2eaf0f699b
Some checks failed
AOC Guard CI / aoc-guard (push) Has been cancelled
AOC Guard CI / aoc-verify (push) Has been cancelled
Concelier Attestation Tests / attestation-tests (push) Has been cancelled
Docs CI / lint-and-preview (push) Has been cancelled
devportal-offline / build-offline (push) Has been cancelled
Mirror Thin Bundle Sign & Verify / mirror-sign (push) Has been cancelled
- Added AirgapTimelineImpact, AirgapTimelineImpactInput, and AirgapTimelineImpactResult records for managing air-gap bundle import impacts. - Introduced EvidenceSnapshotRecord, EvidenceSnapshotLinkInput, and EvidenceSnapshotLinkResult records for linking findings to evidence snapshots. - Created IEvidenceSnapshotRepository interface for managing evidence snapshot records. - Developed StalenessValidationService to validate staleness and enforce freshness thresholds. - Implemented AirgapTimelineService for emitting timeline events related to bundle imports. - Added EvidenceSnapshotService for linking findings to evidence snapshots and verifying their validity. - Introduced AirGapOptions for configuring air-gap staleness enforcement and thresholds. - Added minimal jsPDF stub for offline/testing builds in the web application. - Created TypeScript definitions for jsPDF to enhance type safety in the web application.
Risk Samples (fixtures layout)
Use this folder for frozen, deterministic fixtures once schemas and payloads arrive.
Structure (proposed):
profiles/— profile JSON (DSSE-wrapped where applicable) +SHA256SUMSfactors/— factor input payloads grouped by source (epss/, kev/, reachability/, runtime/), each withSHA256SUMSexplain/— explainability outputs paired with inputs; includeSHA256SUMSapi/— request/response examples for risk endpoints; includeSHA256SUMS
Rules:
- UTC timestamps; stable ordering of arrays/objects.
- No live calls; fixtures only.
- Record hashes via
sha256sumand keep manifests alongside samples.
Quick receipt checklist (see INGEST_CHECKLIST.md for detail):
- Normalize JSON with
jq -S . - Update
SHA256SUMSin the target folder - Verify with
sha256sum -c - Log files + hashes in the sprint Execution Log
Manifests created:
profiles/SHA256SUMSfactors/SHA256SUMSexplain/SHA256SUMSapi/SHA256SUMS