git.stella-ops.org/src/StellaOps.Feedser.Models/TASKS.md

TASKS

Task	Owner(s)	Depends on	Notes
Canonical JSON serializer with stable ordering	BE-Merge	Models	DONE – CanonicalJsonSerializer ensures deterministic property ordering.
Equality/comparison helpers for ranges	BE-Merge	Models	DONE – added AffectedVersionRangeComparer & equality comparer.
Type enums/constants for AffectedPackage.Type	BE-Merge	Models	DONE – introduced AffectedPackageTypes.
Validation helpers (lightweight)	BE-Merge	Models	DONE – added Validation static helpers and URL guard.
Snapshot serializer for tests	QA	Models	DONE – SnapshotSerializer emits canonical JSON.
Docs: field provenance guidelines	BE-Merge	Models	DONE – see PROVENANCE_GUIDELINES.md.
Canonical record definitions kept in sync	BE-Merge	Models	DONE – documented in CANONICAL_RECORDS.md; update alongside model changes.
Alias scheme registry and validation helpers	BE-Merge	Models	DONE – see AliasSchemes & AliasSchemeRegistry plus validation integration/tests.
Range primitives for SemVer/EVR/NEVRA metadata	BE-Merge	Models	DOING – envelope + AdvisoryStore deserialisation landed; VMware/Oracle/Chromium/NVD emit primitives. Remaining connectors (Debian, SUSE, Ubuntu, Apple, Adobe, etc.) still need structured coverage + EVR population.
Provenance envelope field masks	BE-Merge	Models	DOING – add richer metric tags (component category/severity), dedupe missing counts, propagate resume logging across connectors.
Backward-compatibility playbook	BE-Merge, QA	Models	DONE – see BACKWARD_COMPATIBILITY.md for evolution policy/test checklist.
Golden canonical examples	QA	Models	DONE – added /p:UpdateGoldens=true test hook wiring UPDATE_GOLDENS=1 so canonical fixtures regenerate via dotnet test; docs/tests unchanged.
Serialization determinism regression tests	QA	Models	DONE – locale-stability tests hash canonical serializer output across multiple cultures and runs.
Severity normalization helpers	BE-Merge	Models	DONE – helper now normalizes compound vendor labels/priority tiers with expanded synonym coverage and regression tests.
AffectedPackage status glossary & guardrails	BE-Merge	Models	DONE – catalog now exposes deterministic listing, TryNormalize helpers, and synonym coverage for vendor phrases (not vulnerable, workaround available, etc.).