- Implemented the GostKeyValue class for handling public key parameters in ГОСТ Р 34.10 digital signatures. - Created the GostSignedXml class to manage XML signatures using ГОСТ 34.10, including methods for computing and checking signatures. - Developed the GostSignedXmlImpl class to encapsulate the signature computation logic and public key retrieval. - Added specific key value classes for ГОСТ Р 34.10-2001, ГОСТ Р 34.10-2012/256, and ГОСТ Р 34.10-2012/512 to support different signature algorithms. - Ensured compatibility with existing XML signature standards while integrating ГОСТ cryptography.
3.4 KiB
3.4 KiB
Sprint 207 - Experience & SDKs · 180.C) Graph
Active items only. Completed/historic work now resides in docs/implplan/archived/tasks.md (updated 2025-11-08).
[Experience & SDKs] 180.C) Graph Depends on: Sprint 120.A - AirGap, Sprint 130.A - Scanner, Sprint 150.A - Orchestrator, Sprint 170.A - Notifier Summary: Experience & SDKs focus on Graph).
| Task ID | State | Task description | Owners (Source) |
|---|---|---|---|
| GRAPH-API-28-001 | TODO | Define OpenAPI + JSON schema for graph search/query/paths/diff/export endpoints, including cost metadata and streaming tile schema. | Graph API Guild (src/Graph/StellaOps.Graph.Api) |
| GRAPH-API-28-002 | TODO | Implement /graph/search with multi-type index lookup, prefix/exact match, RBAC enforcement, and result ranking + caching. Dependencies: GRAPH-API-28-001. |
Graph API Guild (src/Graph/StellaOps.Graph.Api) |
| GRAPH-API-28-003 | TODO | Build query planner + cost estimator for /graph/query, stream tiles (nodes/edges/stats) progressively, enforce budgets, provide cursor tokens. Dependencies: GRAPH-API-28-002. |
Graph API Guild (src/Graph/StellaOps.Graph.Api) |
| GRAPH-API-28-004 | TODO | Implement /graph/paths with depth ≤6, constraint filters, heuristic shortest path search, and optional policy overlay rendering. Dependencies: GRAPH-API-28-003. |
Graph API Guild (src/Graph/StellaOps.Graph.Api) |
| GRAPH-API-28-005 | TODO | Implement /graph/diff streaming added/removed/changed nodes/edges between SBOM snapshots; include overlay deltas and policy/VEX/advisory metadata. Dependencies: GRAPH-API-28-004. |
Graph API Guild (src/Graph/StellaOps.Graph.Api) |
| GRAPH-API-28-006 | TODO | Consume Policy Engine overlay contract (POLICY-ENGINE-30-001..003) and surface advisory/VEX/policy overlays with caching, partial materialization, and explain trace sampling for focused nodes. Dependencies: GRAPH-API-28-005. |
Graph API Guild (src/Graph/StellaOps.Graph.Api) |
| GRAPH-API-28-007 | TODO | Implement exports (graphml, csv, ndjson, png, svg) with async job management, checksum manifests, and streaming downloads. Dependencies: GRAPH-API-28-006. |
Graph API Guild (src/Graph/StellaOps.Graph.Api) |
| GRAPH-API-28-008 | TODO | Integrate RBAC scopes (graph:read, graph:query, graph:export), tenant headers, audit logging, and rate limiting. Dependencies: GRAPH-API-28-007. |
Graph API Guild, Authority Guild (src/Graph/StellaOps.Graph.Api) |
| GRAPH-API-28-009 | TODO | Instrument metrics (graph_tile_latency_seconds, graph_query_budget_denied_total, graph_overlay_cache_hit_ratio), structured logs, and traces per query stage; publish dashboards. Dependencies: GRAPH-API-28-008. |
Graph API Guild, Observability Guild (src/Graph/StellaOps.Graph.Api) |
| GRAPH-API-28-010 | TODO | Build unit/integration/load tests with synthetic datasets (500k nodes/2M edges), fuzz query validation, verify determinism across runs. Dependencies: GRAPH-API-28-009. | Graph API Guild, QA Guild (src/Graph/StellaOps.Graph.Api) |
| GRAPH-API-28-011 | TODO | Provide deployment manifests, offline kit support, API gateway integration docs, and smoke tests. Dependencies: GRAPH-API-28-010. | Graph API Guild, DevOps Guild (src/Graph/StellaOps.Graph.Api) |
| GRAPH-INDEX-28-011 | DONE (2025-11-04) | Wire SBOM ingest runtime to emit graph snapshot artifacts, add DI factory helpers, and document Mongo/snapshot environment guidance. Dependencies: GRAPH-INDEX-28-002..006. | Graph Indexer Guild (src/Graph/StellaOps.Graph.Indexer) |