diff --git a/docs/project-state.md b/docs/project-state.md index 2af5385..716ec46 100644 --- a/docs/project-state.md +++ b/docs/project-state.md @@ -41,6 +41,7 @@ around: **Acquire, Build, Catalog, Deploy, Run**, and the cross-cutting | Observability: supply-chain graph — Phases 1–6 (schema/files, indexer + LadybugDB, acquire/catalog producers, provenance queries + CLI, build producers + base lineage, graph-service + dashboard views) | supply-chain-graph | [#170](https://github.com/toddysm/cssc-framework/issues/170)–[#175](https://github.com/toddysm/cssc-framework/issues/175) | — | [observability/supply-chain-graph.md](https://github.com/toddysm/cssc-framework/blob/main/docs/architecture/observability/supply-chain-graph.md) | 2026-08 | | Observability: graph events for all artifacts + deletions; referrers (REFERS_TO) in queries/visualization | graph-referrers | [#199](https://github.com/toddysm/cssc-framework/issues/199), [#205](https://github.com/toddysm/cssc-framework/issues/205), [#203](https://github.com/toddysm/cssc-framework/issues/203), [#204](https://github.com/toddysm/cssc-framework/issues/204) | — | [observability/supply-chain-graph.md](https://github.com/toddysm/cssc-framework/blob/main/docs/architecture/observability/supply-chain-graph.md) | 2026-08 | | Observability: model multi-arch index ↔ per-architecture child manifest relationship | multiarch-index-platform | [#216](https://github.com/toddysm/cssc-framework/issues/216) | — | — | 2026-08 | +| Observability: roll per-platform child referrers/attestations up to the index in graph queries/views (CLI `--no-rollup` + graph-service `rollup` toggle) | rollup-platform-referrers | [#217](https://github.com/toddysm/cssc-framework/issues/217) (PR [#221](https://github.com/toddysm/cssc-framework/pull/221)) | — | [observability/supply-chain-graph.md](https://github.com/toddysm/cssc-framework/blob/main/docs/architecture/observability/supply-chain-graph.md) | 2026-08 | | Catalog: promotion + quarantine cleanup includes all referrers (OCI 1.0 + 1.1) | promote-referrers | [#198](https://github.com/toddysm/cssc-framework/issues/198) | — | — | 2026-08 | | Early CI supply-chain tasks (Trivy scan, sign, SBOM, provenance, lifecycle, signature/vuln/lifecycle verification, Copa patching) | ci-tasks | [#2](https://github.com/toddysm/cssc-framework/issues/2)–[#14](https://github.com/toddysm/cssc-framework/issues/14), [#22](https://github.com/toddysm/cssc-framework/issues/22) | — | — | 2023 | @@ -53,7 +54,6 @@ around: **Acquire, Build, Catalog, Deploy, Run**, and the cross-cutting | Capability | Feature slug | Tracking issue | PRD doc | Docs | | --- | --- | --- | --- | --- | | Observability: supply-chain graph — overall implementation epic | supply-chain-graph | [#177](https://github.com/toddysm/cssc-framework/issues/177) | — | — | -| Observability: roll up per-platform child referrers/attestations to the index in graph queries/views (PR [#221](https://github.com/toddysm/cssc-framework/pull/221) open on `feat/rollup-platform-referrers`, CI green, awaiting review) | rollup-platform-referrers | [#217](https://github.com/toddysm/cssc-framework/issues/217) | — | — | | Observability: provenance timeline view (digest-level, dated, per-family) + sub-items | provenance-timeline | [#210](https://github.com/toddysm/cssc-framework/issues/210), [#211](https://github.com/toddysm/cssc-framework/issues/211)–[#215](https://github.com/toddysm/cssc-framework/issues/215) | — | — | | Observability: represent/present multi-arch (index) + per-architecture manifests in the graph (design) | multiarch-graph-present | [#218](https://github.com/toddysm/cssc-framework/issues/218) | — | — | | Observability: stage ImageIndexObserved events from build/app-image workflows | image-index-observed | [#220](https://github.com/toddysm/cssc-framework/issues/220) | — | — |