- Added DefaultCryptoHmac class implementing ICryptoHmac interface.
- Introduced purpose-based HMAC computation methods.
- Implemented verification methods for HMACs with constant-time comparison.
- Created HmacAlgorithms and HmacPurpose classes for well-known identifiers.
- Added compliance profile support for HMAC algorithms.
- Included asynchronous methods for HMAC computation from streams.
| 2025-12-05 | Completed CONCELIER-VEXLENS-30-001: implemented VEX Lens integration (`IVexLensAdvisoryKeyProvider`, `VexLensAdvisoryKeyProvider`) with canonical key generation per CONTRACT-ADVISORY-KEY-001 (CVE unchanged, others prefixed ECO:/VND:/DST:/UNK:). Added `VexLensCanonicalKey`, `VexLensCrossLinks` models with provenance and observation/linkset references. DI registration via `AddConcelierVexLensServices()`. | Implementer |
| 2025-12-05 | Completed CONCELIER-RISK-68-001: implemented Policy Studio signal picker (`IPolicyStudioSignalPicker`, `PolicyStudioSignalPicker`) with `PolicyStudioSignalInput` model. All fields are provenance-backed per CONTRACT-POLICY-STUDIO-007. Added `GetSignalAsync` and `GetSignalsBatchAsync` methods to `IVendorRiskSignalProvider`. DI registration via `AddConcelierRiskServices()`. | Implementer |
| 2025-12-03 | Added Wave Coordination (A prep/policy done; B tenant/backfill pending STORE-AOC-19-005; C signals/VEX Lens blocked on upstream contracts). No status changes. | Project Mgmt |
| 2025-12-02 | Completed CONCELIER-GAPS-115-014: published signed LNM schemas + manifest/signature, added connector HttpClient sandbox analyzer, hardened AOC guard for canonical sha256 + signature metadata, added determinism/tenant isolation tests and offline bundle fixtures. Targeted Core tests passing. | Implementer |
| 16 | CONCELIER-AIAI-31-002 | BLOCKED (2025-12-04) | Postgres linkset cache backend added; WebService lacks Postgres configuration; need to add Postgres connection config before DI wiring. | Concelier Core · Concelier WebService Guilds | Implement Link-Not-Merge linkset cache per `docs/modules/concelier/operations/lnm-cache-plan.md`, expose read-through on `/v1/lnm/linksets`, add metrics `lnm.cache.*`, and cover with deterministic tests. |
| 16 | CONCELIER-AIAI-31-002 | DOING (2025-12-05) | Postgres configuration added to WebService; remaining: wire read-through endpoint and add `lnm.cache.*` telemetry metrics. | Concelier Core · Concelier WebService Guilds | Implement Link-Not-Merge linkset cache per `docs/modules/concelier/operations/lnm-cache-plan.md`, expose read-through on `/v1/lnm/linksets`, add metrics `lnm.cache.*`, and cover with deterministic tests. |
## Execution Log
| Date (UTC) | Update | Owner |
| --- | --- | --- |
| 2025-12-05 | CONCELIER-AIAI-31-002 unblocked: Added `PostgresStorageOptions` to `ConcelierOptions`, project reference to `StellaOps.Concelier.Storage.Postgres`, and `AddConcelierPostgresStorage` DI registration in `Program.cs`. Updated `etc/concelier.yaml.sample` with `postgresStorage` section. Task moves to DOING; remaining work: wire read-through on `/v1/lnm/linksets` endpoint and add `lnm.cache.*` telemetry. | Implementer |
| 2025-12-04 | CONCELIER-AIAI-31-002 set to BLOCKED: WebService currently uses MongoDB only; Postgres connection/config not present. Need to add `AddConcelierPostgresStorage` call with configuration section before cache can be wired. Telemetry `LinksetCacheTelemetry` is registered but only partially used. | Implementer |
| 2025-12-04 | Added CONCELIER-AIAI-31-002 to Delivery Tracker and marked BLOCKED; cache plan exists but no linkset store/cache backend (Mongo/Postgres) is registered, so Link-Not-Merge cache cannot be implemented yet. | Project Mgmt |
- Keep VEX-first decisioning aligned with `SPRINT_0215_0001_0001_vuln_triage_ux.md` and advisory "28-Nov-2025 - Vulnerability Triage UX & VEX-First Decisioning.md".
- Accessibility and determinism remain gating: high-contrast support, deterministic diff outputs, and RBAC-consistent token handling.
- Active items only; completed work lives in `docs/implplan/archived/tasks.md` (updated 2025-11-08).
- **Working directory:** `src/UI/StellaOps.UI`.
- **Working directory:** `src/Web/StellaOps.Web`.
## Dependencies & Concurrency
- Upstream: Sprint 0209.0001.0001 (UI I) for shared components and UI-LNM-22-001 filters; VEX schema and workflows from `SPRINT_0215_0001_0001_vuln_triage_ux.md` plus `docs/schemas/vex-decision.schema.json` and `docs/schemas/audit-bundle-index.schema.json`.
| 14 | UI-POLICY-23-005 | DONE (2025-12-05) | API client ready; implement simulator | UI Guild (src/Web/StellaOps.Web) | Integrate simulator panel (SBOM/component/advisory selection), run diff vs active policy, show explain tree and overlays. |
| 15 | UI-POLICY-23-006 | DONE (2025-12-05) | Models ready; implement explain view | UI Guild (src/Web/StellaOps.Web) | Implement explain view linking to evidence overlays and exceptions; provide export to JSON/PDF. |
| 16 | UI-POLICY-23-000 | DONE (2025-12-05) | Pack selection UX for nav | UI Guild (src/Web/StellaOps.Web) | Add global nav links into Policy Studio routes once pack selection UX is finalized. |
@@ -68,6 +68,7 @@
## Execution Log
| Date (UTC) | Update | Owner |
| --- | --- | --- |
| 2025-12-05 | UI-POLICY-23-004 DONE: Added readiness checklist controls, scope scheduling card with persisted window, comment thread, and two-person badge polish in Policy Approvals view; updated PolicyApiService models/endpoints and tests. Attempted `ng test --include policy-approvals.component.spec.ts` but Angular CLI failed with missing rxjs util module (`./util/arrRemove`). | Implementer |
- Sprint template rules in `docs/implplan/AGENTS.md`
> **BLOCKED Tasks:** Before working on BLOCKED tasks, review [BLOCKED_DEPENDENCY_TREE.md](./BLOCKED_DEPENDENCY_TREE.md) for root blockers and dependencies.
## Delivery Tracker
| # | Task ID | Status | Key dependency / next step | Owners | Task Definition |
- Single wave; export bundle verification gates tasks 3–5 while other rows remain independent.
## Wave Detail Snapshots
- Not started; capture if export verification spins a follow-on wave.
## Interlocks
- BLOCKED items must trace through `BLOCKED_DEPENDENCY_TREE.md` before work resumes.
- Keep task/order deterministic; mirror status to `tasks-all.md` when flipping states.
## Action Tracker
| Action | Due (UTC) | Owner(s) | Notes |
| --- | --- | --- | --- |
| Collect live export bundle evidence for tasks 3–5 | 2025-12-12 | Docs Guild · Export Center Guild | Unblocks DOCS-EXPORT-37-005/101/102. |
## Execution Log
| Date (UTC) | Update | Owner |
| --- | --- | --- |
| 2025-12-05 | Renamed to `SPRINT_0304_0001_0004_docs_tasks_md_iv.md` and normalised to doc sprint template (Wave/Interlocks/Action Tracker added). | Project Mgmt |
| 2025-11-26 | Normalised sprint file to template; preserved task list and dependencies. | Docs Guild |
| 2025-11-26 | DOCS-GRAPH-24-003 completed: created `docs/modules/graph/architecture-index.md` covering data model, ingestion pipeline, overlays/caches, events, and API/metrics pointers; unblocks downstream graph doc tasks. | Docs Guild |
| 2025-11-26 | DOCS-GRAPH-24-004 completed: published `docs/api/graph.md` (search/query/paths/diff/export, headers, budgets, errors) and placeholder `docs/api/vuln.md`; next tasks can link to these APIs. | Docs Guild |
Active items only. Completed/historic work live in `docs/implplan/archived/tasks.md` (updated 2025-11-08).
## Topic & Scope
- Progress Docs Tasks ladder to Md.V, focusing on install, link-not-merge, notifications, and OAS governance.
- Keep sprint, `tasks-all.md`, and linked docs aligned with deterministic artefacts.
- **Working directory:** `docs/` with tracker in `docs/implplan`.
## Dependencies & Concurrency
- Upstream: Sprint 200.A (Docs Tasks Md.IV).
- Install stream gated by compose schema/helm values and DevOps offline validation.
- Other doc rows can proceed in parallel once dependencies stated below are cleared.
## Documentation Prerequisites
-`docs/README.md`
-`docs/07_HIGH_LEVEL_ARCHITECTURE.md`
-`docs/modules/platform/architecture-overview.md`
- Module dossiers relevant to each task (install, notifications, OAS)
- Sprint template rules in `docs/implplan/AGENTS.md`
> **BLOCKED Tasks:** Before working on BLOCKED tasks, review [BLOCKED_DEPENDENCY_TREE.md](./BLOCKED_DEPENDENCY_TREE.md) for root blockers and dependencies.
## Delivery Tracker
| # | Task ID | Status | Key dependency / next step | Owners | Task Definition |
| --- | --- | --- | --- | --- | --- |
| 1 | DOCS-INSTALL-44-001 | BLOCKED (2025-11-25) | Compose schema + service list/version pins | Docs Guild · Deployment Guild | Publish `/docs/install/overview.md` and `/docs/install/compose-quickstart.md` with imposed rule and copy-ready commands. |
| 2 | DOCS-INSTALL-45-001 | BLOCKED (2025-11-25) | Depends on 44-001; TLS guidance | Docs Guild · Deployment Guild | Publish `/docs/install/helm-prod.md` and `/docs/install/configuration-reference.md` with values tables and imposed rule. |
- Single wave; install stream blocked until compose/helm/telemetry evidence arrives. Link-not-merge and OAS rows run independently once their upstream artefacts land.
## Wave Detail Snapshots
- None captured; add when install stream unblocks.
## Interlocks
- BLOCKED items must trace root causes via `BLOCKED_DEPENDENCY_TREE.md` before work resumes.
- Keep status mirrored to `tasks-all.md` on every flip.
- Maintain deterministic artefacts and status sync with `tasks-all.md`.
- **Working directory:** `docs/` with tracker in `docs/implplan`.
## Dependencies & Concurrency
- Upstream: Sprint 0305 (Docs Tasks Md.V).
- All rows delivered; no remaining interlocks.
## Documentation Prerequisites
-`docs/README.md`
-`docs/07_HIGH_LEVEL_ARCHITECTURE.md`
-`docs/modules/platform/architecture-overview.md`
- Observability, orchestrator, and API dossiers as referenced per task
- Sprint template rules in `docs/implplan/AGENTS.md`
> **BLOCKED Tasks:** Before working on BLOCKED tasks, review [BLOCKED_DEPENDENCY_TREE.md](./BLOCKED_DEPENDENCY_TREE.md) for root blockers and dependencies.
## Delivery Tracker
| # | Task ID | Status | Key dependency / next step | Owners | Task Definition |
| --- | --- | --- | --- | --- | --- |
| 1 | DOCS-OAS-62-001 | DONE (2025-11-25) | DOCS-OAS-61-003 complete | Docs Guild · Developer Portal Guild | Stand up `/docs/api/reference/` auto-generated site; integrate with portal nav. |
Active items only. Completed/historic work live in `docs/implplan/archived/tasks.md` (updated 2025-11-08).
## Topic & Scope
- Deliver Docs Tasks Md.VII focusing on policy language/docs (SPL) and governance.
- Keep sprint, `tasks-all.md`, and module docs aligned with deterministic artefacts.
- **Working directory:** `docs/` with tracker in `docs/implplan`.
## Dependencies & Concurrency
- Upstream: Sprint 0306 (Docs Tasks Md.VI).
- Policy studio/editor backlog blocks 27-001..005; other rows delivered.
## Documentation Prerequisites
-`docs/README.md`
-`docs/07_HIGH_LEVEL_ARCHITECTURE.md`
-`docs/modules/platform/architecture-overview.md`
- Policy dossiers referenced per task
- Sprint template rules in `docs/implplan/AGENTS.md`
> **BLOCKED Tasks:** Before working on BLOCKED tasks, review [BLOCKED_DEPENDENCY_TREE.md](./BLOCKED_DEPENDENCY_TREE.md) for root blockers and dependencies.
## Delivery Tracker
| # | Task ID | Status | Key dependency / next step | Owners | Task Definition |
| 14 | DOCS-RISK-67-001 | TODO | Depends on 66-004; need engine metrics/screenshots. | Docs Guild · Risk Engine Guild | Publish `/docs/risk/explainability.md` (artifact schema, UI screenshots). |
| 15 | DOCS-RISK-67-002 | TODO | Depends on 67-001; needs API publishing workflow. | Docs Guild · API Guild | Produce `/docs/risk/api.md` with endpoint reference/examples. |
@@ -61,11 +61,11 @@
| Confirm DOCS-POLICY-27-005 completion signal | Policy Guild | 2025-12-11 | OPEN |
| Publish upstream evidence list in BLOCKED_DEPENDENCY_TREE | Docs Guild | 2025-12-11 | DONE (2025-12-05) |
| Pull registry schema/API baseline alignment for 27-008 | Policy Registry Guild | 2025-12-12 | OPEN |
| Obtain risk profile schema approval for 66-001 | PLLG0104 · Risk Profile Schema Guild | 2025-12-13 | OPEN |
| Draft outlines for risk overview/profiles using existing schema patterns | Docs Guild | 2025-12-14 | DOING (2025-12-05) |
| Capture registry schema alignment signal and flip 27-008 when ready | Policy Registry Guild → Docs Guild | 2025-12-12 | PENDING |
| Capture PLLG0104 risk schema/payload signal and flip 66-001/002 when ready | PLLG0104 → Docs Guild | 2025-12-13 | PENDING |
@@ -77,13 +77,14 @@
## Decisions & Risks
### Decisions
-None recorded in this sprint yet; capture approvals once upstream dependencies land.
-CONTRACT-RISK-SCORING-002 (published 2025-12-05) is the canonical schema for risk overview/profiles/factors/formulas; use it for Md.VIII docs until superseded.
- Deterministic fixtures for profiles, factors, explain, and API samples are now canonical references (see `docs/risk/samples/**/SHA256SUMS`).
### Risks
| Risk | Impact | Mitigation |
| --- | --- | --- |
| DOCS-POLICY-27 chain blocked by missing promotion/registry inputs | Entire policy documentation ladder stalls; pushes Md.IX hand-off | Track in BLOCKED_DEPENDENCY_TREE; weekly check-ins with Policy/Registry Guilds; stage scaffolds while waiting. |
| Risk documentation chain lacks telemetry captures | Console/CLI visuals still missing for 67-001/002 | Collect UI traces; until then, rely on frozen JSON fixtures and keep docs text-only. |
## Execution Log
| Date (UTC) | Update | Owner |
@@ -105,6 +106,8 @@
| 2025-12-05 | Set daily signal check (until 2025-12-13) for registry schema and PLLG0104 payload approvals; outcomes to be logged in Execution Log. | Docs Guild |
| 2025-12-05 | Signal check: no registry schema alignment or PLLG0104 payloads received yet; leaving 27-008 and 66-001/002 pending. | Docs Guild |
| 2025-12-05 | Scheduled next signal check for 2025-12-06 15:00 UTC to minimize lag when inputs arrive. | Docs Guild |
| 2025-12-05 | Enriched risk overview/profiles/factors/formulas outlines with legacy content, determinism rules, and expected schemas; flipped related action tracker items to DONE. | Docs Guild |
| 2025-12-05 | Consumed `CONTRACT-RISK-SCORING-002`, populated risk overview/profiles/factors/formulas with contract fields/gates, added deterministic fixtures and SHA manifests, and marked DOCS-RISK-66-001..004 DONE. | Docs Guild |
| 2025-12-06 | Signal check 15:00 UTC: still no registry schema alignment or PLLG0104 payloads; keep 27-008 and 66-001/002 pending; next check 2025-12-07 15:00 UTC. | Docs Guild |
| 2025-12-07 | Signal check 15:00 UTC: no updates; keep 27-008 and 66-001/002 pending; next check 2025-12-08 15:00 UTC. | Docs Guild |
| 2025-12-08 | Signal check 15:00 UTC: no updates; keep 27-008 and 66-001/002 pending; next check 2025-12-09 15:00 UTC. | Docs Guild |
- Documentation-only; can proceed in parallel once release artefacts are available.
## Documentation Prerequisites
-`docs/modules/advisory-ai/AGENTS.md`
-`docs/modules/advisory-ai/README.md`
-`docs/modules/advisory-ai/architecture.md`
-`docs/modules/platform/architecture-overview.md`
-`docs/07_HIGH_LEVEL_ARCHITECTURE.md`
- Sprint template rules in `docs/implplan/AGENTS.md`
> **BLOCKED Tasks:** Before working on BLOCKED tasks, review [BLOCKED_DEPENDENCY_TREE.md](./BLOCKED_DEPENDENCY_TREE.md) for root blockers and dependencies.
## Delivery Tracker
| # | Task ID | Status | Key dependency / next step | Owners | Task Definition |
- Documentation-only; proceed once module artefacts are available.
## Documentation Prerequisites
-`docs/modules/devops/AGENTS.md`
-`docs/modules/devops/README.md`
-`docs/modules/devops/architecture.md`
-`docs/modules/platform/architecture-overview.md`
-`docs/07_HIGH_LEVEL_ARCHITECTURE.md`
- Sprint template rules in `docs/implplan/AGENTS.md`
> **BLOCKED Tasks:** Before working on BLOCKED tasks, review [BLOCKED_DEPENDENCY_TREE.md](./BLOCKED_DEPENDENCY_TREE.md) for root blockers and dependencies.
## Delivery Tracker
| # | Task ID | Status | Key dependency / next step | Owners | Task Definition |
| --- | --- | --- | --- | --- | --- |
| 1 | DEVOPS-DOCS-0001 | TODO | Await module artefacts + AGENTS guardrails | Docs Guild (`docs/modules/devops`) | Align DevOps module docs with AGENTS and latest artefacts. |
| 2 | DEVOPS-ENG-0001 | TODO | Follow TASKS/AGENTS workflow | Module Team (`docs/modules/devops`) | Keep implementation milestones synced into TASKS and this sprint. |
| 3 | DEVOPS-OPS-0001 | TODO | Next demo outputs for runbooks/observability | Ops Guild (`docs/modules/devops`) | Update ops/runbooks/observability and mirror status back to parent sprints. |
## Wave Coordination
- Single wave; all tasks move together once artefacts arrive.
## Wave Detail Snapshots
- None captured; add when demo artefacts drop.
## Interlocks
- Use `BLOCKED_DEPENDENCY_TREE.md` for root-cause tracing before flipping BLOCKED items.
## Action Tracker
| Action | Due (UTC) | Owner(s) | Notes |
| --- | --- | --- | --- |
| Collect next DevOps demo evidence (runbooks/observability) | 2025-12-12 | Ops Guild · Docs Guild | Required to move DEVOPS-OPS-0001 to DOING. |
## Execution Log
| Date (UTC) | Update | Owner |
| --- | --- | --- |
| 2025-12-05 | Renamed to `SPRINT_0318_0001_0001_docs_modules_devops.md` and normalised to sprint template. | Project Mgmt |
- Documentation-only; proceed after API/OpenAPI artefacts stabilize.
## Documentation Prerequisites
-`docs/modules/excititor/AGENTS.md`
-`docs/modules/excititor/README.md`
-`docs/modules/excititor/architecture.md`
-`docs/modules/excititor/implementation_plan.md`
-`docs/modules/platform/architecture-overview.md`
-`docs/07_HIGH_LEVEL_ARCHITECTURE.md`
- Sprint template rules in `docs/implplan/AGENTS.md`
> **BLOCKED Tasks:** Before working on BLOCKED tasks, review [BLOCKED_DEPENDENCY_TREE.md](./BLOCKED_DEPENDENCY_TREE.md) for root blockers and dependencies.
## Delivery Tracker
| # | Task ID | Status | Key dependency / next step | Owners | Task Definition |
| --- | --- | --- | --- | --- | --- |
| 1 | EXCITITOR-DOCS-0001 | TODO | Wait for chunk API CI + OpenAPI freeze | Docs Guild (`docs/modules/excititor`) | Finalize module docs once API contracts are frozen. |
| 2 | EXCITITOR-ENG-0001 | TODO | Depends on EXCITITOR-DOCS-0001 | Module Team (`docs/modules/excititor`) | Align engineering notes and milestones after docs freeze. |
| 3 | EXCITITOR-OPS-0001 | TODO | Depends on EXCITITOR-DOCS-0001 | Ops Guild (`docs/modules/excititor`) | Refresh runbooks/observability after OpenAPI freeze. |
## Wave Coordination
- Single wave; all rows blocked on API/OpenAPI freeze evidence.
## Wave Detail Snapshots
- Add snapshot once freeze criteria are met.
## Interlocks
- Use `BLOCKED_DEPENDENCY_TREE.md` before reopening BLOCKED rows.
## Action Tracker
| Action | Due (UTC) | Owner(s) | Notes |
| --- | --- | --- | --- |
| Capture chunk API CI proof + pinned OpenAPI/hashed samples | 2025-12-12 | Docs Guild · Module Team | Unblocks EXCITITOR-DOCS-0001 and downstream tasks. |
## Execution Log
| Date (UTC) | Update | Owner |
| --- | --- | --- |
| 2025-12-05 | Renamed to `SPRINT_0319_0001_0001_docs_modules_excititor.md` and normalised to sprint template. | Project Mgmt |
## Decisions & Risks
| Item | Type | Owner(s) | Due | Notes |
| --- | --- | --- | --- | --- |
| API/OpenAPI freeze pending | Risk | Docs Guild · Module Team | 2025-12-12 | Blocks all tasks until CI + OpenAPI evidence lands. |
| Template normalisation | Decision | Project Mgmt | 2025-12-05 | New filename must be used going forward. |
## Next Checkpoints
| Date (UTC) | Session | Goal | Owner(s) |
| --- | --- | --- | --- |
| None scheduled | — | Add checkpoint when freeze window is scheduled. | Docs Guild |
- Documentation-only; runbooks/observability rows depend on next demo artefacts.
## Documentation Prerequisites
-`docs/modules/notify/AGENTS.md`
-`docs/modules/notify/README.md`
-`docs/modules/notify/architecture.md`
-`docs/modules/notify/implementation_plan.md`
-`docs/modules/platform/architecture-overview.md`
-`docs/07_HIGH_LEVEL_ARCHITECTURE.md`
- Sprint template rules in `docs/implplan/AGENTS.md`
> **BLOCKED Tasks:** Before working on BLOCKED tasks, review [BLOCKED_DEPENDENCY_TREE.md](./BLOCKED_DEPENDENCY_TREE.md) for root blockers and dependencies.
## Delivery Tracker
| # | Task ID | Status | Key dependency / next step | Owners | Task Definition |
- Sprint template rules in `docs/implplan/AGENTS.md`
> **BLOCKED Tasks:** Before working on BLOCKED tasks, review [BLOCKED_DEPENDENCY_TREE.md](./BLOCKED_DEPENDENCY_TREE.md) for root blockers and dependencies.
## Delivery Tracker
| # | Task ID | Status | Key dependency / next step | Owners | Task Definition |
| --- | --- | --- | --- | --- | --- |
| 1 | POLICY-READINESS-0001 | TODO | Collect current sprint goals | Policy Guild (`docs/modules/policy`) | Capture policy module readiness checklist aligned with current goals. |
| 2 | POLICY-READINESS-0002 | TODO | Depends on 1 | Policy Guild (`docs/modules/policy`) | Track outstanding prerequisites/risks and mirror into sprint updates. |
| 3 | POLICY-ENGINE-DOCS-0001 | TODO | See AGENTS guardrails | Docs Guild (`docs/modules/policy`) | Align docs with AGENTS requirements and artefacts. |
| 4 | POLICY-ENGINE-ENG-0001 | TODO | Follow TASKS/AGENTS workflow | Module Team (`docs/modules/policy`) | Keep implementation milestones aligned across sprints. |
| 5 | POLICY-ENGINE-OPS-0001 | TODO | Ops evidence drop | Ops Guild (`docs/modules/policy`) | Sync ops/runbook outcomes back to parent sprints. |
## Wave Coordination
- Single wave; readiness checklist (1–2) should complete before ENG/OPS rows close.
## Wave Detail Snapshots
- None captured; add once readiness checklist is drafted.
## Interlocks
- Use `BLOCKED_DEPENDENCY_TREE.md` when blocking; mirror status to `tasks-all.md`.
- Refresh Registry Token Service module docs (README, architecture, implementation plan, runbooks) with current auth/issuance posture and offline readiness.
- Mirror TASKS and sprint status; collect ops evidence when available.
- Documentation-only; proceed after artefacts drop.
## Documentation Prerequisites
-`docs/modules/registry/AGENTS.md`
-`docs/modules/registry/README.md`
-`docs/modules/registry/architecture.md`
-`docs/modules/registry/implementation_plan.md`
-`docs/modules/platform/architecture-overview.md`
-`docs/07_HIGH_LEVEL_ARCHITECTURE.md`
- Sprint template rules in `docs/implplan/AGENTS.md`
> **BLOCKED Tasks:** Before working on BLOCKED tasks, review [BLOCKED_DEPENDENCY_TREE.md](./BLOCKED_DEPENDENCY_TREE.md) for root blockers and dependencies.
## Delivery Tracker
| # | Task ID | Status | Key dependency / next step | Owners | Task Definition |
| --- | --- | --- | --- | --- | --- |
| 1 | REGISTRY-DOCS-0001 | TODO | Follow AGENTS guardrails | Docs Guild (`docs/modules/registry`) | Align module docs with AGENTS and latest artefacts. |
| 2 | REGISTRY-ENG-0001 | TODO | Artefacts + DOCS-0001 | Module Team (`docs/modules/registry`) | Keep milestones synced into TASKS and sprint tracker. |
| 3 | REGISTRY-OPS-0001 | TODO | Ops evidence drop | Ops Guild (`docs/modules/registry`) | Update runbooks/observability and mirror status to parent sprints. |
## Wave Coordination
- Single wave; ENG/OPS rows close after DOCS row completes.
## Wave Detail Snapshots
- None captured; add when ops evidence is scheduled.
## Interlocks
- Use `BLOCKED_DEPENDENCY_TREE.md` before reopening BLOCKED items.
## Action Tracker
| Action | Due (UTC) | Owner(s) | Notes |
| --- | --- | --- | --- |
| Collect registry artefacts for docs/runbooks | 2025-12-12 | Docs Guild · Module Team | Required to move tasks to DOING. |
## Execution Log
| Date (UTC) | Update | Owner |
| --- | --- | --- |
| 2025-12-05 | Renamed to `SPRINT_0326_0001_0001_docs_modules_registry.md` and normalised to sprint template. | Project Mgmt |
## Decisions & Risks
| Item | Type | Owner(s) | Due | Notes |
| --- | --- | --- | --- | --- |
| Artefacts pending | Risk | Docs Guild · Module Team | 2025-12-12 | Blocks all tasks until registry evidence is delivered. |
| Template normalisation | Decision | Project Mgmt | 2025-12-05 | New filename must be used going forward. |
## Next Checkpoints
| Date (UTC) | Session | Goal | Owner(s) |
| --- | --- | --- | --- |
| None scheduled | — | Add checkpoint when registry artefact delivery is planned. | Docs Guild |
- Documentation-only; OPS row depends on next demo outputs.
## Documentation Prerequisites
-`docs/modules/signer/AGENTS.md`
-`docs/modules/signer/README.md`
-`docs/modules/signer/architecture.md`
-`docs/modules/signer/implementation_plan.md`
-`docs/modules/platform/architecture-overview.md`
-`docs/07_HIGH_LEVEL_ARCHITECTURE.md`
- Sprint template rules in `docs/implplan/AGENTS.md`
> **BLOCKED Tasks:** Before working on BLOCKED tasks, review [BLOCKED_DEPENDENCY_TREE.md](./BLOCKED_DEPENDENCY_TREE.md) for root blockers and dependencies.
## Delivery Tracker
| # | Task ID | Status | Key dependency / next step | Owners | Task Definition |
| 2 | SIGNER-ENG-0001 | DONE (2025-11-27) | Align with signer sprints | Module Team (`docs/modules/signer`) | Keep milestones aligned; readiness tracker in implementation plan. |
| 3 | SIGNER-OPS-0001 | TODO | Await next demo outputs | Ops Guild (`docs/modules/signer`) | Review runbooks/observability after next demo and sync status to parent sprints. |
## Wave Coordination
- Single wave; OPS row closes after next demo evidence is captured.
## Wave Detail Snapshots
- None captured; add post-demo.
## Interlocks
- Use `BLOCKED_DEPENDENCY_TREE.md` before changing BLOCKED status.
## Action Tracker
| Action | Due (UTC) | Owner(s) | Notes |
| --- | --- | --- | --- |
| Collect signer demo artefacts for runbooks/observability | 2025-12-12 | Ops Guild · Docs Guild | Required to close SIGNER-OPS-0001. |
## Execution Log
| Date (UTC) | Update | Owner |
| --- | --- | --- |
| 2025-12-05 | Renamed to `SPRINT_0329_0001_0001_docs_modules_signer.md` and normalised to sprint template. | Project Mgmt |
> **BLOCKED Tasks:** Before working on BLOCKED tasks, review [BLOCKED_DEPENDENCY_TREE.md](./BLOCKED_DEPENDENCY_TREE.md) for root blockers and dependencies.
Active items only. Completed/historic work now resides in docs/implplan/archived/tasks.md (updated 2025-11-08).
## Topic & Scope
- Coordinate Ops & Offline stream (waves 190.A–190.E) across deployment, DevOps, offline kit, samples, and air-gap controller tracks.
- Track checkpoints/blockers and fan-out to per-wave sprints (`SPRINT_0501`–`SPRINT_0508`); no artefacts are produced directly in this file.
- **Working directory:** docs/implplan (coordination only); artefacts live under `ops/deployment`, `ops/devops`, and `ops/offline-kit` per wave.
This file now only tracks the Ops & Offline status snapshot. Active backlog lives in `SPRINT_0501_0001_0001_ops_deployment_i.md` and later files.
Active items only. Completed/historic work lives in `docs/implplan/archived/tasks.md` (updated 2025-11-08).
| 190.A Ops Deployment | Deployment Guild · DevEx Guild · Advisory AI Guild | Sprint 100.A – Attestor; Sprint 110.A – AdvisoryAI; Sprint 120.A – AirGap; Sprint 130.A – Scanner; Sprint 140.A – Graph; Sprint 150.A – Orchestrator; Sprint 160.A – EvidenceLocker; Sprint 170.A – Notifier; Sprint 180.A – CLI | TODO | Compose/Helm quickstarts can move to DOING once orchestrator + notifier deployments are validated in staging. |
| 190.B Ops DevOps | DevOps Guild · Security Guild · Mirror Creator Guild | Same as above | TODO | Sealed-mode CI harness is partially in place (DEVOPS-AIRGAP-57-002 DOING); keep remaining egress/offline tasks gated on Ops Deployment readiness. |
| 190.C Ops Offline Kit | Offline Kit Guild · Packs Registry Guild · Exporter Guild | Same as above | TODO | Needs artifacts from Ops Deployment & DevOps waves (mirror bundles, sealed-mode verification). |
| 190.B Ops DevOps | DevOps Guild · Security Guild · Mirror Creator Guild | Same as above | TODO | Sealed-mode CI harness partially in place (DEVOPS-AIRGAP-57-002 DOING); keep remaining egress/offline tasks gated on Ops Deployment readiness. |
| 190.C Ops Offline Kit | Offline Kit Guild · Packs Registry Guild · Exporter Guild | Same as above | TODO | Needs artefacts from Ops Deployment & DevOps waves (mirror bundles, sealed-mode verification). |
| 190.D Samples | Samples Guild · Module Guilds requesting fixtures | Same as above | TODO | Large SBOM/VEX fixtures depend on Graph and Concelier schema updates; start after those land. |
| 190.E AirGap Controller | AirGap Controller Guild · DevOps Guild · Authority Guild | Same as above | TODO | Seal/unseal state machine should launch only after Attestor/Authority sealed-mode changes are confirmed in Ops Deployment. |
| 190.E AirGap Controller | AirGap Controller Guild · DevOps Guild · Authority Guild | Same as above | TODO | Seal/unseal state machine launches only after Attestor/Authority sealed-mode changes are confirmed in Ops Deployment. |
## Execution Log
| Date (UTC) | Update | Owner |
| --- | --- | --- |
| 2025-12-05 | Normalised sprint to standard template (added scope, dependencies, prereqs, delivery tracker) and repositioned checkpoints; no status changes. | Project PM |
| 2025-12-04 | Cross-link scrub: all references to legacy ops sprint filenames updated to new IDs across implplan docs; no status changes. | Project PM |
| 2025-12-04 | Renamed to `SPRINT_0500_0001_0001_ops_offline.md` to match sprint filename template; no scope/status changes. | Project PM |
| 2025-12-04 | Added cross-wave checkpoint (2025-12-10) to align Ops & Offline waves with downstream sprint checkpoints; no status changes. | Project PM |
## Decisions & Risks
- Mirror signing and orchestrator/notifier validation remain gating for all waves; keep 190.A in TODO until staging validation completes.
- Offline kit packaging (190.C) depends on mirror bundles and sealed-mode verification from 190.B outputs.
- Samples wave (190.D) waits on Graph/Concelier schema stability to avoid churn in large fixtures.
| 2025-12-10 | Ops & Offline wave sync (Project PM) | Rebaseline waves 190.A/190.B/190.C using sprint-specific checkpoints (see sprints 0501–0508); align blocked items and upcoming drops. | Extend to 2025-12-13 if upstream signals still pending; keep waves gated. |
## Execution Log
| Date (UTC) | Update | Owner |
| --- | --- | --- |
| 2025-12-04 | Renamed to `SPRINT_0500_0001_0001_ops_offline.md` to match sprint filename template; no scope/status changes. | Project PM |
| 2025-12-05 | Cross-link scrub: all references to legacy ops sprint filenames updated to new IDs across implplan docs; no status changes. | Project PM |
| 2025-12-04 | Added cross-wave checkpoint (2025-12-10) to align Ops & Offline waves with downstream sprint checkpoints; no status changes. | Project PM |
@@ -28,7 +28,7 @@ Depends on: Sprint 100.A - Attestor, Sprint 110.A - AdvisoryAI, Sprint 120.A - A
| COMPOSE-44-003 | TODO | Package seed data container and onboarding wizard toggle (`QUICKSTART_MODE`), ensuring default creds randomized on first run. Dependencies: COMPOSE-44-002. | Deployment Guild, Docs Guild (ops/deployment) |
| DEPLOY-AIAI-31-001 | TODO | Provide Helm/Compose manifests, GPU toggle, scaling/runbook, and offline kit instructions for Advisory AI service + inference container. | Deployment Guild, Advisory AI Guild (ops/deployment) |
| DEPLOY-AIRGAP-46-001 | BLOCKED (2025-11-25) | Provide instructions and scripts (`load.sh`) for importing air-gap bundle into private registry; update Offline Kit guide. | Deployment Guild, Offline Kit Guild (ops/deployment) |
| DEPLOY-CLI-41-001 | TODO | Package CLI release artifacts (tarballs per OS/arch, checksums, signatures, completions, container image) and publish distribution docs. | Deployment Guild, DevEx/CLI Guild (ops/deployment) |
| DEPLOY-CLI-41-001 | DONE (2025-12-05) | Package CLI release artifacts (tarballs per OS/arch, checksums, signatures, completions, container image) and publish distribution docs. | Deployment Guild, DevEx/CLI Guild (ops/deployment) |
| DEPLOY-COMPOSE-44-001 | TODO | Finalize Quickstart scripts (`quickstart.sh`, `backup.sh`, `reset.sh`), seed data container, and publish README with imposed rule reminder. | Deployment Guild (ops/deployment) |
| 2025-11-25 | Marked COMPOSE-44-001 BLOCKED: waiting on consolidated service list + version pins from upstream module releases before writing compose/quickstart bundle. | Project Mgmt |
| 2025-12-05 | Merged legacy Execution Log addendum (`SPRINT_504_ops_devops_ii.log.md`) into this sprint and removed the extra file; no status changes. | Project PM |
| 2025-12-04 | Added dated checkpoints (Dec-06/07/10) for console runner decision and exporter schema sync; no status changes. | Project PM |
| 2025-12-04 | Updated title to match sprint filename; no task/status changes. | Project PM |
| 2025-12-03 | Normalised sprint structure (template alignment); added action tracker to Decisions/Risks; no status changes. | Planning |
| 2025-12-02 | Normalised sprint to standard template; renamed file to `SPRINT_0504_0001_0001_ops_devops_ii.md`; set DEVOPS-CONSOLE-23-002 to BLOCKED pending DEVOPS-CONSOLE-23-001. | Project Mgmt |
| 2025-11-24 | Updated DevOps CLI/Containers/Attest tasks to DONE; archived prior wave in `docs/implplan/archived/tasks.md`. | DevOps Guild |
- Sprint template rules in `docs/implplan/AGENTS.md`.
> **BLOCKED Tasks:** Before working on BLOCKED tasks, review [BLOCKED_DEPENDENCY_TREE.md](./BLOCKED_DEPENDENCY_TREE.md) for root blockers and dependencies.
## Delivery Tracker
Task ID | State | Task description | Owners (Source)
DOCS-EXPORT-37-005 | BLOCKED (await live bundle verification) | Validate Export Center docs against live Trivy/mirror bundles once implementation lands; refresh examples and CLI snippets accordingly. Dependencies: DOCS-EXPORT-37-004. | Docs Guild, Exporter Service Guild (docs)
| 2025-11-26 | Normalised sprint file to template; preserved task list and dependencies. | Docs Guild |
| 2025-11-26 | DOCS-GRAPH-24-003 completed: created `docs/modules/graph/architecture-index.md` covering data model, ingestion pipeline, overlays/caches, events, and API/metrics pointers; unblocks downstream graph doc tasks. | Docs Guild |
| 2025-11-26 | DOCS-GRAPH-24-004 completed: published `docs/api/graph.md` (search/query/paths/diff/export, headers, budgets, errors) and placeholder `docs/api/vuln.md`; next tasks can link to these APIs. | Docs Guild |
- DOCS-EXPORT-37-005 remains BLOCKED until live Trivy/mirror bundles are available for end-to-end verification; downstream tasks 37-101/102 now marked BLOCKED.
- DOCS-EXC-25-007 completed; relies on DOCS-EXC-25-006 for CLI screenshots, but text is stable. No blockers remain for this doc.
- Forensics docs now enforce imposed-rule banners; no additional risks noted.
## Next Checkpoints
- None scheduled; asynchronous updates will be logged in Execution Log.
> **BLOCKED Tasks:** Before working on BLOCKED tasks, review [BLOCKED_DEPENDENCY_TREE.md](./BLOCKED_DEPENDENCY_TREE.md) for root blockers and dependencies.
Active items only. Completed/historic work now resides in docs/implplan/archived/tasks.md (updated 2025-11-08).
[Documentation & Process] 200.A) Docs Tasks.Md.V
Depends on: Sprint 200.A - Docs Tasks.Md.IV
Summary: Documentation & Process focus on Docs Tasks (phase Md.V).
Task ID | State | Task description | Owners (Source)
--- | --- | --- | ---
DOCS-INSTALL-44-001 | BLOCKED (2025-11-25) | Publish `/docs/install/overview.md` and `/docs/install/compose-quickstart.md` with imposed rule line and copy-ready commands. | Docs Guild, Deployment Guild (docs)
DOCS-INSTALL-45-001 | BLOCKED (2025-11-25) | Publish `/docs/install/helm-prod.md` and `/docs/install/configuration-reference.md` with values tables and imposed rule reminder. Dependencies: DOCS-INSTALL-44-001. | Docs Guild, Deployment Guild (docs)
> **BLOCKED Tasks:** Before working on BLOCKED tasks, review [BLOCKED_DEPENDENCY_TREE.md](./BLOCKED_DEPENDENCY_TREE.md) for root blockers and dependencies.
Active items only. Completed/historic work now resides in docs/implplan/archived/tasks.md (updated 2025-11-08).
[Documentation & Process] 200.A) Docs Tasks.Md.VI
Depends on: Sprint 200.A - Docs Tasks.Md.V
Summary: Documentation & Process focus on Docs Tasks (phase Md.VI).
Task ID | State | Task description | Owners (Source)
--- | --- | --- | ---
DOCS-OAS-62-001 | DONE (2025-11-25) | Stand up `/docs/api/reference/` auto-generated site; integrate with portal nav. Dependencies: DOCS-OAS-61-003. | Docs Guild, Developer Portal Guild (docs)
> **BLOCKED Tasks:** Before working on BLOCKED tasks, review [BLOCKED_DEPENDENCY_TREE.md](./BLOCKED_DEPENDENCY_TREE.md) for root blockers and dependencies.
Active items only. Completed/historic work now resides in docs/implplan/archived/tasks.md (updated 2025-11-08).
# Sprint 312 - Documentation & Process · 200.B) Docs Modules Advisory Ai
> **BLOCKED Tasks:** Before working on BLOCKED tasks, review [BLOCKED_DEPENDENCY_TREE.md](./BLOCKED_DEPENDENCY_TREE.md) for root blockers and dependencies.
Active items only. Completed/historic work now resides in docs/implplan/archived/tasks.md (updated 2025-11-08).
[Documentation & Process] 200.B) Docs Modules Advisory Ai
> **BLOCKED Tasks:** Before working on BLOCKED tasks, review [BLOCKED_DEPENDENCY_TREE.md](./BLOCKED_DEPENDENCY_TREE.md) for root blockers and dependencies.
This sprint has been renamed to `SPRINT_0313_0001_0001_docs_modules_attestor.md` to comply with the standard template. Update any bookmarks accordingly.
> **BLOCKED Tasks:** Before working on BLOCKED tasks, review [BLOCKED_DEPENDENCY_TREE.md](./BLOCKED_DEPENDENCY_TREE.md) for root blockers and dependencies.
This sprint has been renamed to `SPRINT_0314_0001_0001_docs_modules_authority.md` to comply with the standard template. Update any bookmarks accordingly.
> **BLOCKED Tasks:** Before working on BLOCKED tasks, review [BLOCKED_DEPENDENCY_TREE.md](./BLOCKED_DEPENDENCY_TREE.md) for root blockers and dependencies.
This sprint was renamed for template compliance. Please use `docs/implplan/SPRINT_0315_0001_0001_docs_modules_ci.md`.
> **BLOCKED Tasks:** Before working on BLOCKED tasks, review [BLOCKED_DEPENDENCY_TREE.md](./BLOCKED_DEPENDENCY_TREE.md) for root blockers and dependencies.
Active items only. Completed/historic work now resides in docs/implplan/archived/tasks.md (updated 2025-11-08).
> **BLOCKED Tasks:** Before working on BLOCKED tasks, review [BLOCKED_DEPENDENCY_TREE.md](./BLOCKED_DEPENDENCY_TREE.md) for root blockers and dependencies.
Active items only. Completed/historic work now resides in docs/implplan/archived/tasks.md (updated 2025-11-08).
> **BLOCKED Tasks:** Before working on BLOCKED tasks, review [BLOCKED_DEPENDENCY_TREE.md](./BLOCKED_DEPENDENCY_TREE.md) for root blockers and dependencies.
This sprint has been renamed to `SPRINT_0320_0001_0001_docs_modules_export_center.md` to comply with the standard template. Update any bookmarks accordingly.
> **BLOCKED Tasks:** Before working on BLOCKED tasks, review [BLOCKED_DEPENDENCY_TREE.md](./BLOCKED_DEPENDENCY_TREE.md) for root blockers and dependencies.
Active items only. Completed/historic work now resides in docs/implplan/archived/tasks.md (updated 2025-11-08).
Summary: Documentation & Process focus on Docs Modules Notify).
Task ID | State | Task description | Owners (Source)
--- | --- | --- | ---
NOTIFY-DOCS-0001 | DONE (2025-11-05) | Validate that notifier module README reflects the Notifications Studio pivot and references the latest release notes. | Docs Guild (docs/modules/notify)
NOTIFY-OPS-0001 | BLOCKED (2025-11-30) | Await next notifier demo outputs to validate runbooks/observability; placeholder stub added. | Ops Guild (docs/modules/notify)
NOTIFY-ENG-0001 | DONE (2025-11-27) | Keep implementation milestones aligned with `/docs/implplan/SPRINT_171_notifier_i.md` onward. Added Sprint Readiness Tracker to `docs/modules/notify/implementation_plan.md` mapping 5 phases to 30+ sprint tasks across Sprints 0171, 0172, 0173. | Module Team (docs/modules/notify)
> **BLOCKED Tasks:** Before working on BLOCKED tasks, review [BLOCKED_DEPENDENCY_TREE.md](./BLOCKED_DEPENDENCY_TREE.md) for root blockers and dependencies.
This sprint has been renamed to `SPRINT_0324_0001_0001_docs_modules_platform.md` to comply with the standard template. Update any bookmarks accordingly.
> **BLOCKED Tasks:** Before working on BLOCKED tasks, review [BLOCKED_DEPENDENCY_TREE.md](./BLOCKED_DEPENDENCY_TREE.md) for root blockers and dependencies.
Active items only. Completed/historic work now resides in docs/implplan/archived/tasks.md (updated 2025-11-08).
Summary: Documentation & Process focus on Docs Modules Policy).
Task ID | State | Task description | Owners (Source)
--- | --- | --- | ---
POLICY-READINESS-0001 | TODO | Capture policy module readiness checklist aligned with current sprint goals. | Policy Guild (docs/modules/policy)
POLICY-READINESS-0002 | TODO | Track outstanding prerequisites/risk items for policy releases and mirror into sprint updates. | Policy Guild (docs/modules/policy)
POLICY ENGINE-DOCS-0001 | TODO | See ./AGENTS.md | Docs Guild (docs/modules/policy)
POLICY ENGINE-ENG-0001 | TODO | Update status via ./AGENTS.md workflow | Module Team (docs/modules/policy)
POLICY ENGINE-OPS-0001 | TODO | Sync outcomes back to ../.. | Ops Guild (docs/modules/policy)
> **BLOCKED Tasks:** Before working on BLOCKED tasks, review [BLOCKED_DEPENDENCY_TREE.md](./BLOCKED_DEPENDENCY_TREE.md) for root blockers and dependencies.
Active items only. Completed/historic work now resides in docs/implplan/archived/tasks.md (updated 2025-11-08).
> **BLOCKED Tasks:** Before working on BLOCKED tasks, review [BLOCKED_DEPENDENCY_TREE.md](./BLOCKED_DEPENDENCY_TREE.md) for root blockers and dependencies.
This sprint file was renamed to `SPRINT_0327_0001_0001_docs_modules_scanner.md` to comply with naming rules. Please edit the canonical file.
> **BLOCKED Tasks:** Before working on BLOCKED tasks, review [BLOCKED_DEPENDENCY_TREE.md](./BLOCKED_DEPENDENCY_TREE.md) for root blockers and dependencies.
Active items only. Completed/historic work now resides in docs/implplan/archived/tasks.md (updated 2025-11-08).
> **BLOCKED Tasks:** Before working on BLOCKED tasks, review [BLOCKED_DEPENDENCY_TREE.md](./BLOCKED_DEPENDENCY_TREE.md) for root blockers and dependencies.
This sprint has been renamed to `SPRINT_0330_0001_0001_docs_modules_telemetry.md` to comply with the standard template. Update any links accordingly.
> **BLOCKED Tasks:** Before working on BLOCKED tasks, review [BLOCKED_DEPENDENCY_TREE.md](./BLOCKED_DEPENDENCY_TREE.md) for root blockers and dependencies.
This sprint has been renamed to `SPRINT_0331_0001_0001_docs_modules_ui.md` to meet the standard template. Update any links accordingly.
> **BLOCKED Tasks:** Before working on BLOCKED tasks, review [BLOCKED_DEPENDENCY_TREE.md](./BLOCKED_DEPENDENCY_TREE.md) for root blockers and dependencies.
This sprint has been renamed to `SPRINT_0332_0001_0001_docs_modules_vex_lens.md` for template compliance. Please update bookmarks accordingly.
> **BLOCKED Tasks:** Before working on BLOCKED tasks, review [BLOCKED_DEPENDENCY_TREE.md](./BLOCKED_DEPENDENCY_TREE.md) for root blockers and dependencies.
This sprint has been renamed to `SPRINT_0333_0001_0001_docs_modules_excititor.md` to comply with the standard template. Update any links accordingly.
> **BLOCKED Tasks:** Before working on BLOCKED tasks, review [BLOCKED_DEPENDENCY_TREE.md](./BLOCKED_DEPENDENCY_TREE.md) for root blockers and dependencies.
This sprint has been renamed to `SPRINT_0334_0001_0001_docs_modules_vuln_explorer.md` to align with the standard naming template. Please update any bookmarks accordingly.
> **BLOCKED Tasks:** Before working on BLOCKED tasks, review [BLOCKED_DEPENDENCY_TREE.md](./BLOCKED_DEPENDENCY_TREE.md) for root blockers and dependencies.
This sprint has been renamed to `SPRINT_0335_0001_0001_docs_modules_zastava.md` to align with the standard template. Please update any bookmarks accordingly.
> **BLOCKED Tasks:** Before working on BLOCKED tasks, review [BLOCKED_DEPENDENCY_TREE.md](./BLOCKED_DEPENDENCY_TREE.md) for root blockers and dependencies.
| Date (UTC) | Update | Owner |
| --- | --- | --- |
| 2025-11-24 | Completed DEVOPS-CONTAINERS-44-001: added buildx multi-arch script (`scripts/buildx/build-multiarch.sh`) with SBOM + optional cosign signing, and workflow `.gitea/workflows/containers-multiarch.yml` for manual dispatch. | Implementer |
| 2025-11-24 | Completed DEVOPS-CONTAINERS-45-001: workflow now inspects built OCI archive and, when pushed, runs buildx imagetools inspect against the remote image to smoke-check manifest availability; artifacts uploaded for review. | Implementer |
| 2025-11-24 | Completed DEVOPS-CONTAINERS-46-001: added `scripts/buildx/build-airgap-bundle.sh` and wired workflow to emit tar.gz air-gap bundles (OCI archive + SBOM/digests/signatures) as artifacts. | Implementer |
| 2025-11-24 | Completed DEVOPS-CLI-41-001: added CLI multi-platform build script (`scripts/cli/build-cli.sh`) and manual workflow `.gitea/workflows/cli-build.yml` producing archives, checksums, and SBOMs into `out/cli/`. | Implementer |
| 2025-11-24 | Completed DEVOPS-CLI-42-001: wired CLI build workflow to optionally cosign archives; added artifact list; parity cache stub via SBOM + checksum, ready for downstream golden output parity checks. | Implementer |
| 2025-11-24 | Completed DEVOPS-ATTEST-75-001: published Prometheus alert rules (`ops/devops/attestation/attestation-alerts.yaml`) and Grafana dashboard stub (`ops/devops/attestation/grafana/attestation-latency.json`) covering latency, failure rate, and key rotation; documented in `ops/devops/attestation/ALERTS.md`. | Implementer |
| 2025-11-24 | Completed DEVOPS-CLI-43-002/003: added chaos smoke (`scripts/cli/chaos-smoke.sh`) and parity diff (`scripts/cli/parity-diff.sh`) scripts plus workflow `.gitea/workflows/cli-chaos-parity.yml` to run them and upload evidence. | Implementer |
| 2025-11-24 | Completed DEVOPS-DEVPORT-63-001/64-001: added devportal build script (`scripts/devportal/build-devportal.sh`), AGENTS.md for devportal, and scheduled workflow `.gitea/workflows/devportal-offline.yml` to produce nightly offline bundles with checksums. | Implementer |
| 2025-11-24 | Completed DEVOPS-SCANNER-PHP-27-011-REL & DEVOPS-SCANNER-RUBY-28-006-REL: added analyzer packaging script (`scripts/scanner/package-analyzer.sh`) and workflow `.gitea/workflows/scanner-analyzers-release.yml` to produce signed SBOM+checksum archives in `out/scanner-analyzers/`. | Implementer |
| 2025-11-24 | DEVOPS-SCANNER-NATIVE-20-010-REL remains BLOCKED: native analyzer project (`SCANNER-ANALYZERS-NATIVE-20-010`) not present; packaging deferred until project lands. | Implementer |
| DETER-70-003 | TODO | | SPRINT_202_cli_ii | DevEx/CLI Guild · Scanner Guild | src/Cli/StellaOps.Cli | Depends on #4 | Depends on #4 | SCDT0101 |
| DETER-70-004 | TODO | | SPRINT_203_cli_iii | DevEx/CLI Guild | src/Cli/StellaOps.Cli | Depends on #5 | Depends on #5 | SCDT0101 |
| DEVOPS-AIAI-31-001 | TODO | | SPRINT_0503_0001_0001_ops_devops_i | DevOps Guild, Advisory AI Guild (ops/devops) | ops/devops | Stand up CI pipelines, inference monitoring, privacy logging review, and perf dashboards for Advisory AI (summaries/conflicts/remediation). | — | DVDO0101 |
@@ -579,8 +579,8 @@
| DEVOPS-CONTAINERS-46-001 | TODO | | SPRINT_0504_0001_0001_ops_devops_ii | DevOps Guild | ops/devops | Build air-gap bundle generator (`src/Tools/make-airgap-bundle.sh`), produce signed bundle, and verify in CI using private registry. Dependencies: DEVOPS-CONTAINERS-45-001. | Depends on #5 | DVDO0104 |
| DEVOPS-DEVPORT-63-001 | TODO | | SPRINT_0504_0001_0001_ops_devops_ii | DevOps Guild · DevPortal Guild | ops/devops | Automate developer portal build pipeline with caching, link & accessibility checks, performance budgets. | Wait for API schema from CCWO0101 | DVDO0105 |
| DEVOPS-DEVPORT-64-001 | TODO | | SPRINT_0504_0001_0001_ops_devops_ii | DevOps Guild | ops/devops | Schedule `devportal --offline` nightly builds with checksum validation and artifact retention policies. Dependencies: DEVOPS-DEVPORT-63-001. | Depends on #1 | DVDO0105 |
| INDEX-401-030 | TODO | | SPRINT_0401_0001_0001_reachability_evidence_chain | Platform + Ops Guilds | `docs/provenance/inline-dsse.md`, `ops/mongo/indices/events_provenance_indices.js` | Needs Ops approval for new Mongo index | Needs Ops approval for new Mongo index | RBRE0101 |
| DETER-70-003 | TODO | | SPRINT_202_cli_ii | DevEx/CLI Guild · Scanner Guild | src/Cli/StellaOps.Cli | Depends on #4 | Depends on #4 | SCDT0101 |
| DETER-70-004 | TODO | | SPRINT_203_cli_iii | DevEx/CLI Guild | src/Cli/StellaOps.Cli | Depends on #5 | Depends on #5 | SCDT0101 |
| DEVOPS-AIAI-31-001 | TODO | | SPRINT_0503_0001_0001_ops_devops_i | DevOps Guild, Advisory AI Guild (ops/devops) | ops/devops | Stand up CI pipelines, inference monitoring, privacy logging review, and perf dashboards for Advisory AI (summaries/conflicts/remediation). | — | DVDO0101 |
@@ -2792,8 +2792,8 @@
| DEVOPS-CONTAINERS-46-001 | TODO | | SPRINT_0504_0001_0001_ops_devops_ii | DevOps Guild | ops/devops | Build air-gap bundle generator (`src/Tools/make-airgap-bundle.sh`), produce signed bundle, and verify in CI using private registry. Dependencies: DEVOPS-CONTAINERS-45-001. | Depends on #5 | DVDO0104 |
| DEVOPS-DEVPORT-63-001 | TODO | | SPRINT_0504_0001_0001_ops_devops_ii | DevOps Guild · DevPortal Guild | ops/devops | Automate developer portal build pipeline with caching, link & accessibility checks, performance budgets. | Wait for API schema from CCWO0101 | DVDO0105 |
| DEVOPS-DEVPORT-64-001 | TODO | | SPRINT_0504_0001_0001_ops_devops_ii | DevOps Guild | ops/devops | Schedule `devportal --offline` nightly builds with checksum validation and artifact retention policies. Dependencies: DEVOPS-DEVPORT-63-001. | Depends on #1 | DVDO0105 |
| DOCS-DETER-70-002 | TODO | | SPRINT_304_docs_tasks_md_iv | Docs Guild · Scanner Guild | docs/modules/scanner/determinism.md | Document the scanner determinism score process (`determinism.json` schema, CI harness, replay instructions) under `/docs/modules/scanner/determinism-score.md` and add a release-notes template entry. Dependencies: SCAN-DETER-186-010, DEVOPS-SCAN-90-004. | Need deterministic suite notes from 137_SCDT0101 | DOSC0101 |
| DOCS-DETER-70-002 | TODO | | SPRINT_0304_0001_0004_docs_tasks_md_iv | Docs Guild · Scanner Guild | docs/modules/scanner/determinism.md | Document the scanner determinism score process (`determinism.json` schema, CI harness, replay instructions) under `/docs/modules/scanner/determinism-score.md` and add a release-notes template entry. Dependencies: SCAN-DETER-186-010, DEVOPS-SCAN-90-004. | Need deterministic suite notes from 137_SCDT0101 | DOSC0101 |
| INDEX-401-030 | TODO | | SPRINT_0401_0001_0001_reachability_evidence_chain | Platform + Ops Guilds | `docs/provenance/inline-dsse.md`, `ops/mongo/indices/events_provenance_indices.js` | Needs Ops approval for new Mongo index | Needs Ops approval for new Mongo index | RBRE0101 |
| ORCH-SVC-32-002 | TODO | | SPRINT_152_orchestrator_ii | Orchestrator Service Guild | src/Orchestrator/StellaOps.Orchestrator | Implement scheduler DAG planner + dependency resolver, job state machine, and critical-path metadata without yet issuing control actions. Dependencies: ORCH-SVC-32-001. | Needs 32-001 DB | |
| ORCH-SVC-32-003 | TODO | | SPRINT_152_orchestrator_ii | Orchestrator Service Guild | src/Orchestrator/StellaOps.Orchestrator | Expose read-only REST APIs (sources, runs, jobs, DAG) with OpenAPI, validation, pagination, and tenant scoping. Dependencies: ORCH-SVC-32-002. | Depends on 32-002 | |
| ORCH-SVC-32-004 | TODO | | SPRINT_152_orchestrator_ii | Orchestrator Service Guild | src/Orchestrator/StellaOps.Orchestrator | Implement WebSocket/SSE stream for job/run updates, emit structured metrics counters/histograms, and add health probes. Dependencies: ORCH-SVC-32-003. | Needs 32-003 | |
| CI RECIPES-ENG-0001 | DONE (2025-11-25) | 2025-11-25 | SPRINT_0315_0001_0001_docs_modules_ci | Module Team (docs/modules/ci) | docs/modules/ci | Establish TASKS board and status mirroring rules for CI Recipes contributors. | CI RECIPES-DOCS-0001 | |
| CI RECIPES-OPS-0001 | DONE (2025-11-25) | 2025-11-25 | SPRINT_0315_0001_0001_docs_modules_ci | Ops Guild (docs/modules/ci) | docs/modules/ci | Sync outcomes back to sprint + legacy filename stub; ensure references resolve to normalized sprint path. | CI RECIPES-DOCS-0001; CI RECIPES-ENG-0001 | |
Reference in New Issue
Block a user
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
StellaOps Bot