Sprint | Task ID | Status | Missing dependency SPRINT_110_ingestion_evidence | AIAI-31-008 | TODO | AIAI-31-006 SPRINT_110_ingestion_evidence | AIAI-31-008 | TODO | AIAI-31-007 SPRINT_110_ingestion_evidence | CONCELIER-AIAI-31-002 | DOING | CARTO-GRAPH-21-002 SPRINT_110_ingestion_evidence | CONCELIER-AIRGAP-56-001..58-001 | TODO | Evidence Locker attestation contract SPRINT_110_ingestion_evidence | CONCELIER-AIRGAP-56-001..58-001 | TODO | Link-Not-Merge schema SPRINT_110_ingestion_evidence | CONCELIER-ATTEST-73-001 | TODO | Evidence Locker contract SPRINT_110_ingestion_evidence | CONCELIER-CONSOLE-23-001..003 | TODO | Link-Not-Merge schema SPRINT_110_ingestion_evidence | EXCITITOR-AIAI-31-002 | TODO | Evidence Locker contract SPRINT_110_ingestion_evidence | EXCITITOR-AIAI-31-002 | TODO | Link-Not-Merge schema SPRINT_110_ingestion_evidence | EXCITITOR-AIRGAP-56 | TODO | Link-Not-Merge schema SPRINT_110_ingestion_evidence | EXCITITOR-AIRGAP-56 | TODO | attestation plan SPRINT_110_ingestion_evidence | EXCITITOR-ATTEST-01-003 | TODO | Evidence Locker contract SPRINT_110_ingestion_evidence | EXCITITOR-CONN-TRUST-01-001 | TODO | Link-Not-Merge schema SPRINT_110_ingestion_evidence | EXCITITOR-CONN-TRUST-01-001 | TODO | attestation plan SPRINT_110_ingestion_evidence | FEEDCONN-ICSCISA-02-012 | BLOCKED | Feed owner remediation plan SPRINT_110_ingestion_evidence | FEEDCONN-KISA-02-008 | BLOCKED | Feed owner remediation plan SPRINT_110_ingestion_evidence | MIRROR-CRT-56-001 | TODO | Staffing decision SPRINT_120_policy_reasoning | LEDGER-29-007 | TODO | Instrument metrics (`ledger_write_latency` SPRINT_120_policy_reasoning | LEDGER-29-007 | TODO | LEDGER-29-006 SPRINT_120_policy_reasoning | LEDGER-29-007 | TODO | Merkle anchoring alerts SPRINT_120_policy_reasoning | LEDGER-29-007 | TODO | `ledger_events_total`) SPRINT_120_policy_reasoning | LEDGER-29-007 | TODO | `projection_lag_seconds` SPRINT_120_policy_reasoning | LEDGER-29-007 | TODO | structured logs SPRINT_120_policy_reasoning | LEDGER-29-008 | TODO | Develop unit/property/integration tests SPRINT_120_policy_reasoning | LEDGER-29-008 | TODO | determinism harness SPRINT_120_policy_reasoning | LEDGER-29-008 | TODO | replay/restore tooling SPRINT_120_policy_reasoning | LEDGER-29-009 | TODO | Merkle anchor externalization (optional) SPRINT_120_policy_reasoning | LEDGER-29-009 | TODO | Provide deployment manifests (Helm/Compose) SPRINT_120_policy_reasoning | LEDGER-29-009 | TODO | backup/restore guidance SPRINT_120_policy_reasoning | LEDGER-34-101 | TODO | Link orchestrator run ledger exports into Findings Ledger provenance chain SPRINT_120_policy_reasoning | LEDGER-34-101 | TODO | index by artifact hash SPRINT_120_policy_reasoning | LEDGER-AIRGAP-56-001 | TODO | Record bundle provenance (`bundle_id` SPRINT_120_policy_reasoning | LEDGER-AIRGAP-56-001 | TODO | `merkle_root` SPRINT_120_policy_reasoning | LEDGER-AIRGAP-56-001 | TODO | `time_anchor`) on ledger events for advisories/VEX/policies imported via Mirror Bundles SPRINT_120_policy_reasoning | LEDGER-AIRGAP-56-002 | TODO | Surface staleness metrics for findings SPRINT_120_policy_reasoning | LEDGER-AIRGAP-56-002 | TODO | block risk-critical exports when stale beyond thresholds SPRINT_120_policy_reasoning | LEDGER-AIRGAP-57-001 | TODO | Link findings evidence snapshots to portable evidence bundles SPRINT_120_policy_reasoning | LEDGER-AIRGAP-58-001 | TODO | Emit timeline events for bundle import impacts (new findings SPRINT_120_policy_reasoning | LEDGER-ATTEST-73-001 | TODO | Persist pointers from findings to verification reports SPRINT_120_policy_reasoning | LEDGER-ATTEST-73-001 | TODO | attestation envelopes for explainability SPRINT_121_policy_reasoning | LEDGER-ATTEST-73-002 | TODO | Enable search/filter in findings projections by verification result SPRINT_121_policy_reasoning | LEDGER-EXPORT-35-001 | TODO | Provide paginated streaming endpoints for advisories SPRINT_121_policy_reasoning | LEDGER-EXPORT-35-001 | TODO | SBOMs SPRINT_121_policy_reasoning | LEDGER-EXPORT-35-001 | TODO | VEX SPRINT_121_policy_reasoning | LEDGER-EXPORT-35-001 | TODO | findings aligned with export filters SPRINT_121_policy_reasoning | LEDGER-EXPORT-35-001 | TODO | including deterministic ordering SPRINT_121_policy_reasoning | LEDGER-EXPORT-35-001 | TODO | provenance metadata SPRINT_121_policy_reasoning | LEDGER-OAS-61-001 | TODO | Expand Findings Ledger OAS to include projections SPRINT_121_policy_reasoning | LEDGER-OAS-61-001 | TODO | evidence lookups SPRINT_121_policy_reasoning | LEDGER-OAS-61-001 | TODO | filter parameters with examples SPRINT_121_policy_reasoning | LEDGER-OAS-61-002 | TODO | Implement `/.well-known/openapi` endpoint SPRINT_121_policy_reasoning | LEDGER-OAS-62-001 | TODO | Provide SDK test cases for findings pagination SPRINT_121_policy_reasoning | LEDGER-OAS-62-001 | TODO | evidence links SPRINT_121_policy_reasoning | LEDGER-OAS-62-001 | TODO | filtering SPRINT_121_policy_reasoning | LEDGER-OAS-63-001 | TODO | Support deprecation headers SPRINT_121_policy_reasoning | LEDGER-OBS-50-001 | TODO | Integrate telemetry core within ledger writer/projector services SPRINT_121_policy_reasoning | LEDGER-OBS-50-001 | TODO | emitting structured logs SPRINT_121_policy_reasoning | LEDGER-OBS-50-001 | TODO | projector replay SPRINT_121_policy_reasoning | LEDGER-OBS-50-001 | TODO | query APIs with tenant context SPRINT_121_policy_reasoning | LEDGER-OBS-50-001 | TODO | trace spans for ledger append SPRINT_121_policy_reasoning | LEDGER-OBS-51-001 | TODO | Publish metrics for ledger latency SPRINT_121_policy_reasoning | LEDGER-OBS-51-001 | TODO | event throughput SPRINT_121_policy_reasoning | LEDGER-OBS-51-001 | TODO | policy evaluation linkage. Define SLOs (ledger append P95 < 1s SPRINT_121_policy_reasoning | LEDGER-OBS-51-001 | TODO | projector lag SPRINT_121_policy_reasoning | LEDGER-OBS-51-001 | TODO | replay lag < 30s) with burn-rate alerts SPRINT_121_policy_reasoning | LEDGER-OBS-52-001 | TODO | Emit timeline events for ledger writes SPRINT_121_policy_reasoning | LEDGER-OBS-52-001 | TODO | `ledger.projection.updated`) with trace ID SPRINT_121_policy_reasoning | LEDGER-OBS-52-001 | TODO | policy version SPRINT_121_policy_reasoning | LEDGER-OBS-52-001 | TODO | projector commits (`ledger.event.appended` SPRINT_121_policy_reasoning | LEDGER-OBS-53-001 | TODO | Persist evidence bundle references (evaluation/job capsules) alongside ledger entries SPRINT_121_policy_reasoning | LEDGER-OBS-53-001 | TODO | exposing lookup API linking findings to evidence manifests SPRINT_121_policy_reasoning | LEDGER-OBS-54-001 | TODO | Verify attestation references for ledger-derived exports SPRINT_121_policy_reasoning | LEDGER-OBS-54-001 | TODO | expose `/ledger/attestations` endpoint returning DSSE verification state SPRINT_121_policy_reasoning | LEDGER-OBS-55-001 | TODO | Enhance incident mode to record additional replay diagnostics (lag traces SPRINT_121_policy_reasoning | LEDGER-OBS-55-001 | TODO | conflict snapshots) SPRINT_121_policy_reasoning | LEDGER-PACKS-42-001 | TODO | CLI offline mode SPRINT_121_policy_reasoning | LEDGER-PACKS-42-001 | TODO | Provide snapshot/time-travel APIs SPRINT_121_policy_reasoning | LEDGER-PACKS-42-001 | TODO | digestable exports for task pack simulation SPRINT_121_policy_reasoning | LEDGER-RISK-66-001 | TODO | Add schema migrations for `risk_score` SPRINT_121_policy_reasoning | LEDGER-RISK-66-001 | TODO | `explanation_id` SPRINT_121_policy_reasoning | LEDGER-RISK-66-001 | TODO | `profile_version` SPRINT_121_policy_reasoning | LEDGER-RISK-66-001 | TODO | `risk_severity` SPRINT_121_policy_reasoning | LEDGER-RISK-66-001 | TODO | supporting indexes SPRINT_122_policy_reasoning | LEDGER-RISK-67-001 | TODO | Expose query APIs for scored findings with score/severity filters SPRINT_122_policy_reasoning | LEDGER-RISK-67-001 | TODO | pagination SPRINT_122_policy_reasoning | LEDGER-RISK-68-001 | TODO | Enable export of scored findings SPRINT_122_policy_reasoning | LEDGER-RISK-69-001 | TODO | Emit metrics/dashboards for scoring latency SPRINT_122_policy_reasoning | LEDGER-RISK-69-001 | TODO | result freshness SPRINT_122_policy_reasoning | LEDGER-RISK-69-001 | TODO | severity distribution SPRINT_122_policy_reasoning | LEDGER-TEN-48-001 | TODO | Partition ledger tables by tenant/project SPRINT_122_policy_reasoning | LEDGER-TEN-48-001 | TODO | enable RLS SPRINT_122_policy_reasoning | LEDGER-TEN-48-001 | TODO | stamp audit metadata SPRINT_122_policy_reasoning | LEDGER-TEN-48-001 | TODO | update queries/events SPRINT_123_policy_reasoning | EXPORT-CONSOLE-23-001 | TODO | Build evidence bundle/export generator producing signed manifests SPRINT_123_policy_reasoning | EXPORT-CONSOLE-23-001 | TODO | CSV/JSON replay endpoints SPRINT_123_policy_reasoning | EXPORT-CONSOLE-23-001 | TODO | expose progress telemetry SPRINT_123_policy_reasoning | EXPORT-CONSOLE-23-001 | TODO | integrate with scheduler jobs SPRINT_123_policy_reasoning | EXPORT-CONSOLE-23-001 | TODO | trace attachments SPRINT_123_policy_reasoning | POLICY-AIRGAP-56-001 | TODO | Support policy pack imports from Mirror Bundles SPRINT_123_policy_reasoning | POLICY-AIRGAP-56-001 | TODO | ensure deterministic caching SPRINT_123_policy_reasoning | POLICY-AIRGAP-56-001 | TODO | track `bundle_id` metadata SPRINT_123_policy_reasoning | POLICY-AIRGAP-57-001 | TODO | Enforce sealed-mode guardrails in evaluation (no outbound fetch) SPRINT_123_policy_reasoning | POLICY-AIRGAP-57-002 | TODO | Annotate rule explanations with staleness information SPRINT_123_policy_reasoning | POLICY-AIRGAP-57-002 | TODO | fallback data (cached EPSS SPRINT_123_policy_reasoning | POLICY-AOC-19-001 | TODO | Add Roslyn/CI lint preventing ingestion projects from referencing Policy merge/severity helpers SPRINT_123_policy_reasoning | POLICY-AOC-19-001 | TODO | block forbidden writes at compile time SPRINT_123_policy_reasoning | POLICY-AOC-19-003 | TODO | Update readers/processors to consume only `content.raw` SPRINT_123_policy_reasoning | POLICY-AOC-19-003 | TODO | `identifiers` SPRINT_123_policy_reasoning | POLICY-AOC-19-003 | TODO | `linkset`. Remove dependencies on legacy normalized fields SPRINT_123_policy_reasoning | POLICY-AOC-19-004 | TODO | Add regression tests ensuring policy derived outputs remain deterministic when ingesting revised raw docs (supersedes) SPRINT_123_policy_reasoning | POLICY-ATTEST-73-001 | TODO | Introduce VerificationPolicy object: schema SPRINT_123_policy_reasoning | POLICY-ATTEST-73-001 | TODO | lifecycle SPRINT_123_policy_reasoning | POLICY-ATTEST-73-001 | TODO | persistence SPRINT_123_policy_reasoning | POLICY-ATTEST-73-001 | TODO | versioning SPRINT_123_policy_reasoning | POLICY-ATTEST-73-002 | TODO | Provide Policy Studio editor with validation SPRINT_123_policy_reasoning | POLICY-ATTEST-73-002 | TODO | dry-run simulation SPRINT_123_policy_reasoning | POLICY-ATTEST-74-001 | TODO | Integrate verification policies into attestor verification pipeline with caching SPRINT_123_policy_reasoning | POLICY-CONSOLE-23-001 | TODO | Optimize findings/explain APIs for Console: cursor-based pagination at scale SPRINT_123_policy_reasoning | POLICY-CONSOLE-23-001 | TODO | aggregation hints for dashboard cards. Ensure deterministic ordering SPRINT_123_policy_reasoning | POLICY-CONSOLE-23-001 | TODO | expose provenance refs SPRINT_123_policy_reasoning | POLICY-CONSOLE-23-001 | TODO | global filter parameters (severity bands SPRINT_123_policy_reasoning | POLICY-CONSOLE-23-001 | TODO | policy version SPRINT_123_policy_reasoning | POLICY-CONSOLE-23-001 | TODO | rule trace summarization SPRINT_123_policy_reasoning | POLICY-CONSOLE-23-001 | TODO | time window) SPRINT_124_policy_reasoning | POLICY-CONSOLE-23-002 | TODO | Produce simulation diff metadata (before/after counts SPRINT_124_policy_reasoning | POLICY-CONSOLE-23-002 | TODO | approval state endpoints consumed by Console policy workspace SPRINT_124_policy_reasoning | POLICY-CONSOLE-23-002 | TODO | rule impact summaries) SPRINT_124_policy_reasoning | POLICY-CONSOLE-23-002 | TODO | severity deltas SPRINT_124_policy_reasoning | POLICY-ENGINE-20-002 | BLOCKED | Build deterministic evaluator honoring lexical/priority order SPRINT_124_policy_reasoning | POLICY-ENGINE-20-002 | BLOCKED | first-match semantics SPRINT_124_policy_reasoning | POLICY-ENGINE-20-002 | BLOCKED | safe value types (no wall-clock/network access) SPRINT_124_policy_reasoning | POLICY-ENGINE-20-003 | TODO | Implement selection joiners resolving SBOM↔advisory↔VEX tuples using linksets SPRINT_124_policy_reasoning | POLICY-ENGINE-20-003 | TODO | PURL equivalence tables SPRINT_124_policy_reasoning | POLICY-ENGINE-20-004 | TODO | Ship materialization writer that upserts into `effective_finding_{policyId}` with append-only history SPRINT_124_policy_reasoning | POLICY-ENGINE-20-004 | TODO | tenant scoping SPRINT_124_policy_reasoning | POLICY-ENGINE-20-005 | TODO | Enforce determinism guard banning wall-clock SPRINT_124_policy_reasoning | POLICY-ENGINE-20-005 | TODO | RNG SPRINT_124_policy_reasoning | POLICY-ENGINE-20-006 | TODO | Implement incremental orchestrator reacting to advisory/vex/SBOM change streams SPRINT_124_policy_reasoning | POLICY-ENGINE-20-007 | TODO | Emit structured traces/logs of rule hits with sampling controls SPRINT_124_policy_reasoning | POLICY-ENGINE-20-007 | TODO | `vex_overrides_total`) SPRINT_124_policy_reasoning | POLICY-ENGINE-20-007 | TODO | metrics (`rules_fired_total` SPRINT_124_policy_reasoning | POLICY-ENGINE-20-008 | TODO | Add unit/property/golden/perf suites covering policy compilation SPRINT_124_policy_reasoning | POLICY-ENGINE-20-008 | TODO | determinism SPRINT_124_policy_reasoning | POLICY-ENGINE-20-008 | TODO | evaluation correctness SPRINT_124_policy_reasoning | POLICY-ENGINE-20-009 | TODO | Define Mongo schemas/indexes for `policies` SPRINT_124_policy_reasoning | POLICY-ENGINE-20-009 | TODO | `effective_finding_*` SPRINT_124_policy_reasoning | POLICY-ENGINE-20-009 | TODO | `policy_runs` SPRINT_124_policy_reasoning | POLICY-ENGINE-20-009 | TODO | implement migrations SPRINT_124_policy_reasoning | POLICY-ENGINE-27-001 | TODO | Extend compile outputs to include rule coverage metadata SPRINT_124_policy_reasoning | POLICY-ENGINE-27-001 | TODO | inline documentation SPRINT_124_policy_reasoning | POLICY-ENGINE-27-001 | TODO | rule index for editor autocomplete SPRINT_124_policy_reasoning | POLICY-ENGINE-27-001 | TODO | symbol table SPRINT_124_policy_reasoning | POLICY-ENGINE-27-002 | TODO | Enhance simulate endpoints to emit rule firing counts SPRINT_124_policy_reasoning | POLICY-ENGINE-27-002 | TODO | heatmap aggregates SPRINT_124_policy_reasoning | POLICY-ENGINE-27-002 | TODO | sampled explain traces with deterministic ordering SPRINT_124_policy_reasoning | POLICY-ENGINE-29-001 | TODO | Implement batch evaluation endpoint (`POST /policy/eval/batch`) returning determinations + rationale chain for sets of `(artifact SPRINT_124_policy_reasoning | POLICY-ENGINE-29-001 | TODO | POLICY-ENGINE-27-004 SPRINT_124_policy_reasoning | POLICY-ENGINE-29-001 | TODO | advisory)` tuples SPRINT_124_policy_reasoning | POLICY-ENGINE-29-001 | TODO | purl SPRINT_124_policy_reasoning | POLICY-ENGINE-29-001 | TODO | support pagination SPRINT_124_policy_reasoning | POLICY-ENGINE-29-001 | TODO | version SPRINT_124_policy_reasoning | POLICY-ENGINE-29-002 | TODO | Provide streaming simulation API comparing two policy versions SPRINT_124_policy_reasoning | POLICY-ENGINE-29-002 | TODO | returning per-finding deltas without writes SPRINT_125_mirror | MIRROR-CRT-56-001 | TODO | Staffing decision SPRINT_125_policy_reasoning | POLICY-ENGINE-29-003 | TODO | Surface path/scope awareness in determinations (signal optional/dev/test downgrade SPRINT_125_policy_reasoning | POLICY-ENGINE-29-004 | TODO | Add metrics/logs for batch evaluation (latency SPRINT_125_policy_reasoning | POLICY-ENGINE-29-004 | TODO | queue depth) SPRINT_125_policy_reasoning | POLICY-ENGINE-29-004 | TODO | simulation diff counts SPRINT_125_policy_reasoning | POLICY-ENGINE-30-001 | TODO | Define overlay contract for graph nodes/edges (status SPRINT_125_policy_reasoning | POLICY-ENGINE-30-001 | TODO | expose projection API for Cartographer SPRINT_125_policy_reasoning | POLICY-ENGINE-30-001 | TODO | path relevance) SPRINT_125_policy_reasoning | POLICY-ENGINE-30-001 | TODO | rationale refs SPRINT_125_policy_reasoning | POLICY-ENGINE-30-001 | TODO | severity SPRINT_125_policy_reasoning | POLICY-ENGINE-30-002 | TODO | Implement simulation bridge returning on-the-fly overlays for Cartographer/Graph Explorer when invoking Policy Engine simulate SPRINT_125_policy_reasoning | POLICY-ENGINE-30-002 | TODO | ensure no writes SPRINT_125_policy_reasoning | POLICY-ENGINE-30-101 | TODO | Surface trust weighting configuration (issuer base weights SPRINT_125_policy_reasoning | POLICY-ENGINE-30-101 | TODO | recency decay SPRINT_125_policy_reasoning | POLICY-ENGINE-30-101 | TODO | scope adjustments) for VEX Lens via Policy Studio + API SPRINT_125_policy_reasoning | POLICY-ENGINE-30-101 | TODO | signature modifiers SPRINT_125_policy_reasoning | POLICY-ENGINE-31-001 | TODO | Expose policy knobs for Advisory AI (trust presets SPRINT_125_policy_reasoning | POLICY-ENGINE-31-001 | TODO | TTLs) via Policy Studio SPRINT_125_policy_reasoning | POLICY-ENGINE-31-001 | TODO | plan ranking weights SPRINT_125_policy_reasoning | POLICY-ENGINE-31-001 | TODO | temperature SPRINT_125_policy_reasoning | POLICY-ENGINE-31-001 | TODO | token limits SPRINT_125_policy_reasoning | POLICY-ENGINE-31-002 | TODO | Provide batch endpoint delivering policy context (thresholds SPRINT_125_policy_reasoning | POLICY-ENGINE-32-101 | TODO | Define orchestrator `policy_eval` job schema SPRINT_125_policy_reasoning | POLICY-ENGINE-32-101 | TODO | idempotency keys SPRINT_125_policy_reasoning | POLICY-ENGINE-33-101 | TODO | Implement orchestrator-driven policy evaluation workers using SDK heartbeats SPRINT_125_policy_reasoning | POLICY-ENGINE-33-101 | TODO | respecting throttles SPRINT_125_policy_reasoning | POLICY-ENGINE-34-101 | TODO | Publish policy run ledger exports + SLO burn-rate metrics to orchestrator SPRINT_125_policy_reasoning | POLICY-ENGINE-35-201 | TODO | Expose deterministic policy snapshot API SPRINT_125_policy_reasoning | POLICY-ENGINE-38-201 | TODO | Emit enriched policy violation events (decision rationale ids SPRINT_125_policy_reasoning | POLICY-ENGINE-40-001 | TODO | Update severity/status evaluation pipelines to consume multiple source severities per linkset SPRINT_125_policy_reasoning | POLICY-ENGINE-40-001 | TODO | preferred source SPRINT_125_policy_reasoning | POLICY-ENGINE-40-001 | TODO | supporting selection strategies (max SPRINT_125_policy_reasoning | POLICY-ENGINE-40-002 | TODO | Accept VEX linkset conflicts SPRINT_125_policy_reasoning | POLICY-ENGINE-40-002 | TODO | provide rationale references in effective findings SPRINT_126_policy_reasoning | POLICY-ENGINE-40-003 | TODO | Graph Explorer) to request policy decisions with source evidence summaries (top severity sources SPRINT_126_policy_reasoning | POLICY-ENGINE-40-003 | TODO | Provide API/SDK utilities for consumers (Web Scanner SPRINT_126_policy_reasoning | POLICY-ENGINE-50-001 | TODO | Implement SPL compiler: validate YAML SPRINT_126_policy_reasoning | POLICY-ENGINE-50-001 | TODO | canonicalize SPRINT_126_policy_reasoning | POLICY-ENGINE-50-001 | TODO | produce signed bundle SPRINT_126_policy_reasoning | POLICY-ENGINE-50-001 | TODO | store artifact in object storage SPRINT_126_policy_reasoning | POLICY-ENGINE-50-002 | TODO | Build runtime evaluator executing compiled plans over advisory/vex linksets + SBOM asset metadata with deterministic caching (Redis) SPRINT_126_policy_reasoning | POLICY-ENGINE-50-003 | TODO | Implement evaluation/compilation metrics SPRINT_126_policy_reasoning | POLICY-ENGINE-50-003 | TODO | `policy_compiles_total` SPRINT_126_policy_reasoning | POLICY-ENGINE-50-003 | TODO | structured logs (`policy_eval_seconds` SPRINT_126_policy_reasoning | POLICY-ENGINE-50-003 | TODO | tracing SPRINT_126_policy_reasoning | POLICY-ENGINE-50-004 | TODO | Build event pipeline: subscribe to linkset/SBOM updates SPRINT_126_policy_reasoning | POLICY-ENGINE-50-004 | TODO | schedule re-eval jobs SPRINT_126_policy_reasoning | POLICY-ENGINE-50-005 | TODO | Design SPRINT_126_policy_reasoning | POLICY-ENGINE-50-005 | TODO | TTL SPRINT_126_policy_reasoning | POLICY-ENGINE-50-005 | TODO | `policy_artifacts` collections with indexes SPRINT_126_policy_reasoning | POLICY-ENGINE-50-005 | TODO | `policy_revisions` SPRINT_126_policy_reasoning | POLICY-ENGINE-50-005 | TODO | `policy_runs` SPRINT_126_policy_reasoning | POLICY-ENGINE-50-005 | TODO | implement `policy_packs` SPRINT_126_policy_reasoning | POLICY-ENGINE-50-006 | TODO | Implement explainer persistence + retrieval APIs linking decisions to explanation tree SPRINT_126_policy_reasoning | POLICY-ENGINE-50-007 | TODO | Provide evaluation worker host/DI wiring SPRINT_126_policy_reasoning | POLICY-ENGINE-60-001 | TODO | Maintain Redis effective decision maps per asset/snapshot for Graph overlays SPRINT_126_policy_reasoning | POLICY-ENGINE-60-001 | TODO | implement versioning SPRINT_126_policy_reasoning | POLICY-ENGINE-60-002 | TODO | Expose simulation bridge for Graph What-if APIs SPRINT_126_policy_reasoning | POLICY-ENGINE-60-002 | TODO | supporting hypothetical SBOM diffs SPRINT_126_policy_reasoning | POLICY-ENGINE-70-002 | TODO | Design SPRINT_126_policy_reasoning | POLICY-ENGINE-70-002 | TODO | `exception_bindings`) with indexes SPRINT_126_policy_reasoning | POLICY-ENGINE-70-002 | TODO | `exception_reviews` SPRINT_126_policy_reasoning | POLICY-ENGINE-70-002 | TODO | create Mongo collections (`exceptions` SPRINT_126_policy_reasoning | POLICY-ENGINE-70-002 | TODO | migrations SPRINT_126_policy_reasoning | POLICY-ENGINE-70-004 | TODO | Extend metrics/tracing/logging for exception application (latency SPRINT_126_policy_reasoning | POLICY-ENGINE-70-004 | TODO | counts SPRINT_126_policy_reasoning | POLICY-ENGINE-70-004 | TODO | expiring events) SPRINT_126_policy_reasoning | POLICY-ENGINE-70-005 | TODO | Provide APIs/workers hook for exception activation/expiry (auto start/end) SPRINT_126_policy_reasoning | POLICY-ENGINE-80-001 | TODO | Integrate reachability/exploitability inputs into evaluation pipeline (state/score/confidence) with caching SPRINT_126_policy_reasoning | POLICY-RISK-90-001 | TODO | Ingest entropy penalty inputs from Scanner (`entropy.report.json` SPRINT_126_policy_reasoning | POLICY-RISK-90-001 | TODO | `layer_summary.json`) SPRINT_126_policy_reasoning | POLICY-RISK-90-001 | TODO | expose explanations/metrics for opaque ratio penalties (`docs/modules/scanner/entropy.md`). SPRINT_126_policy_reasoning | POLICY-RISK-90-001 | TODO | extend trust algebra with configurable weights/caps SPRINT_127_policy_reasoning | POLICY-ENGINE-80-002 | TODO | Create joining layer to read `reachability_facts` efficiently (indexes SPRINT_127_policy_reasoning | POLICY-ENGINE-80-002 | TODO | projections) SPRINT_127_policy_reasoning | POLICY-ENGINE-80-003 | TODO | Extend SPL predicates/actions to reference reachability state/score/confidence SPRINT_127_policy_reasoning | POLICY-ENGINE-80-004 | TODO | Emit metrics (`policy_reachability_applied_total` SPRINT_127_policy_reasoning | POLICY-ENGINE-80-004 | TODO | `policy_reachability_cache_hit_ratio`) SPRINT_127_policy_reasoning | POLICY-OBS-50-001 | TODO | Integrate telemetry core into policy API + worker hosts SPRINT_127_policy_reasoning | POLICY-OBS-50-001 | TODO | `decision_effect` SPRINT_127_policy_reasoning | POLICY-OBS-50-001 | TODO | `policy_version` SPRINT_127_policy_reasoning | POLICY-OBS-50-001 | TODO | ensuring spans/logs cover compile/evaluate flows with `tenant_id` SPRINT_127_policy_reasoning | POLICY-OBS-50-001 | TODO | trace IDs SPRINT_127_policy_reasoning | POLICY-OBS-51-001 | TODO | Emit golden-signal metrics (compile latency SPRINT_127_policy_reasoning | POLICY-OBS-51-001 | TODO | evaluate latency SPRINT_127_policy_reasoning | POLICY-OBS-51-001 | TODO | override counts) SPRINT_127_policy_reasoning | POLICY-OBS-51-001 | TODO | rule hits SPRINT_127_policy_reasoning | POLICY-OBS-52-001 | TODO | Emit timeline events `policy.evaluate.started` SPRINT_127_policy_reasoning | POLICY-OBS-52-001 | TODO | `policy.decision.recorded` with trace IDs SPRINT_127_policy_reasoning | POLICY-OBS-52-001 | TODO | `policy.evaluate.completed` SPRINT_127_policy_reasoning | POLICY-OBS-52-001 | TODO | input digests SPRINT_127_policy_reasoning | POLICY-OBS-52-001 | TODO | rule summary. Provide contract tests SPRINT_127_policy_reasoning | POLICY-OBS-53-001 | TODO | Produce evaluation evidence bundles (inputs slice SPRINT_127_policy_reasoning | POLICY-OBS-53-001 | TODO | config snapshot) through evidence locker integration SPRINT_127_policy_reasoning | POLICY-OBS-53-001 | TODO | engine version SPRINT_127_policy_reasoning | POLICY-OBS-53-001 | TODO | rule trace SPRINT_127_policy_reasoning | POLICY-OBS-54-001 | TODO | Generate DSSE attestations for evaluation outputs SPRINT_127_policy_reasoning | POLICY-OBS-54-001 | TODO | expose `/evaluations/{id}/attestation` SPRINT_127_policy_reasoning | POLICY-OBS-55-001 | TODO | Implement incident mode sampling overrides (full rule trace capture SPRINT_127_policy_reasoning | POLICY-OBS-55-001 | TODO | extended retention) with auto-activation on SLO breach SPRINT_127_policy_reasoning | POLICY-RISK-66-001 | TODO | Develop initial JSON Schema for RiskProfile (signals SPRINT_127_policy_reasoning | POLICY-RISK-66-001 | TODO | overrides) with validator stubs SPRINT_127_policy_reasoning | POLICY-RISK-66-001 | TODO | severity SPRINT_127_policy_reasoning | POLICY-RISK-66-001 | TODO | transforms SPRINT_127_policy_reasoning | POLICY-RISK-66-001 | TODO | weights SPRINT_127_policy_reasoning | POLICY-RISK-66-002 | TODO | Implement inheritance/merge logic with conflict detection SPRINT_127_policy_reasoning | POLICY-RISK-66-003 | TODO | Integrate RiskProfile schema into Policy Engine configuration SPRINT_127_policy_reasoning | POLICY-RISK-66-003 | TODO | ensuring validation SPRINT_127_policy_reasoning | POLICY-RISK-66-004 | TODO | Extend Policy libraries to load/save RiskProfile documents SPRINT_127_policy_reasoning | POLICY-RISK-66-004 | TODO | compute content hashes SPRINT_127_policy_reasoning | POLICY-RISK-67-001 | TODO | Integrate profile storage SPRINT_128_policy_reasoning | POLICY-RISK-67-002 | TODO | Implement profile lifecycle APIs (`/risk/profiles` create/publish/deprecate) SPRINT_128_policy_reasoning | POLICY-RISK-67-002 | TODO | Publish `.well-known/risk-profile-schema` endpoint SPRINT_128_policy_reasoning | POLICY-RISK-67-003 | TODO | Provide policy-layer APIs to trigger risk simulations SPRINT_128_policy_reasoning | POLICY-RISK-68-001 | TODO | Implement scope selectors SPRINT_128_policy_reasoning | POLICY-RISK-68-001 | TODO | Provide simulation API bridging Policy Studio with risk engine SPRINT_128_policy_reasoning | POLICY-RISK-68-001 | TODO | precedence rules SPRINT_128_policy_reasoning | POLICY-RISK-68-001 | TODO | returns distributions SPRINT_128_policy_reasoning | POLICY-RISK-68-002 | TODO | Add override/adjustment support with audit metadata SPRINT_128_policy_reasoning | POLICY-RISK-69-001 | TODO | Emit events/notifications on profile publish SPRINT_128_policy_reasoning | POLICY-RISK-69-001 | TODO | deprecate SPRINT_128_policy_reasoning | POLICY-SPL-23-001 | TODO | Define SPL v1 YAML + JSON Schema SPRINT_128_policy_reasoning | POLICY-SPL-23-001 | TODO | VEX precedence SPRINT_128_policy_reasoning | POLICY-SPL-23-001 | TODO | exceptions SPRINT_128_policy_reasoning | POLICY-SPL-23-001 | TODO | including advisory rules SPRINT_128_policy_reasoning | POLICY-SPL-23-001 | TODO | layering metadata. Publish schema resources SPRINT_128_policy_reasoning | POLICY-SPL-23-001 | TODO | severity mapping SPRINT_128_policy_reasoning | POLICY-SPL-23-001 | TODO | validation fixtures SPRINT_128_policy_reasoning | POLICY-SPL-23-002 | TODO | Implement canonicalizer that normalizes policy packs (ordering SPRINT_128_policy_reasoning | POLICY-SPL-23-002 | TODO | computes content hash SPRINT_128_policy_reasoning | POLICY-SPL-23-002 | TODO | defaults) SPRINT_128_policy_reasoning | POLICY-SPL-23-003 | TODO | Build policy layering/override engine (global/org/project/env/exception) with field-level precedence matrices SPRINT_128_policy_reasoning | POLICY-SPL-23-004 | TODO | Design explanation tree model (rule hits SPRINT_128_policy_reasoning | POLICY-SPL-23-004 | TODO | UI SPRINT_128_policy_reasoning | POLICY-SPL-23-004 | TODO | decisions) SPRINT_128_policy_reasoning | POLICY-SPL-23-004 | TODO | inputs SPRINT_128_policy_reasoning | POLICY-SPL-23-004 | TODO | persistence structures reused by runtime SPRINT_128_policy_reasoning | POLICY-SPL-23-005 | TODO | Create migration tool to snapshot existing behavior into baseline SPL packs (`org.core.baseline`) SPRINT_128_policy_reasoning | POLICY-SPL-23-005 | TODO | including policy docs SPRINT_128_policy_reasoning | POLICY-SPL-24-001 | TODO | Extend SPL schema to expose reachability/exploitability predicates SPRINT_128_policy_reasoning | POLICY-SPL-24-001 | TODO | update documentation SPRINT_128_policy_reasoning | POLICY-SPL-24-001 | TODO | weighting functions SPRINT_129_policy_reasoning | POLICY-TEN-48-001 | TODO | Add `tenant_id`/`project_id` columns SPRINT_129_policy_reasoning | POLICY-TEN-48-001 | TODO | emit rationale IDs including tenant metadata SPRINT_129_policy_reasoning | POLICY-TEN-48-001 | TODO | enable RLS SPRINT_129_policy_reasoning | POLICY-TEN-48-001 | TODO | update evaluators to require tenant context SPRINT_129_policy_reasoning | REGISTRY-API-27-001 | TODO | Define OpenAPI specification covering workspaces SPRINT_129_policy_reasoning | REGISTRY-API-27-001 | TODO | attestations SPRINT_129_policy_reasoning | REGISTRY-API-27-001 | TODO | promotions SPRINT_129_policy_reasoning | REGISTRY-API-27-001 | TODO | publish typed clients for Console/CLI SPRINT_129_policy_reasoning | REGISTRY-API-27-001 | TODO | reviews SPRINT_129_policy_reasoning | REGISTRY-API-27-001 | TODO | simulations SPRINT_129_policy_reasoning | REGISTRY-API-27-001 | TODO | versions SPRINT_129_policy_reasoning | REGISTRY-API-27-002 | TODO | Implement workspace storage (Mongo collections SPRINT_129_policy_reasoning | REGISTRY-API-27-002 | TODO | diff history SPRINT_129_policy_reasoning | REGISTRY-API-27-002 | TODO | object storage buckets) with CRUD endpoints SPRINT_129_policy_reasoning | REGISTRY-API-27-003 | TODO | Integrate compile endpoint: forward source bundle to Policy Engine SPRINT_129_policy_reasoning | REGISTRY-API-27-003 | TODO | persist diagnostics SPRINT_129_policy_reasoning | REGISTRY-API-27-003 | TODO | rule index SPRINT_129_policy_reasoning | REGISTRY-API-27-003 | TODO | symbol table SPRINT_129_policy_reasoning | REGISTRY-API-27-004 | TODO | Implement quick simulation API with request limits (sample size SPRINT_129_policy_reasoning | REGISTRY-API-27-004 | TODO | heatmap SPRINT_129_policy_reasoning | REGISTRY-API-27-004 | TODO | returning counts SPRINT_129_policy_reasoning | REGISTRY-API-27-004 | TODO | timeouts) SPRINT_129_policy_reasoning | REGISTRY-API-27-005 | TODO | Build batch simulation orchestration: enqueue shards SPRINT_129_policy_reasoning | REGISTRY-API-27-005 | TODO | collect partials SPRINT_129_policy_reasoning | REGISTRY-API-27-005 | TODO | reduce deltas SPRINT_129_policy_reasoning | REGISTRY-API-27-006 | TODO | Implement review workflow (comments SPRINT_129_policy_reasoning | REGISTRY-API-27-006 | TODO | required approvers SPRINT_129_policy_reasoning | REGISTRY-API-27-006 | TODO | status transitions) with audit trails SPRINT_129_policy_reasoning | REGISTRY-API-27-006 | TODO | votes SPRINT_129_policy_reasoning | REGISTRY-API-27-007 | TODO | Implement publish pipeline: sign source/compiled digests SPRINT_129_policy_reasoning | REGISTRY-API-27-007 | TODO | create attestations SPRINT_129_policy_reasoning | REGISTRY-API-27-007 | TODO | mark version immutable SPRINT_129_policy_reasoning | REGISTRY-API-27-008 | TODO | Implement promotion bindings per tenant/environment with canary subsets SPRINT_129_policy_reasoning | REGISTRY-API-27-008 | TODO | rollback path SPRINT_129_policy_reasoning | REGISTRY-API-27-009 | TODO | Instrument metrics/logs/traces (compile time SPRINT_129_policy_reasoning | REGISTRY-API-27-009 | TODO | approval latency) SPRINT_129_policy_reasoning | REGISTRY-API-27-009 | TODO | diagnostics rate SPRINT_129_policy_reasoning | REGISTRY-API-27-009 | TODO | sim queue depth SPRINT_129_policy_reasoning | REGISTRY-API-27-010 | TODO | Build unit/integration/load test suites for compile/sim/review/publish/promote flows SPRINT_129_policy_reasoning | RISK-ENGINE-66-001 | TODO | Scaffold scoring service (job queue SPRINT_129_policy_reasoning | RISK-ENGINE-66-001 | TODO | provider registry) with deterministic execution harness SPRINT_129_policy_reasoning | RISK-ENGINE-66-001 | TODO | worker loop SPRINT_129_policy_reasoning | RISK-ENGINE-66-002 | TODO | Implement default transforms (linear SPRINT_129_policy_reasoning | RISK-ENGINE-66-002 | TODO | clamping SPRINT_129_policy_reasoning | RISK-ENGINE-66-002 | TODO | gating SPRINT_129_policy_reasoning | RISK-ENGINE-66-002 | TODO | logistic SPRINT_129_policy_reasoning | RISK-ENGINE-66-002 | TODO | minmax SPRINT_129_policy_reasoning | RISK-ENGINE-66-002 | TODO | piecewise) SPRINT_129_policy_reasoning | RISK-ENGINE-67-001 | TODO | Integrate CVSS SPRINT_129_policy_reasoning | RISK-ENGINE-67-001 | TODO | KEV providers pulling data from Conseiller SPRINT_129_policy_reasoning | RISK-ENGINE-67-001 | TODO | `any` SPRINT_129_policy_reasoning | RISK-ENGINE-67-001 | TODO | implement reducers (`max` SPRINT_129_policy_reasoning | RISK-ENGINE-67-002 | TODO | Integrate VEX gate provider SPRINT_129_policy_reasoning | RISK-ENGINE-67-003 | TODO | Add fix availability SPRINT_129_policy_reasoning | RISK-ENGINE-67-003 | TODO | asset criticality SPRINT_129_policy_reasoning | RISK-ENGINE-68-001 | TODO | Persist scoring results + explanation pointers to Findings Ledger SPRINT_129_policy_reasoning | RISK-ENGINE-68-002 | TODO | Expose APIs (`/risk/jobs` SPRINT_129_policy_reasoning | RISK-ENGINE-68-002 | TODO | `/risk/results/{id}/explanation`) SPRINT_129_policy_reasoning | RISK-ENGINE-68-002 | TODO | `/risk/results` SPRINT_129_policy_reasoning | RISK-ENGINE-68-002 | TODO | filtering SPRINT_129_policy_reasoning | RISK-ENGINE-68-002 | TODO | include pagination SPRINT_129_policy_reasoning | RISK-ENGINE-69-001 | TODO | Implement simulation mode producing distributions SPRINT_129_policy_reasoning | RISK-ENGINE-69-002 | TODO | Add telemetry (spans SPRINT_129_policy_reasoning | RISK-ENGINE-69-002 | TODO | cache hits SPRINT_129_policy_reasoning | RISK-ENGINE-69-002 | TODO | job throughput SPRINT_129_policy_reasoning | RISK-ENGINE-69-002 | TODO | logs) for provider latency SPRINT_129_policy_reasoning | RISK-ENGINE-69-002 | TODO | metrics SPRINT_129_policy_reasoning | RISK-ENGINE-70-001 | TODO | Support offline provider bundles with manifest verification SPRINT_129_policy_reasoning | RISK-ENGINE-70-002 | TODO | Integrate runtime evidence provider SPRINT_129_policy_reasoning | VEXLENS-30-001 | TODO | CycloneDX VEX (status mapping SPRINT_129_policy_reasoning | VEXLENS-30-001 | TODO | Implement normalization pipeline for CSAF VEX SPRINT_129_policy_reasoning | VEXLENS-30-001 | TODO | OpenVEX SPRINT_129_policy_reasoning | VEXLENS-30-001 | TODO | justification mapping SPRINT_129_policy_reasoning | VEXLENS-30-001 | TODO | product tree parsing) SPRINT_129_policy_reasoning | VEXLENS-30-002 | TODO | CPE2.3 SPRINT_129_policy_reasoning | VEXLENS-30-003 | TODO | DSSE SPRINT_129_policy_reasoning | VEXLENS-30-003 | TODO | Integrate signature verification (Ed25519 SPRINT_129_policy_reasoning | VEXLENS-30-003 | TODO | PKIX) using issuer keys SPRINT_129_policy_reasoning | VEXLENS-30-003 | TODO | annotate evidence with verification state SPRINT_129_policy_reasoning | VEXLENS-30-004 | TODO | Implement trust weighting engine (issuer base weights SPRINT_129_policy_reasoning | VEXLENS-30-004 | TODO | justification modifiers SPRINT_129_policy_reasoning | VEXLENS-30-004 | TODO | recency decay SPRINT_129_policy_reasoning | VEXLENS-30-004 | TODO | signature modifiers SPRINT_129_policy_reasoning | VEXLENS-30-005 | TODO | AFFECTED SPRINT_129_policy_reasoning | VEXLENS-30-005 | TODO | DISPUTED SPRINT_129_policy_reasoning | VEXLENS-30-005 | TODO | FIXED SPRINT_129_policy_reasoning | VEXLENS-30-005 | TODO | Implement consensus algorithm producing `consensus_state` SPRINT_129_policy_reasoning | VEXLENS-30-005 | TODO | UNDER_INVESTIGATION SPRINT_129_policy_reasoning | VEXLENS-30-005 | TODO | `confidence` SPRINT_129_policy_reasoning | VEXLENS-30-005 | TODO | `quorum` SPRINT_129_policy_reasoning | VEXLENS-30-005 | TODO | `rationale` SPRINT_129_policy_reasoning | VEXLENS-30-005 | TODO | `weights` SPRINT_129_policy_reasoning | VEXLENS-30-005 | TODO | support states: NOT_AFFECTED SPRINT_129_policy_reasoning | VEXLENS-30-006 | TODO | Materialize consensus projection storage with idempotent workers triggered by VEX/Policy changes SPRINT_129_policy_reasoning | VEXLENS-30-007 | TODO | Expose APIs (`/vex/consensus` SPRINT_129_policy_reasoning | VEXLENS-30-007 | TODO | `/vex/consensus/export`) with pagination SPRINT_129_policy_reasoning | VEXLENS-30-007 | TODO | `/vex/consensus/query` SPRINT_129_policy_reasoning | VEXLENS-30-007 | TODO | `/vex/consensus/simulate` SPRINT_129_policy_reasoning | VEXLENS-30-007 | TODO | `/vex/consensus/{id}` SPRINT_129_policy_reasoning | VEXLENS-30-007 | TODO | cost budgets SPRINT_129_policy_reasoning | VEXLENS-30-008 | TODO | Integrate consensus signals with Policy Engine (thresholds SPRINT_129_policy_reasoning | VEXLENS-30-008 | TODO | simulation inputs) SPRINT_129_policy_reasoning | VEXLENS-30-008 | TODO | suppression SPRINT_129_policy_reasoning | VEXLENS-30-009 | TODO | Instrument metrics (`vex_consensus_compute_latency` SPRINT_129_policy_reasoning | VEXLENS-30-009 | TODO | `vex_consensus_disputed_total` SPRINT_129_policy_reasoning | VEXLENS-30-009 | TODO | `vex_signature_verification_rate`) SPRINT_129_policy_reasoning | VEXLENS-30-009 | TODO | structured logs SPRINT_129_policy_reasoning | VEXLENS-30-009 | TODO | traces SPRINT_129_policy_reasoning | VEXLENS-30-010 | TODO | Develop unit/property/integration/load tests (10M records) SPRINT_129_policy_reasoning | VEXLENS-30-010 | TODO | determinism harness SPRINT_129_policy_reasoning | VEXLENS-30-011 | TODO | Provide deployment manifests SPRINT_129_policy_reasoning | VEXLENS-30-011 | TODO | caching configuration SPRINT_129_policy_reasoning | VEXLENS-30-011 | TODO | offline kit seeds SPRINT_129_policy_reasoning | VEXLENS-30-011 | TODO | scaling guides SPRINT_129_policy_reasoning | VEXLENS-AIAI-31-001 | TODO | Expose consensus rationale API enhancements (policy factors SPRINT_129_policy_reasoning | VEXLENS-AIAI-31-001 | TODO | issuer details SPRINT_129_policy_reasoning | VEXLENS-AIAI-31-001 | TODO | mapping issues) for Advisory AI conflict explanations SPRINT_129_policy_reasoning | VEXLENS-AIAI-31-002 | TODO | Provide caching hooks for consensus lookups used by Advisory AI (batch endpoints SPRINT_129_policy_reasoning | VEXLENS-EXPORT-35-001 | TODO | Provide consensus snapshot API delivering deterministic JSONL (state SPRINT_129_policy_reasoning | VEXLENS-EXPORT-35-001 | TODO | confidence SPRINT_129_policy_reasoning | VEXLENS-EXPORT-35-001 | TODO | provenance) for exporter mirror bundles SPRINT_129_policy_reasoning | VEXLENS-ORCH-33-001 | TODO | Register `consensus_compute` job type with orchestrator SPRINT_129_policy_reasoning | VEXLENS-ORCH-33-001 | TODO | expose job planning hooks for consensus batches SPRINT_129_policy_reasoning | VEXLENS-ORCH-33-001 | TODO | integrate worker SDK SPRINT_129_policy_reasoning | VEXLENS-ORCH-34-001 | TODO | Emit consensus completion events into orchestrator run ledger SPRINT_129_policy_reasoning | VEXLENS-ORCH-34-001 | TODO | provenance chain SPRINT_129_policy_reasoning | VULN-API-29-001 | TODO | Define OpenAPI spec (list/detail/query/simulation/workflow/export) SPRINT_129_policy_reasoning | VULN-API-29-001 | TODO | error codes SPRINT_129_policy_reasoning | VULN-API-29-001 | TODO | pagination/grouping contracts SPRINT_129_policy_reasoning | VULN-API-29-001 | TODO | query JSON schema SPRINT_129_policy_reasoning | VULN-API-29-002 | TODO | Implement list/query endpoints with policy parameter SPRINT_129_policy_reasoning | VULN-API-29-002 | TODO | caching SPRINT_129_policy_reasoning | VULN-API-29-002 | TODO | grouping SPRINT_129_policy_reasoning | VULN-API-29-002 | TODO | server paging SPRINT_129_policy_reasoning | VULN-API-29-003 | TODO | Implement detail endpoint aggregating evidence SPRINT_129_policy_reasoning | VULN-API-29-003 | TODO | paths (Graph Explorer deep link) SPRINT_129_policy_reasoning | VULN-API-29-003 | TODO | policy rationale SPRINT_129_policy_reasoning | VULN-API-29-004 | TODO | Expose workflow endpoints (assign SPRINT_129_policy_reasoning | VULN-API-29-004 | TODO | accept-risk SPRINT_129_policy_reasoning | VULN-API-29-004 | TODO | comment SPRINT_129_policy_reasoning | VULN-API-29-004 | TODO | target-fix SPRINT_129_policy_reasoning | VULN-API-29-004 | TODO | verify-fix SPRINT_129_policy_reasoning | VULN-API-29-005 | TODO | Implement simulation endpoint comparing `policy_from` vs `policy_to` SPRINT_129_policy_reasoning | VULN-API-29-005 | TODO | returning diffs without side effects SPRINT_129_policy_reasoning | VULN-API-29-006 | TODO | Integrate resolver results with Graph Explorer: include shortest path metadata SPRINT_129_policy_reasoning | VULN-API-29-006 | TODO | line up deep-link parameters SPRINT_129_policy_reasoning | VULN-API-29-007 | TODO | Enforce RBAC/ABAC scopes SPRINT_129_policy_reasoning | VULN-API-29-007 | TODO | implement CSRF/anti-forgery checks for Console SPRINT_129_policy_reasoning | VULN-API-29-007 | TODO | secure attachment URLs SPRINT_129_policy_reasoning | VULN-API-29-008 | TODO | Build export orchestrator producing signed bundles (manifest SPRINT_129_policy_reasoning | VULN-API-29-008 | TODO | NDJSON SPRINT_129_policy_reasoning | VULN-API-29-008 | TODO | checksums SPRINT_129_policy_reasoning | VULN-API-29-008 | TODO | signature). Integrate with Findings Ledger for evidence SPRINT_129_policy_reasoning | VULN-API-29-009 | TODO | Instrument metrics (`vuln_list_latency` SPRINT_129_policy_reasoning | VULN-API-29-009 | TODO | `vuln_export_duration` SPRINT_129_policy_reasoning | VULN-API-29-009 | TODO | `vuln_simulation_latency` SPRINT_129_policy_reasoning | VULN-API-29-009 | TODO | `vuln_workflow_events_total`) SPRINT_129_policy_reasoning | VULN-API-29-009 | TODO | structured logs SPRINT_129_policy_reasoning | VULN-API-29-009 | TODO | traces SPRINT_129_policy_reasoning | VULN-API-29-010 | TODO | Provide unit/integration/perf tests (5M findings) SPRINT_129_policy_reasoning | VULN-API-29-010 | TODO | fuzz query validation SPRINT_129_policy_reasoning | VULN-API-29-011 | TODO | CI smoke SPRINT_129_policy_reasoning | VULN-API-29-011 | TODO | Package deployment (Helm/Compose) SPRINT_129_policy_reasoning | VULN-API-29-011 | TODO | health checks SPRINT_129_policy_reasoning | VULN-API-29-011 | TODO | offline kit steps SPRINT_131_scanner_surface | SCANNER-ANALYZERS-DENO-26-009 | TODO | SCANNER-ANALYZERS-DENO-26-008 SPRINT_131_scanner_surface | SCANNER-ANALYZERS-JAVA-21-005 | TODO | — SPRINT_131_scanner_surface | SCANNER-ANALYZERS-LANG-11-001 | TODO | SCANNER-ANALYZERS-LANG-10-309 SPRINT_132_scanner_surface | SCANNER-ANALYZERS-NATIVE-20-001 | TODO | — SPRINT_132_scanner_surface | SCANNER-ANALYZERS-NODE-22-001 | TODO | — SPRINT_133_scanner_surface | SCANNER-ANALYZERS-PHP-27-001 | TODO | — SPRINT_134_scanner_surface | SCANNER-ANALYZERS-PYTHON-23-001 | TODO | — SPRINT_135_scanner_surface | SCANNER-ANALYZERS-RUBY-28-001 | TODO | — SPRINT_135_scanner_surface | SCANNER-ENTRYTRACE-18-502 | TODO | SCANNER-ENTRYTRACE-18-508 SPRINT_136_scanner_surface | SCANNER-ENG-0020 | TODO | — SPRINT_136_scanner_surface | SCANNER-ENG-0021 | TODO | — SPRINT_136_scanner_surface | SCANNER-ENG-0022 | TODO | — SPRINT_136_scanner_surface | SCANNER-ENG-0023 | TODO | — SPRINT_136_scanner_surface | SCANNER-ENG-0024 | TODO | — SPRINT_136_scanner_surface | SCANNER-ENG-0025 | TODO | — SPRINT_136_scanner_surface | SCANNER-ENG-0026 | TODO | — SPRINT_136_scanner_surface | SCANNER-ENG-0027 | TODO | — SPRINT_136_scanner_surface | SCANNER-ENV-01 | TODO | — SPRINT_136_scanner_surface | SCANNER-EVENTS-16-301 | BLOCKED | — SPRINT_136_scanner_surface | SCANNER-GRAPH-21-001 | TODO | — SPRINT_136_scanner_surface | SCANNER-LNM-21-001 | TODO | — SPRINT_136_scanner_surface | SCANNER-SECRETS-03 | TODO | SCANNER-SECRETS-02 SPRINT_136_scanner_surface | SCANNER-SURFACE-04 | TODO | SCANNER-SURFACE-01 SPRINT_136_scanner_surface | SCHED-SURFACE-02 | TODO | SURFACE-FS-02 SPRINT_136_scanner_surface | SURFACE-FS-03 | TODO | SURFACE-FS-02 SPRINT_136_scanner_surface | SURFACE-FS-04 | TODO | SURFACE-FS-02 SPRINT_136_scanner_surface | SURFACE-FS-06 | TODO | SURFACE-FS-02..05 SPRINT_136_scanner_surface | SURFACE-SECRETS-01 | DOING | — SPRINT_136_scanner_surface | SURFACE-VAL-01 | DOING | SURFACE-FS-01 SPRINT_136_scanner_surface | SURFACE-VAL-02 | TODO | SURFACE-FS-02 SPRINT_136_scanner_surface | ZASTAVA-SURFACE-02 | TODO | SURFACE-FS-02 SPRINT_138_scanner_ruby_parity | SCANNER-ENG-0008 | TODO | — SPRINT_138_scanner_ruby_parity | SCANNER-ENG-0010 | TODO | SCANNER-ANALYZERS-PHP-27-001..012 SPRINT_138_scanner_ruby_parity | SCANNER-ENG-0011 | TODO | — SPRINT_138_scanner_ruby_parity | SCANNER-ENG-0012 | TODO | — SPRINT_138_scanner_ruby_parity | SCANNER-ENG-0013 | TODO | — SPRINT_138_scanner_ruby_parity | SCANNER-ENG-0014 | TODO | — SPRINT_301_docs_tasks_md_i | DOCS-AIAI-31-004 | DOING | DOCS-AIAI-31-003 SPRINT_301_docs_tasks_md_i | DOCS-AIAI-31-008 | BLOCKED | DOCS-AIAI-31-007 SPRINT_301_docs_tasks_md_i | DOCS-AIRGAP-56-001 | TODO | — SPRINT_301_docs_tasks_md_i | DOCS-POLICY-DET-01 | TODO | POLICY-DET backlog SPRINT_301_docs_tasks_md_i | DOCS-SCANNER-DET-01 | DOING | Sprint 136 outputs SPRINT_301_docs_tasks_md_i | DOCS-SCANNER-DET-01 | DOING | scanner determinism fixtures