71e9a56cfd
- Implemented `run-scanner-ci.sh` to build and run tests for the Scanner solution with a warmed NuGet cache. - Created `excititor-vex-traces.json` dashboard for monitoring Excititor VEX observations. - Added Docker Compose configuration for the OTLP span sink in `docker-compose.spansink.yml`. - Configured OpenTelemetry collector in `otel-spansink.yaml` to receive and process traces. - Developed `run-spansink.sh` script to run the OTLP span sink for Excititor traces. - Introduced `FileSystemRiskBundleObjectStore` for storing risk bundle artifacts in the filesystem. - Built `RiskBundleBuilder` for creating risk bundles with associated metadata and providers. - Established `RiskBundleJob` to execute the risk bundle creation and storage process. - Defined models for risk bundle inputs, entries, and manifests in `RiskBundleModels.cs`. - Implemented signing functionality for risk bundle manifests with `HmacRiskBundleManifestSigner`. - Created unit tests for `RiskBundleBuilder`, `RiskBundleJob`, and signing functionality to ensure correctness. - Added filesystem artifact reader tests to validate manifest parsing and artifact listing. - Included test manifests for egress scenarios in the task runner tests. - Developed timeline query service tests to verify tenant and event ID handling.
37 lines
1.8 KiB
Markdown
37 lines
1.8 KiB
Markdown
# StellaOps Platform
|
|
|
|
Platform module describes cross-cutting architecture, contracts, and guardrails that bind the services together.
|
|
|
|
## Latest updates (2025-11-30)
|
|
- Sprint tracker `docs/implplan/SPRINT_0324_0001_0001_docs_modules_platform.md` and module `TASKS.md` added to mirror status.
|
|
- README now points to architecture overview, AOC references, and offline guidance entry points.
|
|
- Platform module remains docs-only; no runtime services.
|
|
|
|
## Responsibilities
|
|
- Maintain the system-wide architecture overview and integration diagrams.
|
|
- Capture Aggregation-Only Contract guidance and migration playbooks.
|
|
- Document shared services such as API gateway, tenancy, quotas, and offline posture.
|
|
- Coordinate platform-wide epics and compliance checklists.
|
|
|
|
## Key components
|
|
- Architecture overview in `architecture-overview.md`.
|
|
- Platform architecture summary in `architecture.md`.
|
|
- High-level reference: `../../07_HIGH_LEVEL_ARCHITECTURE.md`.
|
|
|
|
## Integrations & dependencies
|
|
- All StellaOps services via shared contracts (AOC, telemetry, security).
|
|
- DevOps for release governance.
|
|
- Docs guild for cross-module onboarding.
|
|
|
|
## Operational notes
|
|
- Docs-only module; focus is architectural governance and cross-module guardrails.
|
|
- Glossaries and guardrails cross-linked across docs; keep AOC references current.
|
|
- Status mirrors: sprint file and `docs/modules/platform/TASKS.md`.
|
|
|
|
## Backlog references
|
|
- DOCS-AOC-19-002/003 in ../../TASKS.md.
|
|
- Future platform epics under docs/implplan/SPRINTS.md.
|
|
|
|
## Epic alignment
|
|
- Aligns with the Aggregation-Only Contract reference, Policy and Policy Studio guides, Graph/Vulnerability Explorer documentation, and the Orchestrator, Advisory AI, and Notifications implementation plans to keep platform guardrails consistent across services.
|