Files

Docs CI / lint-and-preview (push) Has been cancelled

Details

Add new features and tests for AirGap and Time modules

- Introduced `SbomService` tasks documentation.
- Updated `StellaOps.sln` to include new projects: `StellaOps.AirGap.Time` and `StellaOps.AirGap.Importer`.
- Added unit tests for `BundleImportPlanner`, `DsseVerifier`, `ImportValidator`, and other components in the `StellaOps.AirGap.Importer.Tests` namespace.
- Implemented `InMemoryBundleRepositories` for testing bundle catalog and item repositories.
- Created `MerkleRootCalculator`, `RootRotationPolicy`, and `TufMetadataValidator` tests.
- Developed `StalenessCalculator` and `TimeAnchorLoader` tests in the `StellaOps.AirGap.Time.Tests` namespace.
- Added `fetch-sbomservice-deps.sh` script for offline dependency fetching.

2025-11-20 23:29:54 +02:00

prep

Add new features and tests for AirGap and Time modules

2025-11-20 23:29:54 +02:00

AGENTS.md

Update AGENTS.md files across multiple modules to standardize task status update instructions and introduce a new document for Secret Leak Detection operations.

2025-11-05 11:58:32 +02:00

architecture.md

feat: Add initial implementation of Vulnerability Resolver Jobs

2025-11-18 07:52:15 +02:00

event-envelope.md

feat: Add initial implementation of Vulnerability Resolver Jobs

2025-11-18 07:52:15 +02:00

implementation_plan.md

Align AOC tasks for Excititor and Concelier

2025-10-31 18:50:15 +02:00

README.md

feat: Add initial implementation of Vulnerability Resolver Jobs

2025-11-18 07:52:15 +02:00

TASKS.md

feat: Add initial implementation of Vulnerability Resolver Jobs

2025-11-18 07:52:15 +02:00

README.md

StellaOps Source & Job Orchestrator

The Orchestrator schedules, observes, and recovers ingestion and analysis jobs across the StellaOps platform.

Latest updates (2025-11-18)

Job leasing now flows through the Task Runner bridge: allocations carry idempotency keys, lease durations, and retry hints; workers acknowledge via claim/ack and emit heartbeats.
Event envelopes remain interim pending ORCH-SVC-37-101; include provenance (tenant/project, job type, correlationId, task runner id) in all notifier events.
Authority orch:quota / orch:backfill scopes require reason/ticket audit fields; include them in runbooks and dashboard overrides.

Responsibilities

Track job state, throughput, and errors for Concelier, Excititor, Scheduler, and export pipelines.
Expose dashboards and APIs for throttling, replays, and failover.
Enforce rate-limits, concurrency and dependency chains across queues.
Stream structured events and audit logs for incident response.
Provide Task Runner bridge semantics (claim/ack, heartbeats, progress, artifacts, backfills) for Go/Python SDKs.

Key components

Orchestrator WebService (control plane).
Queue adapters (Redis/NATS) and job ledger.
Console dashboard module and CLI integration for operators.

Integrations & dependencies

Authority for authN/Z on operational actions.
Telemetry stack for job metrics and alerts.
Scheduler/Concelier/Excititor workers for job lifecycle.
Offline Kit for state export/import during air-gap refreshes.

Operational notes

Job recovery runbooks and dashboard JSON as described in Epic 9.
Rate-limit and lease reconfiguration guidelines; keep lease defaults aligned across runners and SDKs (Go/Python).
Log streaming: SSE/WS endpoints carry correlationId + tenant/project; buffer size and retention must be documented in runbooks.
When using orch:quota / orch:backfill scopes, capture reason/ticket fields in runbooks and audit checklists.

Epic alignment

Epic 9: Source & Job Orchestrator Dashboard.
ORCH stories in ../../TASKS.md.