stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 16 Releases Wiki Activity
Files
cef4cb2c5a2d29b5b40a4a25cd7f8426c8c5dd4f
git.stella-ops.org/docs/implplan/SPRINT_213_web_ii.md
master cef4cb2c5a Add support for ГОСТ Р 34.10 digital signatures 
- Implemented the GostKeyValue class for handling public key parameters in ГОСТ Р 34.10 digital signatures.
- Created the GostSignedXml class to manage XML signatures using ГОСТ 34.10, including methods for computing and checking signatures.
- Developed the GostSignedXmlImpl class to encapsulate the signature computation logic and public key retrieval.
- Added specific key value classes for ГОСТ Р 34.10-2001, ГОСТ Р 34.10-2012/256, and ГОСТ Р 34.10-2012/512 to support different signature algorithms.
- Ensured compatibility with existing XML signature standards while integrating ГОСТ cryptography.
2025-11-09 21:59:57 +02:00

4.3 KiB
Raw Blame History

Sprint 213 - Experience & SDKs · 180.F) Web.II

Active items only. Completed/historic work now resides in docs/implplan/archived/tasks.md (updated 2025-11-08).

[Experience & SDKs] 180.F) Web.II Depends on: Sprint 180.F - Web.I Summary: Experience & SDKs focus on Web (phase II).

Task ID State Task description Owners (Source)
WEB-EXC-25-002 Policy integration surfaces TODO Extend /policy/effective and /policy/simulate responses to include exception metadata and accept overrides for simulations. Dependencies: WEB-EXC-25-001. BE-Base Platform Guild (src/Web/StellaOps.Web)
WEB-EXC-25-003 Notifications & events TODO Publish exception.* events, integrate with notification hooks, enforce rate limits. Dependencies: WEB-EXC-25-002. BE-Base Platform Guild, Platform Events Guild (src/Web/StellaOps.Web)
WEB-EXPORT-35-001 Export routing TODO Surface Export Center APIs (profiles/runs/download) through gateway with tenant scoping, streaming support, and viewer/operator scope checks. BE-Base Platform Guild (src/Web/StellaOps.Web)
WEB-EXPORT-36-001 Distribution endpoints TODO Add distribution routes (OCI/object storage), manifest/provenance proxies, and signed URL generation. Dependencies: WEB-EXPORT-35-001. BE-Base Platform Guild (src/Web/StellaOps.Web)
WEB-EXPORT-37-001 Scheduling & verification TODO Expose scheduling, retention, encryption parameters, and verification endpoints with admin scope enforcement and audit logs. Dependencies: WEB-EXPORT-36-001. BE-Base Platform Guild (src/Web/StellaOps.Web)
WEB-GRAPH-21-001 Graph endpoints BLOCKED (2025-10-27) Add gateway routes for graph versions/viewport/node/path/diff/export endpoints with tenant enforcement, scope checks, and streaming responses; proxy Policy Engine diff toggles without inline logic. Adopt StellaOpsScopes constants for RBAC enforcement. BE-Base Platform Guild, Graph Platform Guild (src/Web/StellaOps.Web)
WEB-GRAPH-21-002 Request validation BLOCKED (2025-10-27) Implement bbox/zoom/path parameter validation, pagination tokens, and deterministic ordering; add contract tests for boundary conditions. Dependencies: WEB-GRAPH-21-001. BE-Base Platform Guild (src/Web/StellaOps.Web)
WEB-GRAPH-21-003 Error mapping & exports BLOCKED (2025-10-27) Map graph service errors to ERR_Graph_*, support GraphML/JSONL export streaming, and document rate limits. Dependencies: WEB-GRAPH-21-002. BE-Base Platform Guild, QA Guild (src/Web/StellaOps.Web)
WEB-GRAPH-21-004 Overlay pass-through BLOCKED (2025-10-27) Proxy Policy Engine overlay responses for graph endpoints while keeping gateway stateless; maintain streaming budgets and latency SLOs. Dependencies: WEB-GRAPH-21-003. BE-Base Platform Guild, Policy Guild (src/Web/StellaOps.Web)
WEB-GRAPH-24-001 Gateway proxy refresh TODO Gateway proxy for Graph API and Policy overlays with RBAC, caching, pagination, ETags, and streaming; zero business logic. Dependencies: WEB-GRAPH-21-004. BE-Base Platform Guild (src/Web/StellaOps.Web)
WEB-GRAPH-24-001 Graph endpoints TODO Implement /graph/assets/* endpoints (snapshots, adjacency, search) with pagination, ETags, and tenant scoping while acting as a pure proxy. Dependencies: WEB-GRAPH-24-001. BE-Base Platform Guild, SBOM Service Guild (src/Web/StellaOps.Web)
WEB-GRAPH-24-004 AOC enrichers TODO Embed AOC summaries sourced from overlay services; ensure gateway does not compute derived severity or hints. Dependencies: WEB-GRAPH-24-001. BE-Base Platform Guild (src/Web/StellaOps.Web)
WEB-GRAPH-24-004 Telemetry aggregation TODO Collect gateway metrics/logs (tile latency, proxy errors, overlay cache stats) and forward to dashboards; document sampling strategy. Dependencies: WEB-GRAPH-24-004. BE-Base Platform Guild, Observability Guild (src/Web/StellaOps.Web)
WEB-LNM-21-001 Advisory observation endpoints TODO Surface new /advisories/* APIs through gateway with caching, pagination, and RBAC enforcement (advisory:read). BE-Base Platform Guild, Concelier WebService Guild (src/Web/StellaOps.Web)
WEB-LNM-21-002 VEX observation endpoints TODO Expose /vex/* read APIs with evidence routes and export handlers; map ERR_AGG_* codes. Dependencies: WEB-LNM-21-001. BE-Base Platform Guild, Excititor WebService Guild (src/Web/StellaOps.Web)