stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 16 Releases Wiki Activity
Files
main
git.stella-ops.org/docs/provenance/prov-backfill-plan.md
master 10212d67c0
Some checks failed
Docs CI / lint-and-preview (push) Has been cancelled
Details
api-governance / spectral-lint (push) Has been cancelled
Details
Refactor code structure for improved readability and maintainability; removed redundant code blocks and optimized function calls.
2025-11-20 07:50:52 +02:00

964 B
Raw Permalink Blame History

Provenance Backfill Plan (Sprint 401)

Artifacts available

  • Attestation inventory: docs/provenance/attestation-inventory-2025-11-18.ndjson
  • Subject→Rekor map: docs/provenance/subject-rekor-map-2025-11-18.json

Procedure (deterministic)

  1. Load inventory NDJSON; validate UUID/ULID and digest formats.
  2. For each record, resolve Rekor entry via the subject→Rekor map; if missing, record gap and skip write.
  3. Emit backfilled events to the provenance store using scripts/publish_attestation_with_provenance.sh --mode backfill (add --subject and --rekor arguments) with sorted input to guarantee stable ordering.
  4. Log every backfilled subject + Rekor digest pair to logs/provenance-backfill-2025-11-18.ndjson (UTC timestamps, ISO-8601).
  5. Rerun until gaps are zero; then mark PROV-BACKFILL-401-029 DONE.

Determinism

  • Sort by subject, then rekorEntry before processing.
  • Use canonical JSON writer for outputs; timestamps in UTC O format.