stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 1 Releases Wiki Activity
Files
791e12baab550a97c05723b514496a57a6619e44
git.stella-ops.org/EXECPLAN.md
master 791e12baab
Some checks failed
Docs CI / lint-and-preview (push) Has been cancelled
Details
Add tests and implement StubBearer authentication for Signer endpoints 
- Created SignerEndpointsTests to validate the SignDsse and VerifyReferrers endpoints.
- Implemented StubBearerAuthenticationDefaults and StubBearerAuthenticationHandler for token-based authentication.
- Developed ConcelierExporterClient for managing Trivy DB settings and export operations.
- Added TrivyDbSettingsPageComponent for UI interactions with Trivy DB settings, including form handling and export triggering.
- Implemented styles and HTML structure for Trivy DB settings page.
- Created NotifySmokeCheck tool for validating Redis event streams and Notify deliveries.
2025-10-21 09:37:07 +03:00

121 KiB
Raw Blame History

Execution Tree for Open Backlog

Generated from SPRINTS.md and module TASKS.md files on 2025-10-19. Waves cluster tasks by dependency depth; Wave 0 has no unresolved blockers and later waves depend on earlier ones.

Wave Instructions

Wave 0

  • Team Attestor Guild: read EXECPLAN.md Wave 0 and SPRINTS.md rows for src/StellaOps.Attestor/TASKS.md. Focus on ATTESTOR-API-11-201 (TODO), ATTESTOR-VERIFY-11-202 (TODO), ATTESTOR-OBS-11-203 (TODO). Confirm prerequisites (none) before starting and report status in module TASKS.md.
  • Team Authority Core & Security Guild: read EXECPLAN.md Wave 0 and SPRINTS.md rows for src/StellaOps.Authority/TASKS.md. Focus on AUTH-DPOP-11-001 (DONE 2025-10-20), AUTH-MTLS-11-002 (DOING 2025-10-19). Confirm prerequisites (none) before starting and report status in module TASKS.md.
  • Team Authority Core & Storage Guild: read EXECPLAN.md Wave 0 and SPRINTS.md rows for src/StellaOps.Authority/TASKS.md. Focus on AUTHSTORAGE-MONGO-08-001 (DONE 2025-10-19). Confirm prerequisites (none) before starting and report status in module TASKS.md.
  • Team DevEx/CLI: read EXECPLAN.md Wave 0 and SPRINTS.md rows for src/StellaOps.Cli/TASKS.md. Focus on EXCITITOR-CLI-01-002 (TODO), CLI-RUNTIME-13-005 (TODO). Confirm prerequisites (external: EXCITITOR-CLI-01-001, EXCITITOR-EXPORT-01-001) before starting and report status in module TASKS.md.
  • Team DevOps Guild: read EXECPLAN.md Wave 0 and SPRINTS.md rows for ops/devops/TASKS.md. Focus on DEVOPS-SEC-10-301 (DONE 2025-10-20); Wave 0A prerequisites reconfirmed so remediation work may proceed. Keep module TASKS.md/Sprints in sync as patches land.
  • Team Diff Guild: read EXECPLAN.md Wave 0 and SPRINTS.md rows for src/StellaOps.Scanner.Diff/TASKS.md. Focus on SCANNER-DIFF-10-501 (TODO), SCANNER-DIFF-10-502 (TODO), SCANNER-DIFF-10-503 (TODO). Confirm prerequisites (none) before starting and report status in module TASKS.md.
  • Team Docs Guild, Plugin Team: read EXECPLAN.md Wave 0 and SPRINTS.md rows for docs/TASKS.md. Focus on DOC4.AUTH-PDG (REVIEW). Confirm prerequisites (none) before starting and report status in module TASKS.md.
  • Team Docs/CLI: read EXECPLAN.md Wave 0 and SPRINTS.md rows for src/StellaOps.Cli/TASKS.md. Focus on EXCITITOR-CLI-01-003 (TODO). Confirm prerequisites (external: EXCITITOR-CLI-01-001) before starting and report status in module TASKS.md.
  • Team Emit Guild: read EXECPLAN.md Wave 0 and SPRINTS.md rows for src/StellaOps.Scanner.Emit/TASKS.md. Focus on SCANNER-EMIT-10-601 (TODO), SCANNER-EMIT-10-602 (TODO), SCANNER-EMIT-10-603 (TODO), SCANNER-EMIT-10-604 (TODO), SCANNER-EMIT-10-605 (TODO), SCANNER-EMIT-10-606 (TODO). Confirm prerequisites (none) before starting and report status in module TASKS.md.
  • Team EntryTrace Guild: read EXECPLAN.md Wave 0 and SPRINTS.md rows for src/StellaOps.Scanner.EntryTrace/TASKS.md. Focus on SCANNER-ENTRYTRACE-10-401 (TODO), SCANNER-ENTRYTRACE-10-402 (TODO), SCANNER-ENTRYTRACE-10-403 (TODO), SCANNER-ENTRYTRACE-10-404 (TODO), SCANNER-ENTRYTRACE-10-405 (TODO), SCANNER-ENTRYTRACE-10-406 (TODO), SCANNER-ENTRYTRACE-10-407 (TODO). Confirm prerequisites (none) before starting and report status in module TASKS.md.
  • Team Language Analyzer Guild: read EXECPLAN.md Wave 0 and SPRINTS.md rows for src/StellaOps.Scanner.Analyzers.Lang/SPRINTS_LANG_IMPLEMENTATION_PLAN.md, src/StellaOps.Scanner.Analyzers.Lang/TASKS.md. Focus on SCANNER-ANALYZERS-LANG-10-301 (TODO), SCANNER-ANALYZERS-LANG-10-307 (TODO), SCANNER-ANALYZERS-LANG-10-308 (TODO), SCANNER-ANALYZERS-LANG-10-302..309 (TODO). Confirm prerequisites (none) before starting and report status in module TASKS.md.
  • Team Notify Models Guild: read EXECPLAN.md Wave 0 and SPRINTS.md rows for src/StellaOps.Notify.Models/TASKS.md. Focus on NOTIFY-MODELS-15-101 (TODO), NOTIFY-MODELS-15-102 (TODO), NOTIFY-MODELS-15-103 (TODO). Confirm prerequisites (none) before starting and report status in module TASKS.md.
  • Team Notify Storage Guild: read EXECPLAN.md Wave 0 and SPRINTS.md rows for src/StellaOps.Notify.Storage.Mongo/TASKS.md. Focus on NOTIFY-STORAGE-15-201 (TODO), NOTIFY-STORAGE-15-202 (TODO), NOTIFY-STORAGE-15-203 (TODO). Confirm prerequisites (none) before starting and report status in module TASKS.md.
  • Team Notify WebService Guild: read EXECPLAN.md Wave 0 and SPRINTS.md rows for src/StellaOps.Notify.WebService/TASKS.md. Focus on NOTIFY-WEB-15-101 (TODO), NOTIFY-WEB-15-102 (TODO). Confirm prerequisites (none) before starting and report status in module TASKS.md.
  • Team Platform Events Guild: read EXECPLAN.md Wave 0 and SPRINTS.md rows for docs/TASKS.md. Focus on PLATFORM-EVENTS-09-401 (TODO). Confirm prerequisites (external: DOCS-EVENTS-09-003) before starting and report status in module TASKS.md.
  • Team Plugin Platform Guild: read EXECPLAN.md Wave 0 and SPRINTS.md rows for src/StellaOps.Plugin/TASKS.md. Focus on PLUGIN-DI-08-002.COORD (DONE 2025-10-20), PLUGIN-DI-08-002 (DONE 2025-10-20), PLUGIN-DI-08-003 (DONE 2025-10-20), PLUGIN-DI-08-004 (DONE 2025-10-20), and PLUGIN-DI-08-005 (DONE 2025-10-20). Confirm prerequisites (PLUGIN-DI-08-001) before starting and report status in module TASKS.md.
  • Team Plugin Platform Guild, Authority Core: read EXECPLAN.md Wave 0 and SPRINTS.md rows for src/StellaOps.Plugin/TASKS.md. Coordination session for PLUGIN-DI-08-002 implementation completed on 2025-10-20 15:00–16:05 UTC and scoped-service changes have shipped with regression coverage; subsequent tasks (PLUGIN-DI-08-003/004/005) remain green.
  • Team Policy Guild: Sprint 9 core tasks (POLICY-CORE-09-004/005/006) closed on 2025-10-19; ensure downstream consumers refresh against the published scoring config + quiet/unknown outputs and raise follow-up tasks if additional polish is required.
  • Team Runtime Guild: read EXECPLAN.md Wave 0 and SPRINTS.md rows for docs/TASKS.md. Focus on RUNTIME-GUILD-09-402 (TODO). Confirm prerequisites (external: SCANNER-POLICY-09-107) before starting and report status in module TASKS.md.
  • Team Scanner WebService Guild: read EXECPLAN.md Wave 0 and SPRINTS.md rows for src/StellaOps.Scanner.WebService/TASKS.md. Focus on SCANNER-EVENTS-15-201 (DONE 2025-10-20). Confirm prerequisites (none) before starting and report status in module TASKS.md.
  • Team Scanner WebService Guild: read EXECPLAN.md Wave 2 and SPRINTS.md rows for src/StellaOps.Scanner.WebService/TASKS.md. Focus on SCANNER-EVENTS-16-301 (BLOCKED 2025-10-20). Wait for NOTIFY-QUEUE-15-401 before attempting integration.
  • Team Scheduler ImpactIndex Guild: read EXECPLAN.md Wave 0 and SPRINTS.md rows for src/StellaOps.Scheduler.ImpactIndex/TASKS.md. Focus on SCHED-IMPACT-16-300 (DONE 2025-10-20) and ensure the temporary stub removal note stays tracked. Confirm prerequisites (external: SAMPLES-10-001) before starting and report status in module TASKS.md.
  • Team Scheduler Models Guild: read EXECPLAN.md Wave 0 and SPRINTS.md rows for src/StellaOps.Scheduler.Models/TASKS.md. SCHED-MODELS-16-103 completed (2025-10-20); ensure downstream teams consume the migration helpers and log upgrade warnings.
  • Team Scheduler Queue Guild: read EXECPLAN.md Wave 0 and SPRINTS.md rows for src/StellaOps.Scheduler.Queue/TASKS.md. SCHED-QUEUE-16-401 completed (2025-10-20); proceed with Wave 1 queue enhancements.
  • Team Scheduler Storage Guild: read EXECPLAN.md Wave 0 and SPRINTS.md rows for src/StellaOps.Scheduler.Storage.Mongo/TASKS.md. Focus on SCHED-STORAGE-16-201 (TODO). Confirm prerequisites (external: SCHED-MODELS-16-101) before starting and report status in module TASKS.md.
  • Team Scheduler WebService Guild: read EXECPLAN.md Wave 0 and SPRINTS.md rows for src/StellaOps.Scheduler.WebService/TASKS.md. Focus on SCHED-WEB-16-101 (TODO). Confirm prerequisites (external: SCHED-MODELS-16-101) before starting and report status in module TASKS.md.
  • Team Signer Guild: read EXECPLAN.md Wave 0 and SPRINTS.md rows for src/StellaOps.Signer/TASKS.md. Focus on SIGNER-API-11-101 (DONE 2025-10-21), SIGNER-REF-11-102 (DONE 2025-10-21), SIGNER-QUOTA-11-103 (DONE 2025-10-21). Confirm prerequisites (none) before starting and report status in module TASKS.md.
  • Team TBD: read EXECPLAN.md Wave 0 and SPRINTS.md rows for src/StellaOps.Scanner.Analyzers.Lang.Node/TASKS.md. Focus on SCANNER-ANALYZERS-LANG-10-302C (TODO). Confirm prerequisites (external: SCANNER-ANALYZERS-LANG-10-302B) before starting and report status in module TASKS.md.
  • Team Team Connector Resumption – CERT/RedHat: read EXECPLAN.md Wave 0 and SPRINTS.md rows for src/StellaOps.Concelier.Connector.Distro.RedHat/TASKS.md. Focus on FEEDCONN-REDHAT-02-001 (DOING). Confirm prerequisites (none) before starting and report status in module TASKS.md.
  • Team Team Excititor Attestation: read EXECPLAN.md Wave 0 and SPRINTS.md rows for src/StellaOps.Excititor.Attestation/TASKS.md. Focus on EXCITITOR-ATTEST-01-003 (TODO). Confirm prerequisites (external: EXCITITOR-ATTEST-01-002) before starting and report status in module TASKS.md.
  • Team Team Excititor Connectors – Cisco: read EXECPLAN.md Wave 0 and SPRINTS.md rows for src/StellaOps.Excititor.Connectors.Cisco.CSAF/TASKS.md. Focus on EXCITITOR-CONN-CISCO-01-003 (TODO). Confirm prerequisites (external: EXCITITOR-CONN-CISCO-01-002, EXCITITOR-POLICY-01-001) before starting and report status in module TASKS.md.
  • Team Team Excititor Connectors – MSRC: read EXECPLAN.md Wave 0 and SPRINTS.md rows for src/StellaOps.Excititor.Connectors.MSRC.CSAF/TASKS.md. Focus on EXCITITOR-CONN-MS-01-002 (TODO). Confirm prerequisites (external: EXCITITOR-CONN-MS-01-001, EXCITITOR-STORAGE-01-003) before starting and report status in module TASKS.md.
  • Team Team Excititor Connectors – Oracle: read EXECPLAN.md Wave 0 and SPRINTS.md rows for src/StellaOps.Excititor.Connectors.Oracle.CSAF/TASKS.md. Focus on EXCITITOR-CONN-ORACLE-01-001 (DOING). Confirm prerequisites (external: EXCITITOR-CONN-ABS-01-001) before starting and report status in module TASKS.md.
  • Team Team Excititor Connectors – SUSE: read EXECPLAN.md Wave 0 and SPRINTS.md rows for src/StellaOps.Excititor.Connectors.SUSE.RancherVEXHub/TASKS.md. Focus on EXCITITOR-CONN-SUSE-01-002 (TODO). Confirm prerequisites (external: EXCITITOR-CONN-SUSE-01-001, EXCITITOR-STORAGE-01-003) before starting and report status in module TASKS.md.
  • Team Team Excititor Connectors – Ubuntu: read EXECPLAN.md Wave 0 and SPRINTS.md rows for src/StellaOps.Excititor.Connectors.Ubuntu.CSAF/TASKS.md. Focus on EXCITITOR-CONN-UBUNTU-01-002 (TODO). Confirm prerequisites (external: EXCITITOR-CONN-UBUNTU-01-001, EXCITITOR-STORAGE-01-003) before starting and report status in module TASKS.md.
  • Team Team Excititor Export: read EXECPLAN.md Wave 0 and SPRINTS.md rows for src/StellaOps.Excititor.Export/TASKS.md. Focus on EXCITITOR-EXPORT-01-005 (TODO). Confirm prerequisites (external: EXCITITOR-CORE-02-001, EXCITITOR-EXPORT-01-004) before starting and report status in module TASKS.md.
  • Team Team Excititor Formats: read EXECPLAN.md Wave 0 and SPRINTS.md rows for src/StellaOps.Excititor.Formats.CSAF/TASKS.md, src/StellaOps.Excititor.Formats.CycloneDX/TASKS.md, src/StellaOps.Excititor.Formats.OpenVEX/TASKS.md. Focus on EXCITITOR-FMT-CSAF-01-002 (TODO), EXCITITOR-FMT-CSAF-01-003 (TODO), EXCITITOR-FMT-CYCLONE-01-002 (TODO), EXCITITOR-FMT-CYCLONE-01-003 (TODO), EXCITITOR-FMT-OPENVEX-01-002 (TODO), EXCITITOR-FMT-OPENVEX-01-003 (TODO). Confirm prerequisites (external: EXCITITOR-EXPORT-01-001, EXCITITOR-FMT-CSAF-01-001, EXCITITOR-FMT-CYCLONE-01-001, EXCITITOR-FMT-OPENVEX-01-001, EXCITITOR-POLICY-01-001) before starting and report status in module TASKS.md.
  • Team Team Excititor Storage: read EXECPLAN.md Wave 0 and SPRINTS.md rows for src/StellaOps.Excititor.Storage.Mongo/TASKS.md. Focus on EXCITITOR-STORAGE-MONGO-08-001 (DONE 2025-10-19), EXCITITOR-STORAGE-03-001 (TODO). Confirm prerequisites (external: EXCITITOR-STORAGE-01-003, EXCITITOR-STORAGE-02-001) before starting and report status in module TASKS.md.
  • Team Team Excititor WebService: read EXECPLAN.md Wave 0 and SPRINTS.md rows for src/StellaOps.Excititor.WebService/TASKS.md. Focus on EXCITITOR-WEB-01-002 (DONE 2025-10-20), EXCITITOR-WEB-01-003 (TODO), EXCITITOR-WEB-01-004 (DONE 2025-10-20). Confirm prerequisites (external: EXCITITOR-ATTEST-01-001, EXCITITOR-EXPORT-01-001, EXCITITOR-WEB-01-001) before starting and report status in module TASKS.md.
  • Team Team Excititor Worker: read EXECPLAN.md Wave 0 and SPRINTS.md rows for src/StellaOps.Excititor.Worker/TASKS.md. Focus on EXCITITOR-WORKER-01-004 (DONE 2025-10-21); EXCITITOR-WORKER-01-002 (DONE 2025-10-21) and EXCITITOR-WORKER-02-001 (DONE 2025-10-21) recorded. Confirm prerequisites (external: EXCITITOR-CORE-02-001, EXCITITOR-WORKER-01-001) before starting and report status in module TASKS.md.
  • Team Team Merge & QA Enforcement: read EXECPLAN.md Wave 0 and SPRINTS.md rows for src/StellaOps.Concelier.Merge/TASKS.md. Focus on FEEDMERGE-COORD-02-900 (DOING). Confirm prerequisites (none) before starting and report status in module TASKS.md. 2025-10-19: Coordination refreshed; connector owners notified and TASKS.md entries updated. 2025-10-20: Coordination matrix + rollout dashboard refreshed with connector due dates (Cccs/Cisco 2025-10-21, CertBund 2025-10-22, ICS-CISA 2025-10-23, KISA 2025-10-24) and escalation plan logged.
  • Team Team Normalization & Storage Backbone: read EXECPLAN.md Wave 0 and SPRINTS.md rows for src/StellaOps.Concelier.Storage.Mongo/TASKS.md. Focus on FEEDSTORAGE-MONGO-08-001 (DONE 2025-10-19). Confirm prerequisites (none) before starting and report status in module TASKS.md.
  • Team Team WebService & Authority: read EXECPLAN.md Wave 0 and SPRINTS.md rows for src/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/TASKS.md, src/StellaOps.Concelier.WebService/TASKS.md. Focus on SEC2.PLG (DOING), SEC3.PLG (DOING), SEC5.PLG (DOING), PLG4-6.CAPABILITIES (BLOCKED), PLG6.DIAGRAM (TODO), PLG7.RFC (REVIEW), FEEDWEB-DOCS-01-001 (DOING), FEEDWEB-OPS-01-006 (TODO), FEEDWEB-OPS-01-007 (BLOCKED). Confirm prerequisites (none) before starting and report status in module TASKS.md.
  • Team Tools Guild, BE-Conn-MSRC: read EXECPLAN.md Wave 0 and SPRINTS.md rows for src/StellaOps.Concelier.Connector.Common/TASKS.md. Focus on FEEDCONN-SHARED-STATE-003 (**TODO). Confirm prerequisites (none) before starting and report status in module TASKS.md.
  • Team UX Specialist, Angular Eng: read EXECPLAN.md Wave 0 and SPRINTS.md rows for src/StellaOps.Web/TASKS.md. Focus on WEB1.TRIVY-SETTINGS (DONE 2025-10-21) and WEB1.TRIVY-SETTINGS-TESTS (BLOCKED 2025-10-21). Confirm prerequisites (none) before starting and report status in module TASKS.md.
  • Team Zastava Core Guild: read EXECPLAN.md Wave 0 and SPRINTS.md rows for src/StellaOps.Zastava.Core/TASKS.md. Focus on ZASTAVA-CORE-12-201 (TODO), ZASTAVA-CORE-12-202 (TODO), ZASTAVA-CORE-12-203 (TODO), ZASTAVA-OPS-12-204 (TODO). Confirm prerequisites (none) before starting and report status in module TASKS.md.
  • Team Zastava Webhook Guild: read EXECPLAN.md Wave 0 and SPRINTS.md rows for src/StellaOps.Zastava.Webhook/TASKS.md. Focus on ZASTAVA-WEBHOOK-12-101 (TODO), ZASTAVA-WEBHOOK-12-102 (TODO), ZASTAVA-WEBHOOK-12-103 (TODO). Confirm prerequisites (none) before starting and report status in module TASKS.md.

Wave 1

  • Team Bench Guild, Language Analyzer Guild: read EXECPLAN.md Wave 1 and SPRINTS.md rows for bench/TASKS.md. Focus on BENCH-SCANNER-10-002 (TODO). Confirm prerequisites (internal: SCANNER-ANALYZERS-LANG-10-301 (Wave 0)) before starting and report status in module TASKS.md.
  • Team DevEx/CLI, QA Guild: read EXECPLAN.md Wave 1 and SPRINTS.md rows for src/StellaOps.Cli/TASKS.md. Focus on CLI-RUNTIME-13-009 (TODO). Confirm prerequisites (internal: CLI-RUNTIME-13-005 (Wave 0)) before starting and report status in module TASKS.md.
  • Team DevOps Guild: read EXECPLAN.md Wave 1 and SPRINTS.md rows for ops/devops/TASKS.md. Focus on DEVOPS-REL-14-001 (TODO). Confirm prerequisites (internal: ATTESTOR-API-11-201 (Wave 0), SIGNER-API-11-101 (Wave 0)) before starting and report status in module TASKS.md.
  • Team DevOps Guild, Scanner WebService Guild: read EXECPLAN.md Wave 1 and SPRINTS.md rows for ops/devops/TASKS.md. Focus on DEVOPS-SCANNER-09-204 (TODO). Confirm prerequisites (internal: SCANNER-EVENTS-15-201 (Wave 0)) before starting and report status in module TASKS.md.
  • Team Emit Guild: read EXECPLAN.md Wave 1 and SPRINTS.md rows for src/StellaOps.Scanner.Emit/TASKS.md. Focus on SCANNER-EMIT-10-607 (TODO), SCANNER-EMIT-17-701 (TODO). Confirm prerequisites (internal: POLICY-CORE-09-005 (Wave 0), SCANNER-EMIT-10-602 (Wave 0), SCANNER-EMIT-10-604 (Wave 0)) before starting and report status in module TASKS.md.
  • Team Language Analyzer Guild: read EXECPLAN.md Wave 1 and SPRINTS.md rows for src/StellaOps.Scanner.Analyzers.Lang/TASKS.md. Focus on SCANNER-ANALYZERS-LANG-10-309 (DOING), SCANNER-ANALYZERS-LANG-10-306 (TODO), SCANNER-ANALYZERS-LANG-10-302 (DOING), SCANNER-ANALYZERS-LANG-10-304 (TODO), SCANNER-ANALYZERS-LANG-10-305 (TODO), SCANNER-ANALYZERS-LANG-10-303 (TODO). Confirm prerequisites (internal: SCANNER-ANALYZERS-LANG-10-301 (Wave 0), SCANNER-ANALYZERS-LANG-10-307 (Wave 0)) before starting and report status in module TASKS.md.
  • Team Licensing Guild: read EXECPLAN.md Wave 1 and SPRINTS.md rows for ops/licensing/TASKS.md. Focus on DEVOPS-LIC-14-004 (TODO). Confirm prerequisites (internal: AUTH-MTLS-11-002 (Wave 0)) before starting and report status in module TASKS.md.
  • Team Notify Engine Guild: read EXECPLAN.md Wave 1 and SPRINTS.md rows for src/StellaOps.Notify.Engine/TASKS.md. Focus on NOTIFY-ENGINE-15-301 (TODO). Confirm prerequisites (internal: NOTIFY-MODELS-15-101 (Wave 0)) before starting and report status in module TASKS.md.
  • Team Notify Queue Guild: read EXECPLAN.md Wave 1 and SPRINTS.md rows for src/StellaOps.Notify.Queue/TASKS.md. Focus on NOTIFY-QUEUE-15-401 (TODO). Confirm prerequisites (internal: NOTIFY-MODELS-15-101 (Wave 0)) before starting and report status in module TASKS.md.
  • Team Notify WebService Guild: read EXECPLAN.md Wave 1 and SPRINTS.md rows for src/StellaOps.Notify.WebService/TASKS.md. Focus on NOTIFY-WEB-15-103 (DONE). Confirm prerequisites (internal: NOTIFY-WEB-15-102 (Wave 0)) before starting and report status in module TASKS.md.
  • Team Scanner WebService Guild: read EXECPLAN.md Wave 1 and SPRINTS.md rows for src/StellaOps.Scanner.WebService/TASKS.md. SCANNER-RUNTIME-12-301 closed (2025-10-20); coordinate with Zastava observer guild on batch fixtures and advance to SCANNER-RUNTIME-12-302.
  • Team Scheduler ImpactIndex Guild: read EXECPLAN.md Wave 1 and SPRINTS.md rows for src/StellaOps.Scheduler.ImpactIndex/TASKS.md. Focus on SCHED-IMPACT-16-301 (TODO). Confirm prerequisites (internal: SCANNER-EMIT-10-605 (Wave 0)) before starting and report status in module TASKS.md.
  • Team Scheduler Queue Guild: read EXECPLAN.md Wave 1 and SPRINTS.md rows for src/StellaOps.Scheduler.Queue/TASKS.md. SCHED-QUEUE-16-402 completed (2025-10-20); next focus is SCHED-QUEUE-16-403.
  • Team Scheduler Storage Guild: read EXECPLAN.md Wave 1 and SPRINTS.md rows for src/StellaOps.Scheduler.Storage.Mongo/TASKS.md. Focus on SCHED-STORAGE-16-203 (TODO), SCHED-STORAGE-16-202 (TODO). Confirm prerequisites (internal: SCHED-STORAGE-16-201 (Wave 0)) before starting and report status in module TASKS.md.
  • Team Scheduler WebService Guild: read EXECPLAN.md Wave 1 and SPRINTS.md rows for src/StellaOps.Scheduler.WebService/TASKS.md. Focus on SCHED-WEB-16-104 (TODO), SCHED-WEB-16-102 (TODO). Confirm prerequisites (internal: SCHED-QUEUE-16-401 (Wave 0), SCHED-STORAGE-16-201 (Wave 0), SCHED-WEB-16-101 (Wave 0)) before starting and report status in module TASKS.md.
  • Team Scheduler Worker Guild: read EXECPLAN.md Wave 1 and SPRINTS.md rows for src/StellaOps.Scheduler.Worker/TASKS.md. Focus on SCHED-WORKER-16-201 (TODO). Confirm prerequisites (internal: SCHED-QUEUE-16-401 (Wave 0)) before starting and report status in module TASKS.md.
  • Team TBD: read EXECPLAN.md Wave 1 and SPRINTS.md rows for src/StellaOps.Scanner.Analyzers.Lang.DotNet/TASKS.md, src/StellaOps.Scanner.Analyzers.Lang.Go/TASKS.md, src/StellaOps.Scanner.Analyzers.Lang.Node/TASKS.md, src/StellaOps.Scanner.Analyzers.Lang.Python/TASKS.md, src/StellaOps.Scanner.Analyzers.Lang.Rust/TASKS.md. Focus on SCANNER-ANALYZERS-LANG-10-305A (TODO), SCANNER-ANALYZERS-LANG-10-304A (TODO), SCANNER-ANALYZERS-LANG-10-307N (TODO), SCANNER-ANALYZERS-LANG-10-303A (TODO), SCANNER-ANALYZERS-LANG-10-306A (TODO). Confirm prerequisites (internal: SCANNER-ANALYZERS-LANG-10-302C (Wave 0), SCANNER-ANALYZERS-LANG-10-307 (Wave 0)) before starting and report status in module TASKS.md.
  • Team Team Excititor Connectors – MSRC: read EXECPLAN.md Wave 1 and SPRINTS.md rows for src/StellaOps.Excititor.Connectors.MSRC.CSAF/TASKS.md. Focus on EXCITITOR-CONN-MS-01-003 (TODO). Confirm prerequisites (internal: EXCITITOR-CONN-MS-01-002 (Wave 0); external: EXCITITOR-POLICY-01-001) before starting and report status in module TASKS.md.
  • Team Team Excititor Connectors – Oracle: read EXECPLAN.md Wave 1 and SPRINTS.md rows for src/StellaOps.Excititor.Connectors.Oracle.CSAF/TASKS.md. Focus on EXCITITOR-CONN-ORACLE-01-002 (TODO). Confirm prerequisites (internal: EXCITITOR-CONN-ORACLE-01-001 (Wave 0); external: EXCITITOR-STORAGE-01-003) before starting and report status in module TASKS.md.
  • Team Team Excititor Connectors – SUSE: read EXECPLAN.md Wave 1 and SPRINTS.md rows for src/StellaOps.Excititor.Connectors.SUSE.RancherVEXHub/TASKS.md. Focus on EXCITITOR-CONN-SUSE-01-003 (TODO). Confirm prerequisites (internal: EXCITITOR-CONN-SUSE-01-002 (Wave 0); external: EXCITITOR-POLICY-01-001) before starting and report status in module TASKS.md.
  • Team Team Excititor Connectors – Ubuntu: read EXECPLAN.md Wave 1 and SPRINTS.md rows for src/StellaOps.Excititor.Connectors.Ubuntu.CSAF/TASKS.md. Focus on EXCITITOR-CONN-UBUNTU-01-003 (TODO). Confirm prerequisites (internal: EXCITITOR-CONN-UBUNTU-01-002 (Wave 0); external: EXCITITOR-POLICY-01-001) before starting and report status in module TASKS.md.
  • Team Team Excititor Export: read EXECPLAN.md Wave 1 and SPRINTS.md rows for src/StellaOps.Excititor.Export/TASKS.md. Focus on EXCITITOR-EXPORT-01-006 (TODO). Confirm prerequisites (internal: EXCITITOR-EXPORT-01-005 (Wave 0), POLICY-CORE-09-005 (Wave 0)) before starting and report status in module TASKS.md.
  • Team Team Excititor Worker: read EXECPLAN.md Wave 1 and SPRINTS.md rows for src/StellaOps.Excititor.Worker/TASKS.md. Focus on EXCITITOR-WORKER-01-003 (TODO). Confirm prerequisites (internal: EXCITITOR-ATTEST-01-003 (Wave 0); external: EXCITITOR-EXPORT-01-002, EXCITITOR-WORKER-01-001) before starting and report status in module TASKS.md.
  • Team UI Guild: read EXECPLAN.md Wave 1 and SPRINTS.md rows for src/StellaOps.UI/TASKS.md. Focus on UI-ATTEST-11-005 (TODO), UI-VEX-13-003 (TODO), UI-POLICY-13-007 (TODO), UI-ADMIN-13-004 (TODO), UI-AUTH-13-001 (TODO), UI-SCANS-13-002 (TODO), UI-NOTIFY-13-006 (DOING), UI-SCHED-13-005 (TODO). Confirm prerequisites (internal: ATTESTOR-API-11-201 (Wave 0), AUTH-DPOP-11-001 (Wave 0), AUTH-MTLS-11-002 (Wave 0), EXCITITOR-EXPORT-01-005 (Wave 0), NOTIFY-WEB-15-101 (Wave 0), POLICY-CORE-09-006 (Wave 0), SCHED-WEB-16-101 (Wave 0), SIGNER-API-11-101 (Wave 0); external: EXCITITOR-CORE-02-001, SCANNER-WEB-09-102, SCANNER-WEB-09-103) before starting and report status in module TASKS.md.
  • Team Zastava Observer Guild: read EXECPLAN.md Wave 1 and SPRINTS.md rows for src/StellaOps.Zastava.Observer/TASKS.md. Focus on ZASTAVA-OBS-12-001 (TODO). Confirm prerequisites (internal: ZASTAVA-CORE-12-201 (Wave 0)) before starting and report status in module TASKS.md.

Wave 2

  • Team Bench Guild, Notify Team: read EXECPLAN.md Wave 2 and SPRINTS.md rows for bench/TASKS.md. Focus on BENCH-NOTIFY-15-001 (TODO). Confirm prerequisites (internal: NOTIFY-ENGINE-15-301 (Wave 1)) before starting and report status in module TASKS.md.
  • Team Bench Guild, Scheduler Team: read EXECPLAN.md Wave 2 and SPRINTS.md rows for bench/TASKS.md. Focus on BENCH-IMPACT-16-001 (TODO). Confirm prerequisites (internal: SCHED-IMPACT-16-301 (Wave 1)) before starting and report status in module TASKS.md.
  • Team Deployment Guild: read EXECPLAN.md Wave 2 and SPRINTS.md rows for ops/deployment/TASKS.md. Focus on DEVOPS-OPS-14-003 (TODO). Confirm prerequisites (internal: DEVOPS-REL-14-001 (Wave 1)) before starting and report status in module TASKS.md.
  • Team DevOps Guild: read EXECPLAN.md Wave 2 and SPRINTS.md rows for ops/devops/TASKS.md. Focus on DEVOPS-MIRROR-08-001 (DONE 2025-10-19), DEVOPS-PERF-10-002 (TODO), DEVOPS-REL-17-002 (TODO). Confirm prerequisites (internal: BENCH-SCANNER-10-002 (Wave 1), DEVOPS-REL-14-001 (Wave 1), SCANNER-EMIT-17-701 (Wave 1)) before starting and report status in module TASKS.md.
  • Team DevOps Guild, Notify Guild: read EXECPLAN.md Wave 2 and SPRINTS.md rows for ops/devops/TASKS.md. Focus on DEVOPS-SCANNER-09-205 (TODO). Confirm prerequisites (internal: DEVOPS-SCANNER-09-204 (Wave 1)) before starting and report status in module TASKS.md.
  • Team Notify Engine Guild: read EXECPLAN.md Wave 2 and SPRINTS.md rows for src/StellaOps.Notify.Engine/TASKS.md. Focus on NOTIFY-ENGINE-15-302 (TODO). Confirm prerequisites (internal: NOTIFY-ENGINE-15-301 (Wave 1)) before starting and report status in module TASKS.md.
  • Team Notify Queue Guild: read EXECPLAN.md Wave 2 and SPRINTS.md rows for src/StellaOps.Notify.Queue/TASKS.md. Focus on NOTIFY-QUEUE-15-403 (TODO), NOTIFY-QUEUE-15-402 (TODO). Confirm prerequisites (internal: NOTIFY-QUEUE-15-401 (Wave 1)) before starting and report status in module TASKS.md.
  • Team Notify WebService Guild: read EXECPLAN.md Wave 2 and SPRINTS.md rows for src/StellaOps.Notify.WebService/TASKS.md. Focus on NOTIFY-WEB-15-104 (TODO). Confirm prerequisites (internal: NOTIFY-QUEUE-15-401 (Wave 1), NOTIFY-STORAGE-15-201 (Wave 0)) before starting and report status in module TASKS.md.
  • Team Notify Worker Guild: read EXECPLAN.md Wave 2 and SPRINTS.md rows for src/StellaOps.Notify.Worker/TASKS.md. Focus on NOTIFY-WORKER-15-201 (TODO), NOTIFY-WORKER-15-202 (TODO). Confirm prerequisites (internal: NOTIFY-ENGINE-15-301 (Wave 1), NOTIFY-QUEUE-15-401 (Wave 1)) before starting and report status in module TASKS.md.
  • Team Offline Kit Guild: read EXECPLAN.md Wave 2 and SPRINTS.md rows for ops/offline-kit/TASKS.md. Focus on DEVOPS-OFFLINE-14-002 (TODO). Confirm prerequisites (internal: DEVOPS-REL-14-001 (Wave 1)) before starting and report status in module TASKS.md.
  • Team Samples Guild, Policy Guild: read EXECPLAN.md Wave 2 and SPRINTS.md rows for samples/TASKS.md. Focus on SAMPLES-13-004 (TODO). Confirm prerequisites (internal: POLICY-CORE-09-006 (Wave 0), UI-POLICY-13-007 (Wave 1)) before starting and report status in module TASKS.md.
  • Team Scanner WebService Guild: read EXECPLAN.md Wave 2 and SPRINTS.md rows for src/StellaOps.Scanner.WebService/TASKS.md. Focus on SCANNER-RUNTIME-12-302 (TODO). Confirm prerequisites (internal: SCANNER-RUNTIME-12-301 (Wave 1), ZASTAVA-CORE-12-201 (Wave 0)) before starting and report status in module TASKS.md.
  • Team Scheduler ImpactIndex Guild: read EXECPLAN.md Wave 2 and SPRINTS.md rows for src/StellaOps.Scheduler.ImpactIndex/TASKS.md. Focus on SCHED-IMPACT-16-303 (TODO), SCHED-IMPACT-16-302 (TODO). Confirm prerequisites (internal: SCHED-IMPACT-16-301 (Wave 1)) before starting and report status in module TASKS.md.
  • Team Scheduler WebService Guild: read EXECPLAN.md Wave 2 and SPRINTS.md rows for src/StellaOps.Scheduler.WebService/TASKS.md. Focus on SCHED-WEB-16-103 (TODO). Confirm prerequisites (internal: SCHED-WEB-16-102 (Wave 1)) before starting and report status in module TASKS.md.
  • Team Scheduler Worker Guild: read EXECPLAN.md Wave 2 and SPRINTS.md rows for src/StellaOps.Scheduler.Worker/TASKS.md. Focus on SCHED-WORKER-16-202 (TODO), SCHED-WORKER-16-205 (TODO). Confirm prerequisites (internal: SCHED-IMPACT-16-301 (Wave 1), SCHED-WORKER-16-201 (Wave 1)) before starting and report status in module TASKS.md.
  • Team TBD: read EXECPLAN.md Wave 2 and SPRINTS.md rows for src/StellaOps.Scanner.Analyzers.Lang.DotNet/TASKS.md, src/StellaOps.Scanner.Analyzers.Lang.Go/TASKS.md, src/StellaOps.Scanner.Analyzers.Lang.Node/TASKS.md, src/StellaOps.Scanner.Analyzers.Lang.Python/TASKS.md, src/StellaOps.Scanner.Analyzers.Lang.Rust/TASKS.md. Focus on SCANNER-ANALYZERS-LANG-10-305B (TODO), SCANNER-ANALYZERS-LANG-10-304B (TODO), SCANNER-ANALYZERS-LANG-10-308N (TODO), SCANNER-ANALYZERS-LANG-10-303B (TODO), SCANNER-ANALYZERS-LANG-10-306B (TODO). Confirm prerequisites (internal: SCANNER-ANALYZERS-LANG-10-303A (Wave 1), SCANNER-ANALYZERS-LANG-10-304A (Wave 1), SCANNER-ANALYZERS-LANG-10-305A (Wave 1), SCANNER-ANALYZERS-LANG-10-306A (Wave 1), SCANNER-ANALYZERS-LANG-10-307N (Wave 1)) before starting and report status in module TASKS.md.
  • Team Team Excititor Connectors – Oracle: read EXECPLAN.md Wave 2 and SPRINTS.md rows for src/StellaOps.Excititor.Connectors.Oracle.CSAF/TASKS.md. Focus on EXCITITOR-CONN-ORACLE-01-003 (TODO). Confirm prerequisites (internal: EXCITITOR-CONN-ORACLE-01-002 (Wave 1); external: EXCITITOR-POLICY-01-001) before starting and report status in module TASKS.md.
  • Team Team Excititor Export: read EXECPLAN.md Wave 2 and SPRINTS.md rows for src/StellaOps.Excititor.Export/TASKS.md. Focus on EXCITITOR-EXPORT-01-007 (TODO). Confirm prerequisites (internal: EXCITITOR-EXPORT-01-006 (Wave 1)) before starting and report status in module TASKS.md.
  • Team Zastava Observer Guild: read EXECPLAN.md Wave 2 and SPRINTS.md rows for src/StellaOps.Zastava.Observer/TASKS.md. Focus on ZASTAVA-OBS-12-002 (TODO). Confirm prerequisites (internal: ZASTAVA-OBS-12-001 (Wave 1)) before starting and report status in module TASKS.md.

Wave 3

  • Team DevEx/CLI: read EXECPLAN.md Wave 3 and SPRINTS.md rows for src/StellaOps.Cli/TASKS.md. Focus on CLI-OFFLINE-13-006 (DONE 2025-10-21). Confirm prerequisites (internal: DEVOPS-OFFLINE-14-002 (Wave 2)) before starting and report status in module TASKS.md.
  • Team DevEx/CLI, Scanner WebService Guild: read EXECPLAN.md Wave 3 and SPRINTS.md rows for src/StellaOps.Cli/TASKS.md. Focus on CLI-RUNTIME-13-008 (TODO). Confirm prerequisites (internal: SCANNER-RUNTIME-12-302 (Wave 2)) before starting and report status in module TASKS.md.
  • Team Excititor Connectors – Stella: read EXECPLAN.md Wave 3 and SPRINTS.md rows for src/StellaOps.Excititor.Connectors.StellaOpsMirror/TASKS.md. Focus on EXCITITOR-CONN-STELLA-07-001 (TODO). Confirm prerequisites (internal: EXCITITOR-EXPORT-01-007 (Wave 2)) before starting and report status in module TASKS.md.
  • Team Notify Engine Guild: read EXECPLAN.md Wave 3 and SPRINTS.md rows for src/StellaOps.Notify.Engine/TASKS.md. Focus on NOTIFY-ENGINE-15-303 (TODO). Confirm prerequisites (internal: NOTIFY-ENGINE-15-302 (Wave 2)) before starting and report status in module TASKS.md.
  • Team Notify Worker Guild: read EXECPLAN.md Wave 3 and SPRINTS.md rows for src/StellaOps.Notify.Worker/TASKS.md. Focus on NOTIFY-WORKER-15-203 (TODO). Confirm prerequisites (internal: NOTIFY-ENGINE-15-302 (Wave 2)) before starting and report status in module TASKS.md.
  • Team Scheduler Worker Guild: read EXECPLAN.md Wave 3 and SPRINTS.md rows for src/StellaOps.Scheduler.Worker/TASKS.md. Focus on SCHED-WORKER-16-203 (TODO). Confirm prerequisites (internal: SCHED-WORKER-16-202 (Wave 2)) before starting and report status in module TASKS.md.
  • Team TBD: read EXECPLAN.md Wave 3 and SPRINTS.md rows for src/StellaOps.Scanner.Analyzers.Lang.DotNet/TASKS.md, src/StellaOps.Scanner.Analyzers.Lang.Go/TASKS.md, src/StellaOps.Scanner.Analyzers.Lang.Node/TASKS.md, src/StellaOps.Scanner.Analyzers.Lang.Python/TASKS.md, src/StellaOps.Scanner.Analyzers.Lang.Rust/TASKS.md. Focus on SCANNER-ANALYZERS-LANG-10-305C (TODO), SCANNER-ANALYZERS-LANG-10-304C (TODO), SCANNER-ANALYZERS-LANG-10-309N (TODO), SCANNER-ANALYZERS-LANG-10-303C (TODO), SCANNER-ANALYZERS-LANG-10-306C (TODO). Confirm prerequisites (internal: SCANNER-ANALYZERS-LANG-10-303B (Wave 2), SCANNER-ANALYZERS-LANG-10-304B (Wave 2), SCANNER-ANALYZERS-LANG-10-305B (Wave 2), SCANNER-ANALYZERS-LANG-10-306B (Wave 2), SCANNER-ANALYZERS-LANG-10-308N (Wave 2)) before starting and report status in module TASKS.md.
  • Team Zastava Observer Guild: read EXECPLAN.md Wave 3 and SPRINTS.md rows for src/StellaOps.Zastava.Observer/TASKS.md. Focus on ZASTAVA-OBS-12-003 (TODO), ZASTAVA-OBS-12-004 (TODO), ZASTAVA-OBS-17-005 (TODO). Confirm prerequisites (internal: ZASTAVA-OBS-12-002 (Wave 2)) before starting and report status in module TASKS.md.

Wave 4

  • Team DevEx/CLI: read EXECPLAN.md Wave 4 and SPRINTS.md rows for src/StellaOps.Cli/TASKS.md. Focus on CLI-PLUGIN-13-007 (TODO). Confirm prerequisites (internal: CLI-OFFLINE-13-006 (Wave 3), CLI-RUNTIME-13-005 (Wave 0)) before starting and report status in module TASKS.md.
  • Team Docs Guild: read EXECPLAN.md Wave 4 and SPRINTS.md rows for docs/TASKS.md. Focus on DOCS-RUNTIME-17-004 (TODO). Confirm prerequisites (internal: DEVOPS-REL-17-002 (Wave 2), SCANNER-EMIT-17-701 (Wave 1), ZASTAVA-OBS-17-005 (Wave 3)) before starting and report status in module TASKS.md.
  • Team Excititor Connectors – Stella: read EXECPLAN.md Wave 4 and SPRINTS.md rows for src/StellaOps.Excititor.Connectors.StellaOpsMirror/TASKS.md. Focus on EXCITITOR-CONN-STELLA-07-002 (TODO). Confirm prerequisites (internal: EXCITITOR-CONN-STELLA-07-001 (Wave 3)) before starting and report status in module TASKS.md.
  • Team Notify Connectors Guild: read EXECPLAN.md Wave 4 and SPRINTS.md rows for src/StellaOps.Notify.Connectors.Email/TASKS.md, src/StellaOps.Notify.Connectors.Slack/TASKS.md, src/StellaOps.Notify.Connectors.Teams/TASKS.md, src/StellaOps.Notify.Connectors.Webhook/TASKS.md. Focus on NOTIFY-CONN-SLACK-15-501 (TODO), NOTIFY-CONN-TEAMS-15-601 (TODO), NOTIFY-CONN-EMAIL-15-701 (TODO), NOTIFY-CONN-WEBHOOK-15-801 (TODO). Confirm prerequisites (internal: NOTIFY-ENGINE-15-303 (Wave 3)) before starting and report status in module TASKS.md.
  • Team Notify Engine Guild: read EXECPLAN.md Wave 4 and SPRINTS.md rows for src/StellaOps.Notify.Engine/TASKS.md. Focus on NOTIFY-ENGINE-15-304 (TODO). Confirm prerequisites (internal: NOTIFY-ENGINE-15-303 (Wave 3)) before starting and report status in module TASKS.md.
  • Team Notify Worker Guild: read EXECPLAN.md Wave 4 and SPRINTS.md rows for src/StellaOps.Notify.Worker/TASKS.md. Focus on NOTIFY-WORKER-15-204 (TODO). Confirm prerequisites (internal: NOTIFY-WORKER-15-203 (Wave 3)) before starting and report status in module TASKS.md.
  • Team Policy Guild, Scanner WebService Guild: read EXECPLAN.md Wave 4 and SPRINTS.md rows for src/StellaOps.Policy/TASKS.md. Focus on POLICY-RUNTIME-17-201 (TODO). Confirm prerequisites (internal: ZASTAVA-OBS-17-005 (Wave 3)) before starting and report status in module TASKS.md.
  • Team Scheduler Worker Guild: read EXECPLAN.md Wave 4 and SPRINTS.md rows for src/StellaOps.Scheduler.Worker/TASKS.md. Focus on SCHED-WORKER-16-204 (TODO). Confirm prerequisites (internal: SCHED-WORKER-16-203 (Wave 3)) before starting and report status in module TASKS.md.
  • Team TBD: read EXECPLAN.md Wave 4 and SPRINTS.md rows for src/StellaOps.Scanner.Analyzers.Lang.DotNet/TASKS.md, src/StellaOps.Scanner.Analyzers.Lang.Go/TASKS.md, src/StellaOps.Scanner.Analyzers.Lang.Python/TASKS.md, src/StellaOps.Scanner.Analyzers.Lang.Rust/TASKS.md. Focus on SCANNER-ANALYZERS-LANG-10-307D (TODO), SCANNER-ANALYZERS-LANG-10-307G (TODO), SCANNER-ANALYZERS-LANG-10-307P (TODO), SCANNER-ANALYZERS-LANG-10-307R (TODO). Confirm prerequisites (internal: SCANNER-ANALYZERS-LANG-10-303C (Wave 3), SCANNER-ANALYZERS-LANG-10-304C (Wave 3), SCANNER-ANALYZERS-LANG-10-305C (Wave 3), SCANNER-ANALYZERS-LANG-10-306C (Wave 3)) before starting and report status in module TASKS.md.

Wave 5

  • Team Excititor Connectors – Stella: read EXECPLAN.md Wave 5 and SPRINTS.md rows for src/StellaOps.Excititor.Connectors.StellaOpsMirror/TASKS.md. Focus on EXCITITOR-CONN-STELLA-07-003 (TODO). Confirm prerequisites (internal: EXCITITOR-CONN-STELLA-07-002 (Wave 4)) before starting and report status in module TASKS.md.
  • Team Notify Connectors Guild: read EXECPLAN.md Wave 5 and SPRINTS.md rows for src/StellaOps.Notify.Connectors.Email/TASKS.md, src/StellaOps.Notify.Connectors.Slack/TASKS.md, src/StellaOps.Notify.Connectors.Teams/TASKS.md, src/StellaOps.Notify.Connectors.Webhook/TASKS.md. Focus on NOTIFY-CONN-SLACK-15-502 (DONE), NOTIFY-CONN-TEAMS-15-602 (DONE), NOTIFY-CONN-EMAIL-15-702 (BLOCKED 2025-10-20), NOTIFY-CONN-WEBHOOK-15-802 (BLOCKED 2025-10-20). Confirm prerequisites (internal: NOTIFY-CONN-EMAIL-15-701 (Wave 4), NOTIFY-CONN-SLACK-15-501 (Wave 4), NOTIFY-CONN-TEAMS-15-601 (Wave 4), NOTIFY-CONN-WEBHOOK-15-801 (Wave 4)) before starting and report status in module TASKS.md.
  • Team Scanner WebService Guild: read EXECPLAN.md Wave 5 and SPRINTS.md rows for src/StellaOps.Scanner.WebService/TASKS.md. Focus on SCANNER-RUNTIME-17-401 (TODO). Confirm prerequisites (internal: POLICY-RUNTIME-17-201 (Wave 4), SCANNER-EMIT-17-701 (Wave 1), SCANNER-RUNTIME-12-301 (Wave 1), ZASTAVA-OBS-17-005 (Wave 3)) before starting and report status in module TASKS.md.
  • Team TBD: read EXECPLAN.md Wave 5 and SPRINTS.md rows for src/StellaOps.Scanner.Analyzers.Lang.DotNet/TASKS.md, src/StellaOps.Scanner.Analyzers.Lang.Go/TASKS.md, src/StellaOps.Scanner.Analyzers.Lang.Python/TASKS.md, src/StellaOps.Scanner.Analyzers.Lang.Rust/TASKS.md. Focus on SCANNER-ANALYZERS-LANG-10-308D (TODO), SCANNER-ANALYZERS-LANG-10-308G (TODO), SCANNER-ANALYZERS-LANG-10-308P (TODO), SCANNER-ANALYZERS-LANG-10-308R (TODO). Confirm prerequisites (internal: SCANNER-ANALYZERS-LANG-10-307D (Wave 4), SCANNER-ANALYZERS-LANG-10-307G (Wave 4), SCANNER-ANALYZERS-LANG-10-307P (Wave 4), SCANNER-ANALYZERS-LANG-10-307R (Wave 4)) before starting and report status in module TASKS.md.

Wave 6

  • Team Notify Connectors Guild: read EXECPLAN.md Wave 6 and SPRINTS.md rows for src/StellaOps.Notify.Connectors.Email/TASKS.md, src/StellaOps.Notify.Connectors.Slack/TASKS.md, src/StellaOps.Notify.Connectors.Teams/TASKS.md, src/StellaOps.Notify.Connectors.Webhook/TASKS.md. Focus on NOTIFY-CONN-SLACK-15-503 (DONE), NOTIFY-CONN-TEAMS-15-603 (DONE), NOTIFY-CONN-EMAIL-15-703 (DONE), NOTIFY-CONN-WEBHOOK-15-803 (DONE). Confirm packaging outputs remain deterministic while upstream implementation tasks (15-702/802) stay blocked.
  • Team TBD: read EXECPLAN.md Wave 6 and SPRINTS.md rows for src/StellaOps.Scanner.Analyzers.Lang.DotNet/TASKS.md, src/StellaOps.Scanner.Analyzers.Lang.Go/TASKS.md, src/StellaOps.Scanner.Analyzers.Lang.Python/TASKS.md, src/StellaOps.Scanner.Analyzers.Lang.Rust/TASKS.md. Focus on SCANNER-ANALYZERS-LANG-10-309D (TODO), SCANNER-ANALYZERS-LANG-10-309G (TODO), SCANNER-ANALYZERS-LANG-10-309P (TODO), SCANNER-ANALYZERS-LANG-10-309R (TODO). Confirm prerequisites (internal: SCANNER-ANALYZERS-LANG-10-308D (Wave 5), SCANNER-ANALYZERS-LANG-10-308G (Wave 5), SCANNER-ANALYZERS-LANG-10-308P (Wave 5), SCANNER-ANALYZERS-LANG-10-308R (Wave 5)) before starting and report status in module TASKS.md.

Wave 7

  • Team Team Core Engine & Storage Analytics: read EXECPLAN.md Wave 7 and SPRINTS.md rows for src/StellaOps.Concelier.Core/TASKS.md. Focus on FEEDCORE-ENGINE-07-001 (DONE 2025-10-19). Confirm prerequisites (internal: FEEDSTORAGE-DATA-07-001 (Wave 10)) before starting and report status in module TASKS.md.

Wave 8

  • Team Team Core Engine & Data Science: read EXECPLAN.md Wave 8 and SPRINTS.md rows for src/StellaOps.Concelier.Core/TASKS.md. Focus on FEEDCORE-ENGINE-07-002 (DONE 2025-10-21). Confirm prerequisites (internal: FEEDCORE-ENGINE-07-001 (Wave 7)) before starting and report status in module TASKS.md.

Wave 9

  • Team Team Core Engine & Storage Analytics: read EXECPLAN.md Wave 9 and SPRINTS.md rows for src/StellaOps.Concelier.Core/TASKS.md. Focus on FEEDCORE-ENGINE-07-003 (TODO). Confirm prerequisites (internal: FEEDCORE-ENGINE-07-001 (Wave 7)) before starting and report status in module TASKS.md.

Wave 10

  • Team Team Normalization & Storage Backbone: read EXECPLAN.md Wave 10 and SPRINTS.md rows for src/StellaOps.Concelier.Storage.Mongo/TASKS.md. Focus on FEEDSTORAGE-DATA-07-001 (TODO). Confirm prerequisites (internal: FEEDMERGE-ENGINE-07-001 (Wave 11)) before starting and report status in module TASKS.md.

Wave 11

  • Team BE-Merge: read EXECPLAN.md Wave 11 and SPRINTS.md rows for src/StellaOps.Concelier.Merge/TASKS.md. FEEDMERGE-ENGINE-07-001 marked DONE (2025-10-20); share conflict explainer rollout notes with Storage before Wave 10 resumes.

Wave 12

  • Team Concelier Export Guild: read EXECPLAN.md Wave 12 and SPRINTS.md rows for src/StellaOps.Concelier.Exporter.Json/TASKS.md. Focus on CONCELIER-EXPORT-08-201 (TODO). Confirm prerequisites (internal: FEEDCORE-ENGINE-07-001 (Wave 7)) before starting and report status in module TASKS.md.

Wave 13

  • Team Concelier Export Guild: read EXECPLAN.md Wave 13 and SPRINTS.md rows for src/StellaOps.Concelier.Exporter.TrivyDb/TASKS.md. Focus on CONCELIER-EXPORT-08-202 (DONE 2025-10-19). Confirm prerequisites (internal: CONCELIER-EXPORT-08-201 (Wave 12)) before starting and report status in module TASKS.md.

Wave 14

  • Team Concelier WebService Guild: read EXECPLAN.md Wave 14 and SPRINTS.md rows for src/StellaOps.Concelier.WebService/TASKS.md. CONCELIER-WEB-08-201 closed (2025-10-20); coordinate with DevOps for mirror smoke before promoting to stable.

Wave 15

  • Team BE-Conn-Stella: read EXECPLAN.md Wave 15 and SPRINTS.md rows for src/StellaOps.Concelier.Connector.StellaOpsMirror/TASKS.md. Focus on FEEDCONN-STELLA-08-001 (DONE 2025-10-20). Confirm prerequisites (internal: CONCELIER-EXPORT-08-201 (Wave 12)) before starting and report status in module TASKS.md.

Wave 16

  • Team BE-Conn-Stella: read EXECPLAN.md Wave 16 and SPRINTS.md rows for src/StellaOps.Concelier.Connector.StellaOpsMirror/TASKS.md. FEEDCONN-STELLA-08-002 completed (2025-10-20) with canonical DTO mapper + provenance fixtures.

Wave 17

  • Team BE-Conn-Stella: read EXECPLAN.md Wave 17 and SPRINTS.md rows for src/StellaOps.Concelier.Connector.StellaOpsMirror/TASKS.md. Focus on FEEDCONN-STELLA-08-003 (TODO). Confirm prerequisites (internal: FEEDCONN-STELLA-08-002 (Wave 16)) before starting and report status in module TASKS.md.

Wave 0 — 98 task(s) ready now

  • Sprint 1 · Backlog
    • Team: UX Specialist, Angular Eng
      • Path: src/StellaOps.Web/TASKS.md
        1. [DONE] WEB1.TRIVY-SETTINGS — Implement Trivy DB exporter settings panel with publishFull, publishDelta, includeFull, includeDelta toggles and “Run export now” action using future /exporters/trivy-db/settings API. • Prereqs: — • Current: DONE (2025-10-21) – Angular route /concelier/trivy-db-settings with reactive form, API client, and run-now workflow built; see TrivyDbSettingsPageComponent.
        2. [BLOCKED] WEB1.TRIVY-SETTINGS-TESTS — Add headless UI test run (ng test --watch=false) and document prerequisites once Angular tooling is chained up. • Prereqs: WEB1.TRIVY-SETTINGS • Current: BLOCKED (2025-10-21) – Awaiting Angular CLI/toolchain availability in CI/local dev environments before wiring Karma tests for the new screen.
  • Sprint 1 · Developer Tooling
    • Team: DevEx/CLI
      • Path: src/StellaOps.Cli/TASKS.md
        1. [TODO] EXCITITOR-CLI-01-002 — EXCITITOR-CLI-01-002 – Export download & attestation UX • Prereqs: EXCITITOR-CLI-01-001 (external/completed), EXCITITOR-EXPORT-01-001 (external/completed) • Current: TODO – Display export metadata (sha256, size, Rekor link), support optional artifact download path, and handle cache hits gracefully.
    • Team: Docs/CLI
      • Path: src/StellaOps.Cli/TASKS.md
        1. [TODO] EXCITITOR-CLI-01-003 — EXCITITOR-CLI-01-003 – CLI docs & examples for Excititor • Prereqs: EXCITITOR-CLI-01-001 (external/completed) • Current: TODO – Update docs/09_API_CLI_REFERENCE.md and quickstart snippets to cover Excititor verbs, offline guidance, and attestation verification workflow.
  • Sprint 1 · Stabilize In-Progress Foundations
    • Team: Team Connector Resumption – CERT/RedHat
      • Path: src/StellaOps.Concelier.Connector.Distro.RedHat/TASKS.md
        1. [DOING] FEEDCONN-REDHAT-02-001 — Fixture validation sweep — Instructions to work: — Regenerating RHSA fixtures awaits remaining range provenance patches; review snapshot diffs and update docs once upstream helpers land. Conflict resolver deltas logged in src/StellaOps.Concelier.Connector.Distro.RedHat/CONFLICT_RESOLVER_NOTES.md for Sprint 3 consumers. • Prereqs: — • Current: DOING (2025-10-10)
    • Team: Team WebService & Authority
      • Path: src/StellaOps.Authority/StellaOps.Authority.Plugin.Standard/TASKS.md
        1. [DOING] SEC2.PLG — Emit audit events from password verification outcomes and persist via IAuthorityLoginAttemptStore; Serilog enrichment complete, storage durability tests in flight. • Prereqs: — • Current: DOING (2025-10-14)
        2. [DOING] SEC3.PLG — Ensure lockout responses carry rate-limit metadata through plugin logs/events; retry-after propagation and limiter tests underway. • Prereqs: — • Current: DOING (2025-10-14)
        3. [DOING] SEC5.PLG — Address plugin-specific mitigations in threat model backlog; mitigation items tracked, docs updates pending. • Prereqs: — • Current: DOING (2025-10-14)
        4. [BLOCKED] PLG4-6.CAPABILITIES — Finalise capability metadata exposure and docs once Authority rate-limiter stream (CORE8/SEC3) is stable; awaiting dependency unblock. • Prereqs: — • Current: BLOCKED (2025-10-12)
        5. [TODO] PLG6.DIAGRAM — Export final sequence/component diagrams for the developer guide and add offline-friendly assets under docs/assets/authority. • Prereqs: — • Current: TODO
        6. [REVIEW] PLG7.RFC — Socialize LDAP plugin RFC and capture guild feedback; awaiting final review sign-off and follow-up issue tracking. • Prereqs: — • Current: REVIEW (2025-10-13)
      • Path: src/StellaOps.Concelier.WebService/TASKS.md
        1. [DOING] FEEDWEB-DOCS-01-001 — Document authority toggle & scope requirements — Quickstart updates are staged; awaiting Docs guild review before publishing operator guide refresh. • Prereqs: — • Current: DOING (2025-10-10)
        2. [DONE] FEEDWEB-OPS-01-006 — Rename plugin drop directory to namespaced path — Build outputs now target StellaOps.Concelier.PluginBinaries/StellaOps.Authority.PluginBinaries, plugin host defaults updated, and docs/tests refreshed (see dotnet test src/StellaOps.Concelier.WebService.Tests/StellaOps.Concelier.WebService.Tests.csproj --no-restore). • Prereqs: — • Current: TODO
        3. [BLOCKED] FEEDWEB-OPS-01-007 — Authority resilience adoption — Roll out retry/offline knobs to deployment docs and align CLI parity once LIB5 resilience options land; unblock when library release is available and docs review completes. • Prereqs: — • Current: BLOCKED (2025-10-10)
  • Sprint 2 · Connector & Data Implementation Wave
    • Team: Docs Guild, Plugin Team
      • Path: docs/TASKS.md
        1. [REVIEW] DOC4.AUTH-PDG — Copy-edit docs/dev/31_AUTHORITY_PLUGIN_DEVELOPER_GUIDE.md, export lifecycle diagram, add LDAP RFC cross-link. • Prereqs: — • Current: REVIEW
    • Team: Team Merge & QA Enforcement
      • Path: src/StellaOps.Concelier.Merge/TASKS.md
        1. [DOING] FEEDMERGE-COORD-02-900 — Range primitives rollout coordination — Coordinate remaining connectors (Acsc, Cccs, CertBund, CertCc, Cve, Ghsa, Ics.Cisa, Kisa, Ru.Bdu, Ru.Nkcki, Vndr.Apple, Vndr.Cisco, Vndr.Msrc) to emit canonical range primitives with provenance tags; fixtures tracked in RANGE_PRIMITIVES_COORDINATION.md. • Prereqs: — • Current: DOING (2025-10-20) – Coordination docs refreshed with connector due dates (Cccs/Cisco 2025-10-21, CertBund 2025-10-22, ICS-CISA 2025-10-23, KISA 2025-10-24); escalation plan defined if deadlines slip.
  • Sprint 3 · Backlog
    • Team: Tools Guild, BE-Conn-MSRC
      • Path: src/StellaOps.Concelier.Connector.Common/TASKS.md
        1. [**TODO] FEEDCONN-SHARED-STATE-003 — FEEDCONN-SHARED-STATE-003 Source state seeding helper • Prereqs: — • Current: TODO (2025-10-15) – Provide a reusable CLI/utility to seed pendingDocuments/pendingMappings for connectors (MSRC backfills require scripted CVRF + detail injection). Coordinate with MSRC team for expected JSON schema and handoff once prototype lands.
  • Sprint 5 · Excititor Core Foundations
    • Team: Team Excititor Attestation
      • Path: src/StellaOps.Excititor.Attestation/TASKS.md
        1. [TODO] EXCITITOR-ATTEST-01-003 — EXCITITOR-ATTEST-01-003 – Verification suite & observability • Prereqs: EXCITITOR-ATTEST-01-002 (external/completed) • Current: TODO – Add verification helpers for Worker/WebService, metrics/logging hooks, and negative-path regression tests.
    • Team: Team Excititor WebService
      • Path: src/StellaOps.Excititor.WebService/TASKS.md
        1. [DONE] EXCITITOR-WEB-01-002 — EXCITITOR-WEB-01-002 – Ingest & reconcile endpoints • Prereqs: EXCITITOR-WEB-01-001 (external/completed) • Current: DONE (2025-10-20) – /excititor/init, /excititor/ingest/run, /excititor/ingest/resume, /excititor/reconcile enforce vex.admin, normalize provider inputs, and emit deterministic summaries; verified via dotnet test src/StellaOps.Excititor.WebService.Tests/StellaOps.Excititor.WebService.Tests.csproj --filter FullyQualifiedName~IngestEndpointsTests.
        2. [TODO] EXCITITOR-WEB-01-003 — EXCITITOR-WEB-01-003 – Export & verify endpoints • Prereqs: EXCITITOR-WEB-01-001 (external/completed), EXCITITOR-EXPORT-01-001 (external/completed), EXCITITOR-ATTEST-01-001 (external/completed) • Current: TODO – Add /excititor/export, /excititor/export/{id}, /excititor/export/{id}/download, /excititor/verify, returning artifact + attestation metadata with cache awareness.
  • Sprint 6 · Excititor Ingest & Formats
    • Team: Team Excititor Connectors – Cisco
      • Path: src/StellaOps.Excititor.Connectors.Cisco.CSAF/TASKS.md
        1. [TODO] EXCITITOR-CONN-CISCO-01-003 — EXCITITOR-CONN-CISCO-01-003 – Provider trust metadata • Prereqs: EXCITITOR-CONN-CISCO-01-002 (external/completed), EXCITITOR-POLICY-01-001 (external/completed) • Current: TODO – Emit cosign/PGP trust metadata and advisory provenance hints for policy weighting.
    • Team: Team Excititor Connectors – MSRC
      • Path: src/StellaOps.Excititor.Connectors.MSRC.CSAF/TASKS.md
        1. [TODO] EXCITITOR-CONN-MS-01-002 — EXCITITOR-CONN-MS-01-002 – CSAF download pipeline • Prereqs: EXCITITOR-CONN-MS-01-001 (external/completed), EXCITITOR-STORAGE-01-003 (external/completed) • Current: TODO – Fetch CSAF packages with retry/backoff, checksum verification, and raw document persistence plus quarantine for schema failures.
    • Team: Team Excititor Connectors – Oracle
      • Path: src/StellaOps.Excititor.Connectors.Oracle.CSAF/TASKS.md
        1. [DOING] EXCITITOR-CONN-ORACLE-01-001 — EXCITITOR-CONN-ORACLE-01-001 – Oracle CSAF catalogue discovery • Prereqs: EXCITITOR-CONN-ABS-01-001 (external/completed) • Current: DOING (2025-10-17) – Implement catalogue discovery, CPU calendar awareness, and offline snapshot import for Oracle CSAF feeds.
    • Team: Team Excititor Connectors – SUSE
      • Path: src/StellaOps.Excititor.Connectors.SUSE.RancherVEXHub/TASKS.md
        1. [TODO] EXCITITOR-CONN-SUSE-01-002 — EXCITITOR-CONN-SUSE-01-002 – Checkpointed event ingestion • Prereqs: EXCITITOR-CONN-SUSE-01-001 (external/completed), EXCITITOR-STORAGE-01-003 (external/completed) • Current: TODO – Process hub events with resume checkpoints, deduplication, and quarantine path for malformed payloads.
    • Team: Team Excititor Connectors – Ubuntu
      • Path: src/StellaOps.Excititor.Connectors.Ubuntu.CSAF/TASKS.md
        1. [TODO] EXCITITOR-CONN-UBUNTU-01-002 — EXCITITOR-CONN-UBUNTU-01-002 – Incremental fetch & deduplication • Prereqs: EXCITITOR-CONN-UBUNTU-01-001 (external/completed), EXCITITOR-STORAGE-01-003 (external/completed) • Current: TODO – Fetch CSAF bundles with ETag handling, checksum validation, deduplication, and raw persistence.
    • Team: Team Excititor Formats
      • Path: src/StellaOps.Excititor.Formats.CSAF/TASKS.md
        1. [TODO] EXCITITOR-FMT-CSAF-01-002 — EXCITITOR-FMT-CSAF-01-002 – Status/justification mapping • Prereqs: EXCITITOR-FMT-CSAF-01-001 (external/completed), EXCITITOR-POLICY-01-001 (external/completed) • Current: TODO – Normalize CSAF product_status + justification values into policy-aware enums with audit diagnostics for unsupported codes.
        2. [TODO] EXCITITOR-FMT-CSAF-01-003 — EXCITITOR-FMT-CSAF-01-003 – CSAF export adapter • Prereqs: EXCITITOR-EXPORT-01-001 (external/completed), EXCITITOR-FMT-CSAF-01-001 (external/completed) • Current: TODO – Provide CSAF export writer producing deterministic documents (per vuln/product) and manifest metadata for attestation.
      • Path: src/StellaOps.Excititor.Formats.CycloneDX/TASKS.md
        1. [TODO] EXCITITOR-FMT-CYCLONE-01-002 — EXCITITOR-FMT-CYCLONE-01-002 – Component reference reconciliation • Prereqs: EXCITITOR-FMT-CYCLONE-01-001 (external/completed) • Current: TODO – Implement helpers to reconcile component/service references against policy expectations and emit diagnostics for missing SBOM links.
        2. [TODO] EXCITITOR-FMT-CYCLONE-01-003 — EXCITITOR-FMT-CYCLONE-01-003 – CycloneDX export serializer • Prereqs: EXCITITOR-EXPORT-01-001 (external/completed), EXCITITOR-FMT-CYCLONE-01-001 (external/completed) • Current: TODO – Provide exporters producing CycloneDX VEX output with canonical ordering and hash-stable manifests.
      • Path: src/StellaOps.Excititor.Formats.OpenVEX/TASKS.md
        1. [TODO] EXCITITOR-FMT-OPENVEX-01-002 — EXCITITOR-FMT-OPENVEX-01-002 – Statement merge utilities • Prereqs: EXCITITOR-FMT-OPENVEX-01-001 (external/completed) • Current: TODO – Add reducers merging multiple OpenVEX statements, resolving conflicts deterministically, and emitting policy diagnostics.
        2. [TODO] EXCITITOR-FMT-OPENVEX-01-003 — EXCITITOR-FMT-OPENVEX-01-003 – OpenVEX export writer • Prereqs: EXCITITOR-EXPORT-01-001 (external/completed), EXCITITOR-FMT-OPENVEX-01-001 (external/completed) • Current: TODO – Provide export serializer generating canonical OpenVEX documents with optional SBOM references and hash-stable ordering.
    • Team: Team Excititor Worker
      • Path: src/StellaOps.Excititor.Worker/TASKS.md
        1. [DONE 2025-10-21] EXCITITOR-WORKER-01-002 — EXCITITOR-WORKER-01-002 – Resume tokens & retry policy • Prereqs: EXCITITOR-WORKER-01-001 (external/completed) • Current: DONE – Worker updates connector state with resume tokens + success/failure metadata and applies jittered exponential backoff with quarantine scheduling; unit coverage added for skip/backoff/resume flows.
  • Sprint 7 · Contextual Truth Foundations
    • Team: Team Excititor Export
      • Path: src/StellaOps.Excititor.Export/TASKS.md
        1. [TODO] EXCITITOR-EXPORT-01-005 — EXCITITOR-EXPORT-01-005 – Score & resolve envelope surfaces • Prereqs: EXCITITOR-EXPORT-01-004 (external/completed), EXCITITOR-CORE-02-001 (external/completed) • Current: TODO – Emit consensus+score envelopes in export manifests, include policy/scoring digests, and update offline bundle/ORAS layouts to carry signed VEX responses.
    • Team: Team Excititor WebService
      • Path: src/StellaOps.Excititor.WebService/TASKS.md
        1. [DONE 2025-10-20] EXCITITOR-WEB-01-004 — Resolve API & signed responses – expose /excititor/resolve, return signed consensus/score envelopes, document auth. • Prereqs: — • Current: TODO
    • Team: Team Excititor Worker
      • Path: src/StellaOps.Excititor.Worker/TASKS.md
        1. [DONE 2025-10-21] EXCITITOR-WORKER-01-004 — EXCITITOR-WORKER-01-004 – TTL refresh & stability damper • Prereqs: EXCITITOR-WORKER-01-001 (external/completed), EXCITITOR-CORE-02-001 (external/completed) • Current: TODO – Monitor consensus/VEX TTLs, apply 24–48h dampers before flipping published status/score, and trigger re-resolve when base image or kernel fingerprints change.
  • Sprint 8 · Mongo strengthening
    • Team: Authority Core & Storage Guild
      • Path: src/StellaOps.Authority/TASKS.md
        1. [DONE] AUTHSTORAGE-MONGO-08-001 — Harden Authority Mongo usage — Scoped Mongo sessions with majority read/write concerns wired through stores and GraphQL/HTTP pipelines; replica-set election regression validated. • Prereqs: — • Current: BLOCKED (2025-10-19)
    • Team: Team Excititor Storage
      • Path: src/StellaOps.Excititor.Storage.Mongo/TASKS.md
        1. [DONE 2025-10-19] EXCITITOR-STORAGE-MONGO-08-001 — Session + causal consistency hardening shipped with scoped session provider, repository updates, and replica-set consistency tests (dotnet test src/StellaOps.Excititor.Storage.Mongo.Tests/StellaOps.Excititor.Storage.Mongo.Tests.csproj) • Prereqs: EXCITITOR-STORAGE-01-003 (external/completed) • Current: DONE – Scoped sessions with causal consistency in place; repositories/tests updated for deterministic read-your-write semantics.
    • Team: Team Normalization & Storage Backbone
      • Path: src/StellaOps.Concelier.Storage.Mongo/TASKS.md
        1. [DONE] FEEDSTORAGE-MONGO-08-001 — Causal-consistent Concelier storage sessions — Scoped session facilitator registered, repositories accept optional session handles, and replica-set failover tests verify read-your-write + monotonic reads. • Prereqs: — • Current: TODO
  • Sprint 8 · Platform Maintenance
    • Team: Team Excititor Storage
      • Path: src/StellaOps.Excititor.Storage.Mongo/TASKS.md
        1. [DONE 2025-10-19] EXCITITOR-STORAGE-03-001 — Statement backfill tooling • Prereqs: EXCITITOR-STORAGE-02-001 (external/completed) • Current: DONE – Admin backfill endpoint, CLI command (stellaops excititor backfill-statements), integration coverage, and operator runbook published; further automation tracked separately if needed.
    • Team: Team Excititor Worker
      • Path: src/StellaOps.Excititor.Worker/TASKS.md
        1. [DONE 2025-10-21] EXCITITOR-WORKER-02-001 — EXCITITOR-WORKER-02-001 – Resolve Microsoft.Extensions.Caching.Memory advisory • Prereqs: EXCITITOR-WORKER-01-001 (external/completed) • Current: DONE (2025-10-21) – Upgraded Excititor workers/connectors to Microsoft.Extensions.* 10.0.0-preview.7.25380.108, restored attestation diagnostics, and re-ran worker + webservice test suites with no NU1903 vulnerabilities.
  • Sprint 8 · Plugin Infrastructure
    • Team: Plugin Platform Guild
      • Path: src/StellaOps.Plugin/TASKS.md
        1. [TODO] PLUGIN-DI-08-001 — Scoped service support in plugin bootstrap — Teach the plugin loader/registrar to surface services with scoped lifetimes, honour StellaOps.DependencyInjection metadata, and document the new contract. • Prereqs: — • Current: TODO
    • Team: Plugin Platform Guild, Authority Core
      • Path: src/StellaOps.Plugin/TASKS.md
        1. [DONE] PLUGIN-DI-08-002 — Update Authority plugin integration — Flow scoped services through identity-provider registrars, bootstrap flows, and background jobs; add regression coverage around scoped lifetimes. (Implemented 2025-10-20 with scoped Standard plugin registrations and registry handles.) • Prereqs: — • Current: DONE (2025-10-20) – Standard registrar registers scoped credential/provisioning stores and identity-provider plugins, registry Acquire returns scoped handles, and tests dotnet test src/StellaOps.Authority/StellaOps.Authority.Plugin.Standard.Tests/StellaOps.Authority.Plugin.Standard.Tests.csproj + dotnet test src/StellaOps.Authority/StellaOps.Authority.Tests/StellaOps.Authority.Tests.csproj validate behaviour.
  • Sprint 9 · Docs & Governance
    • Team: Platform Events Guild
      • Path: docs/TASKS.md
        1. [TODO] PLATFORM-EVENTS-09-401 — Embed canonical event samples into contract/integration tests and ensure CI validates payloads against published schemas. • Prereqs: DOCS-EVENTS-09-003 (external/completed) • Current: TODO
    • Team: Runtime Guild
      • Path: docs/TASKS.md
        1. [TODO] RUNTIME-GUILD-09-402 — Confirm Scanner WebService surfaces quietedFindingCount and progress hints to runtime consumers; document readiness checklist. • Prereqs: SCANNER-POLICY-09-107 (external/completed) • Current: TODO
  • Sprint 9 · Policy Foundations
    • Team: Policy Guild
      • Path: src/StellaOps.Policy/TASKS.md
        1. [DONE] POLICY-CORE-09-004 — Versioned scoring config with schema validation, trust table, and golden fixtures. (2025-10-19) • Prereqs: — • Current: DONE (2025-10-19)
        2. [DONE] POLICY-CORE-09-005 — Scoring/quiet engine – compute score, enforce VEX-only quiet rules, emit inputs and provenance. (2025-10-19) • Prereqs: — • Current: DONE (2025-10-19)
        3. [DONE] POLICY-CORE-09-006 — Unknown state & confidence decay – deterministic bands surfaced in policy outputs. (2025-10-19) • Prereqs: — • Current: DONE (2025-10-19)
  • Sprint 10 · Backlog
    • Team: TBD
      • Path: src/StellaOps.Scanner.Analyzers.Lang.Node/TASKS.md
        1. [TODO] SCANNER-ANALYZERS-LANG-10-302C — Surface script metadata (postinstall/preinstall) and policy hints; emit telemetry counters and evidence records. • Prereqs: SCANNER-ANALYZERS-LANG-10-302B (external/completed) • Current: TODO
  • Sprint 10 · DevOps Perf
    • Team: DevOps Guild
      • Path: ops/devops/TASKS.md
        1. [DONE] DEVOPS-SEC-10-301 — Address NU1902/NU1903 advisories for MongoDB.Driver 2.12.0 and SharpCompress 0.23.0 surfaced during scanner cache and worker test runs (2025-10-20) – local Mongo2Go feed repacked to require MongoDB.Driver 3.5.0 and SharpCompress 0.41.0; targeted cache tests green. • Prereqs: — • Current: TODO
  • Sprint 10 · Scanner Analyzers & SBOM
    • Team: Diff Guild
      • Path: src/StellaOps.Scanner.Diff/TASKS.md
        1. [TODO] SCANNER-DIFF-10-501 — Build component differ tracking add/remove/version changes with deterministic ordering. • Prereqs: — • Current: TODO
        2. [TODO] SCANNER-DIFF-10-502 — Attribute diffs to introducing/removing layers including provenance evidence. • Prereqs: — • Current: TODO
        3. [TODO] SCANNER-DIFF-10-503 — Produce JSON diff output for inventory vs usage views aligned with API contract. • Prereqs: — • Current: TODO
    • Team: Emit Guild
      • Path: src/StellaOps.Scanner.Emit/TASKS.md
        1. [TODO] SCANNER-EMIT-10-601 — Compose inventory SBOM (CycloneDX JSON/Protobuf) from layer fragments. • Prereqs: — • Current: TODO
        2. [TODO] SCANNER-EMIT-10-602 — Compose usage SBOM leveraging EntryTrace to flag actual usage. • Prereqs: — • Current: TODO
        3. [TODO] SCANNER-EMIT-10-603 — Generate BOM index sidecar (purl table + roaring bitmap + usage flag). • Prereqs: — • Current: TODO
        4. [TODO] SCANNER-EMIT-10-604 — Package artifacts for export + attestation with deterministic manifests. • Prereqs: — • Current: TODO
        5. [TODO] SCANNER-EMIT-10-605 — Emit BOM-Index sidecar schema/fixtures (CRITICAL PATH for SP16). • Prereqs: — • Current: TODO
        6. [TODO] SCANNER-EMIT-10-606 — Usage view bit flags integrated with EntryTrace. • Prereqs: — • Current: TODO
    • Team: EntryTrace Guild
      • Path: src/StellaOps.Scanner.EntryTrace/TASKS.md
        1. [TODO] SCANNER-ENTRYTRACE-10-401 — POSIX shell AST parser with deterministic output. • Prereqs: — • Current: TODO
        2. [TODO] SCANNER-ENTRYTRACE-10-402 — Command resolution across layered rootfs with evidence attribution. • Prereqs: — • Current: TODO
        3. [TODO] SCANNER-ENTRYTRACE-10-403 — Interpreter tracing for shell wrappers to Python/Node/Java launchers. • Prereqs: — • Current: TODO
        4. [TODO] SCANNER-ENTRYTRACE-10-404 — Python entry analyzer (venv shebang, module invocation, usage flag). • Prereqs: — • Current: TODO
        5. [TODO] SCANNER-ENTRYTRACE-10-405 — Node/Java launcher analyzer capturing script/jar targets. • Prereqs: — • Current: TODO
        6. [TODO] SCANNER-ENTRYTRACE-10-406 — Explainability + diagnostics for unresolved constructs with metrics. • Prereqs: — • Current: TODO
        7. [TODO] SCANNER-ENTRYTRACE-10-407 — Package EntryTrace analyzers as restart-time plug-ins (manifest + host registration). • Prereqs: — • Current: TODO
    • Team: Language Analyzer Guild
      • Path: src/StellaOps.Scanner.Analyzers.Lang/SPRINTS_LANG_IMPLEMENTATION_PLAN.md
        1. [TODO] SCANNER-ANALYZERS-LANG-10-302..309 — Detailed per-language sprint plan (Node, Python, Go, .NET, Rust) with gates and benchmarks. • Prereqs: — • Current: TODO
      • Path: src/StellaOps.Scanner.Analyzers.Lang/TASKS.md
        1. [TODO] SCANNER-ANALYZERS-LANG-10-301 — Java analyzer emitting pkg:maven with provenance. • Prereqs: — • Current: TODO
        2. [TODO] SCANNER-ANALYZERS-LANG-10-307 — Shared language evidence helpers + usage flag propagation. • Prereqs: — • Current: TODO
        3. [TODO] SCANNER-ANALYZERS-LANG-10-308 — Determinism + fixture harness for language analyzers. • Prereqs: — • Current: TODO
  • Sprint 11 · Signing Chain Bring-up
    • Team: Attestor Guild
      • Path: src/StellaOps.Attestor/TASKS.md
        1. [TODO] ATTESTOR-API-11-201 — /rekor/entries submission pipeline with dedupe, proof acquisition, and persistence. • Prereqs: — • Current: TODO
        2. [TODO] ATTESTOR-VERIFY-11-202 — /rekor/verify + retrieval endpoints validating signatures and Merkle proofs. • Prereqs: — • Current: TODO
        3. [TODO] ATTESTOR-OBS-11-203 — Telemetry, alerting, mTLS hardening, and archive workflow for Attestor. • Prereqs: — • Current: TODO
    • Team: Authority Core & Security Guild
      • Path: src/StellaOps.Authority/TASKS.md
        1. [DONE] AUTH-DPOP-11-001 — Implement DPoP proof validation + nonce handling for high-value audiences per architecture. (Redis-configurable nonce store + docs landed 2025-10-20) • Prereqs: — • Current: DOING (2025-10-19)
        2. [DOING] AUTH-MTLS-11-002 — Add OAuth mTLS client credential support with certificate-bound tokens and introspection updates. • Prereqs: — • Current: DOING (2025-10-19)
    • Team: Signer Guild
      • Path: src/StellaOps.Signer/TASKS.md
        1. [DONE] SIGNER-API-11-101 — /sign/dsse pipeline with Authority auth, PoE introspection, release verification, DSSE signing. • Prereqs: — • Current: DONE (2025-10-21) – Minimal API host now issues DSSE bundles with PoE validation, release verification, and quota enforcement; integration tests cover success/error paths via dotnet test src/StellaOps.Signer/StellaOps.Signer.Tests/StellaOps.Signer.Tests.csproj.
        2. [DONE] SIGNER-REF-11-102 — /verify/referrers endpoint with OCI lookup, caching, and policy enforcement. • Prereqs: — • Current: DONE (2025-10-21) – Added /api/v1/signer/verify/referrers returning deterministic JSON responses for trusted/untrusted digests with regression coverage.
        3. [DONE] SIGNER-QUOTA-11-103 — Enforce plan quotas, concurrency/QPS limits, artifact size caps with metrics/audit logs. • Prereqs: — • Current: DONE (2025-10-21) – In-memory quota service applies payload caps and per-tenant QPS throttles; tests cover oversize and throttled cases.
  • Sprint 12 · Runtime Guardrails
    • Team: Zastava Core Guild
      • Path: src/StellaOps.Zastava.Core/TASKS.md
        1. [TODO] ZASTAVA-CORE-12-201 — Define runtime event/admission DTOs, hashing helpers, and versioning strategy. • Prereqs: — • Current: TODO
        2. [TODO] ZASTAVA-CORE-12-202 — Provide configuration/logging/metrics utilities shared by Observer/Webhook. • Prereqs: — • Current: TODO
        3. [TODO] ZASTAVA-CORE-12-203 — Authority client helpers, OpTok caching, and security guardrails for runtime services. • Prereqs: — • Current: TODO
        4. [TODO] ZASTAVA-OPS-12-204 — Operational runbooks, alert rules, and dashboard exports for runtime plane. • Prereqs: — • Current: TODO
    • Team: Zastava Webhook Guild
      • Path: src/StellaOps.Zastava.Webhook/TASKS.md
        1. [TODO] ZASTAVA-WEBHOOK-12-101 — Admission controller host with TLS bootstrap and Authority auth. • Prereqs: — • Current: TODO
        2. [TODO] ZASTAVA-WEBHOOK-12-102 — Query Scanner /policy/runtime, resolve digests, enforce verdicts. • Prereqs: — • Current: TODO
        3. [TODO] ZASTAVA-WEBHOOK-12-103 — Caching, fail-open/closed toggles, metrics/logging for admission decisions. • Prereqs: — • Current: TODO
  • Sprint 13 · UX & CLI Experience
    • Team: DevEx/CLI
      • Path: src/StellaOps.Cli/TASKS.md
        1. [TODO] CLI-RUNTIME-13-005 — Add runtime policy test verbs that consume /policy/runtime and display verdicts. • Prereqs: — • Current: TODO
  • Sprint 15 · Notify Foundations
    • Team: Notify Models Guild
      • Path: src/StellaOps.Notify.Models/TASKS.md
        1. [TODO] NOTIFY-MODELS-15-101 — Define core Notify DTOs, validation helpers, canonical serialization. • Prereqs: — • Current: TODO
        2. [TODO] NOTIFY-MODELS-15-102 — Publish schema docs and sample payloads for Notify. • Prereqs: — • Current: TODO
        3. [TODO] NOTIFY-MODELS-15-103 — Versioning/migration helpers for rules/templates/deliveries. • Prereqs: — • Current: TODO
    • Team: Notify Storage Guild
      • Path: src/StellaOps.Notify.Storage.Mongo/TASKS.md
        1. [TODO] NOTIFY-STORAGE-15-201 — Mongo schemas/indexes for rules, channels, deliveries, digests, locks, audit. • Prereqs: — • Current: TODO
        2. [TODO] NOTIFY-STORAGE-15-202 — Repositories with tenant scoping, soft delete, TTL, causal consistency options. • Prereqs: — • Current: TODO
        3. [TODO] NOTIFY-STORAGE-15-203 — Delivery history retention and query APIs. • Prereqs: — • Current: TODO
    • Team: Notify WebService Guild
      • Path: src/StellaOps.Notify.WebService/TASKS.md
        1. [TODO] NOTIFY-WEB-15-101 — Minimal API host with Authority enforcement and plug-in loading. • Prereqs: — • Current: TODO
        2. [TODO] NOTIFY-WEB-15-102 — Rules/channel/template CRUD with audit logging. • Prereqs: — • Current: TODO
    • Team: Scanner WebService Guild
      • Path: src/StellaOps.Scanner.WebService/TASKS.md
        1. [DONE] SCANNER-EVENTS-15-201 — Emit scanner.report.ready + scanner.scan.completed events. • Prereqs: — • Current: TODO
        2. [BLOCKED] SCANNER-EVENTS-16-301 — Redis publisher integration tests once Notify queue adapter ships. • Prereqs: NOTIFY-QUEUE-15-401 (Wave 1) • Current: BLOCKED – waiting on Notify queue abstraction and Redis adapter deliverables for end-to-end validation.
  • Sprint 16 · Scheduler Intelligence
    • Team: Scheduler ImpactIndex Guild
      • Path: src/StellaOps.Scheduler.ImpactIndex/TASKS.md
        1. [DONE (2025-10-20)] SCHED-IMPACT-16-300 — STUB ingest/query using fixtures to unblock Scheduler planning (remove by SP16 end). • Prereqs: SAMPLES-10-001 (external/completed) • Current: DOING
    • Team: Scheduler Models Guild
      • Path: src/StellaOps.Scheduler.Models/TASKS.md
        1. [DONE (2025-10-20)] SCHED-MODELS-16-103 - Versioning/migration helpers (schedule evolution, run state transitions). • Prereqs: SCHED-MODELS-16-101 (external/completed) • Current: DONE
    • Team: Scheduler Queue Guild
      • Path: src/StellaOps.Scheduler.Queue/TASKS.md
        1. [DONE (2025-10-20)] SCHED-QUEUE-16-401 - Implement queue abstraction + Redis Streams adapter (planner inputs, runner segments) with ack/lease semantics. • Prereqs: SCHED-MODELS-16-101 (external/completed) • Current: DONE
    • Team: Scheduler Storage Guild
      • Path: src/StellaOps.Scheduler.Storage.Mongo/TASKS.md
        1. [TODO] SCHED-STORAGE-16-201 — Create Mongo collections (schedules, runs, impact_cursors, locks, audit) with indexes/migrations per architecture. • Prereqs: SCHED-MODELS-16-101 (external/completed) • Current: TODO
    • Team: Scheduler WebService Guild
      • Path: src/StellaOps.Scheduler.WebService/TASKS.md
        1. [TODO] SCHED-WEB-16-101 — Bootstrap Minimal API host with Authority OpTok + DPoP, health endpoints, plug-in discovery per architecture §§1–2. • Prereqs: SCHED-MODELS-16-101 (external/completed) • Current: TODO
  • Sprint 18 · Launch Readiness
    • Team: DevOps Guild
      • Path: ops/devops/TASKS.md
        1. [TODO] DEVOPS-LAUNCH-18-100 - Finalise production environment footprint (clusters, secrets, network overlays) for full-platform go-live. • Prereqs: — • Current: TODO
        2. [TODO] DEVOPS-LAUNCH-18-900 - Collect "full implementation" sign-off from module owners and consolidate the launch readiness checklist. • Prereqs: Wave 0 completion • Current: TODO
        3. [TODO] DEVOPS-LAUNCH-18-001 - Production launch cutover rehearsal and runbook publication. • Prereqs: DEVOPS-LAUNCH-18-100, DEVOPS-LAUNCH-18-900 • Current: TODO

Wave 1 — 45 task(s) ready after Wave 0

  • Sprint 6 · Excititor Ingest & Formats
    • Team: Team Excititor Connectors – MSRC
      • Path: src/StellaOps.Excititor.Connectors.MSRC.CSAF/TASKS.md
        1. [TODO] EXCITITOR-CONN-MS-01-003 — EXCITITOR-CONN-MS-01-003 – Trust metadata & provenance hints • Prereqs: EXCITITOR-CONN-MS-01-002 (Wave 0), EXCITITOR-POLICY-01-001 (external/completed) • Current: TODO – Emit cosign/AAD issuer metadata, attach provenance details, and document policy integration.
    • Team: Team Excititor Connectors – Oracle
      • Path: src/StellaOps.Excititor.Connectors.Oracle.CSAF/TASKS.md
        1. [TODO] EXCITITOR-CONN-ORACLE-01-002 — EXCITITOR-CONN-ORACLE-01-002 – CSAF download & dedupe pipeline • Prereqs: EXCITITOR-CONN-ORACLE-01-001 (Wave 0), EXCITITOR-STORAGE-01-003 (external/completed) • Current: TODO – Fetch CSAF documents with retry/backoff, checksum validation, revision deduplication, and raw persistence.
    • Team: Team Excititor Connectors – SUSE
      • Path: src/StellaOps.Excititor.Connectors.SUSE.RancherVEXHub/TASKS.md
        1. [TODO] EXCITITOR-CONN-SUSE-01-003 — EXCITITOR-CONN-SUSE-01-003 – Trust metadata & policy hints • Prereqs: EXCITITOR-CONN-SUSE-01-002 (Wave 0), EXCITITOR-POLICY-01-001 (external/completed) • Current: TODO – Emit provider trust configuration (signers, weight overrides) and attach provenance hints for consensus engine.
    • Team: Team Excititor Connectors – Ubuntu
      • Path: src/StellaOps.Excititor.Connectors.Ubuntu.CSAF/TASKS.md
        1. [TODO] EXCITITOR-CONN-UBUNTU-01-003 — EXCITITOR-CONN-UBUNTU-01-003 – Trust metadata & provenance • Prereqs: EXCITITOR-CONN-UBUNTU-01-002 (Wave 0), EXCITITOR-POLICY-01-001 (external/completed) • Current: TODO – Emit Ubuntu signing metadata (GPG fingerprints) plus provenance hints for policy weighting and diagnostics.
    • Team: Team Excititor Worker
      • Path: src/StellaOps.Excititor.Worker/TASKS.md
        1. [TODO] EXCITITOR-WORKER-01-003 — EXCITITOR-WORKER-01-003 – Verification & cache GC loops • Prereqs: EXCITITOR-WORKER-01-001 (external/completed), EXCITITOR-ATTEST-01-003 (Wave 0), EXCITITOR-EXPORT-01-002 (external/completed) • Current: TODO – Add scheduled attestation re-verification and cache pruning routines, surfacing metrics for export reuse ratios.
  • Sprint 7 · Contextual Truth Foundations
    • Team: Team Excititor Export
      • Path: src/StellaOps.Excititor.Export/TASKS.md
        1. [TODO] EXCITITOR-EXPORT-01-006 — EXCITITOR-EXPORT-01-006 – Quiet provenance packaging • Prereqs: EXCITITOR-EXPORT-01-005 (Wave 0), POLICY-CORE-09-005 (Wave 0) • Current: TODO – Attach quietedBy statement IDs, signers, and justification codes to exports/offline bundles, mirror metadata into attested manifest, and add regression fixtures.
  • Sprint 9 · DevOps Foundations
    • Team: DevOps Guild, Scanner WebService Guild
      • Path: ops/devops/TASKS.md
        1. [DONE] DEVOPS-SCANNER-09-204 — Surface SCANNER__EVENTS__* environment variables across docker-compose (dev/stage/airgap) and Helm values, defaulting to share the Redis queue DSN. (2025-10-21) • Prereqs: SCANNER-EVENTS-15-201 (Wave 0) • Current: DONE (2025-10-21) – Compose dev/stage/airgap profiles and Helm values now expose the SCANNER__EVENTS__* toggles; docs (deploy/compose/README.md, docs/ARCHITECTURE_SCANNER.md) call out the new configuration knobs.
        2. [DONE] DEVOPS-SCANNER-09-205 — Add Notify smoke stage that tails the Redis stream and asserts scanner.report.ready/scanner.scan.completed reach Notify WebService in staging. (2025-10-21) • Prereqs: DEVOPS-SCANNER-09-204 (Wave 0) • Current: DONE (2025-10-21) – notify-smoke CI job runs the NotifySmokeCheck tool against staging Redis/Notify using configured secrets; deploy docs enumerate required configuration.
  • Sprint 10 · Backlog
    • Team: TBD
      • Path: src/StellaOps.Scanner.Analyzers.Lang.DotNet/TASKS.md
        1. [TODO] SCANNER-ANALYZERS-LANG-10-305A — Parse *.deps.json + runtimeconfig.json, build RID graph, and normalize to pkg:nuget components. • Prereqs: SCANNER-ANALYZERS-LANG-10-307 (Wave 0) • Current: TODO
      • Path: src/StellaOps.Scanner.Analyzers.Lang.Go/TASKS.md
        1. [TODO] SCANNER-ANALYZERS-LANG-10-304A — Parse Go build info blob (runtime/debug format) and .note.go.buildid; map to module/version and evidence. • Prereqs: SCANNER-ANALYZERS-LANG-10-307 (Wave 0) • Current: TODO
      • Path: src/StellaOps.Scanner.Analyzers.Lang.Node/TASKS.md
        1. [TODO] SCANNER-ANALYZERS-LANG-10-307N — Integrate shared helpers for license/licence evidence, canonical JSON serialization, and usage flag propagation. • Prereqs: SCANNER-ANALYZERS-LANG-10-302C (Wave 0) • Current: TODO
      • Path: src/StellaOps.Scanner.Analyzers.Lang.Python/TASKS.md
        1. [TODO] SCANNER-ANALYZERS-LANG-10-303A — STREAM-based parser for *.dist-info (METADATA, WHEEL, entry_points.txt) with normalization + evidence capture. • Prereqs: SCANNER-ANALYZERS-LANG-10-307 (Wave 0) • Current: TODO
      • Path: src/StellaOps.Scanner.Analyzers.Lang.Rust/TASKS.md
        1. [TODO] SCANNER-ANALYZERS-LANG-10-306A — Parse Cargo metadata (Cargo.lock, .fingerprint, .metadata) and map crates to components with evidence. • Prereqs: SCANNER-ANALYZERS-LANG-10-307 (Wave 0) • Current: TODO
  • Sprint 10 · Benchmarks
    • Team: Bench Guild, Language Analyzer Guild
      • Path: bench/TASKS.md
        1. [DONE] BENCH-SCANNER-10-002 — Wire real language analyzers into bench harness & refresh baselines post-implementation. (2025-10-21) • Prereqs: SCANNER-ANALYZERS-LANG-10-301 (Wave 0) • Current: DONE (2025-10-21) – Harness now invokes language analyzers via StellaOps.Bench.ScannerAnalyzers, baseline refreshed against samples/runtime fixtures, and README/config updated for the new flow.
  • Sprint 10 · Scanner Analyzers & SBOM
    • Team: Emit Guild
      • Path: src/StellaOps.Scanner.Emit/TASKS.md
        1. [TODO] SCANNER-EMIT-10-607 — Embed scoring inputs, confidence band, and quietedBy provenance into CycloneDX 1.6 and DSSE predicates; verify deterministic serialization. • Prereqs: SCANNER-EMIT-10-604 (Wave 0), POLICY-CORE-09-005 (Wave 0) • Current: TODO
    • Team: Language Analyzer Guild
      • Path: src/StellaOps.Scanner.Analyzers.Lang/TASKS.md
        1. [DOING] SCANNER-ANALYZERS-LANG-10-309 — Package language analyzers as restart-time plug-ins (manifest + host registration). • Prereqs: SCANNER-ANALYZERS-LANG-10-301 (Wave 0) • Current: DOING (2025-10-19)
        2. [TODO] SCANNER-ANALYZERS-LANG-10-306 — Rust analyzer detecting crate provenance or falling back to bin:{sha256}. • Prereqs: SCANNER-ANALYZERS-LANG-10-307 (Wave 0) • Current: TODO
        3. [DOING] SCANNER-ANALYZERS-LANG-10-302 — Node analyzer resolving workspaces/symlinks into pkg:npm identities. • Prereqs: SCANNER-ANALYZERS-LANG-10-307 (Wave 0) • Current: DOING (2025-10-19)
        4. [TODO] SCANNER-ANALYZERS-LANG-10-304 — Go analyzer leveraging buildinfo for pkg:golang components. • Prereqs: SCANNER-ANALYZERS-LANG-10-307 (Wave 0) • Current: TODO
        5. [TODO] SCANNER-ANALYZERS-LANG-10-305 — .NET analyzer parsing *.deps.json, assembly metadata, and RID variants. • Prereqs: SCANNER-ANALYZERS-LANG-10-307 (Wave 0) • Current: TODO
        6. [TODO] SCANNER-ANALYZERS-LANG-10-303 — Python analyzer consuming *.dist-info metadata and RECORD hashes. • Prereqs: SCANNER-ANALYZERS-LANG-10-307 (Wave 0) • Current: TODO
  • Sprint 11 · UI Integration
    • Team: UI Guild
      • Path: src/StellaOps.UI/TASKS.md
        1. [TODO] UI-ATTEST-11-005 — Attestation visibility (Rekor id, status) on Scan Detail. • Prereqs: SIGNER-API-11-101 (Wave 0), ATTESTOR-API-11-201 (Wave 0) • Current: TODO
  • Sprint 12 · Runtime Guardrails
    • Team: Scanner WebService Guild
      • Path: src/StellaOps.Scanner.WebService/TASKS.md
        1. [DONE] SCANNER-RUNTIME-12-301 — Implement /runtime/events ingestion endpoint with validation, batching, and storage hooks per Zastava contract. (2025-10-20) • Prereqs: ZASTAVA-CORE-12-201 (Wave 0) • Current: DONE (2025-10-20) — Mongo persistence + rate limiting shipped; observer fixtures can replay batches end-to-end.
        2. [DOING] SCANNER-RUNTIME-12-302 — Implement /policy/runtime endpoint joining SBOM baseline + policy verdict, returning admission guidance. • Prereqs: SCANNER-RUNTIME-12-301 (Wave 1), ZASTAVA-CORE-12-201 (Wave 0) • Current: DOING (2025-10-20) — Locking response schema with Policy/CLI guilds, wiring determinism tests.
        3. [TODO] SCANNER-RUNTIME-12-303 — Align runtime verdicts with canonical policy evaluation (Feedser/Vexer inputs) once upstream dependencies land.
        4. [TODO] SCANNER-RUNTIME-12-304 — Surface attestation/Rekor verification results via Authority/Attestor integration.
        5. [TODO] SCANNER-RUNTIME-12-305 — Finalize shared fixtures and CI automation with Zastava + CLI teams for runtime APIs.
    • Team: Zastava Observer Guild
      • Path: src/StellaOps.Zastava.Observer/TASKS.md
        1. [TODO] ZASTAVA-OBS-12-001 — Build container lifecycle watcher that tails CRI (containerd/cri-o/docker) events and emits deterministic runtime records with buffering + backoff. • Prereqs: ZASTAVA-CORE-12-201 (Wave 0) • Current: TODO
  • Sprint 13 · UX & CLI Experience
    • Team: DevEx/CLI, QA Guild
      • Path: src/StellaOps.Cli/TASKS.md
        1. [TODO] CLI-RUNTIME-13-009 — CLI-RUNTIME-13-009 – Runtime policy smoke fixture • Prereqs: CLI-RUNTIME-13-005 (Wave 0) • Current: TODO – Build Spectre test harness exercising runtime policy test against a stubbed backend to lock output shape (table + --json) and guard regressions. Integrate into dotnet test suite.
    • Team: UI Guild
      • Path: src/StellaOps.UI/TASKS.md
        1. [TODO] UI-VEX-13-003 — Implement VEX explorer + policy editor with preview integration. • Prereqs: EXCITITOR-CORE-02-001 (external/completed), EXCITITOR-EXPORT-01-005 (Wave 0) • Current: TODO
        2. [TODO] UI-POLICY-13-007 — Surface policy confidence metadata (band, age, quiet provenance) on preview and report views. • Prereqs: POLICY-CORE-09-006 (Wave 0), SCANNER-WEB-09-103 (external/completed) • Current: TODO
        3. [TODO] UI-ADMIN-13-004 — Deliver admin area (tenants/clients/quotas/licensing) with RBAC + audit hooks. • Prereqs: AUTH-MTLS-11-002 (Wave 0) • Current: TODO
        4. [TODO] UI-AUTH-13-001 — Integrate Authority OIDC + DPoP flows with session management. • Prereqs: AUTH-DPOP-11-001 (Wave 0), AUTH-MTLS-11-002 (Wave 0) • Current: TODO
        5. [TODO] UI-SCANS-13-002 — Build scans module (list/detail/SBOM/diff/attestation) with performance + accessibility targets. • Prereqs: SCANNER-WEB-09-102 (external/completed), SIGNER-API-11-101 (Wave 0) • Current: TODO
        6. [DOING] UI-NOTIFY-13-006 — Notify panel: channels/rules CRUD, deliveries view, test send integration. • Prereqs: NOTIFY-WEB-15-101 (Wave 0) • Current: TODO
        7. [TODO] UI-SCHED-13-005 — Scheduler panel: schedules CRUD, run history, dry-run preview using API/mocks. • Prereqs: SCHED-WEB-16-101 (Wave 0) • Current: TODO
  • Sprint 14 · Release & Offline Ops
    • Team: DevOps Guild
      • Path: ops/devops/TASKS.md
        1. [TODO] DEVOPS-REL-14-001 — Deterministic build/release pipeline with SBOM/provenance, signing, manifest generation. • Prereqs: SIGNER-API-11-101 (Wave 0), ATTESTOR-API-11-201 (Wave 0) • Current: TODO
    • Team: Licensing Guild
      • Path: ops/licensing/TASKS.md
        1. [TODO] DEVOPS-LIC-14-004 — Implement registry token service tied to Authority (DPoP/mTLS), plan gating, revocation handling, and monitoring per architecture. • Prereqs: AUTH-MTLS-11-002 (Wave 0) • Current: TODO
  • Sprint 15 · Notify Foundations
    • Team: Notify Engine Guild
      • Path: src/StellaOps.Notify.Engine/TASKS.md
        1. [TODO] NOTIFY-ENGINE-15-301 — Rules evaluation core: tenant/kind filters, severity/delta gates, VEX gating, throttling, idempotency key generation. • Prereqs: NOTIFY-MODELS-15-101 (Wave 0) • Current: TODO
    • Team: Notify Queue Guild
      • Path: src/StellaOps.Notify.Queue/TASKS.md
        1. [TODO] NOTIFY-QUEUE-15-401 — Build queue abstraction + Redis Streams adapter with ack/claim APIs, idempotency tokens, serialization contracts. • Prereqs: NOTIFY-MODELS-15-101 (Wave 0) • Current: TODO
    • Team: Notify WebService Guild
      • Path: src/StellaOps.Notify.WebService/TASKS.md
        1. [DONE] NOTIFY-WEB-15-103 — Delivery history + test-send endpoints with rate limits. • Prereqs: NOTIFY-WEB-15-102 (Wave 0) • Current: TODO
  • Sprint 16 · Scheduler Intelligence
    • Team: Scheduler ImpactIndex Guild
      • Path: src/StellaOps.Scheduler.ImpactIndex/TASKS.md
        1. [TODO] SCHED-IMPACT-16-301 — Implement ingestion of per-image BOM-Index sidecars into roaring bitmap store (contains/usedBy). • Prereqs: SCANNER-EMIT-10-605 (Wave 0) • Current: TODO
    • Team: Scheduler Queue Guild
      • Path: src/StellaOps.Scheduler.Queue/TASKS.md
        1. [DONE (2025-10-20)] SCHED-QUEUE-16-402 - Add NATS JetStream adapter with configuration binding, health probes, failover. • Prereqs: SCHED-QUEUE-16-401 (Wave 0) • Current: DONE
        2. [DONE (2025-10-20)] SCHED-QUEUE-16-403 - Dead-letter handling + metrics (queue depth, retry counts), configuration toggles. • Prereqs: SCHED-QUEUE-16-401 (Wave 0) • Current: DONE
    • Team: Scheduler Storage Guild
      • Path: src/StellaOps.Scheduler.Storage.Mongo/TASKS.md
        1. [TODO] SCHED-STORAGE-16-203 — Audit/logging pipeline + run stats materialized views for UI. • Prereqs: SCHED-STORAGE-16-201 (Wave 0) • Current: TODO
        2. [TODO] SCHED-STORAGE-16-202 — Implement repositories/services with tenant scoping, soft delete, TTL for completed runs, and causal consistency options. • Prereqs: SCHED-STORAGE-16-201 (Wave 0) • Current: TODO
    • Team: Scheduler WebService Guild
      • Path: src/StellaOps.Scheduler.WebService/TASKS.md
        1. [TODO] SCHED-WEB-16-104 — Webhook endpoints for Feedser/Vexer exports with mTLS/HMAC validation and rate limiting. • Prereqs: SCHED-QUEUE-16-401 (Wave 0), SCHED-STORAGE-16-201 (Wave 0) • Current: TODO
        2. [TODO] SCHED-WEB-16-102 — Implement schedules CRUD (tenant-scoped) with cron validation, pause/resume, audit logging. • Prereqs: SCHED-WEB-16-101 (Wave 0) • Current: TODO
    • Team: Scheduler Worker Guild
      • Path: src/StellaOps.Scheduler.Worker/TASKS.md
        1. [TODO] SCHED-WORKER-16-201 — Planner loop (cron + event triggers) with lease management, fairness, and rate limiting (§6). • Prereqs: SCHED-QUEUE-16-401 (Wave 0) • Current: TODO
  • Sprint 17 · Symbol Intelligence & Forensics
    • Team: Emit Guild
      • Path: src/StellaOps.Scanner.Emit/TASKS.md
        1. [TODO] SCANNER-EMIT-17-701 — Record GNU build-id for ELF components and surface it in inventory/usage SBOM plus diff payloads with deterministic ordering. • Prereqs: SCANNER-EMIT-10-602 (Wave 0) • Current: TODO

Wave 2 — 29 task(s) ready after Wave 1

  • Sprint 6 · Excititor Ingest & Formats
    • Team: Team Excititor Connectors – Oracle
      • Path: src/StellaOps.Excititor.Connectors.Oracle.CSAF/TASKS.md
        1. [TODO] EXCITITOR-CONN-ORACLE-01-003 — EXCITITOR-CONN-ORACLE-01-003 – Trust metadata + provenance • Prereqs: EXCITITOR-CONN-ORACLE-01-002 (Wave 1), EXCITITOR-POLICY-01-001 (external/completed) • Current: TODO – Emit Oracle signing metadata (PGP/cosign) and provenance hints for consensus weighting.
  • Sprint 7 · Contextual Truth Foundations
    • Team: Team Excititor Export
      • Path: src/StellaOps.Excititor.Export/TASKS.md
        1. [TODO] EXCITITOR-EXPORT-01-007 — EXCITITOR-EXPORT-01-007 – Mirror bundle + domain manifest • Prereqs: EXCITITOR-EXPORT-01-006 (Wave 1) • Current: TODO – Create per-domain mirror bundles with consensus/score artifacts, publish signed index for downstream Excititor sync, and ensure deterministic digests + fixtures.
  • Sprint 8 · Mirror Distribution
    • Team: DevOps Guild
      • Path: ops/devops/TASKS.md
        1. [DONE] DEVOPS-MIRROR-08-001 — Stand up managed mirror profiles for *.stella-ops.org (Concelier/Excititor), including Helm/Compose overlays, multi-tenant secrets, CDN caching, and sync documentation. • Prereqs: DEVOPS-REL-14-001 (Wave 1) • Current: DONE (2025-10-19)
  • Sprint 9 · DevOps Foundations
    • Team: DevOps Guild, Notify Guild
      • Path: ops/devops/TASKS.md
        1. [TODO] DEVOPS-SCANNER-09-205 — Add Notify smoke stage that tails the Redis stream and asserts scanner.report.ready/scanner.scan.completed reach Notify WebService in staging. • Prereqs: DEVOPS-SCANNER-09-204 (Wave 1) • Current: TODO
  • Sprint 10 · Backlog
    • Team: TBD
      • Path: src/StellaOps.Scanner.Analyzers.Lang.DotNet/TASKS.md
        1. [TODO] SCANNER-ANALYZERS-LANG-10-305B — Extract assembly metadata (strong name, file/product info) and optional Authenticode details when offline cert bundle provided. • Prereqs: SCANNER-ANALYZERS-LANG-10-305A (Wave 1) • Current: TODO
      • Path: src/StellaOps.Scanner.Analyzers.Lang.Go/TASKS.md
        1. [TODO] SCANNER-ANALYZERS-LANG-10-304B — Implement DWARF-lite reader for VCS metadata + dirty flag; add cache to avoid re-reading identical binaries. • Prereqs: SCANNER-ANALYZERS-LANG-10-304A (Wave 1) • Current: TODO
      • Path: src/StellaOps.Scanner.Analyzers.Lang.Node/TASKS.md
        1. [TODO] SCANNER-ANALYZERS-LANG-10-308N — Author determinism harness + fixtures for Node analyzer; add benchmark suite. • Prereqs: SCANNER-ANALYZERS-LANG-10-307N (Wave 1) • Current: TODO
      • Path: src/StellaOps.Scanner.Analyzers.Lang.Python/TASKS.md
        1. [TODO] SCANNER-ANALYZERS-LANG-10-303B — RECORD hash verifier with chunked hashing, Zip64 support, and mismatch diagnostics. • Prereqs: SCANNER-ANALYZERS-LANG-10-303A (Wave 1) • Current: TODO
      • Path: src/StellaOps.Scanner.Analyzers.Lang.Rust/TASKS.md
        1. [TODO] SCANNER-ANALYZERS-LANG-10-306B — Implement heuristic classifier using ELF section names, symbol mangling, and .comment data for stripped binaries. • Prereqs: SCANNER-ANALYZERS-LANG-10-306A (Wave 1) • Current: TODO
  • Sprint 10 · DevOps Perf
    • Team: DevOps Guild
      • Path: ops/devops/TASKS.md
        1. [TODO] DEVOPS-PERF-10-002 — Publish analyzer bench metrics to Grafana/perf workbook and alarm on ≥20 % regressions. • Prereqs: BENCH-SCANNER-10-002 (Wave 1) • Current: TODO
  • Sprint 10 · Samples
    • Team: Samples Guild, Policy Guild
      • Path: samples/TASKS.md
        1. [TODO] SAMPLES-13-004 — Add policy preview/report fixtures showing confidence bands and unknown-age tags. • Prereqs: POLICY-CORE-09-006 (Wave 0), UI-POLICY-13-007 (Wave 1) • Current: TODO
  • Sprint 12 · Runtime Guardrails
    • Team: Scanner WebService Guild
      • Path: src/StellaOps.Scanner.WebService/TASKS.md
        1. [TODO] SCANNER-RUNTIME-12-302 — Implement /policy/runtime endpoint joining SBOM baseline + policy verdict, returning admission guidance. Coordinate with CLI (CLI-RUNTIME-13-008) before GA to lock response field names/metadata. • Prereqs: SCANNER-RUNTIME-12-301 (Wave 1), ZASTAVA-CORE-12-201 (Wave 0) • Current: TODO
    • Team: Zastava Observer Guild
      • Path: src/StellaOps.Zastava.Observer/TASKS.md
        1. [TODO] ZASTAVA-OBS-12-002 — Capture entrypoint traces and loaded libraries, hashing binaries and correlating to SBOM baseline per architecture sections 2.1 and 10. • Prereqs: ZASTAVA-OBS-12-001 (Wave 1) • Current: TODO
  • Sprint 14 · Release & Offline Ops
    • Team: Deployment Guild
      • Path: ops/deployment/TASKS.md
        1. [TODO] DEVOPS-OPS-14-003 — Document and script upgrade/rollback flows, channel management, and compatibility matrices per architecture. • Prereqs: DEVOPS-REL-14-001 (Wave 1) • Current: TODO
    • Team: Offline Kit Guild
      • Path: ops/offline-kit/TASKS.md
        1. [TODO] DEVOPS-OFFLINE-14-002 — Build offline kit packaging workflow (artifact bundling, manifest generation, signature verification). • Prereqs: DEVOPS-REL-14-001 (Wave 1) • Current: TODO
  • Sprint 15 · Benchmarks
    • Team: Bench Guild, Notify Team
      • Path: bench/TASKS.md
        1. [TODO] BENCH-NOTIFY-15-001 — Notify dispatch throughput bench (vary rule density) with results CSV. • Prereqs: NOTIFY-ENGINE-15-301 (Wave 1) • Current: TODO
  • Sprint 15 · Notify Foundations
    • Team: Notify Engine Guild
      • Path: src/StellaOps.Notify.Engine/TASKS.md
        1. [TODO] NOTIFY-ENGINE-15-302 — Action planner + digest coalescer with window management and dedupe per architecture §4. • Prereqs: NOTIFY-ENGINE-15-301 (Wave 1) • Current: TODO
    • Team: Notify Queue Guild
      • Path: src/StellaOps.Notify.Queue/TASKS.md
        1. [TODO] NOTIFY-QUEUE-15-403 — Delivery queue for channel actions with retry schedules, poison queues, and metrics instrumentation. • Prereqs: NOTIFY-QUEUE-15-401 (Wave 1) • Current: TODO
        2. [TODO] NOTIFY-QUEUE-15-402 — Add NATS JetStream adapter with configuration binding, health probes, failover. • Prereqs: NOTIFY-QUEUE-15-401 (Wave 1) • Current: TODO
    • Team: Notify WebService Guild
      • Path: src/StellaOps.Notify.WebService/TASKS.md
        1. [TODO] NOTIFY-WEB-15-104 — Configuration binding for Mongo/queue/secrets; startup diagnostics. • Prereqs: NOTIFY-STORAGE-15-201 (Wave 0), NOTIFY-QUEUE-15-401 (Wave 1) • Current: TODO
    • Team: Notify Worker Guild
      • Path: src/StellaOps.Notify.Worker/TASKS.md
        1. [TODO] NOTIFY-WORKER-15-201 — Implement bus subscription + leasing loop with correlation IDs, backoff, dead-letter handling (§1–§5). • Prereqs: NOTIFY-QUEUE-15-401 (Wave 1) • Current: TODO
        2. [TODO] NOTIFY-WORKER-15-202 — Wire rules evaluation pipeline (tenant scoping, filters, throttles, digests, idempotency) with deterministic decisions. • Prereqs: NOTIFY-ENGINE-15-301 (Wave 1) • Current: TODO
  • Sprint 16 · Benchmarks
    • Team: Bench Guild, Scheduler Team
      • Path: bench/TASKS.md
        1. [TODO] BENCH-IMPACT-16-001 — ImpactIndex throughput bench (resolve 10k productKeys) + RAM profile. • Prereqs: SCHED-IMPACT-16-301 (Wave 1) • Current: TODO
  • Sprint 16 · Scheduler Intelligence
    • Team: Scheduler ImpactIndex Guild
      • Path: src/StellaOps.Scheduler.ImpactIndex/TASKS.md
        1. [TODO] SCHED-IMPACT-16-303 — Snapshot/compaction + invalidation for removed images; persistence to RocksDB/Redis per architecture. • Prereqs: SCHED-IMPACT-16-301 (Wave 1) • Current: TODO
        2. [TODO] SCHED-IMPACT-16-302 — Provide query APIs (ResolveByPurls, ResolveByVulns, ResolveAll, selectors) with tenant/namespace filters. • Prereqs: SCHED-IMPACT-16-301 (Wave 1) • Current: TODO
    • Team: Scheduler WebService Guild
      • Path: src/StellaOps.Scheduler.WebService/TASKS.md
        1. [TODO] SCHED-WEB-16-103 — Runs API (list/detail/cancel), ad-hoc run POST, and impact preview endpoints. • Prereqs: SCHED-WEB-16-102 (Wave 1) • Current: TODO
    • Team: Scheduler Worker Guild
      • Path: src/StellaOps.Scheduler.Worker/TASKS.md
        1. [TODO] SCHED-WORKER-16-202 — Wire ImpactIndex targeting (ResolveByPurls/vulns), dedupe, shard planning. • Prereqs: SCHED-IMPACT-16-301 (Wave 1) • Current: TODO
        2. [TODO] SCHED-WORKER-16-205 — Metrics/telemetry: run stats, queue depth, planner latency, delta counts. • Prereqs: SCHED-WORKER-16-201 (Wave 1) • Current: TODO
  • Sprint 17 · Symbol Intelligence & Forensics
    • Team: DevOps Guild
      • Path: ops/devops/TASKS.md
        1. [TODO] DEVOPS-REL-17-002 — Persist stripped-debug artifacts organised by GNU build-id and bundle them into release/offline kits with checksum manifests. • Prereqs: DEVOPS-REL-14-001 (Wave 1), SCANNER-EMIT-17-701 (Wave 1) • Current: TODO

Wave 3 — 14 task(s) ready after Wave 2

  • Sprint 7 · Contextual Truth Foundations
    • Team: Excititor Connectors – Stella
      • Path: src/StellaOps.Excititor.Connectors.StellaOpsMirror/TASKS.md
        1. [TODO] EXCITITOR-CONN-STELLA-07-001 — Implement mirror fetch client consuming https://<domain>.stella-ops.org/excititor/exports/index.json, validating signatures/digests, storing raw consensus bundles with provenance. • Prereqs: EXCITITOR-EXPORT-01-007 (Wave 2) • Current: TODO
  • Sprint 10 · Backlog
    • Team: TBD
      • Path: src/StellaOps.Scanner.Analyzers.Lang.DotNet/TASKS.md
        1. [TODO] SCANNER-ANALYZERS-LANG-10-305C — Handle self-contained apps and native assets; merge with EntryTrace usage hints. • Prereqs: SCANNER-ANALYZERS-LANG-10-305B (Wave 2) • Current: TODO
      • Path: src/StellaOps.Scanner.Analyzers.Lang.Go/TASKS.md
        1. [TODO] SCANNER-ANALYZERS-LANG-10-304C — Fallback heuristics for stripped binaries with deterministic bin:{sha256} labeling and quiet provenance. • Prereqs: SCANNER-ANALYZERS-LANG-10-304B (Wave 2) • Current: TODO
      • Path: src/StellaOps.Scanner.Analyzers.Lang.Node/TASKS.md
        1. [TODO] SCANNER-ANALYZERS-LANG-10-309N — Package Node analyzer as restart-time plug-in (manifest, DI registration, Offline Kit notes). • Prereqs: SCANNER-ANALYZERS-LANG-10-308N (Wave 2) • Current: TODO
      • Path: src/StellaOps.Scanner.Analyzers.Lang.Python/TASKS.md
        1. [TODO] SCANNER-ANALYZERS-LANG-10-303C — Editable install + pip cache detection; integrate EntryTrace hints for runtime usage flags. • Prereqs: SCANNER-ANALYZERS-LANG-10-303B (Wave 2) • Current: TODO
      • Path: src/StellaOps.Scanner.Analyzers.Lang.Rust/TASKS.md
        1. [TODO] SCANNER-ANALYZERS-LANG-10-306C — Integrate binary hash fallback (bin:{sha256}) and tie into shared quiet provenance helpers. • Prereqs: SCANNER-ANALYZERS-LANG-10-306B (Wave 2) • Current: TODO
  • Sprint 12 · Runtime Guardrails
    • Team: Zastava Observer Guild
      • Path: src/StellaOps.Zastava.Observer/TASKS.md
        1. [TODO] ZASTAVA-OBS-12-003 — Implement runtime posture checks (signature/SBOM/attestation presence) with offline caching and warning surfaces. • Prereqs: ZASTAVA-OBS-12-002 (Wave 2) • Current: TODO
        2. [TODO] ZASTAVA-OBS-12-004 — Batch /runtime/events submissions with disk-backed buffer, rate limits, and deterministic envelopes. • Prereqs: ZASTAVA-OBS-12-002 (Wave 2) • Current: TODO
  • Sprint 13 · UX & CLI Experience
    • Team: DevEx/CLI
      • Path: src/StellaOps.Cli/TASKS.md
        1. [DONE] CLI-OFFLINE-13-006 — CLI-OFFLINE-13-006 – Offline kit workflows • Prereqs: DEVOPS-OFFLINE-14-002 (Wave 2) • Current: DONE (2025-10-21) – Delivered offline kit pull/import/status commands with resumable downloads, digest/metadata validation, CLI metrics + docs, and regression coverage (dotnet test src/StellaOps.Cli.Tests).
    • Team: DevEx/CLI, Scanner WebService Guild
      • Path: src/StellaOps.Cli/TASKS.md
        1. [TODO] CLI-RUNTIME-13-008 — CLI-RUNTIME-13-008 – Runtime policy contract sync • Prereqs: SCANNER-RUNTIME-12-302 (Wave 2) • Current: TODO – Once /api/v1/scanner/policy/runtime exits TODO, verify CLI output against final schema (field names, metadata) and update formatter/tests if the contract moves. Capture joint review notes in docs/09 and link Scanner task sign-off.
  • Sprint 15 · Notify Foundations
    • Team: Notify Engine Guild
      • Path: src/StellaOps.Notify.Engine/TASKS.md
        1. [TODO] NOTIFY-ENGINE-15-303 — Template rendering engine (Slack, Teams, Email, Webhook) with helpers and i18n support. • Prereqs: NOTIFY-ENGINE-15-302 (Wave 2) • Current: TODO
    • Team: Notify Worker Guild
      • Path: src/StellaOps.Notify.Worker/TASKS.md
        1. [TODO] NOTIFY-WORKER-15-203 — Channel dispatch orchestration: invoke connectors, manage retries/jitter, record delivery outcomes. • Prereqs: NOTIFY-ENGINE-15-302 (Wave 2) • Current: TODO
  • Sprint 16 · Scheduler Intelligence
    • Team: Scheduler Worker Guild
      • Path: src/StellaOps.Scheduler.Worker/TASKS.md
        1. [TODO] SCHED-WORKER-16-203 — Runner execution: call Scanner /reports (analysis-only) or /scans when configured; collect deltas; handle retries. • Prereqs: SCHED-WORKER-16-202 (Wave 2) • Current: TODO
  • Sprint 17 · Symbol Intelligence & Forensics
    • Team: Zastava Observer Guild
      • Path: src/StellaOps.Zastava.Observer/TASKS.md
        1. [TODO] ZASTAVA-OBS-17-005 — Collect GNU build-id for ELF processes and attach it to emitted runtime events to enable symbol lookup + debug-store correlation. • Prereqs: ZASTAVA-OBS-12-002 (Wave 2) • Current: TODO

Wave 4 — 15 task(s) ready after Wave 3

  • Sprint 7 · Contextual Truth Foundations
    • Team: Excititor Connectors – Stella
      • Path: src/StellaOps.Excititor.Connectors.StellaOpsMirror/TASKS.md
        1. [TODO] EXCITITOR-CONN-STELLA-07-002 — Normalize mirror bundles into VexClaim sets referencing original provider metadata and mirror provenance. • Prereqs: EXCITITOR-CONN-STELLA-07-001 (Wave 3) • Current: TODO
  • Sprint 9 · Policy Foundations
    • Team: Policy Guild, Scanner WebService Guild
      • Path: src/StellaOps.Policy/TASKS.md
        1. [TODO] POLICY-RUNTIME-17-201 — Define runtime reachability feed contract and alignment plan for SCANNER-RUNTIME-17-401 once Zastava endpoints land; document policy expectations for reachability tags. • Prereqs: ZASTAVA-OBS-17-005 (Wave 3) • Current: TODO
  • Sprint 10 · Backlog
    • Team: TBD
      • Path: src/StellaOps.Scanner.Analyzers.Lang.DotNet/TASKS.md
        1. [TODO] SCANNER-ANALYZERS-LANG-10-307D — Integrate shared helpers (license mapping, quiet provenance) and concurrency-safe caches. • Prereqs: SCANNER-ANALYZERS-LANG-10-305C (Wave 3) • Current: TODO
      • Path: src/StellaOps.Scanner.Analyzers.Lang.Go/TASKS.md
        1. [TODO] SCANNER-ANALYZERS-LANG-10-307G — Wire shared helpers (license mapping, usage flags) and ensure concurrency-safe buffer reuse. • Prereqs: SCANNER-ANALYZERS-LANG-10-304C (Wave 3) • Current: TODO
      • Path: src/StellaOps.Scanner.Analyzers.Lang.Python/TASKS.md
        1. [TODO] SCANNER-ANALYZERS-LANG-10-307P — Shared helper integration (license metadata, quiet provenance, component merging). • Prereqs: SCANNER-ANALYZERS-LANG-10-303C (Wave 3) • Current: TODO
      • Path: src/StellaOps.Scanner.Analyzers.Lang.Rust/TASKS.md
        1. [TODO] SCANNER-ANALYZERS-LANG-10-307R — Finalize shared helper usage (license, usage flags) and concurrency-safe caches. • Prereqs: SCANNER-ANALYZERS-LANG-10-306C (Wave 3) • Current: TODO
  • Sprint 13 · UX & CLI Experience
    • Team: DevEx/CLI
      • Path: src/StellaOps.Cli/TASKS.md
        1. [TODO] CLI-PLUGIN-13-007 — CLI-PLUGIN-13-007 – Plugin packaging • Prereqs: CLI-RUNTIME-13-005 (Wave 0), CLI-OFFLINE-13-006 (Wave 3) • Current: TODO – Package non-core verbs as restart-time plug-ins (manifest + loader updates, tests ensuring no hot reload).
  • Sprint 15 · Notify Foundations
    • Team: Notify Connectors Guild
      • Path: src/StellaOps.Notify.Connectors.Email/TASKS.md
        1. [TODO] NOTIFY-CONN-EMAIL-15-701 — Implement SMTP connector with STARTTLS/implicit TLS support, HTML+text rendering, attachment policy enforcement. • Prereqs: NOTIFY-ENGINE-15-303 (Wave 3) • Current: TODO
      • Path: src/StellaOps.Notify.Connectors.Slack/TASKS.md
        1. [TODO] NOTIFY-CONN-SLACK-15-501 — Implement Slack connector with bot token auth, message rendering (blocks), rate limit handling, retries/backoff. • Prereqs: NOTIFY-ENGINE-15-303 (Wave 3) • Current: TODO
      • Path: src/StellaOps.Notify.Connectors.Teams/TASKS.md
        1. [TODO] NOTIFY-CONN-TEAMS-15-601 — Implement Teams connector using Adaptive Cards 1.5, handle webhook auth, size limits, retries. • Prereqs: NOTIFY-ENGINE-15-303 (Wave 3) • Current: TODO
      • Path: src/StellaOps.Notify.Connectors.Webhook/TASKS.md
        1. [TODO] NOTIFY-CONN-WEBHOOK-15-801 — Implement webhook connector: JSON payload, signature (HMAC/Ed25519), retries/backoff, status code handling. • Prereqs: NOTIFY-ENGINE-15-303 (Wave 3) • Current: TODO
    • Team: Notify Engine Guild
      • Path: src/StellaOps.Notify.Engine/TASKS.md
        1. [TODO] NOTIFY-ENGINE-15-304 — Test-send sandbox + preview utilities for WebService. • Prereqs: NOTIFY-ENGINE-15-303 (Wave 3) • Current: TODO
    • Team: Notify Worker Guild
      • Path: src/StellaOps.Notify.Worker/TASKS.md
        1. [TODO] NOTIFY-WORKER-15-204 — Metrics/telemetry: notify.sent_total, notify.dropped_total, latency histograms, tracing integration. • Prereqs: NOTIFY-WORKER-15-203 (Wave 3) • Current: TODO
  • Sprint 16 · Scheduler Intelligence
    • Team: Scheduler Worker Guild
      • Path: src/StellaOps.Scheduler.Worker/TASKS.md
        1. [TODO] SCHED-WORKER-16-204 — Emit events (scheduler.rescan.delta, scanner.report.ready) for Notify/UI with summaries. • Prereqs: SCHED-WORKER-16-203 (Wave 3) • Current: TODO
  • Sprint 17 · Symbol Intelligence & Forensics
    • Team: Docs Guild
      • Path: docs/TASKS.md
        1. [TODO] DOCS-RUNTIME-17-004 — Document build-id workflows: SBOM exposure, runtime event payloads, debug-store layout, and operator guidance for symbol retrieval. • Prereqs: SCANNER-EMIT-17-701 (Wave 1), ZASTAVA-OBS-17-005 (Wave 3), DEVOPS-REL-17-002 (Wave 2) • Current: TODO

Wave 5 — 10 task(s) ready after Wave 4

  • Sprint 7 · Contextual Truth Foundations
    • Team: Excititor Connectors – Stella
      • Path: src/StellaOps.Excititor.Connectors.StellaOpsMirror/TASKS.md
        1. [TODO] EXCITITOR-CONN-STELLA-07-003 — Implement incremental cursor handling per-export digest, support resume, and document configuration for downstream Excititor mirrors. • Prereqs: EXCITITOR-CONN-STELLA-07-002 (Wave 4) • Current: TODO
  • Sprint 10 · Backlog
    • Team: TBD
      • Path: src/StellaOps.Scanner.Analyzers.Lang.DotNet/TASKS.md
        1. [TODO] SCANNER-ANALYZERS-LANG-10-308D — Determinism fixtures + benchmark harness; compare to competitor scanners for accuracy/perf. • Prereqs: SCANNER-ANALYZERS-LANG-10-307D (Wave 4) • Current: TODO
      • Path: src/StellaOps.Scanner.Analyzers.Lang.Go/TASKS.md
        1. [TODO] SCANNER-ANALYZERS-LANG-10-308G — Determinism fixtures + benchmark harness (Vs competitor). • Prereqs: SCANNER-ANALYZERS-LANG-10-307G (Wave 4) • Current: TODO
      • Path: src/StellaOps.Scanner.Analyzers.Lang.Python/TASKS.md
        1. [TODO] SCANNER-ANALYZERS-LANG-10-308P — Golden fixtures + determinism harness for Python analyzer; add benchmark and hash throughput reporting. • Prereqs: SCANNER-ANALYZERS-LANG-10-307P (Wave 4) • Current: TODO
      • Path: src/StellaOps.Scanner.Analyzers.Lang.Rust/TASKS.md
        1. [TODO] SCANNER-ANALYZERS-LANG-10-308R — Determinism fixtures + performance benchmarks; compare against competitor heuristic coverage. • Prereqs: SCANNER-ANALYZERS-LANG-10-307R (Wave 4) • Current: TODO
  • Sprint 15 · Notify Foundations
    • Team: Notify Connectors Guild
      • Path: src/StellaOps.Notify.Connectors.Email/TASKS.md
        1. [BLOCKED] NOTIFY-CONN-EMAIL-15-702 — Add DKIM signing optional support and health/test-send flows. • Prereqs: NOTIFY-CONN-EMAIL-15-701 (Wave 4) • Current: BLOCKED – waiting on base SMTP connector implementation (NOTIFY-CONN-EMAIL-15-701).
      • Path: src/StellaOps.Notify.Connectors.Slack/TASKS.md
        1. [DONE] NOTIFY-CONN-SLACK-15-502 — Health check & test-send support with minimal scopes and redacted tokens. • Prereqs: NOTIFY-CONN-SLACK-15-501 (Wave 4) • Current: TODO
      • Path: src/StellaOps.Notify.Connectors.Teams/TASKS.md
        1. [DONE] NOTIFY-CONN-TEAMS-15-602 — Provide health/test-send support with fallback text for legacy clients. • Prereqs: NOTIFY-CONN-TEAMS-15-601 (Wave 4) • Current: TODO
        2. [DONE] NOTIFY-CONN-TEAMS-15-604 — Align Teams health endpoint output with preview metadata redaction. • Prereqs: NOTIFY-CONN-TEAMS-15-602 (Wave 5) • Current: DONE
      • Path: src/StellaOps.Notify.Connectors.Webhook/TASKS.md
        1. [DOING] NOTIFY-CONN-WEBHOOK-15-802 — Health/test-send support with signature validation hints and secret management. • Prereqs: NOTIFY-CONN-WEBHOOK-15-801 (Wave 4) • Current: TODO
  • Sprint 17 · Symbol Intelligence & Forensics
    • Team: Scanner WebService Guild
      • Path: src/StellaOps.Scanner.WebService/TASKS.md
        1. [TODO] SCANNER-RUNTIME-17-401 — Persist runtime build-id observations and expose them via /runtime/events + policy joins for debug-symbol correlation. • Prereqs: SCANNER-RUNTIME-12-301 (Wave 1), ZASTAVA-OBS-17-005 (Wave 3), SCANNER-EMIT-17-701 (Wave 1), POLICY-RUNTIME-17-201 (Wave 4) • Current: TODO

Wave 6 — 8 task(s) ready after Wave 5

  • Sprint 10 · Backlog
    • Team: TBD
      • Path: src/StellaOps.Scanner.Analyzers.Lang.DotNet/TASKS.md
        1. [TODO] SCANNER-ANALYZERS-LANG-10-309D — Package plug-in (manifest, DI registration) and update Offline Kit instructions. • Prereqs: SCANNER-ANALYZERS-LANG-10-308D (Wave 5) • Current: TODO
      • Path: src/StellaOps.Scanner.Analyzers.Lang.Go/TASKS.md
        1. [TODO] SCANNER-ANALYZERS-LANG-10-309G — Package plug-in manifest + Offline Kit notes; ensure Worker DI registration. • Prereqs: SCANNER-ANALYZERS-LANG-10-308G (Wave 5) • Current: TODO
      • Path: src/StellaOps.Scanner.Analyzers.Lang.Python/TASKS.md
        1. [TODO] SCANNER-ANALYZERS-LANG-10-309P — Package plug-in (manifest, DI registration) and document Offline Kit bundling of Python stdlib metadata if needed. • Prereqs: SCANNER-ANALYZERS-LANG-10-308P (Wave 5) • Current: TODO
      • Path: src/StellaOps.Scanner.Analyzers.Lang.Rust/TASKS.md
        1. [TODO] SCANNER-ANALYZERS-LANG-10-309R — Package plug-in manifest + Offline Kit documentation; ensure Worker integration. • Prereqs: SCANNER-ANALYZERS-LANG-10-308R (Wave 5) • Current: TODO
  • Sprint 15 · Notify Foundations
    • Team: Notify Connectors Guild
      • Path: src/StellaOps.Notify.Connectors.Email/TASKS.md
        1. [DONE] NOTIFY-CONN-EMAIL-15-703 — Package Email connector as restart-time plug-in (manifest + host registration). • Prereqs: NOTIFY-CONN-EMAIL-15-702 (Wave 5) • Current: TODO
      • Path: src/StellaOps.Notify.Connectors.Slack/TASKS.md
        1. [DONE] NOTIFY-CONN-SLACK-15-503 — Package Slack connector as restart-time plug-in (manifest + host registration). • Prereqs: NOTIFY-CONN-SLACK-15-502 (Wave 5) • Current: TODO
      • Path: src/StellaOps.Notify.Connectors.Teams/TASKS.md
        1. [DONE] NOTIFY-CONN-TEAMS-15-603 — Package Teams connector as restart-time plug-in (manifest + host registration). • Prereqs: NOTIFY-CONN-TEAMS-15-602 (Wave 5) • Current: TODO
      • Path: src/StellaOps.Notify.Connectors.Webhook/TASKS.md
        1. [DONE] NOTIFY-CONN-WEBHOOK-15-803 — Package Webhook connector as restart-time plug-in (manifest + host registration). • Prereqs: NOTIFY-CONN-WEBHOOK-15-802 (Wave 5) • Current: TODO

Wave 7 — 1 task(s) ready after Wave 6

  • Sprint 7 · Contextual Truth Foundations
    • Team: Team Core Engine & Storage Analytics
      • Path: src/StellaOps.Concelier.Core/TASKS.md
        1. [DONE] FEEDCORE-ENGINE-07-001 — FEEDCORE-ENGINE-07-001 – Advisory event log & asOf queries • Prereqs: FEEDSTORAGE-DATA-07-001 (Wave 10) • Current: DONE (2025-10-19) – AdvisoryEventLog service and repository abstractions landed with canonical hashing, lower-cased keys, replay API, and doc updates. Tests: dotnet test src/StellaOps.Concelier.Core.Tests/StellaOps.Concelier.Core.Tests.csproj.

Wave 8 — 1 task(s) ready after Wave 7

  • Sprint 7 · Contextual Truth Foundations
    • Team: Team Core Engine & Data Science
      • Path: src/StellaOps.Concelier.Core/TASKS.md
        1. [DONE] FEEDCORE-ENGINE-07-002 — FEEDCORE-ENGINE-07-002 – Noise prior computation service • Prereqs: FEEDCORE-ENGINE-07-001 (Wave 7) • Current: DONE (2025-10-21) – Added NoisePriorService with rule-based aggregation of advisory statements, repository contracts for deterministic summaries, DI helper, and unit tests covering heuristics and persistence.

Wave 9 — 1 task(s) ready after Wave 8

  • Sprint 7 · Contextual Truth Foundations
    • Team: Team Core Engine & Storage Analytics
      • Path: src/StellaOps.Concelier.Core/TASKS.md
        1. [TODO] FEEDCORE-ENGINE-07-003 — FEEDCORE-ENGINE-07-003 – Unknown state ledger & confidence seeding • Prereqs: FEEDCORE-ENGINE-07-001 (Wave 7) • Current: TODO – Persist unknown_vuln_range/unknown_origin/ambiguous_fix markers with initial confidence bands, expose query surface for Policy, and add fixtures validating canonical serialization.

Wave 10 — 1 task(s) ready after Wave 9

  • Sprint 7 · Contextual Truth Foundations
    • Team: Team Normalization & Storage Backbone
      • Path: src/StellaOps.Concelier.Storage.Mongo/TASKS.md
        1. [TODO] FEEDSTORAGE-DATA-07-001 — FEEDSTORAGE-DATA-07-001 Advisory statement & conflict collections • Prereqs: FEEDMERGE-ENGINE-07-001 (Wave 11) • Current: TODO – Create advisory_statements (immutable) and advisory_conflicts collections, define asOf/vulnerabilityKey indexes, and document migration/rollback steps for event-sourced merge.

Wave 11 — 1 task(s) ready after Wave 10

  • Sprint 7 · Contextual Truth Foundations
    • Team: BE-Merge
      • Path: src/StellaOps.Concelier.Merge/TASKS.md
        1. [DONE] FEEDMERGE-ENGINE-07-001 — Conflict sets & explainers (2025-10-20) – Merge now returns conflict summaries with hashes and WebService exposes structured explainers. • Prereqs: FEEDSTORAGE-DATA-07-001 (Wave 10) • Current: TODO – Persist conflict sets referencing advisory statements, output rule/explainer payloads with replay hashes, and add integration tests covering deterministic asOf evaluations.

Wave 12 — 1 task(s) ready after Wave 11

  • Sprint 8 · Mirror Distribution
    • Team: Concelier Export Guild
      • Path: src/StellaOps.Concelier.Exporter.Json/TASKS.md
        1. [DONE] CONCELIER-EXPORT-08-201 — CONCELIER-EXPORT-08-201 – Mirror bundle + domain manifest • Prereqs: FEEDCORE-ENGINE-07-001 (Wave 7) • Current: DONE (2025-10-19) – Mirror bundles + manifests + signed index shipped; regression coverage via dotnet test src/StellaOps.Concelier.Exporter.Json.Tests/StellaOps.Concelier.Exporter.Json.Tests.csproj (2025-10-19).

Wave 13 — 1 task(s) ready after Wave 12

  • Sprint 8 · Mirror Distribution
    • Team: Concelier Export Guild
      • Path: src/StellaOps.Concelier.Exporter.TrivyDb/TASKS.md
        1. [DONE] CONCELIER-EXPORT-08-202 — CONCELIER-EXPORT-08-202 – Mirror-ready Trivy DB bundles • Prereqs: CONCELIER-EXPORT-08-201 (Wave 12) • Current: DONE (2025-10-19) – Trivy exporter mirror options produce mirror/index.json plus per-domain manifest/metadata/db files with reproducible SHA-256 digests; validated via dotnet test src/StellaOps.Concelier.Exporter.TrivyDb.Tests/StellaOps.Concelier.Exporter.TrivyDb.Tests.csproj.

Wave 14 — 1 task(s) ready after Wave 13

  • Sprint 8 · Mirror Distribution
    • Team: Concelier WebService Guild
      • Path: src/StellaOps.Concelier.WebService/TASKS.md
        1. [DONE] CONCELIER-WEB-08-201 — Mirror distribution endpoints (2025-10-20) – Service enforces Authority/bypass rules, issues cache headers, rate limits per domain, and ops docs list smoke tests. • Prereqs: CONCELIER-EXPORT-08-201 (Wave 12), DEVOPS-MIRROR-08-001 (Wave 2) • Current: DONE (2025-10-20) – See docs/ops/concelier-mirror-operations.md for updated auth + rate-limit guidance; tests WebServiceEndpointsTests cover 401/Retry-After.

Wave 15 — 1 task(s) ready after Wave 14

  • Sprint 8 · Mirror Distribution
    • Team: BE-Conn-Stella
      • Path: src/StellaOps.Concelier.Connector.StellaOpsMirror/TASKS.md
        1. [DONE] FEEDCONN-STELLA-08-001 — Implement Concelier mirror fetcher hitting https://<domain>.stella-ops.org/concelier/exports/index.json, verify signatures/digests, and persist raw documents with provenance. • Prereqs: CONCELIER-EXPORT-08-201 (Wave 12) • Current: DONE (2025-10-20) – Fetch job persists manifest/bundle metadata, enforces digest and detached JWS verification (fallback PEM support), and regression coverage captured via dotnet test src/StellaOps.Concelier.Connector.StellaOpsMirror.Tests/StellaOps.Concelier.Connector.StellaOpsMirror.Tests.csproj.

Wave 16 — 1 task(s) ready after Wave 15

  • Sprint 8 · Mirror Distribution
    • Team: BE-Conn-Stella
      • Path: src/StellaOps.Concelier.Connector.StellaOpsMirror/TASKS.md
        1. [DONE] FEEDCONN-STELLA-08-002 — Map mirror payloads into canonical advisory DTOs with provenance referencing mirror domain + original source metadata. (2025-10-20) • Prereqs: FEEDCONN-STELLA-08-001 (Wave 15) • Current: DONE (2025-10-20) – MirrorAdvisoryMapper emits canonical advisories and fixtures assert parity with exporter outputs.

Wave 17 — 1 task(s) ready after Wave 16

  • Sprint 8 · Mirror Distribution
    • Team: BE-Conn-Stella
      • Path: src/StellaOps.Concelier.Connector.StellaOpsMirror/TASKS.md
        1. [DONE] FEEDCONN-STELLA-08-003 — Add incremental cursor + resume support (per-export fingerprint) and document configuration for downstream Concelier instances. (2025-10-20) • Prereqs: FEEDCONN-STELLA-08-002 (Wave 16) • Current: DONE (2025-10-20) – Connector records per-export fingerprints, resumes pending documents, and ops guide documents offline configuration knobs.