Binh
6a784a7626
Release 2.23.0 (Phase 13F, BSI Grundschutz++ stage 2). - Map rules directly to BSI Kernel requirements from a dedicated BSI corpus in Qdrant; mappings and decisions carry a framework (migration 029, verified backup before applying). - Compare directly accepted BSI requirements with those derived from accepted ISO controls (Consistent / Inconsistent / No ISO reference) in a new "ISO <-> BSI review" tile in the Client Info Compliance tab, with Accept/Reject and "Mark reviewed" per fingerprint. - Hybrid retrieval for ISO and BSI: German restatement of the public query, dense English + dense German + German BM25 fused by reciprocal rank; BSI skips BES/DLS/GEB/PERS and sends 16 candidates. - ISO prompt 1.3.0 gives the model the full ISO/IEC 27002 control text (never sent to the browser). - Auto-accept only the first two strong proposals (primary, high or medium confidence). - Recognize Purple Knight scoped tool ids and SI indicator ids in the mapping query. - Rename Result DB "Map all ISO controls" to "Compliance mapping" with ISO and BSI batches; "Mapping history" lists ISO and BSI runs. - Data Hub BSI tile shows the BSI search index state and can build or rebuild it. - Update AGENTS.md and the implementation plan with these decisions. |
||
|---|---|---|
| .. | ||
| ai | ||
| artifacts | ||
| compliance | ||
| gpo | ||
| postgres | ||
| reference-data | ||
| remediation | ||
| reporting | ||
| assessor-http-server.ts | ||
| import-executor.ts | ||
| import-worker-client.ts | ||
| import-worker.ts | ||
| index.ts | ||
| node-import-runtime-adapters.ts | ||
| repository-factory.ts | ||