30 lines
2.2 KiB
Markdown
30 lines
2.2 KiB
Markdown
# Evidence Locker Schema Readiness Prep — PREP-EVIDENCE-LOCKER-GUILD-BLOCKED-SCHEMAS-NO
|
||
|
||
Status: Draft (2025-11-20)
|
||
Owners: Planning · Evidence Locker Guild · AdvisoryAI Guild · Orchestrator/Notifications Guild
|
||
Scope: Capture the exact signals still missing to unfreeze Evidence Locker replay/bundle schemas, so downstream implementation can proceed without ambiguity.
|
||
|
||
## Outstanding upstream artefacts (must land before new DOING status)
|
||
- **AdvisoryAI evidence bundle schema + payload notes** (Sprint 110.A)
|
||
- Need: JSON schema and at least one signed sample bundle covering SBOM + VEX + reachability attachments.
|
||
- Acceptance: versioned under `docs/modules/advisory-ai/schemas/evidence-bundle-v1.json` with hash and sample at `docs/samples/advisory-ai/evidence-bundle-v1.json`.
|
||
- **Orchestrator + Notifications capsule envelopes** (Sprint 150.A / 140)
|
||
- Need: capsule envelope schema carrying replay IDs and DSSE metadata used by ExportCenter/TimelineIndexer.
|
||
- Acceptance: schema at `docs/events/orchestrator-scanner-events.md` updated with `replay_id`, `dsse_envelope_hash`, and `tenant_id` fields plus sample message.
|
||
- **Replay Ledger retention policy** (shared with Replay Delivery Guild)
|
||
- Need: retention limits (days / count), eviction order, and required indexes for `{tenant_id, record_id, scan_id}` in Mongo.
|
||
- Acceptance: recorded in `docs/replay/DETERMINISTIC_REPLAY.md` section 8 with deterministic eviction rules.
|
||
|
||
## Ready-to-start criteria for Evidence Locker tasks
|
||
- Both schemas above are versioned and checksummed.
|
||
- Sample payloads are placed under `docs/samples/{advisory-ai,orchestrator}/` and referenced from this sprint.
|
||
- Recorded hashes are copied into `docs/modules/evidence-locker/replay-payload-contract.md` (section 5 once available).
|
||
|
||
## Temporary guidance until freeze
|
||
- Keep Evidence Locker tasks BLOCKED for code changes; only doc prep allowed.
|
||
- Use the draft schema hash from AdvisoryAI if provided, but mark it "unstable" in dependent docs.
|
||
- Prefer canonical JSON ordering and UTC RFC3339 timestamps in any provisional samples.
|
||
|
||
## Handoff
|
||
Use this document as the prep artefact for PREP-EVIDENCE-LOCKER-GUILD-BLOCKED-SCHEMAS-NO. Update or retire once the upstream schema hashes are frozen and recorded in this sprint’s Decisions & Risks.
|