# AGENTS - Zastava Module

## Mission
Deliver runtime posture observation and admission enforcement for container workloads, integrating with Scanner and Policy outputs while remaining offline-ready and deterministic.

## Roles
- Backend engineer (.NET 10, C# preview).
- QA engineer (unit/integration tests with deterministic fixtures).
- Ops/documentation (update deployment/runbooks when contracts change).

## Required Reading
- `docs/README.md`
- `docs/07_HIGH_LEVEL_ARCHITECTURE.md`
- `docs/modules/platform/architecture-overview.md`
- `docs/modules/zastava/architecture.md`
- `docs/modules/scanner/architecture.md`
- `docs/modules/policy/architecture.md`
- `docs/modules/airgap/guides/airgap-mode.md`
- `docs/operations/devops/runbooks/zastava-deployment.md`

## Working Directory & Boundaries
- Primary scope: `src/Zastava/**`
- Core library: `src/Zastava/__Libraries/StellaOps.Zastava.Core/`
- Observer: `src/Zastava/StellaOps.Zastava.Observer/`
- Webhook: `src/Zastava/StellaOps.Zastava.Webhook/`

## Determinism & Offline Rules
- Normalize timestamps and IDs; stable ordering in emitted events.
- Offline-first; avoid external network calls in runtime paths.

## Testing Expectations
- Unit tests for event schemas and validation logic.
- Integration tests for observer/webhook pipelines when feasible.

## Workflow
- Update sprint status on task transitions.
- Record decisions/risks in sprint Execution Log and Decisions & Risks.