git.stella-ops.org/src/Signals/StellaOps.Signals/Models/ReachabilityFactDocument.cs

using System;
using System.Collections.Generic;

namespace StellaOps.Signals.Models;

public sealed class ReachabilityFactDocument
{
    public string Id { get; set; } = Guid.NewGuid().ToString("N");

    public string CallgraphId { get; set; } = string.Empty;

    public ReachabilitySubject Subject { get; set; } = new();

    public List<string> EntryPoints { get; set; } = new();

    public List<ReachabilityStateDocument> States { get; set; } = new();

    public List<RuntimeFactDocument>? RuntimeFacts { get; set; }

    /// <summary>
    /// CAS URI for the runtime-facts batch artifact (cas://reachability/runtime-facts/{hash}).
    /// </summary>
    public string? RuntimeFactsBatchUri { get; set; }

    /// <summary>
    /// BLAKE3 hash of the runtime-facts batch artifact.
    /// </summary>
    public string? RuntimeFactsBatchHash { get; set; }

    public Dictionary<string, string?>? Metadata { get; set; }

    public ContextFacts? ContextFacts { get; set; }

    public UncertaintyDocument? Uncertainty { get; set; }

    /// <summary>
    /// Edge bundles attached to this graph.
    /// </summary>
    public List<EdgeBundleReference>? EdgeBundles { get; set; }

    /// <summary>
    /// Whether any edges are quarantined (revoked) for this fact.
    /// </summary>
    public bool HasQuarantinedEdges { get; set; }

    public double Score { get; set; }

    public double RiskScore { get; set; }

    public int UnknownsCount { get; set; }

    public double UnknownsPressure { get; set; }

    public DateTimeOffset ComputedAt { get; set; }

    public string SubjectKey { get; set; } = string.Empty;
}

public sealed class ReachabilityStateDocument
{
    public string Target { get; set; } = string.Empty;

    public bool Reachable { get; set; }

    public double Confidence { get; set; }

    public string Bucket { get; set; } = "unknown";

    /// <summary>
    /// v1 lattice state code (U, SR, SU, RO, RU, CR, CU, X).
    /// </summary>
    public string? LatticeState { get; set; }

    /// <summary>
    /// Previous lattice state before this transition (for audit trail).
    /// </summary>
    public string? PreviousLatticeState { get; set; }

    public double Weight { get; set; }

    public double Score { get; set; }

    public List<string> Path { get; set; } = new();

    public ReachabilityEvidenceDocument Evidence { get; set; } = new();

    /// <summary>
    /// Timestamp of the last lattice state transition.
    /// </summary>
    public DateTimeOffset? LatticeTransitionAt { get; set; }
}

public sealed class ReachabilityEvidenceDocument
{
    public List<string> RuntimeHits { get; set; } = new();

    public List<string>? BlockedEdges { get; set; }

    /// <summary>
    /// Combined gate multiplier in basis points (10000 = 100%).
    /// </summary>
    public int GateMultiplierBps { get; set; } = 10000;

    /// <summary>
    /// Gates detected on the computed path to the target (if any).
    /// </summary>
    public List<CallgraphGate>? Gates { get; set; }
}

public sealed class ReachabilitySubject
{
    public string? ImageDigest { get; set; }

    public string? Component { get; set; }

    public string? Version { get; set; }

    public string? ScanId { get; set; }

    public string ToSubjectKey()
    {
        if (!string.IsNullOrWhiteSpace(ScanId))
        {
            return ScanId!;
        }

        if (!string.IsNullOrWhiteSpace(ImageDigest))
        {
            return ImageDigest!;
        }

        return string.Join('|', Component ?? string.Empty, Version ?? string.Empty).Trim('|');
    }
}

public sealed class RuntimeFactDocument
{
    public string SymbolId { get; set; } = string.Empty;

    public string? CodeId { get; set; }

    public string? SymbolDigest { get; set; }

    public string? Purl { get; set; }

    public string? BuildId { get; set; }

    public string? LoaderBase { get; set; }

    public int? ProcessId { get; set; }

    public string? ProcessName { get; set; }

    public string? SocketAddress { get; set; }

    public string? ContainerId { get; set; }

    public string? EvidenceUri { get; set; }

    public int HitCount { get; set; }

    public DateTimeOffset? ObservedAt { get; set; }

    public Dictionary<string, string?>? Metadata { get; set; }
}