Skip to content

Commit 41f73eb

Browse files
committed
Add commercial evidence artifact intake target
1 parent 59e9725 commit 41f73eb

7 files changed

Lines changed: 170 additions & 1 deletion

File tree

README.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -73,6 +73,7 @@ The first production milestone is M3UA over a transport abstraction. SCCP, TCAP,
7373
| RC publish and commercial gate | Phase 35 complete: dry-run release rehearsal, gated NuGet prerelease publication, retained release notes, retained migration notes, final commercial readiness reporting, RC/stable decisioning, RC publication evidence manifest, release workflow channel wiring, status reporting, and final commercial gate report are available; stable publication remains blocked until commercial evidence is complete |
7474
| Commercial evidence readiness lockdown | Phase 36 foundation-complete: release target locking, protected secret readiness, evidence retention mapping, commercial evidence checklist, release preflight, protected release environments, dossier handoff, go/no-go gating, status reporting, and final validation are available; RC and stable publication remain blocked until retained commercial release evidence is complete |
7575
| Commercial evidence execution orchestration | Phase 37 foundation-complete: evidence execution run identity, stage catalog, operator command plan, execution environment contract, artifact collection manifest, digest/redaction verification, blocker classification, retry/resume policy, status reporting, and final validation are available; real retained execution artifacts are still required before commercial publication |
76+
| Commercial evidence artifact intake | Phase 38 in progress: artifact intake target identity is available and binds a stable intake id, reviewer identity, UTC receipt time, and run-scoped dossier root to a governed execution run; source registration, digest generation, redaction review, completeness evaluation, dossier reporting, promotion handoff, execution bridge, status reporting, and final validation remain |
7677

7778
## Requirements
7879

Lines changed: 27 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,27 @@
1+
# Phase 38 Commercial Evidence Artifact Intake
2+
3+
Phase 38 turns governed execution outputs into a retained, reviewable commercial evidence dossier. It does not manufacture passing evidence. It defines how real artifacts from an execution run are received, checked, digested, redaction-reviewed, completed, and handed off for promotion.
4+
5+
Public APIs use domain names such as `SigtranCommercialEvidenceArtifactIntakes`; phase numbers are intentionally kept out of source type names.
6+
7+
## Unit 1 - Artifact Intake Target
8+
9+
`SigtranCommercialEvidenceArtifactIntakes` creates an intake target bound to:
10+
11+
- The execution run that produced the artifacts.
12+
- A stable intake identifier.
13+
- The reviewer or automation identity performing intake.
14+
- UTC artifact receipt time.
15+
- A run-scoped dossier root under the execution run artifact root.
16+
17+
Floating dossier roots such as `artifacts/latest/...` are rejected because commercial evidence must prove exactly which execution run produced the retained artifacts.
18+
19+
## Validation
20+
21+
Each unit in this phase is validated with:
22+
23+
```powershell
24+
dotnet build src\Sigtran.NET.sln
25+
dotnet run --project src\Sigtran.NET.Tests\Sigtran.NET.Tests.csproj
26+
dotnet pack src\Sigtran.NET\Sigtran.NET.csproj -c Release
27+
```

docs/PHASE38_SUMMARY.md

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,11 @@
1+
# Phase 38 Summary - Commercial Evidence Artifact Intake
2+
3+
Phase 38 prepares the SDK to receive real execution artifacts and convert them into a retained commercial dossier.
4+
5+
## Completed Capabilities
6+
7+
- Artifact intake target that binds a stable intake id, reviewer identity, UTC receipt time, and dossier root to a governed execution run.
8+
9+
## Readiness Position
10+
11+
The phase is in progress. Artifact intake identity is available. Source registration, digest generation, redaction review, completeness evaluation, dossier reporting, promotion handoff, execution bridge, status reporting, and final validation remain.

docs/PHASE_INDEX.md

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,8 @@ This index is the complete phase map for Sigtran.NET. It links each phase to the
4242
| 35 | RC publish and commercial gate | [Phase 35 RC Publish And Commercial Gate](PHASE35_RC_PUBLISH_COMMERCIAL_GATE.md), [Phase 35 Summary](PHASE35_SUMMARY.md), [Phase 35 Commercial Gate Report](PHASE35_COMMERCIAL_GATE_REPORT.md) | RC gate foundation complete; stable publication blocked |
4343
| 36 | Commercial evidence readiness lockdown | [Phase 36 Commercial Evidence Readiness Lockdown](PHASE36_COMMERCIAL_EVIDENCE_READINESS_LOCKDOWN.md), [Phase 36 Summary](PHASE36_SUMMARY.md) | Foundation complete; real commercial evidence still required |
4444
| 37 | Commercial evidence execution orchestration | [Phase 37 Commercial Evidence Execution Orchestration](PHASE37_COMMERCIAL_EVIDENCE_EXECUTION_ORCHESTRATION.md), [Phase 37 Summary](PHASE37_SUMMARY.md) | Foundation complete; real execution artifacts still required |
45+
| 38 | Commercial evidence artifact intake | [Phase 38 Commercial Evidence Artifact Intake](PHASE38_COMMERCIAL_EVIDENCE_ARTIFACT_INTAKE.md), [Phase 38 Summary](PHASE38_SUMMARY.md) | In progress; intake target complete |
4546

4647
## Current Commercial Gate
4748

48-
The SDK can now start defining governed commercial evidence-producing execution when protected secrets are available. RC publication remains blocked until retained execution-run, release-run, and commercial evidence artifacts are complete. Stable publication remains blocked until external peer evidence, trusted timestamped signing, production performance evidence, retained release-run artifacts, and the commercial evidence dossier are complete.
49+
The SDK can now define governed commercial evidence-producing execution and begin intake of retained artifacts when protected secrets are available. RC publication remains blocked until retained execution-run, release-run, and commercial evidence artifacts are complete. Stable publication remains blocked until external peer evidence, trusted timestamped signing, production performance evidence, retained release-run artifacts, and the commercial evidence dossier are complete.

docs/SDK_ROADMAP.md

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -333,6 +333,14 @@ Status: Phase 36 is foundation-complete. The release target lock binds an RC ver
333333

334334
Status: Phase 37 is foundation-complete. Evidence execution run identity binds a locked release target to a stable run id, operator identity, UTC start time, and run-scoped artifact root. The stage catalog covers readiness preflight, native SCTP lab, external peer interoperability, protocol validation, performance benchmark, supply-chain evidence, release workflow dry-run, and dossier assembly with run-scoped artifact roots. The operator command plan maps every stage to an ordered run-id-aware command and requires protected approval for supply-chain, workflow, and dossier assembly execution. The environment contract binds run identity, lab inputs, and protected secrets while preventing fixed secret values from being stored. Artifact collection maps all checklist artifacts to known stage roots and retained output paths. Digest and redaction verification requires digest coverage for every artifact and redaction review for trace-bearing evidence. Blocker classification categorizes readiness, environment, command, native SCTP, external peer, artifact, digest, redaction, and approval failures with retryability guidance. Retry/resume applies bounded retries and manual-correction gates for non-retryable failures. Status reporting exposes completed capabilities, orchestration readiness, retained evidence readiness, publication readiness, and current blockers. Final validation is complete. Commercial publication remains blocked until real retained execution artifacts are produced, verified, redacted where needed, and approved.
335335

336+
## Phase 38 - Commercial Evidence Artifact Intake
337+
338+
- Receive real execution artifacts into a run-scoped commercial dossier.
339+
- Register artifact sources, digests, redaction reviews, completeness results, dossier reports, promotion handoff, and execution-to-dossier bridging.
340+
- Keep intake foundation separate from commercial publication: intake can prove that artifacts are ready for review, but publication remains blocked until all retained evidence is complete and approved.
341+
342+
Status: Phase 38 is in progress. Artifact intake target identity now binds a stable intake id, reviewer identity, UTC receipt time, and run-scoped dossier root to a governed commercial evidence execution run. Source registration, digest generation, redaction review, completeness evaluation, dossier reporting, promotion handoff, execution bridge, status reporting, and final validation remain in progress.
343+
336344
## Recommended First Deliverable
337345

338346
The first useful SDK release should be an alpha package focused on M3UA over a transport abstraction:

src/Sigtran.NET.Tests/Program.cs

Lines changed: 28 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -287,6 +287,7 @@
287287
Run("SIGTRAN commercial evidence execution blocker classifier categorizes failures", SigtranCommercialEvidenceExecutionBlockerClassifierCategorizesFailures);
288288
Run("SIGTRAN commercial evidence execution retry policy gates resume decisions", SigtranCommercialEvidenceExecutionRetryPolicyGatesResumeDecisions);
289289
Run("SIGTRAN commercial evidence execution status summarizes orchestration readiness", SigtranCommercialEvidenceExecutionStatusSummarizesOrchestrationReadiness);
290+
Run("SIGTRAN commercial evidence artifact intake target binds to execution run", SigtranCommercialEvidenceArtifactIntakeTargetBindsToExecutionRun);
290291
Run("SIGTRAN status capabilities use domain documentation labels", SigtranStatusCapabilitiesUseDomainDocumentationLabels);
291292
Run("Native SCTP platform probe reports socket creation capability", NativeSctpPlatformProbeReportsSocketCreationCapability);
292293
Run("Native SCTP socket factory creates or reports unsupported platform", NativeSctpSocketFactoryCreatesOrReportsUnsupportedPlatform);
@@ -4781,6 +4782,33 @@ static void SigtranCommercialEvidenceExecutionStatusSummarizesOrchestrationReadi
47814782
Assert(!blockers.Contains("status-final-validation-pending"), "final validation should no longer be a blocker");
47824783
}
47834784

4785+
static void SigtranCommercialEvidenceArtifactIntakeTargetBindsToExecutionRun()
4786+
{
4787+
SigtranCommercialEvidenceExecutionRun run = SigtranCommercialEvidenceExecutionRuns.CreateReleaseCandidateRun(
4788+
"1.0.0-rc.1",
4789+
"abcdef123456",
4790+
"run-20260622-001",
4791+
"release-automation",
4792+
new DateTimeOffset(2026, 06, 22, 12, 00, 00, TimeSpan.FromHours(3.5)));
4793+
SigtranCommercialEvidenceArtifactIntakeTarget target = SigtranCommercialEvidenceArtifactIntakes.CreateDefault(
4794+
run,
4795+
"intake-20260622-001",
4796+
"release-review",
4797+
new DateTimeOffset(2026, 06, 22, 13, 00, 00, TimeSpan.FromHours(3.5)));
4798+
SigtranCommercialEvidenceArtifactIntakeTarget floatingTarget = new(
4799+
"intake-20260622-002",
4800+
run,
4801+
"release-review",
4802+
DateTimeOffset.UtcNow,
4803+
"artifacts/latest/dossier");
4804+
4805+
Assert(target.IsReady, target.Describe());
4806+
Assert(target.HasStableIntakeId, "intake target should use a stable id");
4807+
Assert(target.HasUtcReceivedTime, "intake target should normalize receive time to UTC");
4808+
Assert(target.HasRunScopedDossierRoot, "intake target should use a run-scoped dossier root");
4809+
Assert(!floatingTarget.IsReady, "floating dossier roots should not be intake-ready");
4810+
}
4811+
47844812
static void SigtranStatusCapabilitiesUseDomainDocumentationLabels()
47854813
{
47864814
IReadOnlyList<string>[] statusCapabilities =
Lines changed: 93 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,93 @@
1+
namespace Sigtran.NET.Core.Utilities;
2+
3+
/// <summary>
4+
/// Describes one commercial evidence artifact intake target.
5+
/// </summary>
6+
public sealed class SigtranCommercialEvidenceArtifactIntakeTarget
7+
{
8+
/// <summary>Creates a commercial evidence artifact intake target.</summary>
9+
/// <param name="intakeId">The stable intake identifier.</param>
10+
/// <param name="executionRun">The execution run that produced the artifacts.</param>
11+
/// <param name="reviewerName">The reviewer or automation identity performing intake.</param>
12+
/// <param name="receivedAtUtc">The UTC artifact intake time.</param>
13+
/// <param name="dossierRoot">The retained dossier root.</param>
14+
public SigtranCommercialEvidenceArtifactIntakeTarget(
15+
string intakeId,
16+
SigtranCommercialEvidenceExecutionRun executionRun,
17+
string reviewerName,
18+
DateTimeOffset receivedAtUtc,
19+
string dossierRoot)
20+
{
21+
IntakeId = string.IsNullOrWhiteSpace(intakeId) ? throw new ArgumentException("Intake identifier is required.", nameof(intakeId)) : intakeId;
22+
ExecutionRun = executionRun ?? throw new ArgumentNullException(nameof(executionRun));
23+
ReviewerName = string.IsNullOrWhiteSpace(reviewerName) ? throw new ArgumentException("Reviewer name is required.", nameof(reviewerName)) : reviewerName;
24+
ReceivedAtUtc = receivedAtUtc.Offset == TimeSpan.Zero ? receivedAtUtc : receivedAtUtc.ToUniversalTime();
25+
DossierRoot = string.IsNullOrWhiteSpace(dossierRoot) ? throw new ArgumentException("Dossier root is required.", nameof(dossierRoot)) : dossierRoot;
26+
}
27+
28+
/// <summary>The stable intake identifier.</summary>
29+
public string IntakeId { get; }
30+
31+
/// <summary>The execution run that produced the artifacts.</summary>
32+
public SigtranCommercialEvidenceExecutionRun ExecutionRun { get; }
33+
34+
/// <summary>The reviewer or automation identity performing intake.</summary>
35+
public string ReviewerName { get; }
36+
37+
/// <summary>The UTC artifact intake time.</summary>
38+
public DateTimeOffset ReceivedAtUtc { get; }
39+
40+
/// <summary>The retained dossier root.</summary>
41+
public string DossierRoot { get; }
42+
43+
/// <summary>Whether the intake identifier is stable and suitable for retained paths.</summary>
44+
public bool HasStableIntakeId => IntakeId.Length >= 8
45+
&& IntakeId.All(static c => char.IsLetterOrDigit(c) || c is '-' or '_');
46+
47+
/// <summary>Whether the intake timestamp is normalized to UTC.</summary>
48+
public bool HasUtcReceivedTime => ReceivedAtUtc.Offset == TimeSpan.Zero;
49+
50+
/// <summary>Whether the dossier root is scoped under the execution run artifact root.</summary>
51+
public bool HasRunScopedDossierRoot => DossierRoot.StartsWith(ExecutionRun.RunArtifactRoot + "/dossiers/" + IntakeId, StringComparison.Ordinal);
52+
53+
/// <summary>Whether the intake target is ready for artifact source registration.</summary>
54+
public bool IsReady => ExecutionRun.IsReady
55+
&& HasStableIntakeId
56+
&& HasUtcReceivedTime
57+
&& HasRunScopedDossierRoot;
58+
59+
/// <summary>Formats a compact artifact intake target summary.</summary>
60+
/// <returns>The artifact intake target summary.</returns>
61+
public string Describe()
62+
{
63+
return $"commercialEvidenceArtifactIntake={IntakeId} run={ExecutionRun.RunId} ready={IsReady}";
64+
}
65+
}
66+
67+
/// <summary>
68+
/// Provides commercial evidence artifact intake target helpers.
69+
/// </summary>
70+
public static class SigtranCommercialEvidenceArtifactIntakes
71+
{
72+
/// <summary>Creates a default artifact intake target for an execution run.</summary>
73+
/// <param name="executionRun">The execution run that produced the artifacts.</param>
74+
/// <param name="intakeId">The stable intake identifier.</param>
75+
/// <param name="reviewerName">The reviewer or automation identity performing intake.</param>
76+
/// <param name="receivedAtUtc">The UTC artifact intake time.</param>
77+
/// <returns>The artifact intake target.</returns>
78+
public static SigtranCommercialEvidenceArtifactIntakeTarget CreateDefault(
79+
SigtranCommercialEvidenceExecutionRun executionRun,
80+
string intakeId,
81+
string reviewerName,
82+
DateTimeOffset receivedAtUtc)
83+
{
84+
ArgumentNullException.ThrowIfNull(executionRun);
85+
86+
return new(
87+
intakeId,
88+
executionRun,
89+
reviewerName,
90+
receivedAtUtc,
91+
$"{executionRun.RunArtifactRoot}/dossiers/{intakeId}");
92+
}
93+
}

0 commit comments

Comments
 (0)