Benjamin Admin 623d80b6c8 fix(ai-sdk): national-law subsidiarity in authority rerank (DSGVO > BDSG for general questions) ...

The authority reranker (wired in legal_rag_client.go:168) had no national-subsidiarity
dimension, so a general BDSG paragraph could outrank the primary DSGVO article. Surfaced by
the KB-2026.1 BDSG pilot (dp_05/08/11 + cr_07).

- authorityScore: DE binding_law in an EU-primary domain WITHOUT a co-primary topic match
  -> soft demote (subsidiarityPen 0.18), not exclusion. National special rules stay
  co-primary via the topic ontology (DSB Art.37+§38, special categories Art.9+§22, ...).
- queryDomain: fall back to a regulation-name mention (DSGVO/BDSG/CRA) so a question phrased
  around the act is domain-scoped even without a topical keyword (fixes cr_07: BDSG Teil-3 §64).
- data_protection keyword stem 'auftragsverarbeit' (catches Auftragsverarbeitungsvertrag).

Pure ranking logic, no data manipulation; soft demotes keep national rules visible.
Build result (DSGVO+BDSG): degraded=0, must_not=0. go build/vet/test ./... green; 6 new table tests.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

2026-06-26 21:28:12 +02:00

..

ai_act_module_test.go

Initial commit: breakpilot-compliance - Compliance SDK Platform

2026-02-11 23:47:28 +01:00

ai_act_module.go

refactor(go/ucca): split policy_engine, legal_rag, ai_act, nis2, financial_policy, dsgvo_module

2026-04-19 09:48:41 +02:00

ai_act_obligations.go

refactor(go/ucca): split policy_engine, legal_rag, ai_act, nis2, financial_policy, dsgvo_module

2026-04-19 09:48:41 +02:00

ai_act_yaml.go

refactor(go/ucca): split policy_engine, legal_rag, ai_act, nis2, financial_policy, dsgvo_module

2026-04-19 09:48:41 +02:00

authority_rerank_test.go

fix(ai-sdk): national-law subsidiarity in authority rerank (DSGVO > BDSG for general questions)

2026-06-26 21:28:12 +02:00

authority_rerank.go

fix(ai-sdk): national-law subsidiarity in authority rerank (DSGVO > BDSG for general questions)

2026-06-26 21:28:12 +02:00

authority_test.go

feat(ai-sdk): control-intent result diversity + standard-name classifier override

2026-06-25 01:54:36 +02:00

authority.go

fix(ai-sdk): national-law subsidiarity in authority rerank (DSGVO > BDSG for general questions)

2026-06-26 21:28:12 +02:00

betrvg_test.go

feat: Unified Facts Bridge — Company Profile fuer alle Bewertungsmodule

2026-04-23 16:20:57 +02:00

canonical_control_loader_test.go

feat(canonical-controls): Canonical Control Library — rechtssichere Security Controls

2026-03-12 19:55:06 +01:00

canonical_control_loader.go

feat(canonical-controls): Canonical Control Library — rechtssichere Security Controls

2026-03-12 19:55:06 +01:00

company_profile_test.go

feat: Unified Facts Bridge — Company Profile fuer alle Bewertungsmodule

2026-04-23 16:20:57 +02:00

company_profile.go

feat: Unified Facts Bridge — Company Profile fuer alle Bewertungsmodule

2026-04-23 16:20:57 +02:00

compliance_graph_loader.go

feat(compliance): GET /sdk/v1/compliance/obligation-status (file-backed graph)

2026-06-25 19:29:37 +02:00

compliance_status_test.go

feat(ucca): adopt obligation_id + harden join to semantic (step 3 core)

2026-06-25 12:18:34 +02:00

compliance_status.go

feat(ucca): Advisor obligation-status Durchstich (step 3 complete)

2026-06-25 11:15:57 +02:00

control_mapping_test.go

refactor(ucca): control-mapping model per review feedback

2026-06-25 09:50:37 +02:00

control_mapping.go

feat(ucca): persist 3 CRA->NIST mappings (primary_implementation) + evidence

2026-06-25 18:52:35 +02:00

control_role_test.go

feat(ai-sdk): control-intent result diversity + standard-name classifier override

2026-06-25 01:54:36 +02:00

control_role.go

feat(ai-sdk): control-intent result diversity + standard-name classifier override

2026-06-25 01:54:36 +02:00

corpus_version.go

feat: add RAG corpus versioning and source policy backend

2026-03-02 07:58:08 +01:00

decision_tree_engine_test.go

feat: AI Act Decision Tree — Zwei-Achsen-Klassifikation (GPAI + High-Risk)

2026-03-29 10:14:09 +02:00

decision_tree_engine.go

feat: AI Act Obligations erweitert (60→81) + Decision Tree Q8 fix

2026-04-12 16:41:29 +02:00

domain_context_test.go

feat: Unified Facts Bridge — Company Profile fuer alle Bewertungsmodule

2026-04-23 16:20:57 +02:00

dsgvo_module.go

refactor(go/ucca): split policy_engine, legal_rag, ai_act, nis2, financial_policy, dsgvo_module

2026-04-19 09:48:41 +02:00

dsgvo_obligations.go

refactor(go/ucca): split policy_engine, legal_rag, ai_act, nis2, financial_policy, dsgvo_module

2026-04-19 09:48:41 +02:00

dsgvo_yaml.go

refactor(go/ucca): split policy_engine, legal_rag, ai_act, nis2, financial_policy, dsgvo_module

2026-04-19 09:48:41 +02:00

escalation_models.go

feat: BetrVG-Compliance-Modul — Obligations, Konflikt-Score, Frontend

2026-04-12 10:49:56 +02:00

escalation_store_dsb.go

refactor(go/ucca): split license_policy, models, pdf_export, escalation_store, obligations_registry

2026-04-19 10:03:51 +02:00

escalation_store.go

refactor(go/ucca): split license_policy, models, pdf_export, escalation_store, obligations_registry

2026-04-19 10:03:51 +02:00

escalation_test.go

Initial commit: breakpilot-compliance - Compliance SDK Platform

2026-02-11 23:47:28 +01:00

evidence_requirement_test.go

feat(ucca): Evidence-Requirement model (step A)

2026-06-25 10:06:09 +02:00

evidence_requirement.go

feat(ucca): Evidence-Requirement model (step A)

2026-06-25 10:06:09 +02:00

examples.go

Initial commit: breakpilot-compliance - Compliance SDK Platform

2026-02-11 23:47:28 +01:00

financial_policy_test.go

Initial commit: breakpilot-compliance - Compliance SDK Platform

2026-02-11 23:47:28 +01:00

financial_policy_types.go

refactor(go/ucca): split policy_engine, legal_rag, ai_act, nis2, financial_policy, dsgvo_module

2026-04-19 09:48:41 +02:00

financial_policy.go

refactor(go/ucca): split policy_engine, legal_rag, ai_act, nis2, financial_policy, dsgvo_module

2026-04-19 09:48:41 +02:00

json_regulation_module.go

feat: Domain-spezifische UCCA-Fragen (HR, Education, Healthcare) + AGG-Modul

2026-04-12 22:06:15 +02:00

legal_corpus_structure_test.go

feat(ai-sdk): legal-corpus coverage + Phase-2 citation-graph assessment (#33)

2026-06-24 06:37:22 +00:00

legal_corpus_structure.go

feat(ai-sdk): legal-corpus coverage + Phase-2 citation-graph assessment (#33)

2026-06-24 06:37:22 +00:00

legal_rag_assess_test.go

feat(ai-sdk): legal-corpus coverage + Phase-2 citation-graph assessment (#33)

2026-06-24 06:37:22 +00:00

legal_rag_assess.go

feat(ai-sdk): legal-corpus coverage + Phase-2 citation-graph assessment (#33)

2026-06-24 06:37:22 +00:00

legal_rag_client.go

feat(ai-sdk): control-intent result diversity + standard-name classifier override

2026-06-25 01:54:36 +02:00

legal_rag_context.go

refactor(go/ucca): split policy_engine, legal_rag, ai_act, nis2, financial_policy, dsgvo_module

2026-04-19 09:48:41 +02:00

legal_rag_graph_test.go

feat(ai-sdk): legal-corpus coverage + Phase-2 citation-graph assessment (#33)

2026-06-24 06:37:22 +00:00

legal_rag_graph.go

feat(ai-sdk): legal-corpus coverage + Phase-2 citation-graph assessment (#33)

2026-06-24 06:37:22 +00:00

legal_rag_http.go

feat(ai-sdk): searchControls — recall control sources on implementation questions (#39)

2026-06-24 12:08:29 +00:00

legal_rag_intent_test.go

feat(ai-sdk): source_role control-pool (controls != only technical_standard) (#38)

2026-06-24 11:12:22 +00:00

legal_rag_scroll.go

feat(ai-sdk): authority-aware re-ranking for legal RAG (Phase 1) (#31)

2026-06-23 09:30:52 +00:00

legal_rag_supersede_test.go

feat(ai-sdk): legal-corpus coverage + Phase-2 citation-graph assessment (#33)

2026-06-24 06:37:22 +00:00

legal_rag_test.go

feat(ai-sdk): authority-aware re-ranking for legal RAG (Phase 1) (#31)

2026-06-23 09:30:52 +00:00

legal_rag_types.go

feat(ai-sdk): legal-corpus coverage + Phase-2 citation-graph assessment (#33)

2026-06-24 06:37:22 +00:00

legal_rag.go

refactor(go/ucca): split policy_engine, legal_rag, ai_act, nis2, financial_policy, dsgvo_module

2026-04-19 09:48:41 +02:00

license_policy_test.go

Initial commit: breakpilot-compliance - Compliance SDK Platform

2026-02-11 23:47:28 +01:00

license_policy_types.go

refactor(go/ucca): split license_policy, models, pdf_export, escalation_store, obligations_registry

2026-04-19 10:03:51 +02:00

license_policy.go

refactor(go/ucca): split license_policy, models, pdf_export, escalation_store, obligations_registry

2026-04-19 10:03:51 +02:00

models_assessment.go

feat: Compliance Maximizer — Regulatory Optimization Engine

2026-04-23 09:10:20 +02:00

models_intake.go

feat: Compliance Maximizer — Regulatory Optimization Engine

2026-04-23 09:10:20 +02:00

models.go

feat: Compliance Maximizer — Regulatory Optimization Engine

2026-04-23 09:10:20 +02:00

nis2_module_test.go

Initial commit: breakpilot-compliance - Compliance SDK Platform

2026-02-11 23:47:28 +01:00

nis2_module.go

refactor(go/ucca): split policy_engine, legal_rag, ai_act, nis2, financial_policy, dsgvo_module

2026-04-19 09:48:41 +02:00

nis2_obligations.go

refactor(go/ucca): split policy_engine, legal_rag, ai_act, nis2, financial_policy, dsgvo_module

2026-04-19 09:48:41 +02:00

nis2_yaml.go

refactor(go/ucca): split policy_engine, legal_rag, ai_act, nis2, financial_policy, dsgvo_module

2026-04-19 09:48:41 +02:00

obligation_condition_engine_test.go

feat(ucca): Pflichtendatenbank v2 (325 Obligations), Trigger-Engine, TOM-Control-Mapping

2026-03-05 14:51:44 +01:00

obligation_condition_engine.go

feat(ucca): Pflichtendatenbank v2 (325 Obligations), Trigger-Engine, TOM-Control-Mapping

2026-03-05 14:51:44 +01:00

obligation_join_test.go

feat(ucca): obligation-join loader + citation_unit bridge + coverage report

2026-06-25 11:10:53 +02:00

obligation_join.go

feat(ucca): adopt obligation_id + harden join to semantic (step 3 core)

2026-06-25 12:18:34 +02:00

obligation_yaml_types.go

refactor(go/ucca): split policy_engine, legal_rag, ai_act, nis2, financial_policy, dsgvo_module

2026-04-19 09:48:41 +02:00

obligations_framework.go

feat(ucca): Pflichtendatenbank v2 (325 Obligations), Trigger-Engine, TOM-Control-Mapping

2026-03-05 14:51:44 +01:00

obligations_registry_grouping.go

refactor(go/ucca): split license_policy, models, pdf_export, escalation_store, obligations_registry

2026-04-19 10:03:51 +02:00

obligations_registry.go

refactor(go/ucca): split license_policy, models, pdf_export, escalation_store, obligations_registry

2026-04-19 10:03:51 +02:00

obligations_store.go

Initial commit: breakpilot-compliance - Compliance SDK Platform

2026-02-11 23:47:28 +01:00

pattern_loader_test.go

feat(multi-layer): complete Multi-Layer Control Architecture (Phases 1-8 + Pass 0)

2026-03-17 09:00:37 +01:00

pattern_loader.go

feat(iace): Sprint 3A — Operational State Graph + fix(ucca) flaky keyword sort

2026-05-10 08:05:02 +02:00

patterns.go

Initial commit: breakpilot-compliance - Compliance SDK Platform

2026-02-11 23:47:28 +01:00

pdf_export_markdown.go

refactor(go/ucca): split license_policy, models, pdf_export, escalation_store, obligations_registry

2026-04-19 10:03:51 +02:00

pdf_export_test.go

Initial commit: breakpilot-compliance - Compliance SDK Platform

2026-02-11 23:47:28 +01:00

pdf_export.go

refactor(go/ucca): split license_policy, models, pdf_export, escalation_store, obligations_registry

2026-04-19 10:03:51 +02:00

policy_engine_eval.go

refactor(go/ucca): split policy_engine, legal_rag, ai_act, nis2, financial_policy, dsgvo_module

2026-04-19 09:48:41 +02:00

policy_engine_gen.go

refactor(go/ucca): split policy_engine, legal_rag, ai_act, nis2, financial_policy, dsgvo_module

2026-04-19 09:48:41 +02:00

policy_engine_loader.go

refactor(go/ucca): split policy_engine, legal_rag, ai_act, nis2, financial_policy, dsgvo_module

2026-04-19 09:48:41 +02:00

policy_engine_test.go

Initial commit: breakpilot-compliance - Compliance SDK Platform

2026-02-11 23:47:28 +01:00

policy_engine_types.go

refactor(go/ucca): split policy_engine, legal_rag, ai_act, nis2, financial_policy, dsgvo_module

2026-04-19 09:48:41 +02:00

policy_engine.go

refactor(go/ucca): split policy_engine, legal_rag, ai_act, nis2, financial_policy, dsgvo_module

2026-04-19 09:48:41 +02:00

registration_store.go

feat: EU AI Database Registration (Art. 49) — Backend + Frontend

2026-04-12 17:13:39 +02:00

regulatory_news_test.go

fix(ci): regulatory_news Zeitbomben-Test entschaerfen — test-go + Deploy entsperren

2026-06-21 00:51:47 +02:00

regulatory_news.go

fix(ci): regulatory_news Zeitbomben-Test entschaerfen — test-go + Deploy entsperren

2026-06-21 00:51:47 +02:00

rules_controls.go

refactor(go): split training/store, ucca/rules, ucca_handlers, document_export under 500 LOC

2026-04-19 09:29:54 +02:00

rules_data_fj.go

refactor(go): split training/store, ucca/rules, ucca_handlers, document_export under 500 LOC

2026-04-19 09:29:54 +02:00

rules_data.go

refactor(go): split training/store, ucca/rules, ucca_handlers, document_export under 500 LOC

2026-04-19 09:29:54 +02:00

rules.go

refactor(go): split training/store, ucca/rules, ucca_handlers, document_export under 500 LOC

2026-04-19 09:29:54 +02:00

scope_facts_mapper.go

feat(ucca): Pflichtendatenbank v2 (325 Obligations), Trigger-Engine, TOM-Control-Mapping

2026-03-05 14:51:44 +01:00

store.go

feat: AI Act Decision Tree — Zwei-Achsen-Klassifikation (GPAI + High-Risk)

2026-03-29 10:14:09 +02:00

tom_control_loader.go

feat(ucca): Pflichtendatenbank v2 (325 Obligations), Trigger-Engine, TOM-Control-Mapping

2026-03-05 14:51:44 +01:00

tom_gap_analysis.go

feat(ucca): Pflichtendatenbank v2 (325 Obligations), Trigger-Engine, TOM-Control-Mapping

2026-03-05 14:51:44 +01:00

tom_mapper_test.go

feat(ucca): Pflichtendatenbank v2 (325 Obligations), Trigger-Engine, TOM-Control-Mapping

2026-03-05 14:51:44 +01:00

tom_obligation_mapper.go

feat(ucca): Pflichtendatenbank v2 (325 Obligations), Trigger-Engine, TOM-Control-Mapping

2026-03-05 14:51:44 +01:00

unified_facts.go

feat(ucca): Pflichtendatenbank v2 (325 Obligations), Trigger-Engine, TOM-Control-Mapping

2026-03-05 14:51:44 +01:00

v2_loader_test.go

feat(ucca): Pflichtendatenbank v2 (325 Obligations), Trigger-Engine, TOM-Control-Mapping

2026-03-05 14:51:44 +01:00

v2_loader.go

feat: Regulatory News Dashboard — proaktive Compliance-Alerts

2026-04-25 17:43:19 +02:00