79b8e53441
Some checks failed
Docs CI / lint-and-preview (push) Has been cancelled
- Introduced `SbomService` tasks documentation. - Updated `StellaOps.sln` to include new projects: `StellaOps.AirGap.Time` and `StellaOps.AirGap.Importer`. - Added unit tests for `BundleImportPlanner`, `DsseVerifier`, `ImportValidator`, and other components in the `StellaOps.AirGap.Importer.Tests` namespace. - Implemented `InMemoryBundleRepositories` for testing bundle catalog and item repositories. - Created `MerkleRootCalculator`, `RootRotationPolicy`, and `TufMetadataValidator` tests. - Developed `StalenessCalculator` and `TimeAnchorLoader` tests in the `StellaOps.AirGap.Time.Tests` namespace. - Added `fetch-sbomservice-deps.sh` script for offline dependency fetching.
17 lines
577 B
Markdown
17 lines
577 B
Markdown
# Concelier Attestation Prep — PREP-CONCELIER-ATTEST-73-001/002
|
|
|
|
Status: Draft (2025-11-20)
|
|
Owners: Concelier Core · Evidence Locker Guild
|
|
Scope: Define attestation scope/signoff pending for Evidence Locker integration.
|
|
|
|
## Needs
|
|
- Evidence Locker attestation scope and DSSE profile.
|
|
- Endpoint contract for attestation verification of Concelier exports.
|
|
|
|
## Open decisions
|
|
- Signer identity and Rekor usage in sealed mode.
|
|
- What evidence hashes to include (bundle_id, merkle_root).
|
|
|
|
## Handoff
|
|
Use as PREP artefact; update once EvidenceLocker publishes scope and profile.
|