master
7b5bdcf4d3
- Introduced AGENTS.md, README.md, TASKS.md, and implementation_plan.md for Vexer, detailing mission, responsibilities, key components, and operational notes. - Established similar documentation structure for Vulnerability Explorer and Zastava modules, including their respective workflows, integrations, and observability notes. - Created risk scoring profiles documentation outlining the core workflow, factor model, governance, and deliverables. - Ensured all modules adhere to the Aggregation-Only Contract and maintain determinism and provenance in outputs.
StellaOps Console UI
The Console presents operator dashboards for scans, policies, VEX evidence, runtime posture, and admin workflows.
Responsibilities
- Render real-time status for ingestion, scanning, policy, and exports via SSE.
- Provide policy editor, SBOM explorer, and advisory views with accessibility compliance.
- Integrate with Authority for fresh-auth and scope enforcement.
- Support offline bundles with deterministic build outputs.
Key components
- Angular 17 workspace under
src/UI/StellaOps.UI. - Signals-based state management with
@ngrx/signalsstore. - API client generator (
core/api).
Integrations & dependencies
- Backend APIs (Scanner, Policy, Notify, Export Center, Attestor).
- Authority for DPoP-protected calls.
- Telemetry streams for observability dashboards.
Operational notes
- Auth smoke tests in ./operations/auth-smoke.md.
- Console architecture doc for layout and SSE fan-out.
- Accessibility and security guides in ../../ui/ & ../../security/.
Related resources
- ./operations/auth-smoke.md
- ./console-architecture.md
Backlog references
- DOCS-CONSOLE-23-001 … DOCS-CONSOLE-23-003 baseline (done).
- CONSOLE-OBS-52-001 tasks for observability updates.
Epic alignment
- Epic 2 – Policy Engine & Editor: deliver deterministic policy authoring, simulation, and explain UX.
- Epic 4 – Policy Studio: implement registry workspace, approvals, and promotion workflows.
- Epic 5 – SBOM Graph Explorer: surface graph navigation, overlays, and diff tools.
- Epic 6 – Vulnerability Explorer: provide triage dashboards, findings ledger views, and audit exports.
- Epic 8 – Advisory AI: embed advisory summaries, explanations, and remediation hints with citations.
- Epic 9 – Orchestrator Dashboard: expose source/job monitoring with throttling and replay controls.
- Epic 11 – Notifications Studio: deliver notifications workspace with rule/channel previews and audits.