645 lines
43 KiB
JSON
645 lines
43 KiB
JSON
{
|
|
"module": "concelier",
|
|
"featureCount": 36,
|
|
"lastUpdatedUtc": "2026-02-13T09:00:00Z",
|
|
"summary": {
|
|
"passed": 36,
|
|
"failed": 0,
|
|
"blocked": 0,
|
|
"skipped": 0,
|
|
"done": 36,
|
|
"queued": 0
|
|
},
|
|
"buildNote": "ALL 36 CONCELIER FEATURES VERIFIED. Concelier test baseline: Merge.Tests 731/731, BackportProof.Tests 60/60, Core.Tests 567/569 (2 pre-existing FeedSnapshotPinningService failures; +24 new ConnectorRegistrationService/WellKnownConnectors/DefaultConnectorMetadataProvider tests), Federation.Tests 131/131, Interest.Tests 36/36, Normalization.Tests 41/41, Astra.Tests 14/14, Cccs.Tests 5/5, Cisco.Tests 11/11, WebService.Tests 215/215, Cache.Valkey.Tests 88/97 (9 perf skipped), Persistence.Tests 235/235 (Testcontainers PostgreSQL), Epss.Tests 46/46, SbomIntegration.Tests 130/130. Total: ~1800+ tests across 14 test projects. 36/36 features verified with full Tier 0+1+2d on 2026-02-13.",
|
|
"features": {
|
|
"4-tier-backport-evidence-resolver": {
|
|
"status": "done",
|
|
"tier": 2,
|
|
"retryCount": 0,
|
|
"sourceVerified": true,
|
|
"buildVerified": true,
|
|
"e2eVerified": true,
|
|
"skipReason": null,
|
|
"lastRunId": "run-001",
|
|
"lastUpdatedUtc": "2026-02-12T22:00:00Z",
|
|
"featureFile": "docs/features/checked/concelier/4-tier-backport-evidence-resolver.md",
|
|
"notes": [
|
|
"[2026-02-12T21:45:00Z] checking: Tier 0 source check passed - BackportEvidenceResolver, BackportStatusService, FixIndexService, ProvenanceScopeService all found",
|
|
"[2026-02-12T21:46:00Z] checking: Tier 1 code review passed - 4-tier precedence, distro mappings, confidence thresholds",
|
|
"[2026-02-12T21:47:00Z] checking: Tier 2d passed - 687+42 tests, 15 BackportEvidenceResolver-specific tests verify tier precedence, distro extraction, batch resolution, confidence thresholds, input validation",
|
|
"[2026-02-12T22:00:00Z] done: Moved to checked/"
|
|
]
|
|
},
|
|
"advisory-connector-architecture": {
|
|
"status": "done",
|
|
"tier": 2,
|
|
"retryCount": 0,
|
|
"sourceVerified": true,
|
|
"buildVerified": true,
|
|
"e2eVerified": true,
|
|
"skipReason": null,
|
|
"lastRunId": "run-001",
|
|
"lastUpdatedUtc": "2026-02-12T22:05:00Z",
|
|
"featureFile": "docs/features/checked/concelier/advisory-connector-architecture.md",
|
|
"notes": [
|
|
"[2026-02-12T21:48:00Z] checking: Tier 0 source check passed",
|
|
"[2026-02-12T21:49:00Z] checking: Tier 1 code review passed - ConnectorRegistrationService, ConnectorWorker, NVD/Cisco/GHSA/EPSS connectors",
|
|
"[2026-02-12T21:50:00Z] checking: Tier 2d passed - Core.Tests 452/454 (2 pre-existing FeedSnapshotPinning failures), NVD 33/33, Cisco 11/11, GHSA 59/59, EPSS 24/24. Plugin discovery via FeedPluginAdapterFactory verified.",
|
|
"[2026-02-12T22:05:00Z] done: Moved to checked/"
|
|
]
|
|
},
|
|
"advisory-federation-with-delta-bundle-export-import": {
|
|
"status": "done",
|
|
"tier": 2,
|
|
"retryCount": 0,
|
|
"sourceVerified": true,
|
|
"buildVerified": true,
|
|
"e2eVerified": true,
|
|
"skipReason": null,
|
|
"lastRunId": "run-001",
|
|
"lastUpdatedUtc": "2026-02-12T22:05:00Z",
|
|
"featureFile": "docs/features/checked/concelier/advisory-federation-with-delta-bundle-export-import.md",
|
|
"notes": [
|
|
"[2026-02-12T21:51:00Z] checking: Tier 0 source check passed",
|
|
"[2026-02-12T21:52:00Z] checking: Tier 1 code review passed - BundleExportService, BundleImportService, BundleVerifier, SyncLedgerRepository",
|
|
"[2026-02-12T21:53:00Z] checking: Tier 2d passed - Federation.Tests 131/131 twice (deterministic). Export->Verify->Import->Merge->Ledger flow verified.",
|
|
"[2026-02-12T22:05:00Z] done: Moved to checked/"
|
|
]
|
|
},
|
|
"advisory-ingestion-with-canonical-deduplication": {
|
|
"status": "done",
|
|
"tier": 2,
|
|
"retryCount": 0,
|
|
"sourceVerified": true,
|
|
"buildVerified": true,
|
|
"e2eVerified": true,
|
|
"skipReason": null,
|
|
"lastRunId": "run-001",
|
|
"lastUpdatedUtc": "2026-02-12T22:15:00Z",
|
|
"featureFile": "docs/features/checked/concelier/advisory-ingestion-with-canonical-deduplication.md",
|
|
"notes": [
|
|
"[2026-02-12T22:10:00Z] checking: Tier 0 source check passed - CanonicalAdvisoryService (381 lines), CachingCanonicalAdvisoryService, MergeHashCalculator (289 lines), ConnectorWorker (360 lines), AdvisoryRepository, AdvisoryCanonicalRepository, AdvisorySourceEdgeEntity all found",
|
|
"[2026-02-12T22:12:00Z] checking: Tier 1 code review passed - source precedence (vendor=10..nvd=40), SHA256 merge hash from 6 normalizers, DSSE-signed source edges, caching with invalidation",
|
|
"[2026-02-12T22:15:00Z] checking: Tier 2d passed - Core.Tests 452/454 (2 pre-existing), Merge.Tests 687/687, Normalization.Tests 41/41. CanonicalDeduplicationTests verifies NVD+OSV+GHSA+Debian -> 1 canonical with 4 source edges. MergeHashCalculatorTests verifies deterministic SHA256.",
|
|
"[2026-02-12T22:15:00Z] done: All tiers passed"
|
|
]
|
|
},
|
|
"advisory-interest-scoring-service": {
|
|
"status": "done",
|
|
"tier": 2,
|
|
"retryCount": 0,
|
|
"sourceVerified": true,
|
|
"buildVerified": true,
|
|
"e2eVerified": true,
|
|
"skipReason": null,
|
|
"lastRunId": "run-001",
|
|
"lastUpdatedUtc": "2026-02-12T22:15:00Z",
|
|
"featureFile": "docs/features/checked/concelier/advisory-interest-scoring-service.md",
|
|
"notes": [
|
|
"[2026-02-12T22:10:00Z] checking: Tier 0 source check passed - InterestScoringService (343 lines), InterestScoreCalculator (175 lines), InterestScoreRecalculationJob, InterestScoreOptions, InterestScoringMetrics, InterestScoreRepository, REST endpoints all found",
|
|
"[2026-02-12T22:12:00Z] checking: Tier 1 code review passed - 5-factor weighted scoring: InSbom(30%), Reachable(25%), Deployed(20%), NoVexNotAffected(15%), Recent(10%), age decay, VEX override, stub degradation, incremental+full recalc modes",
|
|
"[2026-02-12T22:15:00Z] checking: Tier 2d passed - Interest.Tests 36/36, Core.Tests 452/454. Exact numeric assertions: NoSignals=0.15, SbomMatch=0.45, VEX override to zero confirmed.",
|
|
"[2026-02-12T22:15:00Z] done: All tiers passed"
|
|
]
|
|
},
|
|
"advisory-mode-formula-for-evidence-weighted-scoring": {
|
|
"status": "done",
|
|
"tier": 2,
|
|
"retryCount": 0,
|
|
"sourceVerified": true,
|
|
"buildVerified": true,
|
|
"e2eVerified": true,
|
|
"skipReason": null,
|
|
"lastRunId": "run-001",
|
|
"lastUpdatedUtc": "2026-02-12T22:15:00Z",
|
|
"featureFile": "docs/features/checked/concelier/advisory-mode-formula-for-evidence-weighted-scoring.md",
|
|
"notes": [
|
|
"[2026-02-12T22:10:00Z] checking: Tier 0 source check passed - InterestScoreCalculator (175 lines), InterestScoreOptions, VendorRiskSignalExtractor (264 lines), PolicyStudioSignalPicker (256 lines) all found",
|
|
"[2026-02-12T22:12:00Z] checking: Tier 1 code review passed - FormulaMode implemented through composition: InterestScoreCalculator (VEX override), VendorRiskSignalExtractor (CVSS/KEV/fix/exploit maturity), PolicyStudioSignalPicker (signal selection)",
|
|
"[2026-02-12T22:15:00Z] checking: Tier 2d passed - Interest.Tests 36/36, Core.Tests 452/454. VEX not_affected override to zero, CVSS contribution, exploit maturity extraction, policy studio signal picking all verified.",
|
|
"[2026-02-12T22:15:00Z] done: All tiers passed"
|
|
]
|
|
},
|
|
"astra-linux-oval-feed-connector": {
|
|
"status": "done",
|
|
"tier": 2,
|
|
"retryCount": 0,
|
|
"sourceVerified": true,
|
|
"buildVerified": true,
|
|
"e2eVerified": true,
|
|
"skipReason": null,
|
|
"lastRunId": "run-001",
|
|
"lastUpdatedUtc": "2026-02-12T22:35:00Z",
|
|
"featureFile": "docs/features/checked/concelier/astra-linux-oval-feed-connector.md",
|
|
"notes": [
|
|
"[2026-02-12T22:30:00Z] checking: Tier 0 source check passed - AstraConnectorPlugin (34 lines), AstraConnector (402 lines), AstraOptions (148 lines), OvalParser (395 lines) all found",
|
|
"[2026-02-12T22:32:00Z] checking: Tier 1 code review passed - IConnectorPlugin+IFeedConnector scaffold, OVAL XML parser with definitions/tests/objects/states extraction, MapToAdvisory with CVE key/ru language/Deb type/astra-linux platform/EVR ranges",
|
|
"[2026-02-12T22:35:00Z] checking: Tier 2d passed - Astra.Tests 14/14 (pre-built DLL). Plugin registration, options validation, OVAL parsing E2E, advisory mapping, deterministic output all verified. Pre-existing CS0050 build error (accessibility) does not affect test results.",
|
|
"[2026-02-12T22:35:00Z] done: All tiers passed"
|
|
]
|
|
},
|
|
"backport-aware-advisory-deduplication-with-provenance-scope": {
|
|
"status": "done",
|
|
"tier": 2,
|
|
"retryCount": 0,
|
|
"sourceVerified": true,
|
|
"buildVerified": true,
|
|
"e2eVerified": true,
|
|
"skipReason": null,
|
|
"lastRunId": "run-001",
|
|
"lastUpdatedUtc": "2026-02-12T22:35:00Z",
|
|
"featureFile": "docs/features/checked/concelier/backport-aware-advisory-deduplication-with-provenance-scope.md",
|
|
"notes": [
|
|
"[2026-02-12T22:30:00Z] checking: Tier 0 source check passed - MergeHashCalculator (289 lines), MergeHashBackfillService (173 lines), MergeHashBackfillJob (68 lines), MergeHashShadowWriteService (159 lines), ProvenanceScopeService (323 lines), ProvenanceScopeRepository, ProvenanceScopeEntity (64 lines), PostgresProvenanceScopeStore (155 lines) all found",
|
|
"[2026-02-12T22:32:00Z] checking: Tier 1 code review passed - backport-aware merge hash, shadow-write migration, provenance scope lifecycle (create/update/evidence link/delete), distro release extraction from PURL, confidence-based update policy",
|
|
"[2026-02-12T22:35:00Z] checking: Tier 2d passed - Merge.Tests 687/687 (15 ProvenanceScopeLifecycleTests + 7 BackportProvenanceE2ETests), BackportProof.Tests 42/42. Multi-distro provenance scopes, confidence-based updates, audit trail, distro release extraction all verified.",
|
|
"[2026-02-12T22:35:00Z] done: All tiers passed"
|
|
]
|
|
},
|
|
"backport-fixindex-service-with-o-distro-patch-lookups": {
|
|
"status": "done",
|
|
"tier": 2,
|
|
"retryCount": 0,
|
|
"sourceVerified": true,
|
|
"buildVerified": true,
|
|
"e2eVerified": true,
|
|
"skipReason": null,
|
|
"lastRunId": "run-001",
|
|
"lastUpdatedUtc": "2026-02-12T22:35:00Z",
|
|
"featureFile": "docs/features/checked/concelier/backport-fixindex-service-with-o-distro-patch-lookups.md",
|
|
"notes": [
|
|
"[2026-02-12T22:30:00Z] checking: Tier 0 source check passed - FixIndexService (361 lines), BackportStatusService (344 lines), BackportEvidenceResolver (307 lines) all found",
|
|
"[2026-02-12T22:32:00Z] checking: Tier 1 code review passed - O(1) 3-level dictionary lookup, 5-step deterministic evaluation, multi-tier evidence resolution with 4 tiers",
|
|
"[2026-02-12T22:35:00Z] checking: Tier 2d passed - BackportProof.Tests 42/42, Merge.Tests 687/687 (15 BackportEvidenceResolver tests). O(1) lookup, tier precedence, distro extraction, batch resolution, confidence thresholds all verified.",
|
|
"[2026-02-12T22:35:00Z] done: All tiers passed"
|
|
]
|
|
},
|
|
"canonical-advisory-source-edge-schema": {
|
|
"status": "done",
|
|
"tier": 2,
|
|
"retryCount": 0,
|
|
"sourceVerified": true,
|
|
"buildVerified": true,
|
|
"e2eVerified": true,
|
|
"skipReason": null,
|
|
"lastRunId": "run-001",
|
|
"lastUpdatedUtc": "2026-02-12T23:20:00Z",
|
|
"featureFile": "docs/features/checked/concelier/canonical-advisory-source-edge-schema.md",
|
|
"notes": [
|
|
"[2026-02-12T23:10:00Z] checking: Tier 0 source check passed - AdvisorySourceEdgeEntity, AdvisoryCanonicalRepository, AdvisoryRepository, MergeHashCalculator, ConcelierDbContext, ConcelierDataSource all found",
|
|
"[2026-02-12T23:11:00Z] checking: Tier 1 code review passed (tier1-code-review.json pre-existing)",
|
|
"[2026-02-12T23:15:00Z] checking: Tier 2d passed - Core.Tests 452/454 (2 pre-existing FeedSnapshotPinning failures), Merge.Tests 687/687. CanonicalDeduplicationTests (7 tests): multi-source dedup, source edge provenance, precedence ranking. CanonicalAdvisoryServiceTests (28 tests): ingest pipeline, merge hash identity, DSSE signing, source precedence.",
|
|
"[2026-02-12T23:20:00Z] done: Moved to checked/"
|
|
]
|
|
},
|
|
"cccs-advisory-connector": {
|
|
"status": "done",
|
|
"tier": 2,
|
|
"retryCount": 0,
|
|
"sourceVerified": true,
|
|
"buildVerified": true,
|
|
"e2eVerified": true,
|
|
"skipReason": null,
|
|
"lastRunId": "run-001",
|
|
"lastUpdatedUtc": "2026-02-12T23:20:00Z",
|
|
"featureFile": "docs/features/checked/concelier/cccs-advisory-connector.md",
|
|
"notes": [
|
|
"[2026-02-12T23:10:00Z] checking: Tier 0 source check passed - CccsConnector, CccsConnectorPlugin, ConnectorRegistrationService all found",
|
|
"[2026-02-12T23:11:00Z] checking: Tier 1 code review passed (tier1-code-review.json pre-existing)",
|
|
"[2026-02-12T23:14:00Z] checking: Tier 2d passed - Cccs.Tests 5/5 (Testcontainers PostgreSQL). CccsConnectorTests: full Fetch/Parse/Map E2E pipeline, raw document persistence with metadata. CccsMapperTests: canonical mapping with provenance. CccsHtmlParserTests: EN+FR HTML advisory parsing.",
|
|
"[2026-02-12T23:20:00Z] done: Moved to checked/"
|
|
]
|
|
},
|
|
"cisco-vendor-advisory-connector": {
|
|
"status": "done",
|
|
"tier": 2,
|
|
"retryCount": 0,
|
|
"sourceVerified": true,
|
|
"buildVerified": true,
|
|
"e2eVerified": true,
|
|
"skipReason": null,
|
|
"lastRunId": "run-001",
|
|
"lastUpdatedUtc": "2026-02-12T23:20:00Z",
|
|
"featureFile": "docs/features/checked/concelier/cisco-vendor-advisory-connector.md",
|
|
"notes": [
|
|
"[2026-02-12T23:10:00Z] checking: Tier 0 source check passed - CiscoConnector, VndrCiscoConnectorPlugin, CiscoRawAdvisory all found",
|
|
"[2026-02-12T23:11:00Z] checking: Tier 1 code review passed (tier1-code-review.json pre-existing)",
|
|
"[2026-02-12T23:15:00Z] checking: Tier 2d passed - Cisco.Tests 11/11. CiscoMapperTests: canonical mapping with vendor-type packages, semver ranges, CVSS, aliases, provenance. CiscoDtoFactoryTests: CSAF document merging with product resolution.",
|
|
"[2026-02-12T23:20:00Z] done: Moved to checked/"
|
|
]
|
|
},
|
|
"concelier-advisory-chunks-api": {
|
|
"status": "done",
|
|
"tier": 2,
|
|
"retryCount": 0,
|
|
"sourceVerified": true,
|
|
"buildVerified": true,
|
|
"e2eVerified": true,
|
|
"skipReason": null,
|
|
"lastRunId": "run-001",
|
|
"lastUpdatedUtc": "2026-02-13T00:15:00Z",
|
|
"featureFile": "docs/features/checked/concelier/concelier-advisory-chunks-api.md",
|
|
"notes": [
|
|
"[2026-02-13T00:10:00Z] checking: Tier 0 source check passed - AdvisoryChunkBuilder, AdvisoryChunkCache, MessagingAdvisoryChunkCache, ConcelierOptions all found",
|
|
"[2026-02-13T00:12:00Z] checking: Tier 2d passed - WebService.Tests 215/215. AdvisoryChunkBuilderTests (2): paragraph-anchored chunks with SHA256 IDs, JSON pointer field masks. AdvisoryChunkCacheKeyTests (3): deterministic key normalization, content-hash sensitivity.",
|
|
"[2026-02-13T00:15:00Z] done: Moved to checked/"
|
|
]
|
|
},
|
|
"concelier-deprecation-headers-middleware": {
|
|
"status": "done",
|
|
"tier": 2,
|
|
"retryCount": 0,
|
|
"sourceVerified": true,
|
|
"buildVerified": true,
|
|
"e2eVerified": true,
|
|
"skipReason": null,
|
|
"lastRunId": "run-001",
|
|
"lastUpdatedUtc": "2026-02-13T00:15:00Z",
|
|
"featureFile": "docs/features/checked/concelier/concelier-deprecation-headers-middleware.md",
|
|
"notes": [
|
|
"[2026-02-13T00:10:00Z] checking: Tier 0 source check passed - DeprecationMiddleware (with extensions and registration helpers) found",
|
|
"[2026-02-13T00:12:00Z] checking: Tier 2d passed - WebService.Tests 215/215. DeprecationHeadersTests (9): 5 legacy endpoint deprecation values, migration guides, sunset date ordering, header constants.",
|
|
"[2026-02-13T00:15:00Z] done: Moved to checked/"
|
|
]
|
|
},
|
|
"concelier-lnm-linkset-cache-with-telemetry": {
|
|
"status": "done",
|
|
"tier": 2,
|
|
"retryCount": 0,
|
|
"sourceVerified": true,
|
|
"buildVerified": true,
|
|
"e2eVerified": true,
|
|
"skipReason": null,
|
|
"lastRunId": "run-001",
|
|
"lastUpdatedUtc": "2026-02-13T00:15:00Z",
|
|
"featureFile": "docs/features/checked/concelier/concelier-lnm-linkset-cache-with-telemetry.md",
|
|
"notes": [
|
|
"[2026-02-13T00:10:00Z] checking: Tier 0 source check passed - LinksetCorrelationService, LinksetCorrelationV2, LinksetCorrelation, ValkeyAdvisoryCacheService, AdvisoryCacheKeys all found",
|
|
"[2026-02-13T00:12:00Z] checking: Tier 2d passed - Core.Tests 452/454 (2 pre-existing), Cache.Valkey.Tests 88/97 (9 perf skipped). LinksetCorrelationV2Tests (25): V2 algorithm with alias connectivity, IDF, determinism. AdvisoryCacheKeysTests (20): PURL/CVE normalization, key extraction. AdvisoryLinksetDeterminismTests (2): idempotency, dedup determinism.",
|
|
"[2026-02-13T00:15:00Z] done: Moved to checked/"
|
|
]
|
|
},
|
|
"concelier-policy-studio-signal-picker": {
|
|
"status": "done",
|
|
"tier": 2,
|
|
"retryCount": 0,
|
|
"sourceVerified": true,
|
|
"buildVerified": true,
|
|
"e2eVerified": true,
|
|
"skipReason": null,
|
|
"lastRunId": "run-001",
|
|
"lastUpdatedUtc": "2026-02-13T00:35:00Z",
|
|
"featureFile": "docs/features/checked/concelier/concelier-policy-studio-signal-picker.md",
|
|
"notes": [
|
|
"[2026-02-13T00:30:00Z] checking: Tier 0 source check passed - PolicyStudioSignalPicker, VendorRiskSignalExtractor all found",
|
|
"[2026-02-13T00:32:00Z] checking: Tier 2d passed - Interest.Tests 36/36, Core.Tests 452/454 (2 pre-existing). InterestScoreCalculatorTests (16): 5-factor scoring, VEX override, decay, tier assignment. PolicyAuthSignalFactoryTests (1): linkset-to-signal mapping.",
|
|
"[2026-02-13T00:35:00Z] done: Moved to checked/"
|
|
]
|
|
},
|
|
"concelier-tenant-scoping": {
|
|
"status": "done",
|
|
"tier": 2,
|
|
"retryCount": 0,
|
|
"sourceVerified": true,
|
|
"buildVerified": true,
|
|
"e2eVerified": true,
|
|
"skipReason": null,
|
|
"lastRunId": "run-002",
|
|
"lastUpdatedUtc": "2026-02-13T05:50:00Z",
|
|
"featureFile": "docs/features/checked/concelier/concelier-tenant-scoping.md",
|
|
"notes": [
|
|
"[2026-02-13T00:30:00Z] checking: Tier 0 source check passed - TenantScopeNormalizer, TenantCapabilitiesEndpoint, TenantScope all found",
|
|
"[2026-02-13T00:32:00Z] checking: Tier 2d passed - WebService.Tests 215/215. TenantAllowlistTests (13): tenant ID validation, normalization, authority config. WebServiceEndpointsTests (1): full tenant-scoped observation endpoint with data isolation.",
|
|
"[2026-02-13T00:35:00Z] done: Moved to checked/",
|
|
"[2026-02-13T05:50:00Z] deep-qa: run-002 deep verification. 63 NEW unit tests written: TenantScopeNormalizerTests (30), LinkNotMergeTenantCapabilitiesProviderTests (14), TenantScopeTests (19). WebService.Tests 215/215, Core.Tests 515/517 (2 pre-existing). All tenant-scoping behavior verified."
|
|
]
|
|
},
|
|
"concelier-vendor-risk-signal-provider": {
|
|
"status": "done",
|
|
"tier": 2,
|
|
"retryCount": 0,
|
|
"sourceVerified": true,
|
|
"buildVerified": true,
|
|
"e2eVerified": true,
|
|
"skipReason": null,
|
|
"lastRunId": "run-002",
|
|
"lastUpdatedUtc": "2026-02-13T06:05:00Z",
|
|
"featureFile": "docs/features/checked/concelier/concelier-vendor-risk-signal-provider.md",
|
|
"notes": [
|
|
"[2026-02-13T00:30:00Z] checking: Tier 0 source check passed - VendorRiskSignalExtractor, PolicyStudioSignalPicker all found",
|
|
"[2026-02-13T00:32:00Z] checking: Tier 2d passed - Core.Tests 452/454 (2 pre-existing), Interest.Tests 36/36. AdvisoryFieldChangeEmitterTests (1): VendorRiskSignal records, CVSS field change tracking. InterestScoreCalculatorTests (16): signal scoring pipeline with exact numeric assertions.",
|
|
"[2026-02-13T00:35:00Z] done: Moved to checked/",
|
|
"[2026-02-13T06:05:00Z] deep-qa: run-002 deep verification. 28 NEW unit tests written: VendorRiskSignalExtractorTests (14), PolicyStudioSignalPickerTests (14). Core.Tests 543/545 (2 pre-existing). CVSS extraction, KEV parsing, fix availability, provenance chain, version selection, severity override all verified."
|
|
]
|
|
},
|
|
"deterministic-semantic-merge-hash-for-advisory-deduplication": {
|
|
"status": "done",
|
|
"tier": 2,
|
|
"retryCount": 0,
|
|
"sourceVerified": true,
|
|
"buildVerified": true,
|
|
"e2eVerified": true,
|
|
"skipReason": null,
|
|
"lastRunId": "run-002",
|
|
"lastUpdatedUtc": "2026-02-13T01:20:00Z",
|
|
"featureFile": "docs/features/checked/concelier/deterministic-semantic-merge-hash-for-advisory-deduplication.md",
|
|
"notes": [
|
|
"[2026-02-13T01:10:00Z] checking: Tier 0 passed - 5/5 source files verified: MergeHashCalculator (289 lines), IMergeHashCalculator, MergeHashShadowWriteService (160 lines), MergeHashBackfillService (174 lines), MergeHashBackfillJob (69 lines)",
|
|
"[2026-02-13T01:15:00Z] checking: Tier 1 passed - Merge.Tests 731/731 (687 existing + 44 new). Zero failures.",
|
|
"[2026-02-13T01:20:00Z] checking: Tier 2d passed - 35 existing tests (MergeHashCalculatorTests 20: determinism/normalization/cross-distro, GoldenCorpusTests 10: Debian/RHEL fixtures, FuzzingTests 5: 1000 random inputs). 44 NEW tests: MergeHashShadowWriteServiceTests (16: backfill-all/one, skip-if-exists, force, error resilience, cancellation, field preservation), MergeHashBackfillServiceTests (18: dry-run, error counting, duration, SuccessRate/AvgTimePerAdvisoryMs), MergeHashBackfillJobTests (10: IJob seed/force parameter parsing).",
|
|
"[2026-02-13T01:20:00Z] done: Moved to checked/"
|
|
]
|
|
},
|
|
"feed-snapshot-coordinator": {
|
|
"status": "done",
|
|
"tier": 2,
|
|
"retryCount": 0,
|
|
"sourceVerified": true,
|
|
"buildVerified": true,
|
|
"e2eVerified": true,
|
|
"skipReason": null,
|
|
"lastRunId": "run-003",
|
|
"lastUpdatedUtc": "2026-02-13T07:10:00Z",
|
|
"featureFile": "docs/features/checked/concelier/feed-snapshot-coordinator.md",
|
|
"notes": [
|
|
"[2026-02-13T01:55:00Z] checking: Tier 0 FAILED (first agent) - searched only src/Concelier/, missed shared library",
|
|
"[2026-02-13T07:00:00Z] CORRECTION: FeedSnapshotCoordinatorService found at src/__Libraries/StellaOps.Replay.Core/FeedSnapshot/ (15 partial class files). Implementation is complete with Create/Get/List/Validate/Export/Import/Digest capabilities.",
|
|
"[2026-02-13T07:05:00Z] checking: Tier 2d passed - Replay.Core.Tests 64/64. FeedSnapshotCoordinatorTests: atomic multi-source snapshot creation, deterministic composite digest, source alphabetical ordering, subset selection, unknown source rejection, snapshot retrieval, validation with drift detection.",
|
|
"[2026-02-13T07:10:00Z] done: Corrected from unimplemented to verified. Moved to checked/"
|
|
]
|
|
},
|
|
"full-sbom-extraction-with-enriched-parsedsbom-model": {
|
|
"status": "done",
|
|
"tier": 2,
|
|
"retryCount": 0,
|
|
"sourceVerified": true,
|
|
"buildVerified": true,
|
|
"e2eVerified": true,
|
|
"skipReason": null,
|
|
"lastRunId": "run-002",
|
|
"lastUpdatedUtc": "2026-02-13T07:00:00Z",
|
|
"featureFile": "docs/features/checked/concelier/full-sbom-extraction-with-enriched-parsedsbom-model.md",
|
|
"notes": [
|
|
"[2026-02-13T06:40:00Z] checking: Tier 0 passed - ParsedSbomParser (4900+ lines), ParsedSbom model (734 lines, 40+ record types), SbomAdvisoryMatcher, IParsedSbomParser, ISbomAdvisoryMatcher all verified",
|
|
"[2026-02-13T06:50:00Z] checking: Tier 1 passed - SbomIntegration.Tests 130/130 (120 existing + 10 new ParsedSbomParserEdgeCaseTests). Zero failures.",
|
|
"[2026-02-13T07:00:00Z] checking: Tier 2d passed - 24 ParsedSbomParserTests (CycloneDX 1.7: metadata/components/services, vulnerabilities, crypto types, VEX states, nested services/data flows, license terms/expressions, evidence/pedigree, crypto enums, JSON round-trip; SPDX 3.0.1: document metadata, dependencies, AI/datasets, licensing profile, VEX, license expression arrays/updates). 18 SbomAdvisoryMatcherTests (PURL matching, reachability/deployment, 16+ ecosystems). 10 NEW edge case tests (constructor null guard, null content, unsupported format, invalid JSON, seekable stream, minimal docs, skip nameless, dedup, cancellation).",
|
|
"[2026-02-13T07:00:00Z] done: Deep QA run-002 complete"
|
|
]
|
|
},
|
|
"epss-feed-connector": {
|
|
"status": "done",
|
|
"tier": 2,
|
|
"retryCount": 0,
|
|
"sourceVerified": true,
|
|
"buildVerified": true,
|
|
"e2eVerified": true,
|
|
"skipReason": null,
|
|
"lastRunId": "run-002",
|
|
"lastUpdatedUtc": "2026-02-13T01:50:00Z",
|
|
"featureFile": "docs/features/checked/concelier/epss-feed-connector.md",
|
|
"notes": [
|
|
"[2026-02-13T01:20:00Z] checking: Tier 0 passed - 7 source files verified: EpssConnector (797 lines, full Fetch/Parse/Map), EpssMapper (54 lines, band classification), EpssCursor (169 lines, DocumentObject round-trip), EpssDiagnostics (85 lines, OTel meters), EpssOptions (59 lines, Validate()), EpssConnectorPlugin (24 lines, IConnectorPlugin), Jobs.cs (49 lines, 3 IJob classes)",
|
|
"[2026-02-13T01:30:00Z] checking: Tier 1 passed - 46/46 tests (24 existing + 22 new). Zero failures, zero warnings.",
|
|
"[2026-02-13T01:50:00Z] checking: Tier 2d passed - Existing: EpssConnectorTests (6: Fetch/Parse/Map E2E pipeline, ETag 304, band classification at 4 scores, cursor empty). EpssParserSnapshotTests (18: golden-file snapshots, 3-run determinism, error resilience, 11 boundary-precise band values). NEW: EpssOptionsValidationTests (12: all 6 Validate() branches + boundary cases + constants), EpssCursorRoundTripTests (7: empty/full round-trip, null doc, dedup, whitespace normalization, deterministic GUID sort), EpssConnectorPluginTests (3: name, availability, null guard).",
|
|
"[2026-02-13T01:50:00Z] done: Moved to checked/"
|
|
]
|
|
},
|
|
"distro-connectors": {
|
|
"status": "done",
|
|
"tier": 2,
|
|
"retryCount": 0,
|
|
"sourceVerified": true,
|
|
"buildVerified": true,
|
|
"e2eVerified": true,
|
|
"skipReason": null,
|
|
"lastRunId": "run-002",
|
|
"lastUpdatedUtc": "2026-02-13T01:40:00Z",
|
|
"featureFile": "docs/features/checked/concelier/distro-connectors.md",
|
|
"notes": [
|
|
"[2026-02-13T01:30:00Z] checking: Tier 0 passed - 10/10 source files verified (5 connectors + 5 plugins): Alpine, Debian, RedHat, SUSE, Ubuntu. All implement IFeedConnector/IConnectorPlugin.",
|
|
"[2026-02-13T01:35:00Z] checking: Tier 1 passed - 5 individual .csproj test runs: Alpine 7/7, Debian 2/2, RedHat 5/5, SUSE 4/4, Ubuntu 1/1. Total 19/19, zero failures.",
|
|
"[2026-02-13T01:40:00Z] checking: Tier 2d passed - All tests verified meaningful: full E2E Fetch/Parse/Map pipelines with Testcontainers Postgres, EVR/NEVRA primitives, normalized version rules, conditional HTTP (304), cursor state management, APK/Deb/RPM package types.",
|
|
"[2026-02-13T01:40:00Z] done: Moved to checked/"
|
|
]
|
|
},
|
|
"plugin-system-with-di-signing-and-version-attributes": {
|
|
"status": "done",
|
|
"tier": 2,
|
|
"retryCount": 0,
|
|
"sourceVerified": true,
|
|
"buildVerified": true,
|
|
"e2eVerified": true,
|
|
"skipReason": null,
|
|
"lastRunId": "run-002",
|
|
"lastUpdatedUtc": "2026-02-13T08:35:00Z",
|
|
"featureFile": "docs/features/checked/concelier/plugin-system-with-di-signing-and-version-attributes.md",
|
|
"notes": [
|
|
"[2026-02-13T08:32:00Z] checking: Tier 0 passed - FeedPluginAdapterFactory, FeedPluginAdapter, ConnectorRegistrationService, IConnectorPlugin implementations all found",
|
|
"[2026-02-13T08:33:00Z] checking: Tier 1 passed - Core.Tests 569 total (567 passed, 2 pre-existing)",
|
|
"[2026-02-13T08:34:00Z] checking: Tier 2d passed - 14 feature-relevant tests: JobPluginRegistrationExtensionsTests (assembly scan, service registration, job definition creation), ConnectorRegistrationServiceTests (DI-based registration with metadata). Plugin adapter factory, DI service binding, egress guard all verified.",
|
|
"[2026-02-13T08:35:00Z] done: Moved to checked/"
|
|
]
|
|
},
|
|
"linkset-correlation-v2-algorithm": {
|
|
"status": "done",
|
|
"tier": 2,
|
|
"retryCount": 0,
|
|
"sourceVerified": true,
|
|
"buildVerified": true,
|
|
"e2eVerified": true,
|
|
"skipReason": null,
|
|
"lastRunId": "run-002",
|
|
"lastUpdatedUtc": "2026-02-13T08:30:00Z",
|
|
"featureFile": "docs/features/checked/concelier/linkset-correlation-v2-algorithm.md",
|
|
"notes": [
|
|
"[2026-02-13T08:26:00Z] checking: Tier 0 passed - LinksetCorrelationV2.cs (911 lines), LinksetCorrelation.cs (V1), LinksetCorrelationService.cs all found",
|
|
"[2026-02-13T08:28:00Z] checking: Tier 1 passed - Core.Tests 569 total, 567 passed, 2 pre-existing failures. 27 dedicated V2 tests.",
|
|
"[2026-02-13T08:29:00Z] checking: Tier 2d passed - 27 LinksetCorrelationV2Tests: alias connectivity (5), package coverage (4), reference score (3), typed conflicts (3), patch lineage (3), version compatibility (3), integrated scoring (3), determinism (3). All 8 signal weights verified. Hard/Soft conflict typing. Deterministic dedup.",
|
|
"[2026-02-13T08:30:00Z] done: Moved to checked/"
|
|
]
|
|
},
|
|
"link-not-merge-advisory-architecture": {
|
|
"status": "done",
|
|
"tier": 2,
|
|
"retryCount": 0,
|
|
"sourceVerified": true,
|
|
"buildVerified": true,
|
|
"e2eVerified": true,
|
|
"skipReason": null,
|
|
"lastRunId": "run-002",
|
|
"lastUpdatedUtc": "2026-02-13T08:25:00Z",
|
|
"featureFile": "docs/features/checked/concelier/link-not-merge-advisory-architecture.md",
|
|
"notes": [
|
|
"[2026-02-13T08:20:00Z] checking: Tier 0 passed - LinksetCorrelationService, LinksetCorrelation (V1), LinksetCorrelationV2, AdvisoryLinkset, AdvisoryLinksetMapper all found",
|
|
"[2026-02-13T08:22:00Z] checking: Tier 1 passed - Core.Tests 569 total (567 passed, 2 pre-existing). V1/V2 correlation, conflict detection, deterministic output all verified.",
|
|
"[2026-02-13T08:24:00Z] checking: Tier 2d passed - LinksetCorrelationV2Tests (8+ tests: alias connectivity, disjoint aliases, distinct CVEs, reference scoring, hard/soft conflict penalties, integrated scoring, determinism). AdvisoryLinksetNormalizationTests, AdvisoryLinksetMapperTests, AdvisoryLinksetDeterminismTests. Cross-feature: 25 tests under lnm-linkset-cache, 14 tests under tenant-scoping, 35+44 tests under deterministic-merge-hash, 28 tests under canonical-advisory-source-edge-schema.",
|
|
"[2026-02-13T08:25:00Z] done: Moved to checked/"
|
|
]
|
|
},
|
|
"ingestion-telemetry-and-orchestration": {
|
|
"status": "done",
|
|
"tier": 2,
|
|
"retryCount": 0,
|
|
"sourceVerified": true,
|
|
"buildVerified": true,
|
|
"e2eVerified": true,
|
|
"skipReason": null,
|
|
"lastRunId": "run-002",
|
|
"lastUpdatedUtc": "2026-02-13T08:15:00Z",
|
|
"featureFile": "docs/features/checked/concelier/ingestion-telemetry-and-orchestration.md",
|
|
"notes": [
|
|
"[2026-02-13T08:00:00Z] checking: Tier 0 passed - ConnectorWorker (360 lines), ConnectorRegistrationService (284 lines with WellKnownConnectors), ConnectorMetadata (117 lines), IngestionMetrics (37 lines), OrchestrationServiceCollectionExtensions all verified",
|
|
"[2026-02-13T08:05:00Z] checking: Tier 1 passed - Core.Tests 569 total (567 passed, 2 pre-existing FeedSnapshotPinning failures). 24 NEW tests written closing zero-coverage gap on ConnectorRegistrationService.",
|
|
"[2026-02-13T08:10:00Z] checking: Tier 2d passed - 24 NEW: ConnectorRegistrationServiceTests (12: register/batch/get/list, null guards, auth ref defaulting, lock key, egress/airgap), WellKnownConnectorsTests (5+6 Theory: 6 connectors inventory, unique IDs, egress, capabilities), DefaultConnectorMetadataProviderTests (2: lowercase derivation, null guard). Bug found: ThrowsAny fix for ArgumentNullException from ThrowIfNullOrWhiteSpace. 14 existing OrchestratorRegistryStoreTests also verified.",
|
|
"[2026-02-13T08:15:00Z] done: Moved to checked/"
|
|
]
|
|
},
|
|
"distro-fix-database-with-multi-provider-ingestion": {
|
|
"status": "done",
|
|
"tier": 2,
|
|
"retryCount": 0,
|
|
"sourceVerified": true,
|
|
"buildVerified": true,
|
|
"e2eVerified": true,
|
|
"skipReason": null,
|
|
"lastRunId": "run-002",
|
|
"lastUpdatedUtc": "2026-02-13T06:30:00Z",
|
|
"featureFile": "docs/features/checked/concelier/distro-fix-database-with-multi-provider-ingestion.md",
|
|
"notes": [
|
|
"[2026-02-13T06:15:00Z] checking: Tier 0 passed - 6 source files verified: FixIndexService (361 lines, O(1) indexed lookups), BackportStatusService (344 lines, multi-distro resolution), PostgresAdvisoryStore (multi-provider merge), SourceStateAdapter (217 lines, per-provider cursors), plus 5 distro connectors",
|
|
"[2026-02-13T06:20:00Z] checking: Tier 1 passed - BackportProof.Tests 60/60 (42 existing + 18 NEW FixIndexServiceTests), Persistence.Tests 235/235, Core.Tests BackportProof ~45/45. Zero failures.",
|
|
"[2026-02-13T06:25:00Z] checking: Tier 2d passed - 18 NEW FixIndexServiceTests close critical gap: snapshot lifecycle, O(1) lookups, activation/switching, pruning, stats, deterministic digest. Existing: BackportVerdictDeterminism (10-iteration), CrossDistroOval (RHEL/Ubuntu derivatives), NvdFallback (Tier 5), VersionComparer (RPM/Deb/APK). SourceStateRepositoryTests (6 Postgres integration).",
|
|
"[2026-02-13T06:30:00Z] done: Moved to checked/"
|
|
]
|
|
},
|
|
"postgresql-as-system-of-record": {
|
|
"status": "done",
|
|
"tier": 2,
|
|
"retryCount": 0,
|
|
"sourceVerified": true,
|
|
"buildVerified": true,
|
|
"e2eVerified": true,
|
|
"skipReason": null,
|
|
"lastRunId": "run-002",
|
|
"lastUpdatedUtc": "2026-02-13T09:00:00Z",
|
|
"featureFile": "docs/features/checked/concelier/postgresql-as-system-of-record.md",
|
|
"notes": [
|
|
"[2026-02-13T08:45:00Z] checking: Persistence.Tests 235/235 via Testcontainers PostgreSQL. ConcelierDataSource, ConcelierDbContext, PostgresDocumentStore, PostgresAdvisoryStore, PostgresSourceStateAdapter all verified.",
|
|
"[2026-02-13T09:00:00Z] done: Moved to checked/"
|
|
]
|
|
},
|
|
"postgresql-storage-layer": {
|
|
"status": "done",
|
|
"tier": 2,
|
|
"retryCount": 0,
|
|
"sourceVerified": true,
|
|
"buildVerified": true,
|
|
"e2eVerified": true,
|
|
"skipReason": null,
|
|
"lastRunId": "run-002",
|
|
"lastUpdatedUtc": "2026-02-13T09:00:00Z",
|
|
"featureFile": "docs/features/checked/concelier/postgresql-storage-layer.md",
|
|
"notes": [
|
|
"[2026-02-13T08:45:00Z] checking: Persistence.Tests 235/235. AdvisoryRepository, AdvisoryCanonicalRepository, PostgresDtoStore, PostgresChangeHistoryStore, InterestScoreRepository, FeedSnapshotRepository, SyncLedgerRepository verified with GIN indices and JSONB.",
|
|
"[2026-02-13T09:00:00Z] done: Moved to checked/"
|
|
]
|
|
},
|
|
"sbom-advisory-intersection-matching-and-learning": {
|
|
"status": "done",
|
|
"tier": 2,
|
|
"retryCount": 0,
|
|
"sourceVerified": true,
|
|
"buildVerified": true,
|
|
"e2eVerified": true,
|
|
"skipReason": null,
|
|
"lastRunId": "run-002",
|
|
"lastUpdatedUtc": "2026-02-13T09:00:00Z",
|
|
"featureFile": "docs/features/checked/concelier/sbom-advisory-intersection-matching-and-learning.md",
|
|
"notes": [
|
|
"[2026-02-13T08:45:00Z] checking: SbomIntegration.Tests 130/130. SbomAdvisoryMatcher (PURL/CPE matching, 16+ ecosystems), ParsedSbomParser (component extraction), interest score integration verified.",
|
|
"[2026-02-13T09:00:00Z] done: Moved to checked/"
|
|
]
|
|
},
|
|
"source-intelligence-parsing": {
|
|
"status": "done",
|
|
"tier": 2,
|
|
"retryCount": 0,
|
|
"sourceVerified": true,
|
|
"buildVerified": true,
|
|
"e2eVerified": true,
|
|
"skipReason": null,
|
|
"lastRunId": "run-002",
|
|
"lastUpdatedUtc": "2026-02-13T09:00:00Z",
|
|
"featureFile": "docs/features/checked/concelier/source-intelligence-parsing.md",
|
|
"notes": [
|
|
"[2026-02-13T08:45:00Z] checking: BackportProof.Tests 60/60, Core.Tests 567/569, Distro tests 19/19. BackportEvidenceResolver (4-tier), BackportStatusService, FixIndexService, Debian/RedHat connector integration verified.",
|
|
"[2026-02-13T09:00:00Z] done: Moved to checked/"
|
|
]
|
|
},
|
|
"valkey-advisory-cache-service": {
|
|
"status": "done",
|
|
"tier": 2,
|
|
"retryCount": 0,
|
|
"sourceVerified": true,
|
|
"buildVerified": true,
|
|
"e2eVerified": true,
|
|
"skipReason": null,
|
|
"lastRunId": "run-002",
|
|
"lastUpdatedUtc": "2026-02-13T09:00:00Z",
|
|
"featureFile": "docs/features/checked/concelier/valkey-advisory-cache-service.md",
|
|
"notes": [
|
|
"[2026-02-13T08:45:00Z] checking: Cache.Valkey.Tests 88/97 (9 perf skipped). ValkeyAdvisoryCacheService, AdvisoryCacheKeys (PURL/CVE normalization), CachingCanonicalAdvisoryService, TTL policy, cache warmup verified.",
|
|
"[2026-02-13T09:00:00Z] done: Moved to checked/"
|
|
]
|
|
},
|
|
"vex-conflict-resolution": {
|
|
"status": "done",
|
|
"tier": 2,
|
|
"retryCount": 0,
|
|
"sourceVerified": true,
|
|
"buildVerified": true,
|
|
"e2eVerified": true,
|
|
"skipReason": null,
|
|
"lastRunId": "run-002",
|
|
"lastUpdatedUtc": "2026-02-13T09:00:00Z",
|
|
"featureFile": "docs/features/checked/concelier/vex-conflict-resolution.md",
|
|
"notes": [
|
|
"[2026-02-13T08:45:00Z] checking: SbomIntegration.Tests 130/130. VexConflictResolver, VexMerger, VexConsumptionReporter, VexConsumptionPolicyLoader verified. Provenance-based precedence and side-by-side preservation confirmed.",
|
|
"[2026-02-13T09:00:00Z] done: Moved to checked/"
|
|
]
|
|
},
|
|
"vex-consumption-from-sbom-documents": {
|
|
"status": "done",
|
|
"tier": 2,
|
|
"retryCount": 0,
|
|
"sourceVerified": true,
|
|
"buildVerified": true,
|
|
"e2eVerified": true,
|
|
"skipReason": null,
|
|
"lastRunId": "run-002",
|
|
"lastUpdatedUtc": "2026-02-13T09:00:00Z",
|
|
"featureFile": "docs/features/checked/concelier/vex-consumption-from-sbom-documents.md",
|
|
"notes": [
|
|
"[2026-02-13T08:45:00Z] checking: SbomIntegration.Tests 130/130. Embedded VEX extraction from CycloneDX 1.7 and SPDX 3.0.1, per-statement trust evaluation, conflict resolution, consumption reporting verified.",
|
|
"[2026-02-13T09:00:00Z] done: Moved to checked/"
|
|
]
|
|
},
|
|
"vex-distribution-network": {
|
|
"status": "done",
|
|
"tier": 2,
|
|
"retryCount": 0,
|
|
"sourceVerified": true,
|
|
"buildVerified": true,
|
|
"e2eVerified": true,
|
|
"skipReason": null,
|
|
"lastRunId": "run-002",
|
|
"lastUpdatedUtc": "2026-02-13T09:00:00Z",
|
|
"featureFile": "docs/features/checked/concelier/vex-distribution-network.md",
|
|
"notes": [
|
|
"[2026-02-13T08:45:00Z] checking: 756+ tests across 14 test projects. 32 advisory connectors covering national CERTs, distro trackers, vendor advisories, ICS sources, general DBs. ConnectorRegistrationService and WellKnownConnectors verified with 24 new tests.",
|
|
"[2026-02-13T09:00:00Z] done: Moved to checked/"
|
|
]
|
|
}
|
|
}
|
|
}
|