- Updated API documentation for risk endpoints to include optional caching headers and error catalog references. - Added a new error catalog JSON file to standardize error responses. - Improved explainability documentation with sample outputs for console and CLI. - Added SHA256 checksums for new sample files related to explainability. - Refined AocGuard tests to utilize a helper method for generating test JSON, improving readability and maintainability. - Updated runbook references to ensure consistency in sprint documentation. - Introduced stub implementations for MongoDB storage interfaces and options, laying groundwork for future development. - Disabled analytics in Angular CLI configuration for privacy considerations.
Risk Samples (fixtures layout)
Use this folder for frozen, deterministic fixtures once schemas and payloads arrive.
Structure (proposed):
profiles/— profile JSON (DSSE-wrapped where applicable) +SHA256SUMSfactors/— factor input payloads grouped by source (epss/, kev/, reachability/, runtime/), each withSHA256SUMSexplain/— explainability outputs paired with inputs; includeSHA256SUMSapi/— request/response examples for risk endpoints; includeSHA256SUMS
Rules:
- UTC timestamps; stable ordering of arrays/objects.
- No live calls; fixtures only.
- Record hashes via
sha256sumand keep manifests alongside samples.
Quick receipt checklist (see INGEST_CHECKLIST.md for detail):
- Normalize JSON with
jq -S . - Update
SHA256SUMSin the target folder - Verify with
sha256sum -c - Log files + hashes in the sprint Execution Log
Manifests created:
profiles/SHA256SUMSfactors/SHA256SUMSexplain/SHA256SUMSapi/SHA256SUMS