Some checks failed
Docs CI / lint-and-preview (push) Has been cancelled
- Introduced `SbomService` tasks documentation. - Updated `StellaOps.sln` to include new projects: `StellaOps.AirGap.Time` and `StellaOps.AirGap.Importer`. - Added unit tests for `BundleImportPlanner`, `DsseVerifier`, `ImportValidator`, and other components in the `StellaOps.AirGap.Importer.Tests` namespace. - Implemented `InMemoryBundleRepositories` for testing bundle catalog and item repositories. - Created `MerkleRootCalculator`, `RootRotationPolicy`, and `TufMetadataValidator` tests. - Developed `StalenessCalculator` and `TimeAnchorLoader` tests in the `StellaOps.AirGap.Time.Tests` namespace. - Added `fetch-sbomservice-deps.sh` script for offline dependency fetching.
1.4 KiB
1.4 KiB
Mirror Assembler Staffing & Milestones (Sprint 110.D)
Staffing
- Primary owner: Alex Kim (Mirror Creator Guild)
- Backup: Priya Desai (Exporter Guild)
- Observers: AirGap Time Guild, CLI Guild
Milestones
- M0 recap (done 2025-11-19): thin bundle sample + layout note (
docs/modules/mirror/milestone-0-thin-bundle.md). - M1 (due 2025-11-26): implement deterministic assembler with manifest + CAS layout; DSSE signing profile
sovereign-default; produce sample bundle tarball + hash. - M1.1 (due 2025-11-28): TUF metadata generation (
root.json,snapshot.json,timestamp.json) and mirror index manifest. - M2 (due 2025-12-05): integrate time-anchor metadata (AirGap Time), export automation hooks (Export Center), and CLI verification path.
Responsibilities
- Alex Kim: assembler core, DSSE signing, CAS layout.
- Priya Desai: TUF metadata + exporter handoff.
- AirGap Time Guild: time-anchor schema + verification guidance.
- CLI Guild:
stella mirror verifywiring and offline cache checks.
Artefact locations
- Assembler design:
docs/modules/mirror/thin-bundle-assembler.md - Staffing/plan (this doc):
docs/modules/mirror/assembler.md - Sample bundles:
out/mirror/thin/mirror-thin-m0-sample.tar.gz(future M1/M2 underout/mirror/thin/)
Risks
- If M1 slips past 2025-11-26, Export Center and CLI tracks block; escalate to Exporter guild lead.