- Introduced a comprehensive CI job structure for VEX Lens, including build, test, linting, and load testing. - Defined load test parameters and SLOs for VEX Lens API and Issuer Directory. - Created Grafana dashboards and alerting mechanisms for monitoring API performance and error rates. - Established offline posture guidelines for CI jobs and load testing. feat: Implement deterministic projection verification script - Added `verify_projection.sh` script for verifying the integrity of projection exports against expected hashes. - Ensured robust error handling for missing files and hash mismatches. feat: Develop Vuln Explorer CI and Ops Plan - Created CI jobs for Vuln Explorer, including build, test, and replay verification. - Implemented backup and disaster recovery strategies for MongoDB and Redis. - Established Merkle anchoring verification and automation for ledger projector. feat: Introduce EventEnvelopeHasher for hashing event envelopes - Implemented `EventEnvelopeHasher` to compute SHA256 hashes for event envelopes. feat: Add Risk Store and Dashboard components - Developed `RiskStore` for managing risk data and state. - Created `RiskDashboardComponent` for displaying risk profiles with filtering capabilities. - Implemented unit tests for `RiskStore` and `RiskDashboardComponent`. feat: Enhance Vulnerability Detail Component - Developed `VulnerabilityDetailComponent` for displaying detailed information about vulnerabilities. - Implemented error handling for missing vulnerability IDs and loading failures.
35 lines
1.2 KiB
JSON
35 lines
1.2 KiB
JSON
{
|
|
"$id": "https://stella-ops.org/schemas/zastava/observer_event.schema.json",
|
|
"$schema": "http://json-schema.org/draft-07/schema#",
|
|
"title": "Zastava Observer Event",
|
|
"type": "object",
|
|
"required": [
|
|
"tenant_id",
|
|
"project_id",
|
|
"sensor_id",
|
|
"firmware_version",
|
|
"policy_hash",
|
|
"graph_revision_id",
|
|
"event_type",
|
|
"observed_at",
|
|
"payload_hash",
|
|
"signature"
|
|
],
|
|
"properties": {
|
|
"tenant_id": { "type": "string" },
|
|
"project_id": { "type": "string" },
|
|
"sensor_id": { "type": "string" },
|
|
"firmware_version": { "type": "string" },
|
|
"policy_hash": { "type": "string" },
|
|
"graph_revision_id": { "type": "string" },
|
|
"ledger_id": { "type": "string" },
|
|
"replay_manifest": { "type": "string" },
|
|
"event_type": { "enum": ["runtime_fact", "drift", "policy_violation", "heartbeat"] },
|
|
"observed_at": { "type": "string", "format": "date-time" },
|
|
"monotonic_nanos": { "type": "integer" },
|
|
"payload": { "type": "object" },
|
|
"payload_hash": { "type": "string", "description": "sha256 over canonical JSON (JCS) of payload" },
|
|
"signature": { "type": "string", "description": "DSSE envelope reference" }
|
|
}
|
|
}
|