git.stella-ops.org/docs/implplan-blocked/audits/csproj-standards/Timeline/StellaOps.Timeline.WebService/StellaOps.Timeline.WebService.md

Audit - StellaOps.Timeline.WebService

Project

• Path: src/Timeline/StellaOps.Timeline.WebService/StellaOps.Timeline.WebService.csproj
• Module: Timeline
• Kind: WebService
• SDK: Microsoft.NET.Sdk.Web
• TargetFramework: net10.0
• Audit date (UTC): 2026-01-30

Coding Standards Findings

• Status: FAIL
• Nullable: enable
• TreatWarningsAsErrors: explicit true
• Deterministic: inherited true
• 100-line rule violations: 4
• Service locator usage (BuildServiceProvider/GetService): 0
• Analyzer enforcement: missing repo-wide (see summary).

Details

• 100-line files:
  • src/Timeline/StellaOps.Timeline.WebService/Endpoints/ReplayEndpoints.cs (281 lines)
  • src/Timeline/StellaOps.Timeline.WebService/Authorization/TimelineAuthorizationMiddleware.cs (157 lines)
  • src/Timeline/StellaOps.Timeline.WebService/Endpoints/TimelineEndpoints.cs (152 lines)
  • src/Timeline/StellaOps.Timeline.WebService/Endpoints/ExportEndpoints.cs (152 lines)
• Service locator matches:
  • none

Fix Guidance

• Split files over 100 lines into smaller types or partials.

Testing Fullness Findings

• Status: FAIL
• Expected layers: Unit, Integration, Security, Offline
• Detected test projects: src/Timeline/__Tests/StellaOps.Timeline.WebService.Tests/StellaOps.Timeline.WebService.Tests.csproj [Unit]
• Missing layers: Integration, Security, Offline

Manual checks required

• Observability contract tests for WebService/Worker.
• Offline execution (tests must run without network access).

Fix Guidance

• Add integration tests for cross-component flows.
• Add security tests for authn/authz or input validation.
• Add offline/airgap coverage with fixtures only.