feat(classification): org data classification scheme, tactic-based initial default, operator edit rights

backend/app/domain/enums.py

@@ -91,13 +91,16 @@ class AttackSuccessResult(str, enum.Enum):
 
 # Define class DataClassification
 class DataClassification(str, enum.Enum):
-    """Data sensitivity classification levels for compliance and retention policies."""
+    """Data sensitivity classification levels for compliance and retention policies.
 
-    # Assign public = "public"
-    public = "public"
-    # Assign internal = "internal"
-    internal = "internal"
-    # Assign sensitive = "sensitive"
-    sensitive = "sensitive"
-    # Assign restricted = "restricted"
+    Matches the organization's data protection scheme:
+    - public_release: approved for external/public release
+    - general_use: general internal information, no special restriction
+    - confidential: internal use only, or shared with trusted people
+    - restricted: trusted people, customer content, and/or PII
+    """
+
+    public_release = "public_release"
+    general_use = "general_use"
+    confidential = "confidential"
     restricted = "restricted"