stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 12 Releases Wiki Activity
Files
aec43362542f7a3bd083c7a42315c000bdc94d98
git.stella-ops.org/docs/implplan/SPRINT_506_ops_devops_iv.md
master cef4cb2c5a Add support for ГОСТ Р 34.10 digital signatures 
- Implemented the GostKeyValue class for handling public key parameters in ГОСТ Р 34.10 digital signatures.
- Created the GostSignedXml class to manage XML signatures using ГОСТ 34.10, including methods for computing and checking signatures.
- Developed the GostSignedXmlImpl class to encapsulate the signature computation logic and public key retrieval.
- Added specific key value classes for ГОСТ Р 34.10-2001, ГОСТ Р 34.10-2012/256, and ГОСТ Р 34.10-2012/512 to support different signature algorithms.
- Ensured compatibility with existing XML signature standards while integrating ГОСТ cryptography.
2025-11-09 21:59:57 +02:00

3.7 KiB
Raw Blame History

Sprint 506 - Ops & Offline · 190.B) Ops Devops.IV

Active items only. Completed/historic work now resides in docs/implplan/archived/tasks.md (updated 2025-11-08).

[Ops & Offline] 190.B) Ops Devops.IV Depends on: Sprint 190.B - Ops Devops.III Summary: Ops & Offline focus on Ops Devops (phase IV).

Task ID State Task description Owners (Source)
DEVOPS-OBS-55-001 TODO Implement incident mode automation: feature flag service, auto-activation via SLO burn-rate, retention override management, and post-incident reset job. Dependencies: DEVOPS-OBS-54-001. DevOps Guild, Ops Guild (ops/devops)
DEVOPS-ORCH-32-001 TODO Provision orchestrator Postgres/message-bus infrastructure, add CI smoke deploy, seed Grafana dashboards (queue depth, inflight jobs), and document bootstrap. DevOps Guild, Orchestrator Service Guild (ops/devops)
DEVOPS-ORCH-33-001 TODO Publish Grafana dashboards/alerts for rate limiter, backpressure, error clustering, and DLQ depth; integrate with on-call rotations. Dependencies: DEVOPS-ORCH-32-001. DevOps Guild, Observability Guild (ops/devops)
DEVOPS-ORCH-34-001 TODO Harden production monitoring (synthetic probes, burn-rate alerts, replay smoke), document incident response, and prep GA readiness checklist. Dependencies: DEVOPS-ORCH-33-001. DevOps Guild, Orchestrator Service Guild (ops/devops)
DEVOPS-POLICY-27-001 TODO Add CI pipeline stages to run `stella policy lint DevOps Guild, DevEx/CLI Guild (ops/devops)
DEVOPS-POLICY-27-002 TODO Provide optional batch simulation CI job (staging inventory) that triggers Registry run, polls results, and posts markdown summary to PR; enforce drift thresholds. Dependencies: DEVOPS-POLICY-27-001. DevOps Guild, Policy Registry Guild (ops/devops)
DEVOPS-POLICY-27-003 TODO Manage signing key material for policy publish pipeline (OIDC workload identity + cosign), rotate keys, and document verification steps; integrate attestation verification stage. Dependencies: DEVOPS-POLICY-27-002. DevOps Guild, Security Guild (ops/devops)
DEVOPS-POLICY-27-004 TODO Create dashboards/alerts for policy compile latency, simulation queue depth, approval latency, and promotion outcomes; integrate with on-call playbooks. Dependencies: DEVOPS-POLICY-27-003. DevOps Guild, Observability Guild (ops/devops)
DEVOPS-REL-17-004 BLOCKED (2025-10-26) Ensure release workflow publishes out/release/debug (build-id tree + manifest) and fails when symbols are missing. DevOps Guild (ops/devops)
DEVOPS-RULES-33-001 REVIEW (2025-10-30) Contracts & Rules anchor:
• Gateway proxies only; Policy Engine composes overlays/simulations.
• AOC ingestion cannot merge; only lossless canonicalization.
• One graph platform: Graph Indexer + Graph API. Cartographer retired.		 DevOps Guild, Platform Leads (ops/devops)
DEVOPS-SDK-63-001 TODO Provision registry credentials, signing keys, and secure storage for SDK publishing pipelines. DevOps Guild, SDK Release Guild (ops/devops)
DEVOPS-SIG-26-001 TODO Provision CI/CD pipelines, Helm/Compose manifests for Signals service, including artifact storage and Redis dependencies. DevOps Guild, Signals Guild (ops/devops)
DEVOPS-SIG-26-002 TODO Create dashboards/alerts for reachability scoring latency, cache hit rates, sensor staleness. Dependencies: DEVOPS-SIG-26-001. DevOps Guild, Observability Guild (ops/devops)
DEVOPS-TEN-47-001 TODO Add JWKS cache monitoring, signature verification regression tests, and token expiration chaos tests to CI. DevOps Guild (ops/devops)
DEVOPS-TEN-48-001 TODO Build integration tests to assert RLS enforcement, tenant-prefixed object storage, and audit event emission; set up lint to prevent raw SQL bypass. Dependencies: DEVOPS-TEN-47-001. DevOps Guild (ops/devops)