audit work

This commit is contained in:
StellaOps Bot
2026-01-02 11:43:43 +02:00
parent 82e55c206a
commit dd581699cc
234 changed files with 5189 additions and 270 deletions

View File

@@ -0,0 +1,18 @@
# StellaOps Configuration Charter
## Mission
Provide shared configuration composition and options binding for StellaOps services.
## Responsibilities
- Keep configuration loading deterministic and offline-friendly.
- Maintain option validation hooks for Authority and shared services.
- Track task status in `TASKS.md`.
## Required Reading
- `docs/modules/platform/architecture-overview.md`
- `docs/modules/authority/architecture.md`
## Working Agreement
- 1. Update task status in the sprint file and local `TASKS.md`.
- 2. Avoid non-deterministic path resolution; document base path expectations.
- 3. Keep config binding predictable; validate options where required.

View File

@@ -0,0 +1,10 @@
# StellaOps Configuration Task Board
This board mirrors active sprint tasks for this module.
Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
| Task ID | Status | Notes |
| --- | --- | --- |
| AUDIT-0244-M | DONE | Maintainability audit for StellaOps.Configuration. |
| AUDIT-0244-T | DONE | Test coverage audit for StellaOps.Configuration. |
| AUDIT-0244-A | TODO | Pending approval for changes. |

View File

@@ -0,0 +1,17 @@
# Cryptography Dependency Injection Charter
## Mission
Provide DI registration and configuration wiring for StellaOps cryptography providers.
## Responsibilities
- Keep provider registration deterministic and auditable.
- Document environment-variable overrides and defaults.
- Track task status in `TASKS.md`.
## Required Reading
- `docs/modules/platform/architecture-overview.md`
## Working Agreement
- 1. Update task status in the sprint file and local `TASKS.md`.
- 2. Avoid hidden configuration side effects; prefer explicit options.
- 3. Add tests for registry ordering and plugin loading paths.

View File

@@ -0,0 +1,10 @@
# Cryptography Dependency Injection Task Board
This board mirrors active sprint tasks for this module.
Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
| Task ID | Status | Notes |
| --- | --- | --- |
| AUDIT-0248-M | DONE | Maintainability audit for StellaOps.Cryptography.DependencyInjection. |
| AUDIT-0248-T | DONE | Test coverage audit for StellaOps.Cryptography.DependencyInjection. |
| AUDIT-0248-A | TODO | Pending approval for changes. |

View File

@@ -0,0 +1,10 @@
# Cryptography KMS Task Board
This board mirrors active sprint tasks for this module.
Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
| Task ID | Status | Notes |
| --- | --- | --- |
| AUDIT-0249-M | DONE | Maintainability audit for StellaOps.Cryptography.Kms. |
| AUDIT-0249-T | DONE | Test coverage audit for StellaOps.Cryptography.Kms. |
| AUDIT-0249-A | TODO | Pending approval for changes. |

View File

@@ -0,0 +1,17 @@
# BouncyCastle Crypto Plugin Charter
## Mission
Provide BouncyCastle-backed Ed25519 signing for StellaOps cryptography.
## Responsibilities
- Keep provider behavior deterministic and thread-safe.
- Avoid leaking private key material from descriptors.
- Track task status in `TASKS.md`.
## Required Reading
- `docs/modules/platform/architecture-overview.md`
## Working Agreement
- 1. Update task status in the sprint file and local `TASKS.md`.
- 2. Keep key normalization and signature formats stable.
- 3. Add tests for edge cases and key normalization rules.

View File

@@ -0,0 +1,10 @@
# BouncyCastle Crypto Plugin Task Board
This board mirrors active sprint tasks for this module.
Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
| Task ID | Status | Notes |
| --- | --- | --- |
| AUDIT-0251-M | DONE | Maintainability audit for StellaOps.Cryptography.Plugin.BouncyCastle. |
| AUDIT-0251-T | DONE | Test coverage audit for StellaOps.Cryptography.Plugin.BouncyCastle. |
| AUDIT-0251-A | TODO | Pending approval for changes. |

View File

@@ -0,0 +1,17 @@
# CryptoPro GOST Plugin Charter
## Mission
Provide Windows-only CryptoPro GOST signing integration for StellaOps cryptography.
## Responsibilities
- Keep provider behavior deterministic and aligned with CryptoPro CSP.
- Avoid leaking private key material from descriptors.
- Track task status in `TASKS.md`.
## Required Reading
- `docs/modules/platform/architecture-overview.md`
## Working Agreement
- 1. Update task status in the sprint file and local `TASKS.md`.
- 2. Keep certificate selection and signature formats stable.
- 3. Gate tests by OS and availability of CryptoPro CSP.

View File

@@ -0,0 +1,10 @@
# CryptoPro GOST Plugin Task Board
This board mirrors active sprint tasks for this module.
Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
| Task ID | Status | Notes |
| --- | --- | --- |
| AUDIT-0252-M | DONE | Maintainability audit for StellaOps.Cryptography.Plugin.CryptoPro. |
| AUDIT-0252-T | DONE | Test coverage audit for StellaOps.Cryptography.Plugin.CryptoPro. |
| AUDIT-0252-A | TODO | Pending approval for changes. |

View File

@@ -0,0 +1,17 @@
# eIDAS Crypto Plugin Tests Charter
## Mission
Validate eIDAS crypto plugin behavior and DI wiring.
## Responsibilities
- Keep tests deterministic and offline-friendly.
- Avoid external network or real keystores by default.
- Track task status in `TASKS.md`.
## Required Reading
- `docs/modules/platform/architecture-overview.md`
## Working Agreement
- 1. Update task status in the sprint file and local `TASKS.md`.
- 2. Prefer fixed timestamps and stubbed dependencies.
- 3. Cover error paths and unsupported algorithms.

View File

@@ -0,0 +1,10 @@
# eIDAS Crypto Plugin Tests Task Board
This board mirrors active sprint tasks for this module.
Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
| Task ID | Status | Notes |
| --- | --- | --- |
| AUDIT-0254-M | DONE | Maintainability audit for StellaOps.Cryptography.Plugin.EIDAS.Tests. |
| AUDIT-0254-T | DONE | Test coverage audit for StellaOps.Cryptography.Plugin.EIDAS.Tests. |
| AUDIT-0254-A | TODO | Pending approval for changes. |

View File

@@ -0,0 +1,17 @@
# eIDAS Crypto Plugin Charter
## Mission
Provide eIDAS-compliant signing and verification integrations for StellaOps.
## Responsibilities
- Keep signing/verification paths deterministic when possible.
- Clearly distinguish stubbed vs production integrations.
- Track task status in `TASKS.md`.
## Required Reading
- `docs/modules/platform/architecture-overview.md`
## Working Agreement
- 1. Update task status in the sprint file and local `TASKS.md`.
- 2. Validate key configuration and supported algorithms explicitly.
- 3. Add tests for error paths and non-production stubs.

View File

@@ -0,0 +1,10 @@
# eIDAS Crypto Plugin Task Board
This board mirrors active sprint tasks for this module.
Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
| Task ID | Status | Notes |
| --- | --- | --- |
| AUDIT-0253-M | DONE | Maintainability audit for StellaOps.Cryptography.Plugin.EIDAS. |
| AUDIT-0253-T | DONE | Test coverage audit for StellaOps.Cryptography.Plugin.EIDAS. |
| AUDIT-0253-A | TODO | Pending approval for changes. |

View File

@@ -0,0 +1,17 @@
# Offline Verification Crypto Plugin Charter
## Mission
Provide offline verification cryptography using .NET BCL primitives for air-gapped environments.
## Responsibilities
- Keep verification behavior deterministic and explicit.
- Avoid signing paths that depend on ephemeral keys.
- Track task status in `TASKS.md`.
## Required Reading
- `docs/modules/platform/architecture-overview.md`
## Working Agreement
- 1. Update task status in the sprint file and local `TASKS.md`.
- 2. Make capability support consistent with implemented methods.
- 3. Add tests for verification and error paths.

View File

@@ -0,0 +1,10 @@
# Offline Verification Crypto Plugin Task Board
This board mirrors active sprint tasks for this module.
Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
| Task ID | Status | Notes |
| --- | --- | --- |
| AUDIT-0255-M | DONE | Maintainability audit for StellaOps.Cryptography.Plugin.OfflineVerification. |
| AUDIT-0255-T | DONE | Test coverage audit for StellaOps.Cryptography.Plugin.OfflineVerification. |
| AUDIT-0255-A | TODO | Pending approval for changes. |

View File

@@ -0,0 +1,17 @@
# OpenSSL GOST Plugin Charter
## Mission
Provide OpenSSL-backed GOST signing and verification integration for StellaOps cryptography.
## Responsibilities
- Keep key loading deterministic and explicit.
- Avoid leaking private key material from descriptors.
- Track task status in `TASKS.md`.
## Required Reading
- `docs/modules/platform/architecture-overview.md`
## Working Agreement
- 1. Update task status in the sprint file and local `TASKS.md`.
- 2. Validate key options and reject duplicate key IDs.
- 3. Add tests for key-loading error paths and certificate handling.

View File

@@ -0,0 +1,10 @@
# OpenSSL GOST Plugin Task Board
This board mirrors active sprint tasks for this module.
Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
| Task ID | Status | Notes |
| --- | --- | --- |
| AUDIT-0257-M | DONE | Maintainability audit for StellaOps.Cryptography.Plugin.OpenSslGost. |
| AUDIT-0257-T | DONE | Test coverage audit for StellaOps.Cryptography.Plugin.OpenSslGost. |
| AUDIT-0257-A | TODO | Pending approval for changes. |

View File

@@ -0,0 +1,17 @@
# PKCS11 GOST Plugin Charter
## Mission
Provide PKCS11-backed GOST signing and verification integration for StellaOps cryptography.
## Responsibilities
- Keep slot and token selection deterministic and explicit.
- Avoid leaking private key material from descriptors.
- Track task status in `TASKS.md`.
## Required Reading
- `docs/modules/platform/architecture-overview.md`
## Working Agreement
- 1. Update task status in the sprint file and local `TASKS.md`.
- 2. Validate key options (slot vs token label, PIN sources) explicitly.
- 3. Gate PKCS11 tests by OS and availability of hardware tokens.

View File

@@ -0,0 +1,10 @@
# PKCS11 GOST Plugin Task Board
This board mirrors active sprint tasks for this module.
Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
| Task ID | Status | Notes |
| --- | --- | --- |
| AUDIT-0258-M | DONE | Maintainability audit for StellaOps.Cryptography.Plugin.Pkcs11Gost. |
| AUDIT-0258-T | DONE | Test coverage audit for StellaOps.Cryptography.Plugin.Pkcs11Gost. |
| AUDIT-0258-A | TODO | Pending approval for changes. |

View File

@@ -0,0 +1,18 @@
# PQ Soft Crypto Plugin Charter
## Mission
Provide software-only post-quantum signing (Dilithium3, Falcon512) for StellaOps cryptography.
## Responsibilities
- Keep key handling deterministic and explicit.
- Gate software PQ usage via environment controls.
- Avoid leaking private key material from descriptors.
- Track task status in `TASKS.md`.
## Required Reading
- `docs/modules/platform/architecture-overview.md`
## Working Agreement
- 1. Update task status in the sprint file and local `TASKS.md`.
- 2. Validate key options and algorithm mappings explicitly.
- 3. Add tests for env gate behavior and key-loading error paths.

View File

@@ -0,0 +1,10 @@
# PQ Soft Crypto Plugin Task Board
This board mirrors active sprint tasks for this module.
Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
| Task ID | Status | Notes |
| --- | --- | --- |
| AUDIT-0259-M | DONE | Maintainability audit for StellaOps.Cryptography.Plugin.PqSoft. |
| AUDIT-0259-T | DONE | Test coverage audit for StellaOps.Cryptography.Plugin.PqSoft. |
| AUDIT-0259-A | TODO | Pending approval for changes. |

View File

@@ -0,0 +1,17 @@
# Sim Remote Crypto Plugin Charter
## Mission
Provide simulation-only remote signing and verification for StellaOps cryptography.
## Responsibilities
- Keep HTTP payloads and algorithm routing deterministic.
- Ensure configuration clearly documents remote dependencies.
- Track task status in `TASKS.md`.
## Required Reading
- `docs/modules/platform/architecture-overview.md`
## Working Agreement
- 1. Update task status in the sprint file and local `TASKS.md`.
- 2. Validate algorithms and key identifiers before remote calls.
- 3. Add tests for error paths and DI wiring.

View File

@@ -0,0 +1,10 @@
# Sim Remote Crypto Plugin Task Board
This board mirrors active sprint tasks for this module.
Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
| Task ID | Status | Notes |
| --- | --- | --- |
| AUDIT-0260-M | DONE | Maintainability audit for StellaOps.Cryptography.Plugin.SimRemote. |
| AUDIT-0260-T | DONE | Test coverage audit for StellaOps.Cryptography.Plugin.SimRemote. |
| AUDIT-0260-A | TODO | Pending approval for changes. |

View File

@@ -0,0 +1,17 @@
# SM Remote Plugin Tests Charter
## Mission
Validate SM remote crypto plugin behavior and service integration.
## Responsibilities
- Keep tests deterministic and offline-friendly.
- Prefer stubbed HTTP handlers for unit coverage.
- Track task status in `TASKS.md`.
## Required Reading
- `docs/modules/platform/architecture-overview.md`
## Working Agreement
- 1. Update task status in the sprint file and local `TASKS.md`.
- 2. Gate integration tests and restore environment variables after use.
- 3. Cover error paths and probe failures.

View File

@@ -0,0 +1,10 @@
# SM Remote Plugin Tests Task Board
This board mirrors active sprint tasks for this module.
Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
| Task ID | Status | Notes |
| --- | --- | --- |
| AUDIT-0262-M | DONE | Maintainability audit for StellaOps.Cryptography.Plugin.SmRemote.Tests. |
| AUDIT-0262-T | DONE | Test coverage audit for StellaOps.Cryptography.Plugin.SmRemote.Tests. |
| AUDIT-0262-A | TODO | Pending approval for changes. |

View File

@@ -0,0 +1,17 @@
# SM Remote Crypto Plugin Charter
## Mission
Provide SM2 signing and verification via a remote SM microservice.
## Responsibilities
- Keep remote usage explicitly gated and observable.
- Validate key mappings and remote identifiers before calls.
- Track task status in `TASKS.md`.
## Required Reading
- `docs/modules/platform/architecture-overview.md`
## Working Agreement
- 1. Update task status in the sprint file and local `TASKS.md`.
- 2. Avoid sync-over-async in startup paths.
- 3. Add tests for probe failures and key validation.

View File

@@ -0,0 +1,10 @@
# SM Remote Crypto Plugin Task Board
This board mirrors active sprint tasks for this module.
Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
| Task ID | Status | Notes |
| --- | --- | --- |
| AUDIT-0261-M | DONE | Maintainability audit for StellaOps.Cryptography.Plugin.SmRemote. |
| AUDIT-0261-T | DONE | Test coverage audit for StellaOps.Cryptography.Plugin.SmRemote. |
| AUDIT-0261-A | TODO | Pending approval for changes. |

View File

@@ -0,0 +1,17 @@
# SM Soft Crypto Plugin Tests Charter
## Mission
Validate SM2/SM3 software crypto behavior and compliance vectors.
## Responsibilities
- Keep tests deterministic and offline-friendly.
- Avoid leaking or logging key material.
- Track task status in `TASKS.md`.
## Required Reading
- `docs/modules/platform/architecture-overview.md`
## Working Agreement
- 1. Update task status in the sprint file and local `TASKS.md`.
- 2. Prefer fixed test vectors and deterministic keys.
- 3. Cover error paths and env-gate behavior.

View File

@@ -0,0 +1,10 @@
# SM Soft Crypto Plugin Tests Task Board
This board mirrors active sprint tasks for this module.
Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
| Task ID | Status | Notes |
| --- | --- | --- |
| AUDIT-0264-M | DONE | Maintainability audit for StellaOps.Cryptography.Plugin.SmSoft.Tests. |
| AUDIT-0264-T | DONE | Test coverage audit for StellaOps.Cryptography.Plugin.SmSoft.Tests. |
| AUDIT-0264-A | TODO | Pending approval for changes. |

View File

@@ -0,0 +1,18 @@
# SM Soft Crypto Plugin Charter
## Mission
Provide software-only SM2/SM3 signing and hashing for StellaOps cryptography.
## Responsibilities
- Keep key handling deterministic and explicit.
- Gate software SM usage via environment controls.
- Avoid exposing private key material.
- Track task status in `TASKS.md`.
## Required Reading
- `docs/modules/platform/architecture-overview.md`
## Working Agreement
- 1. Update task status in the sprint file and local `TASKS.md`.
- 2. Validate key options and algorithm IDs explicitly.
- 3. Add tests for env gate behavior and key-loading error paths.

View File

@@ -0,0 +1,10 @@
# SM Soft Crypto Plugin Task Board
This board mirrors active sprint tasks for this module.
Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
| Task ID | Status | Notes |
| --- | --- | --- |
| AUDIT-0263-M | DONE | Maintainability audit for StellaOps.Cryptography.Plugin.SmSoft. |
| AUDIT-0263-T | DONE | Test coverage audit for StellaOps.Cryptography.Plugin.SmSoft. |
| AUDIT-0263-A | TODO | Pending approval for changes. |

View File

@@ -0,0 +1,17 @@
# WineCSP Crypto Plugin Charter
## Mission
Provide a WineCSP shim provider to keep registry wiring stable when WineCSP binaries are absent.
## Responsibilities
- Keep fallback behavior deterministic and explicit.
- Avoid leaking private key material.
- Track task status in `TASKS.md`.
## Required Reading
- `docs/modules/platform/architecture-overview.md`
## Working Agreement
- 1. Update task status in the sprint file and local `TASKS.md`.
- 2. Document fallback behavior and any sidecar requirements clearly.
- 3. Add tests for DI registration and fallback flows.

View File

@@ -0,0 +1,10 @@
# WineCSP Crypto Plugin Task Board
This board mirrors active sprint tasks for this module.
Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
| Task ID | Status | Notes |
| --- | --- | --- |
| AUDIT-0265-M | DONE | Maintainability audit for StellaOps.Cryptography.Plugin.WineCsp. |
| AUDIT-0265-T | DONE | Test coverage audit for StellaOps.Cryptography.Plugin.WineCsp. |
| AUDIT-0265-A | TODO | Pending approval for changes. |

View File

@@ -0,0 +1,17 @@
# Crypto Plugin Loader Tests Charter
## Mission
Validate crypto plugin loader filtering, ordering, and error handling.
## Responsibilities
- Keep tests deterministic and offline-friendly.
- Prefer fixed manifests and deterministic temp paths.
- Track task status in `TASKS.md`.
## Required Reading
- `docs/modules/platform/architecture-overview.md`
## Working Agreement
- 1. Update task status in the sprint file and local `TASKS.md`.
- 2. Clean up temp manifests and restore environment variables after tests.
- 3. Cover error paths and platform/jurisdiction filters.

View File

@@ -0,0 +1,10 @@
# Crypto Plugin Loader Tests Task Board
This board mirrors active sprint tasks for this module.
Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
| Task ID | Status | Notes |
| --- | --- | --- |
| AUDIT-0267-M | DONE | Maintainability audit for StellaOps.Cryptography.PluginLoader.Tests. |
| AUDIT-0267-T | DONE | Test coverage audit for StellaOps.Cryptography.PluginLoader.Tests. |
| AUDIT-0267-A | TODO | Pending approval for changes. |

View File

@@ -0,0 +1,17 @@
# Crypto Plugin Loader Charter
## Mission
Load crypto provider plugins from manifests with deterministic filtering and error reporting.
## Responsibilities
- Keep plugin selection deterministic and explainable.
- Validate configuration inputs and surface clear errors.
- Track task status in `TASKS.md`.
## Required Reading
- `docs/modules/platform/architecture-overview.md`
## Working Agreement
- 1. Update task status in the sprint file and local `TASKS.md`.
- 2. Add tests for filtering, priority ordering, and error paths.
- 3. Avoid silent option drops or configuration mismatches.

View File

@@ -0,0 +1,10 @@
# Crypto Plugin Loader Task Board
This board mirrors active sprint tasks for this module.
Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
| Task ID | Status | Notes |
| --- | --- | --- |
| AUDIT-0266-M | DONE | Maintainability audit for StellaOps.Cryptography.PluginLoader. |
| AUDIT-0266-T | DONE | Test coverage audit for StellaOps.Cryptography.PluginLoader. |
| AUDIT-0266-A | TODO | Pending approval for changes. |

View File

@@ -0,0 +1,17 @@
# Offline Verification Provider Charter
## Mission
Provide offline verification-focused cryptography for air-gap scenarios.
## Responsibilities
- Keep supported algorithms consistent with implementation.
- Avoid leaking private key material from descriptors.
- Track task status in `TASKS.md`.
## Required Reading
- `docs/modules/platform/architecture-overview.md`
## Working Agreement
- 1. Update task status in the sprint file and local `TASKS.md`.
- 2. Validate algorithm mappings and normalization rules.
- 3. Add tests for sign/verify and hashing paths.

View File

@@ -0,0 +1,10 @@
# Offline Verification Provider Task Board
This board mirrors active sprint tasks for this module.
Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
| Task ID | Status | Notes |
| --- | --- | --- |
| AUDIT-0270-M | DONE | Maintainability audit for StellaOps.Cryptography.Providers.OfflineVerification. |
| AUDIT-0270-T | DONE | Test coverage audit for StellaOps.Cryptography.Providers.OfflineVerification. |
| AUDIT-0270-A | TODO | Pending approval for changes. |

View File

@@ -0,0 +1,17 @@
# Cryptography Tests (Libraries) Charter
## Mission
Validate cryptography library behavior in the standalone test suite.
## Responsibilities
- Keep tests deterministic and offline-friendly.
- Avoid network access in tests.
- Track task status in `TASKS.md`.
## Required Reading
- `docs/modules/platform/architecture-overview.md`
## Working Agreement
- 1. Update task status in the sprint file and local `TASKS.md`.
- 2. Prefer fixed timestamps and deterministic keys.
- 3. Cover error paths and env gate behavior.

View File

@@ -0,0 +1,10 @@
# Cryptography Tests (Libraries) Task Board
This board mirrors active sprint tasks for this module.
Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
| Task ID | Status | Notes |
| --- | --- | --- |
| AUDIT-0272-M | DONE | Maintainability audit for StellaOps.Cryptography.Tests. |
| AUDIT-0272-T | DONE | Test coverage audit for StellaOps.Cryptography.Tests. |
| AUDIT-0272-A | TODO | Pending approval for changes. |

View File

@@ -0,0 +1,10 @@
# StellaOps Cryptography Task Board
This board mirrors active sprint tasks for this module.
Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
| Task ID | Status | Notes |
| --- | --- | --- |
| AUDIT-0246-M | DONE | Maintainability audit for StellaOps.Cryptography. |
| AUDIT-0246-T | DONE | Test coverage audit for StellaOps.Cryptography. |
| AUDIT-0246-A | TODO | Pending approval for changes. |

View File

@@ -0,0 +1,17 @@
# Delta Verdict Charter
## Mission
Provide deterministic delta computation, serialization, and signing for verdict diffs.
## Responsibilities
- Keep outputs deterministic and canonical.
- Validate signature envelopes and payload integrity.
- Track task status in `TASKS.md`.
## Required Reading
- `docs/modules/platform/architecture-overview.md`
## Working Agreement
- 1. Update task status in the sprint file and local `TASKS.md`.
- 2. Keep ordering stable in delta computation and serialization.
- 3. Add tests for error paths and integrity checks.

View File

@@ -0,0 +1,10 @@
# Delta Verdict Task Board
This board mirrors active sprint tasks for this module.
Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
| Task ID | Status | Notes |
| --- | --- | --- |
| AUDIT-0273-M | DONE | Maintainability audit for StellaOps.DeltaVerdict. |
| AUDIT-0273-T | DONE | Test coverage audit for StellaOps.DeltaVerdict. |
| AUDIT-0273-A | TODO | Pending approval for changes. |

View File

@@ -0,0 +1,17 @@
# Dependency Injection Charter
## Mission
Provide DI conventions and fail-fast options validation helpers.
## Responsibilities
- Keep registration deterministic and explicit.
- Ensure validation errors are actionable.
- Track task status in `TASKS.md`.
## Required Reading
- `docs/modules/platform/architecture-overview.md`
## Working Agreement
- 1. Update task status in the sprint file and local `TASKS.md`.
- 2. Register validators through `IValidateOptions<TOptions>` consistently.
- 3. Add tests for registration and validation behavior.

View File

@@ -0,0 +1,10 @@
# Dependency Injection Task Board
This board mirrors active sprint tasks for this module.
Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
| Task ID | Status | Notes |
| --- | --- | --- |
| AUDIT-0275-M | DONE | Maintainability audit for StellaOps.DependencyInjection. |
| AUDIT-0275-T | DONE | Test coverage audit for StellaOps.DependencyInjection. |
| AUDIT-0275-A | TODO | Pending approval for changes. |

View File

@@ -0,0 +1,17 @@
# Determinism Abstractions Charter
## Mission
Define determinism boundary attributes and contracts for analyzers.
## Responsibilities
- Keep attribute semantics stable and documented.
- Align attribute defaults with analyzer expectations.
- Track task status in `TASKS.md`.
## Required Reading
- `docs/modules/platform/architecture-overview.md`
## Working Agreement
- 1. Update task status in the sprint file and local `TASKS.md`.
- 2. Avoid breaking attribute names or defaults without tests.
- 3. Add tests or analyzer coverage for attribute metadata.

View File

@@ -0,0 +1,10 @@
# Determinism Abstractions Task Board
This board mirrors active sprint tasks for this module.
Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
| Task ID | Status | Notes |
| --- | --- | --- |
| AUDIT-0276-M | DONE | Maintainability audit for StellaOps.Determinism.Abstractions. |
| AUDIT-0276-T | DONE | Test coverage audit for StellaOps.Determinism.Abstractions. |
| AUDIT-0276-A | TODO | Pending approval for changes. |

View File

@@ -0,0 +1,17 @@
# Evidence Bundle Charter
## Mission
Define deterministic evidence bundle envelopes for findings and offline verification.
## Responsibilities
- Keep bundle fields stable for signing and replay.
- Ensure bundle hashing is deterministic.
- Track task status in `TASKS.md`.
## Required Reading
- `docs/modules/platform/architecture-overview.md`
## Working Agreement
- 1. Update task status in the sprint file and local `TASKS.md`.
- 2. Avoid nondeterministic defaults for bundle identity or timestamps.
- 3. Add tests for signing predicate outputs and hash determinism.

View File

@@ -0,0 +1,10 @@
# Evidence Bundle Task Board
This board mirrors active sprint tasks for this module.
Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
| Task ID | Status | Notes |
| --- | --- | --- |
| AUDIT-0280-M | DONE | Maintainability audit for StellaOps.Evidence.Bundle. |
| AUDIT-0280-T | DONE | Test coverage audit for StellaOps.Evidence.Bundle. |
| AUDIT-0280-A | TODO | Pending approval for changes. |

View File

@@ -0,0 +1,18 @@
# Evidence Core Tests Charter
## Mission
Validate Evidence.Core behavior with deterministic unit tests.
## Responsibilities
- Cover evidence ID computation, integrity checks, and in-memory storage.
- Add adapter conversion tests as evidence models evolve.
- Track task status in `TASKS.md`.
## Required Reading
- `docs/modules/platform/architecture-overview.md`
- `docs/modules/evidence/unified-model.md`
## Working Agreement
- 1. Update task status in the sprint file and local `TASKS.md`.
- 2. Use fixed timestamps for signatures and provenance.
- 3. Keep tests deterministic and portable.

View File

@@ -0,0 +1,10 @@
# Evidence Core Tests Task Board
This board mirrors active sprint tasks for this module.
Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
| Task ID | Status | Notes |
| --- | --- | --- |
| AUDIT-0283-M | DONE | Maintainability audit for StellaOps.Evidence.Core.Tests. |
| AUDIT-0283-T | DONE | Test coverage audit for StellaOps.Evidence.Core.Tests. |
| AUDIT-0283-A | TODO | Pending approval for changes. |

View File

@@ -0,0 +1,18 @@
# Evidence Core Charter
## Mission
Provide the unified evidence model, adapters, and core storage abstractions.
## Responsibilities
- Keep evidence IDs deterministic and content-addressed.
- Maintain adapter mappings and schema versions.
- Track task status in `TASKS.md`.
## Required Reading
- `docs/modules/platform/architecture-overview.md`
- `docs/modules/evidence/unified-model.md`
## Working Agreement
- 1. Update task status in the sprint file and local `TASKS.md`.
- 2. Keep docs aligned with the public interfaces and enums.
- 3. Add tests for adapters and determinism paths.

View File

@@ -0,0 +1,10 @@
# Evidence Core Task Board
This board mirrors active sprint tasks for this module.
Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
| Task ID | Status | Notes |
| --- | --- | --- |
| AUDIT-0282-M | DONE | Maintainability audit for StellaOps.Evidence.Core. |
| AUDIT-0282-T | DONE | Test coverage audit for StellaOps.Evidence.Core. |
| AUDIT-0282-A | TODO | Pending approval for changes. |

View File

@@ -0,0 +1,18 @@
# Evidence Persistence Charter
## Mission
Provide PostgreSQL persistence for evidence records with tenant isolation.
## Responsibilities
- Keep storage deterministic and query ordering explicit.
- Ensure RLS/tenant scoping is enforced on every operation.
- Track task status in `TASKS.md`.
## Required Reading
- `docs/modules/platform/architecture-overview.md`
- `docs/modules/evidence/unified-model.md`
## Working Agreement
- 1. Update task status in the sprint file and local `TASKS.md`.
- 2. Prefer deterministic ordering and stable pagination.
- 3. Add tests for tenant isolation and migration behavior.

View File

@@ -0,0 +1,10 @@
# Evidence Persistence Task Board
This board mirrors active sprint tasks for this module.
Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
| Task ID | Status | Notes |
| --- | --- | --- |
| AUDIT-0284-M | DONE | Maintainability audit for StellaOps.Evidence.Persistence. |
| AUDIT-0284-T | DONE | Test coverage audit for StellaOps.Evidence.Persistence. |
| AUDIT-0284-A | TODO | Pending approval for changes. |

View File

@@ -0,0 +1,17 @@
# Evidence Charter
## Mission
Provide evidence indexing, validation, and retention services with deterministic outputs.
## Responsibilities
- Keep evidence serialization and digests deterministic.
- Validate evidence integrity and budget enforcement.
- Track task status in `TASKS.md`.
## Required Reading
- `docs/modules/platform/architecture-overview.md`
## Working Agreement
- 1. Update task status in the sprint file and local `TASKS.md`.
- 2. Prefer deterministic ordering and time sources for evidence indexes.
- 3. Add tests for validation, retention, and budget enforcement paths.

View File

@@ -0,0 +1,10 @@
# Evidence Task Board
This board mirrors active sprint tasks for this module.
Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
| Task ID | Status | Notes |
| --- | --- | --- |
| AUDIT-0279-M | DONE | Maintainability audit for StellaOps.Evidence. |
| AUDIT-0279-T | DONE | Test coverage audit for StellaOps.Evidence. |
| AUDIT-0279-A | TODO | Pending approval for changes. |

View File

@@ -0,0 +1,18 @@
# StellaOps Configuration Tests Charter
## Mission
Validate configuration composition and Authority option normalization.
## Responsibilities
- Keep tests deterministic and offline-friendly.
- Use local fixtures; avoid network calls.
- Track task status in `TASKS.md`.
## Required Reading
- `docs/modules/platform/architecture-overview.md`
- `docs/modules/authority/architecture.md`
## Working Agreement
- 1. Update task status in the sprint file and local `TASKS.md`.
- 2. Prefer fixed timestamps and stable temp paths.
- 3. Add tests for new configuration behaviors and validation rules.

View File

@@ -0,0 +1,10 @@
# StellaOps Configuration Tests Task Board
This board mirrors active sprint tasks for this module.
Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
| Task ID | Status | Notes |
| --- | --- | --- |
| AUDIT-0245-M | DONE | Maintainability audit for StellaOps.Configuration.Tests. |
| AUDIT-0245-T | DONE | Test coverage audit for StellaOps.Configuration.Tests. |
| AUDIT-0245-A | TODO | Pending approval for changes. |

View File

@@ -0,0 +1,17 @@
# Cryptography KMS Tests Charter
## Mission
Validate KMS clients and key lifecycle behaviors for StellaOps cryptography.
## Responsibilities
- Keep tests deterministic and offline-friendly.
- Avoid network calls; use local facades and fixtures.
- Track task status in `TASKS.md`.
## Required Reading
- `docs/modules/platform/architecture-overview.md`
## Working Agreement
- 1. Update task status in the sprint file and local `TASKS.md`.
- 2. Prefer fixed timestamps and stable temp paths.
- 3. Add tests for new KMS providers and error paths.

View File

@@ -0,0 +1,10 @@
# Cryptography KMS Tests Task Board
This board mirrors active sprint tasks for this module.
Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
| Task ID | Status | Notes |
| --- | --- | --- |
| AUDIT-0250-M | DONE | Maintainability audit for StellaOps.Cryptography.Kms.Tests. |
| AUDIT-0250-T | DONE | Test coverage audit for StellaOps.Cryptography.Kms.Tests. |
| AUDIT-0250-A | TODO | Pending approval for changes. |

View File

@@ -0,0 +1,17 @@
# Offline Verification Plugin Tests Charter
## Mission
Validate offline verification crypto plugin behavior and deterministic outputs.
## Responsibilities
- Keep tests deterministic and offline-friendly.
- Use real key material only in-memory; avoid filesystem dependencies by default.
- Track task status in `TASKS.md`.
## Required Reading
- `docs/modules/platform/architecture-overview.md`
## Working Agreement
- 1. Update task status in the sprint file and local `TASKS.md`.
- 2. Prefer fixed vectors and deterministic keys.
- 3. Cover error paths and unsupported algorithms.

View File

@@ -0,0 +1,10 @@
# Offline Verification Plugin Tests Task Board
This board mirrors active sprint tasks for this module.
Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
| Task ID | Status | Notes |
| --- | --- | --- |
| AUDIT-0256-M | DONE | Maintainability audit for StellaOps.Cryptography.Plugin.OfflineVerification.Tests. |
| AUDIT-0256-T | DONE | Test coverage audit for StellaOps.Cryptography.Plugin.OfflineVerification.Tests. |
| AUDIT-0256-A | TODO | Pending approval for changes. |

View File

@@ -0,0 +1,17 @@
# Cryptography Tests Charter
## Mission
Validate core cryptography providers and capability detection in the __Tests suite.
## Responsibilities
- Keep tests deterministic and offline-friendly.
- Gate hardware/OS-specific tests explicitly.
- Track task status in `TASKS.md`.
## Required Reading
- `docs/modules/platform/architecture-overview.md`
## Working Agreement
- 1. Update task status in the sprint file and local `TASKS.md`.
- 2. Restore environment variables after test changes.
- 3. Prefer fixed timestamps and deterministic fixtures.

View File

@@ -0,0 +1,10 @@
# Cryptography Tests Task Board
This board mirrors active sprint tasks for this module.
Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
| Task ID | Status | Notes |
| --- | --- | --- |
| AUDIT-0271-M | DONE | Maintainability audit for __Tests StellaOps.Cryptography.Tests. |
| AUDIT-0271-T | DONE | Test coverage audit for __Tests StellaOps.Cryptography.Tests. |
| AUDIT-0271-A | TODO | Pending approval for changes. |

View File

@@ -0,0 +1,17 @@
# Delta Verdict Tests Charter
## Mission
Validate DeltaVerdict behaviors with deterministic tests.
## Responsibilities
- Cover delta computation, signing, verification, and serialization.
- Keep fixtures deterministic and repeatable.
- Track task status in `TASKS.md`.
## Required Reading
- `docs/modules/platform/architecture-overview.md`
## Working Agreement
- 1. Update task status in the sprint file and local `TASKS.md`.
- 2. Use fixed time/IDs to keep tests deterministic.
- 3. Add negative-path coverage for verification failures.

View File

@@ -0,0 +1,10 @@
# Delta Verdict Tests Task Board
This board mirrors active sprint tasks for this module.
Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
| Task ID | Status | Notes |
| --- | --- | --- |
| AUDIT-0274-M | DONE | Maintainability audit for StellaOps.DeltaVerdict.Tests. |
| AUDIT-0274-T | DONE | Test coverage audit for StellaOps.DeltaVerdict.Tests. |
| AUDIT-0274-A | TODO | Pending approval for changes. |

View File

@@ -0,0 +1,18 @@
# Evidence Persistence Tests Charter
## Mission
Validate Evidence persistence behavior against PostgreSQL.
## Responsibilities
- Cover CRUD, tenant isolation, and evidence chaining queries.
- Keep integration tests deterministic and isolated.
- Track task status in `TASKS.md`.
## Required Reading
- `docs/modules/platform/architecture-overview.md`
- `docs/modules/evidence/unified-model.md`
## Working Agreement
- 1. Update task status in the sprint file and local `TASKS.md`.
- 2. Use fixed timestamps and deterministic data where possible.
- 3. Ensure migrations are applied in fixtures.

View File

@@ -0,0 +1,10 @@
# Evidence Persistence Tests Task Board
This board mirrors active sprint tasks for this module.
Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
| Task ID | Status | Notes |
| --- | --- | --- |
| AUDIT-0285-M | DONE | Maintainability audit for StellaOps.Evidence.Persistence.Tests. |
| AUDIT-0285-T | DONE | Test coverage audit for StellaOps.Evidence.Persistence.Tests. |
| AUDIT-0285-A | TODO | Pending approval for changes. |

View File

@@ -0,0 +1,18 @@
# Evidence Tests Charter
## Mission
Validate Evidence module behavior with deterministic unit tests.
## Responsibilities
- Cover evidence index serialization, validation, and budgets.
- Keep fixtures deterministic and repeatable.
- Track task status in `TASKS.md`.
## Required Reading
- `docs/modules/platform/architecture-overview.md`
- `docs/modules/evidence/unified-model.md`
## Working Agreement
- 1. Update task status in the sprint file and local `TASKS.md`.
- 2. Use fixed timestamps and deterministic IDs in fixtures.
- 3. Add negative-path validation tests as rules evolve.

View File

@@ -0,0 +1,10 @@
# Evidence Tests Task Board
This board mirrors active sprint tasks for this module.
Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
| Task ID | Status | Notes |
| --- | --- | --- |
| AUDIT-0286-M | DONE | Maintainability audit for StellaOps.Evidence.Tests. |
| AUDIT-0286-T | DONE | Test coverage audit for StellaOps.Evidence.Tests. |
| AUDIT-0286-A | TODO | Pending approval for changes. |