Files

Docs CI / lint-and-preview (push) Has been cancelled

Details

Implement MongoDB-based storage for Pack Run approval, artifact, log, and state management

- Added MongoPackRunApprovalStore for managing approval states with MongoDB.
- Introduced MongoPackRunArtifactUploader for uploading and storing artifacts.
- Created MongoPackRunLogStore to handle logging of pack run events.
- Developed MongoPackRunStateStore for persisting and retrieving pack run states.
- Implemented unit tests for MongoDB stores to ensure correct functionality.
- Added MongoTaskRunnerTestContext for setting up MongoDB test environment.
- Enhanced PackRunStateFactory to correctly initialize state with gate reasons.

2025-11-07 10:01:47 +02:00

2.6 KiB

Raw Blame History

StellaOps Excititor

Excititor converts heterogeneous VEX feeds into raw observations and linksets that honour the Aggregation-Only Contract.

Latest updates (2025-11-05)

Link-Not-Merge readiness: release note Excitor consensus beta captures how Excititor feeds power the Excititor consensus beta (sample payload in consensus JSON).
README now points policy/UI teams to the upcoming consensus integration work.
DSSE packaging for consensus bundles and Export Center hooks are documented in the beta release note; operators mirroring Excititor exports must verify detached JWS artefacts (bundle.json.jws) alongside each bundle.
Follow-ups called out in the release note (Policy weighting knobs POLICY-ENGINE-30-101, CLI verb CLI-VEX-30-002) remain in-flight and are tracked in /docs/implplan/SPRINT_200_documentation_process.md.

Release references

Consensus beta payload reference: docs/vex/consensus-json.md
Export Center offline packaging: docs/modules/export-center/devportal-offline.md
Historical release log: docs/updates/

Responsibilities

Fetch OpenVEX/CSAF/CycloneDX statements via restart-only connectors.
Store immutable VEX observations with full provenance.
Publish linksets and events that drive policy suppression decisions.
Provide deterministic exports for Offline Kit and downstream tooling.

Key components

StellaOps.Excititor.WebService scheduler/API host.
Connector libraries under StellaOps.Excititor.Connector.*.
Normalization helpers and exporters in StellaOps.Excititor.*.

Integrations & dependencies

Policy Engine for evidence queries.
UI/CLI for conflict visibility and explanation.
Notify for VEX-driven alerts.

Operational notes

MongoDB for observation storage and job metadata.
Offline kit packaging aligned with Concelier merges.
Connector-specific runbooks (see docs/modules/concelier/operations/connectors).

Backlog references

DOCS-LNM-22-006 / DOCS-LNM-22-007 (shared with Concelier).
CLI-EXC-25-001..002 follow-up for CLI parity.

Epic alignment

Epic 1 – AOC enforcement: maintain immutable VEX observations, provenance, and AOC verifier coverage.
Epic 7 – VEX Consensus Lens: supply trustworthy raw inputs, trust metadata, and consensus hooks for the lens computations.
Epic 8 – Advisory AI: expose citation-ready VEX payloads for the advisory assistant pipeline.

2.6 KiB Raw Blame History Unescape Escape