Files
git.stella-ops.org/bench
StellaOps Bot 3488b22c0c
Some checks failed
Docs CI / lint-and-preview (push) Has been cancelled
AOC Guard CI / aoc-guard (push) Has been cancelled
AOC Guard CI / aoc-verify (push) Has been cancelled
up
2025-11-29 11:08:08 +02:00
..
up
2025-11-29 11:08:08 +02:00

StellaOps Bench Repository

Status: Draft — aligns with docs/benchmarks/vex-evidence-playbook.md (Sprint401).
Purpose: Host reproducible VEX decisions and comparison data that prove StellaOps signal quality vs. baseline scanners.

Layout

bench/
  README.md                 # this file
  findings/                 # per CVE/product bundles
    CVE-YYYY-NNNNN/
      evidence/
        reachability.json
        sbom.cdx.json
      decision.openvex.json
      decision.dsse.json
      rekor.txt
      metadata.json
  tools/
    verify.sh               # DSSE + Rekor verifier
    verify.py               # offline verifier
    compare.py              # baseline comparison script
    replay.sh               # runs reachability replay manifolds
  results/
    summary.csv
    runs/<date>/...         # raw outputs + replay manifests

Refer to docs/benchmarks/vex-evidence-playbook.md for artifact contracts and automation tasks. The bench/ tree will be populated once BENCH-AUTO-401-019 and DOCS-VEX-401-012 land.