# Archive Log - 2026-03-03 Completed Sprints Source: `docs/implplan/` Destination: `docs-archived/implplan/2026-03-03-completed-sprints/` Moved sprint files: - SPRINT_20260226_222_Cli_proof_chain_verification_and_replay_parity.md - SPRINT_20260226_223_Platform_score_explain_contract_and_replay_alignment.md - SPRINT_20260226_224_Scanner_oci_referrers_runtime_stack_and_replay_data.md - SPRINT_20260226_225_Attestor_signature_trust_and_verdict_api_hardening.md - SPRINT_20260226_226_Symbols_dsse_rekor_merkle_and_hash_integrity.md - SPRINT_20260226_227_FE_triage_risk_score_widget_wiring_and_parity.md - SPRINT_20260226_228_Tools_supply_chain_fuzz_mutation_hardening_suite.md - SPRINT_20260226_229_DOCS_advisory_hygiene_dedup_and_archival_translation.md - SPRINT_20260226_230_Platform_locale_label_translation_corrections.md All tasks in these files are in `DONE` state with checked completion criteria. ## 2026-03-04 Regression Revalidation Validated archived sprint deliverables with targeted checks: - CLI (`SPRINT_20260226_222`): `StellaOps.Cli.Tests.Commands.Sprint222ProofVerificationTests` -> 4/4 pass. - Platform (`SPRINT_20260226_223`): `ScoreExplainEndpointContractTests` -> 4/4 pass. - Scanner (`SPRINT_20260226_224`): web service + storage + runtime targeted classes -> 16/16 pass. - Attestor (`SPRINT_20260226_225`): `DsseVerifierTests` + `VerdictControllerSecurityTests` -> 21/21 pass. - Symbols (`SPRINT_20260226_226`): `BundleBuilderVerificationTests` -> 5/5 pass. - Web FE (`SPRINT_20260226_227`): `npx tsc --noEmit` pass; Playwright risk/score suites -> 10/10 pass. - Tools (`SPRINT_20260226_228`): `python tests/supply-chain/run_suite.py --profile smoke --seed 20260226` -> all 5 lanes pass. - Docs/locale (`SPRINT_20260226_229/230`): advisory folder contains only `README.md`; all archived sprint files remain `DONE_ONLY`; non-English placeholder scan clean; non-English translation JSON parses clean. ## 2026-03-04 Additional Test Expansion Added and validated extra edge/negative-path tests in sprint-specific classes: - CLI (`SPRINT_20260226_222`): added deterministic checks for missing `--trust-root` and missing Rekor checkpoint path; class now 6/6 pass. - Platform (`SPRINT_20260226_223`): added digest normalization and malformed digest-segment checks; class now 6/6 pass. - Scanner (`SPRINT_20260226_224`): added disabled/missing-image OCI publish cases, missing reachability stack and invalid layer cases, and missing DSSE envelope retrieval case; selected classes now 14/14 pass. - Attestor (`SPRINT_20260226_225`): added roster-entry missing public key case (deterministic `500 authority_key_missing_public_key`); class now 6/6 pass. - Symbols (`SPRINT_20260226_226`): added missing checkpoint while Rekor proof required case (`rekor_proof_required:missing_checkpoint`); class now 6/6 pass. - Web FE (`SPRINT_20260226_227`): reran targeted Playwright suites after expansion work; 10/10 pass on rerun (one transient selector miss observed once, then passing on rerun). ## 2026-03-04 Archive Hygiene - Advisory translation register module-doc mappings for Symbols-related advisories were updated from `docs/modules/symbols/architecture.md` (retired path) to `docs/modules/binary-index/architecture.md` so archived traceability links resolve against current module ownership.