Files
git.stella-ops.org/docs/implplan/SPRINT_172_notifier_ii.md
master 75c2bcafce
Some checks failed
Docs CI / lint-and-preview (push) Has been cancelled
Add LDAP Distinguished Name Helper and Credential Audit Context
- Implemented LdapDistinguishedNameHelper for escaping RDN and filter values.
- Created AuthorityCredentialAuditContext and IAuthorityCredentialAuditContextAccessor for managing credential audit context.
- Developed StandardCredentialAuditLogger with tests for success, failure, and lockout events.
- Introduced AuthorityAuditSink for persisting audit records with structured logging.
- Added CryptoPro related classes for certificate resolution and signing operations.
2025-11-09 12:21:38 +02:00

4.0 KiB

Sprint 172 - Notifications & Telemetry · 170.A) Notifier.II

Active items only. Completed/historic work now resides in docs/implplan/archived_sprints_tasks.md (updated 2025-11-08).

[Notifications & Telemetry] 170.A) Notifier.II Depends on: Sprint 170.A - Notifier.I Summary: Notifications & Telemetry focus on Notifier (phase II).

Task ID State Task description Owners (Source)
NOTIFY-SVC-37-001 TODO Define pack approval & policy notification contract, including OpenAPI schema, event payloads, resume token mechanics, and security guidance. Notifications Service Guild (src/Notifier/StellaOps.Notifier)
NOTIFY-SVC-37-002 TODO Implement secure ingestion endpoint, Mongo persistence (pack_approvals), idempotent writes, and audit trail for approval events. Dependencies: NOTIFY-SVC-37-001. Notifications Service Guild (src/Notifier/StellaOps.Notifier)
NOTIFY-SVC-37-003 TODO Deliver approval/policy templates, routing predicates, and channel dispatch (email + webhook) with localization + redaction. Dependencies: NOTIFY-SVC-37-002. Notifications Service Guild (src/Notifier/StellaOps.Notifier)
NOTIFY-SVC-37-004 TODO Provide acknowledgement API, Task Runner callback client, metrics for outstanding approvals, and runbook updates. Dependencies: NOTIFY-SVC-37-003. Notifications Service Guild (src/Notifier/StellaOps.Notifier)
NOTIFY-SVC-38-002 TODO Implement channel adapters (email, chat webhook, generic webhook) with retry policies, health checks, and audit logging. Dependencies: NOTIFY-SVC-37-004. Notifications Service Guild (src/Notifier/StellaOps.Notifier)
NOTIFY-SVC-38-003 TODO Deliver template service (versioned templates, localization scaffolding) and renderer with redaction allowlists, Markdown/HTML/JSON outputs, and provenance links. Dependencies: NOTIFY-SVC-38-002. Notifications Service Guild (src/Notifier/StellaOps.Notifier)
NOTIFY-SVC-38-004 TODO Expose REST + WS APIs (rules CRUD, templates preview, incidents list, ack) with audit logging, RBAC checks, and live feed stream. Dependencies: NOTIFY-SVC-38-003. Notifications Service Guild (src/Notifier/StellaOps.Notifier)
NOTIFY-SVC-39-001 TODO Implement correlation engine with pluggable key expressions/windows, throttler (token buckets), quiet hours/maintenance evaluator, and incident lifecycle. Dependencies: NOTIFY-SVC-38-004. Notifications Service Guild (src/Notifier/StellaOps.Notifier)
NOTIFY-SVC-39-002 TODO Build digest generator (queries, formatting) with schedule runner and distribution via existing channels. Dependencies: NOTIFY-SVC-39-001. Notifications Service Guild (src/Notifier/StellaOps.Notifier)
NOTIFY-SVC-39-003 TODO Provide simulation engine/API to dry-run rules against historical events, returning matched actions with explanations. Dependencies: NOTIFY-SVC-39-002. Notifications Service Guild (src/Notifier/StellaOps.Notifier)
NOTIFY-SVC-39-004 TODO Integrate quiet hour calendars and default throttles with audit logging and operator overrides. Dependencies: NOTIFY-SVC-39-003. Notifications Service Guild (src/Notifier/StellaOps.Notifier)
NOTIFY-SVC-40-001 TODO Implement escalations + on-call schedules, ack bridge, PagerDuty/OpsGenie adapters, and CLI/in-app inbox channels. Dependencies: NOTIFY-SVC-39-004. Notifications Service Guild (src/Notifier/StellaOps.Notifier)
NOTIFY-SVC-40-002 TODO Add summary storm breaker notifications, localization bundles, and localization fallback handling. Dependencies: NOTIFY-SVC-40-001. Notifications Service Guild (src/Notifier/StellaOps.Notifier)
NOTIFY-SVC-40-003 TODO Harden security: signed ack links (KMS), webhook HMAC/IP allowlists, tenant isolation fuzz tests, HTML sanitization. Dependencies: NOTIFY-SVC-40-002. Notifications Service Guild (src/Notifier/StellaOps.Notifier)
NOTIFY-SVC-40-004 TODO Finalize observability (metrics/traces for escalations, latency), dead-letter handling, chaos tests for channel outages, and retention policies. Dependencies: NOTIFY-SVC-40-003. Notifications Service Guild (src/Notifier/StellaOps.Notifier)