Files
git.stella-ops.org/docs/features/unchecked/attestor/ai-remediation-plan-attestation.md

2.5 KiB

AI Remediation Plan Attestation

Module

Attestor

Status

IMPLEMENTED

Description

Predicate types for AI-generated remediation plans including steps, risk assessments, and action types as signed attestation artifacts.

Implementation Details

  • AIRemediationPlanPredicate: src/Attestor/__Libraries/StellaOps.Attestor.ProofChain/Predicates/AI/AIRemediationPlanPredicate.cs -- extends AIArtifactBasePredicate with remediation-specific fields.
  • RemediationStep: RemediationStep.cs -- describes a single remediation action with status tracking.
  • RemediationActionType enum: RemediationActionType.cs -- types of remediation actions (e.g., upgrade, patch, configuration change).
  • RemediationStepStatus enum: RemediationStepStatus.cs -- tracks step execution status.
  • RemediationRiskAssessment: RemediationRiskAssessment.cs -- assesses risk impact of applying the remediation.
  • RemediationVerificationStatus enum: RemediationVerificationStatus.cs -- verification state after remediation application.
  • Classifier Integration: AIAuthorityClassifier.Remediation.cs classifies remediation plans; AIAuthorityClassifier.RemediationScore.cs computes quality scores for evidence-backing determination.
  • Statement: __Libraries/StellaOps.Attestor.ProofChain/Statements/AIRemediationPlanStatement.cs -- wraps predicate as in-toto statement.
  • Base Class: AIArtifactBasePredicate.cs provides ModelIdentifier (AIModelIdentifier), DecodingParameters (AIDecodingParameters), and timestamp fields inherited by the remediation predicate.

E2E Test Plan

  • Create an AIRemediationPlanPredicate with multiple RemediationStep entries of different RemediationActionType values and verify JSON serialization
  • Create a remediation plan with a RemediationRiskAssessment and verify the risk level is correctly captured in the predicate
  • Classify a remediation plan via AIAuthorityClassifier.Remediation with high citation/evidence scores and verify EvidenceBacked authority
  • Classify a remediation plan with low evidence backing and verify Suggestion authority
  • Wrap the predicate in AIRemediationPlanStatement and verify it produces a valid in-toto statement
  • Verify RemediationStepStatus progression (e.g., Pending -> InProgress -> Completed) is correctly serialized
  • Create a remediation plan with RemediationVerificationStatus set and verify the verification state persists through serialization