Aegis

kitos/Aegis

Fork 0

Commit Graph

Author	SHA1	Message	Date
kitos	f97b9e96b7	fix(migration): rewrite b035 with raw SQL to avoid SQLAlchemy DDL hook Some checks failed Aegis CI / lint-and-test (push) Has been cancelled Details SQLAlchemy fires before_create for ALL known enum types when any table is created via op.create_table, causing DuplicateObject even with create_type=False. Rewrite both CREATE TABLE statements as raw SQL via conn.execute(sa.text(...)) and use CREATE TABLE IF NOT EXISTS / CREATE INDEX IF NOT EXISTS for full idempotency. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-19 16:54:32 +02:00
kitos	36fe4aa250	fix(migration): use DO/EXCEPTION for idempotent enum creation in b035 Some checks failed Aegis CI / lint-and-test (push) Has been cancelled Details Replace _enum_exists() helper (which had connection context issues in Alembic) with PostgreSQL DO $$ BEGIN ... EXCEPTION WHEN duplicate_object THEN NULL; END $$ blocks, which are truly idempotent regardless of transaction state. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-19 16:51:22 +02:00
kitos	a8b4518485	feat(ownership): Phase 9 — Ownership & Daily Operations [FASE-9] Some checks failed Aegis CI / lint-and-test (push) Has been cancelled Details Backend: - TechniqueOwnership model: per-technique owner, backup owner, team - RevalidationQueueItem model: prioritised analyst work queue (critical/high/medium/low, reasons: validation_expired/infra_change/ osint_alert/mitre_update/rule_modified/low_confidence/manual) - Migration b035ownerq: creates technique_ownerships and revalidation_queue_items tables with full indexes Services: - ownership_service: set/get technique ownership, bulk assign by tactic or platform, orphan reports for techniques and assets - revalidation_queue_service: smart queue generation (scans expired validations, low-confidence techniques, recent infra changes), list/create/update queue items, analyst dashboard Router /api/v1/ownership: GET/PUT /ownership/techniques/{id} — technique ownership PATCH /ownership/assets/{id} — asset ownership GET /ownership/orphans/techniques — orphan report GET /ownership/orphans/assets — orphan report POST /ownership/bulk-assign — bulk by tactic/platform GET/POST /ownership/queue — revalidation queue CRUD PATCH /ownership/queue/{id} — update item status/assignee POST /ownership/queue/generate — scan & generate items GET /ownership/analyst-dashboard — personalised daily view Scheduler: queue_generation job daily at 02:30 (after decay engine) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-19 16:48:47 +02:00

Author

SHA1

Message

Date

kitos

f97b9e96b7

fix(migration): rewrite b035 with raw SQL to avoid SQLAlchemy DDL hook

Aegis CI / lint-and-test (push) Has been cancelled

Details

SQLAlchemy fires before_create for ALL known enum types when any table
is created via op.create_table, causing DuplicateObject even with
create_type=False. Rewrite both CREATE TABLE statements as raw SQL via
conn.execute(sa.text(...)) and use CREATE TABLE IF NOT EXISTS / CREATE
INDEX IF NOT EXISTS for full idempotency.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-19 16:54:32 +02:00

kitos

36fe4aa250

fix(migration): use DO/EXCEPTION for idempotent enum creation in b035

Aegis CI / lint-and-test (push) Has been cancelled

Details

Replace _enum_exists() helper (which had connection context issues in
Alembic) with PostgreSQL DO $$ BEGIN ... EXCEPTION WHEN duplicate_object
THEN NULL; END $$ blocks, which are truly idempotent regardless of
transaction state.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-19 16:51:22 +02:00

kitos

a8b4518485

feat(ownership): Phase 9 — Ownership & Daily Operations [FASE-9]

Aegis CI / lint-and-test (push) Has been cancelled

Details

Backend:
- TechniqueOwnership model: per-technique owner, backup owner, team
- RevalidationQueueItem model: prioritised analyst work queue
  (critical/high/medium/low, reasons: validation_expired/infra_change/
   osint_alert/mitre_update/rule_modified/low_confidence/manual)
- Migration b035ownerq: creates technique_ownerships and
  revalidation_queue_items tables with full indexes

Services:
- ownership_service: set/get technique ownership, bulk assign by tactic
  or platform, orphan reports for techniques and assets
- revalidation_queue_service: smart queue generation (scans expired
  validations, low-confidence techniques, recent infra changes),
  list/create/update queue items, analyst dashboard

Router /api/v1/ownership:
  GET/PUT /ownership/techniques/{id}   — technique ownership
  PATCH   /ownership/assets/{id}       — asset ownership
  GET     /ownership/orphans/techniques — orphan report
  GET     /ownership/orphans/assets     — orphan report
  POST    /ownership/bulk-assign        — bulk by tactic/platform
  GET/POST /ownership/queue             — revalidation queue CRUD
  PATCH   /ownership/queue/{id}         — update item status/assignee
  POST    /ownership/queue/generate     — scan & generate items
  GET     /ownership/analyst-dashboard  — personalised daily view

Scheduler: queue_generation job daily at 02:30 (after decay engine)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-19 16:48:47 +02:00

3 Commits