{ "module": "riskengine", "featureCount": 3, "lastUpdatedUtc": "2026-02-11T00:27:19.2443974Z", "summary": { "passed": 3, "failed": 0, "blocked": 0, "skipped": 0, "done": 3 }, "buildNote": "RiskEngine strict module sweep run-014 captured fresh live HTTPS API evidence for provider simulations and exploit-maturity endpoints, then reran RiskEngine.Tests in Release (94/94).", "features": { "cvss-kev-risk-signal-combination": { "status": "done", "tier": 2, "retryCount": 1, "sourceVerified": true, "buildVerified": true, "e2eVerified": true, "skipReason": null, "lastRunId": "run-014", "lastUpdatedUtc": "2026-02-11T00:27:19.2443974Z", "featureFile": "docs/features/checked/riskengine/cvss-kev-risk-signal-combination.md", "notes": [ "[2026-02-10T04:00:00Z] checking: CvssKevProvider (deterministic formula), VexGateProvider, FixExposureProvider, FixChainRiskProvider (349 lines). 44+ tests.", "[2026-02-10T04:00:00Z] done: Moved to checked/", "[2026-02-10T12:18:30Z] retesting: Tier 2 API recheck started for /risk-scores/providers and /risk-scores/simulations.", "[2026-02-10T12:18:45Z] failed: API replay exposed end-user reachability gap for EPSS-family providers/signals.", "[2026-02-10T12:19:30Z] triaged: missing_code -- WebService provider registry omitted epss/cvss-kev-epss and provider scoring paths did not honor inline simulation signals before null-source fallback.", "[2026-02-10T12:21:14Z] done: Added provider registration, inline-signal fallback scoring, and API/provider regression tests. RiskEngine.Tests 94/94 pass. Evidence: docs/qa/feature-checks/runs/riskengine/cvss-kev-risk-signal-combination/run-002/tier2-api-check.json.", "[2026-02-10T14:12:44Z] done: Tier 2 API replay revalidated checked behavior after recent edits. Evidence: docs/qa/feature-checks/runs/riskengine/cvss-kev-risk-signal-combination/run-003/tier2-api-check.json.", "[2026-02-10T19:37:59Z] done: Tier 2 API replay run-004 revalidated checked behavior after latest replay (94/94). Evidence: docs/qa/feature-checks/runs/riskengine/cvss-kev-risk-signal-combination/run-004/tier2-api-check.json.", "[2026-02-10T19:57:00Z] done: Tier 2 API replay run-005 revalidated checked behavior after latest replay (94/94). Evidence: docs/qa/feature-checks/runs/riskengine/cvss-kev-risk-signal-combination/run-005/tier2-api-check.json.", "[2026-02-10T20:29:43Z] done: Tier 2 API replay run-006 revalidated checked behavior after latest replay (94/94). Evidence: docs/qa/feature-checks/runs/riskengine/cvss-kev-risk-signal-combination/run-006/tier2-api-check.json.", "[2026-02-10T20:41:28Z] done: Tier 2 API replay run-007 revalidated checked behavior after latest replay (94/94). Evidence: docs/qa/feature-checks/runs/riskengine/cvss-kev-risk-signal-combination/run-007/tier2-api-check.json.", "[2026-02-10T21:00:59Z] done: Tier 2 API replay run-008 revalidated checked behavior after latest replay (94/94). Evidence: docs/qa/feature-checks/runs/riskengine/cvss-kev-risk-signal-combination/run-008/tier2-api-check.json.", "[2026-02-10T21:22:14Z] done: Tier 2 API replay run-009 revalidated checked behavior after latest replay (94/94). Evidence: docs/qa/feature-checks/runs/riskengine/cvss-kev-risk-signal-combination/run-009/tier2-api-check.json.", "[2026-02-10T21:36:00Z] done: Tier 2 integration replay run-010 passed for checked feature (RiskEngine.Tests 94/94). Evidence: docs/qa/feature-checks/runs/riskengine/cvss-kev-risk-signal-combination/run-010/tier2-integration-check.json.", "[2026-02-10T21:54:11Z] done: Tier 2 integration replay run-011 passed for checked feature (RiskEngine.Tests 94/94). Evidence: docs/qa/feature-checks/runs/riskengine/cvss-kev-risk-signal-combination/run-011/tier2-integration-check.json.", "[2026-02-10T22:43:49Z] done: Tier 2 API replay run-012 passed for checked feature (RiskEngine.Tests 94/94). Evidence: docs/qa/feature-checks/runs/riskengine/cvss-kev-risk-signal-combination/run-012/tier2-api-check.json.", "[2026-02-10T23:07:40Z] done: Tier 2 API run-013 captured fresh live HTTPS evidence for providers listing, CVSS+KEV simulation (0.95), CVSS-only simulation (0.75), and unknown-provider error semantics; RiskEngine.Tests 94/94. Evidence: docs/qa/feature-checks/runs/riskengine/cvss-kev-risk-signal-combination/run-013/tier2-api-check.json.", "[2026-02-11T00:27:19.2443974Z] done: Strict Tier 2 API replay run-014 captured fresh providers/cvss-kev/unknown-provider behavior; RiskEngine.Tests 94/94. Evidence: docs/qa/feature-checks/runs/riskengine/cvss-kev-risk-signal-combination/run-014/tier2-api-check.json." ] }, "epss-risk-band-mapping": { "status": "done", "tier": 2, "retryCount": 1, "sourceVerified": true, "buildVerified": true, "e2eVerified": true, "skipReason": null, "lastRunId": "run-014", "lastUpdatedUtc": "2026-02-11T00:27:19.2443974Z", "featureFile": "docs/features/checked/riskengine/epss-risk-band-mapping.md", "notes": [ "[2026-02-10T04:00:00Z] checking: EpssProvider + CvssKevEpssProvider (124 lines), EpssBundleLoader (224 lines), EpssFetcher (223 lines). 14+ tests.", "[2026-02-10T04:00:00Z] done: Moved to checked/", "[2026-02-10T12:19:00Z] retesting: Tier 2 API recheck started for epss and cvss-kev-epss simulation paths.", "[2026-02-10T12:19:15Z] failed: EPSS simulation path required provider registration/signal ingress fixes to satisfy end-user replay checks.", "[2026-02-10T12:19:30Z] triaged: missing_code -- EPSS providers were not registered in public provider list and EPSS inline simulation signals were not consumed before null-source fallback.", "[2026-02-10T12:21:14Z] done: Added provider registration plus inline EPSS signal handling and API regression tests. RiskEngine.Tests 94/94 pass. Evidence: docs/qa/feature-checks/runs/riskengine/epss-risk-band-mapping/run-002/tier2-api-check.json.", "[2026-02-10T14:12:44Z] done: Tier 2 API replay revalidated checked behavior after recent edits. Evidence: docs/qa/feature-checks/runs/riskengine/epss-risk-band-mapping/run-003/tier2-api-check.json.", "[2026-02-10T19:37:59Z] done: Tier 2 API replay run-004 revalidated checked behavior after latest replay (94/94). Evidence: docs/qa/feature-checks/runs/riskengine/epss-risk-band-mapping/run-004/tier2-api-check.json.", "[2026-02-10T19:57:00Z] done: Tier 2 API replay run-005 revalidated checked behavior after latest replay (94/94). Evidence: docs/qa/feature-checks/runs/riskengine/epss-risk-band-mapping/run-005/tier2-api-check.json.", "[2026-02-10T20:29:43Z] done: Tier 2 API replay run-006 revalidated checked behavior after latest replay (94/94). Evidence: docs/qa/feature-checks/runs/riskengine/epss-risk-band-mapping/run-006/tier2-api-check.json.", "[2026-02-10T20:41:28Z] done: Tier 2 API replay run-007 revalidated checked behavior after latest replay (94/94). Evidence: docs/qa/feature-checks/runs/riskengine/epss-risk-band-mapping/run-007/tier2-api-check.json.", "[2026-02-10T21:00:59Z] done: Tier 2 API replay run-008 revalidated checked behavior after latest replay (94/94). Evidence: docs/qa/feature-checks/runs/riskengine/epss-risk-band-mapping/run-008/tier2-api-check.json.", "[2026-02-10T21:22:14Z] done: Tier 2 API replay run-009 revalidated checked behavior after latest replay (94/94). Evidence: docs/qa/feature-checks/runs/riskengine/epss-risk-band-mapping/run-009/tier2-api-check.json.", "[2026-02-10T21:36:00Z] done: Tier 2 integration replay run-010 passed for checked feature (RiskEngine.Tests 94/94). Evidence: docs/qa/feature-checks/runs/riskengine/epss-risk-band-mapping/run-010/tier2-integration-check.json.", "[2026-02-10T21:54:11Z] done: Tier 2 integration replay run-011 passed for checked feature (RiskEngine.Tests 94/94). Evidence: docs/qa/feature-checks/runs/riskengine/epss-risk-band-mapping/run-011/tier2-integration-check.json.", "[2026-02-10T22:43:49Z] done: Tier 2 API replay run-012 passed for checked feature (RiskEngine.Tests 94/94). Evidence: docs/qa/feature-checks/runs/riskengine/epss-risk-band-mapping/run-012/tier2-api-check.json.", "[2026-02-10T23:07:40Z] done: Tier 2 API run-013 captured fresh live HTTPS evidence for EPSS score mapping (0.77), combined CVSS+KEV+EPSS percentile bonus path (0.55), and missing-signal fallback (0); RiskEngine.Tests 94/94. Evidence: docs/qa/feature-checks/runs/riskengine/epss-risk-band-mapping/run-013/tier2-api-check.json.", "[2026-02-11T00:27:19.2443974Z] done: Strict Tier 2 API replay run-014 captured fresh epss and cvss-kev-epss signal mapping behavior; RiskEngine.Tests 94/94. Evidence: docs/qa/feature-checks/runs/riskengine/epss-risk-band-mapping/run-014/tier2-api-check.json." ] }, "exploit-maturity-mapping": { "status": "done", "tier": 2, "retryCount": 0, "sourceVerified": true, "buildVerified": true, "e2eVerified": true, "skipReason": null, "lastRunId": "run-014", "lastUpdatedUtc": "2026-02-11T00:27:19.2443974Z", "featureFile": "docs/features/checked/riskengine/exploit-maturity-mapping.md", "notes": [ "[2026-02-10T04:00:00Z] checking: ExploitMaturityService (227 lines), ExploitMaturityModels (89 lines), ExploitMaturityEndpoints (134 lines). 23 tests.", "[2026-02-10T04:00:00Z] note: GetMaturityHistoryAsync returns empty (requires persistence). Core assessment service fully functional.", "[2026-02-10T04:00:00Z] done: Moved to checked/", "[2026-02-10T12:19:30Z] done: Tier 2 API replay passed for assessment, level, history, and batch endpoints. Evidence: docs/qa/feature-checks/runs/riskengine/exploit-maturity-mapping/run-002/tier2-api-check.json.", "[2026-02-10T14:12:44Z] done: Tier 2 API replay revalidated checked behavior after recent edits. Evidence: docs/qa/feature-checks/runs/riskengine/exploit-maturity-mapping/run-003/tier2-api-check.json.", "[2026-02-10T19:37:59Z] done: Tier 2 API replay run-004 revalidated checked behavior after latest replay (94/94). Evidence: docs/qa/feature-checks/runs/riskengine/exploit-maturity-mapping/run-004/tier2-api-check.json.", "[2026-02-10T19:57:00Z] done: Tier 2 API replay run-005 revalidated checked behavior after latest replay (94/94). Evidence: docs/qa/feature-checks/runs/riskengine/exploit-maturity-mapping/run-005/tier2-api-check.json.", "[2026-02-10T20:29:43Z] done: Tier 2 API replay run-006 revalidated checked behavior after latest replay (94/94). Evidence: docs/qa/feature-checks/runs/riskengine/exploit-maturity-mapping/run-006/tier2-api-check.json.", "[2026-02-10T20:41:28Z] done: Tier 2 API replay run-007 revalidated checked behavior after latest replay (94/94). Evidence: docs/qa/feature-checks/runs/riskengine/exploit-maturity-mapping/run-007/tier2-api-check.json.", "[2026-02-10T21:00:59Z] done: Tier 2 API replay run-008 revalidated checked behavior after latest replay (94/94). Evidence: docs/qa/feature-checks/runs/riskengine/exploit-maturity-mapping/run-008/tier2-api-check.json.", "[2026-02-10T21:22:14Z] done: Tier 2 API replay run-009 revalidated checked behavior after latest replay (94/94). Evidence: docs/qa/feature-checks/runs/riskengine/exploit-maturity-mapping/run-009/tier2-api-check.json.", "[2026-02-10T21:36:00Z] done: Tier 2 integration replay run-010 passed for checked feature (RiskEngine.Tests 94/94). Evidence: docs/qa/feature-checks/runs/riskengine/exploit-maturity-mapping/run-010/tier2-integration-check.json.", "[2026-02-10T21:54:11Z] done: Tier 2 integration replay run-011 passed for checked feature (RiskEngine.Tests 94/94). Evidence: docs/qa/feature-checks/runs/riskengine/exploit-maturity-mapping/run-011/tier2-integration-check.json.", "[2026-02-10T22:43:49Z] done: Tier 2 API replay run-012 passed for checked feature (RiskEngine.Tests 94/94). Evidence: docs/qa/feature-checks/runs/riskengine/exploit-maturity-mapping/run-012/tier2-api-check.json.", "[2026-02-10T23:07:40Z] done: Tier 2 API run-013 captured fresh live HTTPS evidence for exploit-maturity assessment/level/history plus batch success and batch-empty 400 validation; RiskEngine.Tests 94/94. Evidence: docs/qa/feature-checks/runs/riskengine/exploit-maturity-mapping/run-013/tier2-api-check.json.", "[2026-02-11T00:27:19.2443974Z] done: Strict Tier 2 API replay run-014 captured fresh exploit-maturity assess/level/history and batch validation semantics; RiskEngine.Tests 94/94. Evidence: docs/qa/feature-checks/runs/riskengine/exploit-maturity-mapping/run-014/tier2-api-check.json." ] } } }