Files
git.stella-ops.org/docs/implplan/SPRINT_0161_0001_0001_evidencelocker.md
master 10212d67c0
Some checks failed
Docs CI / lint-and-preview (push) Has been cancelled
api-governance / spectral-lint (push) Has been cancelled
Refactor code structure for improved readability and maintainability; removed redundant code blocks and optimized function calls.
2025-11-20 07:50:52 +02:00

9.6 KiB

Sprint 0161_0001_0001 · EvidenceLocker

Topic & Scope

  • Advance 160.A EvidenceLocker stream: finalize bundle packaging, replay ingest/retention, CLI/ops readiness, and sovereign crypto routing.
  • Produce ready-to-execute task definitions that unblock downstream ExportCenter/TimelineIndexer once upstream schemas land.
  • Working directory: docs/implplan (coordination for EvidenceLocker; code lives in src/EvidenceLocker & CLI modules tracked elsewhere).

Dependencies & Concurrency

  • Upstream: AdvisoryAI evidence bundle schema + payload notes (Sprint 110.A); Orchestrator/Notifications capsule schemas (Sprint 150.A / 140); Replay Ledger rules in docs/replay/DETERMINISTIC_REPLAY.md; crypto audit docs/security/crypto-routing-audit-2025-11-07.md.
  • Concurrency: runs alongside Sprint 160 coordination; blocks ExportCenter (Sprint 162/163) and TimelineIndexer (Sprint 165) until manifests/envelopes freeze.
  • Ready signals required before DOING: (1) AdvisoryAI schema freeze, (2) Orchestrator envelopes freeze, (3) crypto registry plan approved at 2025-11-18 review.

Documentation Prerequisites

  • docs/modules/evidence-locker/architecture.md
  • docs/modules/evidence-locker/bundle-packaging.md
  • docs/modules/evidence-locker/incident-mode.md
  • docs/replay/DETERMINISTIC_REPLAY.md
  • docs/runbooks/replay_ops.md
  • docs/security/crypto-routing-audit-2025-11-07.md
  • docs/events/orchestrator-scanner-events.md
  • docs/modules/cli/architecture.md

Delivery Tracker

# Task ID Status Key dependency / next step Owners Task Definition
P0 PREP-EVID-ATTEST-73-SCOPE-NOTE DONE (2025-11-19) Due 2025-11-20 · Accountable: Evidence Locker Guild · Concelier Guild · Excititor Guild Evidence Locker Guild · Concelier Guild · Excititor Guild Published attestation scope/sign-off note at docs/modules/evidence-locker/attestation-scope-note.md with required claims and sample builder payload; to be linked in Evidence Bundle v1 change log.
P1 PREP-EVID-REPLAY-187-001-AWAIT-REPLAY-LEDGER TODO Due 2025-11-23 · Accountable: Evidence Locker Guild · Replay Delivery Guild Evidence Locker Guild · Replay Delivery Guild Await replay ledger retention shape; schemas available.

Document artefact/deliverable for EVID-REPLAY-187-001 and publish location so downstream tasks can proceed.
P2 PREP-CLI-REPLAY-187-002-WAITING-ON-EVIDENCELO TODO Due 2025-11-23 · Accountable: CLI Guild CLI Guild Waiting on EvidenceLocker APIs after bundle packaging finalization.

Document artefact/deliverable for CLI-REPLAY-187-002 and publish location so downstream tasks can proceed.
P3 PREP-RUNBOOK-REPLAY-187-004-DEPENDS-ON-RETENT TODO Due 2025-11-23 · Accountable: Docs Guild · Ops Guild Docs Guild · Ops Guild Depends on retention APIs + CLI behavior.

Document artefact/deliverable for RUNBOOK-REPLAY-187-004 and publish location so downstream tasks can proceed.
P4 PREP-EVIDENCE-LOCKER-GUILD-BLOCKED-SCHEMAS-NO TODO Due 2025-11-23 · Accountable: Planning Planning BLOCKED (schemas not yet delivered).

Document artefact/deliverable for Evidence Locker Guild and publish location so downstream tasks can proceed.
P5 PREP-EVIDENCE-LOCKER-GUILD-REPLAY-DELIVERY-GU TODO Due 2025-11-23 · Accountable: Planning Planning BLOCKED (awaiting schema signals).

Document artefact/deliverable for Evidence Locker Guild · Replay Delivery Guild and publish location so downstream tasks can proceed.
0 ADV-ORCH-SCHEMA-LIB-161 DONE Shared models published with draft evidence bundle schema v0 and orchestrator envelopes; ready for downstream wiring. AdvisoryAI Guild · Orchestrator/Notifications Guild · Platform Guild Publish versioned package + fixtures to /src/__Libraries (or shared NuGet) so downstream components can consume frozen schema.
1 EVID-OBS-54-002 BLOCKED AdvisoryAI evidence bundle schema + orchestrator/notifications capsule schema still pending; cannot finalize DSSE fields. Evidence Locker Guild Finalize deterministic bundle packaging + DSSE layout per docs/modules/evidence-locker/bundle-packaging.md, including portable/incident modes.
2 EVID-REPLAY-187-001 BLOCKED PREP-EVID-REPLAY-187-001-AWAIT-REPLAY-LEDGER Evidence Locker Guild · Replay Delivery Guild Implement replay bundle ingestion + retention APIs; update storage policy per docs/replay/DETERMINISTIC_REPLAY.md.
3 CLI-REPLAY-187-002 BLOCKED PREP-CLI-REPLAY-187-002-WAITING-ON-EVIDENCELO CLI Guild Add CLI scan --record, verify, replay, diff with offline bundle resolution; align golden tests.
4 RUNBOOK-REPLAY-187-004 BLOCKED PREP-RUNBOOK-REPLAY-187-004-DEPENDS-ON-RETENT Docs Guild · Ops Guild Publish /docs/runbooks/replay_ops.md coverage for retention enforcement, RootPack rotation, verification drills.
5 CRYPTO-REGISTRY-DECISION-161 DONE Decision recorded in docs/security/crypto-registry-decision-2025-11-18.md; publish contract defaults. Security Guild · Evidence Locker Guild Capture decision from 2025-11-18 review; emit changelog + reference implementation for downstream parity.
6 EVID-CRYPTO-90-001 TODO Apply registry defaults and wire ICryptoProviderRegistry into EvidenceLocker paths. Evidence Locker Guild · Security Guild Route hashing/signing/bundle encryption through ICryptoProviderRegistry/ICryptoHash for sovereign crypto providers.

Action Tracker

Action Owner(s) Due Status
Capture AdvisoryAI + orchestrator schema deltas into this sprint and attach sample payloads. Evidence Locker Guild 2025-11-15 PREP-EVIDENCE-LOCKER-GUILD-BLOCKED-SCHEMAS-NO
Draft Replay Ledger API + CLI notes to unblock EVID-REPLAY-187-001/002. Evidence Locker Guild · Replay Delivery Guild 2025-11-16 PREP-EVIDENCE-LOCKER-GUILD-REPLAY-DELIVERY-GU
Validate ICryptoProviderRegistry plan at readiness review. Evidence Locker Guild · Security Guild 2025-11-18 Pending

Interlocks & Readiness Signals

Dependency Impacts Status / Next signal
AdvisoryAI evidence bundle schema & payload notes (Sprint 110.A) EVID-OBS-54-002, EVID-REPLAY-187-001/002 Pending; expected at 2025-11-14 stand-up. Required before DOING.
Orchestrator + Notifications capsule schema (docs/events/orchestrator-scanner-events.md) All tasks Pending; expected 2025-11-15 handoff. Required before DOING.
Sovereign crypto readiness review EVID-CRYPTO-90-001 Scheduled 2025-11-18; blocks sovereign routing.
Replay Ledger spec alignment (docs/replay/DETERMINISTIC_REPLAY.md) EVID-REPLAY-187-001/002, RUNBOOK-REPLAY-187-004 Sections 2,8,9 must be reflected once schemas land.

Decisions & Risks

Item Status / Decision Notes
Schema readiness BLOCKED Waiting on AdvisoryAI + orchestrator envelopes; no DOING until frozen.
Crypto routing approval DONE Defaults recorded in docs/security/crypto-registry-decision-2025-11-18.md; implement in EvidenceLocker/CLI.
Template & filename normalization DONE (2025-11-17) Renamed to SPRINT_0161_0001_0001_evidencelocker.md; structure aligned to sprint template.

Risk table

Risk Severity Mitigation / Owner
AdvisoryAI schema slips past 2025-11-14, delaying DSSE manifest freeze. High AdvisoryAI Guild to provide interim sample payloads; EvidenceLocker to stub adapters.
Orchestrator/Notifications schema handoff misses 2025-11-15. High Escalate to Wave 150/140; keep tasks BLOCKED and schedule daily stand-ups until envelopes land.
Sovereign crypto routing design not ready by 2025-11-18. Medium Security to publish reference implementation; EvidenceLocker to nominate fallback providers.
Replay Ledger alignment drifts from CLI behavior. Medium Sync docs/runbooks with CLI/EvidenceLocker changes once schemas land; add deterministic test cases.

Execution Log

Date (UTC) Update Owner
2025-11-19 Cleaned PREP-EVID-REPLAY-187-001-AWAIT-REPLAY-LEDGER Task ID (removed trailing hyphen) so dependency lookup works. Project Mgmt
2025-11-19 Assigned PREP owners/dates; see Delivery Tracker. Planning
2025-11-19 Completed PREP-EVID-ATTEST-73-SCOPE-NOTE: published scope note + builder inputs at docs/modules/evidence-locker/attestation-scope-note.md to unblock Concelier/Excititor attestation tracks. Project Mgmt
2025-11-19 EVID-OBS-54-002 marked BLOCKED: awaiting frozen AdvisoryAI evidence bundle schema and orchestrator/notifications capsule schema to finalize DSSE fields. Implementer
2025-11-12 Snapshot captured (pre-template) with tasks TODO. Planning
2025-11-17 Normalized sprint to standard template, renamed file, and set all tasks BLOCKED pending schemas/crypto review. Implementer
2025-11-18 Added ADV-ORCH-SCHEMA-LIB-161 and CRYPTO-REGISTRY-DECISION-161 tasks; marked downstream items blocked on them. Project PM
2025-11-18 Set ADV-ORCH-SCHEMA-LIB-161 and CRYPTO-REGISTRY-DECISION-161 to DOING; drafting shared models package and crypto decision record. Implementer
2025-11-18 Shared models updated with draft evidence bundle schema v0; ADV-ORCH-SCHEMA-LIB-161 set to DONE and downstream tasks unblocked. Implementer
2025-11-18 Recorded crypto registry decision in docs/security/crypto-registry-decision-2025-11-18.md; moved CRYPTO-REGISTRY-DECISION-161 to DONE and unblocked EVID-CRYPTO-90-001. Implementer
2025-11-18 Started EVID-OBS-54-002 DOING using shared schema draft. Implementer
2025-11-18 Started EVID-OBS-54-002 with shared schema; replay/CLI remain pending ledger shape. Implementer