Platform architecture & module dossiers

Audience: engineers and operators who need the architecture of the Stella Ops release control plane — platform-level views plus per-module deep dives. Start with the 10-minute tour, then drill into the module dossiers below.

Core views

• Architecture overview (10-minute tour)
• High-level architecture (reference map)
• Scanner core contracts
• Authority (overview)
• Console operator guide and deep dives under ui/operations and ui/guides/ux
• Component map (quick descriptions of every module under src/)

Detailed references

• Canonical webservice catalog
• Platform topology
• Infrastructure dependencies
• Request and data flows
• Data isolation model
• Security boundaries

Docs validation

Use the architecture docs validation check to detect service-path and hostname drift:

powershell -NoProfile -ExecutionPolicy Bypass -File ./docs/technical/architecture/scripts/validate-webservice-docs.ps1

Intentional failing fixture (sanity check for the validator):

powershell -NoProfile -ExecutionPolicy Bypass -File ./docs/technical/architecture/scripts/validate-webservice-docs.ps1 `
  -Files "docs/technical/architecture/fixtures/webservice-docs-invalid-fixture.md"

User-centric views

• User flows (UML diagrams) — end-to-end flows from the user’s perspective
• Module matrix — full module inventory with categorization
• Data flows — SBOM, advisory, VEX, and policy data lifecycles
• Schema mapping — PostgreSQL, Valkey, and RustFS storage reference

Policy engine deep dives

How data feeds policy decisions:

• Policy Engine Data Pipeline — master view of all data flowing to the policy engine
• SBOM Analyzer Inventory — inventory of the SBOM analyzers (language, OS, surface, and capability)
• Runtime Agents Architecture — eBPF observation, Zastava container observer, signal processing
• Call Graph Analysis — ReachGraph construction, BFS path finding, 8-state reachability
• Confidence Scoring — 5-factor weighted scoring (RCH, RTS, VEX, PRV, POL); archived, superseded by the 6-dimension EWS
• K4 Lattice Logic — four-valued logic for handling uncertainty and conflicts

End-to-end workflow flows

Comprehensive flow documentation for all major StellaOps workflows: flows/

Module catalogue

Each module directory bundles an ownership charter (AGENTS.md), current work (TASKS.md), an architecture dossier, and an implementation plan. Operations guides live under operations/ where applicable.

Tip: every module directory also exposes README.md, AGENTS.md, and TASKS.md for roles, current backlog, and ownership responsibilities.