This website requires JavaScript.
821c4ac5ec
test(jira): add JiraLink model and jira_service tests [FASE-1.1]
Kitos
2026-05-18 12:02:21 +02:00
abef2a45e0
fix: production detection only triggers on AEGIS_ENV=production, not SECRET_KEY presence
Kitos
2026-02-20 17:20:48 +01:00
309b3bc02d
docs: finalize ARCHITECTURE.md with complete layered structure and zero remaining tech debt
Kitos
2026-02-20 16:16:22 +01:00
0148bf28dc
chore: clean repo for public release, remove internal audit docs and plan artifacts, update README
Kitos
2026-02-20 16:15:26 +01:00
79a4772ab5
feat: make heatmap layers extensible via LayerRegistry (OCP)
Kitos
2026-02-20 16:07:36 +01:00
a9255e15ce
refactor: remove db.commit() from audit_service.log_action, all callers use UoW
Kitos
2026-02-20 15:33:23 +01:00
0c526c48f9
docs: update ARCHITECTURE.md, ARCHITECTURAL_ANALYSIS.md, and skill file with Tier 1-4 changes
Kitos
2026-02-20 15:14:07 +01:00
0d211d5156
feat: add ThreatActorEntity domain entity with coverage analysis (Tier 4)
Kitos
2026-02-20 15:02:38 +01:00
14d995b40c
refactor: remove db.commit() from business services, callers use UnitOfWork (Tier 3)
Kitos
2026-02-20 14:42:20 +01:00
339d669498
feat: move all remaining inline logic from routers to services (Tier 2)
Kitos
2026-02-20 14:34:24 +01:00
9e22fde746
feat: extract advanced_metrics, analytics, test_templates, and auth to services (Tier 1 complete)
Kitos
2026-02-20 14:28:52 +01:00
bbc2dddd86
docs: update ARCHITECTURE.md and ARCHITECTURAL_ANALYSIS.md to reflect all low-priority items completed (LP-8)
Kitos
2026-02-20 13:39:55 +01:00
d77075272e
feat: add ImportService protocol and registry for OCP-compliant import extensibility (LP-7)
Kitos
2026-02-20 13:31:18 +01:00
c0c6cda11d
feat: add Campaign/Compliance domain entities and extract users/audit/data_sources to services (LP-2 through LP-6)
Kitos
2026-02-20 13:28:14 +01:00
44621364be
docs: update ARCHITECTURAL_ANALYSIS.md to reflect all completed refactoring (service extractions, scoring persistence, logging, N+1 fixes)
Kitos
2026-02-20 12:55:26 +01:00
0eff48c768
docs: complete architectural refactoring tracker, create aegis-architecture skill for future agents
Kitos
2026-02-19 19:15:31 +01:00
764a2f7579
feat(logging): add structured JSON logging for production, human-readable text for development
Kitos
2026-02-19 19:07:08 +01:00
f4c74230ec
refactor(campaigns): extract CRUD/business logic to campaign_crud_service, use domain exceptions
Kitos
2026-02-19 19:04:32 +01:00
50b70704ae
refactor(evidence): extract permission validation and queries to evidence_service, use domain exceptions
Kitos
2026-02-19 19:02:36 +01:00
20738d11b3
refactor(tests): extract CRUD/query logic to test_crud_service, router delegates to service with domain exceptions
Kitos
2026-02-19 18:35:09 +01:00
4e3787d091
refactor(scoring): persist weights in DB table, replace mutable Settings with scoring_config_service
Kitos
2026-02-19 17:46:02 +01:00
93fde55389
refactor(threat-actors): extract query/business logic to threat_actor_service, fix N+1 with grouped subqueries
Kitos
2026-02-19 17:40:00 +01:00
560fc0c9f0
refactor(detection-rules): extract query/business logic to detection_rule_service, router is thin HTTP adapter
Kitos
2026-02-19 17:39:31 +01:00
d305db8794
refactor(compliance): extract business logic to compliance_service, use domain exceptions instead of HTTPException
Kitos
2026-02-19 17:06:32 +01:00
25fddad17c
refactor(metrics): extract query logic to metrics_query_service, thin down router to HTTP adapter
Kitos
2026-02-19 17:06:07 +01:00
8d5c5fa80e
refactor(reports): extract query and aggregation logic to coverage_report_service, fix N+1 test-count pattern
Kitos
2026-02-19 15:56:42 +01:00
42a9f4dcd4
refactor(status): consolidate status_service to delegate to TechniqueEntity.recalculate_status() eliminating duplicated business logic
Kitos
2026-02-19 15:23:01 +01:00
2b6d9090c9
refactor(techniques): wire TechniqueRepository into techniques router replacing direct db.query() with repo pattern, domain exceptions, and UnitOfWork
Kitos
2026-02-19 15:13:52 +01:00
0b65f51d1c
docs: update architecture analysis and tech debt docs to reflect resolved items
Kitos
2026-02-18 19:27:52 +01:00
f41b8fd8c2
fix(security): add username validation, constant-time login, default credential rejection, and tooling
Kitos
2026-02-18 19:11:14 +01:00
1521005b62
feat(infra): add repository implementations, mappers, FastAPI wiring, and technique indexes
Kitos
2026-02-18 19:10:50 +01:00
5c55e7c17f
feat(domain): add domain layer foundation -- enums, value objects, TechniqueEntity, repository ports
Kitos
2026-02-18 19:10:31 +01:00
e651ef8a8c
refactor(heatmap): extract business logic to dedicated service
Kitos
2026-02-18 16:09:51 +01:00
1338d52cd0
fix(workflow): enforce domain state machine in dual validation path
Kitos
2026-02-18 15:49:59 +01:00
576705d61d
refactor(workflow): delegate start_execution to TestEntity
Kitos
2026-02-18 15:29:36 +01:00
9e204b78ec
test: add TestEntity tests and fix test infrastructure (222 green)
Kitos
2026-02-18 15:29:24 +01:00
bc8025ffcf
fix(test-entity): resolve ValueError when coercing foreign TestState enum
Kitos
2026-02-18 14:06:39 +01:00
633c8e46ad
refactor(workflow): delegate transition_state to TestEntity
Kitos
2026-02-18 13:54:01 +01:00
611e10620e
refactor(domain): introduce domain exceptions boundary
Kitos
2026-02-18 13:44:47 +01:00
55dba1e00a
db: enforce unique constraint on test_detection_results
Kitos
2026-02-18 13:20:28 +01:00
6147abc87a
refactor(heatmap): extract business logic to dedicated service
Kitos
2026-02-18 13:14:41 +01:00
bfce1a8a0e
refactor(core): introduce Unit of Work and remove commits from services
Kitos
2026-02-18 12:51:55 +01:00
98e8ca1eef
perf(snapshot): remove N+1 queries in snapshot generation
Kitos
2026-02-18 12:22:24 +01:00
f0f59facdb
perf(scoring): eliminate N+1 in organization score calculation
Kitos
2026-02-18 12:18:48 +01:00
898bb7e4e7
perf(indexes): add critical indexes for Test and AuditLog models (P0)
Kitos
2026-02-18 12:12:54 +01:00
51c927394d
fix(models,db): delegate timestamps to DB server and configure connection pool
Kitos
2026-02-18 11:52:15 +01:00
a4a2adccee
feat(phase-39): role-based access control overhaul + forced password change
Kitos
2026-02-18 10:37:02 +01:00
8f764d8e39
fix: auto-detect kill chain phase when adding tests to custom campaigns
Kitos
2026-02-17 17:53:15 +01:00
222979574a
feat(phase-38): automatic intelligence — OSINT enrichment + stale coverage detection
Kitos
2026-02-17 17:47:47 +01:00
31e116b4ba
feat(phase-37): timer pause/resume + professional reporting engine
Kitos
2026-02-17 17:20:45 +01:00
febf460580
feat(phase-36): automatic Tempo time tracking via workflow buttons + fix campaign test management
Kitos
2026-02-17 16:59:19 +01:00
005a09b42f
fix(phase-35): use pure SQL for jira_links migration
Kitos
2026-02-17 16:33:42 +01:00
7e33746539
fix(phase-35): rewrite migration to avoid SQLAlchemy enum auto-create
Kitos
2026-02-17 16:22:43 +01:00
703dd891d3
fix(phase-35): prevent DuplicateObject on Alembic enum creation
Kitos
2026-02-17 16:12:12 +01:00
9b98f60a9a
feat(phase-35): Jira + Tempo integration with internal worklogs
Kitos
2026-02-17 15:57:39 +01:00
6d18a5417d
feat(phase-34): resolve blocking tech debt — Redis, domain exceptions, indexes, CI
Kitos
2026-02-17 15:43:05 +01:00
6a327f6b51
docs: update README with new security configuration, install wizard, and hardening details
Kitos
2026-02-11 09:16:48 +01:00
875d7b1a15
fix: upgrade axios to 1.13.5 to resolve DoS vulnerability
Kitos
2026-02-11 09:13:02 +01:00
64d64080e0
fix: resolve 20 security vulnerabilities from comprehensive audit
Kitos
2026-02-11 08:56:26 +01:00
e7e63161e8
fix: increase Nginx proxy timeout to 300s for long-running API calls
Kitos
2026-02-10 16:34:23 +01:00
38285f885c
fix: TypeScript errors blocking production build
Kitos
2026-02-10 16:18:34 +01:00
cc0bbdf797
fix: auto-detect Docker API version to avoid client/server mismatch
Kitos
2026-02-10 16:14:21 +01:00
de6f3fbea4
fix: install script cd to project root and improve error handling
Kitos
2026-02-10 16:10:09 +01:00
8aec3581a0
feat: production deployment setup and hardcoded URL fixes
Kitos
2026-02-10 16:04:16 +01:00
a3f83c316a
fix: D3FEND ontology-based import, template management UX, and branding
Kitos
2026-02-10 15:53:24 +01:00
c2e9c687f4
fix: D3FEND expandable cards, System page cleanup, and multi-source improvements
Kitos
2026-02-10 13:22:23 +01:00
8032b67fab
docs: add disclaimer about Cursor and Claude Opus 4.6 assistance
Kitos
2026-02-10 10:52:53 +01:00
14f8485f06
feat(phase-33): final polish V3 - navigation, performance, and documentation (T-238 to T-240)
Kitos
2026-02-10 09:21:35 +01:00
35983de67e
feat(phase-32): add automated tests V3 for data sources, scoring, campaigns and snapshots (T-235 to T-237)
Kitos
2026-02-10 09:07:43 +01:00
02034d60f0
feat(phase-31): add campaign scheduling and recurring automation (T-233 to T-234)
Kitos
2026-02-10 08:38:00 +01:00
4d124b42dd
feat(phase-30): add coverage snapshots, temporal comparison and auto re-testing (T-230 to T-232)
Kitos
2026-02-10 08:34:29 +01:00
2ac8e7f4a5
feat(phase-29): add compliance framework mapping, reports and UI (T-227 to T-229)
Kitos
2026-02-09 18:41:24 +01:00
12f33307fd
feat(phase-28): add scoring system, operational metrics and executive dashboard (T-224 to T-226)
Kitos
2026-02-09 17:24:44 +01:00
a911ddeb52
feat(phase-27): add advanced ATT&CK Navigator-style heatmap with layers, filters and export (T-221 to T-223)
Kitos
2026-02-09 17:16:59 +01:00
57b47c296d
feat(phase-26): add Campaign models, endpoints, service with kill chain timeline UI (T-217 to T-220)
Kitos
2026-02-09 16:52:52 +01:00
f4de12d8ab
feat(phase-25): add detection rule associations, checklist UI and evaluation workflow (T-215, T-216)
Kitos
2026-02-09 16:44:35 +01:00
cd124b655b
feat(phase-24): integrate MITRE D3FEND defensive techniques with ATT&CK mapping (T-213, T-214)
Kitos
2026-02-09 16:38:59 +01:00
2fc0e2cafd
feat(phase-23): add Threat Actor profiles with MITRE CTI import, API, heatmap and gap analysis (T-208 to T-212)
Kitos
2026-02-09 16:27:38 +01:00
f4c8cbf768
feat(phase-22): add import services for Sigma, LOLBAS, GTFOBins, CALDERA, Elastic and data sources panel (T-203 to T-207)
Kitos
2026-02-09 16:19:44 +01:00
022c4f2886
feat(phase-21): add V3 demo seed, DataSource and DetectionRule models (T-200, T-201, T-202)
Kitos
2026-02-09 16:06:44 +01:00
29eab4ef77
feat(phase-20): navigation, error handling, integration tests, and V2 docs (T-132 to T-135)
Kitos
2026-02-09 14:19:42 +01:00
9ea6ce1326
feat(phase-19): add remediation fields and reports system (T-130, T-131)
Kitos
2026-02-09 13:58:35 +01:00
fb7f340038
feat(phase-18): add in-app notification system (T-128, T-129)
Kitos
2026-02-09 13:52:04 +01:00
cda59de426
test(phase-17): add automated tests for Red/Blue workflow, templates CRUD, and V2 metrics (T-125, T-126, T-127)
Kitos
2026-02-09 13:35:40 +01:00
a95defcee4
feat(phase-16): enhanced Tests view, Red/Blue dashboard metrics, and Template admin panel (T-122, T-123, T-124)
Kitos
2026-02-09 13:00:07 +01:00
fd7f855008
feat(phase-15): add Test Catalog page, template instantiation, and auto-migration entrypoint (T-119, T-120, T-121)
Kitos
2026-02-09 12:22:29 +01:00
cea470053f
feat(phase-14): redesign Test Detail page with Red/Blue tabs and dual validation (T-115, T-116, T-117, T-118)
Kitos
2026-02-09 11:14:44 +01:00
d660bceeb4
feat(phase-13): update frontend types and API clients for Red/Blue workflow (T-113, T-114)
Kitos
2026-02-09 10:57:48 +01:00
9d7832c571
feat(phase-12): implement Red/Blue API endpoints (T-109, T-110, T-111, T-112)
Kitos
2026-02-09 10:45:33 +01:00
7af6be10be
feat(phase-11): implement Red/Blue business logic services (T-106, T-107, T-108)
Kitos
2026-02-09 09:58:54 +01:00
086cc5c8bc
fix: add .dockerignore files to exclude node_modules from build
Kitos
2026-02-06 16:59:50 +01:00
ce46314afb
feat: add complete Docker setup for testing
Kitos
2026-02-06 16:33:22 +01:00
174919da4e
feat(phase-9): implement MVP polishing and closure
Kitos
2026-02-06 16:30:35 +01:00
cb447f3803
feat: Phase 8 - Frontend main views (T-026 to T-031)
Kitos
2026-02-06 16:21:14 +01:00
591b5df250
feat: Phase 7 - Frontend scaffolding and auth (T-023, T-024, T-025)
Kitos
2026-02-06 16:09:50 +01:00
52d230628d
feat: Phase 6 - Automated intel scanning (T-021, T-022)
Kitos
2026-02-06 15:48:57 +01:00
abdb23be33
feat: Phase 5 - Metrics and dashboard API (T-020)
Kitos
2026-02-06 15:33:37 +01:00
b11854fdab
feat: Phase 4 - MITRE ATT&CK sync and scheduled job (T-018, T-019)
Kitos
2026-02-06 15:28:53 +01:00
4f6dd838fd
feat: Phase 3 - CRUD core for Techniques, Tests and Evidence (T-014 to T-017)
Kitos
2026-02-06 13:52:27 +01:00
508f0723af
feat: Phase 2 - Authentication and authorization (T-010 to T-013)
Kitos
2026-02-06 13:15:25 +01:00
Kitos