feat: CRA wiki, cybersecurity policy template, Phase H RAG ingestion
All checks were successful
CI/CD / go-lint (push) Has been skipped
CI/CD / python-lint (push) Has been skipped
CI/CD / nodejs-lint (push) Has been skipped
CI/CD / test-go-ai-compliance (push) Successful in 35s
CI/CD / test-python-backend-compliance (push) Successful in 33s
CI/CD / test-python-document-crawler (push) Successful in 22s
CI/CD / test-python-dsms-gateway (push) Successful in 19s
CI/CD / validate-canonical-controls (push) Successful in 12s
CI/CD / Deploy (push) Successful in 2s

- Wiki: add CRA category with 3 articles (Grundlagen, 35 Security Controls,
  CRA+NIS2+AI Act Framework)
- Document Generator: add CRA-konforme Cybersecurity Policy template with
  21 sections covering governance, SSDLC, vulnerability management,
  incident response (24h/72h), SBOM, patch management
- RAG: ingest Phase H — 17 EU regulations + 2 NIST frameworks now in Qdrant
  (CRA, AI Act, NIS2, DSGVO, DMA, GPSR, Batterieverordnung, etc.)
- Phase H script: add scripts/ingest-phase-h.sh for reproducible ingestion
- rag-sources.md: update status to ingestiert, add CRA entry

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
Benjamin Admin
2026-03-15 00:43:46 +01:00
parent f3e05c1bf7
commit dd09fa7a46
4 changed files with 1189 additions and 4 deletions

View File

@@ -10,7 +10,7 @@ Stand: 2026-03-11
| C (EU-Recht) | bp_compliance_ce | 3 (DSA, ePrivacy, SCC) | Ingestiert |
| D (Templates) | bp_legal_templates | ~50 | Ingestiert |
| E (Datenschutz) | bp_compliance_datenschutz | 10 (EDPB/EDPS) | Ingestiert |
| **H (Layer 1 Safe Core)** | **alle 3 Collections** | **~35 neu** | **AUSSTEHEND** |
| **H (Layer 1 Safe Core)** | **alle 3 Collections** | **~37 neu** | **Ingestiert (2026-03-15)** |
---
@@ -28,7 +28,7 @@ Stand: 2026-03-11
| 6 | UrhG (komplett, Bundestag-Repo) | github.com/bundestag/gesetze | Unlicense |
| 7 | TMG (komplett, Bundestag-Repo) | github.com/bundestag/gesetze | Unlicense |
### Neu in Phase H
### Phase H (ingestiert 2026-03-15)
| # | Dokument | Quelle | Lizenz | Generator-Einsatz |
|---|----------|--------|--------|-------------------|
@@ -61,7 +61,7 @@ Stand: 2026-03-11
| 2 | ePrivacy-Richtlinie 2002/58/EC | 32002L0058 | CC BY 4.0 |
| 3 | Standardvertragsklauseln (EU) 2021/914 | 32021D0914 | CC BY 4.0 |
### Neu in Phase H
### Phase H (ingestiert 2026-03-15)
| # | Dokument | CELEX | Lizenz | Generator-Einsatz |
|---|----------|-------|--------|-------------------|
@@ -80,6 +80,7 @@ Stand: 2026-03-11
| 16 | GPSR (EU) 2023/988 | 32023R0988 | CC BY 4.0 | Produktsicherheit |
| 17 | Product Liability Directive 85/374/EEC | 31985L0374 | CC BY 4.0 | Haftungs-AGB |
| 18 | Batterieverordnung (EU) 2023/1542 | 32023R1542 | CC BY 4.0 | Batterie-Pflichten |
| 19 | Cyber Resilience Act (EU) 2024/2847 | 32024R2847 | CC BY 4.0 | Cybersecurity-Controls, SBOM, Vulnerability Handling |
---
@@ -110,7 +111,7 @@ Stand: 2026-03-11
| 1-8 | EDPB Guidelines (8 Stueck) | edpb.europa.eu | Reuse Notice |
| 9-10 | EDPS Guidance (2 Stueck) | edps.europa.eu | Reuse Notice |
### Neu in Phase H
### Phase H (ingestiert 2026-03-15)
| # | Dokument | Quelle | Lizenz | Einsatz |
|---|----------|--------|--------|---------|