stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 12 Releases Wiki Activity
Files
d09ebd0b6471d7938b3b8ecba6e06c3768861dfb
git.stella-ops.org/docs/implplan/dependency_missing.csv
master d09ebd0b64
Some checks failed
Docs CI / lint-and-preview (push) Has been cancelled
Details
Refactor sprint planning docs and add templates 
Updated AGENTS.md with implementation planning conventions and stream index. Refactored SPRINT_110_ingestion_evidence.md, SPRINT_125_mirror.md, and SPRINT_300_documentation_process.md to use a topic-oriented template, clarify dependencies, task boards, and checkpoint structure. Archived previous sprint details and added new templates and status snapshot files to docs/implplan.
2025-11-13 19:23:57 +02:00

514 lines
45 KiB
CSV
Raw Blame History

Sprint | Task ID | Status | Missing dependency
SPRINT_110_ingestion_evidence | AIAI-31-008 | TODO | AIAI-31-006
SPRINT_110_ingestion_evidence | AIAI-31-008 | TODO | AIAI-31-007
SPRINT_110_ingestion_evidence | CONCELIER-AIAI-31-002 | DOING | CARTO-GRAPH-21-002
SPRINT_110_ingestion_evidence | CONCELIER-AIRGAP-56-001..58-001 | TODO | Evidence Locker attestation contract
SPRINT_110_ingestion_evidence | CONCELIER-AIRGAP-56-001..58-001 | TODO | Link-Not-Merge schema
SPRINT_110_ingestion_evidence | CONCELIER-ATTEST-73-001 | TODO | Evidence Locker contract
SPRINT_110_ingestion_evidence | CONCELIER-CONSOLE-23-001..003 | TODO | Link-Not-Merge schema
SPRINT_110_ingestion_evidence | EXCITITOR-AIAI-31-002 | TODO | Evidence Locker contract
SPRINT_110_ingestion_evidence | EXCITITOR-AIAI-31-002 | TODO | Link-Not-Merge schema
SPRINT_110_ingestion_evidence | EXCITITOR-AIRGAP-56 | TODO | Link-Not-Merge schema
SPRINT_110_ingestion_evidence | EXCITITOR-AIRGAP-56 | TODO | attestation plan
SPRINT_110_ingestion_evidence | EXCITITOR-ATTEST-01-003 | TODO | Evidence Locker contract
SPRINT_110_ingestion_evidence | EXCITITOR-CONN-TRUST-01-001 | TODO | Link-Not-Merge schema
SPRINT_110_ingestion_evidence | EXCITITOR-CONN-TRUST-01-001 | TODO | attestation plan
SPRINT_110_ingestion_evidence | FEEDCONN-ICSCISA-02-012 | BLOCKED | Feed owner remediation plan
SPRINT_110_ingestion_evidence | FEEDCONN-KISA-02-008 | BLOCKED | Feed owner remediation plan
SPRINT_110_ingestion_evidence | MIRROR-CRT-56-001 | TODO | Staffing decision
SPRINT_120_policy_reasoning | LEDGER-29-007 | TODO | Instrument metrics (`ledger_write_latency`
SPRINT_120_policy_reasoning | LEDGER-29-007 | TODO | LEDGER-29-006
SPRINT_120_policy_reasoning | LEDGER-29-007 | TODO | Merkle anchoring alerts
SPRINT_120_policy_reasoning | LEDGER-29-007 | TODO | `ledger_events_total`)
SPRINT_120_policy_reasoning | LEDGER-29-007 | TODO | `projection_lag_seconds`
SPRINT_120_policy_reasoning | LEDGER-29-007 | TODO | structured logs
SPRINT_120_policy_reasoning | LEDGER-29-008 | TODO | Develop unit/property/integration tests
SPRINT_120_policy_reasoning | LEDGER-29-008 | TODO | determinism harness
SPRINT_120_policy_reasoning | LEDGER-29-008 | TODO | replay/restore tooling
SPRINT_120_policy_reasoning | LEDGER-29-009 | TODO | Merkle anchor externalization (optional)
SPRINT_120_policy_reasoning | LEDGER-29-009 | TODO | Provide deployment manifests (Helm/Compose)
SPRINT_120_policy_reasoning | LEDGER-29-009 | TODO | backup/restore guidance
SPRINT_120_policy_reasoning | LEDGER-34-101 | TODO | Link orchestrator run ledger exports into Findings Ledger provenance chain
SPRINT_120_policy_reasoning | LEDGER-34-101 | TODO | index by artifact hash
SPRINT_120_policy_reasoning | LEDGER-AIRGAP-56-001 | TODO | Record bundle provenance (`bundle_id`
SPRINT_120_policy_reasoning | LEDGER-AIRGAP-56-001 | TODO | `merkle_root`
SPRINT_120_policy_reasoning | LEDGER-AIRGAP-56-001 | TODO | `time_anchor`) on ledger events for advisories/VEX/policies imported via Mirror Bundles
SPRINT_120_policy_reasoning | LEDGER-AIRGAP-56-002 | TODO | Surface staleness metrics for findings
SPRINT_120_policy_reasoning | LEDGER-AIRGAP-56-002 | TODO | block risk-critical exports when stale beyond thresholds
SPRINT_120_policy_reasoning | LEDGER-AIRGAP-57-001 | TODO | Link findings evidence snapshots to portable evidence bundles
SPRINT_120_policy_reasoning | LEDGER-AIRGAP-58-001 | TODO | Emit timeline events for bundle import impacts (new findings
SPRINT_120_policy_reasoning | LEDGER-ATTEST-73-001 | TODO | Persist pointers from findings to verification reports
SPRINT_120_policy_reasoning | LEDGER-ATTEST-73-001 | TODO | attestation envelopes for explainability
SPRINT_121_policy_reasoning | LEDGER-ATTEST-73-002 | TODO | Enable search/filter in findings projections by verification result
SPRINT_121_policy_reasoning | LEDGER-EXPORT-35-001 | TODO | Provide paginated streaming endpoints for advisories
SPRINT_121_policy_reasoning | LEDGER-EXPORT-35-001 | TODO | SBOMs
SPRINT_121_policy_reasoning | LEDGER-EXPORT-35-001 | TODO | VEX
SPRINT_121_policy_reasoning | LEDGER-EXPORT-35-001 | TODO | findings aligned with export filters
SPRINT_121_policy_reasoning | LEDGER-EXPORT-35-001 | TODO | including deterministic ordering
SPRINT_121_policy_reasoning | LEDGER-EXPORT-35-001 | TODO | provenance metadata
SPRINT_121_policy_reasoning | LEDGER-OAS-61-001 | TODO | Expand Findings Ledger OAS to include projections
SPRINT_121_policy_reasoning | LEDGER-OAS-61-001 | TODO | evidence lookups
SPRINT_121_policy_reasoning | LEDGER-OAS-61-001 | TODO | filter parameters with examples
SPRINT_121_policy_reasoning | LEDGER-OAS-61-002 | TODO | Implement `/.well-known/openapi` endpoint
SPRINT_121_policy_reasoning | LEDGER-OAS-62-001 | TODO | Provide SDK test cases for findings pagination
SPRINT_121_policy_reasoning | LEDGER-OAS-62-001 | TODO | evidence links
SPRINT_121_policy_reasoning | LEDGER-OAS-62-001 | TODO | filtering
SPRINT_121_policy_reasoning | LEDGER-OAS-63-001 | TODO | Support deprecation headers
SPRINT_121_policy_reasoning | LEDGER-OBS-50-001 | TODO | Integrate telemetry core within ledger writer/projector services
SPRINT_121_policy_reasoning | LEDGER-OBS-50-001 | TODO | emitting structured logs
SPRINT_121_policy_reasoning | LEDGER-OBS-50-001 | TODO | projector replay
SPRINT_121_policy_reasoning | LEDGER-OBS-50-001 | TODO | query APIs with tenant context
SPRINT_121_policy_reasoning | LEDGER-OBS-50-001 | TODO | trace spans for ledger append
SPRINT_121_policy_reasoning | LEDGER-OBS-51-001 | TODO | Publish metrics for ledger latency
SPRINT_121_policy_reasoning | LEDGER-OBS-51-001 | TODO | event throughput
SPRINT_121_policy_reasoning | LEDGER-OBS-51-001 | TODO | policy evaluation linkage. Define SLOs (ledger append P95 < 1s
SPRINT_121_policy_reasoning | LEDGER-OBS-51-001 | TODO | projector lag
SPRINT_121_policy_reasoning | LEDGER-OBS-51-001 | TODO | replay lag < 30s) with burn-rate alerts
SPRINT_121_policy_reasoning | LEDGER-OBS-52-001 | TODO | Emit timeline events for ledger writes
SPRINT_121_policy_reasoning | LEDGER-OBS-52-001 | TODO | `ledger.projection.updated`) with trace ID
SPRINT_121_policy_reasoning | LEDGER-OBS-52-001 | TODO | policy version
SPRINT_121_policy_reasoning | LEDGER-OBS-52-001 | TODO | projector commits (`ledger.event.appended`
SPRINT_121_policy_reasoning | LEDGER-OBS-53-001 | TODO | Persist evidence bundle references (evaluation/job capsules) alongside ledger entries
SPRINT_121_policy_reasoning | LEDGER-OBS-53-001 | TODO | exposing lookup API linking findings to evidence manifests
SPRINT_121_policy_reasoning | LEDGER-OBS-54-001 | TODO | Verify attestation references for ledger-derived exports
SPRINT_121_policy_reasoning | LEDGER-OBS-54-001 | TODO | expose `/ledger/attestations` endpoint returning DSSE verification state
SPRINT_121_policy_reasoning | LEDGER-OBS-55-001 | TODO | Enhance incident mode to record additional replay diagnostics (lag traces
SPRINT_121_policy_reasoning | LEDGER-OBS-55-001 | TODO | conflict snapshots)
SPRINT_121_policy_reasoning | LEDGER-PACKS-42-001 | TODO | CLI offline mode
SPRINT_121_policy_reasoning | LEDGER-PACKS-42-001 | TODO | Provide snapshot/time-travel APIs
SPRINT_121_policy_reasoning | LEDGER-PACKS-42-001 | TODO | digestable exports for task pack simulation
SPRINT_121_policy_reasoning | LEDGER-RISK-66-001 | TODO | Add schema migrations for `risk_score`
SPRINT_121_policy_reasoning | LEDGER-RISK-66-001 | TODO | `explanation_id`
SPRINT_121_policy_reasoning | LEDGER-RISK-66-001 | TODO | `profile_version`
SPRINT_121_policy_reasoning | LEDGER-RISK-66-001 | TODO | `risk_severity`
SPRINT_121_policy_reasoning | LEDGER-RISK-66-001 | TODO | supporting indexes
SPRINT_122_policy_reasoning | LEDGER-RISK-67-001 | TODO | Expose query APIs for scored findings with score/severity filters
SPRINT_122_policy_reasoning | LEDGER-RISK-67-001 | TODO | pagination
SPRINT_122_policy_reasoning | LEDGER-RISK-68-001 | TODO | Enable export of scored findings
SPRINT_122_policy_reasoning | LEDGER-RISK-69-001 | TODO | Emit metrics/dashboards for scoring latency
SPRINT_122_policy_reasoning | LEDGER-RISK-69-001 | TODO | result freshness
SPRINT_122_policy_reasoning | LEDGER-RISK-69-001 | TODO | severity distribution
SPRINT_122_policy_reasoning | LEDGER-TEN-48-001 | TODO | Partition ledger tables by tenant/project
SPRINT_122_policy_reasoning | LEDGER-TEN-48-001 | TODO | enable RLS
SPRINT_122_policy_reasoning | LEDGER-TEN-48-001 | TODO | stamp audit metadata
SPRINT_122_policy_reasoning | LEDGER-TEN-48-001 | TODO | update queries/events
SPRINT_123_policy_reasoning | EXPORT-CONSOLE-23-001 | TODO | Build evidence bundle/export generator producing signed manifests
SPRINT_123_policy_reasoning | EXPORT-CONSOLE-23-001 | TODO | CSV/JSON replay endpoints
SPRINT_123_policy_reasoning | EXPORT-CONSOLE-23-001 | TODO | expose progress telemetry
SPRINT_123_policy_reasoning | EXPORT-CONSOLE-23-001 | TODO | integrate with scheduler jobs
SPRINT_123_policy_reasoning | EXPORT-CONSOLE-23-001 | TODO | trace attachments
SPRINT_123_policy_reasoning | POLICY-AIRGAP-56-001 | TODO | Support policy pack imports from Mirror Bundles
SPRINT_123_policy_reasoning | POLICY-AIRGAP-56-001 | TODO | ensure deterministic caching
SPRINT_123_policy_reasoning | POLICY-AIRGAP-56-001 | TODO | track `bundle_id` metadata
SPRINT_123_policy_reasoning | POLICY-AIRGAP-57-001 | TODO | Enforce sealed-mode guardrails in evaluation (no outbound fetch)
SPRINT_123_policy_reasoning | POLICY-AIRGAP-57-002 | TODO | Annotate rule explanations with staleness information
SPRINT_123_policy_reasoning | POLICY-AIRGAP-57-002 | TODO | fallback data (cached EPSS
SPRINT_123_policy_reasoning | POLICY-AOC-19-001 | TODO | Add Roslyn/CI lint preventing ingestion projects from referencing Policy merge/severity helpers
SPRINT_123_policy_reasoning | POLICY-AOC-19-001 | TODO | block forbidden writes at compile time
SPRINT_123_policy_reasoning | POLICY-AOC-19-003 | TODO | Update readers/processors to consume only `content.raw`
SPRINT_123_policy_reasoning | POLICY-AOC-19-003 | TODO | `identifiers`
SPRINT_123_policy_reasoning | POLICY-AOC-19-003 | TODO | `linkset`. Remove dependencies on legacy normalized fields
SPRINT_123_policy_reasoning | POLICY-AOC-19-004 | TODO | Add regression tests ensuring policy derived outputs remain deterministic when ingesting revised raw docs (supersedes)
SPRINT_123_policy_reasoning | POLICY-ATTEST-73-001 | TODO | Introduce VerificationPolicy object: schema
SPRINT_123_policy_reasoning | POLICY-ATTEST-73-001 | TODO | lifecycle
SPRINT_123_policy_reasoning | POLICY-ATTEST-73-001 | TODO | persistence
SPRINT_123_policy_reasoning | POLICY-ATTEST-73-001 | TODO | versioning
SPRINT_123_policy_reasoning | POLICY-ATTEST-73-002 | TODO | Provide Policy Studio editor with validation
SPRINT_123_policy_reasoning | POLICY-ATTEST-73-002 | TODO | dry-run simulation
SPRINT_123_policy_reasoning | POLICY-ATTEST-74-001 | TODO | Integrate verification policies into attestor verification pipeline with caching
SPRINT_123_policy_reasoning | POLICY-CONSOLE-23-001 | TODO | Optimize findings/explain APIs for Console: cursor-based pagination at scale
SPRINT_123_policy_reasoning | POLICY-CONSOLE-23-001 | TODO | aggregation hints for dashboard cards. Ensure deterministic ordering
SPRINT_123_policy_reasoning | POLICY-CONSOLE-23-001 | TODO | expose provenance refs
SPRINT_123_policy_reasoning | POLICY-CONSOLE-23-001 | TODO | global filter parameters (severity bands
SPRINT_123_policy_reasoning | POLICY-CONSOLE-23-001 | TODO | policy version
SPRINT_123_policy_reasoning | POLICY-CONSOLE-23-001 | TODO | rule trace summarization
SPRINT_123_policy_reasoning | POLICY-CONSOLE-23-001 | TODO | time window)
SPRINT_124_policy_reasoning | POLICY-CONSOLE-23-002 | TODO | Produce simulation diff metadata (before/after counts
SPRINT_124_policy_reasoning | POLICY-CONSOLE-23-002 | TODO | approval state endpoints consumed by Console policy workspace
SPRINT_124_policy_reasoning | POLICY-CONSOLE-23-002 | TODO | rule impact summaries)
SPRINT_124_policy_reasoning | POLICY-CONSOLE-23-002 | TODO | severity deltas
SPRINT_124_policy_reasoning | POLICY-ENGINE-20-002 | BLOCKED | Build deterministic evaluator honoring lexical/priority order
SPRINT_124_policy_reasoning | POLICY-ENGINE-20-002 | BLOCKED | first-match semantics
SPRINT_124_policy_reasoning | POLICY-ENGINE-20-002 | BLOCKED | safe value types (no wall-clock/network access)
SPRINT_124_policy_reasoning | POLICY-ENGINE-20-003 | TODO | Implement selection joiners resolving SBOM↔advisory↔VEX tuples using linksets
SPRINT_124_policy_reasoning | POLICY-ENGINE-20-003 | TODO | PURL equivalence tables
SPRINT_124_policy_reasoning | POLICY-ENGINE-20-004 | TODO | Ship materialization writer that upserts into `effective_finding_{policyId}` with append-only history
SPRINT_124_policy_reasoning | POLICY-ENGINE-20-004 | TODO | tenant scoping
SPRINT_124_policy_reasoning | POLICY-ENGINE-20-005 | TODO | Enforce determinism guard banning wall-clock
SPRINT_124_policy_reasoning | POLICY-ENGINE-20-005 | TODO | RNG
SPRINT_124_policy_reasoning | POLICY-ENGINE-20-006 | TODO | Implement incremental orchestrator reacting to advisory/vex/SBOM change streams
SPRINT_124_policy_reasoning | POLICY-ENGINE-20-007 | TODO | Emit structured traces/logs of rule hits with sampling controls
SPRINT_124_policy_reasoning | POLICY-ENGINE-20-007 | TODO | `vex_overrides_total`)
SPRINT_124_policy_reasoning | POLICY-ENGINE-20-007 | TODO | metrics (`rules_fired_total`
SPRINT_124_policy_reasoning | POLICY-ENGINE-20-008 | TODO | Add unit/property/golden/perf suites covering policy compilation
SPRINT_124_policy_reasoning | POLICY-ENGINE-20-008 | TODO | determinism
SPRINT_124_policy_reasoning | POLICY-ENGINE-20-008 | TODO | evaluation correctness
SPRINT_124_policy_reasoning | POLICY-ENGINE-20-009 | TODO | Define Mongo schemas/indexes for `policies`
SPRINT_124_policy_reasoning | POLICY-ENGINE-20-009 | TODO | `effective_finding_*`
SPRINT_124_policy_reasoning | POLICY-ENGINE-20-009 | TODO | `policy_runs`
SPRINT_124_policy_reasoning | POLICY-ENGINE-20-009 | TODO | implement migrations
SPRINT_124_policy_reasoning | POLICY-ENGINE-27-001 | TODO | Extend compile outputs to include rule coverage metadata
SPRINT_124_policy_reasoning | POLICY-ENGINE-27-001 | TODO | inline documentation
SPRINT_124_policy_reasoning | POLICY-ENGINE-27-001 | TODO | rule index for editor autocomplete
SPRINT_124_policy_reasoning | POLICY-ENGINE-27-001 | TODO | symbol table
SPRINT_124_policy_reasoning | POLICY-ENGINE-27-002 | TODO | Enhance simulate endpoints to emit rule firing counts
SPRINT_124_policy_reasoning | POLICY-ENGINE-27-002 | TODO | heatmap aggregates
SPRINT_124_policy_reasoning | POLICY-ENGINE-27-002 | TODO | sampled explain traces with deterministic ordering
SPRINT_124_policy_reasoning | POLICY-ENGINE-29-001 | TODO | Implement batch evaluation endpoint (`POST /policy/eval/batch`) returning determinations + rationale chain for sets of `(artifact
SPRINT_124_policy_reasoning | POLICY-ENGINE-29-001 | TODO | POLICY-ENGINE-27-004
SPRINT_124_policy_reasoning | POLICY-ENGINE-29-001 | TODO | advisory)` tuples
SPRINT_124_policy_reasoning | POLICY-ENGINE-29-001 | TODO | purl
SPRINT_124_policy_reasoning | POLICY-ENGINE-29-001 | TODO | support pagination
SPRINT_124_policy_reasoning | POLICY-ENGINE-29-001 | TODO | version
SPRINT_124_policy_reasoning | POLICY-ENGINE-29-002 | TODO | Provide streaming simulation API comparing two policy versions
SPRINT_124_policy_reasoning | POLICY-ENGINE-29-002 | TODO | returning per-finding deltas without writes
SPRINT_125_mirror | MIRROR-CRT-56-001 | TODO | Staffing decision
SPRINT_125_policy_reasoning | POLICY-ENGINE-29-003 | TODO | Surface path/scope awareness in determinations (signal optional/dev/test downgrade
SPRINT_125_policy_reasoning | POLICY-ENGINE-29-004 | TODO | Add metrics/logs for batch evaluation (latency
SPRINT_125_policy_reasoning | POLICY-ENGINE-29-004 | TODO | queue depth)
SPRINT_125_policy_reasoning | POLICY-ENGINE-29-004 | TODO | simulation diff counts
SPRINT_125_policy_reasoning | POLICY-ENGINE-30-001 | TODO | Define overlay contract for graph nodes/edges (status
SPRINT_125_policy_reasoning | POLICY-ENGINE-30-001 | TODO | expose projection API for Cartographer
SPRINT_125_policy_reasoning | POLICY-ENGINE-30-001 | TODO | path relevance)
SPRINT_125_policy_reasoning | POLICY-ENGINE-30-001 | TODO | rationale refs
SPRINT_125_policy_reasoning | POLICY-ENGINE-30-001 | TODO | severity
SPRINT_125_policy_reasoning | POLICY-ENGINE-30-002 | TODO | Implement simulation bridge returning on-the-fly overlays for Cartographer/Graph Explorer when invoking Policy Engine simulate
SPRINT_125_policy_reasoning | POLICY-ENGINE-30-002 | TODO | ensure no writes
SPRINT_125_policy_reasoning | POLICY-ENGINE-30-101 | TODO | Surface trust weighting configuration (issuer base weights
SPRINT_125_policy_reasoning | POLICY-ENGINE-30-101 | TODO | recency decay
SPRINT_125_policy_reasoning | POLICY-ENGINE-30-101 | TODO | scope adjustments) for VEX Lens via Policy Studio + API
SPRINT_125_policy_reasoning | POLICY-ENGINE-30-101 | TODO | signature modifiers
SPRINT_125_policy_reasoning | POLICY-ENGINE-31-001 | TODO | Expose policy knobs for Advisory AI (trust presets
SPRINT_125_policy_reasoning | POLICY-ENGINE-31-001 | TODO | TTLs) via Policy Studio
SPRINT_125_policy_reasoning | POLICY-ENGINE-31-001 | TODO | plan ranking weights
SPRINT_125_policy_reasoning | POLICY-ENGINE-31-001 | TODO | temperature
SPRINT_125_policy_reasoning | POLICY-ENGINE-31-001 | TODO | token limits
SPRINT_125_policy_reasoning | POLICY-ENGINE-31-002 | TODO | Provide batch endpoint delivering policy context (thresholds
SPRINT_125_policy_reasoning | POLICY-ENGINE-32-101 | TODO | Define orchestrator `policy_eval` job schema
SPRINT_125_policy_reasoning | POLICY-ENGINE-32-101 | TODO | idempotency keys
SPRINT_125_policy_reasoning | POLICY-ENGINE-33-101 | TODO | Implement orchestrator-driven policy evaluation workers using SDK heartbeats
SPRINT_125_policy_reasoning | POLICY-ENGINE-33-101 | TODO | respecting throttles
SPRINT_125_policy_reasoning | POLICY-ENGINE-34-101 | TODO | Publish policy run ledger exports + SLO burn-rate metrics to orchestrator
SPRINT_125_policy_reasoning | POLICY-ENGINE-35-201 | TODO | Expose deterministic policy snapshot API
SPRINT_125_policy_reasoning | POLICY-ENGINE-38-201 | TODO | Emit enriched policy violation events (decision rationale ids
SPRINT_125_policy_reasoning | POLICY-ENGINE-40-001 | TODO | Update severity/status evaluation pipelines to consume multiple source severities per linkset
SPRINT_125_policy_reasoning | POLICY-ENGINE-40-001 | TODO | preferred source
SPRINT_125_policy_reasoning | POLICY-ENGINE-40-001 | TODO | supporting selection strategies (max
SPRINT_125_policy_reasoning | POLICY-ENGINE-40-002 | TODO | Accept VEX linkset conflicts
SPRINT_125_policy_reasoning | POLICY-ENGINE-40-002 | TODO | provide rationale references in effective findings
SPRINT_126_policy_reasoning | POLICY-ENGINE-40-003 | TODO | Graph Explorer) to request policy decisions with source evidence summaries (top severity sources
SPRINT_126_policy_reasoning | POLICY-ENGINE-40-003 | TODO | Provide API/SDK utilities for consumers (Web Scanner
SPRINT_126_policy_reasoning | POLICY-ENGINE-50-001 | TODO | Implement SPL compiler: validate YAML
SPRINT_126_policy_reasoning | POLICY-ENGINE-50-001 | TODO | canonicalize
SPRINT_126_policy_reasoning | POLICY-ENGINE-50-001 | TODO | produce signed bundle
SPRINT_126_policy_reasoning | POLICY-ENGINE-50-001 | TODO | store artifact in object storage
SPRINT_126_policy_reasoning | POLICY-ENGINE-50-002 | TODO | Build runtime evaluator executing compiled plans over advisory/vex linksets + SBOM asset metadata with deterministic caching (Redis)
SPRINT_126_policy_reasoning | POLICY-ENGINE-50-003 | TODO | Implement evaluation/compilation metrics
SPRINT_126_policy_reasoning | POLICY-ENGINE-50-003 | TODO | `policy_compiles_total`
SPRINT_126_policy_reasoning | POLICY-ENGINE-50-003 | TODO | structured logs (`policy_eval_seconds`
SPRINT_126_policy_reasoning | POLICY-ENGINE-50-003 | TODO | tracing
SPRINT_126_policy_reasoning | POLICY-ENGINE-50-004 | TODO | Build event pipeline: subscribe to linkset/SBOM updates
SPRINT_126_policy_reasoning | POLICY-ENGINE-50-004 | TODO | schedule re-eval jobs
SPRINT_126_policy_reasoning | POLICY-ENGINE-50-005 | TODO | Design
SPRINT_126_policy_reasoning | POLICY-ENGINE-50-005 | TODO | TTL
SPRINT_126_policy_reasoning | POLICY-ENGINE-50-005 | TODO | `policy_artifacts` collections with indexes
SPRINT_126_policy_reasoning | POLICY-ENGINE-50-005 | TODO | `policy_revisions`
SPRINT_126_policy_reasoning | POLICY-ENGINE-50-005 | TODO | `policy_runs`
SPRINT_126_policy_reasoning | POLICY-ENGINE-50-005 | TODO | implement `policy_packs`
SPRINT_126_policy_reasoning | POLICY-ENGINE-50-006 | TODO | Implement explainer persistence + retrieval APIs linking decisions to explanation tree
SPRINT_126_policy_reasoning | POLICY-ENGINE-50-007 | TODO | Provide evaluation worker host/DI wiring
SPRINT_126_policy_reasoning | POLICY-ENGINE-60-001 | TODO | Maintain Redis effective decision maps per asset/snapshot for Graph overlays
SPRINT_126_policy_reasoning | POLICY-ENGINE-60-001 | TODO | implement versioning
SPRINT_126_policy_reasoning | POLICY-ENGINE-60-002 | TODO | Expose simulation bridge for Graph What-if APIs
SPRINT_126_policy_reasoning | POLICY-ENGINE-60-002 | TODO | supporting hypothetical SBOM diffs
SPRINT_126_policy_reasoning | POLICY-ENGINE-70-002 | TODO | Design
SPRINT_126_policy_reasoning | POLICY-ENGINE-70-002 | TODO | `exception_bindings`) with indexes
SPRINT_126_policy_reasoning | POLICY-ENGINE-70-002 | TODO | `exception_reviews`
SPRINT_126_policy_reasoning | POLICY-ENGINE-70-002 | TODO | create Mongo collections (`exceptions`
SPRINT_126_policy_reasoning | POLICY-ENGINE-70-002 | TODO | migrations
SPRINT_126_policy_reasoning | POLICY-ENGINE-70-004 | TODO | Extend metrics/tracing/logging for exception application (latency
SPRINT_126_policy_reasoning | POLICY-ENGINE-70-004 | TODO | counts
SPRINT_126_policy_reasoning | POLICY-ENGINE-70-004 | TODO | expiring events)
SPRINT_126_policy_reasoning | POLICY-ENGINE-70-005 | TODO | Provide APIs/workers hook for exception activation/expiry (auto start/end)
SPRINT_126_policy_reasoning | POLICY-ENGINE-80-001 | TODO | Integrate reachability/exploitability inputs into evaluation pipeline (state/score/confidence) with caching
SPRINT_126_policy_reasoning | POLICY-RISK-90-001 | TODO | Ingest entropy penalty inputs from Scanner (`entropy.report.json`
SPRINT_126_policy_reasoning | POLICY-RISK-90-001 | TODO | `layer_summary.json`)
SPRINT_126_policy_reasoning | POLICY-RISK-90-001 | TODO | expose explanations/metrics for opaque ratio penalties (`docs/modules/scanner/entropy.md`).
SPRINT_126_policy_reasoning | POLICY-RISK-90-001 | TODO | extend trust algebra with configurable weights/caps
SPRINT_127_policy_reasoning | POLICY-ENGINE-80-002 | TODO | Create joining layer to read `reachability_facts` efficiently (indexes
SPRINT_127_policy_reasoning | POLICY-ENGINE-80-002 | TODO | projections)
SPRINT_127_policy_reasoning | POLICY-ENGINE-80-003 | TODO | Extend SPL predicates/actions to reference reachability state/score/confidence
SPRINT_127_policy_reasoning | POLICY-ENGINE-80-004 | TODO | Emit metrics (`policy_reachability_applied_total`
SPRINT_127_policy_reasoning | POLICY-ENGINE-80-004 | TODO | `policy_reachability_cache_hit_ratio`)
SPRINT_127_policy_reasoning | POLICY-OBS-50-001 | TODO | Integrate telemetry core into policy API + worker hosts
SPRINT_127_policy_reasoning | POLICY-OBS-50-001 | TODO | `decision_effect`
SPRINT_127_policy_reasoning | POLICY-OBS-50-001 | TODO | `policy_version`
SPRINT_127_policy_reasoning | POLICY-OBS-50-001 | TODO | ensuring spans/logs cover compile/evaluate flows with `tenant_id`
SPRINT_127_policy_reasoning | POLICY-OBS-50-001 | TODO | trace IDs
SPRINT_127_policy_reasoning | POLICY-OBS-51-001 | TODO | Emit golden-signal metrics (compile latency
SPRINT_127_policy_reasoning | POLICY-OBS-51-001 | TODO | evaluate latency
SPRINT_127_policy_reasoning | POLICY-OBS-51-001 | TODO | override counts)
SPRINT_127_policy_reasoning | POLICY-OBS-51-001 | TODO | rule hits
SPRINT_127_policy_reasoning | POLICY-OBS-52-001 | TODO | Emit timeline events `policy.evaluate.started`
SPRINT_127_policy_reasoning | POLICY-OBS-52-001 | TODO | `policy.decision.recorded` with trace IDs
SPRINT_127_policy_reasoning | POLICY-OBS-52-001 | TODO | `policy.evaluate.completed`
SPRINT_127_policy_reasoning | POLICY-OBS-52-001 | TODO | input digests
SPRINT_127_policy_reasoning | POLICY-OBS-52-001 | TODO | rule summary. Provide contract tests
SPRINT_127_policy_reasoning | POLICY-OBS-53-001 | TODO | Produce evaluation evidence bundles (inputs slice
SPRINT_127_policy_reasoning | POLICY-OBS-53-001 | TODO | config snapshot) through evidence locker integration
SPRINT_127_policy_reasoning | POLICY-OBS-53-001 | TODO | engine version
SPRINT_127_policy_reasoning | POLICY-OBS-53-001 | TODO | rule trace
SPRINT_127_policy_reasoning | POLICY-OBS-54-001 | TODO | Generate DSSE attestations for evaluation outputs
SPRINT_127_policy_reasoning | POLICY-OBS-54-001 | TODO | expose `/evaluations/{id}/attestation`
SPRINT_127_policy_reasoning | POLICY-OBS-55-001 | TODO | Implement incident mode sampling overrides (full rule trace capture
SPRINT_127_policy_reasoning | POLICY-OBS-55-001 | TODO | extended retention) with auto-activation on SLO breach
SPRINT_127_policy_reasoning | POLICY-RISK-66-001 | TODO | Develop initial JSON Schema for RiskProfile (signals
SPRINT_127_policy_reasoning | POLICY-RISK-66-001 | TODO | overrides) with validator stubs
SPRINT_127_policy_reasoning | POLICY-RISK-66-001 | TODO | severity
SPRINT_127_policy_reasoning | POLICY-RISK-66-001 | TODO | transforms
SPRINT_127_policy_reasoning | POLICY-RISK-66-001 | TODO | weights
SPRINT_127_policy_reasoning | POLICY-RISK-66-002 | TODO | Implement inheritance/merge logic with conflict detection
SPRINT_127_policy_reasoning | POLICY-RISK-66-003 | TODO | Integrate RiskProfile schema into Policy Engine configuration
SPRINT_127_policy_reasoning | POLICY-RISK-66-003 | TODO | ensuring validation
SPRINT_127_policy_reasoning | POLICY-RISK-66-004 | TODO | Extend Policy libraries to load/save RiskProfile documents
SPRINT_127_policy_reasoning | POLICY-RISK-66-004 | TODO | compute content hashes
SPRINT_127_policy_reasoning | POLICY-RISK-67-001 | TODO | Integrate profile storage
SPRINT_128_policy_reasoning | POLICY-RISK-67-002 | TODO | Implement profile lifecycle APIs (`/risk/profiles` create/publish/deprecate)
SPRINT_128_policy_reasoning | POLICY-RISK-67-002 | TODO | Publish `.well-known/risk-profile-schema` endpoint
SPRINT_128_policy_reasoning | POLICY-RISK-67-003 | TODO | Provide policy-layer APIs to trigger risk simulations
SPRINT_128_policy_reasoning | POLICY-RISK-68-001 | TODO | Implement scope selectors
SPRINT_128_policy_reasoning | POLICY-RISK-68-001 | TODO | Provide simulation API bridging Policy Studio with risk engine
SPRINT_128_policy_reasoning | POLICY-RISK-68-001 | TODO | precedence rules
SPRINT_128_policy_reasoning | POLICY-RISK-68-001 | TODO | returns distributions
SPRINT_128_policy_reasoning | POLICY-RISK-68-002 | TODO | Add override/adjustment support with audit metadata
SPRINT_128_policy_reasoning | POLICY-RISK-69-001 | TODO | Emit events/notifications on profile publish
SPRINT_128_policy_reasoning | POLICY-RISK-69-001 | TODO | deprecate
SPRINT_128_policy_reasoning | POLICY-SPL-23-001 | TODO | Define SPL v1 YAML + JSON Schema
SPRINT_128_policy_reasoning | POLICY-SPL-23-001 | TODO | VEX precedence
SPRINT_128_policy_reasoning | POLICY-SPL-23-001 | TODO | exceptions
SPRINT_128_policy_reasoning | POLICY-SPL-23-001 | TODO | including advisory rules
SPRINT_128_policy_reasoning | POLICY-SPL-23-001 | TODO | layering metadata. Publish schema resources
SPRINT_128_policy_reasoning | POLICY-SPL-23-001 | TODO | severity mapping
SPRINT_128_policy_reasoning | POLICY-SPL-23-001 | TODO | validation fixtures
SPRINT_128_policy_reasoning | POLICY-SPL-23-002 | TODO | Implement canonicalizer that normalizes policy packs (ordering
SPRINT_128_policy_reasoning | POLICY-SPL-23-002 | TODO | computes content hash
SPRINT_128_policy_reasoning | POLICY-SPL-23-002 | TODO | defaults)
SPRINT_128_policy_reasoning | POLICY-SPL-23-003 | TODO | Build policy layering/override engine (global/org/project/env/exception) with field-level precedence matrices
SPRINT_128_policy_reasoning | POLICY-SPL-23-004 | TODO | Design explanation tree model (rule hits
SPRINT_128_policy_reasoning | POLICY-SPL-23-004 | TODO | UI
SPRINT_128_policy_reasoning | POLICY-SPL-23-004 | TODO | decisions)
SPRINT_128_policy_reasoning | POLICY-SPL-23-004 | TODO | inputs
SPRINT_128_policy_reasoning | POLICY-SPL-23-004 | TODO | persistence structures reused by runtime
SPRINT_128_policy_reasoning | POLICY-SPL-23-005 | TODO | Create migration tool to snapshot existing behavior into baseline SPL packs (`org.core.baseline`)
SPRINT_128_policy_reasoning | POLICY-SPL-23-005 | TODO | including policy docs
SPRINT_128_policy_reasoning | POLICY-SPL-24-001 | TODO | Extend SPL schema to expose reachability/exploitability predicates
SPRINT_128_policy_reasoning | POLICY-SPL-24-001 | TODO | update documentation
SPRINT_128_policy_reasoning | POLICY-SPL-24-001 | TODO | weighting functions
SPRINT_129_policy_reasoning | POLICY-TEN-48-001 | TODO | Add `tenant_id`/`project_id` columns
SPRINT_129_policy_reasoning | POLICY-TEN-48-001 | TODO | emit rationale IDs including tenant metadata
SPRINT_129_policy_reasoning | POLICY-TEN-48-001 | TODO | enable RLS
SPRINT_129_policy_reasoning | POLICY-TEN-48-001 | TODO | update evaluators to require tenant context
SPRINT_129_policy_reasoning | REGISTRY-API-27-001 | TODO | Define OpenAPI specification covering workspaces
SPRINT_129_policy_reasoning | REGISTRY-API-27-001 | TODO | attestations
SPRINT_129_policy_reasoning | REGISTRY-API-27-001 | TODO | promotions
SPRINT_129_policy_reasoning | REGISTRY-API-27-001 | TODO | publish typed clients for Console/CLI
SPRINT_129_policy_reasoning | REGISTRY-API-27-001 | TODO | reviews
SPRINT_129_policy_reasoning | REGISTRY-API-27-001 | TODO | simulations
SPRINT_129_policy_reasoning | REGISTRY-API-27-001 | TODO | versions
SPRINT_129_policy_reasoning | REGISTRY-API-27-002 | TODO | Implement workspace storage (Mongo collections
SPRINT_129_policy_reasoning | REGISTRY-API-27-002 | TODO | diff history
SPRINT_129_policy_reasoning | REGISTRY-API-27-002 | TODO | object storage buckets) with CRUD endpoints
SPRINT_129_policy_reasoning | REGISTRY-API-27-003 | TODO | Integrate compile endpoint: forward source bundle to Policy Engine
SPRINT_129_policy_reasoning | REGISTRY-API-27-003 | TODO | persist diagnostics
SPRINT_129_policy_reasoning | REGISTRY-API-27-003 | TODO | rule index
SPRINT_129_policy_reasoning | REGISTRY-API-27-003 | TODO | symbol table
SPRINT_129_policy_reasoning | REGISTRY-API-27-004 | TODO | Implement quick simulation API with request limits (sample size
SPRINT_129_policy_reasoning | REGISTRY-API-27-004 | TODO | heatmap
SPRINT_129_policy_reasoning | REGISTRY-API-27-004 | TODO | returning counts
SPRINT_129_policy_reasoning | REGISTRY-API-27-004 | TODO | timeouts)
SPRINT_129_policy_reasoning | REGISTRY-API-27-005 | TODO | Build batch simulation orchestration: enqueue shards
SPRINT_129_policy_reasoning | REGISTRY-API-27-005 | TODO | collect partials
SPRINT_129_policy_reasoning | REGISTRY-API-27-005 | TODO | reduce deltas
SPRINT_129_policy_reasoning | REGISTRY-API-27-006 | TODO | Implement review workflow (comments
SPRINT_129_policy_reasoning | REGISTRY-API-27-006 | TODO | required approvers
SPRINT_129_policy_reasoning | REGISTRY-API-27-006 | TODO | status transitions) with audit trails
SPRINT_129_policy_reasoning | REGISTRY-API-27-006 | TODO | votes
SPRINT_129_policy_reasoning | REGISTRY-API-27-007 | TODO | Implement publish pipeline: sign source/compiled digests
SPRINT_129_policy_reasoning | REGISTRY-API-27-007 | TODO | create attestations
SPRINT_129_policy_reasoning | REGISTRY-API-27-007 | TODO | mark version immutable
SPRINT_129_policy_reasoning | REGISTRY-API-27-008 | TODO | Implement promotion bindings per tenant/environment with canary subsets
SPRINT_129_policy_reasoning | REGISTRY-API-27-008 | TODO | rollback path
SPRINT_129_policy_reasoning | REGISTRY-API-27-009 | TODO | Instrument metrics/logs/traces (compile time
SPRINT_129_policy_reasoning | REGISTRY-API-27-009 | TODO | approval latency)
SPRINT_129_policy_reasoning | REGISTRY-API-27-009 | TODO | diagnostics rate
SPRINT_129_policy_reasoning | REGISTRY-API-27-009 | TODO | sim queue depth
SPRINT_129_policy_reasoning | REGISTRY-API-27-010 | TODO | Build unit/integration/load test suites for compile/sim/review/publish/promote flows
SPRINT_129_policy_reasoning | RISK-ENGINE-66-001 | TODO | Scaffold scoring service (job queue
SPRINT_129_policy_reasoning | RISK-ENGINE-66-001 | TODO | provider registry) with deterministic execution harness
SPRINT_129_policy_reasoning | RISK-ENGINE-66-001 | TODO | worker loop
SPRINT_129_policy_reasoning | RISK-ENGINE-66-002 | TODO | Implement default transforms (linear
SPRINT_129_policy_reasoning | RISK-ENGINE-66-002 | TODO | clamping
SPRINT_129_policy_reasoning | RISK-ENGINE-66-002 | TODO | gating
SPRINT_129_policy_reasoning | RISK-ENGINE-66-002 | TODO | logistic
SPRINT_129_policy_reasoning | RISK-ENGINE-66-002 | TODO | minmax
SPRINT_129_policy_reasoning | RISK-ENGINE-66-002 | TODO | piecewise)
SPRINT_129_policy_reasoning | RISK-ENGINE-67-001 | TODO | Integrate CVSS
SPRINT_129_policy_reasoning | RISK-ENGINE-67-001 | TODO | KEV providers pulling data from Conseiller
SPRINT_129_policy_reasoning | RISK-ENGINE-67-001 | TODO | `any`
SPRINT_129_policy_reasoning | RISK-ENGINE-67-001 | TODO | implement reducers (`max`
SPRINT_129_policy_reasoning | RISK-ENGINE-67-002 | TODO | Integrate VEX gate provider
SPRINT_129_policy_reasoning | RISK-ENGINE-67-003 | TODO | Add fix availability
SPRINT_129_policy_reasoning | RISK-ENGINE-67-003 | TODO | asset criticality
SPRINT_129_policy_reasoning | RISK-ENGINE-68-001 | TODO | Persist scoring results + explanation pointers to Findings Ledger
SPRINT_129_policy_reasoning | RISK-ENGINE-68-002 | TODO | Expose APIs (`/risk/jobs`
SPRINT_129_policy_reasoning | RISK-ENGINE-68-002 | TODO | `/risk/results/{id}/explanation`)
SPRINT_129_policy_reasoning | RISK-ENGINE-68-002 | TODO | `/risk/results`
SPRINT_129_policy_reasoning | RISK-ENGINE-68-002 | TODO | filtering
SPRINT_129_policy_reasoning | RISK-ENGINE-68-002 | TODO | include pagination
SPRINT_129_policy_reasoning | RISK-ENGINE-69-001 | TODO | Implement simulation mode producing distributions
SPRINT_129_policy_reasoning | RISK-ENGINE-69-002 | TODO | Add telemetry (spans
SPRINT_129_policy_reasoning | RISK-ENGINE-69-002 | TODO | cache hits
SPRINT_129_policy_reasoning | RISK-ENGINE-69-002 | TODO | job throughput
SPRINT_129_policy_reasoning | RISK-ENGINE-69-002 | TODO | logs) for provider latency
SPRINT_129_policy_reasoning | RISK-ENGINE-69-002 | TODO | metrics
SPRINT_129_policy_reasoning | RISK-ENGINE-70-001 | TODO | Support offline provider bundles with manifest verification
SPRINT_129_policy_reasoning | RISK-ENGINE-70-002 | TODO | Integrate runtime evidence provider
SPRINT_129_policy_reasoning | VEXLENS-30-001 | TODO | CycloneDX VEX (status mapping
SPRINT_129_policy_reasoning | VEXLENS-30-001 | TODO | Implement normalization pipeline for CSAF VEX
SPRINT_129_policy_reasoning | VEXLENS-30-001 | TODO | OpenVEX
SPRINT_129_policy_reasoning | VEXLENS-30-001 | TODO | justification mapping
SPRINT_129_policy_reasoning | VEXLENS-30-001 | TODO | product tree parsing)
SPRINT_129_policy_reasoning | VEXLENS-30-002 | TODO | CPE2.3
SPRINT_129_policy_reasoning | VEXLENS-30-003 | TODO | DSSE
SPRINT_129_policy_reasoning | VEXLENS-30-003 | TODO | Integrate signature verification (Ed25519
SPRINT_129_policy_reasoning | VEXLENS-30-003 | TODO | PKIX) using issuer keys
SPRINT_129_policy_reasoning | VEXLENS-30-003 | TODO | annotate evidence with verification state
SPRINT_129_policy_reasoning | VEXLENS-30-004 | TODO | Implement trust weighting engine (issuer base weights
SPRINT_129_policy_reasoning | VEXLENS-30-004 | TODO | justification modifiers
SPRINT_129_policy_reasoning | VEXLENS-30-004 | TODO | recency decay
SPRINT_129_policy_reasoning | VEXLENS-30-004 | TODO | signature modifiers
SPRINT_129_policy_reasoning | VEXLENS-30-005 | TODO | AFFECTED
SPRINT_129_policy_reasoning | VEXLENS-30-005 | TODO | DISPUTED
SPRINT_129_policy_reasoning | VEXLENS-30-005 | TODO | FIXED
SPRINT_129_policy_reasoning | VEXLENS-30-005 | TODO | Implement consensus algorithm producing `consensus_state`
SPRINT_129_policy_reasoning | VEXLENS-30-005 | TODO | UNDER_INVESTIGATION
SPRINT_129_policy_reasoning | VEXLENS-30-005 | TODO | `confidence`
SPRINT_129_policy_reasoning | VEXLENS-30-005 | TODO | `quorum`
SPRINT_129_policy_reasoning | VEXLENS-30-005 | TODO | `rationale`
SPRINT_129_policy_reasoning | VEXLENS-30-005 | TODO | `weights`
SPRINT_129_policy_reasoning | VEXLENS-30-005 | TODO | support states: NOT_AFFECTED
SPRINT_129_policy_reasoning | VEXLENS-30-006 | TODO | Materialize consensus projection storage with idempotent workers triggered by VEX/Policy changes
SPRINT_129_policy_reasoning | VEXLENS-30-007 | TODO | Expose APIs (`/vex/consensus`
SPRINT_129_policy_reasoning | VEXLENS-30-007 | TODO | `/vex/consensus/export`) with pagination
SPRINT_129_policy_reasoning | VEXLENS-30-007 | TODO | `/vex/consensus/query`
SPRINT_129_policy_reasoning | VEXLENS-30-007 | TODO | `/vex/consensus/simulate`
SPRINT_129_policy_reasoning | VEXLENS-30-007 | TODO | `/vex/consensus/{id}`
SPRINT_129_policy_reasoning | VEXLENS-30-007 | TODO | cost budgets
SPRINT_129_policy_reasoning | VEXLENS-30-008 | TODO | Integrate consensus signals with Policy Engine (thresholds
SPRINT_129_policy_reasoning | VEXLENS-30-008 | TODO | simulation inputs)
SPRINT_129_policy_reasoning | VEXLENS-30-008 | TODO | suppression
SPRINT_129_policy_reasoning | VEXLENS-30-009 | TODO | Instrument metrics (`vex_consensus_compute_latency`
SPRINT_129_policy_reasoning | VEXLENS-30-009 | TODO | `vex_consensus_disputed_total`
SPRINT_129_policy_reasoning | VEXLENS-30-009 | TODO | `vex_signature_verification_rate`)
SPRINT_129_policy_reasoning | VEXLENS-30-009 | TODO | structured logs
SPRINT_129_policy_reasoning | VEXLENS-30-009 | TODO | traces
SPRINT_129_policy_reasoning | VEXLENS-30-010 | TODO | Develop unit/property/integration/load tests (10M records)
SPRINT_129_policy_reasoning | VEXLENS-30-010 | TODO | determinism harness
SPRINT_129_policy_reasoning | VEXLENS-30-011 | TODO | Provide deployment manifests
SPRINT_129_policy_reasoning | VEXLENS-30-011 | TODO | caching configuration
SPRINT_129_policy_reasoning | VEXLENS-30-011 | TODO | offline kit seeds
SPRINT_129_policy_reasoning | VEXLENS-30-011 | TODO | scaling guides
SPRINT_129_policy_reasoning | VEXLENS-AIAI-31-001 | TODO | Expose consensus rationale API enhancements (policy factors
SPRINT_129_policy_reasoning | VEXLENS-AIAI-31-001 | TODO | issuer details
SPRINT_129_policy_reasoning | VEXLENS-AIAI-31-001 | TODO | mapping issues) for Advisory AI conflict explanations
SPRINT_129_policy_reasoning | VEXLENS-AIAI-31-002 | TODO | Provide caching hooks for consensus lookups used by Advisory AI (batch endpoints
SPRINT_129_policy_reasoning | VEXLENS-EXPORT-35-001 | TODO | Provide consensus snapshot API delivering deterministic JSONL (state
SPRINT_129_policy_reasoning | VEXLENS-EXPORT-35-001 | TODO | confidence
SPRINT_129_policy_reasoning | VEXLENS-EXPORT-35-001 | TODO | provenance) for exporter mirror bundles
SPRINT_129_policy_reasoning | VEXLENS-ORCH-33-001 | TODO | Register `consensus_compute` job type with orchestrator
SPRINT_129_policy_reasoning | VEXLENS-ORCH-33-001 | TODO | expose job planning hooks for consensus batches
SPRINT_129_policy_reasoning | VEXLENS-ORCH-33-001 | TODO | integrate worker SDK
SPRINT_129_policy_reasoning | VEXLENS-ORCH-34-001 | TODO | Emit consensus completion events into orchestrator run ledger
SPRINT_129_policy_reasoning | VEXLENS-ORCH-34-001 | TODO | provenance chain
SPRINT_129_policy_reasoning | VULN-API-29-001 | TODO | Define OpenAPI spec (list/detail/query/simulation/workflow/export)
SPRINT_129_policy_reasoning | VULN-API-29-001 | TODO | error codes
SPRINT_129_policy_reasoning | VULN-API-29-001 | TODO | pagination/grouping contracts
SPRINT_129_policy_reasoning | VULN-API-29-001 | TODO | query JSON schema
SPRINT_129_policy_reasoning | VULN-API-29-002 | TODO | Implement list/query endpoints with policy parameter
SPRINT_129_policy_reasoning | VULN-API-29-002 | TODO | caching
SPRINT_129_policy_reasoning | VULN-API-29-002 | TODO | grouping
SPRINT_129_policy_reasoning | VULN-API-29-002 | TODO | server paging
SPRINT_129_policy_reasoning | VULN-API-29-003 | TODO | Implement detail endpoint aggregating evidence
SPRINT_129_policy_reasoning | VULN-API-29-003 | TODO | paths (Graph Explorer deep link)
SPRINT_129_policy_reasoning | VULN-API-29-003 | TODO | policy rationale
SPRINT_129_policy_reasoning | VULN-API-29-004 | TODO | Expose workflow endpoints (assign
SPRINT_129_policy_reasoning | VULN-API-29-004 | TODO | accept-risk
SPRINT_129_policy_reasoning | VULN-API-29-004 | TODO | comment
SPRINT_129_policy_reasoning | VULN-API-29-004 | TODO | target-fix
SPRINT_129_policy_reasoning | VULN-API-29-004 | TODO | verify-fix
SPRINT_129_policy_reasoning | VULN-API-29-005 | TODO | Implement simulation endpoint comparing `policy_from` vs `policy_to`
SPRINT_129_policy_reasoning | VULN-API-29-005 | TODO | returning diffs without side effects
SPRINT_129_policy_reasoning | VULN-API-29-006 | TODO | Integrate resolver results with Graph Explorer: include shortest path metadata
SPRINT_129_policy_reasoning | VULN-API-29-006 | TODO | line up deep-link parameters
SPRINT_129_policy_reasoning | VULN-API-29-007 | TODO | Enforce RBAC/ABAC scopes
SPRINT_129_policy_reasoning | VULN-API-29-007 | TODO | implement CSRF/anti-forgery checks for Console
SPRINT_129_policy_reasoning | VULN-API-29-007 | TODO | secure attachment URLs
SPRINT_129_policy_reasoning | VULN-API-29-008 | TODO | Build export orchestrator producing signed bundles (manifest
SPRINT_129_policy_reasoning | VULN-API-29-008 | TODO | NDJSON
SPRINT_129_policy_reasoning | VULN-API-29-008 | TODO | checksums
SPRINT_129_policy_reasoning | VULN-API-29-008 | TODO | signature). Integrate with Findings Ledger for evidence
SPRINT_129_policy_reasoning | VULN-API-29-009 | TODO | Instrument metrics (`vuln_list_latency`
SPRINT_129_policy_reasoning | VULN-API-29-009 | TODO | `vuln_export_duration`
SPRINT_129_policy_reasoning | VULN-API-29-009 | TODO | `vuln_simulation_latency`
SPRINT_129_policy_reasoning | VULN-API-29-009 | TODO | `vuln_workflow_events_total`)
SPRINT_129_policy_reasoning | VULN-API-29-009 | TODO | structured logs
SPRINT_129_policy_reasoning | VULN-API-29-009 | TODO | traces
SPRINT_129_policy_reasoning | VULN-API-29-010 | TODO | Provide unit/integration/perf tests (5M findings)
SPRINT_129_policy_reasoning | VULN-API-29-010 | TODO | fuzz query validation
SPRINT_129_policy_reasoning | VULN-API-29-011 | TODO | CI smoke
SPRINT_129_policy_reasoning | VULN-API-29-011 | TODO | Package deployment (Helm/Compose)
SPRINT_129_policy_reasoning | VULN-API-29-011 | TODO | health checks
SPRINT_129_policy_reasoning | VULN-API-29-011 | TODO | offline kit steps
SPRINT_131_scanner_surface | SCANNER-ANALYZERS-DENO-26-009 | TODO | SCANNER-ANALYZERS-DENO-26-008
SPRINT_131_scanner_surface | SCANNER-ANALYZERS-JAVA-21-005 | TODO | —
SPRINT_131_scanner_surface | SCANNER-ANALYZERS-LANG-11-001 | TODO | SCANNER-ANALYZERS-LANG-10-309
SPRINT_132_scanner_surface | SCANNER-ANALYZERS-NATIVE-20-001 | TODO | —
SPRINT_132_scanner_surface | SCANNER-ANALYZERS-NODE-22-001 | TODO | —
SPRINT_133_scanner_surface | SCANNER-ANALYZERS-PHP-27-001 | TODO | —
SPRINT_134_scanner_surface | SCANNER-ANALYZERS-PYTHON-23-001 | TODO | —
SPRINT_135_scanner_surface | SCANNER-ANALYZERS-RUBY-28-001 | TODO | —
SPRINT_135_scanner_surface | SCANNER-ENTRYTRACE-18-502 | TODO | SCANNER-ENTRYTRACE-18-508
SPRINT_136_scanner_surface | SCANNER-ENG-0020 | TODO | —
SPRINT_136_scanner_surface | SCANNER-ENG-0021 | TODO | —
SPRINT_136_scanner_surface | SCANNER-ENG-0022 | TODO | —
SPRINT_136_scanner_surface | SCANNER-ENG-0023 | TODO | —
SPRINT_136_scanner_surface | SCANNER-ENG-0024 | TODO | —
SPRINT_136_scanner_surface | SCANNER-ENG-0025 | TODO | —
SPRINT_136_scanner_surface | SCANNER-ENG-0026 | TODO | —
SPRINT_136_scanner_surface | SCANNER-ENG-0027 | TODO | —
SPRINT_136_scanner_surface | SCANNER-ENV-01 | TODO | —
SPRINT_136_scanner_surface | SCANNER-EVENTS-16-301 | BLOCKED | —
SPRINT_136_scanner_surface | SCANNER-GRAPH-21-001 | TODO | —
SPRINT_136_scanner_surface | SCANNER-LNM-21-001 | TODO | —
SPRINT_136_scanner_surface | SCANNER-SECRETS-03 | TODO | SCANNER-SECRETS-02
SPRINT_136_scanner_surface | SCANNER-SURFACE-04 | TODO | SCANNER-SURFACE-01
SPRINT_136_scanner_surface | SCHED-SURFACE-02 | TODO | SURFACE-FS-02
SPRINT_136_scanner_surface | SURFACE-FS-03 | TODO | SURFACE-FS-02
SPRINT_136_scanner_surface | SURFACE-FS-04 | TODO | SURFACE-FS-02
SPRINT_136_scanner_surface | SURFACE-FS-06 | TODO | SURFACE-FS-02..05
SPRINT_136_scanner_surface | SURFACE-SECRETS-01 | DOING | —
SPRINT_136_scanner_surface | SURFACE-VAL-01 | DOING | SURFACE-FS-01
SPRINT_136_scanner_surface | SURFACE-VAL-02 | TODO | SURFACE-FS-02
SPRINT_136_scanner_surface | ZASTAVA-SURFACE-02 | TODO | SURFACE-FS-02
SPRINT_138_scanner_ruby_parity | SCANNER-ENG-0008 | TODO | —
SPRINT_138_scanner_ruby_parity | SCANNER-ENG-0010 | TODO | SCANNER-ANALYZERS-PHP-27-001..012
SPRINT_138_scanner_ruby_parity | SCANNER-ENG-0011 | TODO | —
SPRINT_138_scanner_ruby_parity | SCANNER-ENG-0012 | TODO | —
SPRINT_138_scanner_ruby_parity | SCANNER-ENG-0013 | TODO | —
SPRINT_138_scanner_ruby_parity | SCANNER-ENG-0014 | TODO | —
SPRINT_301_docs_tasks_md_i | DOCS-AIAI-31-004 | DOING | DOCS-AIAI-31-003
SPRINT_301_docs_tasks_md_i | DOCS-AIAI-31-008 | BLOCKED | DOCS-AIAI-31-007
SPRINT_301_docs_tasks_md_i | DOCS-AIRGAP-56-001 | TODO | —
SPRINT_301_docs_tasks_md_i | DOCS-POLICY-DET-01 | TODO | POLICY-DET backlog
SPRINT_301_docs_tasks_md_i | DOCS-SCANNER-DET-01 | DOING | Sprint 136 outputs
SPRINT_301_docs_tasks_md_i | DOCS-SCANNER-DET-01 | DOING | scanner determinism fixtures
Reference in New Issue View Git Blame Copy Permalink