Benjamin Admin
577ceae4e6
Adds GET /projects/:id/risk-matrix — a confidence-aware risk view computed on read from each hazard's category/scenario/lifecycle using the SAME model as the GT benchmark (no persistence, so it never goes stale against the model; the hand-defaulted iace_hazards risk columns stay untouched). - risk_matrix.go: EstimateHazardRisk (single source of truth for S/F/W/P + range + level + confidence) and BuildRiskMatrix (per-hazard list + a 5×5 Severity×Probability aggregation grid with dominant level per cell). - Frontend: RiskMatrix grid in the Risikobewertung tab (muted colours per the confidence-aware tonality), level counts + tool-confidence summary, fed by useRiskMatrix. Shows risk for EVERY project, not only GT ones. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
50 lines
1.7 KiB
Go
50 lines
1.7 KiB
Go
package handlers
|
||
|
||
import (
|
||
"net/http"
|
||
|
||
"github.com/breakpilot/ai-compliance-sdk/internal/iace"
|
||
"github.com/gin-gonic/gin"
|
||
"github.com/google/uuid"
|
||
)
|
||
|
||
// GetRiskSuggestion returns BreakPilot's justified dual-model risk suggestion
|
||
// for a hazard: the EN-62061-style F/W/P/S model and the Fine-Kinney P/E/C
|
||
// model, each with suggested values, justifications and the visible formula.
|
||
// Read-only and computed from public-data anchors — the professional adjusts
|
||
// the values; no norm table is stored or reproduced.
|
||
//
|
||
// GET /projects/:id/hazards/:hid/risk-suggestion
|
||
func (h *IACEHandler) GetRiskSuggestion(c *gin.Context) {
|
||
hid, err := uuid.Parse(c.Param("hid"))
|
||
if err != nil {
|
||
c.JSON(http.StatusBadRequest, gin.H{"error": "invalid hazard ID"})
|
||
return
|
||
}
|
||
hz, err := h.store.GetHazard(c.Request.Context(), hid)
|
||
if err != nil || hz == nil {
|
||
c.JSON(http.StatusNotFound, gin.H{"error": "hazard not found"})
|
||
return
|
||
}
|
||
c.JSON(http.StatusOK, iace.BuildRiskSuggestion(hz))
|
||
}
|
||
|
||
// GetRiskMatrix handles GET /projects/:id/risk-matrix.
|
||
// Project-wide confidence-aware risk view computed on read from each hazard (no
|
||
// persistence): per-hazard risk list + a Severity×Probability aggregation grid.
|
||
// Uses the same model as the GT benchmark, so matrix numbers match the
|
||
// comparison. Lets a customer see risk for EVERY project, not only GT ones.
|
||
func (h *IACEHandler) GetRiskMatrix(c *gin.Context) {
|
||
projectID, err := uuid.Parse(c.Param("id"))
|
||
if err != nil {
|
||
c.JSON(http.StatusBadRequest, gin.H{"error": "invalid project ID"})
|
||
return
|
||
}
|
||
hazards, err := h.store.ListHazards(c.Request.Context(), projectID)
|
||
if err != nil {
|
||
c.JSON(http.StatusInternalServerError, gin.H{"error": err.Error()})
|
||
return
|
||
}
|
||
c.JSON(http.StatusOK, iace.BuildRiskMatrix(hazards))
|
||
}
|