Files
git.stella-ops.org/docs/features/checked/web/evidence-presentation-ux.md
2026-02-12 10:27:23 +02:00

2.1 KiB

Evidence Presentation UX (Panels, Drawers, Rail, Export Center)

Module

Web

Status

VERIFIED

Description

Comprehensive evidence presentation: tabbed panels across triage/findings/SBOM/policy views with reachability, binary diff, provenance, policy, and attestation chain tabs. Per-finding evidence drawer, right-rail proof pane with witness path call traces, DSSE badges, confidence meters. Evidence export center with audit bundle creation. TTE metrics tracking.

Implementation Details

  • Feature directory: src/Web/StellaOps.Web/src/app/shared/components/evidence-drawer/
  • Components:
    • evidence-drawer (src/Web/StellaOps.Web/src/app/shared/components/evidence-drawer/evidence-drawer.component.ts)
  • Source: Feature matrix scan

E2E Test Plan

  • Setup:
    • Log in with a user that has appropriate permissions
    • Navigate to the relevant page/section where this feature appears
    • Ensure test data exists (scanned artifacts, SBOM data, or seed data as needed)
  • Core verification:
    • Verify the component renders correctly with sample data
    • Verify interactive elements respond to user input
    • Verify data is fetched and displayed from the correct API endpoints
  • Edge cases:
    • Verify graceful handling when backend API is unavailable (error state)
    • Verify responsive layout at different viewport sizes
    • Verify accessibility (keyboard navigation, screen reader labels, ARIA attributes)

Verification

  • Run: docs/qa/feature-checks/runs/web/evidence-presentation-ux/run-001/
  • Tier 0 (source): pass ( ier0-source-check.json)
  • Tier 1 (build/tests): pass ( ier1-build-check.json)
  • Tier 2 (behavior): pass ( ier2-e2e-check.json)
  • Verified on (UTC): 2026-02-10

Recheck (run-003)

  • Date (UTC): 2026-02-11T06:44:05Z
  • Status: VERIFIED (strict Tier 2 UI replay)
  • Tier 2 evidence: docs/qa/feature-checks/runs/web/evidence-presentation-ux/run-003/tier2-ui-check.json
  • Notes: Strict evidence-center drawer flow now verifies signed/verified presentation states and contents-section interaction from an end-user route.