master
4ca3ce8fb4
sprints completion. new product advisories prepared
2026-01-16 16:30:03 +02:00
StellaOps Bot
dfab8a29c3
docs re-org, audit fixes, build fixes
2026-01-05 09:35:33 +02:00
StellaOps Bot
f7d27c6fda
feat(secrets): Implement secret leak policies and signal binding
...
- Added `spl-secret-block@1.json ` to block deployments with critical or high severity secret findings.
- Introduced `spl-secret-warn@1.json ` to warn on secret findings without blocking deployments.
- Created `SecretSignalBinder.cs` to bind secret evidence to policy evaluation signals.
- Developed unit tests for `SecretEvidenceContext` and `SecretSignalBinder` to ensure correct functionality.
- Enhanced `SecretSignalContextExtensions` to integrate secret evidence into signal contexts.
2026-01-04 15:44:49 +02:00
StellaOps Bot
a872da765d
refactor: inject TimeProvider/IGuidProvider across multiple modules - DET-006 to DET-010
...
DET-006 Provenance module: Skipped - already uses TimeProvider in production code
DET-007 ReachGraph module:
- PostgresReachGraphRepository: Added TimeProvider for fallback timestamp in StoreAsync
DET-008 Registry module:
- RegistryTokenIssuer: Added IGuidProvider for JWT ID (jti) generation
- Added StellaOps.Determinism.Abstractions project reference
DET-009 Replay module:
- ReplayEngine: Added TimeProvider for ExecutedAt timestamp
- ReplayResult.Failed: Added optional executedAt parameter for determinism
- ReplayManifestExporter: Added TimeProvider constructor, replaced DateTimeOffset.UtcNow
- FeedSnapshotCoordinatorService: Updated GenerateSnapshotId to use injected TimeProvider
- ExportMetadataInfo: Made ExportedAt required (callers must provide explicitly)
- PolicySimulationInputLock: Made GeneratedAt required (callers must provide explicitly)
DET-010 RiskEngine module: Skipped - no determinism issues found
All changes maintain backward compatibility through optional parameters with system defaults.
2026-01-04 15:08:48 +02:00
StellaOps Bot
3098e84de4
save progress
2026-01-04 14:54:52 +02:00
