- Introduced AGENTS.md, README.md, TASKS.md, and implementation_plan.md for Vexer, detailing mission, responsibilities, key components, and operational notes. - Established similar documentation structure for Vulnerability Explorer and Zastava modules, including their respective workflows, integrations, and observability notes. - Created risk scoring profiles documentation outlining the core workflow, factor model, governance, and deliverables. - Ensured all modules adhere to the Aggregation-Only Contract and maintain determinism and provenance in outputs.
42 lines
1.8 KiB
Markdown
42 lines
1.8 KiB
Markdown
# StellaOps DevOps
|
||
|
||
The DevOps module captures release, deployment, and migration playbooks that keep StellaOps deterministic across environments.
|
||
|
||
## Responsibilities
|
||
- Maintain CI pipelines, signing workflows, and release packaging steps.
|
||
- Operate shared runbooks for launch readiness, upgrades, and NuGet previews.
|
||
- Provide offline kit assembly instructions and tooling integration.
|
||
- Wrap observability/telemetry bootstrap flows for platform teams.
|
||
|
||
## Key components
|
||
- Runbooks under ./runbooks/ (launch, deployment, nuget).
|
||
- Migration guidance under ./migrations/.
|
||
- Architecture overview bridging CI/CD & infrastructure concerns.
|
||
|
||
## Integrations & dependencies
|
||
- Ops pipelines (Gitea, GitHub Actions) and artifact registries.
|
||
- Authority/Signer for supply chain signing.
|
||
- Telemetry stack bootstrap scripts.
|
||
|
||
## Operational notes
|
||
- Offline bundle packaging guidance in docs/modules/export-center/operations/runbook.md.
|
||
- Dashboards for launch cutover rehearsals.
|
||
- Coordination with Security for enforced guardrails.
|
||
|
||
## Related resources
|
||
- ./runbooks/launch-readiness.md
|
||
- ./runbooks/launch-cutover.md
|
||
- ./runbooks/deployment-upgrade.md
|
||
- ./runbooks/nuget-preview-bootstrap.md
|
||
- ./migrations/semver-style.md
|
||
|
||
## Backlog references
|
||
- DEVOPS-LAUNCH-18-001 / 18-900 runbooks in ../../TASKS.md.
|
||
- Telemetry bootstrap automation tracked in `ops/devops/TASKS.md`.
|
||
|
||
## Epic alignment
|
||
- **Epic 1 – AOC enforcement:** bake AOC verifier steps, CI guards, and schema validation into pipelines.
|
||
- **Epic 9 – Orchestrator Dashboard:** support operational dashboards, job recovery runbooks, and rate-limit governance.
|
||
- **Epic 10 – Export Center:** manage signing workflows, Offline Kit packaging, and release promotion for exports.
|
||
- **Epic 15 – Observability & Forensics:** coordinate telemetry deployment, evidence retention, and forensic automation.
|