Files
git.stella-ops.org/docs/TASKS.md
master 5ce40d2eeb feat: Initialize Zastava Webhook service with TLS and Authority authentication
- Added Program.cs to set up the web application with Serilog for logging, health check endpoints, and a placeholder admission endpoint.
- Configured Kestrel server to use TLS 1.3 and handle client certificates appropriately.
- Created StellaOps.Zastava.Webhook.csproj with necessary dependencies including Serilog and Polly.
- Documented tasks in TASKS.md for the Zastava Webhook project, outlining current work and exit criteria for each task.
2025-10-19 18:36:22 +03:00

5.1 KiB

Docs Guild Task Board (UTC 2025-10-10)

ID Status Owner(s) Depends on Description Exit Criteria
DOC7.README-INDEX DONE (2025-10-17) Docs Guild Refresh index docs (docs/README.md + root README) after architecture dossier split and Offline Kit overhaul. ToC reflects new component architecture docs; root README highlights updated doc set; Offline Kit guide linked correctly.
DOC4.AUTH-PDG DONE (2025-10-19) Docs Guild, Plugin Team PLG6.DOC Copy-edit docs/dev/31_AUTHORITY_PLUGIN_DEVELOPER_GUIDE.md, export lifecycle diagram, add LDAP RFC cross-link. PR merged with polish; Diagram committed; Slack handoff posted.
DOC1.AUTH DONE (2025-10-12) Docs Guild, Authority Core CORE5B.DOC Draft docs/11_AUTHORITY.md covering architecture, configuration, bootstrap flows. Architecture + config sections approved by Core; Samples reference latest options; Offline note added.
DOC3.Concelier-Authority DONE (2025-10-12) Docs Guild, DevEx FSR4 Polish operator/runbook sections (DOC3/DOC5) to document Concelier authority rollout, bypass logging, and enforcement checklist. DOC3/DOC5 updated with audit runbook references; enforcement deadline highlighted; Docs guild sign-off.
DOC5.Concelier-Runbook DONE (2025-10-12) Docs Guild DOC3.Concelier-Authority Produce dedicated Concelier authority audit runbook covering log fields, monitoring recommendations, and troubleshooting steps. Runbook published; linked from DOC3/DOC5; alerting guidance included.
FEEDDOCS-DOCS-05-001 DONE (2025-10-11) Docs Guild FEEDMERGE-ENGINE-04-001, FEEDMERGE-ENGINE-04-002 Publish Concelier conflict resolution runbook covering precedence workflow, merge-event auditing, and Sprint 3 metrics. docs/ops/concelier-conflict-resolution.md committed; metrics/log tables align with latest merge code; Ops alert guidance handed to Concelier team.
FEEDDOCS-DOCS-05-002 DONE (2025-10-16) Docs Guild, Concelier Ops FEEDDOCS-DOCS-05-001 Ops sign-off captured: conflict runbook circulated, alert thresholds tuned, and rollout decisions documented in change log. Ops review recorded; alert thresholds finalised using docs/ops/concelier-authority-audit-runbook.md; change-log entry linked from runbook once GHSA/NVD/OSV regression fixtures land.
DOCS-ADR-09-001 DONE (2025-10-19) Docs Guild, DevEx Establish ADR process (docs/adr/0000-template.md) and document usage guidelines. Template published; README snippet linking ADR process; announcement posted (docs/updates/2025-10-18-docs-guild.md).
DOCS-EVENTS-09-002 DONE (2025-10-19) Docs Guild, Platform Events SCANNER-EVENTS-15-201 Publish event schema catalog (docs/events/) for scanner.report.ready@1, scheduler.rescan.delta@1, attestor.logged@1. Schemas validated (Ajv CI hooked); docs/events/README summarises usage; Platform Events notified via docs/updates/2025-10-18-docs-guild.md.
DOCS-EVENTS-09-003 DONE (2025-10-19) Docs Guild DOCS-EVENTS-09-002 Add human-readable envelope field references and canonical payload samples for published events, including offline validation workflow. Tables explain common headers/payload segments; versioned sample payloads committed; README links to validation instructions and samples.
DOCS-EVENTS-09-004 DONE (2025-10-19) Docs Guild, Scanner WebService SCANNER-EVENTS-15-201 Refresh scanner event docs to mirror DSSE-backed report fields, document scanner.scan.completed, and capture canonical sample validation. Schemas updated for new payload shape; README references DSSE reuse and validation test; samples align with emitted events.
PLATFORM-EVENTS-09-401 DONE (2025-10-19) Platform Events Guild DOCS-EVENTS-09-003 Embed canonical event samples into contract/integration tests and ensure CI validates payloads against published schemas. Notify/Scheduler contract suites exercise samples; CI job validates samples with ajv-cli; Platform Events changelog notes coverage.
RUNTIME-GUILD-09-402 DONE (2025-10-19) Runtime Guild SCANNER-POLICY-09-107 Confirm Scanner WebService surfaces quietedFindingCount and progress hints to runtime consumers; document readiness checklist. Runtime verification run captures enriched payload; checklist/doc updates merged; stakeholders acknowledge availability.
DOCS-RUNTIME-17-004 TODO Docs Guild, Runtime Guild SCANNER-EMIT-17-701, ZASTAVA-OBS-17-005, DEVOPS-REL-17-002 Document build-id workflows: SBOM exposure, runtime event payloads, debug-store layout, and operator guidance for symbol retrieval. Architecture + operator docs updated with build-id sections, examples show readelf output + debuginfod usage, references linked from Offline Kit/Release guides.

Update statuses (TODO/DOING/REVIEW/DONE/BLOCKED) as progress changes. Keep guides in sync with configuration samples under etc/.

Remark (2025-10-13, DOC4.AUTH-PDG): Rate limit guide published (docs/security/rate-limits.md) and handed to plugin docs team for diagram uplift once PLG6.DIAGRAM lands.