stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 16 Releases Wiki Activity
Files
61f963fd52cd4d6bb2f86afc5a82eac04c04b00e
git.stella-ops.org/docs/implplan/SPRINT_171_notifier_i.md
master 61f963fd52
Some checks failed
Docs CI / lint-and-preview (push) Has been cancelled
Details
Implement ledger metrics for observability and add tests for Ruby packages endpoints 
- Added `LedgerMetrics` class to record write latency and total events for ledger operations.
- Created comprehensive tests for Ruby packages endpoints, covering scenarios for missing inventory, successful retrieval, and identifier handling.
- Introduced `TestSurfaceSecretsScope` for managing environment variables during tests.
- Developed `ProvenanceMongoExtensions` for attaching DSSE provenance and trust information to event documents.
- Implemented `EventProvenanceWriter` and `EventWriter` classes for managing event provenance in MongoDB.
- Established MongoDB indexes for efficient querying of events based on provenance and trust.
- Added models and JSON parsing logic for DSSE provenance and trust information.
2025-11-13 09:29:09 +02:00

6.6 KiB
Raw Blame History

Sprint 171 - Notifications & Telemetry · 170.A) Notifier.I

Active items only. Completed/historic work now resides in docs/implplan/archived/tasks.md (updated 2025-11-08).

[Notifications & Telemetry] 170.A) Notifier.I Depends on: Sprint 150.A - Orchestrator Summary: Notifications & Telemetry focus on Notifier (phase I).

Task ID State Task description Owners (Source)
NOTIFY-ATTEST-74-001 DOING (2025-11-12) Create notification templates for verification failures, expiring attestations, key revocations, and transparency anomalies. Notifications Service Guild, Attestor Service Guild (src/Notifier/StellaOps.Notifier)
NOTIFY-ATTEST-74-002 TODO Wire notifications to key rotation/revocation events and transparency witness failures. Dependencies: NOTIFY-ATTEST-74-001. Notifications Service Guild, KMS Guild (src/Notifier/StellaOps.Notifier)
NOTIFY-OAS-61-001 DOING (2025-11-12) Update notifier OAS with rules, templates, incidents, quiet hours endpoints using standard error envelope and examples. Notifications Service Guild, API Contracts Guild (src/Notifier/StellaOps.Notifier)
NOTIFY-OAS-61-002 TODO Implement /.well-known/openapi discovery endpoint with scope metadata. Dependencies: NOTIFY-OAS-61-001. Notifications Service Guild (src/Notifier/StellaOps.Notifier)
NOTIFY-OAS-62-001 TODO Provide SDK usage examples for rule CRUD, incident ack, and quiet hours; ensure SDK smoke tests. Dependencies: NOTIFY-OAS-61-002. Notifications Service Guild, SDK Generator Guild (src/Notifier/StellaOps.Notifier)
NOTIFY-OAS-63-001 TODO Emit deprecation headers and Notifications templates for retiring notifier APIs. Dependencies: NOTIFY-OAS-62-001. Notifications Service Guild, API Governance Guild (src/Notifier/StellaOps.Notifier)
NOTIFY-OBS-51-001 TODO Integrate SLO evaluator webhooks into Notifier rules (burn-rate breaches, health degradations) with templates, routing, and suppression logic. Provide sample policies and ensure imposed rule propagation. Notifications Service Guild, Observability Guild (src/Notifier/StellaOps.Notifier)
NOTIFY-OBS-55-001 TODO Publish incident mode start/stop notifications with trace/evidence quick links, retention notes, and automatic escalation paths. Include quiet-hour overrides + legal compliance logging. Dependencies: NOTIFY-OBS-51-001. Notifications Service Guild, Ops Guild (src/Notifier/StellaOps.Notifier)
NOTIFY-RISK-66-001 TODO Add notification triggers for risk severity escalation/downgrade events with profile metadata in payload. Notifications Service Guild, Risk Engine Guild (src/Notifier/StellaOps.Notifier)
NOTIFY-RISK-67-001 TODO Notify stakeholders when risk profiles are published, deprecated, or thresholds change. Dependencies: NOTIFY-RISK-66-001. Notifications Service Guild, Policy Guild (src/Notifier/StellaOps.Notifier)
NOTIFY-RISK-68-001 TODO Support per-profile routing rules, quiet hours, and dedupe for risk alerts; integrate with CLI/Console preferences. Dependencies: NOTIFY-RISK-67-001. Notifications Service Guild (src/Notifier/StellaOps.Notifier)
NOTIFY-DOC-70-001 DONE (2025-11-02) Document the split between legacy src/Notify libraries and the new src/Notifier runtime, updating architecture docs with rationale/cross-links. Notifications Service Guild (src/Notifier/StellaOps.Notifier)
NOTIFY-AIRGAP-56-002 DONE Provide Bootstrap Pack notifier configurations with deterministic secrets handling and offline validation steps. Dependencies: NOTIFY-AIRGAP-56-001. Notifications Service Guild, DevOps Guild (src/Notifier/StellaOps.Notifier)

Status notes (2025-11-12 UTC)

  • NOTIFY-ATTEST-74-001 – Template matrix (verification failure, expiring attestation, key revoke, witness anomaly) drafted; Section 7 added to docs/notifications/templates.md plus cross-references in notifications/overview.md and notifications/rules.md so rule authors and operators use the canonical tmpl-attest-* suite; baseline template exports now live under offline/notifier/templates/attestation/*.template.json; waiting on Attestor schema freeze (due 2025-11-13) before locking copy and localization tokens.
  • NOTIFY-OAS-61-001 – OpenAPI document restructure underway; shared error envelope + examples added, but quietHours and incident sections still need review with API Contracts Guild.
  • NOTIFY-OBS-51-001/NOTIFY-OBS-55-001 – Remain TODO pending Telemetry SLO webhook schema + incident toggle contract; coordinate with TELEMETRY-OBS-50/55 tasks.
  • NOTIFY-RISK-66-001 → NOTIFY-RISK-68-001 – Blocked by Policy export (POLICY-RISK-40-002) to supply profile metadata; revisit once Policy sprint publishes the feed.

Milestones & dependencies

Target date Milestone Owner(s) Notes / dependencies
2025-11-13 Finalize attestation payload schema + localization tokens Notifications Service Guild · Attestor Service Guild Required to close NOTIFY-ATTEST-74-001 and unblock NOTIFY-ATTEST-74-002 wiring work.
2025-11-15 Draft Notifier OAS published for review Notifications Service Guild · API Contracts Guild Enables follow-on .well-known endpoint and SDK tasks (NOTIFY-OAS-61-002/62-001).
2025-11-18 Incident payload contract agreed with Telemetry & Ops Notifications Service Guild · Observability Guild Needed before NOTIFY-OBS-51-001/55-001 can move to DOING.
2025-11-20 Risk profile metadata export available (POLICY-RISK-40-002) Notifications Service Guild · Policy Guild Gate for NOTIFY-RISK-66-001 → NOTIFY-RISK-68-001 implementation.

Coordination log

Date (UTC) Update Owner
2025-11-12 18:05 Marked NOTIFY-ATTEST-74-001 and NOTIFY-OAS-61-001 as DOING; documented current blockers in status notes. Notifications Service Guild
2025-11-12 19:20 Added attestation template suite (Section 7 of docs/notifications/templates.md) covering template keys/helpers/samples to support NOTIFY-ATTEST-74-001 deliverables. Notifications Service Guild
2025-11-12 19:32 Updated docs/notifications/architecture.md rendering section to reference the new tmpl-attest-* suite so architecture + template docs stay in sync. Notifications Service Guild
2025-11-12 19:45 Synced docs/notifications/overview.md and docs/notifications/rules.md with the attestation template requirements so operators and rule authors see the mandated keys. Notifications Service Guild
2025-11-12 20:05 Added baseline template exports under offline/notifier/templates/attestation/ (Slack/Email/Webhook variants) to seed Offline Kit bundles. Notifications Service Guild