304 lines
17 KiB
Markdown
304 lines
17 KiB
Markdown
# StellaOps Documentation Index
|
|
|
|
> **Master index of all StellaOps documentation.**
|
|
> Last updated: 2026-01-06 (Pass 5 consolidation)
|
|
|
|
This index provides a complete map of documentation organized by audience and topic. The documentation follows a two-level hierarchy:
|
|
- **Canonical guides** (`docs/*.md`) - High-level entry points
|
|
- **Detailed references** (`docs/**/*`) - Module dossiers, API contracts, runbooks
|
|
|
|
---
|
|
|
|
## Quick Navigation by Audience
|
|
|
|
| Audience | Start Here |
|
|
|----------|------------|
|
|
| **New Users** | [quickstart.md](quickstart.md), [overview.md](overview.md) |
|
|
| **Developers** | [DEVELOPER_ONBOARDING.md](DEVELOPER_ONBOARDING.md), [CODING_STANDARDS.md](CODING_STANDARDS.md) |
|
|
| **Architects** | [ARCHITECTURE_OVERVIEW.md](ARCHITECTURE_OVERVIEW.md), [ARCHITECTURE_REFERENCE.md](ARCHITECTURE_REFERENCE.md) |
|
|
| **Operators/SREs** | [SECURITY_HARDENING_GUIDE.md](SECURITY_HARDENING_GUIDE.md), [OFFLINE_KIT.md](OFFLINE_KIT.md) |
|
|
| **Plugin Developers** | [PLUGIN_SDK_GUIDE.md](PLUGIN_SDK_GUIDE.md), [dev/](dev/) |
|
|
|
|
---
|
|
|
|
## Canonical Guides (docs/*.md)
|
|
|
|
### Getting Started
|
|
| Document | Purpose |
|
|
|----------|---------|
|
|
| [README.md](README.md) | Documentation overview and navigation |
|
|
| [overview.md](overview.md) | 2-minute product summary |
|
|
| [quickstart.md](quickstart.md) | First scan walkthrough |
|
|
| [DEVELOPER_ONBOARDING.md](DEVELOPER_ONBOARDING.md) | Developer setup guide |
|
|
| [CONCELIER_CLI_QUICKSTART.md](CONCELIER_CLI_QUICKSTART.md) | Advisory ingestion quickstart |
|
|
|
|
### Architecture
|
|
| Document | Purpose |
|
|
|----------|---------|
|
|
| [ARCHITECTURE_OVERVIEW.md](ARCHITECTURE_OVERVIEW.md) | 10-minute architecture tour |
|
|
| [ARCHITECTURE_REFERENCE.md](ARCHITECTURE_REFERENCE.md) | Full architecture index/map |
|
|
| [technical/architecture/](technical/architecture/) | Detailed architecture views |
|
|
|
|
### Features & Capabilities
|
|
| Document | Purpose |
|
|
|----------|---------|
|
|
| [key-features.md](key-features.md) | Capability cards with evidence |
|
|
| [FEATURE_MATRIX.md](FEATURE_MATRIX.md) | Tier-by-tier feature availability |
|
|
| [full-features-list.md](full-features-list.md) | Complete capability catalog |
|
|
|
|
### Product Strategy
|
|
| Document | Purpose |
|
|
|----------|---------|
|
|
| [product/](product/) | Product strategy and positioning hub |
|
|
| [product/competitive-landscape.md](product/competitive-landscape.md) | 15-vendor competitive analysis |
|
|
| [product/decision-capsules.md](product/decision-capsules.md) | Decision Capsules concept |
|
|
| [product/moat-strategy-summary.md](product/moat-strategy-summary.md) | Strategic positioning |
|
|
|
|
### Operations & Security
|
|
| Document | Purpose |
|
|
|----------|---------|
|
|
| [SECURITY_HARDENING_GUIDE.md](SECURITY_HARDENING_GUIDE.md) | Deployment security guide |
|
|
| [SECURITY_POLICY.md](SECURITY_POLICY.md) | Security incident policy |
|
|
| [OFFLINE_KIT.md](OFFLINE_KIT.md) | Air-gapped operation guide |
|
|
| [UI_GUIDE.md](UI_GUIDE.md) | Console operator guide |
|
|
|
|
### Development
|
|
| Document | Purpose |
|
|
|----------|---------|
|
|
| [CODING_STANDARDS.md](CODING_STANDARDS.md) | Code quality rules |
|
|
| [PLUGIN_SDK_GUIDE.md](PLUGIN_SDK_GUIDE.md) | Plugin development guide |
|
|
| [VEX_CONSENSUS_GUIDE.md](VEX_CONSENSUS_GUIDE.md) | VEX consensus and trust |
|
|
|
|
### Reference
|
|
| Document | Purpose |
|
|
|----------|---------|
|
|
| [API_CLI_REFERENCE.md](API_CLI_REFERENCE.md) | API and CLI reference hub |
|
|
| [GLOSSARY.md](GLOSSARY.md) | Platform terminology |
|
|
| [ROADMAP.md](ROADMAP.md) | Product roadmap |
|
|
|
|
---
|
|
|
|
## Module Documentation (docs/modules/)
|
|
|
|
Module dossiers contain architecture, operations, and API documentation per component.
|
|
|
|
> **Naming Convention:** Module directories use kebab-case (e.g., `binary-index`, `sbom-service`)
|
|
|
|
### Core Platform
|
|
| Module | Directory | Description |
|
|
|--------|-----------|-------------|
|
|
| Authority | [authority/](modules/authority/) | OAuth/OIDC, DPoP authentication |
|
|
| Gateway | [gateway/](modules/gateway/) | API gateway, routing |
|
|
| Router | [router/](modules/router/) | Transport-agnostic messaging |
|
|
| Platform | [platform/](modules/platform/) | Console backend aggregation |
|
|
|
|
### Data Ingestion
|
|
| Module | Directory | Description |
|
|
|--------|-----------|-------------|
|
|
| Concelier | [concelier/](modules/concelier/) | Advisory ingestion |
|
|
| Excititor | [excititor/](modules/excititor/) | VEX document ingestion |
|
|
| VexLens | [vex-lens/](modules/vex-lens/) | VEX consensus computation |
|
|
| VexHub | [vex-hub/](modules/vex-hub/) | VEX distribution hub |
|
|
| IssuerDirectory | [issuer-directory/](modules/issuer-directory/) | Issuer trust registry |
|
|
| Feedser | [feedser/](modules/feedser/) | Backport detection evidence |
|
|
|
|
### Scanning & Analysis
|
|
| Module | Directory | Description |
|
|
|--------|-----------|-------------|
|
|
| Scanner | [scanner/](modules/scanner/) | Container scanning, SBOM generation |
|
|
| BinaryIndex | [binary-index/](modules/binary-index/) | Binary fingerprinting |
|
|
| AdvisoryAI | [advisory-ai/](modules/advisory-ai/) | AI-assisted analysis |
|
|
| Symbols | [symbols/](modules/symbols/) | Symbol resolution |
|
|
| ReachGraph | [reach-graph/](modules/reach-graph/) | Reachability graphs |
|
|
|
|
### Artifacts & Evidence
|
|
| Module | Directory | Description |
|
|
|--------|-----------|-------------|
|
|
| Attestor | [attestor/](modules/attestor/) | DSSE/in-toto attestations |
|
|
| Signer | [signer/](modules/signer/) | Cryptographic signing |
|
|
| SbomService | [sbom-service/](modules/sbom-service/) | SBOM storage, lineage |
|
|
| EvidenceLocker | [evidence-locker/](modules/evidence-locker/) | Sealed evidence storage |
|
|
| ExportCenter | [export-center/](modules/export-center/) | Batch export |
|
|
| Provenance | [provenance/](modules/provenance/) | SLSA attestation |
|
|
|
|
### Policy & Risk
|
|
| Module | Directory | Description |
|
|
|--------|-----------|-------------|
|
|
| Policy | [policy/](modules/policy/) | K4 lattice policy engine |
|
|
| RiskEngine | [risk-engine/](modules/risk-engine/) | Risk scoring |
|
|
| VulnExplorer | [vuln-explorer/](modules/vuln-explorer/) | Vulnerability triage |
|
|
| Unknowns | [unknowns/](modules/unknowns/) | Unknown component tracking |
|
|
| FindingsLedger | [findings-ledger/](modules/findings-ledger/) | Findings tracking |
|
|
|
|
### Operations
|
|
| Module | Directory | Description |
|
|
|--------|-----------|-------------|
|
|
| Scheduler | [scheduler/](modules/scheduler/) | Job scheduling |
|
|
| Orchestrator | [orchestrator/](modules/orchestrator/) | Workflow orchestration |
|
|
| TaskRunner | [taskrunner/](modules/taskrunner/) | Task pack execution |
|
|
| Notify | [notify/](modules/notify/) | Notifications |
|
|
| Notifier | [notifier/](modules/notifier/) | Notifications Studio |
|
|
| PacksRegistry | [packs-registry/](modules/packs-registry/) | Task packs registry |
|
|
| TimelineIndexer | [timeline-indexer/](modules/timeline-indexer/) | Event indexing |
|
|
| Replay | [replay/](modules/replay/) | Deterministic replay |
|
|
|
|
### Integration
|
|
| Module | Directory | Description |
|
|
|--------|-----------|-------------|
|
|
| CLI | [cli/](modules/cli/) | Command-line interface |
|
|
| Zastava | [zastava/](modules/zastava/) | Registry webhooks |
|
|
| Web/UI | [ui/](modules/ui/), [web/](modules/web/) | Frontend SPA |
|
|
|
|
### Infrastructure
|
|
| Module | Directory | Description |
|
|
|--------|-----------|-------------|
|
|
| Cryptography | [cryptography/](modules/cryptography/) | Crypto profiles |
|
|
| Telemetry | [telemetry/](modules/telemetry/) | Observability |
|
|
| Graph | [graph/](modules/graph/) | Call graph structures |
|
|
| Signals | [signals/](modules/signals/) | Runtime signals |
|
|
| AirGap | [airgap/](modules/airgap/) | Air-gap support |
|
|
| AOC | [aoc/](modules/aoc/) | Append-Only Contract |
|
|
|
|
### Cross-Cutting Concepts
|
|
| Concept | Directory | Description |
|
|
|---------|-----------|-------------|
|
|
| Snapshot | [snapshot/](modules/snapshot/) | Point-in-time captures |
|
|
| Triage | [triage/](modules/triage/) | Vulnerability triage workflows |
|
|
| Provcache | [prov-cache/](modules/prov-cache/) | Provenance cache (library) |
|
|
| Benchmark | [benchmark/](modules/benchmark/) | Competitive benchmarking |
|
|
| Bench | [bench/](modules/bench/) | Performance benchmarks |
|
|
|
|
---
|
|
|
|
## Specialized Documentation Areas
|
|
|
|
### API Documentation
|
|
| Area | Path | Description |
|
|
|------|------|-------------|
|
|
| API Overview | [api/overview.md](api/overview.md) | API conventions |
|
|
| Gateway APIs | [api/gateway/](api/gateway/) | Gateway endpoints |
|
|
| Console APIs | [api/console/](api/console/) | Console endpoints |
|
|
| Signal Contracts | [api/signals/](api/signals/) | Signal contracts |
|
|
|
|
### Air-Gap Operations
|
|
| Area | Path | Description |
|
|
|------|------|-------------|
|
|
| Overview | [modules/airgap/](modules/airgap/) | Air-gap module dossier |
|
|
| Guides | [modules/airgap/guides/](modules/airgap/guides/) | Air-gap operational guides |
|
|
| Runbooks | [modules/airgap/runbooks/](modules/airgap/runbooks/) | Air-gap runbooks |
|
|
| Samples | [modules/airgap/samples/](modules/airgap/samples/) | Air-gap bundle samples |
|
|
|
|
### Database
|
|
| Area | Path | Description |
|
|
|------|------|-------------|
|
|
| Specification | [db/SPECIFICATION.md](db/SPECIFICATION.md) | Database spec |
|
|
| Migrations | [db/tasks/](db/tasks/) | Migration phases |
|
|
| Schemas | [db/schemas/](db/schemas/) | Schema definitions |
|
|
|
|
### CLI Reference
|
|
| Area | Path | Description |
|
|
|------|------|-------------|
|
|
| CLI Module | [modules/cli/](modules/cli/) | CLI module dossier |
|
|
| Quickstart | [modules/cli/guides/quickstart.md](modules/cli/guides/quickstart.md) | CLI quickstart guide |
|
|
| Command Reference | [modules/cli/guides/commands/reference.md](modules/cli/guides/commands/reference.md) | Complete CLI reference |
|
|
| Admin Commands | [modules/cli/guides/admin/admin-reference.md](modules/cli/guides/admin/admin-reference.md) | Admin commands |
|
|
| Crypto Commands | [modules/cli/guides/crypto/crypto-commands.md](modules/cli/guides/crypto/crypto-commands.md) | Crypto operations |
|
|
|
|
### End-to-End Flows
|
|
| Area | Path | Description |
|
|
|------|------|-------------|
|
|
| Flow Index | [flows/README.md](flows/README.md) | All workflow flows |
|
|
| Scan Flow | [flows/02-scan-submission-flow.md](flows/02-scan-submission-flow.md) | Scan submission |
|
|
| Policy Flow | [flows/04-policy-evaluation-flow.md](flows/04-policy-evaluation-flow.md) | Policy evaluation |
|
|
| CI/CD Flow | [flows/10-cicd-gate-flow.md](flows/10-cicd-gate-flow.md) | CI/CD gating |
|
|
|
|
### Technical Deep Dives
|
|
| Area | Path | Description |
|
|
|------|------|-------------|
|
|
| Architecture Index | [technical/architecture/](technical/architecture/) | Architecture views |
|
|
| User Flows | [technical/architecture/user-flows.md](technical/architecture/user-flows.md) | UML diagrams |
|
|
| Module Matrix | [technical/architecture/module-matrix.md](technical/architecture/module-matrix.md) | 46-module matrix |
|
|
|
|
### Contracts & ADRs
|
|
| Area | Path | Description |
|
|
|------|------|-------------|
|
|
| Contracts | [contracts/](contracts/) | Technical contracts |
|
|
| ADRs | [adr/](adr/) | Architecture decisions |
|
|
|
|
### Development Guides
|
|
| Area | Path | Description |
|
|
|------|------|-------------|
|
|
| Plugin Development | [dev/](dev/) | Plugin guides & templates |
|
|
| Scanner Engine | [dev/scanning-engine.md](dev/scanning-engine.md) | Scanner internals |
|
|
| SDK Documentation | [dev/sdks/](dev/sdks/) | Language SDKs and plugin templates |
|
|
|
|
### Testing & Quality
|
|
| Area | Path | Description |
|
|
|------|------|-------------|
|
|
| Testing Guides | [technical/testing/](technical/testing/) | Testing strategy and guides |
|
|
| Determinism | [technical/testing/DETERMINISM_DEVELOPER_GUIDE.md](technical/testing/DETERMINISM_DEVELOPER_GUIDE.md) | Determinism verification |
|
|
| Performance | [technical/testing/PERFORMANCE_BASELINES.md](technical/testing/PERFORMANCE_BASELINES.md) | Performance baselines |
|
|
| CI Quality Gates | [technical/testing/ci-quality-gates.md](technical/testing/ci-quality-gates.md) | CI quality gates |
|
|
|
|
### Migration & Upgrades
|
|
| Area | Path | Description |
|
|
|------|------|-------------|
|
|
| Migration Guides | [technical/migration/](technical/migration/) | Schema and API migrations |
|
|
| CycloneDX 1.6 to 1.7 | [technical/migration/cyclonedx-1-6-to-1-7.md](technical/migration/cyclonedx-1-6-to-1-7.md) | CycloneDX migration |
|
|
| Policy Parity | [technical/migration/policy-parity.md](technical/migration/policy-parity.md) | Policy migration |
|
|
|
|
### Benchmarks & Testing
|
|
| Area | Path | Description |
|
|
|------|------|-------------|
|
|
| Benchmarks | [benchmarks/](benchmarks/) | Performance & accuracy |
|
|
| Ground Truth | [benchmarks/ground-truth-corpus.md](benchmarks/ground-truth-corpus.md) | Test datasets |
|
|
|
|
### Risk Scoring
|
|
| Area | Path | Description |
|
|
|------|------|-------------|
|
|
| Risk Samples | [modules/risk-engine/samples/](modules/risk-engine/samples/) | Risk scoring examples |
|
|
|
|
### Operations & Deployment
|
|
| Area | Path | Description |
|
|
|------|------|-------------|
|
|
| Deployment | [operations/deployment/](operations/deployment/) | Docker, containers, version matrix |
|
|
| Runbooks | [operations/](operations/) | Operational runbooks |
|
|
| Releases | [releases/](releases/) | Release process, versioning |
|
|
|
|
### Security
|
|
| Area | Path | Description |
|
|
|------|------|-------------|
|
|
| Security Index | [security/README.md](security/README.md) | Security documentation hub |
|
|
| Threat Models | [security/](security/) | Authority, console security |
|
|
| Hardening | [SECURITY_HARDENING_GUIDE.md](SECURITY_HARDENING_GUIDE.md) | Deployment hardening |
|
|
|
|
---
|
|
|
|
## Implementation Planning
|
|
|
|
| Area | Path | Description |
|
|
|------|------|-------------|
|
|
| Sprint Files | [implplan/](implplan/) | Active implementation sprints |
|
|
| Archived Sprints | [../docs-archived/implplan/](../docs-archived/implplan/) | Completed sprints |
|
|
|
|
---
|
|
|
|
## External References
|
|
|
|
- **CLAUDE.md** (repository root) - Claude Code instructions and module table
|
|
- **src/__Tests/AGENTS.md** - Test infrastructure guidance
|
|
- **Module AGENTS.md files** - Per-module development instructions
|
|
|
|
---
|
|
|
|
## Changelog
|
|
|
|
| Date | Change |
|
|
|------|--------|
|
|
| 2026-01-06 | **Pass 5**: Reduced top-level directories from 41 to 22. Consolidated: docs/accessibility/ to modules/ui/guides/accessibility/; docs/advisories/ to modules/concelier/guides/; docs/events/ to modules/signals/events/; docs/handoff/ to operations/handoff/; docs/roadmap/ to product/roadmap/; docs/schemas/ to modules/attestor/schemas/; docs/sdks/ to dev/sdks/; docs/specs/ to modules/symbols/specs/; docs/task-packs/ to modules/packs-registry/guides/; docs/ux/ to modules/ui/guides/ux/; docs/rfcs/ to adr/; docs/architecture/ to technical/architecture/; docs/data/ to modules/replay/schemas/; docs/testing/ (26 files) to technical/testing/; docs/diagrams/ to technical/diagrams/; docs/migration/ to technical/migration/; docs/process/ to operations/process/; docs/samples/ distributed to respective module samples/ directories (airgap, platform, evidence-locker, excititor, binary-index, concelier, scanner, signals). Fixed ui/guides file to guides-overview.md. |
|
|
| 2026-01-06 | **Pass 4**: Consolidated docs/airgap/ (38 files) into modules/airgap/guides/, runbooks/, gaps/, schemas/, samples/; consolidated docs/aoc/ into modules/aoc/guides/; consolidated docs/policy/ (20 files + fixtures/schemas) into modules/policy/guides/, fixtures/, schemas/; consolidated docs/replay/ into modules/replay/guides/; consolidated docs/uncertainty/ into modules/unknowns/guides/; consolidated docs/forensics/ into modules/evidence-locker/, provenance/, timeline-indexer/ guides/; consolidated docs/ingestion/ into modules/concelier/guides/; consolidated docs/interop/ into modules/attestor/guides/; consolidated docs/observability/ (14 files + dashboards) into modules/telemetry/guides/ and dashboards/; consolidated docs/runtime/ into modules/scanner/guides/; consolidated docs/slo/ into modules/orchestrator/guides/; created modules/devportal/guides/; moved docs/evaluate/ to product/; moved docs/metrics/ to modules/telemetry/guides/ |
|
|
| 2026-01-06 | **Pass 3**: Consolidated docs/router/ into modules/router/ (archived 25 sprints to docs-archived/implplan/router/, moved transports/ and guides/); consolidated docs/reachability/ (23 files) into modules/reach-graph/guides/ and schemas/; consolidated docs/risk/ into modules/risk-engine/guides/ and samples/; consolidated docs/attestor/ and docs/provenance/ into respective modules; consolidated docs/vuln/ into modules/vuln-explorer/guides/; consolidated docs/sbom/ and docs/evidence-locker/ into respective modules; consolidated docs/marketing/ and docs/market/ into docs/product/ (strategy, competitive analysis); archived docs/artifacts/ to docs-archived/ |
|
|
| 2026-01-06 | **Pass 2**: Consolidated CLI docs into modules/cli/guides/ (removed docs/cli/); consolidated runbooks into operations/runbooks/ (removed docs/runbooks/); merged examples/ into samples/; consolidated signals/ into modules/signals/guides/; merged training/ into onboarding/ with concepts/ and faq/ subdirs; distributed guides/ into relevant module locations (risk-engine, signer, vex-lens, ui, authority); merged ci/ into cicd/; merged ops/ into operations/; moved faq/policy-faq.md to policy/faq.md |
|
|
| 2026-01-06 | Consolidated UI/Console docs into modules/ui/; consolidated deploy/deployment/install into operations/deployment/; consolidated docs/vex/ into modules/vex-lens/guides/; consolidated docs/release/ into docs/releases/; consolidated security docs (removed technical/security/) |
|
|
| 2026-01-05 | Created index; renamed module directories to kebab-case; updated CLAUDE.md with missing modules; fixed 80+ old numbered file references; consolidated docs/advisory-ai/ into docs/modules/advisory-ai/ |
|