e8537460a3
- Introduced AGENTS.md, README.md, TASKS.md, and implementation_plan.md for Vexer, detailing mission, responsibilities, key components, and operational notes. - Established similar documentation structure for Vulnerability Explorer and Zastava modules, including their respective workflows, integrations, and observability notes. - Created risk scoring profiles documentation outlining the core workflow, factor model, governance, and deliverables. - Ensured all modules adhere to the Aggregation-Only Contract and maintain determinism and provenance in outputs.
35 lines
1.3 KiB
Markdown
35 lines
1.3 KiB
Markdown
# StellaOps Export Center
|
||
|
||
Export Center packages reproducible evidence bundles (JSON, Trivy DB, mirror) with provenance metadata and optional signing for offline or mirrored deployments.
|
||
|
||
## Responsibilities
|
||
- Coordinate export jobs based on profiles and scope selectors.
|
||
- Assemble manifests, provenance documents, and cosign signatures.
|
||
- Stream bundles via HTTP/OCI and stage them for Offline Kit uses.
|
||
- Expose CLI/API surfaces for automation.
|
||
|
||
## Key components
|
||
- `StellaOps.ExportCenter.WebService` planner.
|
||
- `StellaOps.ExportCenter.Worker` bundle builder.
|
||
- Adapters in `StellaOps.ExportCenter.*` for JSON/Trivy/mirror variants.
|
||
|
||
## Integrations & dependencies
|
||
- Concelier/Excititor/Policy data stores for evidence.
|
||
- Signer/Attestor for provenance signing.
|
||
- CLI for operator-managed exports.
|
||
|
||
## Operational notes
|
||
- Runbooks in ./operations/ for deployment and monitoring.
|
||
- Mirror bundle instructions and validation notes.
|
||
- Telemetry dashboards for export latency and retry rates.
|
||
|
||
## Related resources
|
||
- ./operations/runbook.md
|
||
|
||
## Backlog references
|
||
- DOCS-EXPORT-35-001 … DOCS-EXPORT-37-002 in ../../TASKS.md.
|
||
- EXPORT-ATTEST-75-002 cross-team deliverable.
|
||
|
||
## Epic alignment
|
||
- **Epic 10 – Export Center:** deliver canonical JSON, Trivy DB, and mirror bundle workflows with provenance, signatures, and offline parity.
|