205 lines
37 KiB
JSON
205 lines
37 KiB
JSON
{
|
|
"module": "signer",
|
|
"featureCount": 6,
|
|
"lastUpdatedUtc": "2026-02-11T07:15:12Z",
|
|
"summary": {
|
|
"passed": 0,
|
|
"failed": 0,
|
|
"blocked": 0,
|
|
"skipped": 0,
|
|
"done": 6
|
|
},
|
|
"buildNote": "Fresh strict Tier 2 API replay at 2026-02-11T07:15:12Z corrected shamir-secret-sharing-key-escrow evidence with auditable key-recovery ceremony transactions.",
|
|
"features": {
|
|
"fulcio-sigstore-keyless-signing-client": {
|
|
"status": "done",
|
|
"tier": 2,
|
|
"retryCount": 1,
|
|
"sourceVerified": true,
|
|
"buildVerified": true,
|
|
"e2eVerified": true,
|
|
"skipReason": null,
|
|
"lastRunId": "run-014",
|
|
"lastUpdatedUtc": "2026-02-11T00:18:01.5310531Z",
|
|
"featureFile": "docs/features/checked/signer/fulcio-sigstore-keyless-signing-client.md",
|
|
"notes": [
|
|
"[2026-02-10T01:00:00Z] checking: Tier 1 code review - KeylessDsseSigner, EphemeralKeyGenerator, HttpFulcioClient, SigstoreSigningService. Full keyless workflow verified.",
|
|
"[2026-02-10T01:00:00Z] checking: Tier 2d - KeylessDsseSignerTests, EphemeralKeyGeneratorTests, HttpFulcioClientTests, CertificateChainValidatorTests, KeylessSigningIntegrationTests. 491/491 pass.",
|
|
"[2026-02-10T01:00:00Z] done: Moved to checked/",
|
|
"[2026-02-10T13:05:00Z] retesting: Tier 2 API replay started for /api/v1/signer/sign/dsse and /api/v1/signer/verify/dsse.",
|
|
"[2026-02-10T13:05:00Z] failed: DSSE verify endpoint returned verify_unavailable in prior checked run and did not validate signed envelopes at API boundary.",
|
|
"[2026-02-10T13:05:00Z] done: Implemented DSSE verification endpoint + regression tests. Evidence: docs/qa/feature-checks/runs/signer/fulcio-sigstore-keyless-signing-client/run-002/tier2-api-check.json.",
|
|
"[2026-02-10T14:42:17Z] done: Follow-up recheck replay passed (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/fulcio-sigstore-keyless-signing-client/run-003/tier2-api-check.json.",
|
|
"[2026-02-10T19:43:33Z] done: Follow-up recheck replay remained green (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/fulcio-sigstore-keyless-signing-client/run-004/tier2-api-check.json.",
|
|
"[2026-02-10T20:10:00Z] done: Follow-up recheck replay remained green (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/fulcio-sigstore-keyless-signing-client/run-005/tier2-api-check.json.",
|
|
"[2026-02-10T20:32:11Z] done: Follow-up recheck replay remained green (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/fulcio-sigstore-keyless-signing-client/run-006/tier2-api-check.json.",
|
|
"[2026-02-10T20:43:55Z] done: Follow-up recheck replay remained green (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/fulcio-sigstore-keyless-signing-client/run-007/tier2-api-check.json.",
|
|
"[2026-02-10T21:07:25Z] done: Tier 2 API replay run-008 revalidated checked behavior after latest replay (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/fulcio-sigstore-keyless-signing-client/run-008/tier2-api-check.json.",
|
|
"[2026-02-10T21:25:25Z] done: Tier 2 API replay run-009 revalidated checked behavior after latest replay (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/fulcio-sigstore-keyless-signing-client/run-009/tier2-api-check.json.",
|
|
"[2026-02-10T21:39:08Z] done: Tier 2 integration replay run-010 passed for checked feature (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/fulcio-sigstore-keyless-signing-client/run-010/tier2-integration-check.json.",
|
|
"[2026-02-10T21:57:34Z] done: Tier 2 integration replay run-011 passed for checked feature (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/fulcio-sigstore-keyless-signing-client/run-011/tier2-integration-check.json.",
|
|
"[2026-02-10T22:47:29Z] done: Tier 2 replay run-012 passed for checked feature (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/fulcio-sigstore-keyless-signing-client/run-012/tier2-api-check.json.",
|
|
"[2026-02-11T00:18:01.5310531Z] done: Strict Tier 2 API replay run-014 captured fresh sign/verify/tampered-envelope behavior; Signer.Tests 497/497. Evidence: docs/qa/feature-checks/runs/signer/fulcio-sigstore-keyless-signing-client/run-014/tier2-api-check.json."
|
|
]
|
|
},
|
|
"dual-control-signing-ceremonies": {
|
|
"status": "done",
|
|
"tier": 2,
|
|
"retryCount": 1,
|
|
"sourceVerified": true,
|
|
"buildVerified": true,
|
|
"e2eVerified": true,
|
|
"skipReason": null,
|
|
"lastRunId": "run-014",
|
|
"lastUpdatedUtc": "2026-02-11T00:18:01.5310531Z",
|
|
"featureFile": "docs/features/checked/signer/dual-control-signing-ceremonies.md",
|
|
"notes": [
|
|
"[2026-02-10T01:00:00Z] checking: Tier 1 code review - CeremonyOrchestrator, CeremonyStateMachine, CeremonyEndpoints. Full M-of-N lifecycle verified.",
|
|
"[2026-02-10T01:00:00Z] checking: Tier 2d - CeremonyOrchestratorIntegrationTests, CeremonyStateMachineTests. 491/491 pass.",
|
|
"[2026-02-10T01:00:00Z] done: Moved to checked/",
|
|
"[2026-02-10T13:05:00Z] retesting: Tier 2 API replay started for /api/v1/ceremonies create/get paths.",
|
|
"[2026-02-10T13:05:00Z] failed: Ceremony route wiring lacked runtime ICeremonyOrchestrator registration in prior checked run.",
|
|
"[2026-02-10T13:05:00Z] done: Added ceremony service registrations + in-memory implementations and API regression tests. Evidence: docs/qa/feature-checks/runs/signer/dual-control-signing-ceremonies/run-002/tier2-api-check.json.",
|
|
"[2026-02-10T14:42:17Z] done: Follow-up recheck replay passed (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/dual-control-signing-ceremonies/run-003/tier2-api-check.json.",
|
|
"[2026-02-10T19:43:33Z] done: Follow-up recheck replay remained green (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/dual-control-signing-ceremonies/run-004/tier2-api-check.json.",
|
|
"[2026-02-10T20:10:00Z] done: Follow-up recheck replay remained green (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/dual-control-signing-ceremonies/run-005/tier2-api-check.json.",
|
|
"[2026-02-10T20:32:11Z] done: Follow-up recheck replay remained green (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/dual-control-signing-ceremonies/run-006/tier2-api-check.json.",
|
|
"[2026-02-10T20:43:55Z] done: Follow-up recheck replay remained green (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/dual-control-signing-ceremonies/run-007/tier2-api-check.json.",
|
|
"[2026-02-10T21:07:25Z] done: Tier 2 API replay run-008 revalidated checked behavior after latest replay (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/dual-control-signing-ceremonies/run-008/tier2-api-check.json.",
|
|
"[2026-02-10T21:25:25Z] done: Tier 2 API replay run-009 revalidated checked behavior after latest replay (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/dual-control-signing-ceremonies/run-009/tier2-api-check.json.",
|
|
"[2026-02-10T21:39:08Z] done: Tier 2 integration replay run-010 passed for checked feature (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/dual-control-signing-ceremonies/run-010/tier2-integration-check.json.",
|
|
"[2026-02-10T21:57:34Z] done: Tier 2 integration replay run-011 passed for checked feature (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/dual-control-signing-ceremonies/run-011/tier2-integration-check.json.",
|
|
"[2026-02-10T22:47:29Z] done: Tier 2 replay run-012 passed for checked feature (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/dual-control-signing-ceremonies/run-012/tier2-api-check.json.",
|
|
"[2026-02-10T23:24:54Z] done: Tier 2 live API replay run-013 passed with invalid operation returning 400 (not 500) and regression coverage added in SignerEndpointsTests. Evidence: docs/qa/feature-checks/runs/signer/dual-control-signing-ceremonies/run-013/tier2-api-check.json.",
|
|
"[2026-02-11T00:18:01.5310531Z] done: Strict Tier 2 API replay run-014 captured fresh live ceremony create/get/approve/execute plus invalid-operation/missing-signature/not-found semantics; Signer.Tests 497/497. Evidence: docs/qa/feature-checks/runs/signer/dual-control-signing-ceremonies/run-014/tier2-api-check.json."
|
|
]
|
|
},
|
|
"key-rotation-service-with-temporal-validity": {
|
|
"status": "done",
|
|
"tier": 2,
|
|
"retryCount": 1,
|
|
"sourceVerified": true,
|
|
"buildVerified": true,
|
|
"e2eVerified": true,
|
|
"skipReason": null,
|
|
"lastRunId": "run-014",
|
|
"lastUpdatedUtc": "2026-02-11T00:18:01.5310531Z",
|
|
"featureFile": "docs/features/checked/signer/key-rotation-service-with-temporal-validity.md",
|
|
"notes": [
|
|
"[2026-02-10T01:00:00Z] checking: Tier 1 code review - KeyRotationService (temporal validation, algorithm gating), TrustAnchorManager (PURL pattern matching, specificity scoring). Full implementation verified.",
|
|
"[2026-02-10T01:00:00Z] checking: Tier 2d - KeyRotationServiceTests, TemporalKeyVerificationTests, TrustAnchorManagerTests, KeyRotationWorkflowIntegrationTests. 491/491 pass.",
|
|
"[2026-02-10T01:00:00Z] done: Moved to checked/",
|
|
"[2026-02-10T13:05:00Z] retesting: Tier 2 API replay started for key validity endpoint behavior.",
|
|
"[2026-02-10T13:05:00Z] failed: Unknown key validity check returned 200/Unknown instead of expected 404 not found in prior checked run.",
|
|
"[2026-02-10T13:05:00Z] done: Mapped unknown key status to HTTP 404 and added regression test. Evidence: docs/qa/feature-checks/runs/signer/key-rotation-service-with-temporal-validity/run-002/tier2-api-check.json.",
|
|
"[2026-02-10T14:42:17Z] done: Follow-up recheck replay passed (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/key-rotation-service-with-temporal-validity/run-003/tier2-api-check.json.",
|
|
"[2026-02-10T19:43:33Z] done: Follow-up recheck replay remained green (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/key-rotation-service-with-temporal-validity/run-004/tier2-api-check.json.",
|
|
"[2026-02-10T20:10:00Z] done: Follow-up recheck replay remained green (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/key-rotation-service-with-temporal-validity/run-005/tier2-api-check.json.",
|
|
"[2026-02-10T20:32:11Z] done: Follow-up recheck replay remained green (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/key-rotation-service-with-temporal-validity/run-006/tier2-api-check.json.",
|
|
"[2026-02-10T20:43:55Z] done: Follow-up recheck replay remained green (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/key-rotation-service-with-temporal-validity/run-007/tier2-api-check.json.",
|
|
"[2026-02-10T21:07:25Z] done: Tier 2 API replay run-008 revalidated checked behavior after latest replay (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/key-rotation-service-with-temporal-validity/run-008/tier2-api-check.json.",
|
|
"[2026-02-10T21:25:25Z] done: Tier 2 API replay run-009 revalidated checked behavior after latest replay (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/key-rotation-service-with-temporal-validity/run-009/tier2-api-check.json.",
|
|
"[2026-02-10T21:39:08Z] done: Tier 2 integration replay run-010 passed for checked feature (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/key-rotation-service-with-temporal-validity/run-010/tier2-integration-check.json.",
|
|
"[2026-02-10T21:57:34Z] done: Tier 2 integration replay run-011 passed for checked feature (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/key-rotation-service-with-temporal-validity/run-011/tier2-integration-check.json.",
|
|
"[2026-02-10T22:47:29Z] done: Tier 2 replay run-012 passed for checked feature (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/key-rotation-service-with-temporal-validity/run-012/tier2-api-check.json.",
|
|
"[2026-02-11T00:18:01.5310531Z] done: Strict Tier 2 API replay run-014 captured fresh key-validity and add-key unknown-anchor not-found semantics; Signer.Tests 497/497. Evidence: docs/qa/feature-checks/runs/signer/key-rotation-service-with-temporal-validity/run-014/tier2-api-check.json."
|
|
]
|
|
},
|
|
"shamir-secret-sharing-key-escrow": {
|
|
"status": "done",
|
|
"tier": 2,
|
|
"retryCount": 0,
|
|
"sourceVerified": true,
|
|
"buildVerified": true,
|
|
"e2eVerified": true,
|
|
"skipReason": null,
|
|
"lastRunId": "run-017",
|
|
"lastUpdatedUtc": "2026-02-11T07:15:12Z",
|
|
"featureFile": "docs/features/checked/signer/shamir-secret-sharing-key-escrow.md",
|
|
"notes": [
|
|
"[2026-02-10T01:00:00Z] checking: Tier 1 code review - ShamirSecretSharing (GF(2^8) arithmetic), GaloisField256, KeyEscrowService, CeremonyAuthorizedRecoveryService. Full implementation verified.",
|
|
"[2026-02-10T01:00:00Z] checking: Tier 2d - ShamirSecretSharingTests, KeyEscrowRecoveryIntegrationTests. 491/491 pass.",
|
|
"[2026-02-10T01:00:00Z] done: Moved to checked/",
|
|
"[2026-02-10T13:05:00Z] done: Tier 2 integration recheck completed via deterministic Signer suite replay. Evidence: docs/qa/feature-checks/runs/signer/shamir-secret-sharing-key-escrow/run-002/tier2-integration-check.json.",
|
|
"[2026-02-10T14:42:17Z] done: Follow-up recheck replay passed (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/shamir-secret-sharing-key-escrow/run-003/tier2-integration-check.json.",
|
|
"[2026-02-10T19:43:33Z] done: Follow-up recheck replay remained green (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/shamir-secret-sharing-key-escrow/run-004/tier2-integration-check.json.",
|
|
"[2026-02-10T20:10:00Z] done: Follow-up recheck replay remained green (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/shamir-secret-sharing-key-escrow/run-005/tier2-integration-check.json.",
|
|
"[2026-02-10T20:32:11Z] done: Follow-up recheck replay remained green (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/shamir-secret-sharing-key-escrow/run-006/tier2-integration-check.json.",
|
|
"[2026-02-10T20:43:55Z] done: Follow-up recheck replay remained green (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/shamir-secret-sharing-key-escrow/run-007/tier2-integration-check.json.",
|
|
"[2026-02-10T21:07:25Z] done: Tier 2 API replay run-008 revalidated checked behavior after latest replay (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/shamir-secret-sharing-key-escrow/run-008/tier2-api-check.json.",
|
|
"[2026-02-10T21:25:25Z] done: Tier 2 API replay run-009 revalidated checked behavior after latest replay (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/shamir-secret-sharing-key-escrow/run-009/tier2-api-check.json.",
|
|
"[2026-02-10T21:39:08Z] done: Tier 2 integration replay run-010 passed for checked feature (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/shamir-secret-sharing-key-escrow/run-010/tier2-integration-check.json.",
|
|
"[2026-02-10T21:57:34Z] done: Tier 2 integration replay run-011 passed for checked feature (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/shamir-secret-sharing-key-escrow/run-011/tier2-integration-check.json.",
|
|
"[2026-02-10T22:47:29Z] done: Tier 2 replay run-012 passed for checked feature (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/shamir-secret-sharing-key-escrow/run-012/tier2-integration-check.json.",
|
|
"[2026-02-11T00:18:01.5310531Z] done: Tier 2 integration replay run-014 passed for checked feature with deterministic suite replay (Signer.Tests 497/497). Evidence: docs/qa/feature-checks/runs/signer/shamir-secret-sharing-key-escrow/run-014/tier2-integration-check.json.",
|
|
"[2026-02-11T02:03:04Z] failed: Strict Tier 2 sweep requires end-user api interactions; prior evidence was integration-only or missing. Evidence: docs/qa/feature-checks/runs/signer/shamir-secret-sharing-key-escrow/run-015/tier2-api-check.json.",
|
|
"[2026-02-11T06:03:27Z] done: Tier 2 replay run-016 passed with fresh behavioral evidence (497/497). Evidence: docs/qa/feature-checks/runs/signer/shamir-secret-sharing-key-escrow/run-016/tier2-integration-check.json.",
|
|
"[2026-02-11T07:15:12Z] done: Strict Tier 2 API run-017 captured fresh key-recovery ceremony transactions (create/approve/execute, 400 pre-quorum, 409 duplicate approval, 404 missing ceremony, 401 anonymous list) with Signer suite replay 497/497. Evidence: docs/qa/feature-checks/runs/signer/shamir-secret-sharing-key-escrow/run-017/tier2-api-check.json."
|
|
]
|
|
},
|
|
"ci-cd-keyless-signing-workflow-templates": {
|
|
"status": "done",
|
|
"tier": 2,
|
|
"retryCount": 0,
|
|
"sourceVerified": true,
|
|
"buildVerified": true,
|
|
"e2eVerified": true,
|
|
"skipReason": null,
|
|
"lastRunId": "run-014",
|
|
"lastUpdatedUtc": "2026-02-11T00:18:01.5310531Z",
|
|
"featureFile": "docs/features/checked/signer/ci-cd-keyless-signing-workflow-templates.md",
|
|
"notes": [
|
|
"[2026-02-10T01:00:00Z] checking: Tier 1 code review - SigstoreSigningService, AmbientOidcTokenProvider, SignerEndpoints. Backend services verified.",
|
|
"[2026-02-10T01:00:00Z] checking: Tier 2d - Test coverage via keyless signing tests (shared implementation). 491/491 pass.",
|
|
"[2026-02-10T01:00:00Z] caveat: No actual YAML CI/CD workflow template files exist. Backend services are fully implemented. AmbientOidcTokenProvider is generic, not CI-specific.",
|
|
"[2026-02-10T01:00:00Z] done: Moved to checked/",
|
|
"[2026-02-10T13:05:00Z] done: Tier 2 API recheck confirms backend sign/verify workflow behavior used by CI pipelines. Evidence: docs/qa/feature-checks/runs/signer/ci-cd-keyless-signing-workflow-templates/run-002/tier2-api-check.json.",
|
|
"[2026-02-10T14:42:17Z] done: Follow-up recheck replay passed (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/ci-cd-keyless-signing-workflow-templates/run-003/tier2-api-check.json.",
|
|
"[2026-02-10T19:43:33Z] done: Follow-up recheck replay remained green (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/ci-cd-keyless-signing-workflow-templates/run-004/tier2-api-check.json.",
|
|
"[2026-02-10T20:10:00Z] done: Follow-up recheck replay remained green (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/ci-cd-keyless-signing-workflow-templates/run-005/tier2-api-check.json.",
|
|
"[2026-02-10T20:32:11Z] done: Follow-up recheck replay remained green (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/ci-cd-keyless-signing-workflow-templates/run-006/tier2-api-check.json.",
|
|
"[2026-02-10T20:43:55Z] done: Follow-up recheck replay remained green (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/ci-cd-keyless-signing-workflow-templates/run-007/tier2-api-check.json.",
|
|
"[2026-02-10T21:07:25Z] done: Tier 2 API replay run-008 revalidated checked behavior after latest replay (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/ci-cd-keyless-signing-workflow-templates/run-008/tier2-api-check.json.",
|
|
"[2026-02-10T21:25:25Z] done: Tier 2 API replay run-009 revalidated checked behavior after latest replay (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/ci-cd-keyless-signing-workflow-templates/run-009/tier2-api-check.json.",
|
|
"[2026-02-10T21:39:08Z] done: Tier 2 integration replay run-010 passed for checked feature (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/ci-cd-keyless-signing-workflow-templates/run-010/tier2-integration-check.json.",
|
|
"[2026-02-10T21:57:34Z] done: Tier 2 integration replay run-011 passed for checked feature (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/ci-cd-keyless-signing-workflow-templates/run-011/tier2-integration-check.json.",
|
|
"[2026-02-10T22:47:29Z] done: Tier 2 replay run-012 passed for checked feature (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/ci-cd-keyless-signing-workflow-templates/run-012/tier2-api-check.json.",
|
|
"[2026-02-11T00:18:01.5310531Z] done: Strict Tier 2 API replay run-014 captured fresh CI workflow-aligned sign/verify/referrers interactions; Signer.Tests 497/497. Evidence: docs/qa/feature-checks/runs/signer/ci-cd-keyless-signing-workflow-templates/run-014/tier2-api-check.json."
|
|
]
|
|
},
|
|
"tuf-client-for-trust-root-management": {
|
|
"status": "done",
|
|
"tier": 2,
|
|
"retryCount": 0,
|
|
"sourceVerified": true,
|
|
"buildVerified": true,
|
|
"e2eVerified": true,
|
|
"skipReason": null,
|
|
"lastRunId": "run-017",
|
|
"lastUpdatedUtc": "2026-02-11T07:06:10Z",
|
|
"featureFile": "docs/features/checked/signer/tuf-client-for-trust-root-management.md",
|
|
"notes": [
|
|
"[2026-02-10T01:00:00Z] checking: Tier 1 code review - TrustAnchorManager (PURL pattern matching, specificity scoring), PurlPatternMatcher. Custom trust anchor system, not TUF protocol client.",
|
|
"[2026-02-10T01:00:00Z] checking: Tier 2d - TrustAnchorManagerTests. 491/491 pass.",
|
|
"[2026-02-10T01:00:00Z] caveat: Not a TUF (The Update Framework) client. Custom trust anchor management system. Title corrected in feature description.",
|
|
"[2026-02-10T01:00:00Z] done: Moved to checked/",
|
|
"[2026-02-10T13:05:00Z] done: Tier 2 integration recheck confirms trust-anchor/key-validity behaviors with 404 not-found semantics for missing keys. Evidence: docs/qa/feature-checks/runs/signer/tuf-client-for-trust-root-management/run-002/tier2-integration-check.json.",
|
|
"[2026-02-10T14:42:17Z] done: Follow-up recheck replay passed (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/tuf-client-for-trust-root-management/run-003/tier2-integration-check.json.",
|
|
"[2026-02-10T19:43:33Z] done: Follow-up recheck replay remained green (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/tuf-client-for-trust-root-management/run-004/tier2-integration-check.json.",
|
|
"[2026-02-10T20:10:00Z] done: Follow-up recheck replay remained green (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/tuf-client-for-trust-root-management/run-005/tier2-integration-check.json.",
|
|
"[2026-02-10T20:32:11Z] done: Follow-up recheck replay remained green (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/tuf-client-for-trust-root-management/run-006/tier2-integration-check.json.",
|
|
"[2026-02-10T20:43:55Z] done: Follow-up recheck replay remained green (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/tuf-client-for-trust-root-management/run-007/tier2-integration-check.json.",
|
|
"[2026-02-10T21:07:25Z] done: Tier 2 API replay run-008 revalidated checked behavior after latest replay (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/tuf-client-for-trust-root-management/run-008/tier2-api-check.json.",
|
|
"[2026-02-10T21:25:25Z] done: Tier 2 API replay run-009 revalidated checked behavior after latest replay (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/tuf-client-for-trust-root-management/run-009/tier2-api-check.json.",
|
|
"[2026-02-10T21:39:08Z] done: Tier 2 integration replay run-010 passed for checked feature (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/tuf-client-for-trust-root-management/run-010/tier2-integration-check.json.",
|
|
"[2026-02-10T21:57:34Z] done: Tier 2 integration replay run-011 passed for checked feature (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/tuf-client-for-trust-root-management/run-011/tier2-integration-check.json.",
|
|
"[2026-02-10T22:47:29Z] done: Tier 2 replay run-012 passed for checked feature (Signer.Tests 496/496). Evidence: docs/qa/feature-checks/runs/signer/tuf-client-for-trust-root-management/run-012/tier2-integration-check.json.",
|
|
"[2026-02-11T00:18:01.5310531Z] done: Tier 2 integration replay run-014 passed for checked feature with deterministic suite replay (Signer.Tests 497/497). Evidence: docs/qa/feature-checks/runs/signer/tuf-client-for-trust-root-management/run-014/tier2-integration-check.json.",
|
|
"[2026-02-11T02:03:04Z] failed: Strict Tier 2 sweep requires end-user api interactions; prior evidence was integration-only or missing. Evidence: docs/qa/feature-checks/runs/signer/tuf-client-for-trust-root-management/run-015/tier2-api-check.json.",
|
|
"[2026-02-11T06:03:27Z] done: Tier 2 replay run-016 passed with fresh behavioral evidence (497/497). Evidence: docs/qa/feature-checks/runs/signer/tuf-client-for-trust-root-management/run-016/tier2-integration-check.json.",
|
|
"[2026-02-11T07:06:10Z] done: Strict Tier 2 API run-017 captured fresh live trust-root endpoint transactions (404 unknown validity, 404 add-key unknown anchor, 401 missing auth, 200 service readiness) with Signer suite replay 497/497. Evidence: docs/qa/feature-checks/runs/signer/tuf-client-for-trust-root-management/run-017/tier2-api-check.json."
|
|
]
|
|
}
|
|
}
|
|
}
|