Assessor_2.0/server/postgres
Binh d26b672e2c feat(compliance): direct BSI mapping, ISO/BSI review and hybrid search
Release 2.23.0 (Phase 13F, BSI Grundschutz++ stage 2).

- Map rules directly to BSI Kernel requirements from a dedicated BSI
  corpus in Qdrant; mappings and decisions carry a framework
  (migration 029, verified backup before applying).
- Compare directly accepted BSI requirements with those derived from
  accepted ISO controls (Consistent / Inconsistent / No ISO reference)
  in a new "ISO <-> BSI review" tile in the Client Info Compliance tab,
  with Accept/Reject and "Mark reviewed" per fingerprint.
- Hybrid retrieval for ISO and BSI: German restatement of the public
  query, dense English + dense German + German BM25 fused by
  reciprocal rank; BSI skips BES/DLS/GEB/PERS and sends 16 candidates.
- ISO prompt 1.3.0 gives the model the full ISO/IEC 27002 control text
  (never sent to the browser).
- Auto-accept only the first two strong proposals (primary, high or
  medium confidence).
- Recognize Purple Knight scoped tool ids and SI indicator ids in the
  mapping query.
- Rename Result DB "Map all ISO controls" to "Compliance mapping" with
  ISO and BSI batches; "Mapping history" lists ISO and BSI runs.
- Data Hub BSI tile shows the BSI search index state and can build or
  rebuild it.
- Update AGENTS.md and the implementation plan with these decisions.
2026-10-09 13:40:15 +02:00
..
migrations feat(compliance): direct BSI mapping, ISO/BSI review and hybrid search 2026-10-09 13:40:15 +02:00
migration-catalog.ts feat(compliance): direct BSI mapping, ISO/BSI review and hybrid search 2026-10-09 13:40:15 +02:00
migration-runner.ts Initial import 2026-08-24 09:16:16 +02:00
postgres-assessor-repository.ts feat(compliance): direct BSI mapping, ISO/BSI review and hybrid search 2026-10-09 13:40:15 +02:00
revision-read-cache.ts Business Impact + Management Report 2026-10-04 19:58:04 +02:00
sql.d.ts Initial import 2026-08-24 09:16:16 +02:00