Benjamin Admin df8832c521 feat(audit): P75 Banner-vs-CMP + P84 Diff-Mode + P74/P96/P97 Doc-Types ...

P75 — check_banner_vs_cmp_partner_count: wenn Banner-Text 'N Partner'
nennt und N < cmp_vendors * 0.6, HIGH-Finding (Art. 13(1)(e) DSGVO).
Erkennt Verharmlosung der tatsaechlichen Vendor-Anzahl.

P84 — run_diff.py: vergleicht aktuellen Lauf mit letztem Snapshot
derselben Site (set-Diff auf normalisierten Finding-Labels). Block
ueber dem GF-1-Pager: 'Seit letztem Lauf: X Findings weg, Y neue'.
USP — keiner der grossen Anbieter hat das.

P74/P96/P97 — Labels fuer legal_notice (Rechtliche Hinweise / IP /
Forward-Looking), dsa (Art. 12+17 Digital Services Act), lizenzhinweise
(OSS-Compliance) in _DOC_TYPE_LABELS registriert. Echte Pflichtangaben-
Checks kommen separat.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-21 16:38:25 +02:00

..

doc_checks

fix(audit): P93+P95 — Reject-Wording erweitert + Vendor-zentrisches Cookie-Format akzeptiert

2026-05-21 12:21:29 +02:00

founding_wizard

fix(founding-wizard): nested IF-Bloecke korrekt aufloesen (innermost-first)

2026-05-20 19:21:08 +02:00

__init__.py

Initial commit: breakpilot-compliance - Compliance SDK Platform

2026-02-11 23:47:28 +01:00

_banner_serializers.py

feat(cmp): Phase 2 — script blocking + cookie tracking

2026-05-11 22:52:26 +02:00

_company_profile_sql.py

refactor(backend/api): extract CompanyProfileService (Step 4 — file 4 of 18)

2026-04-07 19:47:29 +02:00

agent_pdf_export.py

feat: Phase 6-8 — PDF export, recurring scans, multi-website compare

2026-04-29 15:27:51 +02:00

agent_tools.py

feat: LLM-agnostic Compliance Agent with tool calling

2026-05-10 22:56:09 +02:00

ai_compliance_assistant.py

fix(quality): Ruff/CVE/TS-Fixes, 104 neue Tests, Complexity-Refactoring

2026-03-07 19:00:33 +01:00

anchor_finder.py

feat(rag): optimize RAG pipeline — JSON-Mode, CoT, Hybrid Search, Re-Ranking, Cross-Reg Dedup, chunk 1024

2026-03-21 11:49:43 +01:00

assertion_engine.py

feat: Anti-Fake-Evidence System (Phase 1-4b)

2026-03-23 17:15:45 +01:00

audit_pdf_generator.py

refactor: phase 0 guardrails + phase 1 step 2 (models.py split)

2026-04-07 13:18:29 +02:00

audit_session_service.py

tech-debt: mypy --strict config + integration tests for audit routes

2026-04-07 18:39:40 +02:00

audit_signoff_service.py

tech-debt: mypy --strict config + integration tests for audit routes

2026-04-07 18:39:40 +02:00

auto_risk_updater.py

refactor: phase 0 guardrails + phase 1 step 2 (models.py split)

2026-04-07 13:18:29 +02:00

banner_ab_service.py

feat: A/B Testing + Compliance Report PDF (F5 + F8)

2026-05-03 21:42:50 +02:00

banner_admin_service.py

refactor(backend/api): extract BannerConsent + BannerAdmin services (Step 4)

2026-04-07 18:52:31 +02:00

banner_analytics_service.py

feat: Vendor-level consent + Consent analytics (F4 + F6)

2026-05-03 20:58:06 +02:00

banner_consent_service.py

feat(cmp): timezone→geo_country mapping + timezone parameter

2026-05-12 14:43:13 +02:00

banner_consistency_checks.py

feat(audit): P75 Banner-vs-CMP + P84 Diff-Mode + P74/P96/P97 Doc-Types

2026-05-21 16:38:25 +02:00

banner_cookie_cross_check.py

feat(tcf-vendors): GVL cache + vendor extraction + VVT mapping

2026-05-12 18:18:50 +02:00

banner_dsr_service.py

feat: Cookie-Banner ↔ Backend Integration (DSR, Retention, Consent Proof)

2026-05-02 19:52:04 +02:00

batch_dedup_runner.py

fix: use CAST(:dd AS jsonb) instead of :dd::jsonb in _write_review

2026-03-24 08:48:58 +01:00

benchmark_k_anonymity.py

feat(compliance-check): exec-summary + voll-audit + TDM-respect + cookie-KB-extended + saving-scan-funnel

2026-05-18 23:48:34 +02:00

business_profiler.py

feat(profile+report): P17 — 4 Polish-Items

2026-05-19 12:22:05 +02:00

canonical_control_service.py

fix: ensure JSONB array fields are always arrays in control API

2026-05-02 21:18:10 +02:00

check_replay.py

feat(audit): P75 Banner-vs-CMP + P84 Diff-Mode + P74/P96/P97 Doc-Types

2026-05-21 16:38:25 +02:00

check_snapshot.py

feat(audit-pipeline): P72 MC-Scope-Classifier + P80 Snapshot/Replay-Foundation [migration-approved]

2026-05-21 08:53:31 +02:00

citation_backfill.py

feat(rag): optimize RAG pipeline — JSON-Mode, CoT, Hybrid Search, Re-Ranking, Cross-Reg Dedup, chunk 1024

2026-03-21 11:49:43 +01:00

company_profile_service.py

refactor(backend/api): extract CompanyProfileService (Step 4 — file 4 of 18)

2026-04-07 19:47:29 +02:00

compliance_agent.py

feat: LLM-agnostic Compliance Agent with tool calling

2026-05-10 22:56:09 +02:00

compliance_audit_log.py

feat(banner): P19 + P20 — Per-Category-Click-Test + Frontend-Drilldown

2026-05-19 14:31:13 +02:00

compliance_pdf_generator.py

feat: A/B Testing + Compliance Report PDF (F5 + F8)

2026-05-03 21:42:50 +02:00

compliance_user_agent.py

feat(compliance-check): exec-summary + voll-audit + TDM-respect + cookie-KB-extended + saving-scan-funnel

2026-05-18 23:48:34 +02:00

control_composer.py

feat(multi-layer): complete Multi-Layer Control Architecture (Phases 1-8 + Pass 0)

2026-03-17 09:00:37 +01:00

control_dedup.py

feat: Batch Dedup Runner — 85k→~18-25k Master Controls

2026-03-24 07:06:38 +01:00

control_export_service.py

chore: mypy cleanup — comprehensive disable headers for agent-created services

2026-04-10 11:23:43 +02:00

control_generator.py

feat: Anti-Fake-Evidence System (Phase 1-4b)

2026-03-23 17:15:45 +01:00

control_status_machine.py

feat: Anti-Fake-Evidence System (Phase 1-4b)

2026-03-23 17:15:45 +01:00

cookie_behavior_validator.py

feat(consent+report): P56-P67 Mercedes-Audit-Cycle (Anti-Audit, Phase G Vendors, Cookie-Behavior-Validator + 5 Mail-Polish-Items) [migration-approved]

2026-05-21 06:28:25 +02:00

cookie_function_classifier.py

feat(compliance-check): exec-summary + voll-audit + TDM-respect + cookie-KB-extended + saving-scan-funnel

2026-05-18 23:48:34 +02:00

cookie_knowledge_db.py

feat(compliance-check): MC-Classification + Embedding + Vendor-Redundanz + Action-Recipes + Borlabs-Features

2026-05-18 18:30:08 +02:00

cookie_knowledge_extended.py

feat(compliance-check): exec-summary + voll-audit + TDM-respect + cookie-KB-extended + saving-scan-funnel

2026-05-18 23:48:34 +02:00

cookie_knowledge.py

feat(compliance-check): exec-summary + voll-audit + TDM-respect + cookie-KB-extended + saving-scan-funnel

2026-05-18 23:48:34 +02:00

cookie_library_mismatch.py

feat(audit): VW-Cookie-Bug-Fix + P101/P102 Cookie-Library-Mismatch-Findings

2026-05-21 15:47:11 +02:00

cookie_link_validator.py

feat(compliance-check): MC-Classification + Embedding + Vendor-Redundanz + Action-Recipes + Borlabs-Features

2026-05-18 18:30:08 +02:00

cookie_policy_architecture.py

feat(compliance-check): P10 — Cookie-Policy-Architecture-Detection

2026-05-19 01:01:48 +02:00

cookie_table_generator.py

feat: Cookie banner vendors per category + {{COOKIE_TABLE}} generator

2026-05-02 20:06:57 +02:00

decomposition_pass.py

feat: Pass 0b quality — negative actions, container detection, session object classes

2026-03-28 17:24:19 +01:00

doc_anchor_locator.py

feat(compliance-check): MC-Classification + Embedding + Vendor-Redundanz + Action-Recipes + Borlabs-Features

2026-05-18 18:30:08 +02:00

dse_matcher.py

fix: Add missing service modules required by agent_scan_routes

2026-05-04 23:22:30 +02:00

dse_parser.py

fix: Add missing service modules required by agent_scan_routes

2026-05-04 23:22:30 +02:00

dse_service_extractor.py

fix: Playwright user permission + etracker DSE matching + CMP skip

2026-04-29 19:36:46 +02:00

dsfa_service.py

chore: mypy cleanup — comprehensive disable headers for agent-created services

2026-04-10 11:23:43 +02:00

dsfa_workflow_service.py

chore: mypy cleanup — comprehensive disable headers for agent-created services

2026-04-10 11:23:43 +02:00

dsi_document_checker.py

feat: Add 76 Level-2 regex checks for document correctness verification

2026-05-07 12:37:03 +02:00

dsms_client.py

feat(dsms): Stufe 1 — Gap-Analyse Report wird in DSMS archiviert

2026-05-11 23:39:26 +02:00

dsr_art11_service.py

feat: EmailDeliveryService + professional DSR email templates

2026-05-03 23:38:32 +02:00

dsr_export_service.py

fix: DSR export type-cast bug + session rollback on partial failures

2026-05-03 23:15:25 +02:00

dsr_service.py

chore: mypy cleanup — comprehensive disable headers for agent-created services

2026-04-10 11:23:43 +02:00

dsr_workflow_service.py

feat: Cookie-Banner ↔ Backend Integration (DSR, Retention, Consent Proof)

2026-05-02 19:52:04 +02:00

email_delivery_service.py

feat: EmailDeliveryService + professional DSR email templates

2026-05-03 23:38:32 +02:00

email_template_service.py

refactor(backend/api): extract Email Template services (Step 4 — file 10 of 18)

2026-04-08 22:39:19 +02:00

email_template_version_service.py

refactor(backend/api): extract Email Template services (Step 4 — file 10 of 18)

2026-04-08 22:39:19 +02:00

evidence_service.py

refactor(backend/api): extract EvidenceService (Step 4 — file 9 of 18)

2026-04-08 21:59:03 +02:00

export_generator.py

refactor: phase 0 guardrails + phase 1 step 2 (models.py split)

2026-04-07 13:18:29 +02:00

finding_action_recipes.py

feat(compliance-check): MC-Classification + Embedding + Vendor-Redundanz + Action-Recipes + Borlabs-Features

2026-05-18 18:30:08 +02:00

finding_confidence.py

feat(audit): P82 GF-1-Pager + P87 Konfidenz-Score pro Finding

2026-05-21 16:20:19 +02:00

framework_decomposition.py

feat: Framework Decomposition Engine + Composite Detection for Pass 0b

2026-03-23 12:11:55 +01:00

gf_one_pager.py

feat(audit): P82 GF-1-Pager + P87 Konfidenz-Score pro Finding

2026-05-21 16:20:19 +02:00

incident_service.py

refactor(backend/api): extract Incident services (Step 4 — file 11 of 18)

2026-04-09 08:35:57 +02:00

incident_workflow_service.py

refactor(backend/api): extract Incident services (Step 4 — file 11 of 18)

2026-04-09 08:35:57 +02:00

intake_extractor.py

fix: derive intake flags from DETECTED SERVICES, not from text content

2026-05-02 08:37:51 +02:00

isms_assessment_service.py

chore: mypy cleanup — comprehensive disable headers for agent-created services

2026-04-10 11:23:43 +02:00

isms_findings_service.py

chore: mypy cleanup — comprehensive disable headers for agent-created services

2026-04-10 11:23:43 +02:00

isms_governance_service.py

chore: mypy cleanup — comprehensive disable headers for agent-created services

2026-04-10 11:23:43 +02:00

isms_readiness_service.py

chore: mypy cleanup — comprehensive disable headers for agent-created services

2026-04-10 11:23:43 +02:00

legal_basis_validator.py

fix: Add missing service modules required by agent_scan_routes

2026-05-04 23:22:30 +02:00

legal_document_consent_service.py

refactor(backend/api): extract LegalDocumentConsentService (Step 4 — file 12 of 18)

2026-04-09 08:47:56 +02:00

legal_document_service.py

chore: mypy fixes for routes.py + legal_document_service + control_export_service

2026-04-09 20:04:16 +02:00

license_gate.py

feat(canonical-controls): Canonical Control Library — rechtssichere Security Controls

2026-03-12 19:55:06 +01:00

llm_provider.py

fix: Ollama think:false fuer qwen3.5 Thinking-Mode

2026-03-25 23:25:14 +01:00

mandatory_content_checker.py

fix: Add missing service modules required by agent_scan_routes

2026-05-04 23:22:30 +02:00

mc_embedding_matcher.py

feat(compliance-check): MC-Classification + Embedding + Vendor-Redundanz + Action-Recipes + Borlabs-Features

2026-05-18 18:30:08 +02:00

mc_scorecard.py

feat(audit): P8 — MC-Severity raus, Email nur harte Findings, MC-Audit als Checkliste

2026-05-19 00:30:04 +02:00

migration_to_banner.py

feat(agent): migrate compliance-check results to banner + documents (M1-M5)

2026-05-17 14:06:28 +02:00

migration_to_document.py

feat(agent): migrate compliance-check results to banner + documents (M1-M5)

2026-05-17 14:06:28 +02:00

normative_patterns.py

feat: Anti-Fake-Evidence System (Phase 1-4b)

2026-03-23 17:15:45 +01:00

notfallplan_service.py

chore: mypy cleanup — comprehensive disable headers for agent-created services

2026-04-10 11:23:43 +02:00

notfallplan_workflow_service.py

chore: mypy cleanup — comprehensive disable headers for agent-created services

2026-04-10 11:23:43 +02:00

obligation_extractor.py

feat(rag): optimize RAG pipeline — JSON-Mode, CoT, Hybrid Search, Re-Ranking, Cross-Reg Dedup, chunk 1024

2026-03-21 11:49:43 +01:00

pattern_matcher.py

feat(multi-layer): complete Multi-Layer Control Architecture (Phases 1-8 + Pass 0)

2026-03-17 09:00:37 +01:00

pdf_extractor.py

Initial commit: breakpilot-compliance - Compliance SDK Platform

2026-02-11 23:47:28 +01:00

pipeline_adapter.py

feat(multi-layer): complete Multi-Layer Control Architecture (Phases 1-8 + Pass 0)

2026-03-17 09:00:37 +01:00

profile_extractor.py

feat(service-detector): detect 118 services in legal texts (was 20)

2026-05-13 16:00:15 +02:00

rag_client.py

feat(rag): optimize RAG pipeline — JSON-Mode, CoT, Hybrid Search, Re-Ranking, Cross-Reg Dedup, chunk 1024

2026-03-21 11:49:43 +01:00

rag_document_checker.py

feat(compliance-check): MC-Classification + Embedding + Vendor-Redundanz + Action-Recipes + Borlabs-Features

2026-05-18 18:30:08 +02:00

regulation_requirement_service.py

chore: mypy cleanup — comprehensive disable headers for agent-created services

2026-04-10 11:23:43 +02:00

regulation_scraper.py

refactor: phase 0 guardrails + phase 1 step 2 (models.py split)

2026-04-07 13:18:29 +02:00

relevance_filter.py

feat: Phase 0+1 — LLM intake extraction + control relevance filter

2026-04-29 11:36:24 +02:00

report_generator.py

refactor: phase 0 guardrails + phase 1 step 2 (models.py split)

2026-04-07 13:18:29 +02:00

reranker.py

feat(rag): optimize RAG pipeline — JSON-Mode, CoT, Hybrid Search, Re-Ranking, Cross-Reg Dedup, chunk 1024

2026-03-21 11:49:43 +01:00

run_diff.py

feat(audit): P75 Banner-vs-CMP + P84 Diff-Mode + P74/P96/P97 Doc-Types

2026-05-21 16:38:25 +02:00

screening_service.py

refactor(backend/api): extract ScreeningService (Step 4 — file 8 of 18)

2026-04-07 20:03:16 +02:00

section_splitter.py

fix(compliance-check): respect auto-discovery 'not found' verdict; DSB not canonical

2026-05-17 01:53:09 +02:00

seeder.py

fix(quality): Ruff/CVE/TS-Fixes, 104 neue Tests, Complexity-Refactoring

2026-03-07 19:00:33 +01:00

service_detector.py

feat(service-detector): detect 118 services in legal texts (was 20)

2026-05-13 16:00:15 +02:00

service_registry.py

fix: Add missing service_registry.py to main

2026-05-04 23:34:00 +02:00

similarity_detector.py

feat(canonical-controls): Canonical Control Library — rechtssichere Security Controls

2026-03-12 19:55:06 +01:00

smtp_sender.py

feat: ZeroClaw compliance agent — document analysis + role assignment + email

2026-04-27 23:28:21 +02:00

source_policy_service.py

refactor(backend/api): extract SourcePolicyService (Step 4 — file 7 of 18)

2026-04-07 19:58:02 +02:00

tcf_encoder_service.py

feat: IAB TCF 2.2 — TC String encoder + purpose mapping + UI

2026-05-04 07:01:37 +02:00

tdm_reservation_check.py

feat(compliance-check): exec-summary + voll-audit + TDM-respect + cookie-KB-extended + saving-scan-funnel

2026-05-18 23:48:34 +02:00

tom_service.py

refactor(backend/api): extract TOMService (Step 4 — file 3 of 18)

2026-04-07 19:42:17 +02:00

training_link_service.py

feat: Academy integration — training gap detection after document approval (F7)

2026-05-03 22:03:25 +02:00

unified_findings_collector.py

feat(compliance-check): exec-summary + voll-audit + TDM-respect + cookie-KB-extended + saving-scan-funnel

2026-05-18 23:48:34 +02:00

unified_findings_store.py

feat(compliance-check): exec-summary + voll-audit + TDM-respect + cookie-KB-extended + saving-scan-funnel

2026-05-18 23:48:34 +02:00

v1_enrichment.py

fix: V1 Enrichment Threshold auf 0.70 gesenkt (typische Top-Scores 0.70-0.77)

2026-03-26 11:13:37 +01:00

vendor_assessment_cross_check.py

feat(vendor-assessment): AVV/SCC/TOM/Sub-Processor checklists + assessment service

2026-05-12 23:14:54 +02:00

vendor_assessment_report.py

feat(vendor-assessment): Pruefprotokoll + Frontend + Sidebar

2026-05-12 23:24:12 +02:00

vendor_banner_sync.py

feat: Cookie-Banner ↔ Backend Integration (DSR, Retention, Consent Proof)

2026-05-02 19:52:04 +02:00

vendor_classifier.py

fix(vvt): score INTERNAL/GROUP without opt-out/privacy penalty

2026-05-17 13:15:40 +02:00

vendor_compliance_extra_service.py

chore: mypy cleanup — comprehensive disable headers for agent-created services

2026-04-10 11:23:43 +02:00

vendor_compliance_service.py

chore: mypy cleanup — comprehensive disable headers for agent-created services

2026-04-10 11:23:43 +02:00

vendor_compliance_sub_service.py

chore: mypy cleanup — comprehensive disable headers for agent-created services

2026-04-10 11:23:43 +02:00

vendor_cost_estimator.py

feat(compliance-check): MC-Classification + Embedding + Vendor-Redundanz + Action-Recipes + Borlabs-Features

2026-05-18 18:30:08 +02:00

vendor_extractor.py

feat(consent+report): P56-P67 Mercedes-Audit-Cycle (Anti-Audit, Phase G Vendors, Cookie-Behavior-Validator + 5 Mail-Polish-Items) [migration-approved]

2026-05-21 06:28:25 +02:00

vendor_llm_extractor.py

feat(audit): VW-Cookie-Bug-Fix + P101/P102 Cookie-Library-Mismatch-Findings

2026-05-21 15:47:11 +02:00

vendor_package_cookies.py

feat(audit-mail): P58/P59c/P60b/P61/P62 — Mercedes-Cycle Phase 1 abgeschlossen

2026-05-21 08:01:27 +02:00

vendor_redundancy.py

feat(compliance-check): MC-Classification + Embedding + Vendor-Redundanz + Action-Recipes + Borlabs-Features

2026-05-18 18:30:08 +02:00

vendor_vvt_mapper.py

feat(tcf-vendors): GVL cache + vendor extraction + VVT mapping

2026-05-12 18:18:50 +02:00

vvt_service.py

refactor(backend/api): extract VVTService (Step 4 — file 5 of 18)

2026-04-07 19:50:40 +02:00

website_compliance_checks.py

fix: false positive findings + restore docs-src + §312k ecommerce filter

2026-05-02 08:26:59 +02:00

website_scanner.py

Merge feat/zeroclaw-compliance-agent into main

2026-05-11 11:44:20 +02:00