stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 12 Releases Wiki Activity
Files
e91da22836b05d27dbe9c1f6189098bebfb54cd7
git.stella-ops.org/docs/implplan/SPRINT_213_web_ii.md
master e91da22836
Some checks failed
api-governance / spectral-lint (push) Has been cancelled
Details
Docs CI / lint-and-preview (push) Has been cancelled
Details
feat: Add new provenance and crypto registry documentation 
- Introduced attestation inventory and subject-rekor mapping files for tracking Docker packages.
- Added a comprehensive crypto registry decision document outlining defaults and required follow-ups.
- Created an offline feeds manifest for bundling air-gap resources.
- Implemented a script to generate and update binary manifests for curated binaries.
- Added a verification script to ensure binary artefacts are located in approved directories.
- Defined new schemas for AdvisoryEvidenceBundle, OrchestratorEnvelope, ScannerReportReadyPayload, and ScannerScanCompletedPayload.
- Established project files for StellaOps.Orchestrator.Schemas and StellaOps.PolicyAuthoritySignals.Contracts.
- Updated vendor manifest to track pinned binaries for integrity.
2025-11-18 23:47:13 +02:00

4.3 KiB
Raw Blame History

Sprint 213 - Experience & SDKs · 180.F) Web.II

Active items only. Completed/historic work now resides in docs/implplan/archived/tasks.md (updated 2025-11-08).

[Experience & SDKs] 180.F) Web.II Depends on: Sprint 180.F - Web.I Summary: Experience & SDKs focus on Web (phase II).

Task ID State Task description Owners (Source)
WEB-EXC-25-002 Policy integration surfaces TODO Extend /policy/effective and /policy/simulate responses to include exception metadata and accept overrides for simulations. Dependencies: WEB-EXC-25-001. BE-Base Platform Guild (src/Web/StellaOps.Web)
WEB-EXC-25-003 Notifications & events TODO Publish exception.* events, integrate with notification hooks, enforce rate limits. Dependencies: WEB-EXC-25-002. BE-Base Platform Guild, Platform Events Guild (src/Web/StellaOps.Web)
WEB-EXPORT-35-001 Export routing TODO Surface Export Center APIs (profiles/runs/download) through gateway with tenant scoping, streaming support, and viewer/operator scope checks. BE-Base Platform Guild (src/Web/StellaOps.Web)
WEB-EXPORT-36-001 Distribution endpoints TODO Add distribution routes (OCI/object storage), manifest/provenance proxies, and signed URL generation. Dependencies: WEB-EXPORT-35-001. BE-Base Platform Guild (src/Web/StellaOps.Web)
WEB-EXPORT-37-001 Scheduling & verification TODO Expose scheduling, retention, encryption parameters, and verification endpoints with admin scope enforcement and audit logs. Dependencies: WEB-EXPORT-36-001. BE-Base Platform Guild (src/Web/StellaOps.Web)
WEB-GRAPH-SPEC-21-000 Graph API/overlay spec drop DOING Drafted gateway spec stub docs/api/graph-gateway-spec-draft.yaml; pending Graph Platform ratification. BE-Base Platform Guild, Graph Platform Guild (src/Web/StellaOps.Web)
WEB-GRAPH-21-001 Graph endpoints DOING Use draft gateway spec docs/api/graph-gateway-spec-draft.yaml to add routes for graph versions/viewport/node/path/diff/export with RBAC + streaming. BE-Base Platform Guild, Graph Platform Guild (src/Web/StellaOps.Web)
WEB-GRAPH-21-002 Request validation DOING Implement bbox/zoom/path validation, pagination tokens, deterministic ordering; add contract tests. Dependencies: WEB-GRAPH-21-001. BE-Base Platform Guild (src/Web/StellaOps.Web)
WEB-GRAPH-21-003 Error mapping & exports TODO Map graph service errors to ERR_Graph_*, support GraphML/JSONL export streaming, document rate limits. Dependencies: WEB-GRAPH-21-002. BE-Base Platform Guild, QA Guild (src/Web/StellaOps.Web)
WEB-GRAPH-21-004 Overlay pass-through TODO Proxy Policy Engine overlays while keeping gateway stateless; maintain streaming budgets. Dependencies: WEB-GRAPH-21-003. BE-Base Platform Guild, Policy Guild (src/Web/StellaOps.Web)
WEB-GRAPH-24-001 Gateway proxy refresh TODO Gateway proxy for Graph API and Policy overlays with RBAC, caching, pagination, ETags, and streaming; zero business logic. Dependencies: WEB-GRAPH-21-004. BE-Base Platform Guild (src/Web/StellaOps.Web)
WEB-GRAPH-24-001 Graph endpoints TODO Implement /graph/assets/* endpoints (snapshots, adjacency, search) with pagination, ETags, and tenant scoping while acting as a pure proxy. Dependencies: WEB-GRAPH-24-001. BE-Base Platform Guild, SBOM Service Guild (src/Web/StellaOps.Web)
WEB-GRAPH-24-004 AOC enrichers TODO Embed AOC summaries sourced from overlay services; ensure gateway does not compute derived severity or hints. Dependencies: WEB-GRAPH-24-001. BE-Base Platform Guild (src/Web/StellaOps.Web)
WEB-GRAPH-24-004 Telemetry aggregation TODO Collect gateway metrics/logs (tile latency, proxy errors, overlay cache stats) and forward to dashboards; document sampling strategy. Dependencies: WEB-GRAPH-24-004. BE-Base Platform Guild, Observability Guild (src/Web/StellaOps.Web)
WEB-LNM-21-001 Advisory observation endpoints TODO Surface new /advisories/* APIs through gateway with caching, pagination, and RBAC enforcement (advisory:read). BE-Base Platform Guild, Concelier WebService Guild (src/Web/StellaOps.Web)
WEB-LNM-21-002 VEX observation endpoints TODO Expose /vex/* read APIs with evidence routes and export handlers; map ERR_AGG_* codes. Dependencies: WEB-LNM-21-001. BE-Base Platform Guild, Excititor WebService Guild (src/Web/StellaOps.Web)