Files

3.2 KiB

Archive Log - 2026-03-03 Completed Sprints

Source: docs/implplan/ Destination: docs-archived/implplan/2026-03-03-completed-sprints/

Moved sprint files:

  • SPRINT_20260226_222_Cli_proof_chain_verification_and_replay_parity.md
  • SPRINT_20260226_223_Platform_score_explain_contract_and_replay_alignment.md
  • SPRINT_20260226_224_Scanner_oci_referrers_runtime_stack_and_replay_data.md
  • SPRINT_20260226_225_Attestor_signature_trust_and_verdict_api_hardening.md
  • SPRINT_20260226_226_Symbols_dsse_rekor_merkle_and_hash_integrity.md
  • SPRINT_20260226_227_FE_triage_risk_score_widget_wiring_and_parity.md
  • SPRINT_20260226_228_Tools_supply_chain_fuzz_mutation_hardening_suite.md
  • SPRINT_20260226_229_DOCS_advisory_hygiene_dedup_and_archival_translation.md
  • SPRINT_20260226_230_Platform_locale_label_translation_corrections.md

All tasks in these files are in DONE state with checked completion criteria.

2026-03-04 Regression Revalidation

Validated archived sprint deliverables with targeted checks:

  • CLI (SPRINT_20260226_222): StellaOps.Cli.Tests.Commands.Sprint222ProofVerificationTests -> 4/4 pass.
  • Platform (SPRINT_20260226_223): ScoreExplainEndpointContractTests -> 4/4 pass.
  • Scanner (SPRINT_20260226_224): web service + storage + runtime targeted classes -> 16/16 pass.
  • Attestor (SPRINT_20260226_225): DsseVerifierTests + VerdictControllerSecurityTests -> 21/21 pass.
  • Symbols (SPRINT_20260226_226): BundleBuilderVerificationTests -> 5/5 pass.
  • Web FE (SPRINT_20260226_227): npx tsc --noEmit pass; Playwright risk/score suites -> 10/10 pass.
  • Tools (SPRINT_20260226_228): python tests/supply-chain/run_suite.py --profile smoke --seed 20260226 -> all 5 lanes pass.
  • Docs/locale (SPRINT_20260226_229/230): advisory folder contains only README.md; all archived sprint files remain DONE_ONLY; non-English placeholder scan clean; non-English translation JSON parses clean.

2026-03-04 Additional Test Expansion

Added and validated extra edge/negative-path tests in sprint-specific classes:

  • CLI (SPRINT_20260226_222): added deterministic checks for missing --trust-root and missing Rekor checkpoint path; class now 6/6 pass.
  • Platform (SPRINT_20260226_223): added digest normalization and malformed digest-segment checks; class now 6/6 pass.
  • Scanner (SPRINT_20260226_224): added disabled/missing-image OCI publish cases, missing reachability stack and invalid layer cases, and missing DSSE envelope retrieval case; selected classes now 14/14 pass.
  • Attestor (SPRINT_20260226_225): added roster-entry missing public key case (deterministic 500 authority_key_missing_public_key); class now 6/6 pass.
  • Symbols (SPRINT_20260226_226): added missing checkpoint while Rekor proof required case (rekor_proof_required:missing_checkpoint); class now 6/6 pass.
  • Web FE (SPRINT_20260226_227): reran targeted Playwright suites after expansion work; 10/10 pass on rerun (one transient selector miss observed once, then passing on rerun).

2026-03-04 Archive Hygiene

  • Advisory translation register module-doc mappings for Symbols-related advisories were updated from docs/modules/symbols/architecture.md (retired path) to docs/modules/binary-index/architecture.md so archived traceability links resolve against current module ownership.