST-73-001/002 DONE (2025-11-25): Core/WebService attestation suites executed; TRX in `TestResults/concelier-attestation/`.
 
   - DevOps pipeline blocks
     - MIRROR-KEY-56-002-CI (repo secret MIRROR_SIGN_KEY_B64 needed for release signing; development unblocked)
@@ -94,6 +115,7 @@
     - DEVOPS-AOC-19-001 ✅ (AOC guard CI wired)
     - DEVOPS-AOC-19-002 ✅ (AOC verify stage added to CI)
     - DEVOPS-AIRGAP-57-002 ✅ (sealed-mode smoke wired into CI)
+    - DEVOPS-SPANSINK-31-003 (TODO; Ops/Signals span sink for Excititor traces; moved from Sprint 0119)
     - DEVOPS-OFFLINE-17-004 ✅ (release debug store mirrored into Offline Kit)
     - DEVOPS-REL-17-004 ✅ (release workflow now uploads `out/release/debug` artefact)
     - DEVOPS-CONSOLE-23-001 ✅ (CI contract + workflow added; offline-first console CI in place)