267 lines
11 KiB
Markdown
267 lines
11 KiB
Markdown
# UI v2 Rewire Multi Sprint Plan (Draft 1)
|
|
|
|
Status: Ready for sprint authoring
|
|
Date: 2026-02-18
|
|
Source set: `source-of-truth.md`, `authority-matrix.md`, `sprint-planning-guide.md`
|
|
|
|
## Scope and intent
|
|
|
|
This is the first implementation decomposition for the v2 UI rewire.
|
|
It is designed for many execution sprints with clear dependencies and parallel lanes.
|
|
|
|
Precedence rule: higher pack number wins for overlap.
|
|
|
|
## Mandatory contract workflow (all sprints)
|
|
|
|
For each screen in sprint scope, classify backend readiness:
|
|
- `EXISTS_COMPAT`
|
|
- `EXISTS_ADAPT`
|
|
- `MISSING_NEW`
|
|
|
|
Each sprint must produce a contract ledger with:
|
|
- screen
|
|
- required behavior
|
|
- current endpoint candidate
|
|
- status class
|
|
- auth scope impact
|
|
- schema delta
|
|
- owner module
|
|
|
|
## Wave map
|
|
|
|
| Wave | Sprints | Goal |
|
|
| --- | --- | --- |
|
|
| Wave 0 | S00 | Freeze final spec and remove residual ambiguity |
|
|
| Wave 1 | S01, S02, S03 | Navigation shell and foundational admin/integration/ops taxonomy |
|
|
| Wave 2 | S04, S05, S06, S07 | Release core (bundles, promotions, approvals, runs) |
|
|
| Wave 3 | S08, S09, S10, S11 | Dashboard, env standardization, security and evidence consolidation |
|
|
| Wave 4 | S12, S13 | Migration cutover, redirects, QA hardening, release readiness |
|
|
|
|
## Sprint catalog
|
|
|
|
### S00 - Spec freeze and unresolved gaps
|
|
- Canonical packs: 21, 19, 20
|
|
- Goal: lock unresolved model gaps before feature implementation starts.
|
|
- Primary outputs:
|
|
- final `Advisory Sources` screen spec (Security and Risk)
|
|
- final rule for Release Control-owned capability rendering (shortcut vs nested)
|
|
- final Trust ownership transition policy (Administration owner, Evidence consumer)
|
|
- final route deprecation map baseline
|
|
- Contract work:
|
|
- start global endpoint ledger, initial status for all top-level screens.
|
|
- Dependencies: none.
|
|
- Parallelism: blocks S01-S03 start for any unresolved ownership topic.
|
|
|
|
### S01 - Nav shell and route framework
|
|
- Canonical packs: 21, 16
|
|
- Goal: create stable shell for new IA without breaking existing behavior.
|
|
- Working directory (implementation): `src/Web/StellaOps.Web`
|
|
- Primary outputs:
|
|
- root nav groups aligned to canonical IA
|
|
- breadcrumb updates and migration labels
|
|
- route alias skeleton for staged cutover
|
|
- Contract work:
|
|
- ledger for nav-linked routes and their current API assumptions.
|
|
- Dependencies: S00.
|
|
- Parallelism: can run with S02 and S03 after S00 decisions are frozen.
|
|
|
|
### S02 - Administration and Integrations restructuring
|
|
- Canonical packs: 21, 10
|
|
- Goal: move settings-heavy capability into Administration and Integrations model.
|
|
- Working directory (implementation): `src/Web/StellaOps.Web`
|
|
- Primary outputs:
|
|
- Admin A0-A7 routing and page ownership
|
|
- Integrations taxonomy and detail flow alignment
|
|
- Security Data split wiring (Integrations + Platform Ops + Security)
|
|
- Contract work:
|
|
- classify admin and integration endpoints; identify missing APIs for advisory source health and impact mapping.
|
|
- Dependencies: S00, S01.
|
|
- Parallelism: can run with S03.
|
|
|
|
### S03 - Platform Ops and Data Integrity foundation
|
|
- Canonical packs: 15, 21, 10
|
|
- Goal: establish Data Integrity as the operational truth source.
|
|
- Working directory (implementation): `src/Web/StellaOps.Web`
|
|
- Primary outputs:
|
|
- Data Integrity overview and subviews
|
|
- ops links from dashboard/approvals/security placeholders
|
|
- feeds/airgap ops alignment with integrations view
|
|
- Contract work:
|
|
- classify freshness, job health, ingest, DLQ, and integration connectivity APIs.
|
|
- Dependencies: S00, S01.
|
|
- Parallelism: can run with S02.
|
|
|
|
### S04 - Bundle organizer and bundle lifecycle
|
|
- Canonical packs: 12, 21
|
|
- Goal: implement bundle-first model for release inputs.
|
|
- Working directory (implementation): `src/Web/StellaOps.Web`
|
|
- Primary outputs:
|
|
- bundle catalog/detail/builder flow
|
|
- component version selection and config contract steps
|
|
- materialize to environment flow shell
|
|
- Contract work:
|
|
- classify component inventory, digest mapping, changelog, and materialization APIs.
|
|
- define new schemas where missing (`MISSING_NEW`).
|
|
- Dependencies: S00, S01, S02.
|
|
- Parallelism: can start before S05.
|
|
|
|
### S05 - Releases promotion flow (bundle-version anchored)
|
|
- Canonical packs: 13
|
|
- Goal: convert release flow to immutable bundle-version promotions.
|
|
- Working directory (implementation): `src/Web/StellaOps.Web`
|
|
- Primary outputs:
|
|
- promotions list and create wizard
|
|
- release detail and gate summary model
|
|
- links to run timeline, approvals, evidence snapshots
|
|
- Contract work:
|
|
- classify promotion creation/status/history APIs and gate evaluation contracts.
|
|
- Dependencies: S04.
|
|
- Parallelism: can run with S06 once S04 contracts are stable.
|
|
|
|
### S06 - Approvals v2 decision cockpit
|
|
- Canonical packs: 17, 13
|
|
- Goal: make approvals self-sufficient for decisioning.
|
|
- Working directory (implementation): `src/Web/StellaOps.Web`
|
|
- Primary outputs:
|
|
- approvals queue v2
|
|
- approval detail tabs (overview, gates, security, reachability, ops/data, evidence, replay, history)
|
|
- consistent cross-links to Security/Evidence/Ops/Release Control
|
|
- Contract work:
|
|
- classify approval packet, gate trace, decision action, and evidence retrieval APIs.
|
|
- Dependencies: S05 and S03 baseline availability.
|
|
- Parallelism: partial overlap with S07 allowed.
|
|
|
|
### S07 - Run timeline, checkpoints, rollback and replay context
|
|
- Canonical packs: 14
|
|
- Goal: provide auditable execution timeline for each promotion run.
|
|
- Working directory (implementation): `src/Web/StellaOps.Web`
|
|
- Primary outputs:
|
|
- run timeline page
|
|
- step detail with logs/artifacts/evidence capture points
|
|
- rollback and rerun controls with safe gating
|
|
- Contract work:
|
|
- classify run-step logs/artifact/retry/rollback APIs and permissions.
|
|
- Dependencies: S05.
|
|
- Parallelism: can run with S06.
|
|
|
|
### S08 - Dashboard v3 mission board
|
|
- Canonical packs: 16
|
|
- Goal: upgrade dashboard to release-risk mission board.
|
|
- Working directory (implementation): `src/Web/StellaOps.Web`
|
|
- Primary outputs:
|
|
- env risk panel (`CritR`, SBOM freshness, B/I/R coverage)
|
|
- nightly/data integrity signal cards
|
|
- fast drilldowns to approvals/releases/security/ops
|
|
- Contract work:
|
|
- classify aggregated dashboard endpoints and freshness metadata contracts.
|
|
- Dependencies: S03, S05, S06.
|
|
- Parallelism: can run with S09.
|
|
|
|
### S09 - Environment detail standardization
|
|
- Canonical packs: 18
|
|
- Goal: unify environment decision state in one screen shell.
|
|
- Working directory (implementation): `src/Web/StellaOps.Web`
|
|
- Primary outputs:
|
|
- standard env header
|
|
- tabs for deploy, SBOM/findings, reachability, inputs, promotions/approvals, data confidence, evidence
|
|
- canonical deep links into bundle/run/security/evidence pages
|
|
- Contract work:
|
|
- classify environment-scoped status and evidence APIs.
|
|
- Dependencies: S03, S04, S05.
|
|
- Parallelism: can run with S08 and S10.
|
|
|
|
### S10 - Security and Risk consolidation
|
|
- Canonical packs: 19, 21
|
|
- Goal: implement decision-first Security model with advisory-source split.
|
|
- Working directory (implementation): `src/Web/StellaOps.Web`
|
|
- Primary outputs:
|
|
- risk overview, findings explorer/detail, vulnerabilities explorer/detail
|
|
- SBOM lake/graph placement, VEX, exceptions
|
|
- Advisory Sources screen per S00 finalized spec
|
|
- Contract work:
|
|
- classify findings/vuln/vex/exception/advisory-source APIs and filtering contracts.
|
|
- Dependencies: S00, S03, S08.
|
|
- Parallelism: can run with S11 once cross-link contracts stabilize.
|
|
|
|
### S11 - Evidence and Audit consolidation
|
|
- Canonical packs: 20 with 21 trust override
|
|
- Goal: implement evidence chain navigation and audit retrieval model.
|
|
- Working directory (implementation): `src/Web/StellaOps.Web`
|
|
- Primary outputs:
|
|
- evidence home router
|
|
- evidence packs, bundles, export center, proof chains, replay/verify, audit log
|
|
- Trust links to Administration-owned surface
|
|
- Contract work:
|
|
- classify evidence pack/bundle/export/proof/replay/audit APIs and ownership boundaries.
|
|
- Dependencies: S00, S05, S06.
|
|
- Parallelism: can run with S10.
|
|
|
|
### S12 - Migration and redirect cutover
|
|
- Canonical packs: 21 plus affected domain packs
|
|
- Goal: make IA migration safe for existing users and links.
|
|
- Working directory (implementation): `src/Web/StellaOps.Web`
|
|
- Primary outputs:
|
|
- full redirect map for legacy settings and historical aliases
|
|
- breadcrumb and legacy-name compatibility labels
|
|
- deprecation telemetry hooks
|
|
- Contract work:
|
|
- no new domain APIs expected; verify alias routes and fallback behaviors.
|
|
- Dependencies: S01-S11 (or at least all impacted route owners).
|
|
- Parallelism: mostly late-phase integration sprint.
|
|
|
|
### S13 - E2E QA hardening and release readiness
|
|
- Canonical packs: all active authority packs
|
|
- Goal: prove end-to-end behavior against final IA and contracts.
|
|
- Working directory (implementation): `src/Web/StellaOps.Web`
|
|
- Primary outputs:
|
|
- route and workflow E2E coverage for all root domains
|
|
- accessibility and regression checks for nav and critical workflows
|
|
- final contract ledger closure report
|
|
- Contract work:
|
|
- verify all screens have final status not `MISSING_NEW`.
|
|
- Dependencies: S02-S12 completion candidates.
|
|
- Parallelism: can stage as rolling QA, but final signoff occurs last.
|
|
|
|
## Cross-module backend ownership map (planning)
|
|
|
|
These modules are likely to receive backend contract work during implementation sprints:
|
|
- `src/ReleaseOrchestrator/`
|
|
- `src/Policy/`
|
|
- `src/EvidenceLocker/`
|
|
- `src/Attestor/`
|
|
- `src/Signer/`
|
|
- `src/Integrations/`
|
|
- `src/Scanner/`
|
|
- `src/Orchestrator/`
|
|
- `src/Scheduler/`
|
|
- `src/Authority/`
|
|
|
|
Each sprint that touches these must include explicit cross-module allowance in its sprint file.
|
|
|
|
## Initial sequencing recommendation
|
|
|
|
1. Execute S00 to remove final ambiguity.
|
|
2. Run S01 + S02 + S03 in parallel.
|
|
3. Start release core S04 -> S05, then branch into S06 and S07.
|
|
4. Run S08 + S09 + S10 + S11 as parallel domain upgrades.
|
|
5. Finish with S12 migration cutover and S13 final QA signoff.
|
|
|
|
## Proposed sprint filename seeds (for `docs/implplan` authoring)
|
|
|
|
- `SPRINT_20260218_001_DOCS_ui_v2_rewire_spec_freeze.md` (S00)
|
|
- `SPRINT_20260218_002_FE_ui_v2_rewire_nav_shell.md` (S01)
|
|
- `SPRINT_20260218_003_FE_ui_v2_rewire_admin_integrations.md` (S02)
|
|
- `SPRINT_20260218_004_FE_ui_v2_rewire_platform_ops_data_integrity.md` (S03)
|
|
- `SPRINT_20260218_005_FE_ui_v2_rewire_bundle_lifecycle.md` (S04)
|
|
- `SPRINT_20260218_006_FE_ui_v2_rewire_releases_promotions.md` (S05)
|
|
- `SPRINT_20260218_007_FE_ui_v2_rewire_approvals_v2.md` (S06)
|
|
- `SPRINT_20260218_008_FE_ui_v2_rewire_run_timeline.md` (S07)
|
|
- `SPRINT_20260218_009_FE_ui_v2_rewire_dashboard_v3.md` (S08)
|
|
- `SPRINT_20260218_010_FE_ui_v2_rewire_environment_detail.md` (S09)
|
|
- `SPRINT_20260218_011_FE_ui_v2_rewire_security_consolidation.md` (S10)
|
|
- `SPRINT_20260218_012_FE_ui_v2_rewire_evidence_audit_consolidation.md` (S11)
|
|
- `SPRINT_20260218_013_FE_ui_v2_rewire_migration_redirects.md` (S12)
|
|
- `SPRINT_20260218_014_FE_ui_v2_rewire_release_readiness_qa.md` (S13)
|
|
|
|
Note: creation of official sprint files is intentionally deferred until write scope includes `docs/implplan`.
|