git.stella-ops.org/docs/implplan-blocked/audits/csproj-standards/Cryptography/StellaOps.Cryptography.Plugin.Fips/StellaOps.Cryptography.Plugin.Fips.md

Audit - StellaOps.Cryptography.Plugin.Fips

Project

• Path: src/Cryptography/StellaOps.Cryptography.Plugin.Fips/StellaOps.Cryptography.Plugin.Fips.csproj
• Module: Cryptography
• Kind: Plugin
• SDK: Microsoft.NET.Sdk
• TargetFramework: net10.0
• Audit date (UTC): 2026-01-30

Coding Standards Findings

• Status: FAIL
• Nullable: enable
• TreatWarningsAsErrors: explicit true
• Deterministic: inherited true
• 100-line rule violations: 1
• Service locator usage (BuildServiceProvider/GetService): 0
• Analyzer enforcement: missing repo-wide (see summary).

Details

• 100-line files:
  • src/Cryptography/StellaOps.Cryptography.Plugin.Fips/FipsPlugin.cs (431 lines)
• Service locator matches:
  • none

Fix Guidance

• Split files over 100 lines into smaller types or partials.

Testing Fullness Findings

• Status: FAIL
• Expected layers: Unit, Integration, Security, Offline
• Detected test projects: none
• Missing layers: Unit, Integration, Security, Offline

Manual checks required

• Observability contract tests for WebService/Worker.
• Offline execution (tests must run without network access).

Fix Guidance

• Add a unit test project named <Project>.Tests (or document exception).
• Add integration tests for cross-component flows.
• Add security tests for authn/authz or input validation.
• Add offline/airgap coverage with fixtures only.