Binh
a1f5a59299
Extract the regulatory ISO control mapping from the Core into the Compliance Engine (src/compliance, server/compliance, tests/compliance). - Fix ISO mapping after the Result DB privacy merge: look up a finding's Result DB row scoped to its project instead of comparing a stripped project id. - Engine reads the Core only through ComplianceReadPort and writes only its own ComplianceStore (existing migration 026 tables, own pool); engine writes no longer advance the Core revision. - Engines popup gains Compliance Engine; switched off it shows nothing and sends no requests. Permanent on/off invariance test. - Map ISO controls opens a window like Accepted Risk; accepted controls appear as an ISO controls section in the Finding Reader and as tiles below the Context heatmap in Client Info (drill-down into Work). - First two proposals of a finished mapping are accepted automatically (provisional user decision); existing decisions are never overridden. - Activity log names Compliance Engine work, keeps running mappings, batches and corpus embedding until the backend ends them, and no longer logs repeated status checks. - Data Flow diagram shows the Compliance Engine. - Core guard treats a bare engine folder name as engine path; new guard area test. |
||
|---|---|---|
| .. | ||
| cis-cat | ||
| defender-for-iot | ||
| defender-for-iot-alerts | ||
| generic | ||
| group-policy | ||
| maester | ||
| pingcastle | ||
| public-search | ||
| purple-knight | ||
| common-normalization.ts | ||
| profile-catalog.ts | ||
| profile-definition-catalog.ts | ||
| profile-factory.ts | ||
| security-domain-mapping.ts | ||