stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 2 Releases Wiki Activity
Files
7be4e855d69f59ea7837af96fef37fdac63a41fe
git.stella-ops.org/docs/features/checked/policy/deterministic-sbom-to-vex-pipeline-with-signed-state-transitions.md
master 9ca2de05df more features checks. setup improvements
2026-02-13 02:04:55 +02:00

1019 B
Raw Blame History

Deterministic SBOM-to-VEX Pipeline with Signed State Transitions

Module

Policy

Status

VERIFIED

Verification Summary

Full verdict pipeline determinism verified across 2 test projects (1716 tests total, 0 failures):

  • DeterminizationGate: signal snapshot-based evaluation with uncertainty/trust/decay/guardrail metadata
  • DeterminismGuardService: static analysis (ProhibitedPatternAnalyzer) and runtime monitoring
  • VerdictAttestationService: DSSE-signed verdict decisions with deterministic predicate JSON
  • ScoringDeterminismVerifier: scoring drift detection on weight changes
  • KnowledgeSnapshotManifest: content-addressed snapshot pinning all inputs
  • PolicyGateEvaluator: VEX state transition validation with DSSE-attested graphHash and path analysis
  • Error handling: attestor unavailable and timeout return null (soft failure when FailOnError=false)

Evidence

  • docs/qa/feature-checks/runs/policy/deterministic-sbom-to-vex-pipeline-with-signed-state-transitions/run-002/