up
	
		
			
	
		
	
	
		
	
		
			Some checks failed
		
		
	
	
		
			
				
	
				Docs CI / lint-and-preview (push) Has been cancelled
				
			
		
			
				
	
				Build Test Deploy / build-test (push) Has been cancelled
				
			
		
			
				
	
				Build Test Deploy / authority-container (push) Has been cancelled
				
			
		
			
				
	
				Build Test Deploy / docs (push) Has been cancelled
				
			
		
			
				
	
				Build Test Deploy / deploy (push) Has been cancelled
				
			
		
		
	
	
				
					
				
			
		
			Some checks failed
		
		
	
	Docs CI / lint-and-preview (push) Has been cancelled
				
			Build Test Deploy / build-test (push) Has been cancelled
				
			Build Test Deploy / authority-container (push) Has been cancelled
				
			Build Test Deploy / docs (push) Has been cancelled
				
			Build Test Deploy / deploy (push) Has been cancelled
				
			This commit is contained in:
		| @@ -24,41 +24,47 @@ Durations are estimated work sizes (1 d ≈ one focused engineer day). Milesto | ||||
| - Tasks: SCANNER-QUEUE-09-401 (3 d), -402 (2 d), -403 (2 d) · `/src/StellaOps.Scanner.Queue/TASKS.md` | ||||
| - Acceptance: dequeue latency p95 ≤20 ms at 40 rps; chaos test retains leases. | ||||
| - Gate: Redis/NATS adapters docs + `QueueLeaseIntegrationTests` passing. | ||||
| - Status: **DONE (2025-10-19)** – Gate satisfied via Redis/NATS adapter docs and `QueueLeaseIntegrationTests` run under fake clock. | ||||
|  | ||||
| ### Group SP9-G3 — Storage Backbone (src/StellaOps.Scanner.Storage) ~1 w | ||||
| - Tasks: SCANNER-STORAGE-09-301 (3 d), -302 (2 d), -303 (2 d) | ||||
| - Acceptance: majority write/read ≤50 ms; TTL verified. | ||||
| - Gate: migrations checked in; `StorageDualWriteFixture` passes. | ||||
| - Status: **DONE (2025-10-19)** – Mongo bootstrapper + migrations committed; MinIO dual-write service wired; `StorageDualWriteFixture` green on Mongo2Go. | ||||
|  | ||||
| ### Group SP9-G4 — WebService Host & Policy Surfacing (src/StellaOps.Scanner.WebService) ~1.2 w | ||||
| - Tasks: SCANNER-WEB-09-101 (2 d), -102 (3 d), -103 (2 d), -104 (2 d), SCANNER-POLICY-09-105 (3 d), SCANNER-POLICY-09-106 (4 d) | ||||
| - Acceptance: `/api/v1/scans` enqueue p95 ≤50 ms under synthetic load; policy validation errors actionable; `/reports` response signed. | ||||
| - Gate SP9-G4 → SP10/SP11: `/reports` OpenAPI frozen; sample signed envelope committed in `samples/api/reports/`. | ||||
| - Status: **IN PROGRESS (2025-10-19)** – Minimal host and `/api/v1/scans` endpoints delivered (SCANNER-WEB-09-101/102 done); progress streaming and policy/report surfaces remain. | ||||
|  | ||||
| ### Group SP9-G5 — Worker Host (src/StellaOps.Scanner.Worker) ~1 w | ||||
| - Tasks: SCANNER-WORKER-09-201 (3 d), -202 (3 d), -203 (2 d), -204 (2 d) | ||||
| - Acceptance: job lease never drops <3× heartbeat; progress events deterministic. | ||||
| - Gate: `WorkerBasicScanScenario` integration recorded. | ||||
| - Status: **DONE (2025-10-19)** – Host bootstrap + authority wiring, heartbeat loop, deterministic stage pipeline, and metrics landed; `WorkerBasicScanScenarioTests` green. | ||||
|  | ||||
| ### Group SP9-G6 — Buildx Plug-in (src/StellaOps.Scanner.Sbomer.BuildXPlugin) ~0.8 w | ||||
| - Tasks: SP9-BLDX-09-001 (3 d), SP9-BLDX-09-002 (2 d), SP9-BLDX-09-003 (2 d) | ||||
| - Acceptance: build-time overhead ≤300 ms/layer on 4 vCPU; CAS handshake reliable in CI sample. | ||||
| - Gate: buildx demo workflow artifact + quickstart doc. | ||||
| - Status: **DONE** (2025-10-19) — manifest+CAS scaffold, descriptor/Attestor hand-off, GitHub demo workflow, and quickstart committed. | ||||
|  | ||||
| ### Group SP9-G7 — Policy Engine Core (src/StellaOps.Policy) ~1 w | ||||
| - Tasks: POLICY-CORE-09-001 (2 d), -002 (3 d), -003 (3 d), -004 (3 d), -005 (4 d), -006 (2 d) | ||||
| - Tasks: POLICY-CORE-09-001 (2 d) ✅, -002 (3 d) ✅, -003 (3 d) ✅, -004 (3 d), -005 (4 d), -006 (2 d) | ||||
| - Acceptance: policy parsing ≥200 files/s; preview diff response <200 ms for 500-component SBOM; quieting logic audited. | ||||
| - Gate: `policy-schema@1` published; revision digests stored; preview API doc updated. | ||||
|  | ||||
| ### Group SP9-G8 — DevOps Early Guardrails (ops/devops) ~0.4 w | ||||
| - Tasks: DEVOPS-HELM-09-001 (3 d) | ||||
| - Tasks: DEVOPS-HELM-09-001 (3 d) — **DONE (2025-10-19)** | ||||
| - Acceptance: helm/compose profiles for dev/stage/airgap lint + dry-run clean; manifests pinned to digest. | ||||
| - Gate: profiles merged under `deploy/`; install guide cross-link. | ||||
| - Gate: profiles merged under `deploy/`; install guide cross-link satisfied via `deploy/compose/` bundles and `docs/21_INSTALL_GUIDE.md`. | ||||
|  | ||||
| ### Group SP9-G9 — Documentation & Events (docs/) ~0.4 w | ||||
| - Tasks: DOCS-ADR-09-001 (2 d), DOCS-EVENTS-09-002 (2 d) | ||||
| - Acceptance: ADR process broadcast; event schemas validated via CI. | ||||
| - Gate: `docs/adr/index.md` linking template; `docs/events/README.md` referencing schemas. | ||||
| - Status: **DONE (2025-10-19)** – ADR contribution guide + template updates merged, Docs CI Ajv validation wired, events catalog documented, guild announcement recorded. | ||||
|  | ||||
| --- | ||||
|  | ||||
|   | ||||
		Reference in New Issue
	
	Block a user