3a2100aa78
- Implemented comprehensive unit tests for VexCandidateEmitter to validate candidate emission logic based on various scenarios including absent and present APIs, confidence thresholds, and rate limiting. - Added integration tests for SmartDiff PostgreSQL repositories, covering snapshot storage and retrieval, candidate storage, and material risk change handling. - Ensured tests validate correct behavior for storing, retrieving, and querying snapshots and candidates, including edge cases and expected outcomes.
45 lines
1.6 KiB
Markdown
45 lines
1.6 KiB
Markdown
# Replay PostgreSQL Schema
|
|
|
|
Status: draft · applies to net10 replay pipeline (Sprint 0185)
|
|
|
|
## Tables
|
|
|
|
### replay_runs
|
|
- **id**: scan UUID (string, primary key)
|
|
- **manifest_hash**: `sha256:<hex>` (unique)
|
|
- **status**: `pending|verified|failed|replayed`
|
|
- **created_at / updated_at**: UTC ISO-8601
|
|
- **signatures**: JSONB `[{ profile, verified }]` (multi-profile DSSE verification)
|
|
- **outputs**: JSONB `{ sbom, findings, vex?, log? }` (all SHA-256 digests)
|
|
|
|
**Indexes**
|
|
- `runs_manifest_hash_unique`: `(manifest_hash)` (unique)
|
|
- `runs_status_created_at`: `(status, created_at DESC)`
|
|
|
|
### replay_bundles
|
|
- **id**: bundle digest hex (no `sha256:` prefix)
|
|
- **type**: `input|output|rootpack|reachability`
|
|
- **size**: bytes
|
|
- **location**: CAS URI `cas://replay/<prefix>/<digest>.tar.zst`
|
|
- **created_at**: UTC ISO-8601
|
|
|
|
**Indexes**
|
|
- `bundles_type`: `(type, created_at DESC)`
|
|
- `bundles_location`: `(location)`
|
|
|
|
### replay_subjects
|
|
- **id**: OCI image digest (`sha256:<hex>`)
|
|
- **layers**: JSONB `[{ layer_digest, merkle_root, leaf_count }]`
|
|
|
|
**Indexes**
|
|
- `subjects_layer_digest`: GIN index on `layers` for layer_digest lookups
|
|
|
|
## Determinism & constraints
|
|
- All timestamps stored as UTC.
|
|
- Digests are lowercase hex; CAS URIs must follow `cas://<prefix>/<shard>/<digest>.tar.zst` where `<shard>` = first two hex chars.
|
|
- No external references; embed minimal metadata only (feed/policy hashes live in replay manifest).
|
|
|
|
## Client models
|
|
- Implemented in `src/__Libraries/StellaOps.Replay.Core/ReplayPostgresModels.cs` with matching index name constants (`ReplayIndexes`).
|
|
- Serialization uses System.Text.Json with snake_case property naming; field names match table schema above.
|