Files
git.stella-ops.org/src/EvidenceLocker
master f5a9f874d0 feat(audit): wire AddAuditEmission into 9 services (AUDIT-002)
- Wire StellaOps.Audit.Emission DI in: Authority, Policy, Release-Orchestrator,
  EvidenceLocker, Notify, Scanner, Scheduler, Integrations, Platform
- Add AuditEmission__TimelineBaseUrl to compose defaults
- Endpoint filter annotation deferred to follow-up pass

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-08 16:20:39 +03:00
..

EvidenceLocker

Container(s): stellaops-evidence-locker-web, stellaops-evidence-locker-worker Slot: 6 | Port: 8080 | Consumer Group: evidencelocker Resource Tier: light

Purpose

The Evidence Locker provides write-once, tamper-evident storage for release evidence artifacts (scan results, attestations, policy verdicts, approval records). It supports optional cryptographic signing (ES256), quota enforcement, snapshot queries, and multi-material evidence bundles. The worker handles background evidence processing tasks.

API Surface

  • evidencelocker (via Router) — evidence material upload (write-once), retrieval, snapshot queries, health checks, observability endpoints

Storage

PostgreSQL (via EvidenceLocker:Database:ConnectionString); file-system object store (/data/evidence) or configurable backend; Valkey for cache

Background Workers

  • Evidence Locker worker — background evidence processing, integrity verification