79b8e53441
Some checks failed
Docs CI / lint-and-preview (push) Has been cancelled
- Introduced `SbomService` tasks documentation. - Updated `StellaOps.sln` to include new projects: `StellaOps.AirGap.Time` and `StellaOps.AirGap.Importer`. - Added unit tests for `BundleImportPlanner`, `DsseVerifier`, `ImportValidator`, and other components in the `StellaOps.AirGap.Importer.Tests` namespace. - Implemented `InMemoryBundleRepositories` for testing bundle catalog and item repositories. - Created `MerkleRootCalculator`, `RootRotationPolicy`, and `TufMetadataValidator` tests. - Developed `StalenessCalculator` and `TimeAnchorLoader` tests in the `StellaOps.AirGap.Time.Tests` namespace. - Added `fetch-sbomservice-deps.sh` script for offline dependency fetching.
21 lines
900 B
Markdown
21 lines
900 B
Markdown
# Concelier AirGap Prep — PREP-CONCELIER-AIRGAP-56-001..58-001
|
|
|
|
Status: Draft (2025-11-20)
|
|
Owners: Concelier Core · AirGap Guilds
|
|
Scope: Capture mirror bundle/staleness requirements for Concelier ingestion under sealed mode.
|
|
|
|
## Dependencies
|
|
- Mirror thin bundle milestones (bundle_id, provenance, staleness_budget) from Mirror sprint 56-001.
|
|
- AirGap controller staleness/time anchor fields.
|
|
|
|
## Needed contract
|
|
- Ingestion must accept `bundle_id`, `provenance`, `staleness_seconds_remaining` on advisory/linkset endpoints.
|
|
- Reject non-mirror sources when sealed; surface `AIRGAP_EGRESS_BLOCKED` per Concelier AirGap response contract.
|
|
|
|
## Open decisions
|
|
- Exact header names for bundle/staleness metadata.
|
|
- Whether to cache bundle provenance per tenant.
|
|
|
|
## Handoff
|
|
Use as PREP artefact for 56-001..58-001 chain; update when mirror bundle schema and controller staleness fields are finalized.
|