stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 2 Releases Wiki Activity
Files
f6ef1ef33762710a15cda339adc816ba114ea080
git.stella-ops.org/docs/modules
History
master 7f7eb8b228 Complete batch 012 (golden set diff) and 013 (advisory chat), fix build errors 
Sprints completed:
- SPRINT_20260110_012_* (golden set diff layer - 10 sprints)
- SPRINT_20260110_013_* (advisory chat - 4 sprints)

Build fixes applied:
- Fix namespace conflicts with Microsoft.Extensions.Options.Options.Create
- Fix VexDecisionReachabilityIntegrationTests API drift (major rewrite)
- Fix VexSchemaValidationTests FluentAssertions method name
- Fix FixChainGateIntegrationTests ambiguous type references
- Fix AdvisoryAI test files required properties and namespace aliases
- Add stub types for CveMappingController (ICveSymbolMappingService)
- Fix VerdictBuilderService static context issue

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-11 10:09:07 +02:00
..
_template
docs re-org, audit fixes, build fixes
2026-01-05 09:35:33 +02:00
advisory-ai
sprints work
2026-01-10 20:38:13 +02:00
airgap
product advisories add change contiang folder
2026-01-08 09:06:03 +02:00
aoc
docs consolidation and others
2026-01-06 19:07:48 +02:00
api
Fix build and code structure improvements. New but essential UI functionality. CI improvements. Documentation improvements. AI module improvements.
2025-12-29 07:45:03 +02:00
attestor
Complete batch 012 (golden set diff) and 013 (advisory chat), fix build errors
2026-01-11 10:09:07 +02:00
authority
product advisories add change contiang folder
2026-01-08 09:06:03 +02:00
bench
Fix build and code structure improvements. New but essential UI functionality. CI improvements. Documentation improvements. AI module improvements.
2025-12-29 07:45:03 +02:00
benchmark
docs consolidation and others
2026-01-06 19:07:48 +02:00
binary-index
Complete batch 012 (golden set diff) and 013 (advisory chat), fix build errors
2026-01-11 10:09:07 +02:00
cartographer
docs consolidation work
2025-12-25 19:09:48 +02:00
cli
audit work, fixed StellaOps.sln warnings/errors, fixed tests, sprints work, new advisories
2026-01-07 18:50:11 +02:00
concelier
audit work, fixed StellaOps.sln warnings/errors, fixed tests, sprints work, new advisories
2026-01-07 18:50:11 +02:00
cryptography
docs consolidation, big sln build fixes, new advisories and sprints/tasks
2026-01-05 18:37:08 +02:00
devportal
audit work, fixed StellaOps.sln warnings/errors, fixed tests, sprints work, new advisories
2026-01-07 18:50:11 +02:00
eventing
audit work, fixed StellaOps.sln warnings/errors, fixed tests, sprints work, new advisories
2026-01-07 18:50:11 +02:00
evidence
docs consolidation work
2025-12-25 19:09:48 +02:00
evidence-locker
product advisories add change contiang folder
2026-01-08 09:06:03 +02:00
excititor
product advisories add change contiang folder
2026-01-08 09:06:03 +02:00
export-center
product advisories add change contiang folder
2026-01-08 09:06:03 +02:00
facet
audit work, fixed StellaOps.sln warnings/errors, fixed tests, sprints work, new advisories
2026-01-07 18:50:11 +02:00
feedser
audit work, fixed StellaOps.sln warnings/errors, fixed tests, sprints work, new advisories
2026-01-07 18:50:11 +02:00
findings-ledger
product advisories add change contiang folder
2026-01-08 09:06:03 +02:00
gateway
product advisories add change contiang folder
2026-01-08 09:06:03 +02:00
graph
Refactor compare-view component to use observables for data loading, enhancing performance and responsiveness. Update compare service interfaces and methods for improved delta computation. Modify audit log component to handle optional event properties gracefully. Optimize Monaco editor worker loading to reduce bundle size. Introduce shared SCSS mixins for consistent styling across components. Add Gitea test instance setup and NuGet package publishing test scripts for CI/CD validation. Update documentation paths and ensure all references are accurate.
2025-12-26 21:39:36 +02:00
issuer-directory
audit work, fixed StellaOps.sln warnings/errors, fixed tests, sprints work, new advisories
2026-01-07 18:50:11 +02:00
mirror
docs consolidation, big sln build fixes, new advisories and sprints/tasks
2026-01-05 18:37:08 +02:00
notifier
Fix build and code structure improvements. New but essential UI functionality. CI improvements. Documentation improvements. AI module improvements.
2025-12-29 07:45:03 +02:00
notify
product advisories add change contiang folder
2026-01-08 09:06:03 +02:00
opsmemory
sprints work
2026-01-10 20:38:13 +02:00
orchestrator
docs consolidation and others
2026-01-06 19:07:48 +02:00
packs-registry
audit work, fixed StellaOps.sln warnings/errors, fixed tests, sprints work, new advisories
2026-01-07 18:50:11 +02:00
platform
product advisories add change contiang folder
2026-01-08 09:06:03 +02:00
policy
Complete batch 012 (golden set diff) and 013 (advisory chat), fix build errors
2026-01-11 10:09:07 +02:00
prov-cache
audit work, fixed StellaOps.sln warnings/errors, fixed tests, sprints work, new advisories
2026-01-07 18:50:11 +02:00
provenance
audit work, fixed StellaOps.sln warnings/errors, fixed tests, sprints work, new advisories
2026-01-07 18:50:11 +02:00
reach-graph
product advisories add change contiang folder
2026-01-08 09:06:03 +02:00
reachability
sprints work
2026-01-10 20:38:13 +02:00
registry
docs consolidation work
2025-12-25 19:09:48 +02:00
replay
audit work, fixed StellaOps.sln warnings/errors, fixed tests, sprints work, new advisories
2026-01-07 18:50:11 +02:00
risk-engine
Complete batch 012 (golden set diff) and 013 (advisory chat), fix build errors
2026-01-11 10:09:07 +02:00
router
more audit work
2026-01-08 20:46:43 +02:00
sarif-export
save progress
2026-01-09 18:27:46 +02:00
sbom-service
audit work, fixed StellaOps.sln warnings/errors, fixed tests, sprints work, new advisories
2026-01-07 18:50:11 +02:00
scanner
Complete batch 012 (golden set diff) and 013 (advisory chat), fix build errors
2026-01-11 10:09:07 +02:00
scheduler
product advisories add change contiang folder
2026-01-08 09:06:03 +02:00
sdk
docs consolidation, big sln build fixes, new advisories and sprints/tasks
2026-01-05 18:37:08 +02:00
signals
product advisories add change contiang folder
2026-01-08 09:06:03 +02:00
signer
docs consolidation and others
2026-01-06 19:07:48 +02:00
symbols
docs consolidation and others
2026-01-06 19:07:48 +02:00
taskrunner
product advisories add change contiang folder
2026-01-08 09:06:03 +02:00
telemetry
product advisories add change contiang folder
2026-01-08 09:06:03 +02:00
timeline-indexer
audit work, fixed StellaOps.sln warnings/errors, fixed tests, sprints work, new advisories
2026-01-07 18:50:11 +02:00
triage
save progress
2026-01-09 18:27:46 +02:00
ui
product advisories add change contiang folder
2026-01-08 09:06:03 +02:00
unknowns
sprints and audit work
2026-01-07 09:43:12 +02:00
vex-hub
docs consolidation, big sln build fixes, new advisories and sprints/tasks
2026-01-05 18:37:08 +02:00
vex-lens
more audit work
2026-01-08 20:46:43 +02:00
vuln-explorer
product advisories add change contiang folder
2026-01-08 09:06:03 +02:00
web
Fix build and code structure improvements. New but essential UI functionality. CI improvements. Documentation improvements. AI module improvements.
2025-12-29 07:45:03 +02:00
zastava
product advisories add change contiang folder
2026-01-08 09:06:03 +02:00
README.md
docs consolidation, big sln build fixes, new advisories and sprints/tasks
2026-01-05 18:37:08 +02:00

README.md

StellaOps Module Documentation Index

This directory contains architecture documentation for all StellaOps modules.

Module Categories

Core Platform

Module Path Description
Authority src/Authority/ Authentication, authorization, OAuth/OIDC, DPoP
Gateway src/Gateway/ API gateway with routing and transport abstraction
Router src/Router/ Transport-agnostic messaging (TCP/TLS/UDP/RabbitMQ/Valkey)
Platform src/Platform/ Platform architecture and Platform Service aggregation APIs

Data Ingestion

Module Path Description
Concelier src/Concelier/ Vulnerability advisory ingestion and merge engine
Excititor src/Excititor/ VEX document ingestion and export
VexLens src/VexLens/ VEX consensus computation across issuers
VexHub src/VexHub/ VEX distribution and exchange hub
IssuerDirectory src/IssuerDirectory/ Issuer trust registry (CSAF publishers)
Feedser src/Feedser/ Evidence collection library for backport detection
Mirror src/Mirror/ Vulnerability feed mirror and distribution

Scanning & Analysis

Module Path Description
Scanner src/Scanner/ Container scanning with SBOM generation
BinaryIndex src/BinaryIndex/ Binary identity extraction and fingerprinting
AdvisoryAI src/AdvisoryAI/ AI-assisted advisory analysis
Symbols src/Symbols/ Symbol resolution and debug information
ReachGraph src/ReachGraph/ Reachability graph service

Artifacts & Evidence

Module Path Description
Attestor src/Attestor/ in-toto/DSSE attestation generation
Signer src/Signer/ Cryptographic signing operations
SbomService src/SbomService/ SBOM storage, versioning, and lineage ledger
EvidenceLocker src/EvidenceLocker/ Sealed evidence storage and export
ExportCenter src/ExportCenter/ Batch export and report generation
Provenance src/Provenance/ SLSA/DSSE attestation tooling
Provcache Library Provenance cache utilities

Policy & Risk

Module Path Description
Policy src/Policy/ Policy engine with K4 lattice logic
RiskEngine src/RiskEngine/ Risk scoring runtime
VulnExplorer src/VulnExplorer/ Vulnerability exploration and triage
Unknowns src/Unknowns/ Unknown component tracking registry

Operations

Module Path Description
Scheduler src/Scheduler/ Job scheduling and queue management
Orchestrator src/Orchestrator/ Workflow orchestration and task coordination
TaskRunner src/TaskRunner/ Task pack execution engine
Notify src/Notify/ Notification toolkit (Email, Slack, Teams, Webhooks)
Notifier src/Notifier/ Notifications Studio host
PacksRegistry src/PacksRegistry/ Task packs registry
TimelineIndexer src/TimelineIndexer/ Timeline event indexing
Replay src/Replay/ Deterministic replay engine

Integration

Module Path Description
CLI src/Cli/ Command-line interface (Native AOT)
Zastava src/Zastava/ Container registry webhook observer
Web/UI src/Web/ Angular 17 frontend SPA
API src/Api/ OpenAPI contracts and governance
Registry src/Registry/ Container registry integration

Infrastructure

Module Path Description
Cryptography src/Cryptography/ Crypto plugins (FIPS, eIDAS, GOST, SM, PQ)
Telemetry src/Telemetry/ OpenTelemetry traces, metrics, logging
Graph src/Graph/ Call graph and reachability data structures
Signals src/Signals/ Runtime signal collection and correlation
AirGap src/AirGap/ Air-gapped deployment support
AOC src/Aoc/ Append-Only Contract enforcement

Testing & Benchmarks

Module Path Description
Benchmark Scanner library Competitive benchmarking (accuracy comparison)
Bench src/Bench/ Performance benchmarks

Cross-Cutting Concepts

Folder Purpose
Evidence Unified evidence model specification
Snapshot Knowledge snapshot and replay concepts
Triage Vulnerability triage workflows
DevOps DevOps and CI/CD infrastructure
CI CI pipeline documentation

Documentation Standards

Each module folder should contain:

File Purpose
README.md Quick overview, purpose, components
architecture.md Detailed architecture specification
AGENTS.md (Optional) Claude Code agent guidance
operations/ (Optional) Operational runbooks

See the Documentation Template Standard for the full architecture.md template.