audit work
This commit is contained in:
@@ -0,0 +1,18 @@
|
||||
# SM Soft Crypto Plugin Charter
|
||||
|
||||
## Mission
|
||||
Provide software-only SM2/SM3 signing and hashing for StellaOps cryptography.
|
||||
|
||||
## Responsibilities
|
||||
- Keep key handling deterministic and explicit.
|
||||
- Gate software SM usage via environment controls.
|
||||
- Avoid exposing private key material.
|
||||
- Track task status in `TASKS.md`.
|
||||
|
||||
## Required Reading
|
||||
- `docs/modules/platform/architecture-overview.md`
|
||||
|
||||
## Working Agreement
|
||||
- 1. Update task status in the sprint file and local `TASKS.md`.
|
||||
- 2. Validate key options and algorithm IDs explicitly.
|
||||
- 3. Add tests for env gate behavior and key-loading error paths.
|
||||
@@ -0,0 +1,10 @@
|
||||
# SM Soft Crypto Plugin Task Board
|
||||
|
||||
This board mirrors active sprint tasks for this module.
|
||||
Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
|
||||
|
||||
| Task ID | Status | Notes |
|
||||
| --- | --- | --- |
|
||||
| AUDIT-0263-M | DONE | Maintainability audit for StellaOps.Cryptography.Plugin.SmSoft. |
|
||||
| AUDIT-0263-T | DONE | Test coverage audit for StellaOps.Cryptography.Plugin.SmSoft. |
|
||||
| AUDIT-0263-A | TODO | Pending approval for changes. |
|
||||
Reference in New Issue
Block a user