stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 2 Releases Wiki Activity
Files
bc4318ef971247e18c9c05f8b7838880f6584dc3
git.stella-ops.org/docs2/operations/unknowns-queue.md
master bc4318ef97 Add tests for SBOM generation determinism across multiple formats 
- Created `StellaOps.TestKit.Tests` project for unit tests related to determinism.
- Implemented `DeterminismManifestTests` to validate deterministic output for canonical bytes and strings, file read/write operations, and error handling for invalid schema versions.
- Added `SbomDeterminismTests` to ensure identical inputs produce consistent SBOMs across SPDX 3.0.1 and CycloneDX 1.6/1.7 formats, including parallel execution tests.
- Updated project references in `StellaOps.Integration.Determinism` to include the new determinism testing library.
2025-12-23 18:56:12 +02:00

936 B
Raw Blame History

Unknowns queue operations

Purpose

  • Manage unknown components with deterministic triage and SLA tracking.

Queue model

  • Bands: HOT, WARM, COLD based on score and SLA.
  • Reasons include reachability gaps, provenance gaps, VEX conflicts, and ingestion gaps.

Core workflows

  • List and triage unknowns by band and reason.
  • Escalate or resolve with documented justification.
  • Suppress with expiry and audit trail when approved.

Budgets and SLAs

  • Per-environment budgets cap unknowns by reason.
  • SLA timers trigger alerts when breached.

Monitoring

  • unknowns_total, unknowns_hot_count, unknowns_sla_breached
  • unknowns_escalation_failures, unknowns_avg_age_hours
  • KEV-specific unknown counts and age

Alerting cues

  • HOT band spikes or SLA breaches.
  • KEV unknowns older than 24 hours.
  • Rising queue growth rate.

Related references

  • signals/unknowns.md
  • signals/unknowns-ranking.md
  • docs/operations/unknowns-queue-runbook.md