Files
git.stella-ops.org/docs/implplan-blocked/audits/csproj-standards/Findings/StellaOps.Findings.Ledger.WebService/StellaOps.Findings.Ledger.WebService.md

3.5 KiB

Audit - StellaOps.Findings.Ledger.WebService

Project

  • Path: src/Findings/StellaOps.Findings.Ledger.WebService/StellaOps.Findings.Ledger.WebService.csproj
  • Module: Findings
  • Kind: WebService
  • SDK: Microsoft.NET.Sdk.Web
  • TargetFramework: net10.0
  • Audit date (UTC): 2026-01-30

Coding Standards Findings

  • Status: FAIL
  • Nullable: enable
  • TreatWarningsAsErrors: explicit true
  • Deterministic: inherited true
  • 100-line rule violations: 23
  • Service locator usage (BuildServiceProvider/GetService): 0
  • Analyzer enforcement: missing repo-wide (see summary).

Details

  • 100-line files:
    • src/Findings/StellaOps.Findings.Ledger.WebService/Program.cs (2043 lines)
    • src/Findings/StellaOps.Findings.Ledger.WebService/Contracts/ScoringContracts.cs (646 lines)
    • src/Findings/StellaOps.Findings.Ledger.WebService/Services/VexConsensusService.cs (555 lines)
    • src/Findings/StellaOps.Findings.Ledger.WebService/Services/FindingScoringService.cs (529 lines)
    • src/Findings/StellaOps.Findings.Ledger.WebService/Contracts/SnapshotContracts.cs (460 lines)
    • src/Findings/StellaOps.Findings.Ledger.WebService/Services/EvidenceGraphBuilder.cs (426 lines)
    • src/Findings/StellaOps.Findings.Ledger.WebService/Contracts/AlertContracts.cs (394 lines)
    • src/Findings/StellaOps.Findings.Ledger.WebService/Contracts/BackportContracts.cs (364 lines)
    • src/Findings/StellaOps.Findings.Ledger.WebService/Contracts/AttestationPointerContracts.cs (344 lines)
    • src/Findings/StellaOps.Findings.Ledger.WebService/Services/WebhookService.cs (312 lines)
    • src/Findings/StellaOps.Findings.Ledger.WebService/Services/ExportQueryService.cs (304 lines)
    • src/Findings/StellaOps.Findings.Ledger.WebService/Services/FindingEvidenceProvider.cs (290 lines)
    • src/Findings/StellaOps.Findings.Ledger.WebService/Services/AttestationQueryService.cs (267 lines)
    • src/Findings/StellaOps.Findings.Ledger.WebService/Contracts/VexLensContracts.cs (258 lines)
    • src/Findings/StellaOps.Findings.Ledger.WebService/Contracts/RuntimeTracesContracts.cs (255 lines)
    • src/Findings/StellaOps.Findings.Ledger.WebService/Endpoints/ScoringEndpoints.cs (238 lines)
    • src/Findings/StellaOps.Findings.Ledger.WebService/Contracts/EvidenceGraphContracts.cs (199 lines)
    • src/Findings/StellaOps.Findings.Ledger.WebService/Services/FindingSummaryBuilder.cs (195 lines)
    • src/Findings/StellaOps.Findings.Ledger.WebService/Endpoints/WebhookEndpoints.cs (175 lines)
    • src/Findings/StellaOps.Findings.Ledger.WebService/Contracts/FindingSummary.cs (174 lines)
    • src/Findings/StellaOps.Findings.Ledger.WebService/Services/ScoreHistoryStore.cs (172 lines)
    • src/Findings/StellaOps.Findings.Ledger.WebService/Endpoints/RuntimeTracesEndpoints.cs (121 lines)
    • src/Findings/StellaOps.Findings.Ledger.WebService/Contracts/ExportContracts.cs (121 lines)
  • Service locator matches:
    • none

Fix Guidance

  • Split files over 100 lines into smaller types or partials.

Testing Fullness Findings

  • Status: FAIL
  • Expected layers: Unit, Integration, Security, Offline
  • Detected test projects: none
  • Missing layers: Unit, Integration, Security, Offline

Manual checks required

  • Observability contract tests for WebService/Worker.
  • Offline execution (tests must run without network access).

Fix Guidance

  • Add a unit test project named <Project>.Tests (or document exception).
  • Add integration tests for cross-component flows.
  • Add security tests for authn/authz or input validation.
  • Add offline/airgap coverage with fixtures only.