Commit Graph

4 Commits

Author SHA1 Message Date
StellaOps Bot
e47627cfff feat(trust-lattice): complete Sprint 7100 VEX Trust Lattice implementation
Sprint 7100 - VEX Trust Lattice for Explainable, Replayable Decisioning

Completed all 6 sprints (54 tasks):
- 7100.0001.0001: Trust Vector Foundation (TrustVector P/C/R, ClaimScoreCalculator)
- 7100.0001.0002: Verdict Manifest & Replay (VerdictManifest, DSSE signing)
- 7100.0002.0001: Policy Gates & Merge (MinimumConfidence, SourceQuota, UnknownsBudget)
- 7100.0002.0002: Source Defaults & Calibration (DefaultTrustVectors, TrustCalibrationService)
- 7100.0003.0001: UI Trust Algebra Panel (Angular components with WCAG 2.1 AA accessibility)
- 7100.0003.0002: Integration & Documentation (specs, schemas, E2E tests, training docs)

Key deliverables:
- Trust vector model with P/C/R components and configurable weights
- Claim scoring: ClaimScore = BaseTrust(S) * M * F
- Policy gates for minimum confidence, source quotas, reachability requirements
- Verdict manifests with DSSE signing and deterministic replay
- Angular Trust Algebra UI with accessibility improvements
- Comprehensive E2E integration tests (9 scenarios)
- Full documentation and training materials

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2025-12-23 07:28:21 +02:00
StellaOps Bot
5146204f1b feat: add security sink detection patterns for JavaScript/TypeScript
- Introduced `sink-detect.js` with various security sink detection patterns categorized by type (e.g., command injection, SQL injection, file operations).
- Implemented functions to build a lookup map for fast sink detection and to match sink calls against known patterns.
- Added `package-lock.json` for dependency management.
2025-12-22 23:21:21 +02:00
master
4602ccc3a3 Refactor code structure for improved readability and maintainability; optimize performance in key functions. 2025-12-22 19:10:27 +02:00
StellaOps Bot
634233dfed feat: Implement distro-native version comparison for RPM, Debian, and Alpine packages
- Add RpmVersionComparer for RPM version comparison with epoch, version, and release handling.
- Introduce DebianVersion for parsing Debian EVR (Epoch:Version-Release) strings.
- Create ApkVersion for parsing Alpine APK version strings with suffix support.
- Define IVersionComparator interface for version comparison with proof-line generation.
- Implement VersionComparisonResult struct to encapsulate comparison results and proof lines.
- Add tests for Debian and RPM version comparers to ensure correct functionality and edge case handling.
- Create project files for the version comparison library and its tests.
2025-12-22 09:50:12 +02:00