- Created detailed markdown files for Sprints 508 (Ops Offline Kit), 509 (Samples), 510 (AirGap), 511 (Api), 512 (Bench), 513 (Provenance), and 514 (Sovereign Crypto Enablement) outlining tasks, dependencies, and owners. - Introduced a comprehensive Reachability Evidence Delivery Guide to streamline the reachability signal process. - Implemented unit tests for Advisory AI to block known injection patterns and redact secrets. - Added AuthoritySenderConstraintHelper to manage sender constraints in OpenIddict transactions.
2.5 KiB
2.5 KiB
Sprint 502 - Ops & Offline · 190.A) Ops Deployment.II
Active items only. Completed/historic work now resides in docs/implplan/archived_sprints_tasks.md (updated 2025-11-08).
[Ops & Offline] 190.A) Ops Deployment.II Depends on: Sprint 190.A - Ops Deployment.I Summary: Ops & Offline focus on Ops Deployment (phase II).
| Task ID | State | Task description | Owners (Source) |
|---|---|---|---|
| DEPLOY-POLICY-27-002 | TODO | Document rollout/rollback playbooks for policy publish/promote (canary strategy, emergency freeze toggle, evidence retrieval) under /docs/runbooks/policy-incident.md. Dependencies: DEPLOY-POLICY-27-001. |
Deployment Guild, Policy Guild (ops/deployment/TASKS.md) |
| DEPLOY-VEX-30-001 | TODO | Provide Helm/Compose overlays, scaling defaults, and offline kit instructions for VEX Lens service. | Deployment Guild, VEX Lens Guild (ops/deployment/TASKS.md) |
| DEPLOY-VEX-30-002 | TODO | Package Issuer Directory deployment manifests, backups, and security hardening guidance. Dependencies: DEPLOY-VEX-30-001. | Deployment Guild, Issuer Directory Guild (ops/deployment/TASKS.md) |
| DEPLOY-VULN-29-001 | TODO | Produce Helm/Compose overlays for Findings Ledger + projector, including DB migrations, Merkle anchor jobs, and scaling guidance. | Deployment Guild, Findings Ledger Guild (ops/deployment/TASKS.md) |
| DEPLOY-VULN-29-002 | TODO | Package stella-vuln-explorer-api deployment manifests, health checks, autoscaling policies, and offline kit instructions with signed images. Dependencies: DEPLOY-VULN-29-001. |
Deployment Guild, Vuln Explorer API Guild (ops/deployment/TASKS.md) |
| DOWNLOADS-CONSOLE-23-001 | TODO | Maintain signed downloads manifest pipeline (images, Helm, offline bundles), publish JSON under deploy/downloads/manifest.json, and document sync cadence for Console + docs parity. |
Deployment Guild, DevOps Guild (ops/deployment/TASKS.md) |
| HELM-45-001 | TODO | Scaffold deploy/helm/stella chart with values, component toggles, and pinned image digests for all services; include migration Job templates. |
Deployment Guild (ops/deployment/TASKS.md) |
| HELM-45-002 | TODO | Add TLS/Ingress, NetworkPolicy, PodSecurityContexts, Secrets integration (external secrets), and document security posture. Dependencies: HELM-45-001. | Deployment Guild, Security Guild (ops/deployment/TASKS.md) |
| HELM-45-003 | TODO | Implement HPA, PDB, readiness gates, Prometheus scraping annotations, OTel configuration hooks, and upgrade hooks. Dependencies: HELM-45-002. | Deployment Guild, Observability Guild (ops/deployment/TASKS.md) |