110 lines
18 KiB
JSON
110 lines
18 KiB
JSON
{
|
|
"module": "riskengine",
|
|
"featureCount": 3,
|
|
"lastUpdatedUtc": "2026-02-11T00:27:19.2443974Z",
|
|
"summary": {
|
|
"passed": 3,
|
|
"failed": 0,
|
|
"blocked": 0,
|
|
"skipped": 0,
|
|
"done": 3
|
|
},
|
|
"buildNote": "RiskEngine strict module sweep run-014 captured fresh live HTTPS API evidence for provider simulations and exploit-maturity endpoints, then reran RiskEngine.Tests in Release (94/94).",
|
|
"features": {
|
|
"cvss-kev-risk-signal-combination": {
|
|
"status": "done",
|
|
"tier": 2,
|
|
"retryCount": 1,
|
|
"sourceVerified": true,
|
|
"buildVerified": true,
|
|
"e2eVerified": true,
|
|
"skipReason": null,
|
|
"lastRunId": "run-014",
|
|
"lastUpdatedUtc": "2026-02-11T00:27:19.2443974Z",
|
|
"featureFile": "docs/features/checked/riskengine/cvss-kev-risk-signal-combination.md",
|
|
"notes": [
|
|
"[2026-02-10T04:00:00Z] checking: CvssKevProvider (deterministic formula), VexGateProvider, FixExposureProvider, FixChainRiskProvider (349 lines). 44+ tests.",
|
|
"[2026-02-10T04:00:00Z] done: Moved to checked/",
|
|
"[2026-02-10T12:18:30Z] retesting: Tier 2 API recheck started for /risk-scores/providers and /risk-scores/simulations.",
|
|
"[2026-02-10T12:18:45Z] failed: API replay exposed end-user reachability gap for EPSS-family providers/signals.",
|
|
"[2026-02-10T12:19:30Z] triaged: missing_code -- WebService provider registry omitted epss/cvss-kev-epss and provider scoring paths did not honor inline simulation signals before null-source fallback.",
|
|
"[2026-02-10T12:21:14Z] done: Added provider registration, inline-signal fallback scoring, and API/provider regression tests. RiskEngine.Tests 94/94 pass. Evidence: docs/qa/feature-checks/runs/riskengine/cvss-kev-risk-signal-combination/run-002/tier2-api-check.json.",
|
|
"[2026-02-10T14:12:44Z] done: Tier 2 API replay revalidated checked behavior after recent edits. Evidence: docs/qa/feature-checks/runs/riskengine/cvss-kev-risk-signal-combination/run-003/tier2-api-check.json.",
|
|
"[2026-02-10T19:37:59Z] done: Tier 2 API replay run-004 revalidated checked behavior after latest replay (94/94). Evidence: docs/qa/feature-checks/runs/riskengine/cvss-kev-risk-signal-combination/run-004/tier2-api-check.json.",
|
|
"[2026-02-10T19:57:00Z] done: Tier 2 API replay run-005 revalidated checked behavior after latest replay (94/94). Evidence: docs/qa/feature-checks/runs/riskengine/cvss-kev-risk-signal-combination/run-005/tier2-api-check.json.",
|
|
"[2026-02-10T20:29:43Z] done: Tier 2 API replay run-006 revalidated checked behavior after latest replay (94/94). Evidence: docs/qa/feature-checks/runs/riskengine/cvss-kev-risk-signal-combination/run-006/tier2-api-check.json.",
|
|
"[2026-02-10T20:41:28Z] done: Tier 2 API replay run-007 revalidated checked behavior after latest replay (94/94). Evidence: docs/qa/feature-checks/runs/riskengine/cvss-kev-risk-signal-combination/run-007/tier2-api-check.json.",
|
|
"[2026-02-10T21:00:59Z] done: Tier 2 API replay run-008 revalidated checked behavior after latest replay (94/94). Evidence: docs/qa/feature-checks/runs/riskengine/cvss-kev-risk-signal-combination/run-008/tier2-api-check.json.",
|
|
"[2026-02-10T21:22:14Z] done: Tier 2 API replay run-009 revalidated checked behavior after latest replay (94/94). Evidence: docs/qa/feature-checks/runs/riskengine/cvss-kev-risk-signal-combination/run-009/tier2-api-check.json.",
|
|
"[2026-02-10T21:36:00Z] done: Tier 2 integration replay run-010 passed for checked feature (RiskEngine.Tests 94/94). Evidence: docs/qa/feature-checks/runs/riskengine/cvss-kev-risk-signal-combination/run-010/tier2-integration-check.json.",
|
|
"[2026-02-10T21:54:11Z] done: Tier 2 integration replay run-011 passed for checked feature (RiskEngine.Tests 94/94). Evidence: docs/qa/feature-checks/runs/riskengine/cvss-kev-risk-signal-combination/run-011/tier2-integration-check.json.",
|
|
"[2026-02-10T22:43:49Z] done: Tier 2 API replay run-012 passed for checked feature (RiskEngine.Tests 94/94). Evidence: docs/qa/feature-checks/runs/riskengine/cvss-kev-risk-signal-combination/run-012/tier2-api-check.json.",
|
|
"[2026-02-10T23:07:40Z] done: Tier 2 API run-013 captured fresh live HTTPS evidence for providers listing, CVSS+KEV simulation (0.95), CVSS-only simulation (0.75), and unknown-provider error semantics; RiskEngine.Tests 94/94. Evidence: docs/qa/feature-checks/runs/riskengine/cvss-kev-risk-signal-combination/run-013/tier2-api-check.json.",
|
|
"[2026-02-11T00:27:19.2443974Z] done: Strict Tier 2 API replay run-014 captured fresh providers/cvss-kev/unknown-provider behavior; RiskEngine.Tests 94/94. Evidence: docs/qa/feature-checks/runs/riskengine/cvss-kev-risk-signal-combination/run-014/tier2-api-check.json."
|
|
]
|
|
},
|
|
"epss-risk-band-mapping": {
|
|
"status": "done",
|
|
"tier": 2,
|
|
"retryCount": 1,
|
|
"sourceVerified": true,
|
|
"buildVerified": true,
|
|
"e2eVerified": true,
|
|
"skipReason": null,
|
|
"lastRunId": "run-014",
|
|
"lastUpdatedUtc": "2026-02-11T00:27:19.2443974Z",
|
|
"featureFile": "docs/features/checked/riskengine/epss-risk-band-mapping.md",
|
|
"notes": [
|
|
"[2026-02-10T04:00:00Z] checking: EpssProvider + CvssKevEpssProvider (124 lines), EpssBundleLoader (224 lines), EpssFetcher (223 lines). 14+ tests.",
|
|
"[2026-02-10T04:00:00Z] done: Moved to checked/",
|
|
"[2026-02-10T12:19:00Z] retesting: Tier 2 API recheck started for epss and cvss-kev-epss simulation paths.",
|
|
"[2026-02-10T12:19:15Z] failed: EPSS simulation path required provider registration/signal ingress fixes to satisfy end-user replay checks.",
|
|
"[2026-02-10T12:19:30Z] triaged: missing_code -- EPSS providers were not registered in public provider list and EPSS inline simulation signals were not consumed before null-source fallback.",
|
|
"[2026-02-10T12:21:14Z] done: Added provider registration plus inline EPSS signal handling and API regression tests. RiskEngine.Tests 94/94 pass. Evidence: docs/qa/feature-checks/runs/riskengine/epss-risk-band-mapping/run-002/tier2-api-check.json.",
|
|
"[2026-02-10T14:12:44Z] done: Tier 2 API replay revalidated checked behavior after recent edits. Evidence: docs/qa/feature-checks/runs/riskengine/epss-risk-band-mapping/run-003/tier2-api-check.json.",
|
|
"[2026-02-10T19:37:59Z] done: Tier 2 API replay run-004 revalidated checked behavior after latest replay (94/94). Evidence: docs/qa/feature-checks/runs/riskengine/epss-risk-band-mapping/run-004/tier2-api-check.json.",
|
|
"[2026-02-10T19:57:00Z] done: Tier 2 API replay run-005 revalidated checked behavior after latest replay (94/94). Evidence: docs/qa/feature-checks/runs/riskengine/epss-risk-band-mapping/run-005/tier2-api-check.json.",
|
|
"[2026-02-10T20:29:43Z] done: Tier 2 API replay run-006 revalidated checked behavior after latest replay (94/94). Evidence: docs/qa/feature-checks/runs/riskengine/epss-risk-band-mapping/run-006/tier2-api-check.json.",
|
|
"[2026-02-10T20:41:28Z] done: Tier 2 API replay run-007 revalidated checked behavior after latest replay (94/94). Evidence: docs/qa/feature-checks/runs/riskengine/epss-risk-band-mapping/run-007/tier2-api-check.json.",
|
|
"[2026-02-10T21:00:59Z] done: Tier 2 API replay run-008 revalidated checked behavior after latest replay (94/94). Evidence: docs/qa/feature-checks/runs/riskengine/epss-risk-band-mapping/run-008/tier2-api-check.json.",
|
|
"[2026-02-10T21:22:14Z] done: Tier 2 API replay run-009 revalidated checked behavior after latest replay (94/94). Evidence: docs/qa/feature-checks/runs/riskengine/epss-risk-band-mapping/run-009/tier2-api-check.json.",
|
|
"[2026-02-10T21:36:00Z] done: Tier 2 integration replay run-010 passed for checked feature (RiskEngine.Tests 94/94). Evidence: docs/qa/feature-checks/runs/riskengine/epss-risk-band-mapping/run-010/tier2-integration-check.json.",
|
|
"[2026-02-10T21:54:11Z] done: Tier 2 integration replay run-011 passed for checked feature (RiskEngine.Tests 94/94). Evidence: docs/qa/feature-checks/runs/riskengine/epss-risk-band-mapping/run-011/tier2-integration-check.json.",
|
|
"[2026-02-10T22:43:49Z] done: Tier 2 API replay run-012 passed for checked feature (RiskEngine.Tests 94/94). Evidence: docs/qa/feature-checks/runs/riskengine/epss-risk-band-mapping/run-012/tier2-api-check.json.",
|
|
"[2026-02-10T23:07:40Z] done: Tier 2 API run-013 captured fresh live HTTPS evidence for EPSS score mapping (0.77), combined CVSS+KEV+EPSS percentile bonus path (0.55), and missing-signal fallback (0); RiskEngine.Tests 94/94. Evidence: docs/qa/feature-checks/runs/riskengine/epss-risk-band-mapping/run-013/tier2-api-check.json.",
|
|
"[2026-02-11T00:27:19.2443974Z] done: Strict Tier 2 API replay run-014 captured fresh epss and cvss-kev-epss signal mapping behavior; RiskEngine.Tests 94/94. Evidence: docs/qa/feature-checks/runs/riskengine/epss-risk-band-mapping/run-014/tier2-api-check.json."
|
|
]
|
|
},
|
|
"exploit-maturity-mapping": {
|
|
"status": "done",
|
|
"tier": 2,
|
|
"retryCount": 0,
|
|
"sourceVerified": true,
|
|
"buildVerified": true,
|
|
"e2eVerified": true,
|
|
"skipReason": null,
|
|
"lastRunId": "run-014",
|
|
"lastUpdatedUtc": "2026-02-11T00:27:19.2443974Z",
|
|
"featureFile": "docs/features/checked/riskengine/exploit-maturity-mapping.md",
|
|
"notes": [
|
|
"[2026-02-10T04:00:00Z] checking: ExploitMaturityService (227 lines), ExploitMaturityModels (89 lines), ExploitMaturityEndpoints (134 lines). 23 tests.",
|
|
"[2026-02-10T04:00:00Z] note: GetMaturityHistoryAsync returns empty (requires persistence). Core assessment service fully functional.",
|
|
"[2026-02-10T04:00:00Z] done: Moved to checked/",
|
|
"[2026-02-10T12:19:30Z] done: Tier 2 API replay passed for assessment, level, history, and batch endpoints. Evidence: docs/qa/feature-checks/runs/riskengine/exploit-maturity-mapping/run-002/tier2-api-check.json.",
|
|
"[2026-02-10T14:12:44Z] done: Tier 2 API replay revalidated checked behavior after recent edits. Evidence: docs/qa/feature-checks/runs/riskengine/exploit-maturity-mapping/run-003/tier2-api-check.json.",
|
|
"[2026-02-10T19:37:59Z] done: Tier 2 API replay run-004 revalidated checked behavior after latest replay (94/94). Evidence: docs/qa/feature-checks/runs/riskengine/exploit-maturity-mapping/run-004/tier2-api-check.json.",
|
|
"[2026-02-10T19:57:00Z] done: Tier 2 API replay run-005 revalidated checked behavior after latest replay (94/94). Evidence: docs/qa/feature-checks/runs/riskengine/exploit-maturity-mapping/run-005/tier2-api-check.json.",
|
|
"[2026-02-10T20:29:43Z] done: Tier 2 API replay run-006 revalidated checked behavior after latest replay (94/94). Evidence: docs/qa/feature-checks/runs/riskengine/exploit-maturity-mapping/run-006/tier2-api-check.json.",
|
|
"[2026-02-10T20:41:28Z] done: Tier 2 API replay run-007 revalidated checked behavior after latest replay (94/94). Evidence: docs/qa/feature-checks/runs/riskengine/exploit-maturity-mapping/run-007/tier2-api-check.json.",
|
|
"[2026-02-10T21:00:59Z] done: Tier 2 API replay run-008 revalidated checked behavior after latest replay (94/94). Evidence: docs/qa/feature-checks/runs/riskengine/exploit-maturity-mapping/run-008/tier2-api-check.json.",
|
|
"[2026-02-10T21:22:14Z] done: Tier 2 API replay run-009 revalidated checked behavior after latest replay (94/94). Evidence: docs/qa/feature-checks/runs/riskengine/exploit-maturity-mapping/run-009/tier2-api-check.json.",
|
|
"[2026-02-10T21:36:00Z] done: Tier 2 integration replay run-010 passed for checked feature (RiskEngine.Tests 94/94). Evidence: docs/qa/feature-checks/runs/riskengine/exploit-maturity-mapping/run-010/tier2-integration-check.json.",
|
|
"[2026-02-10T21:54:11Z] done: Tier 2 integration replay run-011 passed for checked feature (RiskEngine.Tests 94/94). Evidence: docs/qa/feature-checks/runs/riskengine/exploit-maturity-mapping/run-011/tier2-integration-check.json.",
|
|
"[2026-02-10T22:43:49Z] done: Tier 2 API replay run-012 passed for checked feature (RiskEngine.Tests 94/94). Evidence: docs/qa/feature-checks/runs/riskengine/exploit-maturity-mapping/run-012/tier2-api-check.json.",
|
|
"[2026-02-10T23:07:40Z] done: Tier 2 API run-013 captured fresh live HTTPS evidence for exploit-maturity assessment/level/history plus batch success and batch-empty 400 validation; RiskEngine.Tests 94/94. Evidence: docs/qa/feature-checks/runs/riskengine/exploit-maturity-mapping/run-013/tier2-api-check.json.",
|
|
"[2026-02-11T00:27:19.2443974Z] done: Strict Tier 2 API replay run-014 captured fresh exploit-maturity assess/level/history and batch validation semantics; RiskEngine.Tests 94/94. Evidence: docs/qa/feature-checks/runs/riskengine/exploit-maturity-mapping/run-014/tier2-api-check.json."
|
|
]
|
|
}
|
|
}
|
|
}
|