Benjamin Admin 43ae33975d feat(cra): NIST/OWASP security golden-set crosswalk + full measure texts in CRA tab ...

Crosswalk (cra_security_crosswalk.py): deterministic, hand-curated CRA Annex I ->
NIST 800-53 Rev5 + OWASP Top 10:2021 mapping, the authoritative Security Golden
Set (no RAG; semantic breadth comes later via the shared Controls-API). Mapper
attaches NIST/OWASP refs per finding; golden-set completeness pinned by test
(every requirement has >=1 NIST ref). CRA tab now shows the NIST/OWASP best-
practice refs per finding and the full curated measure texts + norm references
(from measures_library_cra.go).

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

2026-06-13 21:24:53 +02:00

..

doc_checks

fix(agb): Gewährleistung erkennt 'bei Mängeln' / '§ N Mängel'-Heading

2026-06-11 14:31:41 +02:00

founding_wizard

feat(founding-wizard): Per-Person IP-Assignment + Prefill + E2E-Tests

2026-05-21 18:49:10 +02:00

mail_render_v2

feat: Mail-Restrukturierung + B22 Cross-Domain-Doc-Detector

2026-06-08 11:35:55 +02:00

specialist_agents

fix(snapshot): Cookie-Dedup + schneller Impressum-Tab + Tabellen-Zahl

2026-06-11 19:54:15 +02:00

__init__.py

…

_banner_serializers.py

…

_company_profile_sql.py

fix(company-profile): replace :param::jsonb with CAST(:param AS JSONB)

2026-06-07 00:42:16 +02:00

agent_pdf_export.py

…

agent_tools.py

…

ai_act_transparency_check.py

feat(audit): V2 mail render + 5 new findings (B4/B5/B6/B7/B8) + LLM-Plausibility-Phase

2026-06-06 21:19:49 +02:00

ai_compliance_assistant.py

…

ai_legal_basis_check.py

feat(b15): AI-Act Rechtsgrundlage-Check (GT AI-ACT-RISK-001)

2026-06-07 00:15:08 +02:00

ai_retention_granularity_check.py

feat: Browser-Matrix C2 + B11 AI-Retention + Impressum-Specialist-Agent + B1 Mobile Playwright

2026-06-06 22:20:25 +02:00

anchor_finder.py

…

assertion_engine.py

…

audit_pdf_generator.py

…

audit_quality_checks.py

feat(audit): Cookie-Compliance-Audit (3-Quellen-Vergleich) + Vendor-Dedup + Block-Parser

2026-05-21 23:36:45 +02:00

audit_report.py

feat(audit-report): Exec-Summary, Top-N je Modul, Statistik, Gesamtanalyse

2026-06-13 15:57:07 +02:00

audit_session_service.py

…

audit_signoff_service.py

…

audit_walk_zip_builder.py

feat(b19): Cookie-Coherence — 3-Layer-Lookup + Vendor-Karten + CSV

2026-06-07 23:48:04 +02:00

auto_risk_updater.py

…

banner_ab_service.py

…

banner_admin_service.py

…

banner_analytics_service.py

…

banner_consent_service.py

…

banner_consistency_checks.py

fix(audit): VW-404-Recovery + P52 LLM-Merge + P51 Banner-UX-Checks

2026-05-21 17:27:55 +02:00

banner_cookie_cross_check.py

…

banner_dsr_service.py

…

banner_screenshot_block.py

feat(audit): Phase 1 Quick-Wins (P81 + P85 + P70 + P83) + TCF DELETE/INSERT-Fix

2026-05-22 08:24:46 +02:00

batch_dedup_runner.py

…

benchmark_extractor.py

feat(audit): P107 Branchen-Benchmark-Cockpit fuer Big-4-Demos

2026-05-22 09:23:37 +02:00

benchmark_k_anonymity.py

feat(compliance-check): exec-summary + voll-audit + TDM-respect + cookie-KB-extended + saving-scan-funnel

2026-05-18 23:48:34 +02:00

browser_cross_finding.py

feat(banner): Consent-Historie/Widerruf live erkennen (Borlabs-Stil, #62)

2026-06-13 16:38:38 +02:00

business_profiler.py

feat(profile+report): P17 — 4 Polish-Items

2026-05-19 12:22:05 +02:00

canonical_control_service.py

…

chatbot_cookie_classification_check.py

feat: B12 Chatbot-Cookie-Klassifikation (#19) + Cookie-Matrix scan + safetykon test

2026-06-06 23:25:20 +02:00

chatbot_policy_discovery.py

feat: Backlog 1-5 — soft-hints, chatbot-discovery, API-payload, LLM-Agent

2026-06-07 18:41:54 +02:00

check_replay.py

feat(audit): P106 MC-Audit-Type + P83 BUILD_SHA in Dockerfiles + P80 v2 full

2026-05-22 08:57:02 +02:00

check_snapshot.py

feat(backend): On-demand Browser-Verhaltens-Matrix + Snapshot-Persistenz (Phase 2)

2026-06-12 23:03:28 +02:00

citation_backfill.py

…

cmp_fingerprint_check.py

feat(audit): V2 mail render + 5 new findings (B4/B5/B6/B7/B8) + LLM-Plausibility-Phase

2026-06-06 21:19:49 +02:00

company_profile_service.py

fix(company-profile): deserialize JSONB columns in row_to_response

2026-06-07 08:26:14 +02:00

compliance_agent.py

…

compliance_audit_log.py

feat(banner): P19 + P20 — Per-Category-Click-Test + Frontend-Drilldown

2026-05-19 14:31:13 +02:00

compliance_pdf_generator.py

feat(licenses): Stufe 2 — auto-attribution footer in compliance PDF

2026-05-21 21:30:02 +02:00

compliance_user_agent.py

feat(compliance-check): exec-summary + voll-audit + TDM-respect + cookie-KB-extended + saving-scan-funnel

2026-05-18 23:48:34 +02:00

consent_diff_for_user.py

feat(audit): Phase 2+3 — P54 + P68 + P69 + P6/P53/P55 + P31 + P80v2

2026-05-22 08:38:08 +02:00

consent_reachability_check.py

refactor(agent-check): split routes file (2692→347 LOC) + wire B1/B3/A1 [guardrail-change]

2026-06-06 14:47:25 +02:00

control_composer.py

…

control_dedup.py

…

control_export_service.py

…

control_generator.py

…

control_status_machine.py

…

cookie_behavior_validator.py

feat(consent+report): P56-P67 Mercedes-Audit-Cycle (Anti-Audit, Phase G Vendors, Cookie-Behavior-Validator + 5 Mail-Polish-Items) [migration-approved]

2026-05-21 06:28:25 +02:00

cookie_coherence_check.py

fix(b19): UNK-Noise drastisch reduzieren

2026-06-08 08:20:39 +02:00

cookie_compliance_audit.py

feat(audit): Cookie-Compliance-Audit (3-Quellen-Vergleich) + Vendor-Dedup + Block-Parser

2026-05-21 23:36:45 +02:00

cookie_csv_exporter.py

feat(b19): Cookie-Coherence — 3-Layer-Lookup + Vendor-Karten + CSV

2026-06-07 23:48:04 +02:00

cookie_declaration_diff.py

feat(cookie): Deklaration-vs-Bibliothek-Diff-Sicht + Funnel-KPI

2026-06-11 21:00:50 +02:00

cookie_function_classifier.py

feat(compliance-check): exec-summary + voll-audit + TDM-respect + cookie-KB-extended + saving-scan-funnel

2026-05-18 23:48:34 +02:00

cookie_knowledge_db.py

…

cookie_knowledge_extended.py

feat(compliance-check): exec-summary + voll-audit + TDM-respect + cookie-KB-extended + saving-scan-funnel

2026-05-18 23:48:34 +02:00

cookie_knowledge.py

feat(compliance-check): exec-summary + voll-audit + TDM-respect + cookie-KB-extended + saving-scan-funnel

2026-05-18 23:48:34 +02:00

cookie_library_check.py

fix(cookie): Präfix-Matcher über-matcht kurze generische Basen nicht mehr

2026-06-11 21:26:47 +02:00

cookie_library_lookup.py

fix(b19): UNK-Noise drastisch reduzieren

2026-06-08 08:20:39 +02:00

cookie_library_mismatch.py

feat(audit): VW-Cookie-Bug-Fix + P101/P102 Cookie-Library-Mismatch-Findings

2026-05-21 15:47:11 +02:00

cookie_link_validator.py

…

cookie_network_tracer.py

feat(audit): P103+P104+P105 Defeat-Device-Heuristik fuer Cookies

2026-05-22 00:24:07 +02:00

cookie_observation_logger.py

feat(b19): Cookie-Coherence — 3-Layer-Lookup + Vendor-Karten + CSV

2026-06-07 23:48:04 +02:00

cookie_policy_architecture.py

feat(compliance-check): P10 — Cookie-Policy-Architecture-Detection

2026-05-19 01:01:48 +02:00

cookie_screenshot_ocr_engines.py

refactor: split cookie_screenshot_ocr.py (642 → 290 + 353 LOC)

2026-06-06 23:35:33 +02:00

cookie_screenshot_ocr.py

refactor: split cookie_screenshot_ocr.py (642 → 290 + 353 LOC)

2026-06-06 23:35:33 +02:00

cookie_storage_inventory.py

feat(cookie+routing): Storage-Typ-Filter + legal_notice capture-only

2026-06-11 20:45:18 +02:00

cookie_table_generator.py

…

cookie_to_vendor_fallback.py

fix(audit): VW-Cookie-Tabelle — Library-Fallback + Pattern-Extract verstaerkt

2026-05-21 18:32:07 +02:00

cookie_value_entropy.py

feat(audit): P103+P104+P105 Defeat-Device-Heuristik fuer Cookies

2026-05-22 00:24:07 +02:00

cookies_table_parser.py

fix(cookies): parse_flat_cookie_text whitespace-tolerant fuer HTTP-fetch

2026-05-22 19:17:21 +02:00

cra_finding_mapper.py

feat(cra): NIST/OWASP security golden-set crosswalk + full measure texts in CRA tab

2026-06-13 21:24:53 +02:00

cra_security_crosswalk.py

feat(cra): NIST/OWASP security golden-set crosswalk + full measure texts in CRA tab

2026-06-13 21:24:53 +02:00

cross_doc_dpo_check.py

feat(audit): V2 mail render + 5 new findings (B4/B5/B6/B7/B8) + LLM-Plausibility-Phase

2026-06-06 21:19:49 +02:00

cross_doc_reconcile.py

feat(reconcile): B — Cross-Doc-Reconciliation (Pflicht in anderem Doc erfüllt)

2026-06-11 15:42:16 +02:00

cross_domain_doc_check.py

fix: 4 Bugs gemeinsam — B22 PDF + B17 Walk-Fallback + company_name + Plausibility-Fallback

2026-06-08 16:39:33 +02:00

decomposition_pass.py

…

doc_anchor_locator.py

…

doc_input_warnings.py

feat(audit): Text-Paste-Mode pro Row — Crawler optional umgehen

2026-05-21 18:58:32 +02:00

doc_staleness_check.py

feat(audit): V2 mail render + 5 new findings (B4/B5/B6/B7/B8) + LLM-Plausibility-Phase

2026-06-06 21:19:49 +02:00

doc_text_signals.py

feat(audit): P36 Social-Media-Einbindungs-Check

2026-05-21 16:45:12 +02:00

doc_type_classifier.py

feat(audit): Text-Paste-Mode pro Row — Crawler optional umgehen

2026-05-21 18:58:32 +02:00

dse_matcher.py

…

dse_parser.py

…

dse_service_extractor.py

…

dsfa_service.py

…

dsfa_workflow_service.py

…

dsi_document_checker.py

…

dsms_client.py

…

dsr_art11_service.py

…

dsr_export_service.py

…

dsr_service.py

…

dsr_workflow_service.py

…

email_delivery_service.py

…

email_template_service.py

…

email_template_version_service.py

…

evidence_service.py

…

evidence_zip_builder.py

refactor(agent-check): split routes file (2692→347 LOC) + wire B1/B3/A1 [guardrail-change]

2026-06-06 14:47:25 +02:00

export_generator.py

…

finding_action_recipes.py

…

finding_confidence.py

feat(audit): P82 GF-1-Pager + P87 Konfidenz-Score pro Finding

2026-05-21 16:20:19 +02:00

finding_plausibility_check.py

fix: 4 Bugs gemeinsam — B22 PDF + B17 Walk-Fallback + company_name + Plausibility-Fallback

2026-06-08 16:39:33 +02:00

framework_decomposition.py

…

gf_one_pager.py

feat(audit): A Audit-Transparenz + B Tabellen-Parse + D HTML-Tables aus DOM

2026-05-21 20:21:28 +02:00

impressum_multi_entity_check.py

fix(b9)+test: real-world false-positives + multi-site GT-bench

2026-06-07 17:51:17 +02:00

incident_service.py

…

incident_workflow_service.py

…

industry_benchmark.py

feat(audit): P86 Branchen-Benchmark + P35/P77/P78 Textsignale

2026-05-21 16:43:15 +02:00

industry_library.py

feat(audit): Phase 2+3 — P54 + P68 + P69 + P6/P53/P55 + P31 + P80v2

2026-05-22 08:38:08 +02:00

intake_extractor.py

…

isms_assessment_service.py

…

isms_findings_service.py

…

isms_governance_service.py

…

isms_readiness_service.py

…

jc_avv_decision.py

feat(audit): P71 JC-vs-AVV Entscheidungsbaum

2026-05-21 17:31:37 +02:00

legacy_url_cdx.py

feat(crawl): Vollstaendigkeit — Shadow-DOM/versteckte Links + Interaktions-Fixpunkt + Wayback-CDX-Orphans

2026-06-09 12:33:34 +02:00

legacy_url_discovery.py

feat(crawl): Vollstaendigkeit — Shadow-DOM/versteckte Links + Interaktions-Fixpunkt + Wayback-CDX-Orphans

2026-06-09 12:33:34 +02:00

legal_basis_validator.py

…

legal_document_consent_service.py

…

legal_document_service.py

feat(document-library): zentrale Doc-Übersicht + Workflow-Auto-Select (Phase 3)

2026-06-08 09:32:25 +02:00

license_gate.py

…

llm_cascade.py

fix(scan): TCF SQL column + cascade diagnose-logs

2026-05-22 19:00:27 +02:00

llm_provider.py

…

mail_pdf_export.py

feat(audit): P88 PDF-Export via WeasyPrint

2026-05-21 17:06:48 +02:00

mandatory_content_checker.py

…

mc_audit_type.py

fix(mc-audit): TOM/AVV case-mismatch + Ausnahmen-Pattern Wortabstand

2026-05-22 11:51:03 +02:00

mc_embedding_matcher.py

…

mc_scorecard.py

feat(audit): P106 MC-Audit-Type + P83 BUILD_SHA in Dockerfiles + P80 v2 full

2026-05-22 08:57:02 +02:00

mc_solution_generator.py

perf(audit): vendor_llm_extractor + mc_solution_generator nutzen P31 LLM-Cascade

2026-05-22 09:40:11 +02:00

migration_to_banner.py

…

migration_to_document.py

…

multi_version_dse.py

feat: Plan B + A + C — DSE-Versions-MCs + Legacy-URL + Multi-Version

2026-06-08 10:04:14 +02:00

normative_patterns.py

…

notfallplan_service.py

…

notfallplan_workflow_service.py

…

obligation_extractor.py

…

pattern_matcher.py

…

pdf_extractor.py

…

pipeline_adapter.py

…

profile_extractor.py

feat(agent): Impressum-Tab auf Haupt-Engine + Profil/§36-Fixes

2026-06-10 23:44:01 +02:00

rag_client.py

…

rag_document_checker.py

fix(agents): Impressum+Cookie delegieren MC-Laden ans Main Tool — Scope-Filter + Maßnahmen

2026-06-09 11:30:16 +02:00

rag_provenance.py

feat(audit): Phase 1 Quick-Wins (P81 + P85 + P70 + P83) + TCF DELETE/INSERT-Fix

2026-05-22 08:24:46 +02:00

recommendation_service.py

feat(template-rules): backend foundation for profile-based document recommendations

2026-06-06 23:13:50 +02:00

regulation_requirement_service.py

…

regulation_scraper.py

…

relevance_filter.py

…

report_generator.py

…

reranker.py

…

retention_comparator.py

feat(audit): V2 mail render + 5 new findings (B4/B5/B6/B7/B8) + LLM-Plausibility-Phase

2026-06-06 21:19:49 +02:00

retention_conflict_check.py

fix(b9+b14): Real-World-Smoke-Befunde aus Elli-Audit (2026-06-07)

2026-06-07 08:50:46 +02:00

reverse_audit.py

feat(audit): Phase 2+3 — P54 + P68 + P69 + P6/P53/P55 + P31 + P80v2

2026-05-22 08:38:08 +02:00

run_diff.py

feat(audit): P75 Banner-vs-CMP + P84 Diff-Mode + P74/P96/P97 Doc-Types

2026-05-21 16:38:25 +02:00

screening_service.py

…

section_splitter.py

…

seeder.py

…

service_detector.py

…

service_registry.py

…

similarity_detector.py

…

smtp_sender.py

refactor(agent-check): split routes file (2692→347 LOC) + wire B1/B3/A1 [guardrail-change]

2026-06-06 14:47:25 +02:00

source_policy_service.py

…

tcf_encoder_service.py

…

tcf_vendor_authority.py

fix(scan): TCF SQL column + cascade diagnose-logs

2026-05-22 19:00:27 +02:00

tdm_reservation_check.py

feat(compliance-check): exec-summary + voll-audit + TDM-respect + cookie-KB-extended + saving-scan-funnel

2026-05-18 23:48:34 +02:00

template_rule_service.py

feat(template-rules): backend foundation for profile-based document recommendations

2026-06-06 23:13:50 +02:00

tom_service.py

…

training_link_service.py

…

transfer_mechanism_check.py

feat: Browser-Matrix Stufe 1.a + 2 weitere GT-Findings + Plausibility-LLM-Härtung

2026-06-06 21:42:27 +02:00

unified_findings_collector.py

feat(compliance-check): exec-summary + voll-audit + TDM-respect + cookie-KB-extended + saving-scan-funnel

2026-05-18 23:48:34 +02:00

unified_findings_store.py

feat(compliance-check): exec-summary + voll-audit + TDM-respect + cookie-KB-extended + saving-scan-funnel

2026-05-18 23:48:34 +02:00

url_slug_drift_check.py

feat(b16): Footer-Label-vs-URL-Slug-Drift-Check (GT URL-STRUCTURE-001)

2026-06-07 00:23:25 +02:00

v1_enrichment.py

…

vendor_assessment_cross_check.py

…

vendor_assessment_report.py

…

vendor_banner_sync.py

…

vendor_classifier.py

…

vendor_compliance_extra_service.py

…

vendor_compliance_service.py

…

vendor_compliance_sub_service.py

…

vendor_consistency_check.py

feat(audit): V2 mail render + 5 new findings (B4/B5/B6/B7/B8) + LLM-Plausibility-Phase

2026-06-06 21:19:49 +02:00

vendor_cost_estimator.py

…

vendor_extractor.py

feat(consent+report): P56-P67 Mercedes-Audit-Cycle (Anti-Audit, Phase G Vendors, Cookie-Behavior-Validator + 5 Mail-Polish-Items) [migration-approved]

2026-05-21 06:28:25 +02:00

vendor_llm_extractor.py

perf(llm): reduce vendor-extract excerpt 50k → 20k chars

2026-05-22 21:55:23 +02:00

vendor_normalizer.py

feat(audit): Cookie-Compliance-Audit (3-Quellen-Vergleich) + Vendor-Dedup + Block-Parser

2026-05-21 23:36:45 +02:00

vendor_package_cookies.py

feat(audit-mail): P58/P59c/P60b/P61/P62 — Mercedes-Cycle Phase 1 abgeschlossen

2026-05-21 08:01:27 +02:00

vendor_redundancy.py

…

vendor_vvt_mapper.py

…

vvt_service.py

…

website_compliance_checks.py

…

website_scanner.py

…

widerrufsbelehrung_reachability_check.py

feat: Backlog 1-5 — soft-hints, chatbot-discovery, API-payload, LLM-Agent

2026-06-07 18:41:54 +02:00