From a8516efafcff34c7b20c84e832b96461149f3f5a Mon Sep 17 00:00:00 2001
From: DevEnv nis2-agile <dev@certisource.it>
Date: Wed, 29 Jul 2026 15:11:36 +0200
Subject: [PATCH] [FIX] Gestione Rischi #501: tabella requisiti a scorrimento
 verticale + filtro per classe soggetto

- Punto 1: la tabella 'Rischi dai requisiti del framework di sicurezza' e ora
  un riquadro a scorrimento verticale (max-height 60vh, header sticky) invece di
  allungare la pagina.
- Punto 2: elenca SOLO i requisiti applicabili alla classe del soggetto
  (importante -> Allegato 1, essenziale -> Allegato 2, Det. ACN 164179/2025);
  le righe non pertinenti non sono piu mostrate (prima solo attenuate).
- help.js allineato + cache-buster help.js?v=20260729b su 35 pagine; version.json 1.25.10.
- Punto 3 (rimozione sezione all-hazard) NON applicato: contraddice la decisione
  documentata nel #500 (copertura multirischio art.24 D.Lgs.138/2024) -> escalato.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
---
 public/admin/index.html            |  2 +-
 public/admin/organizations.html    |  2 +-
 public/admin/users.html            |  2 +-
 public/architecture.html           |  2 +-
 public/assessment.html             |  2 +-
 public/assets.html                 |  2 +-
 public/calendario.html             |  2 +-
 public/companies.html              |  2 +-
 public/competenze.html             |  2 +-
 public/connettori-discovery.html   |  2 +-
 public/controlli-periodici.html    |  2 +-
 public/cross-analysis.html         |  2 +-
 public/dashboard.html              |  2 +-
 public/guida.html                  |  2 +-
 public/incidents.html              |  2 +-
 public/integrazioniext.html        |  2 +-
 public/internal-audits.html        |  2 +-
 public/isms.html                   |  2 +-
 public/js/help.js                  |  2 +-
 public/kb.html                     |  2 +-
 public/management-review.html      |  2 +-
 public/misure-requisiti.html       |  2 +-
 public/normative.html              |  2 +-
 public/organigramma.html           |  2 +-
 public/policies.html               |  2 +-
 public/raci.html                   |  2 +-
 public/reports.html                |  2 +-
 public/review-schedule.html        |  2 +-
 public/risks.html                  | 20 ++++++++++++++++++--
 public/settings.html               |  2 +-
 public/stakeholder-activities.html |  2 +-
 public/stakeholders.html           |  2 +-
 public/supply-chain.html           |  2 +-
 public/training.html               |  2 +-
 public/version.json                |  2 +-
 public/whistleblowing.html         |  2 +-
 public/workflow.html               |  2 +-
 37 files changed, 54 insertions(+), 38 deletions(-)

diff --git a/public/admin/index.html b/public/admin/index.html
index 70f0a6c..0dcbb89 100644
--- a/public/admin/index.html
+++ b/public/admin/index.html
@@ -167,7 +167,7 @@
     <script src="/vendor/lucide/lucide.min.js"></script>
     <script src="/js/topnav-v3.js?v=20260729"></script>
     <script src="/js/i18n.js?v=20260729"></script>
-    <script src="/js/help.js?v=20260729"></script>
+    <script src="/js/help.js?v=20260729b"></script>
     <script>
         // ── Auth check ───────────────────────────────────────────
         if (!checkAuth()) throw new Error('Not authenticated');
diff --git a/public/admin/organizations.html b/public/admin/organizations.html
index 0ea15ea..3c45598 100644
--- a/public/admin/organizations.html
+++ b/public/admin/organizations.html
@@ -90,7 +90,7 @@
     <script src="/vendor/lucide/lucide.min.js"></script>
     <script src="/js/topnav-v3.js?v=20260729"></script>
     <script src="/js/i18n.js?v=20260729"></script>
-    <script src="/js/help.js?v=20260729"></script>
+    <script src="/js/help.js?v=20260729b"></script>
     <script>
         // ── Auth check ───────────────────────────────────────────
         if (!checkAuth()) throw new Error('Not authenticated');
diff --git a/public/admin/users.html b/public/admin/users.html
index cd3b7ae..d37627b 100644
--- a/public/admin/users.html
+++ b/public/admin/users.html
@@ -97,7 +97,7 @@
     <script src="/vendor/lucide/lucide.min.js"></script>
     <script src="/js/topnav-v3.js?v=20260729"></script>
     <script src="/js/i18n.js?v=20260729"></script>
-    <script src="/js/help.js?v=20260729"></script>
+    <script src="/js/help.js?v=20260729b"></script>
     <script>
         // ── Auth check ───────────────────────────────────────────
         if (!checkAuth()) throw new Error('Not authenticated');
diff --git a/public/architecture.html b/public/architecture.html
index 5157cb1..79a27b6 100644
--- a/public/architecture.html
+++ b/public/architecture.html
@@ -1127,7 +1127,7 @@
     <script src="/vendor/lucide/lucide.min.js"></script>
     <script src="/js/topnav-v3.js?v=20260729"></script>
     <script src="/js/i18n.js?v=20260729"></script>
-    <script src="/js/help.js?v=20260729"></script>
+    <script src="/js/help.js?v=20260729b"></script>
     <script>
         if (!checkAuth()) throw new Error('Not authenticated');
         loadSidebar();                 // = loadTopnavV3()
diff --git a/public/assessment.html b/public/assessment.html
index 454d2d5..f38d073 100644
--- a/public/assessment.html
+++ b/public/assessment.html
@@ -275,7 +275,7 @@
     <script src="/vendor/lucide/lucide.min.js"></script>
     <script src="/js/topnav-v3.js?v=20260729"></script>
     <script src="/js/i18n.js?v=20260729"></script>
-    <script src="/js/help.js?v=20260729"></script>
+    <script src="/js/help.js?v=20260729b"></script>
     <script>
         // ── Auth check ───────────────────────────────────────────
         if (!checkAuth()) throw new Error('Not authenticated');
diff --git a/public/assets.html b/public/assets.html
index e6a9831..ae853aa 100644
--- a/public/assets.html
+++ b/public/assets.html
@@ -382,7 +382,7 @@
     <script src="/vendor/lucide/lucide.min.js"></script>
     <script src="/js/topnav-v3.js?v=20260729"></script>
     <script src="/js/i18n.js?v=20260729"></script>
-    <script src="/js/help.js?v=20260729"></script>
+    <script src="/js/help.js?v=20260729b"></script>
     <script>
         // ── Auth & Init ─────────────────────────────────────────
         if (!checkAuth()) throw new Error('Not authenticated');
diff --git a/public/calendario.html b/public/calendario.html
index 77cbd22..2dc4e96 100644
--- a/public/calendario.html
+++ b/public/calendario.html
@@ -195,7 +195,7 @@
     <script src="/vendor/lucide/lucide.min.js"></script>
     <script src="/js/topnav-v3.js?v=20260729"></script>
     <script src="/js/i18n.js?v=20260729"></script>
-    <script src="/js/help.js?v=20260729"></script>
+    <script src="/js/help.js?v=20260729b"></script>
     <script>
     'use strict';
     /*
diff --git a/public/companies.html b/public/companies.html
index 4c2fc10..c5f6033 100644
--- a/public/companies.html
+++ b/public/companies.html
@@ -202,7 +202,7 @@
     <script src="/vendor/lucide/lucide.min.js"></script>
     <script src="/js/topnav-v3.js?v=20260729"></script>
     <script src="/js/i18n.js?v=20260729"></script>
-    <script src="/js/help.js?v=20260729"></script>
+    <script src="/js/help.js?v=20260729b"></script>
     <script>
         if (!checkAuth()) throw new Error('Not authenticated');
 
diff --git a/public/competenze.html b/public/competenze.html
index 0cbe874..3932fcb 100644
--- a/public/competenze.html
+++ b/public/competenze.html
@@ -197,7 +197,7 @@
     <script src="/vendor/lucide/lucide.min.js"></script>
     <script src="/js/topnav-v3.js?v=20260729"></script>
     <script src="/js/i18n.js?v=20260729"></script>
-    <script src="/js/help.js?v=20260729"></script>
+    <script src="/js/help.js?v=20260729b"></script>
     <script src="/js/competenze.js?v=20260627"></script>
     <script>
         function v3Icons() { if (window.lucide && lucide.createIcons) { try { lucide.createIcons(); } catch (e) {} } }
diff --git a/public/connettori-discovery.html b/public/connettori-discovery.html
index 0e11b67..bf40e13 100644
--- a/public/connettori-discovery.html
+++ b/public/connettori-discovery.html
@@ -103,7 +103,7 @@
     <script src="/vendor/lucide/lucide.min.js"></script>
     <script src="/js/topnav-v3.js?v=20260729"></script>
     <script src="/js/i18n.js?v=20260729"></script>
-    <script src="/js/help.js?v=20260729"></script>
+    <script src="/js/help.js?v=20260729b"></script>
     <script src="/js/connettori-discovery.js?v=20260627"></script>
     <script>
         if (typeof checkAuth === 'function' && !checkAuth()) {
diff --git a/public/controlli-periodici.html b/public/controlli-periodici.html
index 8c77192..f3db7bb 100644
--- a/public/controlli-periodici.html
+++ b/public/controlli-periodici.html
@@ -160,7 +160,7 @@
     <script src="/vendor/lucide/lucide.min.js"></script>
     <script src="/js/topnav-v3.js?v=20260729"></script>
     <script src="/js/i18n.js?v=20260729"></script>
-    <script src="/js/help.js?v=20260729"></script>
+    <script src="/js/help.js?v=20260729b"></script>
     <script>
     'use strict';
     /* Controlli periodici (control monitoring §9.1/A.8.16): controlli ricorrenti + esecuzioni (evidenza) + NC/AC. */
diff --git a/public/cross-analysis.html b/public/cross-analysis.html
index 04aeb0d..cdc1a5f 100644
--- a/public/cross-analysis.html
+++ b/public/cross-analysis.html
@@ -227,7 +227,7 @@
     <script src="/vendor/lucide/lucide.min.js"></script>
     <script src="/js/topnav-v3.js?v=20260729"></script>
     <script src="/js/i18n.js?v=20260729"></script>
-    <script src="/js/help.js?v=20260729"></script>
+    <script src="/js/help.js?v=20260729b"></script>
     <script>
     // ── Icone inline (Lucide stroke) usate nelle stringhe HTML generate dal JS.
     //    Renderizzate immediatamente (no createIcons re-run), self-host, niente sprite BI. ──
diff --git a/public/dashboard.html b/public/dashboard.html
index 7562b85..6bbd068 100644
--- a/public/dashboard.html
+++ b/public/dashboard.html
@@ -117,7 +117,7 @@
     <script src="/vendor/lucide/lucide.min.js"></script>
     <script src="/js/topnav-v3.js?v=20260729"></script>
     <script src="/js/i18n.js?v=20260729"></script>
-    <script src="/js/help.js?v=20260729"></script>
+    <script src="/js/help.js?v=20260729b"></script>
     <script src="/js/dashboard.js?v=20260724a"></script>
     <script>
         // ── Auth check ───────────────────────────────────────────
diff --git a/public/guida.html b/public/guida.html
index f026643..5321060 100644
--- a/public/guida.html
+++ b/public/guida.html
@@ -1182,7 +1182,7 @@
     <script src="/vendor/lucide/lucide.min.js"></script>
     <script src="/js/topnav-v3.js?v=20260729"></script>
     <script src="/js/i18n.js?v=20260729"></script>
-    <script src="/js/help.js?v=20260729"></script>
+    <script src="/js/help.js?v=20260729b"></script>
     <script>
         // La guida è accessibile anche da non autenticati (utile per onboarding)
         // ma se sei loggato carichi chrome + i18n normalmente. ZERO modifiche backend.
diff --git a/public/incidents.html b/public/incidents.html
index 38c8f4b..9b652c7 100644
--- a/public/incidents.html
+++ b/public/incidents.html
@@ -364,7 +364,7 @@
     <script src="/vendor/lucide/lucide.min.js"></script>
     <script src="/js/topnav-v3.js?v=20260729"></script>
     <script src="/js/i18n.js?v=20260729"></script>
-    <script src="/js/help.js?v=20260729"></script>
+    <script src="/js/help.js?v=20260729b"></script>
     <script>
         // ── Auth & Init ──────────────────────────────────────────────
         if (!checkAuth()) throw new Error('Not authenticated');
diff --git a/public/integrazioniext.html b/public/integrazioniext.html
index 7cf6fa7..ec261b7 100644
--- a/public/integrazioniext.html
+++ b/public/integrazioniext.html
@@ -936,7 +936,7 @@ curl -H <span class="str">"X-API-Key: nis2_TUA_CHIAVE"</span> \
 <script src="/vendor/lucide/lucide.min.js"></script>
 <script src="/js/topnav-v3.js?v=20260729"></script>
 <script src="/js/i18n.js?v=20260729"></script>
-<script src="/js/help.js?v=20260729"></script>
+<script src="/js/help.js?v=20260729b"></script>
 <script>
     if (!checkAuth()) throw new Error('Not authenticated');
     loadSidebar();                 // = loadTopnavV3()
diff --git a/public/internal-audits.html b/public/internal-audits.html
index b98f9a8..7f52298 100644
--- a/public/internal-audits.html
+++ b/public/internal-audits.html
@@ -165,7 +165,7 @@
     <script src="/vendor/lucide/lucide.min.js"></script>
     <script src="/js/topnav-v3.js?v=20260729"></script>
     <script src="/js/i18n.js?v=20260729"></script>
-    <script src="/js/help.js?v=20260729"></script>
+    <script src="/js/help.js?v=20260729b"></script>
     <script>
     'use strict';
     /*
diff --git a/public/isms.html b/public/isms.html
index d184e11..6401e7f 100644
--- a/public/isms.html
+++ b/public/isms.html
@@ -204,7 +204,7 @@
     <script src="/vendor/lucide/lucide.min.js"></script>
     <script src="/js/topnav-v3.js?v=20260729"></script>
     <script src="/js/i18n.js?v=20260729"></script>
-    <script src="/js/help.js?v=20260729"></script>
+    <script src="/js/help.js?v=20260729b"></script>
     <script src="/js/isms.js?v=20260627v3"></script>
     <script>
         // Icone Lucide della chrome + crumb/page-head statici. L'init dati e il wiring
diff --git a/public/js/help.js b/public/js/help.js
index 3b209f3..c2ad33d 100644
--- a/public/js/help.js
+++ b/public/js/help.js
@@ -606,7 +606,7 @@ const HelpSystem = (function () {
                     items: [
                         'La <strong>prima tabella</strong> elenca i rischi <strong>derivati dai requisiti</strong> del framework di sicurezza: ogni voce e\' il <strong>rischio di non conformita\'</strong> legato al mancato o parziale soddisfacimento di un requisito, <strong>non il requisito in se\'</strong>. E\' un elenco in <strong>sola lettura</strong>.',
                         'Il codice <strong>RSK-‹misura›Com.‹n›</strong> e\' una <strong>codifica interna di NIS2 Agile</strong>; ‹misura› (es. GV.OC-04) e\' il codice della misura del Framework Nazionale richiamato dalla Determinazione ACN 164179/2025. <strong>Non</strong> e\' un codice o numero ufficiale ACN.',
-                        'La colonna <strong>Conformita\'</strong> mostra lo stato di valutazione del requisito (Da valutare, Non conforme, Parziale, Conforme). I requisiti <strong>non applicabili alla tua classe</strong> (importante vs essenziale) sono mostrati in grigio.',
+                        'La colonna <strong>Conformita\'</strong> mostra lo stato di valutazione del requisito (Da valutare, Non conforme, Parziale, Conforme). La tabella elenca <strong>solo i requisiti applicabili alla tua classe</strong> (importante &rarr; Allegato 1, essenziale &rarr; Allegato 2 della Determinazione ACN 164179/2025): quelli non pertinenti non vengono mostrati. Se l\'elenco e\' lungo, il riquadro <strong>scorre verticalmente</strong> con l\'intestazione fissa.',
                         'La seconda tabella, <strong>Rischi aggiuntivi (approccio multirischio / all-hazard)</strong>, permette ai <strong>profili amministrativi</strong> (org_admin, super_admin) di aggiungere rischi non coperti da un singolo requisito (minacce fisiche, catena di fornitura, eventi naturali): copre l\'approccio multirischio richiesto dall\'art. 24 D.Lgs. 138/2024.',
                         'I profili <strong>Amministratore</strong>, <strong>Compliance Manager</strong> e <strong>super admin</strong> possono <strong>valutare</strong> ogni rischio-da-requisito con il pulsante <strong>Valuta</strong>: si impostano lo <strong>stato di conformità</strong>, la <strong>Probabilità</strong> e l\'<strong>Impatto</strong> (scala 1–5). La <strong>Probabilità</strong> è la probabilità che la minaccia si concretizzi <strong>sfruttando la carenza</strong> del requisito; l\'<strong>Impatto</strong> è l\'impatto della <strong>non conformità o del conseguente incidente</strong> — non la "probabilità del requisito". Il punteggio Rischio (Probabilità × Impatto) compare nella tabella e alimenta la matrice.'
                     ]
diff --git a/public/kb.html b/public/kb.html
index e152d57..24e4cc9 100644
--- a/public/kb.html
+++ b/public/kb.html
@@ -180,7 +180,7 @@
     <script src="/vendor/lucide/lucide.min.js"></script>
     <script src="/js/topnav-v3.js?v=20260729"></script>
     <script src="/js/i18n.js?v=20260729"></script>
-    <script src="/js/help.js?v=20260729"></script>
+    <script src="/js/help.js?v=20260729b"></script>
     <script src="/js/kb.js"></script>
     <script>
         // Gate auth + chrome come le altre pagine V3.
diff --git a/public/management-review.html b/public/management-review.html
index a99ca31..0269adc 100644
--- a/public/management-review.html
+++ b/public/management-review.html
@@ -152,7 +152,7 @@
     <script src="/vendor/lucide/lucide.min.js"></script>
     <script src="/js/topnav-v3.js?v=20260729"></script>
     <script src="/js/i18n.js?v=20260729"></script>
-    <script src="/js/help.js?v=20260729"></script>
+    <script src="/js/help.js?v=20260729b"></script>
     <script>
     'use strict';
     /*
diff --git a/public/misure-requisiti.html b/public/misure-requisiti.html
index 08ceafd..2859c53 100644
--- a/public/misure-requisiti.html
+++ b/public/misure-requisiti.html
@@ -180,7 +180,7 @@
     <script src="/vendor/lucide/lucide.min.js"></script>
     <script src="/js/topnav-v3.js?v=20260729"></script>
     <script src="/js/i18n.js?v=20260729"></script>
-    <script src="/js/help.js?v=20260729"></script>
+    <script src="/js/help.js?v=20260729b"></script>
     <script>
     'use strict';
     /*
diff --git a/public/normative.html b/public/normative.html
index b386f27..a900095 100644
--- a/public/normative.html
+++ b/public/normative.html
@@ -142,7 +142,7 @@
     <script src="/vendor/lucide/lucide.min.js"></script>
     <script src="/js/topnav-v3.js?v=20260729"></script>
     <script src="/js/i18n.js?v=20260729"></script>
-    <script src="/js/help.js?v=20260729"></script>
+    <script src="/js/help.js?v=20260729b"></script>
     <script>
         // ── Auth + chrome + i18n + help ──────────────────────────
         if (!checkAuth()) throw new Error('Not authenticated');
diff --git a/public/organigramma.html b/public/organigramma.html
index 3a46213..8d7e5fc 100644
--- a/public/organigramma.html
+++ b/public/organigramma.html
@@ -156,7 +156,7 @@
     <script src="/vendor/lucide/lucide.min.js"></script>
     <script src="/js/topnav-v3.js?v=20260729"></script>
     <script src="/js/i18n.js?v=20260729"></script>
-    <script src="/js/help.js?v=20260729"></script>
+    <script src="/js/help.js?v=20260729b"></script>
     <script src="/js/organigramma.js?v=20260627"></script>
     <script>
         // Render icone Lucide (chrome + crumb + bottoni). organigramma.js fa render albero
diff --git a/public/policies.html b/public/policies.html
index a4566b7..e95fa94 100644
--- a/public/policies.html
+++ b/public/policies.html
@@ -345,7 +345,7 @@
     <script src="/vendor/lucide/lucide.min.js"></script>
     <script src="/js/topnav-v3.js?v=20260729"></script>
     <script src="/js/i18n.js?v=20260729"></script>
-    <script src="/js/help.js?v=20260729"></script>
+    <script src="/js/help.js?v=20260729b"></script>
     <script>
         // ── Auth & Init ─────────────────────────────────────────
         if (!checkAuth()) throw new Error('Not authenticated');
diff --git a/public/raci.html b/public/raci.html
index 36aeebe..5ed7c7b 100644
--- a/public/raci.html
+++ b/public/raci.html
@@ -146,7 +146,7 @@
     <script src="/vendor/lucide/lucide.min.js"></script>
     <script src="/js/topnav-v3.js?v=20260729"></script>
     <script src="/js/i18n.js?v=20260729"></script>
-    <script src="/js/help.js?v=20260729"></script>
+    <script src="/js/help.js?v=20260729b"></script>
     <script src="/js/raci.js?v=20260627"></script>
     <script>
         function v3Icons() { if (window.lucide && lucide.createIcons) { try { lucide.createIcons(); } catch (e) {} } }
diff --git a/public/reports.html b/public/reports.html
index fb82e2b..66dde54 100644
--- a/public/reports.html
+++ b/public/reports.html
@@ -237,7 +237,7 @@
     <script src="/vendor/lucide/lucide.min.js"></script>
     <script src="/js/topnav-v3.js?v=20260729"></script>
     <script src="/js/i18n.js?v=20260729"></script>
-    <script src="/js/help.js?v=20260729"></script>
+    <script src="/js/help.js?v=20260729b"></script>
     <script>
         // ── Auth & Init ─────────────────────────────────────────
         if (!checkAuth()) throw new Error('Not authenticated');
diff --git a/public/review-schedule.html b/public/review-schedule.html
index 25b1958..89131a4 100644
--- a/public/review-schedule.html
+++ b/public/review-schedule.html
@@ -162,7 +162,7 @@
     <script src="/vendor/lucide/lucide.min.js"></script>
     <script src="/js/topnav-v3.js?v=20260729"></script>
     <script src="/js/i18n.js?v=20260729"></script>
-    <script src="/js/help.js?v=20260729"></script>
+    <script src="/js/help.js?v=20260729b"></script>
     <script>
     'use strict';
     /*
diff --git a/public/risks.html b/public/risks.html
index 94ef422..1659ce1 100644
--- a/public/risks.html
+++ b/public/risks.html
@@ -298,6 +298,18 @@
             .filters-bar { flex-direction: column; align-items: stretch; }
             .filters-bar .form-select { min-width: 100%; }
         }
+
+        /* Requisiti del framework: riquadro a scorrimento verticale (ticket #501/1) */
+        #view-derived .table-container.scroll-box {
+            max-height: 60vh;
+            overflow-y: auto;
+        }
+        #view-derived .table-container.scroll-box thead th {
+            position: sticky;
+            top: 0;
+            background: var(--gray-50);
+            z-index: 2;
+        }
     </style>
   <!-- PWA:start -->
   <link rel="manifest" href="/manifest.webmanifest">
@@ -354,7 +366,7 @@
                         <span data-i18n="risks.derived_code_legend">RSK-‹misura›Com.‹n› è una codifica interna di NIS2 Agile; ‹misura› (es. GV.OC-04) è il codice della misura del Framework Nazionale richiamato dalla Determinazione ACN 164179/2025. Elenco in sola lettura.</span>
                     </p>
                     <div class="card">
-                        <div class="table-container">
+                        <div class="table-container scroll-box">
                             <table>
                                 <thead>
                                     <tr>
@@ -492,7 +504,7 @@
     <script src="/vendor/lucide/lucide.min.js"></script>
     <script src="/js/topnav-v3.js?v=20260729"></script>
     <script src="/js/i18n.js?v=20260729"></script>
-    <script src="/js/help.js?v=20260729"></script>
+    <script src="/js/help.js?v=20260729b"></script>
     <script>
         // ── Auth & Init ──────────────────────────────────────────────
         if (!checkAuth()) throw new Error('Not authenticated');
@@ -625,6 +637,10 @@
         function renderDerivedTable(rows) {
             const tbody = document.getElementById('derived-table-body');
             const colspan = 8 + (canEvaluate ? 1 : 0);
+            // Ticket #501/2: mostra SOLO i requisiti applicabili alla classe del soggetto
+            // (importante → Allegato 1, essenziale → Allegato 2 della Det. ACN 164179/2025).
+            // Le righe non applicabili non vengono più elencate (prima erano solo attenuate).
+            rows = (rows || []).filter(isDerivedApplicable);
             if (!rows || rows.length === 0) {
                 tbody.innerHTML = `
                     <tr><td colspan="${colspan}">
diff --git a/public/settings.html b/public/settings.html
index 98459fc..551c37f 100644
--- a/public/settings.html
+++ b/public/settings.html
@@ -740,7 +740,7 @@
     <script src="/vendor/lucide/lucide.min.js"></script>
     <script src="/js/topnav-v3.js?v=20260729"></script>
     <script src="/js/i18n.js?v=20260729"></script>
-    <script src="/js/help.js?v=20260729"></script>
+    <script src="/js/help.js?v=20260729b"></script>
     <script>
         // ── Auth check ───────────────────────────────────────────
         if (!checkAuth()) throw new Error('Not authenticated');
diff --git a/public/stakeholder-activities.html b/public/stakeholder-activities.html
index 9e7517f..1654cec 100644
--- a/public/stakeholder-activities.html
+++ b/public/stakeholder-activities.html
@@ -220,7 +220,7 @@
     <script src="/vendor/lucide/lucide.min.js"></script>
     <script src="/js/topnav-v3.js?v=20260729"></script>
     <script src="/js/i18n.js?v=20260729"></script>
-    <script src="/js/help.js?v=20260729"></script>
+    <script src="/js/help.js?v=20260729b"></script>
     <script>
     'use strict';
     /*
diff --git a/public/stakeholders.html b/public/stakeholders.html
index c5c0f1f..d1bf1e4 100644
--- a/public/stakeholders.html
+++ b/public/stakeholders.html
@@ -215,7 +215,7 @@
     <script src="/vendor/lucide/lucide.min.js"></script>
     <script src="/js/topnav-v3.js?v=20260729"></script>
     <script src="/js/i18n.js?v=20260729"></script>
-    <script src="/js/help.js?v=20260729"></script>
+    <script src="/js/help.js?v=20260729b"></script>
     <script>
     'use strict';
     /*
diff --git a/public/supply-chain.html b/public/supply-chain.html
index d89c851..1a27213 100644
--- a/public/supply-chain.html
+++ b/public/supply-chain.html
@@ -547,7 +547,7 @@
     <script src="/vendor/lucide/lucide.min.js"></script>
     <script src="/js/topnav-v3.js?v=20260729"></script>
     <script src="/js/i18n.js?v=20260729"></script>
-    <script src="/js/help.js?v=20260729"></script>
+    <script src="/js/help.js?v=20260729b"></script>
     <script>
         // ── Auth & Init ─────────────────────────────────────────
         if (!checkAuth()) throw new Error('Not authenticated');
diff --git a/public/training.html b/public/training.html
index 77a0133..be1bd2c 100644
--- a/public/training.html
+++ b/public/training.html
@@ -195,7 +195,7 @@
     <script src="/vendor/lucide/lucide.min.js"></script>
     <script src="/js/topnav-v3.js?v=20260729"></script>
     <script src="/js/i18n.js?v=20260729"></script>
-    <script src="/js/help.js?v=20260729"></script>
+    <script src="/js/help.js?v=20260729b"></script>
     <script>
         // ── Auth & Init (ordine V3) ─────────────────────────────
         if (!checkAuth()) throw new Error('Not authenticated');
diff --git a/public/version.json b/public/version.json
index fb8c637..69b6c5c 100644
--- a/public/version.json
+++ b/public/version.json
@@ -1 +1 @@
-{"version": "1.25.9", "build": "2026-07-29-v1.25.9", "date": "2026-07-29", "changelog": "Nuovo: Cruscotto Studio (per consulenti e societa' di consulenza). Dalla voce di menu 'Le mie aziende' vedi in un colpo solo tutte le aziende che gestisci con la loro compliance, rischi e incidenti aperti, e soprattutto le SCADENZE GENERALI aggregate di TUTTE le aziende ordinate per data (in ritardo / in arrivo). Clic su un'azienda per entrarci. Visibile ai profili consulente e amministratore."}
+{"version": "1.25.10", "build": "2026-07-29-v1.25.10", "date": "2026-07-29", "changelog": "Gestione Rischi: la tabella 'Rischi dai requisiti del framework di sicurezza' ora scorre verticalmente (riquadro a scorrimento con intestazione fissa) invece di allungare la pagina, e mostra SOLO i requisiti applicabili alla classe del soggetto (importante -> Allegato 1, essenziale -> Allegato 2 della Determinazione ACN 164179/2025): i requisiti non pertinenti non compaiono piu."}
diff --git a/public/whistleblowing.html b/public/whistleblowing.html
index 637e254..5ab3851 100644
--- a/public/whistleblowing.html
+++ b/public/whistleblowing.html
@@ -263,7 +263,7 @@
     <script src="/vendor/lucide/lucide.min.js"></script>
     <script src="/js/topnav-v3.js?v=20260729"></script>
     <script src="/js/i18n.js?v=20260729"></script>
-    <script src="/js/help.js?v=20260729"></script>
+    <script src="/js/help.js?v=20260729b"></script>
     <script>
         if (!checkAuth()) throw new Error('Not authenticated');
         loadSidebar();
diff --git a/public/workflow.html b/public/workflow.html
index 9b87974..42fd064 100644
--- a/public/workflow.html
+++ b/public/workflow.html
@@ -148,7 +148,7 @@
     <script src="/vendor/lucide/lucide.min.js"></script>
     <script src="/js/topnav-v3.js?v=20260729"></script>
     <script src="/js/i18n.js?v=20260729"></script>
-    <script src="/js/help.js?v=20260729"></script>
+    <script src="/js/help.js?v=20260729b"></script>
     <script>
     // ── Auth + chrome + i18n + help ──────────────────────────────
     if (!checkAuth()) throw new Error('Not authenticated');