mirror of
https://github.com/azaion/gps-denied-onboard.git
synced 2026-06-21 22:41:12 +00:00
Oleksandr Bezdieniezhnykh
b12db61444
Implements the AZ-263 / E-BOOT initial structure task:
- Python src/-layout package `gps_denied_onboard/` with per-component
interface stubs (14 components), type-only DTOs under `_types/`,
shared helpers under `helpers/` (R14 LightGlue ownership), structured
JSON logging, runtime composition root with env-var fail-fast gate,
healthcheck module shared by Docker and CI smoke.
- CMake top-level + `cmake/{build_options,dependencies,strategies}.cmake`
with the BUILD_* per-binary flags (ADR-002) and pinned external git
refs for OKVIS2 / VINS-Mono / GTSAM / FAISS / OpenCV >=4.12.0.
- Three Dockerfiles (companion-tier1, operator-tooling,
mock-suite-sat-service) + two compose files (dev + Tier-1 test).
- Four GitHub Actions workflows: ci.yml (lint/unit/integration/dual
binary build/SBOM diff/security), ci-tier2.yml (self-hosted Jetson
AC-bound NFTs), release.yml, cve-rescan.yml.
- Two CI gate scripts: `ci/sbom_diff.py` (deployment SBOM subset +
R02 exclusion), `ci/opencv_pin_gate.py` (>=4.12.0 enforcement,
D-CROSS-CVE-1).
- Alembic-driven Postgres 16 initial migration `0001_initial.py`
mirroring satellite-provider tiles + flights + sector_classifications
+ manifests + engine_cache_entries (data_model.md s 2).
- Tier-1 test scaffolding: 95 passing unit tests covering every AC,
per-component smoke tests, structured logging JSON output check,
env-var gate check, healthcheck import check. Two CI-gated tests
(cmake configure, actionlint) skip locally with explicit reasons.
- Batch report + code review report under `_docs/03_implementation/`.
Verdict: PASS_WITH_WARNINGS (two Low findings, both informational).
Co-authored-by: Cursor <cursoragent@cursor.com>
25 lines
1.2 KiB
CMake
25 lines
1.2 KiB
CMake
# Pinned third-party native dependencies.
|
|
#
|
|
# D-CROSS-CVE-1: OpenCV must be >= 4.12.0. The `ci/opencv_pin_gate.py` CI step
|
|
# also enforces this against the resolved pyproject lockfile.
|
|
|
|
# pybind11 (header-only — vendored under cpp/pybind11/ as a submodule placeholder).
|
|
set(PYBIND11_VENDORED_PATH "${CMAKE_CURRENT_SOURCE_DIR}/cpp/pybind11")
|
|
|
|
# OpenCV minimum (D-CROSS-CVE-1).
|
|
set(OPENCV_MIN_VERSION "4.12.0")
|
|
|
|
# Pinned native dependency commit refs — bootstrap declares the pins; concrete
|
|
# fetch_content / find_package wiring lands with the dependent component tasks.
|
|
set(OKVIS2_GIT_TAG "v2.0.0" CACHE STRING "OKVIS2 git tag/commit")
|
|
set(VINS_MONO_GIT_TAG "v0.9" CACHE STRING "VINS-Mono git tag/commit")
|
|
set(GTSAM_GIT_TAG "4.2.0" CACHE STRING "GTSAM git tag/commit")
|
|
set(FAISS_GIT_TAG "v1.8.0" CACHE STRING "FAISS git tag/commit")
|
|
|
|
# Output pin summary for CI capture into the SBOM.
|
|
message(STATUS "[deps] OPENCV_MIN_VERSION=${OPENCV_MIN_VERSION}")
|
|
message(STATUS "[deps] OKVIS2_GIT_TAG=${OKVIS2_GIT_TAG}")
|
|
message(STATUS "[deps] VINS_MONO_GIT_TAG=${VINS_MONO_GIT_TAG}")
|
|
message(STATUS "[deps] GTSAM_GIT_TAG=${GTSAM_GIT_TAG}")
|
|
message(STATUS "[deps] FAISS_GIT_TAG=${FAISS_GIT_TAG}")
|