75c2bcafce
Some checks failed
Docs CI / lint-and-preview (push) Has been cancelled
- Implemented LdapDistinguishedNameHelper for escaping RDN and filter values. - Created AuthorityCredentialAuditContext and IAuthorityCredentialAuditContextAccessor for managing credential audit context. - Developed StandardCredentialAuditLogger with tests for success, failure, and lockout events. - Introduced AuthorityAuditSink for persisting audit records with structured logging. - Added CryptoPro related classes for certificate resolution and signing operations.
3.4 KiB
3.4 KiB
Sprint 207 - Experience & SDKs · 180.C) Graph
Active items only. Completed/historic work now resides in docs/implplan/archived_sprints_tasks.md (updated 2025-11-08).
[Experience & SDKs] 180.C) Graph Depends on: Sprint 120.A - AirGap, Sprint 130.A - Scanner, Sprint 150.A - Orchestrator, Sprint 170.A - Notifier Summary: Experience & SDKs focus on Graph).
| Task ID | State | Task description | Owners (Source) |
|---|---|---|---|
| GRAPH-API-28-001 | TODO | Define OpenAPI + JSON schema for graph search/query/paths/diff/export endpoints, including cost metadata and streaming tile schema. | Graph API Guild (src/Graph/StellaOps.Graph.Api) |
| GRAPH-API-28-002 | TODO | Implement /graph/search with multi-type index lookup, prefix/exact match, RBAC enforcement, and result ranking + caching. Dependencies: GRAPH-API-28-001. |
Graph API Guild (src/Graph/StellaOps.Graph.Api) |
| GRAPH-API-28-003 | TODO | Build query planner + cost estimator for /graph/query, stream tiles (nodes/edges/stats) progressively, enforce budgets, provide cursor tokens. Dependencies: GRAPH-API-28-002. |
Graph API Guild (src/Graph/StellaOps.Graph.Api) |
| GRAPH-API-28-004 | TODO | Implement /graph/paths with depth ≤6, constraint filters, heuristic shortest path search, and optional policy overlay rendering. Dependencies: GRAPH-API-28-003. |
Graph API Guild (src/Graph/StellaOps.Graph.Api) |
| GRAPH-API-28-005 | TODO | Implement /graph/diff streaming added/removed/changed nodes/edges between SBOM snapshots; include overlay deltas and policy/VEX/advisory metadata. Dependencies: GRAPH-API-28-004. |
Graph API Guild (src/Graph/StellaOps.Graph.Api) |
| GRAPH-API-28-006 | TODO | Consume Policy Engine overlay contract (POLICY-ENGINE-30-001..003) and surface advisory/VEX/policy overlays with caching, partial materialization, and explain trace sampling for focused nodes. Dependencies: GRAPH-API-28-005. |
Graph API Guild (src/Graph/StellaOps.Graph.Api) |
| GRAPH-API-28-007 | TODO | Implement exports (graphml, csv, ndjson, png, svg) with async job management, checksum manifests, and streaming downloads. Dependencies: GRAPH-API-28-006. |
Graph API Guild (src/Graph/StellaOps.Graph.Api) |
| GRAPH-API-28-008 | TODO | Integrate RBAC scopes (graph:read, graph:query, graph:export), tenant headers, audit logging, and rate limiting. Dependencies: GRAPH-API-28-007. |
Graph API Guild, Authority Guild (src/Graph/StellaOps.Graph.Api) |
| GRAPH-API-28-009 | TODO | Instrument metrics (graph_tile_latency_seconds, graph_query_budget_denied_total, graph_overlay_cache_hit_ratio), structured logs, and traces per query stage; publish dashboards. Dependencies: GRAPH-API-28-008. |
Graph API Guild, Observability Guild (src/Graph/StellaOps.Graph.Api) |
| GRAPH-API-28-010 | TODO | Build unit/integration/load tests with synthetic datasets (500k nodes/2M edges), fuzz query validation, verify determinism across runs. Dependencies: GRAPH-API-28-009. | Graph API Guild, QA Guild (src/Graph/StellaOps.Graph.Api) |
| GRAPH-API-28-011 | TODO | Provide deployment manifests, offline kit support, API gateway integration docs, and smoke tests. Dependencies: GRAPH-API-28-010. | Graph API Guild, DevOps Guild (src/Graph/StellaOps.Graph.Api) |
| GRAPH-INDEX-28-011 | DONE (2025-11-04) | Wire SBOM ingest runtime to emit graph snapshot artifacts, add DI factory helpers, and document Mongo/snapshot environment guidance. Dependencies: GRAPH-INDEX-28-002..006. | Graph Indexer Guild (src/Graph/StellaOps.Graph.Indexer) |