# StellaOps.Scanner.Sbomer.BuildXPlugin — Agent Charter ## Mission Implement the build-time SBOM generator described in `docs/ARCHITECTURE_SCANNER.md` and new buildx dossier requirements: - Provide a deterministic BuildKit/Buildx generator that produces layer SBOM fragments and uploads them to local CAS. - Emit OCI annotations (+provenance) compatible with Scanner.Emit and Attestor hand-offs. - Respect restart-time plug-in policy (`plugins/scanner/buildx/` manifests) and keep CI overhead ≤300 ms per layer. ## Expectations - Read architecture + upcoming Buildx addendum before coding. - Ensure graceful fallback to post-build scan when generator unavailable. - Provide integration tests with mock BuildKit, and update `TASKS.md` as states change.