DevEnv nis2-agileandClaude Opus 4.8 06c94b3c05 [REVISIONE] Progetto revisione conformità+UI + 2 agenti esperti + correzioni R3 (audit NIS2/ISO) ...

Progetto di revisione unificato (docs/PROGETTO_REVISIONE_NIS2.md) che fonde:
- docs/PRINCIPI_AI_E_CONFORMITA_NORMATIVA.md (cyber + AI Act/GDPR/L.132 + principi AI)
- docs/VERIFICA_GAP_UI_AGID_BOOTSTRAP_ITALIA.md (gap UI vs AGID/Bootstrap Italia)
Agenti esperti: .claude/agents/nis2-expert.md + iso-27001-expert.md (read-only/advisory).

Audit R1 (NIS2) + R2 (ISO SGSI) = conformi, riserve minori. Correzioni R3 applicate
(lint + login reale OK, app su container TLS):
- IncidentController: final_report_due +30gg fissi -> +1 mese calendario, ancorato alla
  notifica reale in sendNotification (Art.23.4 lett.d).
- AIService prompt "report 30d" -> "1 mese dalla notifica 72h".
- help.js: GV.SC Allegato 2 -> Allegati 1 e 2 (Art.21.2(d)).
- nis2_sources.php: esplicitato Allegato 3=importanti / 4=essenziali.
- IsmsModelController export: nota PII.* = codifica interna (non numeri ufficiali 27018).
A4 (label whistleblowing "Art.32") DEFERITO: cita Art.32 D.Lgs.138/2024, da verificare sul testo.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-12 09:54:14 +02:00

..

AcnAssessmentController.php

[FIX] Gap Analysis ACN: bug da review avversariale (4 agenti)

2026-06-01 12:18:25 +02:00

AdminController.php

[CORE] Initial project scaffold - NIS2 Agile Compliance Platform

2026-02-17 17:50:18 +01:00

AiController.php

[FEAT] AiController /api/ai/ask (ARIA) -> askWithRag + fix DNS Qdrant php-fpm

2026-05-29 18:55:44 +02:00

AssessmentController.php

[CORE] Initial project scaffold - NIS2 Agile Compliance Platform

2026-02-17 17:50:18 +01:00

AssetController.php

[FIX] P2: uniformato relevance_criteria - score() salva criteri piatti come bulkUpsert (finding review)

2026-05-30 11:45:17 +02:00

AuditController.php

[FEAT] Gap Analysis estesa ai requisiti ACN (specifiche di base 164179/2025)

2026-05-31 08:07:38 +02:00

AuthController.php

[FIX] Auth CRITICI da test multi-agente: register senza jti + revoca sessione singola

2026-05-31 15:01:22 +02:00

BaseController.php

[FEAT] Allineamento NIS2 ↔ TRPG (Fasi 1-5): SSO + Sessions + Reset + Impersonate + Branding

2026-05-29 13:18:35 +02:00

BrandingController.php

[FEAT] Allineamento NIS2 ↔ TRPG (Fasi 1-5): SSO + Sessions + Reset + Impersonate + Branding

2026-05-29 13:18:35 +02:00

ContactController.php

[FIX] MktgLeadController + ContactController: getRequestBody → getJsonBody

2026-03-09 12:19:21 +01:00

CrossAnalysisController.php

[FEAT] L4 AI Cross-Analysis — analisi aggregata multi-org per consulenti

2026-03-09 08:17:53 +01:00

DashboardController.php

[FIX] Test multi-agente: dashboard gauge + risks backToList/loadFair

2026-05-31 14:56:10 +02:00

FeedbackController.php

[FIX] FeedbackController/Service: u.name → u.full_name (colonna corretta)

2026-03-10 08:56:19 +01:00

IncidentController.php

[REVISIONE] Progetto revisione conformità+UI + 2 agenti esperti + correzioni R3 (audit NIS2/ISO)

2026-06-12 09:54:14 +02:00

index.php

[FEAT] Services API: full-snapshot endpoint + BigSim SSE wrapper

2026-03-17 15:16:00 +01:00

InviteController.php

[FIX] InviteController requireRole→requireSuperAdmin + OnboardingController add RateLimitService

2026-03-10 15:54:16 +01:00

IsmsModelController.php

[REVISIONE] Progetto revisione conformità+UI + 2 agenti esperti + correzioni R3 (audit NIS2/ISO)

2026-06-12 09:54:14 +02:00

KnowledgeBaseController.php

[FEAT] Knowledge Base RAG multi-livello (SYSTEM/FIRM/ORG) + Qdrant + Voyage

2026-05-29 15:44:13 +02:00

MktgLeadController.php

[FEAT] MktgLead getJsonBody + script import-feedback-to-nexus + seed demo agile-tech

2026-05-29 15:42:05 +02:00

NonConformityController.php

[FIX] ServicesController: query assessment_responses reale + NonConformityController: getPagination named keys

2026-03-09 10:22:40 +01:00

NormativeController.php

[FIX] Database::execute() → Database::query() in 5 controller

2026-03-07 16:49:58 +01:00

OnboardingController.php

[FIX] InviteController requireRole→requireSuperAdmin + OnboardingController add RateLimitService

2026-03-10 15:54:16 +01:00

OrganizationController.php

[FIX][SEC] Connettori: autorizzazione per-org + secret allowlist (findings review multi-agente)

2026-05-30 11:37:25 +02:00

PolicyController.php

[FIX] Policy: UNIQUE(policy_id,version) + diff LCS posizionale (findings review)

2026-05-30 11:39:38 +02:00

RiskController.php

[FIX] computeFair: validazione range input (no overflow DECIMAL, no negativi/NaN/vuln>1) - finding review

2026-05-30 12:15:13 +02:00

ServicesController.php

[FIX] P1 ingestion: retry su collisione incident_code + dedup race graceful + try/catch CCM (findings review)

2026-05-30 11:40:50 +02:00

SupplierPortalController.php

[FEAT] Fase 3 backend: portale fornitore OTP/magic-link (SupplierPortalController)

2026-05-31 17:40:20 +02:00

SupplyChainController.php

[FEAT] Fase 2 backend: campagne questionario (questionnaire_campaigns) + scadenze/ricorrenze

2026-05-31 17:14:24 +02:00

TrainingController.php

[CORE] Initial project scaffold - NIS2 Agile Compliance Platform

2026-02-17 17:50:18 +01:00

WebhookController.php

[FIX] Database::execute() → Database::query() in 5 controller

2026-03-07 16:49:58 +01:00

WhistleblowingController.php

[FIX] Database::execute() → Database::query() in 5 controller

2026-03-07 16:49:58 +01:00