kitos 362a17aa1b feat(risk): Phase 12 — Risk Intelligence [FASE-12] ...

- TechniqueRiskProfile model: per-technique risk scoring (0-100)
- 4-factor weighted scoring: detection_gap(35%) + threat_actors(30%) + osint(20%) + test_failures(15%)
- Risk levels: critical(≥75) / high(≥50) / medium(≥25) / low(≥10) / info
- Detailed scoring_breakdown (JSONB) + actionable recommendations per technique
- Router /api/v1/risk: compute-all, compute-one, list, matrix, summary, recommendations, top
- Alembic migration b038risk (raw SQL, idempotent)
- QA script: 60+ tests across all endpoints

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-20 15:31:38 +02:00

..

__init__.py

feat: Phase 2 - Authentication and authorization (T-010 to T-013)

2026-02-06 13:15:25 +01:00

advanced_metrics.py

feat: extract advanced_metrics, analytics, test_templates, and auth to services (Tier 1 complete)

2026-02-20 14:28:52 +01:00

analytics.py

fix(analytics): restrict operators endpoint to admin [FASE-2.5]

2026-05-18 14:00:47 +02:00

attack_paths.py

feat(attack-paths): Phase 10 — Attack Paths & Advanced Purple Team [FASE-10]

2026-05-20 13:11:01 +02:00

audit.py

feat: add Campaign/Compliance domain entities and extract users/audit/data_sources to services (LP-2 through LP-6)

2026-02-20 13:28:14 +01:00

auth.py

fix(auth,frontend): secure cookie HTTP fix, technique links y CSP

2026-05-19 09:28:39 +02:00

campaigns.py

feat(phases): implement webhooks (6.1), email (7.1), user preferences (7.2)

2026-05-19 13:40:45 +02:00

compliance.py

refactor(compliance): extract business logic to compliance_service, use domain exceptions instead of HTTPException

2026-02-19 17:06:32 +01:00

d3fend.py

feat: move all remaining inline logic from routers to services (Tier 2)

2026-02-20 14:34:24 +01:00

data_sources.py

refactor: remove db.commit() from audit_service.log_action, all callers use UoW

2026-02-20 15:33:23 +01:00

detection_lifecycle.py

fix(detection-lifecycle): fix timezone naive/aware mismatch and duplicate technique mapping

2026-05-19 16:29:04 +02:00

detection_rules.py

refactor(detection-rules): extract query/business logic to detection_rule_service, router is thin HTTP adapter

2026-02-19 17:39:31 +01:00

evidence.py

feat(security): extend rate limits on sync, tests, evidence and reports [FASE-3.4]

2026-05-18 14:16:53 +02:00

heatmap.py

refactor(heatmap): extract business logic to dedicated service

2026-02-18 16:09:51 +01:00

jira.py

test(jira): add hourly sync job tests [FASE-1.7]

2026-05-18 13:33:40 +02:00

knowledge.py

fix(knowledge): use EntityNotFoundError/DuplicateEntityError instead of DomainError(status_code=)

2026-05-20 15:21:36 +02:00

metrics.py

refactor(metrics): extract query logic to metrics_query_service, thin down router to HTTP adapter

2026-02-19 17:06:07 +01:00

notifications.py

feat: move all remaining inline logic from routers to services (Tier 2)

2026-02-20 14:34:24 +01:00

operational_metrics.py

feat(phase-33): final polish V3 - navigation, performance, and documentation (T-238 to T-240)

2026-02-10 09:21:35 +01:00

osint.py

refactor: remove db.commit() from business services, callers use UnitOfWork (Tier 3)

2026-02-20 14:42:20 +01:00

ownership.py

feat(ownership): Phase 9 — Ownership & Daily Operations [FASE-9]

2026-05-19 16:48:47 +02:00

professional_reports.py

feat(security): extend rate limits on sync, tests, evidence and reports [FASE-3.4]

2026-05-18 14:16:53 +02:00

reports.py

refactor(reports): extract query and aggregation logic to coverage_report_service, fix N+1 test-count pattern

2026-02-19 15:56:42 +01:00

risk_intelligence.py

feat(risk): Phase 12 — Risk Intelligence [FASE-12]

2026-05-20 15:31:38 +02:00

scores.py

feat(scoring): composite recency decay and severity weights persisted in DB [FASE-5.1]

2026-05-18 15:07:12 +02:00

snapshots.py

feat(scoring): composite recency decay and severity weights persisted in DB [FASE-5.1]

2026-05-18 15:07:12 +02:00

system.py

feat(settings): Settings page with email, webhooks, notifications, profile [FASE-8]

2026-05-19 15:10:31 +02:00

techniques.py

refactor: remove db.commit() from audit_service.log_action, all callers use UoW

2026-02-20 15:33:23 +01:00

test_templates.py

feat: extract advanced_metrics, analytics, test_templates, and auth to services (Tier 1 complete)

2026-02-20 14:28:52 +01:00

tests.py

feat(phases): implement webhooks (6.1), email (7.1), user preferences (7.2)

2026-05-19 13:40:45 +02:00

threat_actors.py

refactor(threat-actors): extract query/business logic to threat_actor_service, fix N+1 with grouped subqueries

2026-02-19 17:40:00 +01:00

users.py

fix(users): add GET /users/me endpoint for current user profile

2026-05-19 14:04:42 +02:00

webhooks.py

feat(settings): Settings page with email, webhooks, notifications, profile [FASE-8]

2026-05-19 15:10:31 +02:00

worklogs.py

refactor: remove db.commit() from business services, callers use UnitOfWork (Tier 3)

2026-02-20 14:42:20 +01:00