Package org.egothor.methodatlas.attest

Class AttestFacade

java.lang.Object

org.egothor.methodatlas.attest.AttestFacade

public final class AttestFacade
extends Object

Single public entry point used by MethodAtlasApp to drive -attest.

The package's data records, collector, and writer are all package-private so they remain implementation details. The facade exposes only the operations the CLI needs:

1. prepare a collector (returning a handle that must be threaded through the orchestrator as an extra sink);
2. after the scan, ask the same handle to write the attestation manifest.

The manifest is a compact JSON file listing every AI-classified security-relevant test method, the commit SHA (resolved from CI environment variables), and optional content hashes. It is designed to be signed externally with cosign sign-blob or GPG and attached to a release as a tamper-evident record of which security tests existed at that point.

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static final class	AttestFacade.Handle	Opaque handle returned by prepare(double, List).

Field Summary

Fields

Modifier and Type	Field	Description
static final String	DEFAULT_ATTEST_FILENAME	Default filename used when -attest-file is not supplied.

Method Summary

Modifier and Type	Method	Description
static AttestFacade.Handle	prepare(double minConfidence, List<Path> scanRoots)	Prepares an attestation collector.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

DEFAULT_ATTEST_FILENAME

public static final String DEFAULT_ATTEST_FILENAME

Default filename used when -attest-file is not supplied.

See Also:

• Constant Field Values

Method Details

prepare

public static AttestFacade.Handle prepare(double minConfidence,
 List<Path> scanRoots)

Prepares an attestation collector.

Parameters:

minConfidence - AI minimum-confidence threshold; AI-only evidence below this value is excluded from the manifest

scanRoots - scan root paths written to the manifest header

Returns:

handle ready for use by the orchestrator and writer