# UI v2 Rewire Multi Sprint Plan (Draft 2 - Pack 22)

Status: Ready for sprint authoring
Date: 2026-02-20
Source set: `source-of-truth.md`, `authority-matrix.md`, `sprint-planning-guide.md`, `S00_endpoint_contract_ledger_v2_pack22.md`

## Scope and intent

This plan decomposes the Pack 22 advisory into execution sprints with explicit backend dependency ordering.

Precedence rule: higher pack number wins for overlap.

## Mandatory contract workflow (all sprints)

For each screen in sprint scope, classify backend readiness:

- `EXISTS_COMPAT`
- `EXISTS_ADAPT`
- `MISSING_NEW`

Each sprint must produce or update a contract ledger with:

- screen,
- required behavior,
- current endpoint candidate,
- status class,
- auth scope impact,
- schema delta,
- owner module.

## Wave map

| Wave | Sprints | Goal |
| --- | --- | --- |
| Wave 0 | S22-00 | Freeze Pack 22 canonical doc set and contract baseline |
| Wave 1 | S22-01, S22-02, S22-03 | Backend dependencies and DB migrations |
| Wave 2 | S22-04, S22-05 | FE nav shell and Releases consolidation |
| Wave 3 | S22-06, S22-07, S22-08 | Topology/Operations, Security/Evidence, Integrations/Admin alignment |
| Wave 4 | S22-09, S22-10 | Redirect cutover, Playwright conformity, release readiness |

## Sprint catalog

### S22-00 - Spec freeze for Pack 22

- Canonical packs: 22 (+ fallback packs per authority matrix)
- Goal: lock naming, ownership, and route intent before further implementation.
- Primary outputs:
  - updated `source-of-truth.md`
  - updated `authority-matrix.md`
  - Pack 22 contract ledger baseline
- Dependencies: none.

### S22-01 - Backend context and releases read models (dependency sprint)

- Canonical packs: 22, 12, 13, 14, 17
- Working directory (implementation): `src/Platform/StellaOps.Platform.WebService`
- Goal: deliver global context and releases v2 contracts with DB backing.
- Primary outputs:
  - `/api/v2/context/*`
  - `/api/v2/releases/*` (list/detail/activity/approvals queue)
  - DB migrations `047_*.sql`, `048_*.sql`
- Dependencies: S22-00.

### S22-02 - Backend topology inventory contracts (dependency sprint)

- Canonical packs: 22, 18
- Working directory (implementation): `src/Platform/StellaOps.Platform.WebService`
- Goal: deliver Topology APIs and inventory projections.
- Primary outputs:
  - `/api/v2/topology/*`
  - DB migration `049_*.sql`
- Dependencies: S22-00.

### S22-03 - Backend security disposition contracts (dependency sprint)

- Canonical packs: 22, 19
- Working directory (implementation): `src/Platform/StellaOps.Platform.WebService`
- Goal: consolidate findings/disposition/SBOM contracts for Security.
- Primary outputs:
  - `/api/v2/security/findings`
  - `/api/v2/security/disposition`
  - `/api/v2/security/sbom-explorer`
  - DB migration `050_*.sql`
- Dependencies: S22-00.

### S22-04 - FE nav shell migration

- Canonical packs: 22, 16
- Working directory (implementation): `src/Web/StellaOps.Web`
- Goal: migrate root IA and top-bar global context controls.
- Primary outputs:
  - root route rename to canonical Pack 22 modules
  - sidebar and breadcrumbs updated
  - temporary legacy alias redirects
- Dependencies: S22-01 for context contract.

### S22-05 - FE Releases module consolidation

- Canonical packs: 22, 12, 13, 14, 17
- Working directory (implementation): `src/Web/StellaOps.Web`
- Goal: collapse release lifecycle surfaces into Releases module.
- Primary outputs:
  - Releases list/detail/activity/approvals queue
  - old standalone runs/deployments/promotions/hotfix routes redirected
- Dependencies: S22-01.

### S22-06 - FE Topology and Operations boundary alignment

- Canonical packs: 22, 18, 15
- Working directory (implementation): `src/Web/StellaOps.Web`
- Goal: move inventory pages to Topology and keep runtime state in Operations.
- Primary outputs:
  - Topology module pages
  - Operations cleanup after agent/inventory migration
- Dependencies: S22-02.

### S22-07 - FE Security consolidation

- Canonical packs: 22, 19
- Working directory (implementation): `src/Web/StellaOps.Web`
- Goal: implement Risk Overview + Findings + Disposition + SBOM Explorer.
- Primary outputs:
  - consolidated Security routes and nav
  - disposition UX that composes VEX + Exceptions data
- Dependencies: S22-03.

### S22-08 - FE Evidence/Integrations/Admin alignment

- Canonical packs: 22, 20, 10, 21
- Working directory (implementation): `src/Web/StellaOps.Web`
- Goal: align evidence links, feed/vex source setup placement, and admin boundaries.
- Primary outputs:
  - evidence cross-links from releases/security/approvals
  - integrations feed/vex source setup placement
  - trust posture links with admin-owner mutations preserved
- Dependencies: S22-01 and S22-03.

### S22-09 - Route deprecation and redirect cutover

- Canonical packs: 22 plus affected domain packs
- Working directory (implementation): `src/Web/StellaOps.Web`
- Goal: preserve deep links while switching canonical roots.
- Primary outputs:
  - full redirect map and telemetry
  - breadcrumb compatibility labels
- Dependencies: S22-04 to S22-08.

### S22-10 - E2E conformity and release readiness

- Canonical packs: all active authority packs
- Working directory (implementation): `src/Web/StellaOps.Web`
- Goal: prove behavior against Pack 22 and fallback pack details.
- Primary outputs:
  - Playwright route and interaction evidence
  - screenshot pack for auditor handoff
  - final contract ledger closure report
- Dependencies: S22-04 to S22-09.

## Cross-module backend ownership map (planning)

These modules are expected to receive backend contract work during Pack 22 migration:

- `src/Platform/`
- `src/ReleaseOrchestrator/`
- `src/Policy/`
- `src/Scanner/`
- `src/Integrations/`
- `src/EvidenceLocker/`
- `src/Attestor/`
- `src/Scheduler/`

Each sprint that touches these must include explicit cross-module allowance in its sprint file.

## Initial sequencing recommendation

1. Complete S22-00 documentation freeze.
2. Execute S22-01, S22-02, S22-03 as backend dependency lane.
3. Start FE with S22-04 and S22-05 after S22-01 API availability.
4. Run S22-06, S22-07, S22-08 with dependency gating.
5. Finish with S22-09 migration cutover and S22-10 QA signoff.

## Proposed sprint filename seeds (for `docs/implplan` authoring)

- `SPRINT_20260220_018_Platform_pack22_backend_contracts_and_migrations.md` (S22-01 + S22-02 + S22-03 baseline)
- `SPRINT_20260220_019_FE_pack22_ia_rewire_and_route_migration.md` (S22-04 + S22-05 baseline)
- `SPRINT_20260220_020_FE_pack22_releases_security_detailed_workbench.md` (incremental extension of S22-06/S22-07 scope)
- `SPRINT_20260220_021_FE_pack22_run_centric_releases_platform_scope.md` (run-centric extension across S22-06 to S22-08 scope)
- `SPRINT_20260220_022_FE_pack22_run_detail_provenance_contract.md` (run-detail contract hardening extension)
- `SPRINT_20260220_023_Platform_pack22_run_detail_backend_provenance_companion.md` (backend companion dependency for sprint 022)
- `SPRINT_20260220_024_FE_pack22_redirect_cutover.md` (S22-09 target)
- `SPRINT_20260220_025_FE_pack22_release_readiness_qa.md` (S22-10 target)