2.5 KiB
2.5 KiB
Zastava agent guide
Mission
Zastava monitors running workloads, verifies supply chain posture, and enforces runtime policy via Kubernetes admission webhooks.
Advisory Handling
- Trigger: any new/updated advisory triggers doc + sprint updates; no approval required.
- Docs: update high-level + detailed pages; inline only small snippets; put runnable/long code in
docs/benchmarks/**ortests/**(deterministic/offline) and link. - Sprints: add tasks + Execution Log in the relevant
SPRINT_*.mdwith doc paths/owners; add risks if schema/feed/transparency caps apply. - De-dup: check archived advisories; mark supersedes/extends where overlapping.
- Defaults: hybrid reachability posture, deterministic/frozen feeds; execute immediately, then report.
Key docs
How to get started
- Open sprint file
/docs/implplan/SPRINT_*.mdand locate the stories referencing this module. - Review ./TASKS.md for local follow-ups and confirm status transitions (TODO → DOING → DONE/BLOCKED).
- Read the architecture and README for domain context before editing code or docs.
- Coordinate cross-module changes in the main /AGENTS.md description and through the sprint plan.
Guardrails
- Honour the Aggregation-Only Contract where applicable (see ../../ingestion/aggregation-only-contract.md).
- Preserve determinism: sort outputs, normalise timestamps (UTC ISO-8601), and avoid machine-specific artefacts.
- Keep Offline Kit parity in mind—document air-gapped workflows for any new feature.
- Update runbooks/observability assets when operational characteristics change.
Required Reading
docs/modules/zastava/README.mddocs/modules/zastava/architecture.mddocs/modules/zastava/implementation_plan.mddocs/modules/platform/architecture-overview.md
Working Agreement
-
- Update task status to
DOING/DONEin both correspoding sprint file/docs/implplan/SPRINT_*.mdand the localTASKS.mdwhen you start or finish work.
- Update task status to
-
- Review this charter and the Required Reading documents before coding; confirm prerequisites are met.
-
- Keep changes deterministic (stable ordering, timestamps, hashes) and align with offline/air-gap expectations.
-
- Coordinate doc updates, tests, and cross-guild communication whenever contracts or workflows change.
-
- Revert to
TODOif you pause the task without shipping changes; leave notes in commit/PR descriptions for context.
- Revert to