stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 16 Releases Wiki Activity
Files
8355e2ff7575b8fa5a1bc137850b018701c51373
git.stella-ops.org/docs/implplan/SPRINT_171_notifier_i.md
master 8355e2ff75
Some checks failed
Docs CI / lint-and-preview (push) Has been cancelled
Details
feat: Add initial implementation of Vulnerability Resolver Jobs 
- Created project for StellaOps.Scanner.Analyzers.Native.Tests with necessary dependencies.
- Documented roles and guidelines in AGENTS.md for Scheduler module.
- Implemented IResolverJobService interface and InMemoryResolverJobService for handling resolver jobs.
- Added ResolverBacklogNotifier and ResolverBacklogService for monitoring job metrics.
- Developed API endpoints for managing resolver jobs and retrieving metrics.
- Defined models for resolver job requests and responses.
- Integrated dependency injection for resolver job services.
- Implemented ImpactIndexSnapshot for persisting impact index data.
- Introduced SignalsScoringOptions for configurable scoring weights in reachability scoring.
- Added unit tests for ReachabilityScoringService and RuntimeFactsIngestionService.
- Created dotnet-filter.sh script to handle command-line arguments for dotnet.
- Established nuget-prime project for managing package downloads.
2025-11-18 07:52:15 +02:00

6.6 KiB
Raw Blame History

Sprint 171 - Notifications & Telemetry · 170.A) Notifier.I

Active items only. Completed/historic work now resides in docs/implplan/archived/tasks.md (updated 2025-11-08).

[Notifications & Telemetry] 170.A) Notifier.I Depends on: Sprint 150.A - Orchestrator Summary: Notifications & Telemetry focus on Notifier (phase I).

Task ID State Task description Owners (Source)
NOTIFY-ATTEST-74-001 DOING (2025-11-12) Create notification templates for verification failures, expiring attestations, key revocations, and transparency anomalies. Notifications Service Guild, Attestor Service Guild (src/Notifier/StellaOps.Notifier)
NOTIFY-ATTEST-74-002 TODO Wire notifications to key rotation/revocation events and transparency witness failures. Dependencies: NOTIFY-ATTEST-74-001. Notifications Service Guild, KMS Guild (src/Notifier/StellaOps.Notifier)
NOTIFY-OAS-61-001 DOING (2025-11-12) Update notifier OAS with rules, templates, incidents, quiet hours endpoints using standard error envelope and examples. Notifications Service Guild, API Contracts Guild (src/Notifier/StellaOps.Notifier)
NOTIFY-OAS-61-002 TODO Implement /.well-known/openapi discovery endpoint with scope metadata. Dependencies: NOTIFY-OAS-61-001. Notifications Service Guild (src/Notifier/StellaOps.Notifier)
NOTIFY-OAS-62-001 TODO Provide SDK usage examples for rule CRUD, incident ack, and quiet hours; ensure SDK smoke tests. Dependencies: NOTIFY-OAS-61-002. Notifications Service Guild, SDK Generator Guild (src/Notifier/StellaOps.Notifier)
NOTIFY-OAS-63-001 TODO Emit deprecation headers and Notifications templates for retiring notifier APIs. Dependencies: NOTIFY-OAS-62-001. Notifications Service Guild, API Governance Guild (src/Notifier/StellaOps.Notifier)
NOTIFY-OBS-51-001 TODO Integrate SLO evaluator webhooks into Notifier rules (burn-rate breaches, health degradations) with templates, routing, and suppression logic. Provide sample policies and ensure imposed rule propagation. Notifications Service Guild, Observability Guild (src/Notifier/StellaOps.Notifier)
NOTIFY-OBS-55-001 TODO Publish incident mode start/stop notifications with trace/evidence quick links, retention notes, and automatic escalation paths. Include quiet-hour overrides + legal compliance logging. Dependencies: NOTIFY-OBS-51-001. Notifications Service Guild, Ops Guild (src/Notifier/StellaOps.Notifier)
NOTIFY-RISK-66-001 TODO Add notification triggers for risk severity escalation/downgrade events with profile metadata in payload. Notifications Service Guild, Risk Engine Guild (src/Notifier/StellaOps.Notifier)
NOTIFY-RISK-67-001 TODO Notify stakeholders when risk profiles are published, deprecated, or thresholds change. Dependencies: NOTIFY-RISK-66-001. Notifications Service Guild, Policy Guild (src/Notifier/StellaOps.Notifier)
NOTIFY-RISK-68-001 TODO Support per-profile routing rules, quiet hours, and dedupe for risk alerts; integrate with CLI/Console preferences. Dependencies: NOTIFY-RISK-67-001. Notifications Service Guild (src/Notifier/StellaOps.Notifier)
NOTIFY-DOC-70-001 DONE (2025-11-02) Document the split between legacy src/Notify libraries and the new src/Notifier runtime, updating architecture docs with rationale/cross-links. Notifications Service Guild (src/Notifier/StellaOps.Notifier)
NOTIFY-AIRGAP-56-002 DONE Provide Bootstrap Pack notifier configurations with deterministic secrets handling and offline validation steps. Dependencies: NOTIFY-AIRGAP-56-001. Notifications Service Guild, DevOps Guild (src/Notifier/StellaOps.Notifier)

Status notes (2025-11-12 UTC)

  • NOTIFY-ATTEST-74-001 – Template matrix (verification failure, expiring attestation, key revoke, witness anomaly) drafted; Section 7 added to docs/notifications/templates.md plus cross-references in notifications/overview.md and notifications/rules.md so rule authors and operators use the canonical tmpl-attest-* suite; baseline template exports now live under offline/notifier/templates/attestation/*.template.json; waiting on Attestor schema freeze (due 2025-11-13) before locking copy and localization tokens.
  • NOTIFY-OAS-61-001 – OpenAPI document restructure underway; shared error envelope + examples added, but quietHours and incident sections still need review with API Contracts Guild.
  • NOTIFY-OBS-51-001/NOTIFY-OBS-55-001 – Telemetry SLO webhook schema frozen 2025-11-17; proceed with implementation; incident toggle contract to follow add-only evolution.
  • NOTIFY-RISK-66-001 → NOTIFY-RISK-68-001 – Policy risk export v1 approved (read-only); proceed with notification wiring; history fields to arrive later additively.

Milestones & dependencies

Target date Milestone Owner(s) Notes / dependencies
2025-11-13 Finalize attestation payload schema + localization tokens Notifications Service Guild · Attestor Service Guild Required to close NOTIFY-ATTEST-74-001 and unblock NOTIFY-ATTEST-74-002 wiring work.
2025-11-15 Draft Notifier OAS published for review Notifications Service Guild · API Contracts Guild Enables follow-on .well-known endpoint and SDK tasks (NOTIFY-OAS-61-002/62-001).
2025-11-18 Incident payload contract agreed with Telemetry & Ops Notifications Service Guild · Observability Guild Needed before NOTIFY-OBS-51-001/55-001 can move to DOING.
2025-11-20 Risk profile metadata export available (POLICY-RISK-40-002) Notifications Service Guild · Policy Guild Gate for NOTIFY-RISK-66-001 → NOTIFY-RISK-68-001 implementation.

Coordination log

Date (UTC) Update Owner
2025-11-12 18:05 Marked NOTIFY-ATTEST-74-001 and NOTIFY-OAS-61-001 as DOING; documented current blockers in status notes. Notifications Service Guild
2025-11-12 19:20 Added attestation template suite (Section 7 of docs/notifications/templates.md) covering template keys/helpers/samples to support NOTIFY-ATTEST-74-001 deliverables. Notifications Service Guild
2025-11-12 19:32 Updated docs/notifications/architecture.md rendering section to reference the new tmpl-attest-* suite so architecture + template docs stay in sync. Notifications Service Guild
2025-11-12 19:45 Synced docs/notifications/overview.md and docs/notifications/rules.md with the attestation template requirements so operators and rule authors see the mandated keys. Notifications Service Guild
2025-11-12 20:05 Added baseline template exports under offline/notifier/templates/attestation/ (Slack/Email/Webhook variants) to seed Offline Kit bundles. Notifications Service Guild