25 lines
1.4 KiB
Markdown
25 lines
1.4 KiB
Markdown
# Concelier Policy Studio Signal Picker
|
|
|
|
## Module
|
|
Concelier
|
|
|
|
## Status
|
|
IMPLEMENTED
|
|
|
|
## Description
|
|
Policy Studio integration that selects and filters risk signals from advisory data for policy evaluation, including vendor risk signal extraction and fix availability emission. Not in the known list.
|
|
|
|
## Implementation Details
|
|
- **Modules**: `src/Concelier/__Libraries/StellaOps.Concelier.Core/Risk/PolicyStudio/`, `src/Concelier/__Libraries/StellaOps.Concelier.Core/Risk/`
|
|
- **Key Classes**:
|
|
- `PolicyStudioSignalPicker` (`src/Concelier/__Libraries/StellaOps.Concelier.Core/Risk/PolicyStudio/PolicyStudioSignalPicker.cs`) - selects and filters risk signals for policy evaluation
|
|
- `VendorRiskSignalExtractor` (`src/Concelier/__Libraries/StellaOps.Concelier.Core/Risk/VendorRiskSignalExtractor.cs`) - extracts risk signals from vendor advisory data
|
|
- **Interfaces**: `IPolicyStudioSignalPicker`
|
|
- **Source**: Sprint 0114-0115 (batch_14/file_15-16.md)
|
|
|
|
## E2E Test Plan
|
|
- [ ] Provide an advisory with vendor risk data and verify `PolicyStudioSignalPicker` extracts the correct signals
|
|
- [ ] Verify fix availability signal: advisory with a known fix emits a fix-available signal
|
|
- [ ] Verify `VendorRiskSignalExtractor` correctly maps vendor-specific fields to standardized risk signals
|
|
- [ ] Verify signal filtering: configure the picker to exclude certain signal types and confirm they are omitted
|