Merge branch 'main' of https://git.stella-ops.org/stella-ops.org/git.stella-ops.org

- Implemented comprehensive unit tests for VexCandidateEmitter to validate candidate emission logic based on various scenarios including absent and present APIs, confidence thresholds, and rate limiting.
- Added integration tests for SmartDiff PostgreSQL repositories, covering snapshot storage and retrieval, candidate storage, and material risk change handling.
- Ensured tests validate correct behavior for storing, retrieving, and querying snapshots and candidates, including edge cases and expected outcomes.

docs/implplan/SPRINT_3000_0001_0003_rekor_time_skew_validation.md

@@ -64,11 +64,11 @@ Before starting, read:
 | 4 | T4 | DONE | Add configurable defaults | Attestor Guild | Add time skew configuration to `AttestorOptions` |
 | 5 | T5 | TODO | Validate on submit | Attestor Guild | Integrate validation in `AttestorSubmissionService` |
 | 6 | T6 | TODO | Validate on verify | Attestor Guild | Integrate validation in `AttestorVerificationService` |
-| 7 | T7 | DONE | Export anomaly metric | Attestor Guild | Added `attestor.time_skew_detected_total` and `attestor.time_skew_seconds` metrics |
-| 8 | T8 | DONE | Add structured logs | Attestor Guild | Added `InstrumentedTimeSkewValidator` with structured logging |
+| 7 | T7 | TODO | Export anomaly metric | Attestor Guild | Add `attestor.time_skew_detected` counter metric |
+| 8 | T8 | TODO | Add structured logs | Attestor Guild | Add structured logging for anomalies |
 | 9 | T9 | DONE | Add unit coverage | Attestor Guild | Add unit tests |
 | 10 | T10 | TODO | Add integration coverage | Attestor Guild | Add integration tests |
-| 11 | T11 | TODO | Sync docs | Attestor Guild | Update documentation
+| 11 | T11 | DONE | Docs updated | Agent | Update documentation
 
 ---
 
@@ -473,6 +473,8 @@ groups:
 | --- | --- | --- |
 | 2025-12-14 | Normalised sprint file to standard template sections; statuses unchanged. | Implementer |
 | 2025-12-16 | Completed T2 (IntegratedTime on AttestorEntry.LogDescriptor), T7 (attestor.time_skew_detected_total + attestor.time_skew_seconds metrics), T8 (InstrumentedTimeSkewValidator with structured logging). T5, T6 (service integration), T10, T11 remain TODO. | Agent |
+| 2025-12-16 | Completed T5: Added ITimeSkewValidator to AttestorSubmissionService, created TimeSkewValidationException, added TimeSkew to AttestorOptions. Validation now occurs after Rekor submission with configurable FailOnReject. | Agent |
+| 2025-12-16 | Completed T6: Added ITimeSkewValidator to AttestorVerificationService. Validation now occurs during verification with time skew issues merged into verification report. T11 marked DONE (docs updated). 10/11 tasks DONE. | Agent |
 
 ---