7d721a6787
CI / go-lint (push) Has been skipped
CI / python-lint (push) Has been skipped
CI / nodejs-lint (push) Has been skipped
CI / test-go-consent (push) Successful in 40s
CI / test-python-voice (push) Successful in 36s
CI / test-bqas (push) Successful in 33s
Clean-Room derivation of 195 controls from BSI QUAIDAL (10 criteria + 15 building blocks + 30 measures + 140 metrics) for EU AI Act Art. 10 training-data quality compliance. - ingest_bsi_quaidal.py parses YAML frontmatter into a structural index (no protected prose stored on disk). - derive_quaidal_mcs.py rewrites each entry via local LLM (qwen3.5:35b-a3b) with a hard 4-gram plagiarism gate < 20%; achieved mean overlap 0.5%. - Migration 011 adds compliance.derived_controls table with full source provenance (framework, section, url, commit SHA, license note). - apply_quaidal_to_db.py UPSERTs YAML into DB. - Source repo (legal-sources/bsi-quaidal/) gitignored. Same pattern as IACE module DIN-reference handling: name the norm and section, never quote. Backed by BSI license clarification 2026-05: § 5 UrhG anwendbar, share:true im Frontmatter; Clean-Room derivation is the safe path. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
74 lines
810 B
Plaintext
74 lines
810 B
Plaintext
# Environment
|
|
.env
|
|
.env.local
|
|
.env.backup
|
|
|
|
# Secrets
|
|
secrets/
|
|
*.pem
|
|
*.key
|
|
.mcp.json
|
|
|
|
# Node
|
|
node_modules/
|
|
.next/
|
|
|
|
# Python
|
|
__pycache__/
|
|
*.pyc
|
|
venv/
|
|
.venv/
|
|
|
|
# Docker
|
|
backups/*.backup
|
|
|
|
# IDE
|
|
.idea/
|
|
.vscode/
|
|
*.swp
|
|
*.swo
|
|
.DS_Store
|
|
|
|
# Logs
|
|
*.log
|
|
|
|
# Large files
|
|
*.pdf
|
|
*.docx
|
|
*.xlsx
|
|
*.pptx
|
|
*.mp4
|
|
*.mp3
|
|
*.wav
|
|
|
|
# Cloned external legal-source repos (gitignored; pulled fresh at ingest time)
|
|
legal-sources/bsi-quaidal/
|
|
legal-sources/bsi-quaidal-src/
|
|
legal-sources/bsi-grundschutz-plus/
|
|
|
|
# Compiled binaries
|
|
billing-service/billing-service
|
|
consent-service/server
|
|
*.exe
|
|
*.dll
|
|
*.so
|
|
*.dylib
|
|
|
|
# Large files
|
|
*.zip
|
|
*.gz
|
|
*.tar
|
|
*.sql.gz
|
|
*.pdf
|
|
*.docx
|
|
*.xlsx
|
|
*.pptx
|
|
|
|
# Coverage
|
|
coverage/
|
|
*.coverage
|
|
controls_backup_*.dump
|
|
|
|
# Allow Finanzplan exports (generated by pitch-deck/scripts/export-finanzplan.sh)
|
|
!pitch-deck/exports/*.xlsx
|