- Introduced AGENTS.md, README.md, TASKS.md, and implementation_plan.md for Vexer, detailing mission, responsibilities, key components, and operational notes. - Established similar documentation structure for Vulnerability Explorer and Zastava modules, including their respective workflows, integrations, and observability notes. - Created risk scoring profiles documentation outlining the core workflow, factor model, governance, and deliverables. - Ensured all modules adhere to the Aggregation-Only Contract and maintain determinism and provenance in outputs.
2.2 KiB
2.2 KiB
TASKS
| Task | Owner(s) | Depends on | Notes |
|---|---|---|---|
| Catalogue Apple security bulletin sources | BE-Conn-Apple | Research | DONE – Feed contract documented in README (Software Lookup Service JSON + HT article hub) with rate-limit notes. |
| Fetch pipeline & state persistence | BE-Conn-Apple | Source.Common, Storage.Mongo | DONE – Index fetch + detail ingestion with SourceState cursoring/allowlists committed; awaiting live smoke run before enabling in scheduler defaults. |
| Parser & DTO implementation | BE-Conn-Apple | Source.Common | DONE – AngleSharp detail parser produces canonical DTO payloads (CVE list, timestamps, affected tables) persisted via DTO store. |
| Canonical mapping & range primitives | BE-Conn-Apple | Models | DONE – Mapper now emits SemVer-derived normalizedVersions with apple:<platform>:<product> notes; fixtures updated to assert canonical rules while we continue tracking multi-device coverage in follow-up tasks.2025-10-11 research trail: confirmed payload aligns with [{"scheme":"semver","type":"range","min":"<build-start>","minInclusive":true,"max":"<build-end>","maxInclusive":false,"notes":"apple:ios:17.1"}]; continue using notes to surface build identifiers for storage provenance. |
| Deterministic fixtures/tests | QA | Testing | DONE (2025-10-12) – Parser now scopes references to article content, sorts affected rows deterministically, and regenerated fixtures (125326/125328/106355/HT214108/HT215500) produce stable JSON + sanitizer HTML in English. |
| Telemetry & documentation | DevEx | Docs | DONE (2025-10-12) – OpenTelemetry pipeline exports StellaOps.Concelier.Connector.Vndr.Apple; runbook docs/modules/concelier/operations/connectors/apple.md added with metrics + monitoring guidance. |
| Live HTML regression sweep | QA | Source.Common | DONE (2025-10-12) – Captured latest support.apple.com articles for 125326/125328/106355/HT214108/HT215500, trimmed nav noise, and committed sanitized HTML + expected DTOs with invariant timestamps. |
| Fixture regeneration tooling | DevEx | Testing | DONE (2025-10-12) – `scripts/update-apple-fixtures.(sh |