Files
git.stella-ops.org/docs2/operations/trust-lattice.md
master bc4318ef97 Add tests for SBOM generation determinism across multiple formats
- Created `StellaOps.TestKit.Tests` project for unit tests related to determinism.
- Implemented `DeterminismManifestTests` to validate deterministic output for canonical bytes and strings, file read/write operations, and error handling for invalid schema versions.
- Added `SbomDeterminismTests` to ensure identical inputs produce consistent SBOMs across SPDX 3.0.1 and CycloneDX 1.6/1.7 formats, including parallel execution tests.
- Updated project references in `StellaOps.Integration.Determinism` to include the new determinism testing library.
2025-12-23 18:56:12 +02:00

1.1 KiB

Trust lattice operations

Purpose

  • Monitor and operate trust lattice gates for VEX and policy decisions.

Core components

  • Trust vectors and gate configuration.
  • Verdict replay for deterministic validation.

Monitoring

  • Track gate failure rate, verdict replay failures, and trust vector drift.
  • Use dashboards for gate health and override usage.

Common operations

  • View current trust vectors and gate configuration.
  • Inspect a verdict and its trust inputs.
  • Trigger manual calibration when required.

Emergency procedures

  • High gate failure rate: pause dependent workflows and investigate sources.
  • Verdict replay failures: verify inputs, cache epochs, and policy versions.
  • Trust vector drift: run replay with frozen inputs and compare hashes.

Maintenance

  • Daily checks: gate failure rate and queue depth.
  • Weekly checks: trust vector calibration and drift review.
  • Monthly checks: update trust bundles and audit logs.

Related references

  • architecture/reachability-vex.md
  • vex/consensus.md
  • docs/operations/trust-lattice-runbook.md
  • docs/operations/trust-lattice-troubleshooting.md