Benjamin Admin e1b270c36e Add obligation discovery pipeline tooling ...

Sichert die validierte Obligation Discovery Pipeline aus /tmp als dauerhaftes,
committetes Tooling (scripts/obligation_discovery/) — der eigentliche Vermögenswert.

Stufen: precluster (Embedding-Cache + Mikro-Cluster) → meta_cluster (Review Units,
Skalierungs-Fix) → synthesize_obligations (Opus, Key aus ENV, Streaming, harte Tier-Regel,
Provenance) → validate_registry → merge_review_diff. Reine Helfer in _core.py, 16 Unit-Tests.

Doku docs-src/development/obligation_discovery_pipeline_v1.md mit Meilensteinen
(SBOM/Vuln reproduziert, Auth 4408→170 Review Units→54→kuriert 29) und der Architekturregel:
Runtime deterministisch, Discovery LLM-gestützt.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

2026-06-25 07:41:45 +02:00

..

contracts

refactor(backend/isms): split isms_assessment_service.py to stay under 500 LOC

2026-04-09 20:50:30 +02:00

fixtures

fix(agents): Impressum+Cookie delegieren MC-Laden ans Main Tool — Scope-Filter + Maßnahmen

2026-06-09 11:30:16 +02:00

__init__.py

…

test_agent_notification_routes.py

feat: ZeroClaw compliance agent — document analysis + role assignment + email

2026-04-27 23:28:21 +02:00

test_ai_legal_basis_check.py

feat(b15): AI-Act Rechtsgrundlage-Check (GT AI-ACT-RISK-001)

2026-06-07 00:15:08 +02:00

test_anti_fake_evidence_phase2.py

feat: Anti-Fake-Evidence System (Phase 1-4b)

2026-03-23 17:15:45 +01:00

test_anti_fake_evidence_phase3.py

feat: Anti-Fake-Evidence System (Phase 1-4b)

2026-03-23 17:15:45 +01:00

test_anti_fake_evidence_phase4.py

feat: Anti-Fake-Evidence System (Phase 1-4b)

2026-03-23 17:15:45 +01:00

test_anti_fake_evidence.py

feat: Anti-Fake-Evidence System (Phase 1-4b)

2026-03-23 17:15:45 +01:00

test_audit_routes_integration.py

tech-debt: mypy --strict config + integration tests for audit routes

2026-04-07 18:39:40 +02:00

test_b17_audit_walk.py

feat(b17): DSMS-CID-Anchor für Audit-Walk-Video (Stufe 3, #7)

2026-06-07 17:32:34 +02:00

test_b18_impressum_agent.py

feat: Backlog 1-5 — soft-hints, chatbot-discovery, API-payload, LLM-Agent

2026-06-07 18:41:54 +02:00

test_banner_routes.py

feat: Cookie-Banner ↔ Backend Integration (DSR, Retention, Consent Proof)

2026-05-02 19:41:22 +02:00

test_batch_dedup_runner.py

fix: adapt batch dedup to NULL pattern_id — group by merge_group_hint

2026-03-24 07:24:02 +01:00

test_browser_cross_finding.py

feat(banner): Consent-Historie/Widerruf live erkennen (Borlabs-Stil, #62)

2026-06-13 16:38:38 +02:00

test_canonical_control_routes.py

feat: Obligation-Deduplizierung — 34.617 Duplikate als 'duplicate' markiert

2026-03-26 20:13:00 +01:00

test_change_request_routes.py

feat(sdk): Multi-Tenancy, Versionierung, Change-Requests, Dokumentengenerierung (Phase 1-6)

2026-03-07 14:12:34 +01:00

test_chatbot_policy_discovery.py

feat: Backlog 1-5 — soft-hints, chatbot-discovery, API-payload, LLM-Agent

2026-06-07 18:41:54 +02:00

test_checker_router.py

feat(checkers): platform router + Haiku sufficiency tier; cookie is first consumer

2026-06-22 17:37:48 +02:00

test_citation_backfill.py

feat(rag): optimize RAG pipeline — JSON-Mode, CoT, Hybrid Search, Re-Ranking, Cross-Reg Dedup, chunk 1024

2026-03-21 11:49:43 +01:00

test_company_profile_extend.py

fix: update 61 outdated test mocks to match current schemas

2026-03-24 06:40:42 +01:00

test_company_profile_routes.py

fix: update 61 outdated test mocks to match current schemas

2026-03-24 06:40:42 +01:00

test_compliance_scope_routes.py

…

test_consent_reachability_check.py

refactor(agent-check): split routes file (2692→347 LOC) + wire B1/B3/A1 [guardrail-change]

2026-06-06 14:47:25 +02:00

test_consent_template_routes.py

…

test_control_composer.py

feat(multi-layer): complete Multi-Layer Control Architecture (Phases 1-8 + Pass 0)

2026-03-17 09:00:37 +01:00

test_control_dedup.py

feat(rag): optimize RAG pipeline — JSON-Mode, CoT, Hybrid Search, Re-Ranking, Cross-Reg Dedup, chunk 1024

2026-03-21 11:49:43 +01:00

test_control_generator.py

feat(rag): optimize RAG pipeline — JSON-Mode, CoT, Hybrid Search, Re-Ranking, Cross-Reg Dedup, chunk 1024

2026-03-21 11:49:43 +01:00

test_control_patterns.py

feat(multi-layer): complete Multi-Layer Control Architecture (Phases 1-8 + Pass 0)

2026-03-17 09:00:37 +01:00

test_control_routes.py

feat: Anti-Fake-Evidence System (Phase 1-4b)

2026-03-23 17:15:45 +01:00

test_cookie_classification_gate.py

fix(cookie): gate non-COOKIE_POLICY controls out of the cookie-policy scan

2026-06-22 17:37:48 +02:00

test_cookie_coherence_check.py

feat(b19): Cookie-Coherence — 3-Layer-Lookup + Vendor-Karten + CSV

2026-06-07 23:48:04 +02:00

test_cookie_inventory_fuzzy.py

fix(cookie-inventory): fuzzy prefix-match + BMW-GT-File

2026-06-07 21:29:21 +02:00

test_cookie_library_lookup.py

feat(b19): Cookie-Coherence — 3-Layer-Lookup + Vendor-Karten + CSV

2026-06-07 23:48:04 +02:00

test_cookie_policy_v3.py

fix(agents): Impressum+Cookie delegieren MC-Laden ans Main Tool — Scope-Filter + Maßnahmen

2026-06-09 11:30:16 +02:00

test_cookie_sufficiency_judge.py

feat(checkers): platform router + Haiku sufficiency tier; cookie is first consumer

2026-06-22 17:37:48 +02:00

test_corpus_overview.py

feat(controls): 5 neue Use Cases + Machinery-Fix + Korpus-/Lizenz-Übersicht

2026-06-14 21:49:22 +02:00

test_cra_applicability.py

feat(cra): MaschinenVO-Gefährdungs-Ableitung + Cyber-Safety-Brücke

2026-06-16 18:48:52 +02:00

test_cra_assess_routes.py

feat(cra): coarse priority engine — P0 floor + customer weights + quick wins

2026-06-14 08:21:56 +02:00

test_cra_component_findings.py

feat(cra): hardware path — derive cyber findings from networked components

2026-06-14 12:37:22 +02:00

test_cra_conformity_paths.py

fix(cra): Konformitätspfad-Kacheln korrekt benennen + Gating nach CRA Art. 32

2026-06-15 13:49:00 +02:00

test_cra_datasheet_extractor.py

fix(cra): prod hang-guard /readiness machinery + robuster Datenblatt-JSON-Parse

2026-06-17 07:39:39 +02:00

test_cra_finding_mapper.py

fix(cra): Scanner-Findings vollstaendig mappen + assess-from-scanner-Latenz senken

2026-06-17 13:17:51 +02:00

test_cra_measures_library.py

feat(cra): kuratierte Maßnahmen-Bibliothek — alle 40 CRA-Anforderungen belegt

2026-06-16 07:44:13 +02:00

test_cra_meldewesen.py

feat(sdk): Kunden-Dokumente + CRA-Meldewesen, Screening aus Frontend genommen

2026-06-17 21:21:28 +02:00

test_cra_prioritizer.py

feat(cra): coarse priority engine — P0 floor + customer weights + quick wins

2026-06-14 08:21:56 +02:00

test_cra_progress.py

feat(cra): Management-Fortschritts-Ansicht (Ticket-Status-Readback)

2026-06-16 10:10:45 +02:00

test_cra_readiness.py

refactor(cra): readiness fetches Machinery-Reg obligations from use_case=maschinen

2026-06-14 15:39:39 +02:00

test_cra_safety_bridge.py

feat(cra): cyber-meets-safety bridge as real logic (step 2)

2026-06-14 08:59:41 +02:00

test_cra_scanner_adapter.py

feat(mcp): HTTP+Bearer CRA-MCP-Server für den Repo-Scanner + Finding-Adapter

2026-06-15 18:30:47 +02:00

test_cra_snapshot.py

feat(cra): versioned assessment snapshots — CRA Art. 13 running system (step 3)

2026-06-14 09:27:09 +02:00

test_cra_use_case_controls.py

fix(cra): Scanner-Findings vollstaendig mappen + assess-from-scanner-Latenz senken

2026-06-17 13:17:51 +02:00

test_cross_domain_doc_check.py

feat: Mail-Restrukturierung + B22 Cross-Domain-Doc-Detector

2026-06-08 11:35:55 +02:00

test_cross_placement_agent.py

feat(agents): Cross-Placement-Agent (deplatzierter Content)

2026-06-09 08:19:57 +02:00

test_crosswalk_routes.py

feat(multi-layer): complete Multi-Layer Control Architecture (Phases 1-8 + Pass 0)

2026-03-17 09:00:37 +01:00

test_dashboard_routes_extended.py

feat: add compliance modules 2-5 (dashboard, security templates, process manager, evidence collector)

2026-03-14 21:03:04 +01:00

test_decomposition_pass.py

feat: Pass 0b quality — negative actions, container detection, session object classes

2026-03-28 17:24:19 +01:00

test_document_versions.py

feat(sdk): Multi-Tenancy, Versionierung, Change-Requests, Dokumentengenerierung (Phase 1-6)

2026-03-07 14:12:34 +01:00

test_dsfa_routes.py

merge: sync with origin/main, take upstream on conflicts

2026-04-16 16:26:48 +02:00

test_dsr_routes.py

refactor: phase 0 guardrails + phase 1 step 2 (models.py split)

2026-04-07 13:18:29 +02:00

test_einwilligungen_routes.py

refactor: phase 0 guardrails + phase 1 step 2 (models.py split)

2026-04-07 13:18:29 +02:00

test_elli_gt_coverage.py

test(elli-gt): GT-Coverage-Integration-Test + Sprint-Briefing

2026-06-07 00:28:29 +02:00

test_email_template_routes.py

…

test_escalation_routes.py

feat(sdk): API-Referenz Frontend + Backend-Konsolidierung (Shared Utilities, CRUD Factory)

2026-03-07 17:07:43 +01:00

test_evidence_check_routes.py

feat: add compliance modules 2-5 (dashboard, security templates, process manager, evidence collector)

2026-03-14 21:03:04 +01:00

test_evidence_routes.py

feat: Anti-Fake-Evidence System (Phase 1-4b)

2026-03-23 17:15:45 +01:00

test_evidence_type.py

feat: evidence_type Feld (code/process/hybrid) fuer Controls

2026-03-25 21:53:40 +01:00

test_extraction_routes.py

…

test_founding_wizard.py

feat(founding-wizard): Per-Person IP-Assignment + Prefill + E2E-Tests

2026-05-21 18:49:10 +02:00

test_framework_decomposition.py

feat: Framework Decomposition Engine + Composite Detection for Pass 0b

2026-03-23 12:11:55 +01:00

test_generation_routes.py

fix(quality): Ruff/CVE/TS-Fixes, 104 neue Tests, Complexity-Refactoring

2026-03-07 19:00:33 +01:00

test_import_routes.py

…

test_impressum_groundtruth.py

fix(agents): Impressum+Cookie delegieren MC-Laden ans Main Tool — Scope-Filter + Maßnahmen

2026-06-09 11:30:16 +02:00

test_impressum_multi_entity_check.py

fix(b9+b14): Real-World-Smoke-Befunde aus Elli-Audit (2026-06-07)

2026-06-07 08:50:46 +02:00

test_impressum_v3.py

fix(impressum): Findings aus 12 §5-TMG-Pattern-MCs statt verunreinigtem DB-Set

2026-06-09 13:15:34 +02:00

test_incident_routes.py

feat(incidents): Go Incidents nach Python migrieren, Proxy umleiten, 50 Tests

2026-03-06 20:50:00 +01:00

test_isms_routes.py

refactor: phase 0 guardrails + phase 1 step 2 (models.py split)

2026-04-07 13:18:29 +02:00

test_legacy_url_cdx.py

feat(crawl): Vollstaendigkeit — Shadow-DOM/versteckte Links + Interaktions-Fixpunkt + Wayback-CDX-Orphans

2026-06-09 12:33:34 +02:00

test_legal_document_routes_extended.py

merge: sync with origin/main, take upstream on conflicts

2026-04-16 16:26:48 +02:00

test_legal_document_routes.py

refactor(backend/api): extract LegalDocumentConsentService (Step 4 — file 12 of 18)

2026-04-09 08:47:56 +02:00

test_legal_template_routes.py

fix: update 61 outdated test mocks to match current schemas

2026-03-24 06:40:42 +01:00

test_license_gate.py

feat(canonical-controls): Canonical Control Library — rechtssichere Security Controls

2026-03-12 19:55:06 +01:00

test_lit_mapping_validation.py

test: Lit-Mapping validation — Dict vs Control Library comparison

2026-04-29 16:56:38 +02:00

test_llm_cascade_ovh.py

fix(cascade): give OVH/gpt-oss reasoning headroom so Tier-2 isn't silently dead

2026-06-22 17:37:48 +02:00

test_loeschfristen_routes.py

feat(sdk): vendor-compliance cross-module integration — VVT, obligations, TOM, loeschfristen

2026-03-19 13:59:43 +01:00

test_mail_render_v2.py

feat(audit): V2 mail render + 5 new findings (B4/B5/B6/B7/B8) + LLM-Plausibility-Phase

2026-06-06 21:19:49 +02:00

test_mc_audit_type_classification.py

fix(mc-audit): TOM/AVV case-mismatch + Ausnahmen-Pattern Wortabstand

2026-05-22 11:51:03 +02:00

test_mcp_server.py

feat(mcp): HTTP+Bearer CRA-MCP-Server für den Repo-Scanner + Finding-Adapter

2026-06-15 18:30:47 +02:00

test_migration_060.py

feat(multi-layer): complete Multi-Layer Control Architecture (Phases 1-8 + Pass 0)

2026-03-17 09:00:37 +01:00

test_migration_endpoints.py

feat(agent): migrate compliance-check results to banner + documents (M1-M5)

2026-05-17 14:06:28 +02:00

test_migration_mappers.py

feat(agent): migrate compliance-check results to banner + documents (M1-M5)

2026-05-17 14:06:28 +02:00

test_module_routes.py

…

test_norm_sources.py

feat(cra): Maßnahmen-Provenienz + Lizenzklasse je Normquelle

2026-06-16 10:10:20 +02:00

test_notfallplan_routes.py

…

test_obligation_aggregation.py

feat(obligation): obligation-level aggregation engine

2026-06-24 12:28:03 +02:00

test_obligation_applicability.py

feat(obligation): obligation applicability predicates

2026-06-24 12:43:42 +02:00

test_obligation_discovery.py

Add obligation discovery pipeline tooling

2026-06-25 07:41:45 +02:00

test_obligation_extractor.py

feat(rag): optimize RAG pipeline — JSON-Mode, CoT, Hybrid Search, Re-Ranking, Cross-Reg Dedup, chunk 1024

2026-03-21 11:49:43 +01:00

test_obligation_routes.py

feat(sdk): vendor-compliance cross-module integration — VVT, obligations, TOM, loeschfristen

2026-03-19 13:59:43 +01:00

test_obligation_shadow.py

Add met_count and recall_limited_obligations to shadow telemetry

2026-06-24 20:15:45 +02:00

test_obligation_taxonomy.py

Mark recall-limited obligations in DSE shadow telemetry

2026-06-24 13:46:21 +02:00

test_pattern_library.py

feat(agents): Semantic-Validator + Auto-Learning-Pattern-Library

2026-06-09 08:16:21 +02:00

test_pattern_matcher.py

feat(multi-layer): complete Multi-Layer Control Architecture (Phases 1-8 + Pass 0)

2026-03-17 09:00:37 +01:00

test_pipeline_adapter.py

feat(multi-layer): complete Multi-Layer Control Architecture (Phases 1-8 + Pass 0)

2026-03-17 09:00:37 +01:00

test_policy_templates.py

fix: update 61 outdated test mocks to match current schemas

2026-03-24 06:40:42 +01:00

test_process_task_routes.py

feat: add compliance modules 2-5 (dashboard, security templates, process manager, evidence collector)

2026-03-14 21:03:04 +01:00

test_project_routes.py

feat(sdk): Multi-Projekt-Architektur — mehrere Projekte pro Tenant

2026-03-09 14:53:50 +01:00

test_provenance_endpoint.py

feat: Control-Detail Provenance + Atomare Controls Seite

2026-03-24 10:38:34 +01:00

test_quality_routes.py

feat(sdk): API-Referenz Frontend + Backend-Konsolidierung (Shared Utilities, CRUD Factory)

2026-03-07 17:07:43 +01:00

test_rag_client.py

…

test_rationale_backfill.py

feat: LLM-basierter Rationale-Backfill fuer atomare Controls

2026-03-25 23:01:49 +01:00

test_requirement_routes.py

…

test_reranker.py

feat(rag): optimize RAG pipeline — JSON-Mode, CoT, Hybrid Search, Re-Ranking, Cross-Reg Dedup, chunk 1024

2026-03-21 11:49:43 +01:00

test_retention_comparator.py

refactor(agent-check): split routes file (2692→347 LOC) + wire B1/B3/A1 [guardrail-change]

2026-06-06 14:47:25 +02:00

test_retention_conflict_check.py

feat(b14): widersprüchliche Speicherdauer im selben Doc (GT TH-RETENTION-001)

2026-06-07 00:12:00 +02:00

test_risk_routes.py

…

test_routes_legal_context.py

…

test_saving_scan_routes.py

feat(compliance-check): exec-summary + voll-audit + TDM-respect + cookie-KB-extended + saving-scan-funnel

2026-05-18 23:48:34 +02:00

test_scanner_mcp_client.py

feat(cra): Pull-Flow — Findings vom Scanner-MCP ziehen + assessen

2026-06-15 19:05:44 +02:00

test_scanner_mcp_normalize.py

feat(cra): SBOM- + DAST-Findings aus dem Scanner-MCP konsumieren

2026-06-18 12:05:05 +02:00

test_screening_routes.py

…

test_security_backlog_routes.py

feat(sdk): API-Referenz Frontend + Backend-Konsolidierung (Shared Utilities, CRUD Factory)

2026-03-07 17:07:43 +01:00

test_security_templates.py

feat: add compliance modules 2-5 (dashboard, security templates, process manager, evidence collector)

2026-03-14 21:03:04 +01:00

test_semantic_validator.py

fix(agents): Impressum+Cookie delegieren MC-Laden ans Main Tool — Scope-Filter + Maßnahmen

2026-06-09 11:30:16 +02:00

test_snapshot_browser_behavior.py

feat(backend): On-demand Browser-Verhaltens-Matrix + Snapshot-Persistenz (Phase 2)

2026-06-12 23:03:28 +02:00

test_source_policy_routes.py

…

test_source_type_classification.py

fix: normative_strength 'may' statt 'can' (DB-Constraint)

2026-03-25 08:35:16 +01:00

test_specialist_agent_routes.py

fix(agents): Impressum+Cookie delegieren MC-Laden ans Main Tool — Scope-Filter + Maßnahmen

2026-06-09 11:30:16 +02:00

test_specialist_cookie_policy.py

feat(agents): Sprint 1.12 Phase 2 — Cookie-Policy v3 + ImpressumAgent v3 finetune

2026-06-09 09:23:12 +02:00

test_specialist_evidence_vault.py

feat(agents): Specialist-Agents Phase 2 Foundation + Cookie-Policy-Agent

2026-06-08 17:40:05 +02:00

test_specialist_impressum_v2.py

fix(impressum): Pattern fasst Geschäftsführung/Vorstand/Inhaber

2026-06-08 18:24:01 +02:00

test_template_rule_routes.py

test(template-rules): pytest suite for backend foundation (Phase 1.6)

2026-06-06 23:19:22 +02:00

test_tiered_eval.py

feat(dse): tiered 3-state evaluator + Layer-3 wiring (compliance_tier)

2026-06-22 17:37:48 +02:00

test_tom_mapping_routes.py

feat(tom): audit document, compliance checks, 25 controls, canonical control mapping

2026-03-19 11:56:53 +01:00

test_tom_routes.py

…

test_url_slug_drift_check.py

feat(b16): Footer-Label-vs-URL-Slug-Drift-Check (GT URL-STRUCTURE-001)

2026-06-07 00:23:25 +02:00

test_use_case_registry.py

feat(controls): atom-grain liefert source_article + Registry-Tests im CI-Pfad

2026-06-15 00:20:40 +02:00

test_v1_enrichment.py

fix: V1 Enrichment — Qdrant Collection + Parent-Resolution fuer regulatorische Matches

2026-03-26 10:52:41 +01:00

test_validate_controls.py

feat(canonical-controls): Canonical Control Library — rechtssichere Security Controls

2026-03-12 19:55:06 +01:00

test_vendor_compliance_routes.py

refactor: phase 0 guardrails + phase 1 step 2 (models.py split)

2026-04-07 13:18:29 +02:00

test_vvt_library_routes.py

feat(sdk): VVT master libraries, process templates, Loeschfristen profiling + document

2026-03-19 11:56:25 +01:00

test_vvt_routes.py

refactor: phase 0 guardrails + phase 1 step 2 (models.py split)

2026-04-07 13:18:29 +02:00

test_vvt_tenant_isolation.py

merge: sync with origin/main, take upstream on conflicts

2026-04-16 16:26:48 +02:00

test_widerrufsbelehrung_reachability_check.py

feat: Backlog 1-5 — soft-hints, chatbot-discovery, API-payload, LLM-Agent

2026-06-07 18:41:54 +02:00