stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 16 Releases Wiki Activity
Files
ae69b1a8a1da7e0d01298f2ad94e60c2d3a007ca
git.stella-ops.org/docs/implplan/SPRINT_213_web_ii.md
master ae69b1a8a1 feat: Add documentation and task tracking for Sprints 508 to 514 in Ops & Offline 
- Created detailed markdown files for Sprints 508 (Ops Offline Kit), 509 (Samples), 510 (AirGap), 511 (Api), 512 (Bench), 513 (Provenance), and 514 (Sovereign Crypto Enablement) outlining tasks, dependencies, and owners.
- Introduced a comprehensive Reachability Evidence Delivery Guide to streamline the reachability signal process.
- Implemented unit tests for Advisory AI to block known injection patterns and redact secrets.
- Added AuthoritySenderConstraintHelper to manage sender constraints in OpenIddict transactions.
2025-11-08 23:18:28 +02:00

4.4 KiB
Raw Blame History

Sprint 213 - Experience & SDKs · 180.F) Web.II

Active items only. Completed/historic work now resides in docs/implplan/archived_sprints_tasks.md (updated 2025-11-08).

[Experience & SDKs] 180.F) Web.II Depends on: Sprint 180.F - Web.I Summary: Experience & SDKs focus on Web (phase II).

Task ID State Task description Owners (Source)
WEB-EXC-25-002 Policy integration surfaces TODO Extend /policy/effective and /policy/simulate responses to include exception metadata and accept overrides for simulations. Dependencies: WEB-EXC-25-001. BE-Base Platform Guild (src/Web/StellaOps.Web/TASKS.md)
WEB-EXC-25-003 Notifications & events TODO Publish exception.* events, integrate with notification hooks, enforce rate limits. Dependencies: WEB-EXC-25-002. BE-Base Platform Guild, Platform Events Guild (src/Web/StellaOps.Web/TASKS.md)
WEB-EXPORT-35-001 Export routing TODO Surface Export Center APIs (profiles/runs/download) through gateway with tenant scoping, streaming support, and viewer/operator scope checks. BE-Base Platform Guild (src/Web/StellaOps.Web/TASKS.md)
WEB-EXPORT-36-001 Distribution endpoints TODO Add distribution routes (OCI/object storage), manifest/provenance proxies, and signed URL generation. Dependencies: WEB-EXPORT-35-001. BE-Base Platform Guild (src/Web/StellaOps.Web/TASKS.md)
WEB-EXPORT-37-001 Scheduling & verification TODO Expose scheduling, retention, encryption parameters, and verification endpoints with admin scope enforcement and audit logs. Dependencies: WEB-EXPORT-36-001. BE-Base Platform Guild (src/Web/StellaOps.Web/TASKS.md)
WEB-GRAPH-21-001 Graph endpoints BLOCKED (2025-10-27) Add gateway routes for graph versions/viewport/node/path/diff/export endpoints with tenant enforcement, scope checks, and streaming responses; proxy Policy Engine diff toggles without inline logic. Adopt StellaOpsScopes constants for RBAC enforcement. BE-Base Platform Guild, Graph Platform Guild (src/Web/StellaOps.Web/TASKS.md)
WEB-GRAPH-21-002 Request validation BLOCKED (2025-10-27) Implement bbox/zoom/path parameter validation, pagination tokens, and deterministic ordering; add contract tests for boundary conditions. Dependencies: WEB-GRAPH-21-001. BE-Base Platform Guild (src/Web/StellaOps.Web/TASKS.md)
WEB-GRAPH-21-003 Error mapping & exports BLOCKED (2025-10-27) Map graph service errors to ERR_Graph_*, support GraphML/JSONL export streaming, and document rate limits. Dependencies: WEB-GRAPH-21-002. BE-Base Platform Guild, QA Guild (src/Web/StellaOps.Web/TASKS.md)
WEB-GRAPH-21-004 Overlay pass-through BLOCKED (2025-10-27) Proxy Policy Engine overlay responses for graph endpoints while keeping gateway stateless; maintain streaming budgets and latency SLOs. Dependencies: WEB-GRAPH-21-003. BE-Base Platform Guild, Policy Guild (src/Web/StellaOps.Web/TASKS.md)
WEB-GRAPH-24-001 Gateway proxy refresh TODO Gateway proxy for Graph API and Policy overlays with RBAC, caching, pagination, ETags, and streaming; zero business logic. Dependencies: WEB-GRAPH-21-004. BE-Base Platform Guild (src/Web/StellaOps.Web/TASKS.md)
WEB-GRAPH-24-001 Graph endpoints TODO Implement /graph/assets/* endpoints (snapshots, adjacency, search) with pagination, ETags, and tenant scoping while acting as a pure proxy. Dependencies: WEB-GRAPH-24-001. BE-Base Platform Guild, SBOM Service Guild (src/Web/StellaOps.Web/TASKS.md)
WEB-GRAPH-24-004 AOC enrichers TODO Embed AOC summaries sourced from overlay services; ensure gateway does not compute derived severity or hints. Dependencies: WEB-GRAPH-24-001. BE-Base Platform Guild (src/Web/StellaOps.Web/TASKS.md)
WEB-GRAPH-24-004 Telemetry aggregation TODO Collect gateway metrics/logs (tile latency, proxy errors, overlay cache stats) and forward to dashboards; document sampling strategy. Dependencies: WEB-GRAPH-24-004. BE-Base Platform Guild, Observability Guild (src/Web/StellaOps.Web/TASKS.md)
WEB-LNM-21-001 Advisory observation endpoints TODO Surface new /advisories/* APIs through gateway with caching, pagination, and RBAC enforcement (advisory:read). BE-Base Platform Guild, Concelier WebService Guild (src/Web/StellaOps.Web/TASKS.md)
WEB-LNM-21-002 VEX observation endpoints TODO Expose /vex/* read APIs with evidence routes and export handlers; map ERR_AGG_* codes. Dependencies: WEB-LNM-21-001. BE-Base Platform Guild, Excititor WebService Guild (src/Web/StellaOps.Web/TASKS.md)