save checkpoint

docs/features/checked/excititor/excititor-vex-escalation-service.md

@@ -0,0 +1,36 @@
+# Excititor VEX escalation service
+
+## Module
+Excititor
+
+## Status
+VERIFIED
+
+## Description
+Excititor module with auto-VEX justification, calibration comparison engine, CycloneDX export, and export engine with test coverage.
+
+## Implementation Details
+- **Modules**: `src/Excititor/__Libraries/StellaOps.Excititor.Core/`, `src/Excititor/__Libraries/StellaOps.Excititor.Export/`
+- **Key Classes**:
+  - `AutoVexDowngradeService` (`src/Excititor/__Libraries/StellaOps.Excititor.Core/AutoVex/AutoVexDowngradeService.cs`) - orchestrates auto-VEX downgrade and escalation
+  - `CalibrationComparisonEngine` (`src/Excititor/__Libraries/StellaOps.Excititor.Core/Calibration/CalibrationComparisonEngine.cs`) - compares calibration results for post-mortem analysis
+  - `DriftGateIntegration` (`src/Excititor/__Libraries/StellaOps.Excititor.Core/AutoVex/DriftGateIntegration.cs`) - integrates drift detection with VEX escalation
+  - `ExportEngine` (`src/Excititor/__Libraries/StellaOps.Excititor.Export/ExportEngine.cs`) - multi-format VEX export engine (OpenVEX, CycloneDX, CSAF)
+  - `VexConsensusResolver` (`src/Excititor/__Libraries/StellaOps.Excititor.Core/VexConsensusResolver.cs`) - resolves consensus across multiple VEX sources
+  - `VexConsensusRefreshService` (`src/Excititor/StellaOps.Excititor.Worker/Scheduling/VexConsensusRefreshService.cs`) - scheduled refresh of VEX consensus
+- **Interfaces**: `IVexConsensusPolicy`, `IVexExportStore`
+- **Source**: Feature matrix scan
+
+## E2E Test Plan
+- [ ] Trigger a VEX escalation when conflicting claims are detected and verify `AutoVexDowngradeService` produces the correct escalated status
+- [ ] Verify `CalibrationComparisonEngine` compares pre/post calibration snapshots and reports differences
+- [ ] Verify `DriftGateIntegration` escalates VEX status when drift is detected in container images
+- [ ] Export VEX data via `ExportEngine` in CycloneDX format and verify schema compliance
+- [ ] Verify `VexConsensusResolver` resolves multi-source conflicts deterministically
+- [ ] Verify `VexConsensusRefreshService` periodically refreshes consensus and detects status changes
+
+## Verification
+- Verified on 2026-02-13 via `run-001`.
+- Tier 0: Source files confirmed present on disk.
+- Tier 1: `dotnet build` passed (0 errors); 503/504 tests passed (1 env_issue: no local Postgres).
+- Tier 2d: `docs/qa/feature-checks/runs/excititor/excititor-vex-escalation-service/run-001/tier2-integration-check.json`