79b8e53441
Some checks failed
Docs CI / lint-and-preview (push) Has been cancelled
- Introduced `SbomService` tasks documentation. - Updated `StellaOps.sln` to include new projects: `StellaOps.AirGap.Time` and `StellaOps.AirGap.Importer`. - Added unit tests for `BundleImportPlanner`, `DsseVerifier`, `ImportValidator`, and other components in the `StellaOps.AirGap.Importer.Tests` namespace. - Implemented `InMemoryBundleRepositories` for testing bundle catalog and item repositories. - Created `MerkleRootCalculator`, `RootRotationPolicy`, and `TufMetadataValidator` tests. - Developed `StalenessCalculator` and `TimeAnchorLoader` tests in the `StellaOps.AirGap.Time.Tests` namespace. - Added `fetch-sbomservice-deps.sh` script for offline dependency fetching.
27 lines
1.4 KiB
Markdown
27 lines
1.4 KiB
Markdown
# Mirror Assembler Staffing & Milestones (Sprint 110.D)
|
|
|
|
## Staffing
|
|
- **Primary owner:** Alex Kim (Mirror Creator Guild)
|
|
- **Backup:** Priya Desai (Exporter Guild)
|
|
- **Observers:** AirGap Time Guild, CLI Guild
|
|
|
|
## Milestones
|
|
1. **M0 recap (done 2025-11-19):** thin bundle sample + layout note (`docs/modules/mirror/milestone-0-thin-bundle.md`).
|
|
2. **M1 (due 2025-11-26):** implement deterministic assembler with manifest + CAS layout; DSSE signing profile `sovereign-default`; produce sample bundle tarball + hash.
|
|
3. **M1.1 (due 2025-11-28):** TUF metadata generation (`root.json`, `snapshot.json`, `timestamp.json`) and mirror index manifest.
|
|
4. **M2 (due 2025-12-05):** integrate time-anchor metadata (AirGap Time), export automation hooks (Export Center), and CLI verification path.
|
|
|
|
## Responsibilities
|
|
- Alex Kim: assembler core, DSSE signing, CAS layout.
|
|
- Priya Desai: TUF metadata + exporter handoff.
|
|
- AirGap Time Guild: time-anchor schema + verification guidance.
|
|
- CLI Guild: `stella mirror verify` wiring and offline cache checks.
|
|
|
|
## Artefact locations
|
|
- Assembler design: `docs/modules/mirror/thin-bundle-assembler.md`
|
|
- Staffing/plan (this doc): `docs/modules/mirror/assembler.md`
|
|
- Sample bundles: `out/mirror/thin/mirror-thin-m0-sample.tar.gz` (future M1/M2 under `out/mirror/thin/`)
|
|
|
|
## Risks
|
|
- If M1 slips past 2025-11-26, Export Center and CLI tracks block; escalate to Exporter guild lead.
|