Files
git.stella-ops.org/src/ExportCenter/StellaOps.ExportCenter/AGENTS.md
2025-12-18 00:47:24 +02:00

2.5 KiB
Raw Blame History

StellaOps Exporter Service — Agent Charter

Mission

Deliver the Export Center service described in Epic10. Provide reproducible, signed bundles (JSON, Trivy DB, mirror) that respect AOC boundaries, tenant isolation, and imposed rule propagation across all consuming components.

Key Responsibilities

  • Maintain planner, adapters, signing, and distribution layers for export profiles.
  • Coordinate with Orchestrator for job scheduling, Findings Ledger for data streaming, Policy Engine/VEX Lens for snapshots, and Authority for RBAC scopes.
  • Guarantee deterministic outputs, provenance, and cryptographic signatures for every export profile.
  • Support Console/CLI experiences, DevOps automation, and Offline Kit packaging without violating sovereignty or redaction requirements.

Module Layout

  • StellaOps.ExportCenter.Core/ — export profile domain logic, planners, and validation.
  • StellaOps.ExportCenter.Infrastructure/ — storage providers, signing adapters, integration clients.
  • StellaOps.ExportCenter.WebService/ — REST API surface (profiles, runs, downloads, SSE).
  • StellaOps.ExportCenter.Worker/ — export execution pipelines and background schedulers.
  • StellaOps.ExportCenter.Tests/ — unit tests and future fixture harnesses.
  • StellaOps.ExportCenter.sln — module solution wiring projects together.

Required Reading

  • docs/modules/export-center/architecture.md
  • docs/modules/platform/architecture-overview.md
  • docs/airgap/offline-bundle-format.md (triage offline bundles)

Contracts (Offline Triage Bundles)

  • Offline triage bundles are .stella.bundle.tgz files with a DSSE-signed manifest and deterministic entry ordering.
  • Source of truth code paths:
    • StellaOps.ExportCenter.Core/OfflineBundle/* (bundle schema, predicate, packager)
    • StellaOps.ExportCenter.Core/EvidenceCache/* (local evidence cache + enrichment queue)

Working Agreement

    1. Update task status to DOING/DONE in both correspoding sprint file /docs/implplan/SPRINT_*.md and the local TASKS.md when you start or finish work.
    1. Review this charter and the Required Reading documents before coding; confirm prerequisites are met.
    1. Keep changes deterministic (stable ordering, timestamps, hashes) and align with offline/air-gap expectations.
    1. Coordinate doc updates, tests, and cross-guild communication whenever contracts or workflows change.
    1. Revert to TODO if you pause the task without shipping changes; leave notes in commit/PR descriptions for context.