-- Backfill ausschliesslich der abgeleiteten, indizierten Read-Model-Spalten
-- fuer bereits importierte Defender-CVEs. Originalfelder, Occurrence-JSON und
-- Importprovenienz bleiben unveraendert.

UPDATE assessor_finding_occurrences
SET
  result_type = 'vulnerability_finding',
  outcome_normalized = CASE
    WHEN outcome_normalized = 'unknown' THEN 'warning'
    ELSE outcome_normalized
  END
WHERE lower(btrim(tool_id)) = 'defender-for-iot-vulnerabilities';