5d245f958f
- Replace 349 .Audited("module", "action") calls with typed constants across 91 files
- Add 21 missing action constants to AuditActions.cs (Policy, Attestor, Evidence, Scanner)
- Compile-time safety for module/action naming across all 15 services
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
EvidenceLocker
Container(s): stellaops-evidence-locker-web, stellaops-evidence-locker-worker Slot: 6 | Port: 8080 | Consumer Group: evidencelocker Resource Tier: light
Purpose
The Evidence Locker provides write-once, tamper-evident storage for release evidence artifacts (scan results, attestations, policy verdicts, approval records). It supports optional cryptographic signing (ES256), quota enforcement, snapshot queries, and multi-material evidence bundles. The worker handles background evidence processing tasks.
API Surface
evidencelocker(via Router) — evidence material upload (write-once), retrieval, snapshot queries, health checks, observability endpoints
Storage
PostgreSQL (via EvidenceLocker:Database:ConnectionString); file-system object store (/data/evidence) or configurable backend; Valkey for cache
Background Workers
- Evidence Locker worker — background evidence processing, integrity verification