- Implemented comprehensive tests for verdict artifact generation to ensure deterministic outputs across various scenarios, including identical inputs, parallel execution, and change ordering. - Created helper methods for generating sample verdict inputs and computing canonical hashes. - Added tests to validate the stability of canonical hashes, proof spine ordering, and summary statistics. - Introduced a new PowerShell script to update SHA256 sums for files, ensuring accurate hash generation and file integrity checks.
26 lines
986 B
Markdown
26 lines
986 B
Markdown
# Attestor UI (Console)
|
|
|
|
The Console includes surfaces for viewing and verifying attestations produced by StellaOps services.
|
|
|
|
## Views
|
|
|
|
- **Attestation list:** filter by tenant, issuer, predicate/type, verification status.
|
|
- **Attestation detail:** show subject, predicate, timestamps, signer identity, and verification outcome.
|
|
- **Verification panel:** signature status, certificate chain/key identity, and transparency proof (when configured).
|
|
|
|
## Actions
|
|
|
|
- Download DSSE envelope (and referenced artifacts where applicable)
|
|
- Copy digests and correlation IDs for audit trails
|
|
- Open transparency proof details (when enabled)
|
|
|
|
## Guardrails
|
|
|
|
- The UI must not “derive” verdicts from attestations; it should display verification state and referenced evidence.
|
|
- Tenancy must always be explicit; exports should preserve tenant context and verification metadata.
|
|
|
|
## References
|
|
|
|
- Console operator guide: `docs/15_UI_GUIDE.md`
|
|
- Offline Kit verification: `docs/24_OFFLINE_KIT.md`
|