git.stella-ops.org/docs/modules/scanner/design

Scanner Design Dossiers

This directory contains deep technical designs for current and upcoming analyzers and surface components.

Language analyzers

• ruby-analyzer.md — lockfile, runtime graph, capability signals for Ruby.

Surface & platform contracts

• surface-fs.md
• surface-env.md
• surface-validation.md
• surface-secrets.md

OS ecosystem designs

• macos-analyzer.md — Homebrew, pkgutil, .app bundle plan.
• windows-analyzer.md — MSI, WinSxS, Chocolatey, registry collectors.

Demand & dashboards

• ../../benchmarks/scanner/windows-macos-demand.md — demand tracker.
• ../../benchmarks/scanner/windows-macos-interview-template.md — interview template.
• ../../api/scanner/windows-coverage.md — coverage summary dashboard.
• ../../api/scanner/windows-macos-summary.md — metric snapshot.

Utility & reference

• ../operations/field-engagement.md — SE workflow guidance.
• ../operations/analyzers.md — operational runbook.
• ../operations/rustfs-migration.md — storage migration notes.

Maintenance tips

• Keep demand tracker (../../benchmarks/scanner/windows-macos-demand.md) and API dashboards in sync when updating macOS/Windows designs.
• Cross-reference policy readiness briefs for associated predicates and waiver models.

Policy readiness

• ../policy/secret-leak-detection-readiness.md — secret leak pipeline decisions.
• ../policy/windows-package-readiness.md — Windows analyzer policy decisions.