stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 2 Releases Wiki Activity
Files
17613acf57402a4e1da74a13e1c61449478f2e8d
git.stella-ops.org/docs/modules/triage
History
StellaOps Bot 0103defcff docs consolidation work
2025-12-25 19:09:48 +02:00
..
exploit-path-inbox.md
test
2025-12-22 09:56:20 +02:00
proof-bundle-spec.md
test
2025-12-22 09:56:20 +02:00
README.md
docs consolidation work
2025-12-25 19:09:48 +02:00

README.md

Triage

Status: Design/Planning Source: N/A (cross-cutting concept) Owner: VulnExplorer Guild

Purpose

Triage defines workflows and data structures for vulnerability triage, exploit path analysis, and proof bundle generation. Provides specifications for prioritization, evidence review, and decision capture used by VulnExplorer and Policy modules.

Components

Concept Documentation:

  • exploit-path-inbox.md - Exploit path inbox specification for automated triage
  • proof-bundle-spec.md - Proof bundle format for evidence packaging

Triage Workflows:

  • Automated triage (Signals-based prioritization)
  • Manual triage (human review and decision)
  • Exploit path analysis (reachability to exploitable sinks)
  • Proof bundle generation (evidence packaging for decisions)

Implementation Locations

Triage functionality is implemented across multiple modules:

  • VulnExplorer - Triage UI and workflow orchestration
  • Signals - Automated prioritization scoring
  • Policy Engine - Exploit path analysis
  • EvidenceLocker - Proof bundle storage
  • Notify - Triage alert distribution

Dependencies

  • VulnExplorer (triage UI)
  • Signals (prioritization)
  • Policy Engine (exploit paths)
  • EvidenceLocker (proof bundles)
  • Notify (alerts)

Related Documentation

  • Exploit Path Inbox: ./exploit-path-inbox.md
  • Proof Bundle Spec: ./proof-bundle-spec.md
  • VulnExplorer: ../vuln-explorer/
  • Signals: ../signals/
  • Policy: ../policy/
  • EvidenceLocker: ../evidence-locker/

Current Status

Triage workflows documented in exploit-path-inbox.md and proof-bundle-spec.md. Implementation distributed across VulnExplorer (UI/workflows), Signals (scoring), Policy (analysis), and EvidenceLocker (proof storage) modules.