Benjamin Admin
27384aea09
CI / detect-changes (push) Successful in 11s
CI / branch-name (push) Has been skipped
CI / secret-scan (push) Has been skipped
CI / dep-audit (push) Has been skipped
CI / sbom-scan (push) Has been skipped
CI / validate-canonical-controls (push) Successful in 15s
CI / python-lint (push) Has been skipped
CI / nodejs-lint (push) Has been skipped
CI / guardrail-integrity (push) Has been skipped
CI / loc-budget (push) Failing after 16s
CI / go-lint (push) Has been skipped
CI / nodejs-build (push) Successful in 3m1s
CI / test-go (push) Has been skipped
CI / iace-gt-coverage (push) Has been skipped
CI / test-python-backend (push) Successful in 39s
CI / test-python-document-crawler (push) Has been skipped
CI / test-python-dsms-gateway (push) Has been skipped
Migration 122: compliance_cra_documents with versioning + approval workflow
- doc_type whitelist: doc_eu_conformity, doc_technical, doc_cvd_policy,
doc_update_policy, doc_sbom_report
- Status state machine: draft → reviewed → approved (+ superseded)
- Snapshot generation_context for audit trail
New module cra_doc_templates.py — pure-function generators (no DB access):
- doc_eu_conformity: EU DoC structured per CRA Annex VII (all 7 mandatory fields)
- doc_technical: Technische Dokumentation per CRA Annex V
- doc_cvd_policy: ISO/IEC 29147-compliant CVD policy with SLA table
- doc_update_policy: Patch/Update policy with Lifecycle + CSAF reference
- doc_sbom_report: Latest SBOM summary with top-10 components
Returns (title, markdown_content, requirements_coverage) — coverage tracks
how many mandatory fields are filled vs placeholders.
Backend endpoints:
- POST /documents/generate — generates doc, supersedes previous version,
increments version number atomically
- GET /documents — lists all 5 doc types (also "not_generated" stubs)
- GET /documents/{id} — full content_md
- POST /documents/{id}/approve — set status + signed_by + signed_at
Frontend:
- /documents page: 5 doc-type cards with Generate/Re-Generate buttons,
inline Markdown preview with .md download, 2-step approval flow
(reviewed → approved with signature)
- Optional params form: manufacturer, notified_body, security_contact
- Dashboard: +1 button (Dokumente, 7 buttons total)
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
40 lines
1.8 KiB
SQL
40 lines
1.8 KiB
SQL
-- Migration 122: CRA Generated Documents
|
|
-- Tracks all auto-generated CRA documents (DoC, Technical Doc, CVD Policy, etc.)
|
|
-- with versioning so customers can audit-trail changes over time.
|
|
|
|
CREATE TABLE IF NOT EXISTS compliance_cra_documents (
|
|
id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
|
|
cra_project_id UUID NOT NULL,
|
|
tenant_id VARCHAR(255) NOT NULL,
|
|
|
|
-- Document classification
|
|
doc_type VARCHAR(50) NOT NULL,
|
|
-- doc_eu_conformity -- EU DoC (Annex VII)
|
|
-- doc_technical -- Technische Doku (Annex V)
|
|
-- doc_cvd_policy -- Coordinated Vulnerability Disclosure Policy
|
|
-- doc_update_policy -- Update / Patch Policy
|
|
-- doc_sbom_report -- SBOM-Zusammenfassung
|
|
|
|
-- Content (Markdown, can be converted to PDF later)
|
|
title VARCHAR(500) NOT NULL,
|
|
content_md TEXT NOT NULL,
|
|
version INTEGER NOT NULL DEFAULT 1,
|
|
|
|
-- Compliance metadata
|
|
requirements_coverage JSONB DEFAULT '{}'::jsonb, -- e.g. {covered: ["CRA-AI-23", ...], total: 40}
|
|
generation_context JSONB DEFAULT '{}'::jsonb, -- snapshot of project state at generation
|
|
|
|
-- Signature/Approval (Phase 5 minimum: just status)
|
|
status VARCHAR(20) NOT NULL DEFAULT 'draft', -- draft | reviewed | approved | superseded
|
|
signed_by VARCHAR(255),
|
|
signed_at TIMESTAMPTZ,
|
|
|
|
generated_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
|
|
superseded_at TIMESTAMPTZ
|
|
);
|
|
|
|
CREATE INDEX IF NOT EXISTS idx_cra_docs_project ON compliance_cra_documents(cra_project_id);
|
|
CREATE INDEX IF NOT EXISTS idx_cra_docs_tenant ON compliance_cra_documents(tenant_id);
|
|
CREATE INDEX IF NOT EXISTS idx_cra_docs_type ON compliance_cra_documents(cra_project_id, doc_type, generated_at DESC);
|
|
CREATE INDEX IF NOT EXISTS idx_cra_docs_status ON compliance_cra_documents(cra_project_id, status);
|