579236bfce
- Created StellaOps.Notify.Storage.Mongo project with initial configuration. - Added expected output files for acceptance tests (at1.txt to at10.txt). - Added fixture input files for acceptance tests (at1 to at10). - Created input and signature files for test cases fc1 to fc5.
SBOM→VEX Offline Kit (Stub)
This kit supports sprint task 6 (SBOM-VEX-GAPS-300-013).
Contents (stub):
verify.sh– chain hash stub for SBOM + DSSE + Rekor + VEXchain-hash-recipe.md– canonicalisation stepsinputs.lock– pinned tool versions and snapshotproof-manifest.json– chain hash placeholdersbom-vex-blueprint.svg– diagram placeholder
Next steps:
- Add real SBOM/VEX samples and Rekor bundle snapshot.
- Produce DSSE signatures for proof manifest and scripts.
- Include time-anchor and backpressure/error policy notes per BP1–BP10.