18d87c64c5
- Implemented PolicyPackSelectorComponent for selecting policy packs. - Added unit tests for component behavior, including API success and error handling. - Introduced monaco-workers type declarations for editor workers. - Created acceptance tests for guardrails with stubs for AT1–AT10. - Established SCA Failure Catalogue Fixtures for regression testing. - Developed plugin determinism harness with stubs for PL1–PL10. - Added scripts for evidence upload and verification processes.
104 lines
3.2 KiB
JSON
104 lines
3.2 KiB
JSON
{
|
|
"schemaVersion": "stellaops.pack.offline-bundle.v1",
|
|
"pack": {
|
|
"name": "demo-pack",
|
|
"version": "1.0.0",
|
|
"bundle": "packs/demo-pack.tgz",
|
|
"digest": "sha256:c0ffee0000000000000000000000000000000000000000000000000000000000",
|
|
"registry": "registry.local/demo/demo-pack:1.0.0",
|
|
"sbom": "sbom.json"
|
|
},
|
|
"plan": {
|
|
"hashAlgorithm": "sha256",
|
|
"hash": "sha256:ca3d163bab055381827226140568f3bef7eaac187cebd76878e0b63e9e442356",
|
|
"canonicalPlanPath": "canonical-plan.json",
|
|
"inputsLock": "inputs.lock",
|
|
"rngSeed": "seed-1111",
|
|
"timestampSource": "utc-iso8601"
|
|
},
|
|
"evidence": {
|
|
"attestation": "attestation.dsse",
|
|
"approvalsLedger": "approvals-ledger.dsse",
|
|
"timeline": "timeline.ndjson"
|
|
},
|
|
"security": {
|
|
"sandbox": {
|
|
"mode": "sealed",
|
|
"egressAllowlist": [],
|
|
"cpuLimitMillicores": 250,
|
|
"memoryLimitMiB": 256,
|
|
"quotaSeconds": 120
|
|
},
|
|
"revocations": "revocations.json",
|
|
"signatures": {
|
|
"bundleDsse": "bundle.dsse",
|
|
"attestationDsse": "attestation.dsse.sig",
|
|
"registryCertChain": "certs.pem"
|
|
},
|
|
"secretsRedactionPolicy": "redaction-policy.json"
|
|
},
|
|
"hashes": [
|
|
{
|
|
"path": "canonical-plan.json",
|
|
"algorithm": "sha256",
|
|
"digest": "sha256:ca3d163bab055381827226140568f3bef7eaac187cebd76878e0b63e9e442356"
|
|
},
|
|
{
|
|
"path": "inputs.lock",
|
|
"algorithm": "sha256",
|
|
"digest": "sha256:ca3d163bab055381827226140568f3bef7eaac187cebd76878e0b63e9e442356"
|
|
},
|
|
{
|
|
"path": "sbom.json",
|
|
"algorithm": "sha256",
|
|
"digest": "sha256:ca3d163bab055381827226140568f3bef7eaac187cebd76878e0b63e9e442356"
|
|
},
|
|
{
|
|
"path": "attestation.dsse",
|
|
"algorithm": "sha256",
|
|
"digest": "sha256:ca3d163bab055381827226140568f3bef7eaac187cebd76878e0b63e9e442356"
|
|
},
|
|
{
|
|
"path": "approvals-ledger.dsse",
|
|
"algorithm": "sha256",
|
|
"digest": "sha256:2018f79642928cedd3b3716637b075d4d8374cc8997f58e00dd4fbf5addcea56"
|
|
},
|
|
{
|
|
"path": "revocations.json",
|
|
"algorithm": "sha256",
|
|
"digest": "sha256:ca3d163bab055381827226140568f3bef7eaac187cebd76878e0b63e9e442356"
|
|
},
|
|
{
|
|
"path": "bundle.dsse",
|
|
"algorithm": "sha256",
|
|
"digest": "sha256:ca3d163bab055381827226140568f3bef7eaac187cebd76878e0b63e9e442356"
|
|
},
|
|
{
|
|
"path": "attestation.dsse.sig",
|
|
"algorithm": "sha256",
|
|
"digest": "sha256:ca3d163bab055381827226140568f3bef7eaac187cebd76878e0b63e9e442356"
|
|
},
|
|
{
|
|
"path": "redaction-policy.json",
|
|
"algorithm": "sha256",
|
|
"digest": "sha256:ca3d163bab055381827226140568f3bef7eaac187cebd76878e0b63e9e442356"
|
|
},
|
|
{
|
|
"path": "packs/demo-pack.tgz",
|
|
"algorithm": "sha256",
|
|
"digest": "sha256:ca3d163bab055381827226140568f3bef7eaac187cebd76878e0b63e9e442356"
|
|
}
|
|
],
|
|
"slo": {
|
|
"runP95Seconds": 300,
|
|
"approvalP95Seconds": 900,
|
|
"maxQueueDepth": 1000,
|
|
"alertRules": "alerts.yaml"
|
|
},
|
|
"tenant": "demo-tenant",
|
|
"environment": "dev",
|
|
"created": "2025-12-05T00:00:00Z",
|
|
"expires": "2026-01-05T00:00:00Z",
|
|
"verifyScriptVersion": "local-fixture",
|
|
"hash": "sha256:ca3d163bab055381827226140568f3bef7eaac187cebd76878e0b63e9e442356"
|
|
} |