Benjamin Admin ab3cb86b1c feat(ucca): Evidence-Requirement model (step A) ...

The last edge of the compliance graph: what concrete, fresh evidence proves a
framework control is met (config_export/test_report/sbom/audit_log/pentest/...
from github/ci/scanner/manual_upload, with a freshness requirement).

Seeded for all 7 accepted CRA->OWASP controls (Auth/Crypto/Logging). A graph
test enforces connectivity: every accepted control must carry >=1 required
evidence — no dangling node in Obligation -> Control -> Evidence.

This is what will let the Advisor state "the CRA requirement is fulfilled" from
present evidence, not from the mere existence of a document.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

2026-06-25 10:06:09 +02:00

..

ai_act_module_test.go

Initial commit: breakpilot-compliance - Compliance SDK Platform

2026-02-11 23:47:28 +01:00

ai_act_module.go

refactor(go/ucca): split policy_engine, legal_rag, ai_act, nis2, financial_policy, dsgvo_module

2026-04-19 09:48:41 +02:00

ai_act_obligations.go

refactor(go/ucca): split policy_engine, legal_rag, ai_act, nis2, financial_policy, dsgvo_module

2026-04-19 09:48:41 +02:00

ai_act_yaml.go

refactor(go/ucca): split policy_engine, legal_rag, ai_act, nis2, financial_policy, dsgvo_module

2026-04-19 09:48:41 +02:00

authority_rerank_test.go

feat(ai-sdk): authority-aware re-ranking for legal RAG (Phase 1) (#31)

2026-06-23 09:30:52 +00:00

authority_rerank.go

feat(ai-sdk): source_role control-pool (controls != only technical_standard) (#38)

2026-06-24 11:12:22 +00:00

authority_test.go

feat(ai-sdk): control-intent result diversity + standard-name classifier override

2026-06-25 01:54:36 +02:00

authority.go

feat(ai-sdk): control-intent result diversity + standard-name classifier override

2026-06-25 01:54:36 +02:00

betrvg_test.go

feat: Unified Facts Bridge — Company Profile fuer alle Bewertungsmodule

2026-04-23 16:20:57 +02:00

canonical_control_loader_test.go

feat(canonical-controls): Canonical Control Library — rechtssichere Security Controls

2026-03-12 19:55:06 +01:00

canonical_control_loader.go

feat(canonical-controls): Canonical Control Library — rechtssichere Security Controls

2026-03-12 19:55:06 +01:00

company_profile_test.go

feat: Unified Facts Bridge — Company Profile fuer alle Bewertungsmodule

2026-04-23 16:20:57 +02:00

company_profile.go

feat: Unified Facts Bridge — Company Profile fuer alle Bewertungsmodule

2026-04-23 16:20:57 +02:00

control_mapping_test.go

refactor(ucca): control-mapping model per review feedback

2026-06-25 09:50:37 +02:00

control_mapping.go

refactor(ucca): control-mapping model per review feedback

2026-06-25 09:50:37 +02:00

control_role_test.go

feat(ai-sdk): control-intent result diversity + standard-name classifier override

2026-06-25 01:54:36 +02:00

control_role.go

feat(ai-sdk): control-intent result diversity + standard-name classifier override

2026-06-25 01:54:36 +02:00

corpus_version.go

feat: add RAG corpus versioning and source policy backend

2026-03-02 07:58:08 +01:00

decision_tree_engine_test.go

feat: AI Act Decision Tree — Zwei-Achsen-Klassifikation (GPAI + High-Risk)

2026-03-29 10:14:09 +02:00

decision_tree_engine.go

feat: AI Act Obligations erweitert (60→81) + Decision Tree Q8 fix

2026-04-12 16:41:29 +02:00

domain_context_test.go

feat: Unified Facts Bridge — Company Profile fuer alle Bewertungsmodule

2026-04-23 16:20:57 +02:00

dsgvo_module.go

refactor(go/ucca): split policy_engine, legal_rag, ai_act, nis2, financial_policy, dsgvo_module

2026-04-19 09:48:41 +02:00

dsgvo_obligations.go

refactor(go/ucca): split policy_engine, legal_rag, ai_act, nis2, financial_policy, dsgvo_module

2026-04-19 09:48:41 +02:00

dsgvo_yaml.go

refactor(go/ucca): split policy_engine, legal_rag, ai_act, nis2, financial_policy, dsgvo_module

2026-04-19 09:48:41 +02:00

escalation_models.go

feat: BetrVG-Compliance-Modul — Obligations, Konflikt-Score, Frontend

2026-04-12 10:49:56 +02:00

escalation_store_dsb.go

refactor(go/ucca): split license_policy, models, pdf_export, escalation_store, obligations_registry

2026-04-19 10:03:51 +02:00

escalation_store.go

refactor(go/ucca): split license_policy, models, pdf_export, escalation_store, obligations_registry

2026-04-19 10:03:51 +02:00

escalation_test.go

Initial commit: breakpilot-compliance - Compliance SDK Platform

2026-02-11 23:47:28 +01:00

evidence_requirement_test.go

feat(ucca): Evidence-Requirement model (step A)

2026-06-25 10:06:09 +02:00

evidence_requirement.go

feat(ucca): Evidence-Requirement model (step A)

2026-06-25 10:06:09 +02:00

examples.go

Initial commit: breakpilot-compliance - Compliance SDK Platform

2026-02-11 23:47:28 +01:00

financial_policy_test.go

Initial commit: breakpilot-compliance - Compliance SDK Platform

2026-02-11 23:47:28 +01:00

financial_policy_types.go

refactor(go/ucca): split policy_engine, legal_rag, ai_act, nis2, financial_policy, dsgvo_module

2026-04-19 09:48:41 +02:00

financial_policy.go

refactor(go/ucca): split policy_engine, legal_rag, ai_act, nis2, financial_policy, dsgvo_module

2026-04-19 09:48:41 +02:00

json_regulation_module.go

feat: Domain-spezifische UCCA-Fragen (HR, Education, Healthcare) + AGG-Modul

2026-04-12 22:06:15 +02:00

legal_corpus_structure_test.go

feat(ai-sdk): legal-corpus coverage + Phase-2 citation-graph assessment (#33)

2026-06-24 06:37:22 +00:00

legal_corpus_structure.go

feat(ai-sdk): legal-corpus coverage + Phase-2 citation-graph assessment (#33)

2026-06-24 06:37:22 +00:00

legal_rag_assess_test.go

feat(ai-sdk): legal-corpus coverage + Phase-2 citation-graph assessment (#33)

2026-06-24 06:37:22 +00:00

legal_rag_assess.go

feat(ai-sdk): legal-corpus coverage + Phase-2 citation-graph assessment (#33)

2026-06-24 06:37:22 +00:00

legal_rag_client.go

feat(ai-sdk): control-intent result diversity + standard-name classifier override

2026-06-25 01:54:36 +02:00

legal_rag_context.go

refactor(go/ucca): split policy_engine, legal_rag, ai_act, nis2, financial_policy, dsgvo_module

2026-04-19 09:48:41 +02:00

legal_rag_graph_test.go

feat(ai-sdk): legal-corpus coverage + Phase-2 citation-graph assessment (#33)

2026-06-24 06:37:22 +00:00

legal_rag_graph.go

feat(ai-sdk): legal-corpus coverage + Phase-2 citation-graph assessment (#33)

2026-06-24 06:37:22 +00:00

legal_rag_http.go

feat(ai-sdk): searchControls — recall control sources on implementation questions (#39)

2026-06-24 12:08:29 +00:00

legal_rag_intent_test.go

feat(ai-sdk): source_role control-pool (controls != only technical_standard) (#38)

2026-06-24 11:12:22 +00:00

legal_rag_scroll.go

feat(ai-sdk): authority-aware re-ranking for legal RAG (Phase 1) (#31)

2026-06-23 09:30:52 +00:00

legal_rag_supersede_test.go

feat(ai-sdk): legal-corpus coverage + Phase-2 citation-graph assessment (#33)

2026-06-24 06:37:22 +00:00

legal_rag_test.go

feat(ai-sdk): authority-aware re-ranking for legal RAG (Phase 1) (#31)

2026-06-23 09:30:52 +00:00

legal_rag_types.go

feat(ai-sdk): legal-corpus coverage + Phase-2 citation-graph assessment (#33)

2026-06-24 06:37:22 +00:00

legal_rag.go

refactor(go/ucca): split policy_engine, legal_rag, ai_act, nis2, financial_policy, dsgvo_module

2026-04-19 09:48:41 +02:00

license_policy_test.go

Initial commit: breakpilot-compliance - Compliance SDK Platform

2026-02-11 23:47:28 +01:00

license_policy_types.go

refactor(go/ucca): split license_policy, models, pdf_export, escalation_store, obligations_registry

2026-04-19 10:03:51 +02:00

license_policy.go

refactor(go/ucca): split license_policy, models, pdf_export, escalation_store, obligations_registry

2026-04-19 10:03:51 +02:00

models_assessment.go

feat: Compliance Maximizer — Regulatory Optimization Engine

2026-04-23 09:10:20 +02:00

models_intake.go

feat: Compliance Maximizer — Regulatory Optimization Engine

2026-04-23 09:10:20 +02:00

models.go

feat: Compliance Maximizer — Regulatory Optimization Engine

2026-04-23 09:10:20 +02:00

nis2_module_test.go

Initial commit: breakpilot-compliance - Compliance SDK Platform

2026-02-11 23:47:28 +01:00

nis2_module.go

refactor(go/ucca): split policy_engine, legal_rag, ai_act, nis2, financial_policy, dsgvo_module

2026-04-19 09:48:41 +02:00

nis2_obligations.go

refactor(go/ucca): split policy_engine, legal_rag, ai_act, nis2, financial_policy, dsgvo_module

2026-04-19 09:48:41 +02:00

nis2_yaml.go

refactor(go/ucca): split policy_engine, legal_rag, ai_act, nis2, financial_policy, dsgvo_module

2026-04-19 09:48:41 +02:00

obligation_condition_engine_test.go

feat(ucca): Pflichtendatenbank v2 (325 Obligations), Trigger-Engine, TOM-Control-Mapping

2026-03-05 14:51:44 +01:00

obligation_condition_engine.go

feat(ucca): Pflichtendatenbank v2 (325 Obligations), Trigger-Engine, TOM-Control-Mapping

2026-03-05 14:51:44 +01:00

obligation_yaml_types.go

refactor(go/ucca): split policy_engine, legal_rag, ai_act, nis2, financial_policy, dsgvo_module

2026-04-19 09:48:41 +02:00

obligations_framework.go

feat(ucca): Pflichtendatenbank v2 (325 Obligations), Trigger-Engine, TOM-Control-Mapping

2026-03-05 14:51:44 +01:00

obligations_registry_grouping.go

refactor(go/ucca): split license_policy, models, pdf_export, escalation_store, obligations_registry

2026-04-19 10:03:51 +02:00

obligations_registry.go

refactor(go/ucca): split license_policy, models, pdf_export, escalation_store, obligations_registry

2026-04-19 10:03:51 +02:00

obligations_store.go

Initial commit: breakpilot-compliance - Compliance SDK Platform

2026-02-11 23:47:28 +01:00

pattern_loader_test.go

feat(multi-layer): complete Multi-Layer Control Architecture (Phases 1-8 + Pass 0)

2026-03-17 09:00:37 +01:00

pattern_loader.go

feat(iace): Sprint 3A — Operational State Graph + fix(ucca) flaky keyword sort

2026-05-10 08:05:02 +02:00

patterns.go

Initial commit: breakpilot-compliance - Compliance SDK Platform

2026-02-11 23:47:28 +01:00

pdf_export_markdown.go

refactor(go/ucca): split license_policy, models, pdf_export, escalation_store, obligations_registry

2026-04-19 10:03:51 +02:00

pdf_export_test.go

Initial commit: breakpilot-compliance - Compliance SDK Platform

2026-02-11 23:47:28 +01:00

pdf_export.go

refactor(go/ucca): split license_policy, models, pdf_export, escalation_store, obligations_registry

2026-04-19 10:03:51 +02:00

policy_engine_eval.go

refactor(go/ucca): split policy_engine, legal_rag, ai_act, nis2, financial_policy, dsgvo_module

2026-04-19 09:48:41 +02:00

policy_engine_gen.go

refactor(go/ucca): split policy_engine, legal_rag, ai_act, nis2, financial_policy, dsgvo_module

2026-04-19 09:48:41 +02:00

policy_engine_loader.go

refactor(go/ucca): split policy_engine, legal_rag, ai_act, nis2, financial_policy, dsgvo_module

2026-04-19 09:48:41 +02:00

policy_engine_test.go

Initial commit: breakpilot-compliance - Compliance SDK Platform

2026-02-11 23:47:28 +01:00

policy_engine_types.go

refactor(go/ucca): split policy_engine, legal_rag, ai_act, nis2, financial_policy, dsgvo_module

2026-04-19 09:48:41 +02:00

policy_engine.go

refactor(go/ucca): split policy_engine, legal_rag, ai_act, nis2, financial_policy, dsgvo_module

2026-04-19 09:48:41 +02:00

registration_store.go

feat: EU AI Database Registration (Art. 49) — Backend + Frontend

2026-04-12 17:13:39 +02:00

regulatory_news_test.go

fix(ci): regulatory_news Zeitbomben-Test entschaerfen — test-go + Deploy entsperren

2026-06-21 00:51:47 +02:00

regulatory_news.go

fix(ci): regulatory_news Zeitbomben-Test entschaerfen — test-go + Deploy entsperren

2026-06-21 00:51:47 +02:00

rules_controls.go

refactor(go): split training/store, ucca/rules, ucca_handlers, document_export under 500 LOC

2026-04-19 09:29:54 +02:00

rules_data_fj.go

refactor(go): split training/store, ucca/rules, ucca_handlers, document_export under 500 LOC

2026-04-19 09:29:54 +02:00

rules_data.go

refactor(go): split training/store, ucca/rules, ucca_handlers, document_export under 500 LOC

2026-04-19 09:29:54 +02:00

rules.go

refactor(go): split training/store, ucca/rules, ucca_handlers, document_export under 500 LOC

2026-04-19 09:29:54 +02:00

scope_facts_mapper.go

feat(ucca): Pflichtendatenbank v2 (325 Obligations), Trigger-Engine, TOM-Control-Mapping

2026-03-05 14:51:44 +01:00

store.go

feat: AI Act Decision Tree — Zwei-Achsen-Klassifikation (GPAI + High-Risk)

2026-03-29 10:14:09 +02:00

tom_control_loader.go

feat(ucca): Pflichtendatenbank v2 (325 Obligations), Trigger-Engine, TOM-Control-Mapping

2026-03-05 14:51:44 +01:00

tom_gap_analysis.go

feat(ucca): Pflichtendatenbank v2 (325 Obligations), Trigger-Engine, TOM-Control-Mapping

2026-03-05 14:51:44 +01:00

tom_mapper_test.go

feat(ucca): Pflichtendatenbank v2 (325 Obligations), Trigger-Engine, TOM-Control-Mapping

2026-03-05 14:51:44 +01:00

tom_obligation_mapper.go

feat(ucca): Pflichtendatenbank v2 (325 Obligations), Trigger-Engine, TOM-Control-Mapping

2026-03-05 14:51:44 +01:00

unified_facts.go

feat(ucca): Pflichtendatenbank v2 (325 Obligations), Trigger-Engine, TOM-Control-Mapping

2026-03-05 14:51:44 +01:00

v2_loader_test.go

feat(ucca): Pflichtendatenbank v2 (325 Obligations), Trigger-Engine, TOM-Control-Mapping

2026-03-05 14:51:44 +01:00

v2_loader.go

feat: Regulatory News Dashboard — proaktive Compliance-Alerts

2026-04-25 17:43:19 +02:00