Files
git.stella-ops.org/docs/features/unchecked/excititor/excititor-vex-escalation-service.md

2.1 KiB

Excititor VEX escalation service

Module

Excititor

Status

IMPLEMENTED

Description

Excititor module with auto-VEX justification, calibration comparison engine, CycloneDX export, and export engine with test coverage.

Implementation Details

  • Modules: src/Excititor/__Libraries/StellaOps.Excititor.Core/, src/Excititor/__Libraries/StellaOps.Excititor.Export/
  • Key Classes:
    • AutoVexDowngradeService (src/Excititor/__Libraries/StellaOps.Excititor.Core/AutoVex/AutoVexDowngradeService.cs) - orchestrates auto-VEX downgrade and escalation
    • CalibrationComparisonEngine (src/Excititor/__Libraries/StellaOps.Excititor.Core/Calibration/CalibrationComparisonEngine.cs) - compares calibration results for post-mortem analysis
    • DriftGateIntegration (src/Excititor/__Libraries/StellaOps.Excititor.Core/AutoVex/DriftGateIntegration.cs) - integrates drift detection with VEX escalation
    • ExportEngine (src/Excititor/__Libraries/StellaOps.Excititor.Export/ExportEngine.cs) - multi-format VEX export engine (OpenVEX, CycloneDX, CSAF)
    • VexConsensusResolver (src/Excititor/__Libraries/StellaOps.Excititor.Core/VexConsensusResolver.cs) - resolves consensus across multiple VEX sources
    • VexConsensusRefreshService (src/Excititor/StellaOps.Excititor.Worker/Scheduling/VexConsensusRefreshService.cs) - scheduled refresh of VEX consensus
  • Interfaces: IVexConsensusPolicy, IVexExportStore
  • Source: Feature matrix scan

E2E Test Plan

  • Trigger a VEX escalation when conflicting claims are detected and verify AutoVexDowngradeService produces the correct escalated status
  • Verify CalibrationComparisonEngine compares pre/post calibration snapshots and reports differences
  • Verify DriftGateIntegration escalates VEX status when drift is detected in container images
  • Export VEX data via ExportEngine in CycloneDX format and verify schema compliance
  • Verify VexConsensusResolver resolves multi-source conflicts deterministically
  • Verify VexConsensusRefreshService periodically refreshes consensus and detects status changes