Skip to content

[milestone Milestone 4 ] trace-pipeline/: Evidence admission gate validates and admits test workload ev...Β #83

Description

@telleroutlook

πŸ€– Auto-filed from milestone doc bullet.

Repo: WasmAgent/trace-pipeline
Milestone: Milestone 4 β€” Integration Validation & Launch Readiness
Bullet:

trace-pipeline/: Evidence admission gate validates and admits test workload evidence

Problem

The trace-pipeline lacks an evidence admission gate component to validate and admit test workload evidence. Without this gate, the pipeline cannot verify that incoming evidence from test workloads meets required criteria before processing.

Approach

Create an evidence admission gate module in the trace-pipeline repository with the following structure:

  1. Create pkg/admission/ package with:

    • gate.go: Main admission gate interface and implementation
    • validator.go: Evidence validation logic
    • admission.go: Admission decision logic
  2. Validation Criteria (define based on project requirements):

    • Evidence schema validation (check required fields)
    • Signature/cryptographic validation (if applicable)
    • Source authentication (verify workload identity)
    • Format compliance (ensure evidence is parsable)
  3. Admission Logic:

    • Accept: Evidence passes all validation checks
    • Reject: Evidence fails validation with specific reason
    • Defer: Evidence requires additional verification (optional)
  4. Add tests in pkg/admission/admission_test.go:

    • Valid evidence admission
    • Invalid evidence rejection
    • Edge case handling
  5. Wire into pipeline (if pipeline exists):

    • Add admission gate to evidence processing flow
    • Expose metrics for admission decisions

Files

Expected files to create/modify in WasmAgent/trace-pipeline:

  • pkg/admission/gate.go β€” Admission gate interface and implementation
  • pkg/admission/validator.go β€” Evidence validation logic
  • pkg/admission/admission.go β€” Admission decision logic
  • pkg/admission/admission_test.go β€” Unit tests

Note: If the project uses a different language or structure (e.g., TypeScript, Python), adapt the file paths accordingly while maintaining the same functionality.

Acceptance Criteria

  • go build ./... passes (or equivalent build command for the project's language)
  • go test ./pkg/admission/... passes with coverage >80%
  • Evidence with valid schema and signature is admitted
  • Evidence with missing required fields is rejected with clear error message
  • Evidence with invalid signature is rejected with clear error message
  • No unrelated files touched (git status --short shows only intended changes)

Notes for the implementer

This issue was auto-created by SweepMilestoneBulletToIssue (part of the roadmap-autonomy family #220-#223). The bullet text above is verbatim from the milestone doc β€” if it is ambiguous or too large for a single implement cycle, the verify-first judge should return NEEDS_SPLIT (#214) with sub-issue proposals or NEEDS_HUMAN (#216) with the blocker.


Filed automatically.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions