Oliver Kieselbach cf76c4338f feat(vuln): manual "Refresh NVD Cache" and "Sync EPSS" with their own last-sync lines ...

The admin Data Sync Status only offered KEV and MSRC; the NVD stale-row refresh and the EPSS
re-score ran on the nightly timer alone. Both walks move out of the timer into
VulnerabilityCacheRefreshService (singleton, one in-flight slot per walk) so the buttons and the
nightly run share one code path and stamp the same timestamps (NvdCacheLastRefreshUtc — only for
a walk that reached every stale row; EpssLastSyncUtc). POST vulnerability/sync-nvd starts the
minutes-long, rate-limited NVD walk in the background and answers 202 (409 while running); the
page polls sync-status (nvdRefreshRunning, nvdLastRun) every 10 s meanwhile. POST
vulnerability/sync-epss runs synchronously and returns the counts. The timer skips a slot a
manual run holds instead of queueing a duplicate. Shared manifest regenerated for the two new
AdminConfiguration fields.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-08-29 11:57:55 +02:00

..

app-install-duration-attempt.md

feat: app install durations measure the status-defining attempt

2026-08-21 13:40:47 +02:00

app-version-regression-radar.md

insights: app-version duration regression radar + per-version duration stats

2026-08-13 13:39:03 +02:00

business-timestamps.md

fix(backend): business timestamps survive storage migrations (OccurredUtc + RowKey decode)

2026-07-20 11:29:53 +02:00

client-cert-tenant-binding.md

feat(security): enforce cert tenant binding — reject cross-tenant certificates

2026-08-25 12:45:21 +02:00

cloudpc-device-validation.md

distress: carry the W365 Cloud PC marker into Devices Not Registered

2026-08-07 10:52:35 +00:00

device-journeys.md

perf(maintenance): one projected 35d Sessions scan shared by all rolling sweeps

2026-08-23 12:19:41 +02:00

lifecycle-manifests-and-session-scope.md

backend: lifecycle completeness nets + session-scope point-read + server-side dashboard search (audit P5/P6)

2026-08-13 19:29:27 +02:00

oobe-bootstrap-go-flow.md

fix code review findings

2026-07-29 10:30:47 +02:00

plan-downgrade-retention-grace.md

feat(backend): 30-day retention grace period on Pro downgrade

2026-08-22 21:00:53 +02:00

rule-regression-radar.md

feat(insights): F3 regression radar - Wilson-gated rule hit-rate drift detection (PR6)

2026-07-27 09:10:52 +02:00

send-time-frame-separation.md

feat: P14 - per-upload-batch send time separates spool delay from clock offset

2026-08-21 00:44:29 +02:00

server-actions-on-demand-diagnostics.md

docs(okf): ServerActions & on-demand diagnostics concept doc

2026-07-24 18:15:23 +02:00

session-annotations.md

annotations: tenant switcher on the overview page + GA-lane guard on the global list

2026-08-13 09:27:31 +02:00

silent-session-classification.md

feat(classification,calibration): rule 5a completed-assumed, max-lifetime grace skip, drift-radar floors

2026-08-27 18:10:19 +02:00

table-schema-sentinel.md

feat(telemetry): startup duration metrics for backend and MCP

2026-08-23 16:04:31 +02:00

telemetry-ingest-shaping.md

infra(telemetry): DCR also drops host-emitted successful SignalR dependencies

2026-08-23 19:15:41 +02:00

tenant-activation-welcome-mail.md

feat(admin,backend): find a tenant by its notification or contact email

2026-08-27 15:41:05 +02:00

time-attribution.md

perf(maintenance): one projected 35d Sessions scan shared by all rolling sweeps

2026-08-23 12:19:41 +02:00

verdict-calibration.md

feat(classification,calibration): rule 5a completed-assumed, max-lifetime grace skip, drift-radar floors

2026-08-27 18:10:19 +02:00

vulnerability-correlation-sources.md

feat(vuln): manual "Refresh NVD Cache" and "Sync EPSS" with their own last-sync lines

2026-08-29 11:57:55 +02:00