- Introduced AGENTS.md, README.md, TASKS.md, and implementation_plan.md for Vexer, detailing mission, responsibilities, key components, and operational notes. - Established similar documentation structure for Vulnerability Explorer and Zastava modules, including their respective workflows, integrations, and observability notes. - Created risk scoring profiles documentation outlining the core workflow, factor model, governance, and deliverables. - Ensured all modules adhere to the Aggregation-Only Contract and maintain determinism and provenance in outputs.
		
			
				
	
	
		
			34 lines
		
	
	
		
			1.5 KiB
		
	
	
	
		
			Markdown
		
	
	
	
	
	
			
		
		
	
	
			34 lines
		
	
	
		
			1.5 KiB
		
	
	
	
		
			Markdown
		
	
	
	
	
	
| # StellaOps Excititor
 | ||
| 
 | ||
| Excititor converts heterogeneous VEX feeds into raw observations and linksets that honour the Aggregation-Only Contract.
 | ||
| 
 | ||
| ## Responsibilities
 | ||
| - Fetch OpenVEX/CSAF/CycloneDX statements via restart-only connectors.
 | ||
| - Store immutable VEX observations with full provenance.
 | ||
| - Publish linksets and events that drive policy suppression decisions.
 | ||
| - Provide deterministic exports for Offline Kit and downstream tooling.
 | ||
| 
 | ||
| ## Key components
 | ||
| - `StellaOps.Excititor.WebService` scheduler/API host.
 | ||
| - Connector libraries under `StellaOps.Excititor.Connector.*`.
 | ||
| - Normalization helpers and exporters in `StellaOps.Excititor.*`.
 | ||
| 
 | ||
| ## Integrations & dependencies
 | ||
| - Policy Engine for evidence queries.
 | ||
| - UI/CLI for conflict visibility and explanation.
 | ||
| - Notify for VEX-driven alerts.
 | ||
| 
 | ||
| ## Operational notes
 | ||
| - MongoDB for observation storage and job metadata.
 | ||
| - Offline kit packaging aligned with Concelier merges.
 | ||
| - Connector-specific runbooks (see `docs/modules/concelier/operations/connectors`).
 | ||
| 
 | ||
| ## Backlog references
 | ||
| - DOCS-LNM-22-006 / DOCS-LNM-22-007 (shared with Concelier).
 | ||
| - CLI-EXC-25-001..002 follow-up for CLI parity.
 | ||
| 
 | ||
| ## Epic alignment
 | ||
| - **Epic 1 – AOC enforcement:** maintain immutable VEX observations, provenance, and AOC verifier coverage.
 | ||
| - **Epic 7 – VEX Consensus Lens:** supply trustworthy raw inputs, trust metadata, and consensus hooks for the lens computations.
 | ||
| - **Epic 8 – Advisory AI:** expose citation-ready VEX payloads for the advisory assistant pipeline.
 |