stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 16 Releases Wiki Activity
Files
2e276d66765f34a2e6953b21652c697cb2546c1e
git.stella-ops.org/docs/modules/concelier
History
master 2e276d6676 feat: Enhance MongoDB storage with event publishing and outbox support 
- Added `MongoAdvisoryObservationEventPublisher` and `NatsAdvisoryObservationEventPublisher` for event publishing.
- Registered `IAdvisoryObservationEventPublisher` to choose between NATS and MongoDB based on configuration.
- Introduced `MongoAdvisoryObservationEventOutbox` for outbox pattern implementation.
- Updated service collection to include new event publishers and outbox.
- Added a new hosted service `AdvisoryObservationTransportWorker` for processing events.

feat: Update project dependencies

- Added `NATS.Client.Core` package to the project for NATS integration.

test: Add unit tests for AdvisoryLinkset normalization

- Created `AdvisoryLinksetNormalizationConfidenceTests` to validate confidence score calculations.

fix: Adjust confidence assertion in `AdvisoryObservationAggregationTests`

- Updated confidence assertion to allow a range instead of a fixed value.

test: Implement tests for AdvisoryObservationEventFactory

- Added `AdvisoryObservationEventFactoryTests` to ensure correct mapping and hashing of observation events.

chore: Configure test project for Findings Ledger

- Created `Directory.Build.props` for test project configuration.
- Added `StellaOps.Findings.Ledger.Exports.Unit.csproj` for unit tests related to findings ledger exports.

feat: Implement export contracts for findings ledger

- Defined export request and response contracts in `ExportContracts.cs`.
- Created various export item records for findings, VEX, advisories, and SBOMs.

feat: Add export functionality to Findings Ledger Web Service

- Implemented endpoints for exporting findings, VEX, advisories, and SBOMs.
- Integrated `ExportQueryService` for handling export logic and pagination.

test: Add tests for Node language analyzer phase 22

- Implemented `NodePhase22SampleLoaderTests` to validate loading of NDJSON fixtures.
- Created sample NDJSON file for testing.

chore: Set up isolated test environment for Node tests

- Added `node-isolated.runsettings` for isolated test execution.
- Created `node-tests-isolated.sh` script for running tests in isolation.
2025-11-20 23:08:45 +02:00
..
bridges
Refactor code structure for improved readability and maintainability; removed redundant code blocks and optimized function calls.
2025-11-20 07:50:52 +02:00
events
feat: Enhance MongoDB storage with event publishing and outbox support
2025-11-20 23:08:45 +02:00
feeds
Refactor code structure for improved readability and maintainability; removed redundant code blocks and optimized function calls.
2025-11-20 07:50:52 +02:00
operations
feat: Enhance MongoDB storage with event publishing and outbox support
2025-11-20 23:08:45 +02:00
advisory-ai-api.md
feat: Add initial implementation of Vulnerability Resolver Jobs
2025-11-18 07:52:15 +02:00
AGENTS.md
Update AGENTS.md files across multiple modules to standardize task status update instructions and introduce a new document for Secret Leak Detection operations.
2025-11-05 11:58:32 +02:00
architecture.md
feat(scanner): Implement Deno analyzer and associated tests
2025-11-12 10:01:54 +02:00
implementation_plan.md
Align AOC tasks for Excititor and Concelier
2025-10-31 18:50:15 +02:00
link-not-merge-schema.md
feat: Add initial implementation of Vulnerability Resolver Jobs
2025-11-18 07:52:15 +02:00
linkset-correlation-21-002.md
feat: Enhance MongoDB storage with event publishing and outbox support
2025-11-20 23:08:45 +02:00
README.md
Implement MongoDB-based storage for Pack Run approval, artifact, log, and state management
2025-11-07 10:01:47 +02:00

README.md

StellaOps Concelier

Concelier ingests signed advisories from dozens of sources and converts them into immutable observations plus linksets under the Aggregation-Only Contract (AOC).

Responsibilities

  • Fetch and normalise vulnerability advisories via restart-time connectors.
  • Persist observations and correlation linksets without precedence decisions.
  • Emit deterministic exports (JSON, Trivy DB) for downstream policy evaluation.
  • Coordinate offline/air-gap updates via Offline Kit bundles.
  • Serve paragraph-anchored advisory chunks for Advisory AI consumers without breaking the Aggregation-Only Contract.

Key components

  • StellaOps.Concelier.WebService orchestration host.
  • Connector libraries under StellaOps.Concelier.Connector.*.
  • Exporter packages (StellaOps.Concelier.Exporter.*).

Recent updates

Integrations & dependencies

  • MongoDB for canonical observations and schedules.
  • Policy Engine / Export Center / CLI for evidence consumption.
  • Notify and UI for advisory deltas.

Operational notes

  • Connector runbooks in ./operations/connectors/.
  • Mirror operations for Offline Kit parity.
  • Grafana dashboards for connector health.
  • Authority toggle rollout (2025-10-22 update). Follow the phased table and audit checklist in ../../10_CONCELIER_CLI_QUICKSTART.md when enabling authority.enabled/authority.allowAnonymousFallback, and cross-check the refreshed ./operations/authority-audit-runbook.md before enforcement.

Related resources

  • ./operations/conflict-resolution.md
  • ./operations/mirror.md
  • ./operations/authority-audit-runbook.md
  • ../../10_CONCELIER_CLI_QUICKSTART.md (authority integration timeline & smoke tests)

Backlog references

  • DOCS-LNM-22-001, DOCS-LNM-22-007 in ../../TASKS.md.
  • Connector-specific TODOs in src/Concelier/**/TASKS.md.

Epic alignment

  • Epic 1 – AOC enforcement: uphold raw observation invariants, provenance requirements, linkset-only enrichment, and AOC verifier guardrails across every connector.
  • Epic 10 – Export Center: expose deterministic advisory exports and metadata required by JSON/Trivy/mirror bundles.