lorentz/wulf-pulse
1
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity Actions

docs(requirements): mark EVID-02/03/04 complete (phase 16 gap)

Browse source
This commit is contained in:
lorentz 2026-07-15 15:19:59 -04:00
parent 3fe1c02570
commit 4decefb940
1 changed files with 6 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

12
.planning/REQUIREMENTS.md
View file

@ -25,16 +25,16 @@ destructive remediation gated behind explicit human approval.
- [x] **EVID-01**: For each candidate ticket, the system extracts ticket ID/number, - [x] **EVID-01**: For each candidate ticket, the system extracts ticket ID/number,
company, requester/reporter, title, description, notes, relevant time entries, company, requester/reporter, title, description, notes, relevant time entries,
and attachment metadata and attachment metadata
- [ ] **EVID-02**: When multiple `.eml` attachments exist, the system prefers - [x] **EVID-02**: When multiple `.eml` attachments exist, the system prefers
`rfc.eml` as the original reported message over `OriginatingEmail.eml` `rfc.eml` as the original reported message over `OriginatingEmail.eml`
(wrapper/context), matching case-insensitively and by `message/rfc822` (wrapper/context), matching case-insensitively and by `message/rfc822`
content-type, not filename alone content-type, not filename alone
- [ ] **EVID-03**: The system parses the selected original email's RFC822/MIME - [x] **EVID-03**: The system parses the selected original email's RFC822/MIME
structure into normalized headers (From, display name, sender email/domain, structure into normalized headers (From, display name, sender email/domain,
Reply-To, Return-Path, To, Cc, Subject, Date, Message-ID, Received chain, Reply-To, Return-Path, To, Cc, Subject, Date, Message-ID, Received chain,
SPF/DKIM/DMARC authentication results), extracted URLs, and attachment SPF/DKIM/DMARC authentication results), extracted URLs, and attachment
metadata (name, content-type, size, hash) metadata (name, content-type, size, hash)
- [ ] **EVID-04**: The system stores a sanitized/truncated body preview alongside - [x] **EVID-04**: The system stores a sanitized/truncated body preview alongside
raw evidence, and never executes or fetches any URL found in a message raw evidence, and never executes or fetches any URL found in a message
### Campaign Grouping ### Campaign Grouping
@ -153,9 +153,9 @@ Populated during roadmap creation.
| DETECT-02 | Phase 15 | Complete | | DETECT-02 | Phase 15 | Complete |
| DETECT-03 | Phase 18 | Pending | | DETECT-03 | Phase 18 | Pending |
| EVID-01 | Phase 15 | Complete | | EVID-01 | Phase 15 | Complete |
| EVID-02 | Phase 16 | Pending | | EVID-02 | Phase 16 | Complete |
| EVID-03 | Phase 16 | Pending | | EVID-03 | Phase 16 | Complete |
| EVID-04 | Phase 16 | Pending | | EVID-04 | Phase 16 | Complete |
| CAMP-01 | Phase 18 | Pending | | CAMP-01 | Phase 18 | Pending |
| CAMP-02 | Phase 18 | Pending | | CAMP-02 | Phase 18 | Pending |
| CAMP-03 | Phase 18 | Pending | | CAMP-03 | Phase 18 | Pending |