Files
git.stella-ops.org/docs/implplan/SPRINT_171_notifier_i.md
master 75f6942769
Some checks failed
Docs CI / lint-and-preview (push) Has been cancelled
Policy Lint & Smoke / policy-lint (push) Has been cancelled
Concelier Attestation Tests / attestation-tests (push) Has been cancelled
AOC Guard CI / aoc-guard (push) Has been cancelled
AOC Guard CI / aoc-verify (push) Has been cancelled
Add integration tests for migration categories and execution
- Implemented MigrationCategoryTests to validate migration categorization for startup, release, seed, and data migrations.
- Added tests for edge cases, including null, empty, and whitespace migration names.
- Created StartupMigrationHostTests to verify the behavior of the migration host with real PostgreSQL instances using Testcontainers.
- Included tests for migration execution, schema creation, and handling of pending release migrations.
- Added SQL migration files for testing: creating a test table, adding a column, a release migration, and seeding data.
2025-12-04 19:10:54 +02:00

7.7 KiB
Raw Blame History

Sprint 171 - Notifications & Telemetry · 170.A) Notifier.I

BLOCKED Tasks: Before working on BLOCKED tasks, review BLOCKED_DEPENDENCY_TREE.md for root blockers and dependencies.

Active items only. Completed/historic work now resides in docs/implplan/archived/tasks.md (updated 2025-11-08).

[Notifications & Telemetry] 170.A) Notifier.I Depends on: Sprint 150.A - Orchestrator Summary: Notifications & Telemetry focus on Notifier (phase I).

Task ID State Task description Owners (Source)
NOTIFY-ATTEST-74-001 DONE (2025-11-16) Create notification templates for verification failures, expiring attestations, key revocations, and transparency anomalies. Notifications Service Guild, Attestor Service Guild (src/Notifier/StellaOps.Notifier)
NOTIFY-ATTEST-74-002 DONE (2025-11-24) Wire notifications to key rotation/revocation events and transparency witness failures. Dependencies: NOTIFY-ATTEST-74-001. Notifications Service Guild, KMS Guild (src/Notifier/StellaOps.Notifier)
NOTIFY-OAS-61-001 DONE (2025-11-17) Update notifier OAS with rules, templates, incidents, quiet hours endpoints using standard error envelope and examples. Notifications Service Guild, API Contracts Guild (src/Notifier/StellaOps.Notifier)
NOTIFY-OAS-61-002 DONE (2025-11-17) Implement /.well-known/openapi discovery endpoint with scope metadata. Dependencies: NOTIFY-OAS-61-001. Notifications Service Guild (src/Notifier/StellaOps.Notifier)
NOTIFY-OAS-62-001 DONE (2025-11-17) Provide SDK usage examples for rule CRUD, incident ack, and quiet hours; ensure SDK smoke tests. Dependencies: NOTIFY-OAS-61-002. Notifications Service Guild, SDK Generator Guild (src/Notifier/StellaOps.Notifier)
NOTIFY-OAS-63-001 DONE (2025-11-17) Emit deprecation headers and Notifications templates for retiring notifier APIs. Dependencies: NOTIFY-OAS-62-001. Notifications Service Guild, API Governance Guild (src/Notifier/StellaOps.Notifier)
NOTIFY-OBS-51-001 DONE (2025-11-22) Integrate SLO evaluator webhooks into Notifier rules (burn-rate breaches, health degradations) with templates, routing, and suppression logic. Provide sample policies and ensure imposed rule propagation. Notifications Service Guild, Observability Guild (src/Notifier/StellaOps.Notifier)
NOTIFY-OBS-55-001 DONE (2025-11-22) Publish incident mode start/stop notifications with trace/evidence quick links, retention notes, and automatic escalation paths. Include quiet-hour overrides + legal compliance logging. Dependencies: NOTIFY-OBS-51-001. Notifications Service Guild, Ops Guild (src/Notifier/StellaOps.Notifier)
NOTIFY-RISK-66-001 DONE (2025-11-24) Add notification triggers for risk severity escalation/downgrade events with profile metadata in payload. Notifications Service Guild, Risk Engine Guild (src/Notifier/StellaOps.Notifier)
NOTIFY-RISK-67-001 DONE (2025-11-24) Notify stakeholders when risk profiles are published, deprecated, or thresholds change. Dependencies: NOTIFY-RISK-66-001. Notifications Service Guild, Policy Guild (src/Notifier/StellaOps.Notifier)
NOTIFY-RISK-68-001 DONE (2025-11-24) Support per-profile routing rules, quiet hours, and dedupe for risk alerts; integrate with CLI/Console preferences. Dependencies: NOTIFY-RISK-67-001. Notifications Service Guild (src/Notifier/StellaOps.Notifier)
NOTIFY-DOC-70-001 DONE (2025-11-02) Document the split between legacy src/Notify libraries and the new src/Notifier runtime, updating architecture docs with rationale/cross-links. Notifications Service Guild (src/Notifier/StellaOps.Notifier)
NOTIFY-AIRGAP-56-002 DONE Provide Bootstrap Pack notifier configurations with deterministic secrets handling and offline validation steps. Dependencies: NOTIFY-AIRGAP-56-001. Notifications Service Guild, DevOps Guild (src/Notifier/StellaOps.Notifier)

Status notes (2025-11-22 UTC)

  • NOTIFY-ATTEST-74-001 Template suite shipped; localized keys locked; see docs/notifications/templates.md §7 and offline exports under offline/notifier/templates/attestation/.
  • NOTIFY-OAS-61/62/63 OAS refresh, discovery endpoint, SDK examples, and deprecation headers are live.
  • NOTIFY-OBS-51-001 SLO webhook sink validated via filtered tests; TRX at src/Notifier/StellaOps.Notifier/StellaOps.Notifier.Tests/TestResults/notifier-slo-tests.trx.
  • NOTIFY-OBS-55-001 Incident-mode templates + importable rules shipped (src/Notifier/StellaOps.Notifier/docs/incident-mode-rules.sample.json); documented in docs/notifications/templates.md §8.
  • NOTIFY-RISK-66-001 → NOTIFY-RISK-68-001 Implemented risk-events endpoint, offline templates, and default routing seeds (bootstrap tenant) covering severity change and profile state events. Throttles applied (510m). Await POLICY-RISK-40-002 export only for richer metadata, not for notifier plumbing.
  • NOTIFY-ATTEST-74-002 Attestation events endpoint added and seeded routing/templates for authority key rotation and transparency witness failures; templates load from offline bundle.

Milestones & dependencies

Target date Milestone Owner(s) Notes / dependencies
2025-11-13 Finalize attestation payload schema + localization tokens Notifications Service Guild · Attestor Service Guild Required to close NOTIFY-ATTEST-74-001 and unblock NOTIFY-ATTEST-74-002 wiring work.
2025-11-15 Draft Notifier OAS published for review Notifications Service Guild · API Contracts Guild Enables follow-on .well-known endpoint and SDK tasks (NOTIFY-OAS-61-002/62-001).
2025-11-18 Incident payload contract agreed with Telemetry & Ops Notifications Service Guild · Observability Guild Needed before NOTIFY-OBS-51-001/55-001 can move to DOING.
2025-11-20 Risk profile metadata export available (POLICY-RISK-40-002) Notifications Service Guild · Policy Guild Gate for NOTIFY-RISK-66-001 → NOTIFY-RISK-68-001 implementation.

Coordination log

Date (UTC) Update Owner
2025-11-12 18:05 Marked NOTIFY-ATTEST-74-001 and NOTIFY-OAS-61-001 as DOING; documented current blockers in status notes. Notifications Service Guild
2025-11-12 19:20 Added attestation template suite (Section7 of docs/notifications/templates.md) covering template keys/helpers/samples to support NOTIFY-ATTEST-74-001 deliverables. Notifications Service Guild
2025-11-12 19:32 Updated docs/notifications/architecture.md rendering section to reference the new tmpl-attest-* suite so architecture + template docs stay in sync. Notifications Service Guild
2025-11-12 19:45 Synced docs/notifications/overview.md and docs/notifications/rules.md with the attestation template requirements so operators and rule authors see the mandated keys. Notifications Service Guild
2025-11-12 20:05 Added baseline template exports under offline/notifier/templates/attestation/ (Slack/Email/Webhook variants) to seed Offline Kit bundles. Notifications Service Guild
2025-11-22 18:30 Updated tracker: OAS 6163, OBS 51/55, ATTEST 74-001 marked DONE; incident-mode rules/templates published; SLO tests captured at StellaOps.Notifier.Tests/TestResults/notifier-slo-tests.trx. Risk tasks remain TODO pending POLICY-RISK-40-002 export. Notifications Service Guild
2025-11-24 15:20 Added /api/v1/notify/risk-events, seeded risk templates/routes from offline bundle, and added tests for endpoint + seeder. Marked NOTIFY-RISK-66/67/68 DONE. Notifications Service Guild
2025-11-24 14:05 Wired attestation event ingestion + routing seed; added tests for template/routing seeds and attestation endpoint publishing to queue. Marked NOTIFY-ATTEST-74-002 DONE. Notifications Service Guild