Files
git.stella-ops.org/SPRINTS_PRIOR_20251025.md
master 651b8e0fa3 feat: Add new projects to solution and implement contract testing documentation
- Added "StellaOps.Policy.Engine", "StellaOps.Cartographer", and "StellaOps.SbomService" projects to the StellaOps solution.
- Created AGENTS.md to outline the Contract Testing Guild Charter, detailing mission, scope, and definition of done.
- Established TASKS.md for the Contract Testing Task Board, outlining tasks for Sprint 62 and Sprint 63 related to mock servers and replay testing.
2025-10-27 07:57:55 +02:00

6.6 KiB

This file describe implementation of Stella Ops (docs/README.md). Implementation must respect rules from AGENTS.md (read if you have not).

Sprint Theme Tasks File Path Status Type of Specialist Task ID Task Description
Sprint 11 Signing Chain Bring-up src/StellaOps.Attestor/TASKS.md DONE (2025-10-19) Attestor Guild ATTESTOR-API-11-201 /rekor/entries submission pipeline with dedupe, proof acquisition, and persistence.
Sprint 11 Signing Chain Bring-up src/StellaOps.Attestor/TASKS.md DONE (2025-10-19) Attestor Guild ATTESTOR-VERIFY-11-202 /rekor/verify + retrieval endpoints validating signatures and Merkle proofs.
Sprint 11 Signing Chain Bring-up src/StellaOps.Attestor/TASKS.md DONE (2025-10-19) Attestor Guild ATTESTOR-OBS-11-203 Telemetry, alerting, mTLS hardening, and archive workflow for Attestor.
Sprint 11 Storage Platform Hardening src/StellaOps.Scanner.Storage/TASKS.md DONE (2025-10-23) Scanner Storage Guild SCANNER-STORAGE-11-401 Migrate scanner object storage integration from MinIO to RustFS with data migration plan.
Sprint 11 UI Integration src/StellaOps.UI/TASKS.md DONE (2025-10-23) UI Guild UI-ATTEST-11-005 Attestation visibility (Rekor id, status) on Scan Detail.
Sprint 12 Runtime Guardrails src/StellaOps.Zastava.Core/TASKS.md DONE (2025-10-23) Zastava Core Guild ZASTAVA-CORE-12-201 Define runtime event/admission DTOs, hashing helpers, and versioning strategy.
Sprint 12 Runtime Guardrails src/StellaOps.Zastava.Core/TASKS.md DONE (2025-10-23) Zastava Core Guild ZASTAVA-CORE-12-202 Provide configuration/logging/metrics utilities shared by Observer/Webhook.
Sprint 12 Runtime Guardrails src/StellaOps.Zastava.Core/TASKS.md DONE (2025-10-23) Zastava Core Guild ZASTAVA-CORE-12-203 Authority client helpers, OpTok caching, and security guardrails for runtime services.
Sprint 12 Runtime Guardrails src/StellaOps.Zastava.Core/TASKS.md DONE (2025-10-23) Zastava Core Guild ZASTAVA-OPS-12-204 Operational runbooks, alert rules, and dashboard exports for runtime plane.
Sprint 12 Runtime Guardrails src/StellaOps.Zastava.Observer/TASKS.md DONE (2025-10-24) Zastava Observer Guild ZASTAVA-OBS-12-001 Container lifecycle watcher emitting deterministic runtime events with buffering.
Sprint 12 Runtime Guardrails src/StellaOps.Zastava.Observer/TASKS.md DONE (2025-10-24) Zastava Observer Guild ZASTAVA-OBS-12-002 Capture entrypoint traces + loaded libraries, hashing binaries and linking to baseline SBOM.
Sprint 12 Runtime Guardrails src/StellaOps.Zastava.Observer/TASKS.md DONE (2025-10-24) Zastava Observer Guild ZASTAVA-OBS-12-003 Posture checks for signatures/SBOM/attestation with offline caching.
Sprint 12 Runtime Guardrails src/StellaOps.Zastava.Observer/TASKS.md DONE (2025-10-24) Zastava Observer Guild ZASTAVA-OBS-12-004 Batch /runtime/events submissions with disk-backed buffer and rate limits.
Sprint 12 Runtime Guardrails src/StellaOps.Zastava.Webhook/TASKS.md DONE (2025-10-24) Zastava Webhook Guild ZASTAVA-WEBHOOK-12-101 Admission controller host with TLS bootstrap and Authority auth.
Sprint 12 Runtime Guardrails src/StellaOps.Zastava.Webhook/TASKS.md DONE (2025-10-24) Zastava Webhook Guild ZASTAVA-WEBHOOK-12-102 Query Scanner /policy/runtime, resolve digests, enforce verdicts.
Sprint 12 Runtime Guardrails src/StellaOps.Zastava.Webhook/TASKS.md DONE (2025-10-24) Zastava Webhook Guild ZASTAVA-WEBHOOK-12-103 Caching, fail-open/closed toggles, metrics/logging for admission decisions.
Sprint 12 Runtime Guardrails src/StellaOps.Zastava.Webhook/TASKS.md DONE (2025-10-24) Zastava Webhook Guild ZASTAVA-WEBHOOK-12-104 Wire /admission endpoint to runtime policy client and emit allow/deny envelopes.
Sprint 12 Runtime Guardrails src/StellaOps.Scanner.WebService/TASKS.md DONE (2025-10-24) Scanner WebService Guild SCANNER-RUNTIME-12-302 /policy/runtime endpoint joining SBOM baseline + policy verdict, returning admission guidance.
Sprint 12 Runtime Guardrails src/StellaOps.Scanner.WebService/TASKS.md DONE (2025-10-24) Scanner WebService Guild SCANNER-RUNTIME-12-303 Align /policy/runtime verdicts with canonical policy evaluation (Feedser/Vexer).
Sprint 12 Runtime Guardrails src/StellaOps.Scanner.WebService/TASKS.md DONE (2025-10-24) Scanner WebService Guild SCANNER-RUNTIME-12-304 Integrate attestation verification into runtime policy metadata.
Sprint 12 Runtime Guardrails src/StellaOps.Scanner.WebService/TASKS.md DONE (2025-10-24) Scanner WebService Guild SCANNER-RUNTIME-12-305 Deliver shared fixtures + e2e validation with Zastava/CLI teams.
Sprint 13 UX & CLI Experience src/StellaOps.UI/TASKS.md DONE (2025-10-23) UI Guild UI-AUTH-13-001 Integrate Authority OIDC + DPoP flows with session management.
Sprint 13 UX & CLI Experience src/StellaOps.UI/TASKS.md DONE (2025-10-25) UI Guild UI-NOTIFY-13-006 Notify panel: channels/rules CRUD, deliveries view, test send.
Sprint 13 Platform Reliability ops/devops/TASKS.md DONE (2025-10-25) DevOps Guild, Platform Leads DEVOPS-NUGET-13-001 Wire up .NET 10 preview feeds/local mirrors so dotnet restore succeeds offline; document updated NuGet bootstrap.
Sprint 15 Notify Foundations src/StellaOps.Notify.Queue/TASKS.md DONE (2025-10-23) Notify Queue Guild NOTIFY-QUEUE-15-401 Bus abstraction + Redis Streams adapter with ordering/idempotency.
Sprint 15 Notify Foundations src/StellaOps.Notify.Queue/TASKS.md DONE (2025-10-23) Notify Queue Guild NOTIFY-QUEUE-15-402 NATS JetStream adapter with health probes and failover.
Sprint 15 Notify Foundations src/StellaOps.Notify.Queue/TASKS.md DONE (2025-10-23) Notify Queue Guild NOTIFY-QUEUE-15-403 Delivery queue with retry/dead-letter + metrics.
Sprint 15 Notify Foundations src/StellaOps.Notify.Worker/TASKS.md DONE (2025-10-23) Notify Worker Guild NOTIFY-WORKER-15-201 Bus subscription + leasing loop with backoff.
Sprint 17 Symbol Intelligence & Forensics src/StellaOps.Zastava.Observer/TASKS.md DONE (2025-10-25) Zastava Observer Guild ZASTAVA-OBS-17-005 Collect GNU build-id during runtime observation and attach it to emitted events.
Sprint 17 Symbol Intelligence & Forensics src/StellaOps.Scanner.WebService/TASKS.md DONE (2025-10-25) Scanner WebService Guild SCANNER-RUNTIME-17-401 Persist runtime build-id observations and expose them for debug-symbol correlation.