save progress

src/EvidenceLocker/StellaOps.EvidenceLocker/StellaOps.EvidenceLocker.Core/AGENTS.md

@@ -0,0 +1,25 @@
+# Evidence Locker Core Agent Charter
+
+## Mission
+Maintain Evidence Locker core domain contracts and deterministic hashing helpers.
+
+## Responsibilities
+- Define evidence bundle and snapshot models with typed identifiers.
+- Provide Merkle tree calculation and crypto selection hooks used by builders.
+- Maintain repository and service interfaces for infrastructure and web layers.
+
+## Required Reading
+- docs/modules/evidence-locker/architecture.md
+- docs/modules/evidence-locker/bundle-packaging.md
+- docs/modules/platform/architecture-overview.md
+
+## Definition of Done
+- Core models remain deterministic and validated.
+- Hashing logic has tests for ordering and empty inputs.
+
+## Working Agreement
+- 1. Update task status to DOING/DONE in the sprint file and local TASKS.md.
+- 2. Review this charter and required docs before coding.
+- 3. Keep outputs deterministic (ordering, timestamps, hashes) and offline-friendly.
+- 4. Add tests for core invariants and negative paths.
+- 5. Revert to TODO if paused; capture context in PR notes.

src/EvidenceLocker/StellaOps.EvidenceLocker/StellaOps.EvidenceLocker.Core/TASKS.md

@@ -0,0 +1,10 @@
+# Evidence Locker Core Task Board
+
+This board mirrors active sprint tasks for this module.
+Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
+
+| Task ID | Status | Notes |
+| --- | --- | --- |
+| AUDIT-0288-M | DONE | Maintainability audit for EvidenceLocker.Core. |
+| AUDIT-0288-T | DONE | Test coverage audit for EvidenceLocker.Core. |
+| AUDIT-0288-A | TODO | Pending approval for changes. |

src/EvidenceLocker/StellaOps.EvidenceLocker/StellaOps.EvidenceLocker.Infrastructure/AGENTS.md

@@ -0,0 +1,28 @@
+# Evidence Locker Infrastructure Agent Charter
+
+## Mission
+Maintain Evidence Locker infrastructure services: storage backends, repositories, packaging, signing, and timeline publishing.
+
+## Responsibilities
+- Own database migrations, data source configuration, and repository implementations.
+- Implement object-store adapters (filesystem and S3) with write-once semantics.
+- Provide bundle packaging, portable bundle generation, and signature/timestamp workflows.
+- Integrate timeline publishing and incident mode notifications.
+
+## Required Reading
+- docs/modules/evidence-locker/architecture.md
+- docs/modules/evidence-locker/bundle-packaging.md
+- docs/modules/evidence-locker/attestation-contract.md
+- docs/modules/platform/architecture-overview.md
+
+## Definition of Done
+- Deterministic bundle packaging and portable output verified by tests.
+- Migration runner applies scripts with checksum validation.
+- Storage backends enforce write-once when configured.
+
+## Working Agreement
+- 1. Update task status to DOING/DONE in the sprint file and local TASKS.md.
+- 2. Review this charter and required docs before coding.
+- 3. Keep outputs deterministic (ordering, timestamps, hashes) and offline-friendly.
+- 4. Add tests for repository and storage invariants and negative paths.
+- 5. Revert to TODO if paused; capture context in PR notes.

src/EvidenceLocker/StellaOps.EvidenceLocker/StellaOps.EvidenceLocker.Infrastructure/TASKS.md

@@ -0,0 +1,10 @@
+# Evidence Locker Infrastructure Task Board
+
+This board mirrors active sprint tasks for this module.
+Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
+
+| Task ID | Status | Notes |
+| --- | --- | --- |
+| AUDIT-0289-M | DONE | Maintainability audit for EvidenceLocker.Infrastructure. |
+| AUDIT-0289-T | DONE | Test coverage audit for EvidenceLocker.Infrastructure. |
+| AUDIT-0289-A | TODO | Pending approval for changes. |

src/EvidenceLocker/StellaOps.EvidenceLocker/StellaOps.EvidenceLocker.Tests/AGENTS.md

@@ -0,0 +1,25 @@
+# Evidence Locker Tests Agent Charter
+
+## Mission
+Keep Evidence Locker tests deterministic, readable, and aligned with module contracts.
+
+## Responsibilities
+- Maintain unit, integration, and contract tests for Evidence Locker services.
+- Keep fixtures deterministic and offline-friendly.
+- Ensure integration tests are clearly labeled and skip gracefully when dependencies are unavailable.
+
+## Required Reading
+- docs/modules/evidence-locker/architecture.md
+- docs/modules/evidence-locker/bundle-packaging.md
+- docs/modules/platform/architecture-overview.md
+
+## Definition of Done
+- Tests are deterministic and categorized correctly.
+- Fixtures and golden bundles remain stable across runs.
+
+## Working Agreement
+- 1. Update task status to DOING/DONE in the sprint file and local TASKS.md.
+- 2. Review this charter and required docs before coding.
+- 3. Keep outputs deterministic (ordering, timestamps, hashes) and offline-friendly.
+- 4. Add tests for negative paths and determinism regressions.
+- 5. Revert to TODO if paused; capture context in PR notes.

src/EvidenceLocker/StellaOps.EvidenceLocker/StellaOps.EvidenceLocker.Tests/TASKS.md

@@ -0,0 +1,10 @@
+# Evidence Locker Tests Task Board
+
+This board mirrors active sprint tasks for this module.
+Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
+
+| Task ID | Status | Notes |
+| --- | --- | --- |
+| AUDIT-0290-M | DONE | Maintainability audit for EvidenceLocker.Tests. |
+| AUDIT-0290-T | DONE | Test coverage audit for EvidenceLocker.Tests. |
+| AUDIT-0290-A | DONE | Waived (test project). |

src/EvidenceLocker/StellaOps.EvidenceLocker/StellaOps.EvidenceLocker.WebService/AGENTS.md

@@ -0,0 +1,28 @@
+# Evidence Locker WebService Agent Charter
+
+## Mission
+Deliver the Evidence Locker HTTP API with correct auth, validation, and audit logging.
+
+## Responsibilities
+- Maintain Minimal API endpoints and request/response contracts.
+- Enforce tenant resolution and scope-based authorization.
+- Keep audit logging consistent and deterministic.
+- Keep router integration and OpenAPI wiring in sync with configs.
+
+## Required Reading
+- docs/modules/evidence-locker/architecture.md
+- docs/modules/evidence-locker/attestation-contract.md
+- docs/modules/evidence-locker/bundle-packaging.md
+- docs/modules/platform/architecture-overview.md
+
+## Definition of Done
+- Endpoints validate inputs and return stable error responses.
+- Auth scopes map to intended operations.
+- Audit logs capture tenant, subject, and outcome.
+
+## Working Agreement
+- 1. Update task status to DOING/DONE in the sprint file and local TASKS.md.
+- 2. Review this charter and required docs before coding.
+- 3. Keep outputs deterministic (ordering, timestamps, hashes) and offline-friendly.
+- 4. Add tests for validation, auth policies, and error handling.
+- 5. Revert to TODO if paused; capture context in PR notes.

src/EvidenceLocker/StellaOps.EvidenceLocker/StellaOps.EvidenceLocker.WebService/TASKS.md

@@ -0,0 +1,10 @@
+# Evidence Locker WebService Task Board
+
+This board mirrors active sprint tasks for this module.
+Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
+
+| Task ID | Status | Notes |
+| --- | --- | --- |
+| AUDIT-0291-M | DONE | Maintainability audit for EvidenceLocker.WebService. |
+| AUDIT-0291-T | DONE | Test coverage audit for EvidenceLocker.WebService. |
+| AUDIT-0291-A | TODO | Pending approval for changes. |

src/EvidenceLocker/StellaOps.EvidenceLocker/StellaOps.EvidenceLocker.Worker/AGENTS.md

@@ -0,0 +1,24 @@
+# Evidence Locker Worker Agent Charter
+
+## Mission
+Run background workflows for Evidence Locker with reliable connectivity and telemetry.
+
+## Responsibilities
+- Host long-running background tasks for Evidence Locker services.
+- Validate configuration and dependencies on startup.
+- Keep worker behavior deterministic and easy to observe.
+
+## Required Reading
+- docs/modules/evidence-locker/architecture.md
+- docs/modules/platform/architecture-overview.md
+
+## Definition of Done
+- Worker starts cleanly with validated configuration.
+- Failures are logged and surfaced deterministically.
+
+## Working Agreement
+- 1. Update task status to DOING/DONE in the sprint file and local TASKS.md.
+- 2. Review this charter and required docs before coding.
+- 3. Keep outputs deterministic (ordering, timestamps, hashes) and offline-friendly.
+- 4. Add tests for startup validation and failure paths.
+- 5. Revert to TODO if paused; capture context in PR notes.

src/EvidenceLocker/StellaOps.EvidenceLocker/StellaOps.EvidenceLocker.Worker/TASKS.md

@@ -0,0 +1,10 @@
+# Evidence Locker Worker Task Board
+
+This board mirrors active sprint tasks for this module.
+Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
+
+| Task ID | Status | Notes |
+| --- | --- | --- |
+| AUDIT-0292-M | DONE | Maintainability audit for EvidenceLocker.Worker. |
+| AUDIT-0292-T | DONE | Test coverage audit for EvidenceLocker.Worker. |
+| AUDIT-0292-A | TODO | Pending approval for changes. |

src/EvidenceLocker/StellaOps.EvidenceLocker/TASKS.md

@@ -0,0 +1,10 @@
+# Evidence Locker Task Board
+
+This board mirrors active sprint tasks for this module.
+Source of truth: `docs/implplan/SPRINT_20251229_049_BE_csproj_audit_maint_tests.md`.
+
+| Task ID | Status | Notes |
+| --- | --- | --- |
+| AUDIT-0287-M | DONE | Maintainability audit for StellaOps.EvidenceLocker. |
+| AUDIT-0287-T | DONE | Test coverage audit for StellaOps.EvidenceLocker. |
+| AUDIT-0287-A | TODO | Pending approval for changes. |