audit work

src/Cryptography/StellaOps.Cryptography.Profiles.Ecdsa/AGENTS.md

@@ -0,0 +1,17 @@
+# ECDSA Profile Charter
+
+## Mission
+Provide the ECDSA P-256 signing profile for StellaOps signatures.
+
+## Responsibilities
+- Keep key handling and signature metadata deterministic where possible.
+- Enforce key size and algorithm expectations.
+- Track task status in `TASKS.md`.
+
+## Required Reading
+- `docs/modules/platform/architecture-overview.md`
+
+## Working Agreement
+- 1. Update task status in the sprint file and local `TASKS.md`.
+- 2. Prefer injectable time providers for signature timestamps.
+- 3. Add tests for sign/verify and public key export.

src/Cryptography/StellaOps.Cryptography.Profiles.Ecdsa/TASKS.md

@@ -0,0 +1,10 @@
+# ECDSA Profile Task Board
+
+This board mirrors active sprint tasks for this module.
+Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
+
+| Task ID | Status | Notes |
+| --- | --- | --- |
+| AUDIT-0268-M | DONE | Maintainability audit for StellaOps.Cryptography.Profiles.Ecdsa. |
+| AUDIT-0268-T | DONE | Test coverage audit for StellaOps.Cryptography.Profiles.Ecdsa. |
+| AUDIT-0268-A | TODO | Pending approval for changes. |

src/Cryptography/StellaOps.Cryptography.Profiles.EdDsa/AGENTS.md

@@ -0,0 +1,17 @@
+# EdDSA Profile Charter
+
+## Mission
+Provide Ed25519 signing and verification profiles for StellaOps signatures.
+
+## Responsibilities
+- Enforce key size expectations and zeroize secret material.
+- Keep signature metadata deterministic where possible.
+- Track task status in `TASKS.md`.
+
+## Required Reading
+- `docs/modules/platform/architecture-overview.md`
+
+## Working Agreement
+- 1. Update task status in the sprint file and local `TASKS.md`.
+- 2. Validate key material length and format explicitly.
+- 3. Add tests for sign/verify and key generation paths.

src/Cryptography/StellaOps.Cryptography.Profiles.EdDsa/TASKS.md

@@ -0,0 +1,10 @@
+# EdDSA Profile Task Board
+
+This board mirrors active sprint tasks for this module.
+Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
+
+| Task ID | Status | Notes |
+| --- | --- | --- |
+| AUDIT-0269-M | DONE | Maintainability audit for StellaOps.Cryptography.Profiles.EdDsa. |
+| AUDIT-0269-T | DONE | Test coverage audit for StellaOps.Cryptography.Profiles.EdDsa. |
+| AUDIT-0269-A | TODO | Pending approval for changes. |

src/Cryptography/StellaOps.Cryptography/AGENTS.md

@@ -0,0 +1,17 @@
+# Cryptography Profiles Charter
+
+## Mission
+Provide profile-driven signing and verification abstractions for StellaOps cryptography.
+
+## Responsibilities
+- Keep signing and verification deterministic when possible.
+- Document profile-to-algorithm mappings clearly.
+- Track task status in `TASKS.md`.
+
+## Required Reading
+- `docs/modules/platform/architecture-overview.md`
+
+## Working Agreement
+- 1. Update task status in the sprint file and local `TASKS.md`.
+- 2. Prefer injectable time sources for timestamps.
+- 3. Add tests for new profiles and multi-signature behavior.

src/Cryptography/StellaOps.Cryptography/TASKS.md

@@ -0,0 +1,10 @@
+# Cryptography Profiles Task Board
+
+This board mirrors active sprint tasks for this module.
+Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
+
+| Task ID | Status | Notes |
+| --- | --- | --- |
+| AUDIT-0247-M | DONE | Maintainability audit for src/Cryptography/StellaOps.Cryptography. |
+| AUDIT-0247-T | DONE | Test coverage audit for src/Cryptography/StellaOps.Cryptography. |
+| AUDIT-0247-A | TODO | Pending approval for changes. |