# Audit - StellaOps.Findings.Ledger.WebService

## Project
- Path: `src/Findings/StellaOps.Findings.Ledger.WebService/StellaOps.Findings.Ledger.WebService.csproj`
- Module: `Findings`
- Kind: `WebService`
- SDK: `Microsoft.NET.Sdk.Web`
- TargetFramework: `net10.0`
- Audit date (UTC): 2026-01-30

## Coding Standards Findings
- Status: FAIL
- Nullable: enable
- TreatWarningsAsErrors: explicit true
- Deterministic: inherited true
- 100-line rule violations: 23
- Service locator usage (BuildServiceProvider/GetService): 0
- Analyzer enforcement: missing repo-wide (see summary).

### Details
- 100-line files:
  - `src/Findings/StellaOps.Findings.Ledger.WebService/Program.cs` (2043 lines)
  - `src/Findings/StellaOps.Findings.Ledger.WebService/Contracts/ScoringContracts.cs` (646 lines)
  - `src/Findings/StellaOps.Findings.Ledger.WebService/Services/VexConsensusService.cs` (555 lines)
  - `src/Findings/StellaOps.Findings.Ledger.WebService/Services/FindingScoringService.cs` (529 lines)
  - `src/Findings/StellaOps.Findings.Ledger.WebService/Contracts/SnapshotContracts.cs` (460 lines)
  - `src/Findings/StellaOps.Findings.Ledger.WebService/Services/EvidenceGraphBuilder.cs` (426 lines)
  - `src/Findings/StellaOps.Findings.Ledger.WebService/Contracts/AlertContracts.cs` (394 lines)
  - `src/Findings/StellaOps.Findings.Ledger.WebService/Contracts/BackportContracts.cs` (364 lines)
  - `src/Findings/StellaOps.Findings.Ledger.WebService/Contracts/AttestationPointerContracts.cs` (344 lines)
  - `src/Findings/StellaOps.Findings.Ledger.WebService/Services/WebhookService.cs` (312 lines)
  - `src/Findings/StellaOps.Findings.Ledger.WebService/Services/ExportQueryService.cs` (304 lines)
  - `src/Findings/StellaOps.Findings.Ledger.WebService/Services/FindingEvidenceProvider.cs` (290 lines)
  - `src/Findings/StellaOps.Findings.Ledger.WebService/Services/AttestationQueryService.cs` (267 lines)
  - `src/Findings/StellaOps.Findings.Ledger.WebService/Contracts/VexLensContracts.cs` (258 lines)
  - `src/Findings/StellaOps.Findings.Ledger.WebService/Contracts/RuntimeTracesContracts.cs` (255 lines)
  - `src/Findings/StellaOps.Findings.Ledger.WebService/Endpoints/ScoringEndpoints.cs` (238 lines)
  - `src/Findings/StellaOps.Findings.Ledger.WebService/Contracts/EvidenceGraphContracts.cs` (199 lines)
  - `src/Findings/StellaOps.Findings.Ledger.WebService/Services/FindingSummaryBuilder.cs` (195 lines)
  - `src/Findings/StellaOps.Findings.Ledger.WebService/Endpoints/WebhookEndpoints.cs` (175 lines)
  - `src/Findings/StellaOps.Findings.Ledger.WebService/Contracts/FindingSummary.cs` (174 lines)
  - `src/Findings/StellaOps.Findings.Ledger.WebService/Services/ScoreHistoryStore.cs` (172 lines)
  - `src/Findings/StellaOps.Findings.Ledger.WebService/Endpoints/RuntimeTracesEndpoints.cs` (121 lines)
  - `src/Findings/StellaOps.Findings.Ledger.WebService/Contracts/ExportContracts.cs` (121 lines)
- Service locator matches:
  - none

### Fix Guidance
- Split files over 100 lines into smaller types or partials.

## Testing Fullness Findings
- Status: FAIL
- Expected layers: Unit, Integration, Security, Offline
- Detected test projects: none
- Missing layers: Unit, Integration, Security, Offline

### Manual checks required
- Observability contract tests for WebService/Worker.
- Offline execution (tests must run without network access).

### Fix Guidance
- Add a unit test project named `<Project>.Tests` (or document exception).
- Add integration tests for cross-component flows.
- Add security tests for authn/authz or input validation.
- Add offline/airgap coverage with fixtures only.