- Added detailed task completion records for KMS interface implementation and CLI support for file-based keys. - Documented security enhancements including Argon2id password hashing, audit event contracts, and rate limiting configurations. - Included scoped service support and integration updates for the Plugin platform, ensuring proper DI handling and testing coverage.
2.7 KiB
2.7 KiB
Development Guides & Tooling
Resources for contributors building features, plug-ins, connectors, and tests.
Engineering Standards & Quality
- ../18_CODING_STANDARDS.md – language guidelines, project layout, review expectations.
- ../19_TEST_SUITE_OVERVIEW.md – unit, integration, golden, and determinism test strategy.
- ../12_PERFORMANCE_WORKBOOK.md – benchmark targets and reference rigs.
- ../cli-vs-ui-parity.md – CLI vs Console feature parity tracking.
- ../scanner-core-contracts.md – DTO fixtures consumed by tests.
Plug-ins, Connectors & Extensions
- ../10_PLUGIN_SDK_GUIDE.md – plug-in lifecycle, manifests, packaging.
- ../10_CONCELIER_CLI_QUICKSTART.md – local Concelier + CLI workflow for advisory ingestion.
- Developer guides under ../dev/:
- Connector playbooks (
30_EXCITITOR_CONNECTOR_GUIDE.md,30_VEXER_CONNECTOR_GUIDE.md,concelier-connector-research-20251011.md,kisa_connector_notes.md). - Authority and DPoP guidance (
31_AUTHORITY_PLUGIN_DEVELOPER_GUIDE.md,authority-dpop-mtls-plan.md,authority-plugin-di-coordination.md,authority-rate-limit-tuning-outline.md,32_AUTH_CLIENT_GUIDE.md). - Analyzer and cache configuration (
SCANNER_CACHE_CONFIGURATION.md,java-analyzer-observation-plan.md,EXCITITOR_STATEMENT_BACKFILL.md). - Normalisation & merge references (
aoc-normalization-removal-notes.md,merge_semver_playbook.md,normalized-rule-recipes.md,normalized_versions_rollout.md). - Operational templates and fixtures (
templates/,fixtures.md). - Mongo/Cartographer details (
mongo_indices.md,cartographer-graph-handshake.md).
- Connector playbooks (
CLI, SDKs & Automation
- ../09_API_CLI_REFERENCE.md – authoritative CLI commands and flags (use for scripting).
- ../api/sdk-openapi-program.md – guidance for downstream SDK generation.
- ../policy/gateway.md & ../policy/dsl.md – foundations for automating policy programs.
Scaffolding & Examples
- ../examples/policies/README.md – sample policy bundles.
- ../examples/ui-tours.md and ../assets/ui/tours/README.md – console tour authoring guides.
- ../task-packs/ – reusable task templates for sprints.
- ../faq/policy-faq.md – policy author FAQ.
- ../faq/ – additional Q&A sets useful during development.