docs re-org, audit fixes, build fixes

src/Findings/StellaOps.Findings.Ledger.WebService/Mappings/LedgerEventMapping.cs

@@ -6,11 +6,12 @@ namespace StellaOps.Findings.Ledger.WebService.Mappings;
 
 public static class LedgerEventMapping
 {
-    public static LedgerEventDraft ToDraft(this LedgerEventRequest request)
+    public static LedgerEventDraft ToDraft(this LedgerEventRequest request, TimeProvider? timeProvider = null)
     {
         ArgumentNullException.ThrowIfNull(request);
 
-        var recordedAt = (request.RecordedAt ?? DateTimeOffset.UtcNow).ToUniversalTime();
+        timeProvider ??= TimeProvider.System;
+        var recordedAt = (request.RecordedAt ?? timeProvider.GetUtcNow()).ToUniversalTime();
         var payload = request.Payload is null ? new JsonObject() : (JsonObject)request.Payload.DeepClone();
 
         var eventObject = new JsonObject

src/Findings/StellaOps.Findings.Ledger.WebService/Program.cs

@@ -1768,6 +1768,7 @@ app.MapPost("/v1/alerts/{alertId}/bundle/verify", async Task<Results<Ok<BundleVe
     [FromBody] BundleVerificationRequest request,
     [FromServices] IAlertService alertService,
     [FromServices] IEvidenceBundleService bundleService,
+    [FromServices] TimeProvider timeProvider,
     CancellationToken cancellationToken) =>
 {
     var alert = await alertService.GetAlertAsync(alertId, cancellationToken).ConfigureAwait(false);
@@ -1786,7 +1787,7 @@ app.MapPost("/v1/alerts/{alertId}/bundle/verify", async Task<Results<Ok<BundleVe
     {
         AlertId = alertId,
         IsValid = result.IsValid,
-        VerifiedAt = DateTimeOffset.UtcNow,
+        VerifiedAt = timeProvider.GetUtcNow(),
         SignatureValid = result.SignatureValid,
         HashValid = result.HashValid,
         ChainValid = result.ChainValid,

src/Findings/StellaOps.Findings.Ledger.WebService/Services/EvidenceGraphBuilder.cs

@@ -11,13 +11,16 @@ public sealed class EvidenceGraphBuilder : IEvidenceGraphBuilder
 {
     private readonly IEvidenceRepository _evidenceRepo;
     private readonly IAttestationVerifier _attestationVerifier;
+    private readonly TimeProvider _timeProvider;
 
     public EvidenceGraphBuilder(
         IEvidenceRepository evidenceRepo,
-        IAttestationVerifier attestationVerifier)
+        IAttestationVerifier attestationVerifier,
+        TimeProvider? timeProvider = null)
     {
         _evidenceRepo = evidenceRepo;
         _attestationVerifier = attestationVerifier;
+        _timeProvider = timeProvider ?? TimeProvider.System;
     }
 
     public async Task<EvidenceGraphResponse?> BuildAsync(
@@ -126,7 +129,7 @@ public sealed class EvidenceGraphBuilder : IEvidenceGraphBuilder
             Nodes = nodes,
             Edges = edges,
             RootNodeId = verdictNode.Id,
-            GeneratedAt = DateTimeOffset.UtcNow
+            GeneratedAt = _timeProvider.GetUtcNow()
         };
     }
 

src/Findings/StellaOps.Findings.Ledger/Services/FindingWorkflowService.cs

@@ -66,7 +66,7 @@ public sealed class FindingWorkflowService : IFindingWorkflowService
 
         var payload = CreateBasePayload(request);
         payload["action"] = "assign";
-        payload["assignee"] = BuildAssigneeNode(request.Assignee);
+        payload["assignee"] = BuildAssigneeNode(request.Assignee!);
         AddComment(payload, request.Comment);
         ApplyStatus(payload, request.Status);
         ApplyAttachments(payload, request.Attachments);