- Added detailed task completion records for KMS interface implementation and CLI support for file-based keys. - Documented security enhancements including Argon2id password hashing, audit event contracts, and rate limiting configurations. - Included scoped service support and integration updates for the Plugin platform, ensuring proper DI handling and testing coverage.
2.8 KiB
Completed Tasks
|FEEDCONN-ICSCISA-02-001 Document CISA ICS feed contract|BE-Conn-ICS-CISA|Research|DONE (2025-10-11) – https://www.cisa.gov/cybersecurity-advisories/ics-advisories.xml and legacy /sites/default/files/feeds/... return Akamai 403 even with browser UA; HTML landing page blocked as well. Logged full headers (x-reference-error, AkamaiGHost) in docs/concelier-connector-research-20251011.md and initiated GovDelivery access request.|
|FEEDCONN-ICSCISA-02-002 Fetch pipeline & cursor storage|BE-Conn-ICS-CISA|Source.Common, Storage.Mongo|DONE (2025-10-16) – Confirmed proxy knobs + cursor state behave with the refreshed fixtures; ops runbook now captures proxy usage/validation so the fetch stage is production-ready.|
|FEEDCONN-ICSCISA-02-003 DTO/parser implementation|BE-Conn-ICS-CISA|Source.Common|DONE (2025-10-16) – Feed parser fixtures updated to retain vendor PDFs as attachments while maintaining reference coverage; console diagnostics removed.|
|FEEDCONN-ICSCISA-02-004 Canonical mapping & range primitives|BE-Conn-ICS-CISA|Models|DONE (2025-10-16) – TryCreateSemVerPrimitive flow + Mongo deserialiser now persist exactValue (4.2 → 4.2.0), unblocking canonical snapshots.|
|FEEDCONN-ICSCISA-02-005 Deterministic fixtures/tests|QA|Testing|DONE (2025-10-16) – dotnet test src/Concelier/__Tests/StellaOps.Concelier.Connector.Ics.Cisa.Tests/... passes; fixtures assert attachment handling + SemVer semantics.|
|FEEDCONN-ICSCISA-02-006 Telemetry & documentation|DevEx|Docs|DONE (2025-10-16) – Ops guide documents attachment checks, SemVer exact values, and proxy guidance; diagnostics remain unchanged.|
|FEEDCONN-ICSCISA-02-007 Detail document inventory|BE-Conn-ICS-CISA|Research|DONE (2025-10-16) – Validated canned detail pages vs feed output so attachment inventories stay aligned; archived expectations noted in HANDOVER.md.|
|FEEDCONN-ICSCISA-02-008 Distribution fallback strategy|BE-Conn-ICS-CISA|Research|DONE (2025-10-11) – Outlined GovDelivery token request, HTML scrape + email digest fallback, and dependency on Ops for credential workflow; awaiting decision before fetch implementation.|
|FEEDCONN-ICSCISA-02-009 GovDelivery credential onboarding|Ops, BE-Conn-ICS-CISA|Ops|DONE (2025-10-14) – GovDelivery onboarding runbook captured in docs/modules/concelier/operations/connectors/ics-cisa.md; secret vault path and Offline Kit handling documented.|
|FEEDCONN-ICSCISA-02-010 Mitigation & SemVer polish|BE-Conn-ICS-CISA|02-003, 02-004|DONE (2025-10-16) – Attachment + mitigation references now land as expected and SemVer primitives carry exact values; end-to-end suite green (see HANDOVER.md).|
|FEEDCONN-ICSCISA-02-011 Docs & telemetry refresh|DevEx|02-006|DONE (2025-10-16) – Ops documentation refreshed (attachments, SemVer validation, proxy knobs) and telemetry notes verified.|