a1ce3f74fa
Some checks failed
Docs CI / lint-and-preview (push) Has been cancelled
- Added MongoPackRunApprovalStore for managing approval states with MongoDB. - Introduced MongoPackRunArtifactUploader for uploading and storing artifacts. - Created MongoPackRunLogStore to handle logging of pack run events. - Developed MongoPackRunStateStore for persisting and retrieving pack run states. - Implemented unit tests for MongoDB stores to ensure correct functionality. - Added MongoTaskRunnerTestContext for setting up MongoDB test environment. - Enhanced PackRunStateFactory to correctly initialize state with gate reasons.
44 lines
2.4 KiB
Markdown
44 lines
2.4 KiB
Markdown
# StellaOps Concelier
|
||
|
||
Concelier ingests signed advisories from dozens of sources and converts them into immutable observations plus linksets under the Aggregation-Only Contract (AOC).
|
||
|
||
## Responsibilities
|
||
- Fetch and normalise vulnerability advisories via restart-time connectors.
|
||
- Persist observations and correlation linksets without precedence decisions.
|
||
- Emit deterministic exports (JSON, Trivy DB) for downstream policy evaluation.
|
||
- Coordinate offline/air-gap updates via Offline Kit bundles.
|
||
- Serve paragraph-anchored advisory chunks for Advisory AI consumers without breaking the Aggregation-Only Contract.
|
||
|
||
## Key components
|
||
- `StellaOps.Concelier.WebService` orchestration host.
|
||
- Connector libraries under `StellaOps.Concelier.Connector.*`.
|
||
- Exporter packages (`StellaOps.Concelier.Exporter.*`).
|
||
|
||
## Recent updates
|
||
- **2025-11-07:** Paragraph-anchored `/advisories/{advisoryKey}/chunks` endpoint shipped for Advisory AI paragraph retrieval. Details and rollout notes live in [`../../updates/2025-11-07-concelier-advisory-chunks.md`](../../updates/2025-11-07-concelier-advisory-chunks.md).
|
||
|
||
## Integrations & dependencies
|
||
- MongoDB for canonical observations and schedules.
|
||
- Policy Engine / Export Center / CLI for evidence consumption.
|
||
- Notify and UI for advisory deltas.
|
||
|
||
## Operational notes
|
||
- Connector runbooks in ./operations/connectors/.
|
||
- Mirror operations for Offline Kit parity.
|
||
- Grafana dashboards for connector health.
|
||
- **Authority toggle rollout (2025-10-22 update).** Follow the phased table and audit checklist in `../../10_CONCELIER_CLI_QUICKSTART.md` when enabling `authority.enabled`/`authority.allowAnonymousFallback`, and cross-check the refreshed `./operations/authority-audit-runbook.md` before enforcement.
|
||
|
||
## Related resources
|
||
- ./operations/conflict-resolution.md
|
||
- ./operations/mirror.md
|
||
- ./operations/authority-audit-runbook.md
|
||
- ../../10_CONCELIER_CLI_QUICKSTART.md (authority integration timeline & smoke tests)
|
||
|
||
## Backlog references
|
||
- DOCS-LNM-22-001, DOCS-LNM-22-007 in ../../TASKS.md.
|
||
- Connector-specific TODOs in `src/Concelier/**/TASKS.md`.
|
||
|
||
## Epic alignment
|
||
- **Epic 1 – AOC enforcement:** uphold raw observation invariants, provenance requirements, linkset-only enrichment, and AOC verifier guardrails across every connector.
|
||
- **Epic 10 – Export Center:** expose deterministic advisory exports and metadata required by JSON/Trivy/mirror bundles.
|