feat(quaidal): backend API + frontend tab for BSI QUAIDAL data-quality controls
Wire the 195 Clean-Room QUAIDAL controls (from breakpilot-core migration 011)
into the compliance SaaS UI.
Backend:
- GET /api/v1/quaidal/stats - counts by kind + source provenance
- GET /api/v1/quaidal/controls - list, optional kind= filter
- GET /api/v1/quaidal/controls/{id} - single derived control
- GET /api/v1/quaidal/criteria - 10 QKB criteria
- GET /api/v1/quaidal/criteria/{id} - QKB with QB/MA/QM tree
Frontend:
- /sdk/quality: new "Trainingsdaten-Qualität (BSI QUAIDAL)" tab with
10 QKB cards and a drill-down modal showing the full QB→MA→QM tree
plus original BSI source link and license note.
- /sdk/ai-act: Art. 10 tile on each high-risk/unacceptable result,
linking to /sdk/quality?category=data_quality.
Pattern matches existing IACE module DIN-reference handling:
own wording, source section + URL preserved for due diligence.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This commit is contained in:
Benjamin Admin
@@ -0,0 +1,27 @@
|
||||
import { NextRequest, NextResponse } from 'next/server'
|
||||
|
||||
const BACKEND_URL = process.env.BACKEND_URL || 'http://backend-compliance:8002'
|
||||
|
||||
function tenantHeader(request: NextRequest): string {
|
||||
return request.headers.get('x-tenant-id') || '00000000-0000-0000-0000-000000000001'
|
||||
}
|
||||
|
||||
export async function GET(
|
||||
request: NextRequest,
|
||||
{ params }: { params: Promise<{ derived_id: string }> }
|
||||
) {
|
||||
const { derived_id } = await params
|
||||
try {
|
||||
const resp = await fetch(
|
||||
`${BACKEND_URL}/api/v1/quaidal/controls/${encodeURIComponent(derived_id)}`,
|
||||
{ headers: { 'X-Tenant-ID': tenantHeader(request) }, cache: 'no-store' }
|
||||
)
|
||||
const body = await resp.text()
|
||||
return new NextResponse(body, {
|
||||
status: resp.status,
|
||||
headers: { 'Content-Type': resp.headers.get('Content-Type') || 'application/json' },
|
||||
})
|
||||
} catch (err) {
|
||||
return NextResponse.json({ error: 'Backend unreachable', details: String(err) }, { status: 502 })
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,25 @@
|
||||
import { NextRequest, NextResponse } from 'next/server'
|
||||
|
||||
const BACKEND_URL = process.env.BACKEND_URL || 'http://backend-compliance:8002'
|
||||
|
||||
function tenantHeader(request: NextRequest): string {
|
||||
return request.headers.get('x-tenant-id') || '00000000-0000-0000-0000-000000000001'
|
||||
}
|
||||
|
||||
export async function GET(request: NextRequest) {
|
||||
const { searchParams } = new URL(request.url)
|
||||
const qs = searchParams.toString()
|
||||
try {
|
||||
const resp = await fetch(
|
||||
`${BACKEND_URL}/api/v1/quaidal/controls${qs ? `?${qs}` : ''}`,
|
||||
{ headers: { 'X-Tenant-ID': tenantHeader(request) }, cache: 'no-store' }
|
||||
)
|
||||
const body = await resp.text()
|
||||
return new NextResponse(body, {
|
||||
status: resp.status,
|
||||
headers: { 'Content-Type': resp.headers.get('Content-Type') || 'application/json' },
|
||||
})
|
||||
} catch (err) {
|
||||
return NextResponse.json({ error: 'Backend unreachable', details: String(err) }, { status: 502 })
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,27 @@
|
||||
import { NextRequest, NextResponse } from 'next/server'
|
||||
|
||||
const BACKEND_URL = process.env.BACKEND_URL || 'http://backend-compliance:8002'
|
||||
|
||||
function tenantHeader(request: NextRequest): string {
|
||||
return request.headers.get('x-tenant-id') || '00000000-0000-0000-0000-000000000001'
|
||||
}
|
||||
|
||||
export async function GET(
|
||||
request: NextRequest,
|
||||
{ params }: { params: Promise<{ section_id: string }> }
|
||||
) {
|
||||
const { section_id } = await params
|
||||
try {
|
||||
const resp = await fetch(
|
||||
`${BACKEND_URL}/api/v1/quaidal/criteria/${encodeURIComponent(section_id)}`,
|
||||
{ headers: { 'X-Tenant-ID': tenantHeader(request) }, cache: 'no-store' }
|
||||
)
|
||||
const body = await resp.text()
|
||||
return new NextResponse(body, {
|
||||
status: resp.status,
|
||||
headers: { 'Content-Type': resp.headers.get('Content-Type') || 'application/json' },
|
||||
})
|
||||
} catch (err) {
|
||||
return NextResponse.json({ error: 'Backend unreachable', details: String(err) }, { status: 502 })
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,23 @@
|
||||
import { NextRequest, NextResponse } from 'next/server'
|
||||
|
||||
const BACKEND_URL = process.env.BACKEND_URL || 'http://backend-compliance:8002'
|
||||
|
||||
function tenantHeader(request: NextRequest): string {
|
||||
return request.headers.get('x-tenant-id') || '00000000-0000-0000-0000-000000000001'
|
||||
}
|
||||
|
||||
export async function GET(request: NextRequest) {
|
||||
try {
|
||||
const resp = await fetch(`${BACKEND_URL}/api/v1/quaidal/criteria`, {
|
||||
headers: { 'X-Tenant-ID': tenantHeader(request) },
|
||||
cache: 'no-store',
|
||||
})
|
||||
const body = await resp.text()
|
||||
return new NextResponse(body, {
|
||||
status: resp.status,
|
||||
headers: { 'Content-Type': resp.headers.get('Content-Type') || 'application/json' },
|
||||
})
|
||||
} catch (err) {
|
||||
return NextResponse.json({ error: 'Backend unreachable', details: String(err) }, { status: 502 })
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,23 @@
|
||||
import { NextRequest, NextResponse } from 'next/server'
|
||||
|
||||
const BACKEND_URL = process.env.BACKEND_URL || 'http://backend-compliance:8002'
|
||||
|
||||
function tenantHeader(request: NextRequest): string {
|
||||
return request.headers.get('x-tenant-id') || '00000000-0000-0000-0000-000000000001'
|
||||
}
|
||||
|
||||
export async function GET(request: NextRequest) {
|
||||
try {
|
||||
const resp = await fetch(`${BACKEND_URL}/api/v1/quaidal/stats`, {
|
||||
headers: { 'X-Tenant-ID': tenantHeader(request) },
|
||||
cache: 'no-store',
|
||||
})
|
||||
const body = await resp.text()
|
||||
return new NextResponse(body, {
|
||||
status: resp.status,
|
||||
headers: { 'Content-Type': resp.headers.get('Content-Type') || 'application/json' },
|
||||
})
|
||||
} catch (err) {
|
||||
return NextResponse.json({ error: 'Backend unreachable', details: String(err) }, { status: 502 })
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,45 @@
|
||||
'use client'
|
||||
|
||||
import Link from 'next/link'
|
||||
|
||||
interface Props {
|
||||
/** Risk classification of the AI system. Tile is only rendered for high_risk / unacceptable. */
|
||||
riskLevel: string
|
||||
}
|
||||
|
||||
/**
|
||||
* Renders a tile pointing to the BSI QUAIDAL-based data-quality control tab.
|
||||
* AI Act Article 10 obligations (training-data quality) apply only to high-risk
|
||||
* systems, so the tile is skipped for limited / minimal / not-applicable classes.
|
||||
*/
|
||||
export function Art10Tile({ riskLevel }: Props) {
|
||||
if (riskLevel !== 'high_risk' && riskLevel !== 'unacceptable') return null
|
||||
|
||||
return (
|
||||
<Link
|
||||
href="/sdk/quality?category=data_quality"
|
||||
className="block mt-3 p-3 rounded-lg border border-purple-200 bg-purple-50 hover:bg-purple-100 transition-colors"
|
||||
>
|
||||
<div className="flex items-start gap-3">
|
||||
<div className="w-9 h-9 rounded-full bg-purple-200 text-purple-700 flex items-center justify-center shrink-0">
|
||||
<svg className="w-5 h-5" fill="none" stroke="currentColor" viewBox="0 0 24 24">
|
||||
<path strokeLinecap="round" strokeLinejoin="round" strokeWidth={2}
|
||||
d="M3 7v10a2 2 0 002 2h14a2 2 0 002-2V7M3 7l9 6 9-6M3 7l9-4 9 4" />
|
||||
</svg>
|
||||
</div>
|
||||
<div className="flex-1 min-w-0">
|
||||
<div className="text-sm font-semibold text-purple-900">
|
||||
Art. 10 Datenqualität (Hochrisiko-KI)
|
||||
</div>
|
||||
<div className="text-xs text-purple-700 mt-0.5">
|
||||
BSI QUAIDAL Controls: 10 Kriterien, 15 Bausteine, 30 Maßnahmen, 140 Metriken.
|
||||
Klicken zum Öffnen des Trainingsdaten-Qualität-Moduls.
|
||||
</div>
|
||||
</div>
|
||||
<svg className="w-4 h-4 text-purple-500 shrink-0 mt-1" fill="none" stroke="currentColor" viewBox="0 0 24 24">
|
||||
<path strokeLinecap="round" strokeLinejoin="round" strokeWidth={2} d="M9 5l7 7-7 7" />
|
||||
</svg>
|
||||
</div>
|
||||
</Link>
|
||||
)
|
||||
}
|
||||
@@ -9,6 +9,7 @@ import { RiskPyramid } from './_components/RiskPyramid'
|
||||
import { AddSystemForm } from './_components/AddSystemForm'
|
||||
import { AISystemCard } from './_components/AISystemCard'
|
||||
import DecisionTreeWizard from '@/components/sdk/ai-act/DecisionTreeWizard'
|
||||
import { Art10Tile } from './_components/Art10Tile'
|
||||
|
||||
type TabId = 'overview' | 'decision-tree' | 'results'
|
||||
|
||||
@@ -136,6 +137,7 @@ function SavedResultsTab() {
|
||||
Löschen
|
||||
</button>
|
||||
</div>
|
||||
<Art10Tile riskLevel={r.high_risk_result} />
|
||||
</div>
|
||||
))}
|
||||
</div>
|
||||
|
||||
@@ -0,0 +1,152 @@
|
||||
'use client'
|
||||
|
||||
import { useEffect, useState } from 'react'
|
||||
import { fetchCriterionTree, type QuaidalControl, type QuaidalCriterionTree } from '../_hooks/useQuaidalData'
|
||||
|
||||
interface Props {
|
||||
sectionId: string
|
||||
onClose: () => void
|
||||
}
|
||||
|
||||
function ControlBlock({ ctrl, badgeColor }: { ctrl: QuaidalControl; badgeColor: string }) {
|
||||
return (
|
||||
<div className="border border-gray-200 rounded-lg p-4 bg-white">
|
||||
<div className="flex items-start justify-between gap-3 mb-2">
|
||||
<h4 className="font-semibold text-gray-900">{ctrl.canonical_name}</h4>
|
||||
<span className={`px-2 py-0.5 text-xs rounded-full ${badgeColor} shrink-0`}>{ctrl.source.section}</span>
|
||||
</div>
|
||||
<p className="text-sm text-gray-600 mb-3 whitespace-pre-line">{ctrl.description}</p>
|
||||
{ctrl.source.url && (
|
||||
<a
|
||||
href={ctrl.source.url}
|
||||
target="_blank"
|
||||
rel="noreferrer noopener"
|
||||
className="text-xs text-purple-600 hover:text-purple-800 underline"
|
||||
>
|
||||
BSI-Quelle ansehen ({ctrl.source.framework})
|
||||
</a>
|
||||
)}
|
||||
</div>
|
||||
)
|
||||
}
|
||||
|
||||
export function QuaidalCriterionDetail({ sectionId, onClose }: Props) {
|
||||
const [tree, setTree] = useState<QuaidalCriterionTree | null>(null)
|
||||
const [loading, setLoading] = useState(true)
|
||||
|
||||
useEffect(() => {
|
||||
let active = true
|
||||
setLoading(true)
|
||||
fetchCriterionTree(sectionId).then(t => {
|
||||
if (active) {
|
||||
setTree(t)
|
||||
setLoading(false)
|
||||
}
|
||||
})
|
||||
return () => { active = false }
|
||||
}, [sectionId])
|
||||
|
||||
return (
|
||||
<div className="fixed inset-0 z-50 flex items-center justify-center bg-black/40 p-4">
|
||||
<div className="bg-white rounded-2xl shadow-xl w-full max-w-4xl max-h-[90vh] overflow-hidden flex flex-col">
|
||||
<div className="flex items-center justify-between px-6 py-4 border-b border-gray-200">
|
||||
<div>
|
||||
<div className="text-xs text-gray-500 uppercase tracking-wide">QUAIDAL Kriterium</div>
|
||||
<h2 className="text-xl font-bold text-gray-900">
|
||||
{tree?.criterion.canonical_name || sectionId}
|
||||
</h2>
|
||||
</div>
|
||||
<button
|
||||
onClick={onClose}
|
||||
className="w-8 h-8 rounded-full hover:bg-gray-100 flex items-center justify-center text-gray-500"
|
||||
aria-label="Schliessen"
|
||||
>×</button>
|
||||
</div>
|
||||
|
||||
<div className="overflow-y-auto p-6 space-y-6">
|
||||
{loading && <div className="text-center text-gray-400 py-12">Lade...</div>}
|
||||
|
||||
{tree && (
|
||||
<>
|
||||
<div>
|
||||
<h3 className="text-sm font-semibold text-gray-500 uppercase tracking-wide mb-2">
|
||||
Anforderung (eigene Formulierung)
|
||||
</h3>
|
||||
<div className="bg-purple-50 border border-purple-200 rounded-lg p-4">
|
||||
<p className="text-gray-800 whitespace-pre-line">{tree.criterion.description}</p>
|
||||
</div>
|
||||
<div className="mt-3 flex flex-wrap items-center gap-3 text-xs text-gray-500">
|
||||
<span>Regulierung: <span className="font-medium text-gray-700">{tree.criterion.regulation_anchor || '—'}</span></span>
|
||||
<span>Quelle: <span className="font-medium text-gray-700">{tree.criterion.source.framework} {tree.criterion.source.section}</span></span>
|
||||
{tree.criterion.source.url && (
|
||||
<a href={tree.criterion.source.url} target="_blank" rel="noreferrer noopener" className="text-purple-600 hover:text-purple-800 underline">
|
||||
Originalquelle
|
||||
</a>
|
||||
)}
|
||||
</div>
|
||||
</div>
|
||||
|
||||
{tree.criterion.external_refs.length > 0 && (
|
||||
<div>
|
||||
<h3 className="text-sm font-semibold text-gray-500 uppercase tracking-wide mb-2">
|
||||
Externe Referenzen (nicht ingestiert, nur Verweis)
|
||||
</h3>
|
||||
<div className="flex flex-wrap gap-2">
|
||||
{tree.criterion.external_refs.map((ref, i) => (
|
||||
<span key={i} className="px-2 py-1 text-xs bg-gray-100 text-gray-700 rounded">
|
||||
{ref.framework}{ref.citation ? ` — ${ref.citation}` : ''}
|
||||
</span>
|
||||
))}
|
||||
</div>
|
||||
</div>
|
||||
)}
|
||||
|
||||
{tree.building_blocks.length > 0 && (
|
||||
<div>
|
||||
<h3 className="text-sm font-semibold text-gray-500 uppercase tracking-wide mb-3">
|
||||
Bausteine ({tree.building_blocks.length})
|
||||
</h3>
|
||||
<div className="grid grid-cols-1 md:grid-cols-2 gap-3">
|
||||
{tree.building_blocks.map(qb => (
|
||||
<ControlBlock key={qb.derived_id} ctrl={qb} badgeColor="bg-blue-100 text-blue-700" />
|
||||
))}
|
||||
</div>
|
||||
</div>
|
||||
)}
|
||||
|
||||
{tree.measures.length > 0 && (
|
||||
<div>
|
||||
<h3 className="text-sm font-semibold text-gray-500 uppercase tracking-wide mb-3">
|
||||
Maßnahmen ({tree.measures.length})
|
||||
</h3>
|
||||
<div className="grid grid-cols-1 md:grid-cols-2 gap-3">
|
||||
{tree.measures.map(m => (
|
||||
<ControlBlock key={m.derived_id} ctrl={m} badgeColor="bg-green-100 text-green-700" />
|
||||
))}
|
||||
</div>
|
||||
</div>
|
||||
)}
|
||||
|
||||
{tree.metrics.length > 0 && (
|
||||
<div>
|
||||
<h3 className="text-sm font-semibold text-gray-500 uppercase tracking-wide mb-3">
|
||||
Metriken & Methoden ({tree.metrics.length})
|
||||
</h3>
|
||||
<div className="grid grid-cols-1 md:grid-cols-2 gap-3">
|
||||
{tree.metrics.map(qm => (
|
||||
<ControlBlock key={qm.derived_id} ctrl={qm} badgeColor="bg-amber-100 text-amber-700" />
|
||||
))}
|
||||
</div>
|
||||
</div>
|
||||
)}
|
||||
</>
|
||||
)}
|
||||
</div>
|
||||
|
||||
<div className="px-6 py-3 border-t border-gray-200 bg-gray-50 text-xs text-gray-500">
|
||||
Eigene Clean-Room-Ableitung von BSI QUAIDAL. Quellverweis und Lizenz-Note pro Eintrag.
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
)
|
||||
}
|
||||
@@ -0,0 +1,109 @@
|
||||
'use client'
|
||||
|
||||
import { useState } from 'react'
|
||||
import { useQuaidalData, type QuaidalControl } from '../_hooks/useQuaidalData'
|
||||
import { QuaidalCriterionDetail } from './QuaidalCriterionDetail'
|
||||
|
||||
function CriterionCard({ ctrl, onOpen }: { ctrl: QuaidalControl; onOpen: () => void }) {
|
||||
return (
|
||||
<button
|
||||
onClick={onOpen}
|
||||
className="text-left bg-white rounded-xl border border-gray-200 p-5 hover:border-purple-400 hover:shadow-sm transition-all"
|
||||
>
|
||||
<div className="flex items-start justify-between mb-2">
|
||||
<h3 className="font-semibold text-gray-900">{ctrl.canonical_name}</h3>
|
||||
<span className="px-2 py-0.5 text-xs rounded-full bg-purple-100 text-purple-700">
|
||||
{ctrl.source.section}
|
||||
</span>
|
||||
</div>
|
||||
<p className="text-sm text-gray-600 line-clamp-3">{ctrl.description}</p>
|
||||
<div className="mt-3 flex flex-wrap items-center gap-2 text-xs">
|
||||
<span className="text-gray-500">Bausteine: <span className="font-medium text-gray-700">{ctrl.related_quaidal_ids.length}</span></span>
|
||||
{ctrl.external_refs.slice(0, 2).map((r, i) => (
|
||||
<span key={i} className="px-1.5 py-0.5 bg-gray-100 text-gray-600 rounded">
|
||||
{r.framework}
|
||||
</span>
|
||||
))}
|
||||
</div>
|
||||
</button>
|
||||
)
|
||||
}
|
||||
|
||||
export function TrainingDataQualityTab() {
|
||||
const { criteria, stats, loading, error } = useQuaidalData()
|
||||
const [openSection, setOpenSection] = useState<string | null>(null)
|
||||
|
||||
if (loading) {
|
||||
return <div className="text-center text-gray-400 py-12">Lade QUAIDAL-Katalog...</div>
|
||||
}
|
||||
if (error) {
|
||||
return (
|
||||
<div className="bg-red-50 border border-red-200 rounded-lg p-4 text-red-700">
|
||||
QUAIDAL-Daten konnten nicht geladen werden: {error}
|
||||
</div>
|
||||
)
|
||||
}
|
||||
|
||||
return (
|
||||
<div className="space-y-6">
|
||||
<div className="bg-purple-50 border border-purple-200 rounded-xl p-5">
|
||||
<h2 className="text-lg font-semibold text-gray-900">Trainingsdaten-Qualität nach BSI QUAIDAL</h2>
|
||||
<p className="text-sm text-gray-600 mt-1">
|
||||
Operative Umsetzung von EU AI Act Art. 10 (Datenqualität für Hochrisiko-KI) auf Basis des
|
||||
BSI-Katalogs QUAIDAL. Alle Controls sind eigenständig formuliert (Clean-Room) und verweisen
|
||||
auf die jeweilige QUAIDAL-Sektion.
|
||||
</p>
|
||||
{stats && (
|
||||
<div className="mt-4 grid grid-cols-2 md:grid-cols-4 gap-3 text-sm">
|
||||
<div>
|
||||
<div className="text-xs text-gray-500">Qualitätskriterien</div>
|
||||
<div className="text-xl font-semibold text-gray-900">{stats.counts_by_kind.criterion ?? 0}</div>
|
||||
</div>
|
||||
<div>
|
||||
<div className="text-xs text-gray-500">Bausteine</div>
|
||||
<div className="text-xl font-semibold text-gray-900">{stats.counts_by_kind.building_block ?? 0}</div>
|
||||
</div>
|
||||
<div>
|
||||
<div className="text-xs text-gray-500">Maßnahmen</div>
|
||||
<div className="text-xl font-semibold text-gray-900">{stats.counts_by_kind.measure ?? 0}</div>
|
||||
</div>
|
||||
<div>
|
||||
<div className="text-xs text-gray-500">Metriken & Methoden</div>
|
||||
<div className="text-xl font-semibold text-gray-900">{stats.counts_by_kind.metric ?? 0}</div>
|
||||
</div>
|
||||
</div>
|
||||
)}
|
||||
</div>
|
||||
|
||||
<div>
|
||||
<h3 className="text-lg font-semibold text-gray-900 mb-4">10 Qualitätskriterien</h3>
|
||||
{criteria.length === 0 ? (
|
||||
<div className="bg-white rounded-xl border border-gray-200 p-8 text-center text-gray-400">
|
||||
Keine Kriterien gefunden. Bitte Backend-Ingest prüfen.
|
||||
</div>
|
||||
) : (
|
||||
<div className="grid grid-cols-1 md:grid-cols-2 lg:grid-cols-3 gap-4">
|
||||
{criteria.map(c => (
|
||||
<CriterionCard
|
||||
key={c.derived_id}
|
||||
ctrl={c}
|
||||
onOpen={() => setOpenSection(c.source.section)}
|
||||
/>
|
||||
))}
|
||||
</div>
|
||||
)}
|
||||
</div>
|
||||
|
||||
{stats?.license_note && (
|
||||
<div className="text-xs text-gray-500 italic">{stats.license_note}</div>
|
||||
)}
|
||||
|
||||
{openSection && (
|
||||
<QuaidalCriterionDetail
|
||||
sectionId={openSection}
|
||||
onClose={() => setOpenSection(null)}
|
||||
/>
|
||||
)}
|
||||
</div>
|
||||
)
|
||||
}
|
||||
@@ -0,0 +1,86 @@
|
||||
'use client'
|
||||
|
||||
import { useCallback, useEffect, useState } from 'react'
|
||||
|
||||
export interface QuaidalExternalRef {
|
||||
framework: string
|
||||
citation: string | null
|
||||
}
|
||||
|
||||
export interface QuaidalSource {
|
||||
framework: string
|
||||
section: string
|
||||
url: string | null
|
||||
commit_sha: string | null
|
||||
title_original: string | null
|
||||
license_note: string | null
|
||||
}
|
||||
|
||||
export interface QuaidalControl {
|
||||
derived_id: string
|
||||
kind: 'criterion' | 'building_block' | 'measure' | 'metric'
|
||||
canonical_name: string
|
||||
description: string
|
||||
regulation_anchor: string | null
|
||||
related_quaidal_ids: string[]
|
||||
external_refs: QuaidalExternalRef[]
|
||||
source: QuaidalSource
|
||||
plagiarism_score: number | null
|
||||
}
|
||||
|
||||
export interface QuaidalStats {
|
||||
counts_by_kind: Record<string, number>
|
||||
source_framework: string
|
||||
source_commit_sha: string | null
|
||||
license_note: string | null
|
||||
}
|
||||
|
||||
export interface QuaidalCriterionTree {
|
||||
criterion: QuaidalControl
|
||||
building_blocks: QuaidalControl[]
|
||||
measures: QuaidalControl[]
|
||||
metrics: QuaidalControl[]
|
||||
}
|
||||
|
||||
const API_BASE = '/api/sdk/v1/quaidal'
|
||||
|
||||
export function useQuaidalData() {
|
||||
const [criteria, setCriteria] = useState<QuaidalControl[]>([])
|
||||
const [stats, setStats] = useState<QuaidalStats | null>(null)
|
||||
const [loading, setLoading] = useState(true)
|
||||
const [error, setError] = useState<string | null>(null)
|
||||
|
||||
const loadAll = useCallback(async () => {
|
||||
setLoading(true)
|
||||
setError(null)
|
||||
try {
|
||||
const [criteriaRes, statsRes] = await Promise.all([
|
||||
fetch(`${API_BASE}/criteria`, { cache: 'no-store' }),
|
||||
fetch(`${API_BASE}/stats`, { cache: 'no-store' }),
|
||||
])
|
||||
if (criteriaRes.ok) {
|
||||
const data = (await criteriaRes.json()) as QuaidalControl[]
|
||||
setCriteria(Array.isArray(data) ? data : [])
|
||||
} else {
|
||||
setError(`Criteria endpoint returned ${criteriaRes.status}`)
|
||||
}
|
||||
if (statsRes.ok) {
|
||||
setStats(await statsRes.json())
|
||||
}
|
||||
} catch (err) {
|
||||
setError(String(err))
|
||||
} finally {
|
||||
setLoading(false)
|
||||
}
|
||||
}, [])
|
||||
|
||||
useEffect(() => { loadAll() }, [loadAll])
|
||||
|
||||
return { criteria, stats, loading, error, reload: loadAll }
|
||||
}
|
||||
|
||||
export async function fetchCriterionTree(sectionId: string): Promise<QuaidalCriterionTree | null> {
|
||||
const res = await fetch(`${API_BASE}/criteria/${encodeURIComponent(sectionId)}`, { cache: 'no-store' })
|
||||
if (!res.ok) return null
|
||||
return (await res.json()) as QuaidalCriterionTree
|
||||
}
|
||||
@@ -1,15 +1,23 @@
|
||||
'use client'
|
||||
|
||||
import { useState, useEffect } from 'react'
|
||||
import { useSearchParams } from 'next/navigation'
|
||||
import { useSDK } from '@/lib/sdk'
|
||||
import { useQualityData } from './_hooks/useQualityData'
|
||||
import { MetricCard, type QualityMetric } from './_components/MetricCard'
|
||||
import { TestRow } from './_components/TestRow'
|
||||
import { MetricModal } from './_components/MetricModal'
|
||||
import { TestModal } from './_components/TestModal'
|
||||
import { TrainingDataQualityTab } from './_components/TrainingDataQualityTab'
|
||||
|
||||
type TabId = 'model_quality' | 'data_quality'
|
||||
|
||||
export default function QualityPage() {
|
||||
const { state } = useSDK()
|
||||
const searchParams = useSearchParams()
|
||||
const initialTab: TabId = searchParams?.get('category') === 'data_quality' ? 'data_quality' : 'model_quality'
|
||||
const [tab, setTab] = useState<TabId>(initialTab)
|
||||
|
||||
const {
|
||||
metrics,
|
||||
tests,
|
||||
@@ -41,24 +49,54 @@ export default function QualityPage() {
|
||||
<h1 className="text-2xl font-bold text-gray-900">AI Quality Dashboard</h1>
|
||||
<p className="mt-1 text-gray-500">Ueberwachen Sie die Qualitaet und Fairness Ihrer KI-Systeme</p>
|
||||
</div>
|
||||
<div className="flex items-center gap-2">
|
||||
<button
|
||||
onClick={() => setShowTestModal(true)}
|
||||
className="flex items-center gap-2 px-4 py-2 border border-purple-300 text-purple-700 rounded-lg hover:bg-purple-50 transition-colors"
|
||||
>
|
||||
<svg className="w-5 h-5" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path strokeLinecap="round" strokeLinejoin="round" strokeWidth={2} d="M4 4v5h.582m15.356 2A8.001 8.001 0 004.582 9m0 0H9m11 11v-5h-.581m0 0a8.003 8.003 0 01-15.357-2m15.357 2H15" /></svg>
|
||||
Test hinzufuegen
|
||||
</button>
|
||||
<button
|
||||
onClick={() => { setEditMetric(undefined); setShowMetricModal(true) }}
|
||||
className="flex items-center gap-2 px-4 py-2 bg-purple-600 text-white rounded-lg hover:bg-purple-700 transition-colors"
|
||||
>
|
||||
<svg className="w-5 h-5" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path strokeLinecap="round" strokeLinejoin="round" strokeWidth={2} d="M12 6v6m0 0v6m0-6h6m-6 0H6" /></svg>
|
||||
Messung hinzufuegen
|
||||
</button>
|
||||
</div>
|
||||
{tab === 'model_quality' && (
|
||||
<div className="flex items-center gap-2">
|
||||
<button
|
||||
onClick={() => setShowTestModal(true)}
|
||||
className="flex items-center gap-2 px-4 py-2 border border-purple-300 text-purple-700 rounded-lg hover:bg-purple-50 transition-colors"
|
||||
>
|
||||
<svg className="w-5 h-5" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path strokeLinecap="round" strokeLinejoin="round" strokeWidth={2} d="M4 4v5h.582m15.356 2A8.001 8.001 0 004.582 9m0 0H9m11 11v-5h-.581m0 0a8.003 8.003 0 01-15.357-2m15.357 2H15" /></svg>
|
||||
Test hinzufuegen
|
||||
</button>
|
||||
<button
|
||||
onClick={() => { setEditMetric(undefined); setShowMetricModal(true) }}
|
||||
className="flex items-center gap-2 px-4 py-2 bg-purple-600 text-white rounded-lg hover:bg-purple-700 transition-colors"
|
||||
>
|
||||
<svg className="w-5 h-5" fill="none" stroke="currentColor" viewBox="0 0 24 24"><path strokeLinecap="round" strokeLinejoin="round" strokeWidth={2} d="M12 6v6m0 0v6m0-6h6m-6 0H6" /></svg>
|
||||
Messung hinzufuegen
|
||||
</button>
|
||||
</div>
|
||||
)}
|
||||
</div>
|
||||
|
||||
<div className="border-b border-gray-200">
|
||||
<nav className="-mb-px flex gap-6">
|
||||
<button
|
||||
onClick={() => setTab('model_quality')}
|
||||
className={`pb-3 px-1 text-sm font-medium border-b-2 transition-colors ${
|
||||
tab === 'model_quality'
|
||||
? 'border-purple-500 text-purple-600'
|
||||
: 'border-transparent text-gray-500 hover:text-gray-700'
|
||||
}`}
|
||||
>
|
||||
Modell-Qualität
|
||||
</button>
|
||||
<button
|
||||
onClick={() => setTab('data_quality')}
|
||||
className={`pb-3 px-1 text-sm font-medium border-b-2 transition-colors ${
|
||||
tab === 'data_quality'
|
||||
? 'border-purple-500 text-purple-600'
|
||||
: 'border-transparent text-gray-500 hover:text-gray-700'
|
||||
}`}
|
||||
>
|
||||
Trainingsdaten-Qualität (BSI QUAIDAL)
|
||||
</button>
|
||||
</nav>
|
||||
</div>
|
||||
|
||||
{tab === 'data_quality' && <TrainingDataQualityTab />}
|
||||
{tab === 'model_quality' && (
|
||||
<>
|
||||
<div className="grid grid-cols-1 md:grid-cols-4 gap-4">
|
||||
<div className="bg-white rounded-xl border border-gray-200 p-6">
|
||||
<div className="text-sm text-gray-500">Durchschnittlicher Score</div>
|
||||
@@ -141,6 +179,8 @@ export default function QualityPage() {
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
</>
|
||||
)}
|
||||
|
||||
{showMetricModal && (
|
||||
<MetricModal
|
||||
|
||||
@@ -0,0 +1,244 @@
|
||||
"""FastAPI routes for QUAIDAL-derived Controls (AI Trainingsdaten-Qualität).
|
||||
|
||||
Endpoints:
|
||||
- GET /v1/quaidal/stats - Counts by kind + source provenance
|
||||
- GET /v1/quaidal/controls - List all controls, optional kind= filter
|
||||
- GET /v1/quaidal/controls/{id} - Single derived control by derived_id
|
||||
- GET /v1/quaidal/criteria - The 10 QKB criteria with linked QB/MA IDs
|
||||
- GET /v1/quaidal/criteria/{id} - Single QKB with full child tree (QB → MA → QM)
|
||||
|
||||
The controls are Clean-Room derived from BSI QUAIDAL. See
|
||||
control-pipeline/scripts/derive_quaidal_mcs.py and migration 011.
|
||||
"""
|
||||
|
||||
from __future__ import annotations
|
||||
|
||||
import logging
|
||||
from typing import Optional
|
||||
|
||||
from fastapi import APIRouter, HTTPException, Query
|
||||
from pydantic import BaseModel
|
||||
from sqlalchemy import text
|
||||
|
||||
from database import SessionLocal
|
||||
|
||||
logger = logging.getLogger(__name__)
|
||||
router = APIRouter(prefix="/v1/quaidal", tags=["quaidal"])
|
||||
|
||||
|
||||
# ---------------------------------------------------------------------------
|
||||
# Response shapes
|
||||
# ---------------------------------------------------------------------------
|
||||
|
||||
|
||||
class ExternalRef(BaseModel):
|
||||
framework: str
|
||||
citation: Optional[str] = None
|
||||
|
||||
|
||||
class SourceProvenance(BaseModel):
|
||||
framework: str
|
||||
section: str
|
||||
url: Optional[str] = None
|
||||
commit_sha: Optional[str] = None
|
||||
title_original: Optional[str] = None
|
||||
license_note: Optional[str] = None
|
||||
|
||||
|
||||
class DerivedControl(BaseModel):
|
||||
derived_id: str
|
||||
kind: str
|
||||
canonical_name: str
|
||||
description: str
|
||||
regulation_anchor: Optional[str] = None
|
||||
related_quaidal_ids: list[str]
|
||||
external_refs: list[ExternalRef]
|
||||
source: SourceProvenance
|
||||
plagiarism_score: Optional[float] = None
|
||||
|
||||
|
||||
class ControlsListResponse(BaseModel):
|
||||
total: int
|
||||
controls: list[DerivedControl]
|
||||
|
||||
|
||||
class CriterionWithChildren(BaseModel):
|
||||
"""A QKB criterion with the IDs of its linked building blocks, measures and metrics."""
|
||||
criterion: DerivedControl
|
||||
building_blocks: list[DerivedControl]
|
||||
measures: list[DerivedControl]
|
||||
metrics: list[DerivedControl]
|
||||
|
||||
|
||||
class StatsResponse(BaseModel):
|
||||
counts_by_kind: dict[str, int]
|
||||
source_framework: str
|
||||
source_commit_sha: Optional[str]
|
||||
license_note: Optional[str]
|
||||
|
||||
|
||||
# ---------------------------------------------------------------------------
|
||||
# DB helpers
|
||||
# ---------------------------------------------------------------------------
|
||||
|
||||
|
||||
def _row_to_control(row) -> DerivedControl:
|
||||
return DerivedControl(
|
||||
derived_id=row.derived_id,
|
||||
kind=row.kind,
|
||||
canonical_name=row.canonical_name,
|
||||
description=row.description,
|
||||
regulation_anchor=row.regulation_anchor,
|
||||
related_quaidal_ids=row.related_quaidal_ids or [],
|
||||
external_refs=[ExternalRef(**r) for r in (row.external_refs or [])],
|
||||
source=SourceProvenance(
|
||||
framework=row.source_framework,
|
||||
section=row.source_section,
|
||||
url=row.source_url,
|
||||
commit_sha=row.source_commit_sha,
|
||||
title_original=row.source_title_original,
|
||||
license_note=row.source_license_note,
|
||||
),
|
||||
plagiarism_score=float(row.plagiarism_score_at_generation) if row.plagiarism_score_at_generation is not None else None,
|
||||
)
|
||||
|
||||
|
||||
_SELECT_COLUMNS = """
|
||||
derived_id, kind, canonical_name, description, regulation_anchor,
|
||||
related_quaidal_ids, external_refs,
|
||||
source_framework, source_section, source_url, source_commit_sha,
|
||||
source_title_original, source_license_note,
|
||||
plagiarism_score_at_generation
|
||||
"""
|
||||
|
||||
|
||||
# ---------------------------------------------------------------------------
|
||||
# Endpoints
|
||||
# ---------------------------------------------------------------------------
|
||||
|
||||
|
||||
@router.get("/stats", response_model=StatsResponse)
|
||||
def get_stats() -> StatsResponse:
|
||||
"""Counts by kind + the QUAIDAL source provenance (single source today)."""
|
||||
with SessionLocal() as db:
|
||||
counts = db.execute(text(
|
||||
"SELECT kind, COUNT(*) AS n FROM compliance.derived_controls "
|
||||
"WHERE source_framework = :fw GROUP BY kind"
|
||||
), {"fw": "BSI QUAIDAL"}).all()
|
||||
meta = db.execute(text(
|
||||
"SELECT source_commit_sha, source_license_note FROM compliance.derived_controls "
|
||||
"WHERE source_framework = :fw LIMIT 1"
|
||||
), {"fw": "BSI QUAIDAL"}).first()
|
||||
return StatsResponse(
|
||||
counts_by_kind={r.kind: r.n for r in counts},
|
||||
source_framework="BSI QUAIDAL",
|
||||
source_commit_sha=meta.source_commit_sha if meta else None,
|
||||
license_note=meta.source_license_note if meta else None,
|
||||
)
|
||||
|
||||
|
||||
@router.get("/controls", response_model=ControlsListResponse)
|
||||
def list_controls(
|
||||
kind: Optional[str] = Query(None, description="criterion | building_block | measure | metric"),
|
||||
limit: int = Query(500, ge=1, le=2000),
|
||||
offset: int = Query(0, ge=0),
|
||||
) -> ControlsListResponse:
|
||||
"""List QUAIDAL-derived controls, optionally filtered by kind."""
|
||||
where = ["source_framework = :fw"]
|
||||
params: dict = {"fw": "BSI QUAIDAL", "limit": limit, "offset": offset}
|
||||
if kind:
|
||||
where.append("kind = :kind")
|
||||
params["kind"] = kind
|
||||
|
||||
sql = (
|
||||
f"SELECT {_SELECT_COLUMNS} FROM compliance.derived_controls "
|
||||
f"WHERE {' AND '.join(where)} "
|
||||
"ORDER BY source_section LIMIT :limit OFFSET :offset"
|
||||
)
|
||||
count_sql = f"SELECT COUNT(*) FROM compliance.derived_controls WHERE {' AND '.join(where)}"
|
||||
|
||||
with SessionLocal() as db:
|
||||
rows = db.execute(text(sql), params).all()
|
||||
total = db.execute(text(count_sql), {k: v for k, v in params.items() if k not in ("limit", "offset")}).scalar() or 0
|
||||
return ControlsListResponse(total=int(total), controls=[_row_to_control(r) for r in rows])
|
||||
|
||||
|
||||
@router.get("/controls/{derived_id}", response_model=DerivedControl)
|
||||
def get_control(derived_id: str) -> DerivedControl:
|
||||
with SessionLocal() as db:
|
||||
row = db.execute(text(
|
||||
f"SELECT {_SELECT_COLUMNS} FROM compliance.derived_controls WHERE derived_id = :id"
|
||||
), {"id": derived_id}).first()
|
||||
if not row:
|
||||
raise HTTPException(status_code=404, detail=f"Control {derived_id} not found")
|
||||
return _row_to_control(row)
|
||||
|
||||
|
||||
@router.get("/criteria", response_model=list[DerivedControl])
|
||||
def list_criteria() -> list[DerivedControl]:
|
||||
"""Returns the 10 QKB criteria. Use /criteria/{section_id} for the full child tree."""
|
||||
with SessionLocal() as db:
|
||||
rows = db.execute(text(
|
||||
f"SELECT {_SELECT_COLUMNS} FROM compliance.derived_controls "
|
||||
"WHERE source_framework = :fw AND kind = 'criterion' ORDER BY source_section"
|
||||
), {"fw": "BSI QUAIDAL"}).all()
|
||||
return [_row_to_control(r) for r in rows]
|
||||
|
||||
|
||||
@router.get("/criteria/{section_id}", response_model=CriterionWithChildren)
|
||||
def get_criterion_tree(section_id: str) -> CriterionWithChildren:
|
||||
"""Single QKB with the building blocks it references and the measures/metrics those reference.
|
||||
|
||||
`section_id` is the canonical QUAIDAL ID, e.g. `QKB-01`.
|
||||
"""
|
||||
section_id_upper = section_id.upper()
|
||||
with SessionLocal() as db:
|
||||
criterion_row = db.execute(text(
|
||||
f"SELECT {_SELECT_COLUMNS} FROM compliance.derived_controls "
|
||||
"WHERE source_framework = :fw AND source_section = :sid AND kind = 'criterion'"
|
||||
), {"fw": "BSI QUAIDAL", "sid": section_id_upper}).first()
|
||||
if not criterion_row:
|
||||
raise HTTPException(status_code=404, detail=f"Criterion {section_id_upper} not found")
|
||||
|
||||
building_block_ids = criterion_row.related_quaidal_ids or []
|
||||
building_blocks = []
|
||||
if building_block_ids:
|
||||
qb_rows = db.execute(text(
|
||||
f"SELECT {_SELECT_COLUMNS} FROM compliance.derived_controls "
|
||||
"WHERE source_framework = :fw AND kind = 'building_block' "
|
||||
"AND source_section = ANY(:ids) ORDER BY source_section"
|
||||
), {"fw": "BSI QUAIDAL", "ids": building_block_ids}).all()
|
||||
building_blocks = [_row_to_control(r) for r in qb_rows]
|
||||
|
||||
# Collect measure IDs from each building block, then fetch them
|
||||
measure_ids: list[str] = []
|
||||
for qb in building_blocks:
|
||||
measure_ids.extend(mid for mid in qb.related_quaidal_ids if mid.startswith("MA-"))
|
||||
measures = []
|
||||
if measure_ids:
|
||||
ma_rows = db.execute(text(
|
||||
f"SELECT {_SELECT_COLUMNS} FROM compliance.derived_controls "
|
||||
"WHERE source_framework = :fw AND kind = 'measure' "
|
||||
"AND source_section = ANY(:ids) ORDER BY source_section"
|
||||
), {"fw": "BSI QUAIDAL", "ids": list(set(measure_ids))}).all()
|
||||
measures = [_row_to_control(r) for r in ma_rows]
|
||||
|
||||
# Collect metric IDs from each measure
|
||||
metric_ids: list[str] = []
|
||||
for ma in measures:
|
||||
metric_ids.extend(mid for mid in ma.related_quaidal_ids if mid.startswith("QM-"))
|
||||
metrics = []
|
||||
if metric_ids:
|
||||
qm_rows = db.execute(text(
|
||||
f"SELECT {_SELECT_COLUMNS} FROM compliance.derived_controls "
|
||||
"WHERE source_framework = :fw AND kind = 'metric' "
|
||||
"AND source_section = ANY(:ids) ORDER BY source_section"
|
||||
), {"fw": "BSI QUAIDAL", "ids": list(set(metric_ids))}).all()
|
||||
metrics = [_row_to_control(r) for r in qm_rows]
|
||||
|
||||
return CriterionWithChildren(
|
||||
criterion=_row_to_control(criterion_row),
|
||||
building_blocks=building_blocks,
|
||||
measures=measures,
|
||||
metrics=metrics,
|
||||
)
|
||||
@@ -55,6 +55,7 @@ from compliance.api.saving_scan_routes import router as saving_scan_router
|
||||
from compliance.api.agent_migration_routes import router as agent_migration_router
|
||||
from compliance.api.vendor_assessment_routes import router as vendor_assessment_router
|
||||
from compliance.api.cra_routes import router as cra_router
|
||||
from compliance.api.quaidal_routes import router as quaidal_router
|
||||
|
||||
# Middleware
|
||||
from middleware import (
|
||||
@@ -168,6 +169,7 @@ app.include_router(vendor_assessment_router, prefix="/api")
|
||||
|
||||
# CRA (Cyber Resilience Act) Compliance
|
||||
app.include_router(cra_router, prefix="/api")
|
||||
app.include_router(quaidal_router, prefix="/api")
|
||||
|
||||
|
||||
if __name__ == "__main__":
|
||||
|
||||
Reference in New Issue
Block a user