1.5 KiB
1.5 KiB
Incident Mode
Module
EvidenceLocker
Status
IMPLEMENTED
Description
Incident mode management with state tracking, manager service, and incident notifier for evidence integrity violations.
Implementation Details
- Modules:
src/EvidenceLocker/StellaOps.EvidenceLocker/StellaOps.EvidenceLocker.Infrastructure/Services/,src/EvidenceLocker/StellaOps.EvidenceLocker/StellaOps.EvidenceLocker.Core/ - Key Classes:
IncidentModeManager(src/EvidenceLocker/StellaOps.EvidenceLocker/StellaOps.EvidenceLocker.Infrastructure/Services/IncidentModeManager.cs) - manages incident mode activation, deactivation, and state transitionsEvidenceAuditLogger(src/EvidenceLocker/StellaOps.EvidenceLocker/StellaOps.EvidenceLocker.WebService/Audit/EvidenceAuditLogger.cs) - logs audit events during incident mode
- Interfaces:
IIncidentModeState,IEvidenceIncidentNotifier - Source: Feature matrix scan
E2E Test Plan
- Activate incident mode via
IncidentModeManagerand verifyIIncidentModeStatereflects the active state - Verify
IEvidenceIncidentNotifiersends notifications when evidence integrity violations are detected - Verify incident mode prevents evidence deletion or modification while active
- Deactivate incident mode and verify normal operations resume
- Verify
EvidenceAuditLoggerrecords incident mode activation/deactivation events with timestamps - Verify incident mode state persists across service restarts