stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 16 Releases Wiki Activity
Files
808ab87b212796313e6b1a9a4a1315521a36411b
git.stella-ops.org/docs/implplan/SPRINT_216_web_v.md
master cef4cb2c5a Add support for ГОСТ Р 34.10 digital signatures 
- Implemented the GostKeyValue class for handling public key parameters in ГОСТ Р 34.10 digital signatures.
- Created the GostSignedXml class to manage XML signatures using ГОСТ 34.10, including methods for computing and checking signatures.
- Developed the GostSignedXmlImpl class to encapsulate the signature computation logic and public key retrieval.
- Added specific key value classes for ГОСТ Р 34.10-2001, ГОСТ Р 34.10-2012/256, and ГОСТ Р 34.10-2012/512 to support different signature algorithms.
- Ensured compatibility with existing XML signature standards while integrating ГОСТ cryptography.
2025-11-09 21:59:57 +02:00

3.9 KiB
Raw Blame History

Sprint 216 - Experience & SDKs · 180.F) Web.V

Active items only. Completed/historic work now resides in docs/implplan/archived/tasks.md (updated 2025-11-08).

[Experience & SDKs] 180.F) Web.V Depends on: Sprint 180.F - Web.IV Summary: Experience & SDKs focus on Web (phase V).

Task ID State Task description Owners (Source)
WEB-RISK-66-001 Risk API routing TODO Expose risk profile/results endpoints through gateway with tenant scoping, pagination, and rate limiting. BE-Base Platform Guild, Policy Guild (src/Web/StellaOps.Web)
WEB-RISK-66-002 Explainability downloads TODO Add signed URL handling for explanation blobs and enforce scope checks. Dependencies: WEB-RISK-66-001. BE-Base Platform Guild, Risk Engine Guild (src/Web/StellaOps.Web)
WEB-RISK-67-001 Risk status endpoint TODO Provide aggregated risk stats (/risk/status) for Console dashboards (counts per severity, last computation). Dependencies: WEB-RISK-66-002. BE-Base Platform Guild (src/Web/StellaOps.Web)
WEB-RISK-68-001 Notification hooks TODO Emit events on severity transitions via gateway to notifier bus with trace metadata. Dependencies: WEB-RISK-67-001. BE-Base Platform Guild, Notifications Guild (src/Web/StellaOps.Web)
WEB-SIG-26-001 Signals proxy endpoints TODO Surface /signals/callgraphs, /signals/facts read/write endpoints with pagination, ETags, and RBAC. BE-Base Platform Guild, Signals Guild (src/Web/StellaOps.Web)
WEB-SIG-26-002 Reachability joins TODO Extend /policy/effective and /vuln/explorer responses to include reachability scores/states and allow filtering. Dependencies: WEB-SIG-26-001. BE-Base Platform Guild (src/Web/StellaOps.Web)
WEB-SIG-26-003 Simulation hooks TODO Add reachability override parameters to /policy/simulate and related APIs for what-if analysis. Dependencies: WEB-SIG-26-002. BE-Base Platform Guild (src/Web/StellaOps.Web)
WEB-TEN-47-001 Auth middleware TODO Implement JWT verification, tenant activation from headers, scope matching, and decision audit emission for all API endpoints. BE-Base Platform Guild (src/Web/StellaOps.Web)
WEB-TEN-48-001 Tenant context propagation TODO Set DB session stella.tenant_id, enforce tenant/project checks on persistence, prefix object storage paths, and stamp audit metadata. Dependencies: WEB-TEN-47-001. BE-Base Platform Guild (src/Web/StellaOps.Web)
WEB-TEN-49-001 ABAC & audit API TODO Integrate optional ABAC overlay with Policy Engine, expose /audit/decisions API, and support service token minting endpoints. Dependencies: WEB-TEN-48-001. BE-Base Platform Guild, Policy Guild (src/Web/StellaOps.Web)
WEB-VEX-30-007 VEX consensus routing TODO Route /vex/consensus APIs with tenant RBAC/ABAC, caching, and streaming; surface telemetry and trace IDs without gateway-side overlay logic. BE-Base Platform Guild, VEX Lens Guild (src/Web/StellaOps.Web)
WEB-VULN-29-001 Vuln API routing TODO Expose /vuln/* endpoints via gateway with tenant scoping, RBAC/ABAC enforcement, anti-forgery headers, and request logging. BE-Base Platform Guild (src/Web/StellaOps.Web)
WEB-VULN-29-002 Ledger proxy headers TODO Forward workflow actions to Findings Ledger with idempotency headers and correlation IDs; handle retries/backoff. Dependencies: WEB-VULN-29-001. BE-Base Platform Guild, Findings Ledger Guild (src/Web/StellaOps.Web)
WEB-VULN-29-003 Simulation + export routing TODO Provide simulation and export orchestration routes with SSE/progress headers, signed download links, and request budgeting. Dependencies: WEB-VULN-29-002. BE-Base Platform Guild (src/Web/StellaOps.Web)
WEB-VULN-29-004 Telemetry aggregation TODO Emit gateway metrics/logs (latency, error rates, export duration), propagate query hashes for analytics dashboards. Dependencies: WEB-VULN-29-003. BE-Base Platform Guild, Observability Guild (src/Web/StellaOps.Web)