From 94be7c78055b555ad136869d3f5a5f672cd707a6 Mon Sep 17 00:00:00 2001 From: Toddy Mladenov Date: Fri, 28 Aug 2026 21:22:46 -0700 Subject: [PATCH] docs: mark provenance-timeline implemented; drop closed epic/design rows (#210) --- docs/project-state.md | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/docs/project-state.md b/docs/project-state.md index 2ca3936..e2fa05e 100644 --- a/docs/project-state.md +++ b/docs/project-state.md @@ -42,6 +42,7 @@ around: **Acquire, Build, Catalog, Deploy, Run**, and the cross-cutting | Observability: graph events for all artifacts + deletions; referrers (REFERS_TO) in queries/visualization | graph-referrers | [#199](https://github.com/toddysm/cssc-framework/issues/199), [#205](https://github.com/toddysm/cssc-framework/issues/205), [#203](https://github.com/toddysm/cssc-framework/issues/203), [#204](https://github.com/toddysm/cssc-framework/issues/204) | — | [observability/supply-chain-graph.md](https://github.com/toddysm/cssc-framework/blob/main/docs/architecture/observability/supply-chain-graph.md) | 2026-08 | | Observability: model multi-arch index ↔ per-architecture child manifest relationship | multiarch-index-platform | [#216](https://github.com/toddysm/cssc-framework/issues/216) | — | — | 2026-08 | | Observability: roll per-platform child referrers/attestations up to the index in graph queries/views (CLI `--no-rollup` + graph-service `rollup` toggle) | rollup-platform-referrers | [#217](https://github.com/toddysm/cssc-framework/issues/217) (PR [#221](https://github.com/toddysm/cssc-framework/pull/221)) | — | [observability/supply-chain-graph.md](https://github.com/toddysm/cssc-framework/blob/main/docs/architecture/observability/supply-chain-graph.md) | 2026-08 | +| Observability: provenance timeline view (per-family, typed, dated) — `queries.provenance`, mermaid/cytoscape rendering, `cssc-graph provenance` CLI, `GET /artifacts/provenance` endpoint | provenance-timeline | [#210](https://github.com/toddysm/cssc-framework/issues/210) ([#211](https://github.com/toddysm/cssc-framework/issues/211)–[#215](https://github.com/toddysm/cssc-framework/issues/215)) | — | [querying-the-supply-chain-graph.md](https://github.com/toddysm/cssc-framework/blob/main/docs/guides/observability/querying-the-supply-chain-graph.md) | 2026-08 | | Catalog: promotion + quarantine cleanup includes all referrers (OCI 1.0 + 1.1) | promote-referrers | [#198](https://github.com/toddysm/cssc-framework/issues/198) | — | — | 2026-08 | | Early CI supply-chain tasks (Trivy scan, sign, SBOM, provenance, lifecycle, signature/vuln/lifecycle verification, Copa patching) | ci-tasks | [#2](https://github.com/toddysm/cssc-framework/issues/2)–[#14](https://github.com/toddysm/cssc-framework/issues/14), [#22](https://github.com/toddysm/cssc-framework/issues/22) | — | — | 2023 | @@ -53,9 +54,6 @@ around: **Acquire, Build, Catalog, Deploy, Run**, and the cross-cutting | Capability | Feature slug | Tracking issue | PRD doc | Docs | | --- | --- | --- | --- | --- | -| Observability: supply-chain graph — overall implementation epic | supply-chain-graph | [#177](https://github.com/toddysm/cssc-framework/issues/177) | — | — | -| Observability: provenance timeline view (digest-level, dated, per-family) + sub-items | provenance-timeline | [#210](https://github.com/toddysm/cssc-framework/issues/210), [#211](https://github.com/toddysm/cssc-framework/issues/211)–[#215](https://github.com/toddysm/cssc-framework/issues/215) | — | — | -| Observability: represent/present multi-arch (index) + per-architecture manifests in the graph (design) | multiarch-graph-present | [#218](https://github.com/toddysm/cssc-framework/issues/218) | — | — | | Observability: stage ImageIndexObserved events from build/app-image workflows | image-index-observed | [#220](https://github.com/toddysm/cssc-framework/issues/220) | — | — | | Acquire: mirror-history end-to-end validation + persist to skip re-sync | mirror-history-validation | [#157](https://github.com/toddysm/cssc-framework/issues/157), [#163](https://github.com/toddysm/cssc-framework/issues/163) | — | — |