| 200.A Docs Tasks.md ladder (Sprint 301 onwards) |
BLOCKED (2025-11-19) |
Docs Guild · Ops Guild |
Attestor 100.A; Advisory AI 110.A; AirGap 120.A; Scanner 130.A; Graph 140.A; Orchestrator 150.A; EvidenceLocker 160.A; Notifier 170.A; CLI 180.A; Ops Deployment 190.A |
Awaiting upstream artefacts (SBOM/CLI/Policy/AirGap determinism) before Md.I template rollout can continue. |
| 200.B Module dossiers (Sprints 312–335) |
TODO |
Docs Guild · Module Guild owners |
Docs Tasks Md ladder to at least Md.II; Ops deployment evidence |
Stays queued until Docs Tasks Md ladder provides updated process + assets. |
| Developer quickstart advisory sync |
TODO |
Docs Guild |
29-Nov-2025 advisory + onboarding doc draft |
Publish the onboarding quickstart advisory + docs/onboarding/dev-quickstart.md, update docs/README.md, modules/platform/architecture-overview.md, and ADVISORY_INDEX.md, and confirm sprint/AGENTS references per the advisory workflow. |
| Acceptance tests guardrails sync |
TODO |
Docs Guild · QA Guild |
29-Nov-2025 advisory + checklist draft |
Publish the Acceptance Tests Pack advisory, cross-link to sprint/guardrail docs, and capture sprint board checklist for CI/DB/rew definitions. Track AT1–AT10 gaps (see 31-Nov-2025 FINDINGS.md); align schema/signing/offline pack + reporting SLOs. |
| AT-GAPS-300-012 |
TODO |
Docs Guild · QA Guild |
29-Nov-2025 acceptance pack |
Close AT1–AT10: signed acceptance-pack schema, deterministic fixtures/seeds, expanded coverage (admission/VEX/auth), DSSE provenance + offline guardrail-pack, gating threshold schema, replay parity checks, policy DSSE negative tests, PITR rehearsal automation, and SLO-backed reporting. |
| SBOM-VEX-GAPS-300-013 |
TODO |
Platform Guild · Docs Guild · Evidence/Policy Guilds |
29-Nov-2025 SBOM→VEX blueprint |
Close BP1–BP10: signed schemas + chain hash recipe, predicate alignment, inputs.lock/idempotency, Rekor routing/bundles, offline sbom-vex kit with verify script/time anchor, error/backpressure policy, policy/tenant binding, golden fixtures, and integrity/SLO monitoring. |
| SCA-FIXTURE-GAPS-300-014 |
TODO |
Docs Guild · QA Guild · Scanner Guild |
29-Nov-2025 SCA failure catalogue |
Close FC1–FC10: signed deterministic fixture pack, seeds/UTC builds, expanded coverage (DB/schema drift, parity checks, VEX/graph drift, offline updater), result schema, offline/no-network mode, tool/version matrix, reporting SLOs, CI wiring, provenance/licensing notes, and README links in AGENTS/sprints. |
| ONBOARD-GAPS-300-015 |
TODO |
Docs Guild · DevOnboarding Guild |
29-Nov-2025 mid-level .NET onboarding |
Close OB1–OB10: expand quick-start with prerequisites/offline steps, determinism/DSSE/secret handling, DB matrix, UI gap note, linked starter issues, Rekor/mirror workflow, contribution checklist, and doc cross-links; publish updated doc and references in AGENTS/sprints. |
| EVIDENCE-PATTERNS-GAPS-300-016 |
TODO |
Docs Guild · UI Guild · Policy/Export Guilds |
30-Nov-2025 comparative evidence patterns |
Close CE1–CE10: evidence/suppression/export schemas with canonical rules, unified suppression/VEX model, justification/expiry taxonomy, offline evidence-kit, a11y requirements, observability metrics, suppressed visibility policy, fixtures, and versioned change control. |
| ECOSYS-FIXTURES-GAPS-300-017 |
TODO |
QA Guild · Scanner Guild · Docs Guild |
30-Nov-2025 ecosystem reality test cases |
Close ET1–ET10: signed fixture pack + expected-result schema, deterministic builds/seeds, secret-leak assertions, offline/no-network enforcement, version matrix + DB pinning, SBOM parity thresholds, CI ownership/SLOs, provenance/licensing, retention/redaction policy, and ID/CVSS normalization utilities. |
| IMPLEMENTOR-GAPS-300-018 |
TODO |
Docs Guild · Platform Guild |
30-Nov-2025 implementor guidelines |
Close IG1–IG10: enforceable checklist + CI gates, schema/versioning change control, determinism/offline/secret/provenance requirements, perf/quota tests, boundary rules, and AGENTS/sprint linkages. |
| STANDUP-GAPS-300-019 |
TODO |
Docs Guild · Ops Guild |
30-Nov-2025 standup sprint kickstarters |
Close SK1–SK10: kickstarter template alignment with sprint template, readiness evidence checklist, dependency ledger with owners/SLOs, time-box/exit rules, async/offline workflow, Execution Log updates, decisions/risks delta capture, metrics (blocker clear rate/latency), role assignment, and lint/checks to enforce completion. |
| Plugin architecture gaps remediation |
TODO |
Docs Guild · Module Guilds (Authority/Scanner/Concelier) |
28-Nov-2025 plugin advisory |
Close PL1–PL10 from 31-Nov-2025 FINDINGS.md: publish signed schemas/capability catalog, sandbox/resource limits, provenance/SBOM + DSSE verification, determinism harness, compatibility matrix, dependency/secret rules, crash kill-switch, offline kit packaging/verify script, and signed plugin index with revocation/CVE data. |
| CVSS v4.0 momentum sync |
TODO |
Docs Guild |
29-Nov-2025 advisory + briefing draft |
Publish the CVSS v4.0 momentum briefing, highlight adoption signals, and link to sprint decisions for SPRINT_0190.* and docs coverage. |
| SBOM→VEX proof blueprint sync |
TODO |
Docs Guild |
29-Nov-2025 advisory + blueprint draft |
Publish the SBOM→VEX blueprint, link to platform/blueprint docs, and capture diagram/stub updates for DSSE/Rekor/VEX. |
| SCA failure catalogue sync |
TODO |
Docs Guild |
29-Nov-2025 advisory + catalogue draft |
Publish the SCA failure catalogue, reference the concrete regressions, and tie the test-vector guidance back into sprint risk logs. |
| Implementor guidelines sync |
TODO |
Docs Guild |
30-Nov-2025 advisory + checklist draft |
Publish the Implementor Guidelines advisory, note the checklist extraction, and mention the doc in sprint/AGENTS references. |
| Rekor receipt checklist sync |
TODO |
Docs Guild |
30-Nov-2025 advisory + checklist draft |
Publish the Rekor Receipt Checklist, update module docs (Authority/Sbomer/Vexer) with ownership map, highlight offline metadata requirements. |
| Unknowns decay/triage sync |
TODO |
Docs Guild |
30-Nov-2025 advisory + heuristic draft |
Publish the Unknowns Decay & Triage brief, link to UnknownsRegistry docs, and capture UI artifacts for cards + queue exports. |
| Ecosystem reality test cases sync |
TODO |
Docs Guild |
30-Nov-2025 advisory + test spec draft |
Publish the Ecosystem Reality Test Cases advisory, link each incident to an acceptance test, and note exported artifacts/commands. |
| Standup sprint kickstarters sync |
TODO |
Docs Guild |
30-Nov-2025 advisory + task plan draft |
Publish the Standup Sprint Kickstarters advisory, surface ticket names, and tie the tasks into MSC sprint logs. |
| Evidence + suppression pattern sync |
TODO |
Docs Guild |
30-Nov-2025 advisory + comparison draft |
Publish the Comparative Evidence Patterns advisory, highlight the UX/data-model takeaways, and reference doc links per tool. |