DevEnv nis2-agileandClaude Opus 4.8 8a8045904b [FEAT] #384 p.5 — allegati file su Policy (sezione Allegati nel dettaglio) + allowlist server-side upload evidenze ...

- policies.html: sezione 'Allegati' nel dettaglio policy (Bootstrap Italia card),
  upload (entity_type=policy) via /api/audit/evidence/upload, lista con download/autore/data
- AuditController::uploadEvidence: allowlist estensioni server-side (anti stored-XSS same-origin)
- version.json -> 1.23.5

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-18 19:00:01 +02:00

..

AdminController.php

[CORE] Initial project scaffold - NIS2 Agile Compliance Platform

2026-02-17 17:50:18 +01:00

AiController.php

[FEAT] AiController /api/ai/ask (ARIA) -> askWithRag + fix DNS Qdrant php-fpm

2026-05-29 18:55:44 +02:00

AssessmentController.php

[CORE] Initial project scaffold - NIS2 Agile Compliance Platform

2026-02-17 17:50:18 +01:00

AssetController.php

[FEAT] Epic C / C4 — inventario a 2 voci + sottoclassi configurabili (mig.050)

2026-06-16 19:59:35 +02:00

AuditController.php

[FEAT] #384 p.5 — allegati file su Policy (sezione Allegati nel dettaglio) + allowlist server-side upload evidenze

2026-06-18 19:00:01 +02:00

AuthController.php

[FIX] Auth CRITICI da test multi-agente: register senza jti + revoca sessione singola

2026-05-31 15:01:22 +02:00

BaseController.php

[DEMO] Avatar prodotto: read-only guard (BaseController) + seeder dataset demo 996001/996002

2026-06-13 08:19:53 +02:00

BrandingController.php

[FEAT] Allineamento NIS2 ↔ TRPG (Fasi 1-5): SSO + Sessions + Reset + Impersonate + Branding

2026-05-29 13:18:35 +02:00

CalendarController.php

[FEAT] Modulo Controlli periodici (control monitoring §9.1/A.8.16) — v1.23.0

2026-06-17 09:21:03 +02:00

CompetenceController.php

[FEAT] A4 Fase 4.2 — Competenze (skill/requisiti ruolo/gap) + alert→azione NCR+CAPA

2026-06-15 19:01:32 +02:00

ContactController.php

[FIX] MktgLeadController + ContactController: getRequestBody → getJsonBody

2026-03-09 12:19:21 +01:00

CrossAnalysisController.php

[FEAT] L4 AI Cross-Analysis — analisi aggregata multi-org per consulenti

2026-03-09 08:17:53 +01:00

DashboardController.php

[FIX] Test multi-agente: dashboard gauge + risks backToList/loadFair

2026-05-31 14:56:10 +02:00

DemoController.php

[DEMO] Sottodominio: DEMO_BASE -> nis2.dimostrazione.agile.software + origin allowlist postMessage

2026-06-13 10:31:46 +02:00

FeedbackController.php

[FIX] FeedbackController/Service: u.name → u.full_name (colonna corretta)

2026-03-10 08:56:19 +01:00

FrameworkController.php

[FEAT] Epic C / C1 operativo — valutazione/stato di conformità per requisito (mig.047)

2026-06-16 17:41:16 +02:00

IncidentController.php

[FIX] Allineamento normativo segnalazioni Fattori (A1+A3): citazioni obblighi -> D.Lgs.138/2024 art.23/24/25 (non Direttiva) + terminologia Asset -> Inventario

2026-06-15 15:27:07 +02:00

index.php

[FEAT] Services API: full-snapshot endpoint + BigSim SSE wrapper

2026-03-17 15:16:00 +01:00

InternalAuditController.php

[DB] Hardening integrità chiavi (mig.058): +4 UNIQUE +8 FK, retry-on-1062, bonifica 16 righe stale — v1.23.1

2026-06-18 07:57:25 +02:00

InviteController.php

[FIX] InviteController requireRole→requireSuperAdmin + OnboardingController add RateLimitService

2026-03-10 15:54:16 +01:00

IsmsModelController.php

[REVISIONE] Progetto revisione conformità+UI + 2 agenti esperti + correzioni R3 (audit NIS2/ISO)

2026-06-12 09:54:14 +02:00

KnowledgeBaseController.php

[FEAT] Knowledge Base RAG multi-livello (SYSTEM/FIRM/ORG) + Qdrant + Voyage

2026-05-29 15:44:13 +02:00

ManagementReviewController.php

[DB] Hardening integrità chiavi (mig.058): +4 UNIQUE +8 FK, retry-on-1062, bonifica 16 righe stale — v1.23.1

2026-06-18 07:57:25 +02:00

MktgLeadController.php

[FEAT] MktgLead getJsonBody + script import-feedback-to-nexus + seed demo agile-tech

2026-05-29 15:42:05 +02:00

NonConformityController.php

[FIX] ServicesController: query assessment_responses reale + NonConformityController: getPagination named keys

2026-03-09 10:22:40 +01:00

NormativeController.php

[FIX] Database::execute() → Database::query() in 5 controller

2026-03-07 16:49:58 +01:00

OnboardingController.php

[FEAT] A2 backend: Nis2ClassificationService v2 (matrice+bilancio, size-independent art.3 c.5, criteri sotto-soglia c.9 b/c/d, obblighi D.Lgs. art.23/24/25, esito 'preliminare non vincolante'); logica centralizzata (no duplicazione) + complete() salva i nuovi campi

2026-06-15 17:06:17 +02:00

OrganizationController.php

[FEAT] A2 backend: Nis2ClassificationService v2 (matrice+bilancio, size-independent art.3 c.5, criteri sotto-soglia c.9 b/c/d, obblighi D.Lgs. art.23/24/25, esito 'preliminare non vincolante'); logica centralizzata (no duplicazione) + complete() salva i nuovi campi

2026-06-15 17:06:17 +02:00

OrgRoleController.php

[FEAT] A4 Fase 4.1 — Organigramma (org_roles): ruoli/gerarchia + nodo governance Art.23

2026-06-15 18:05:56 +02:00

PeriodicControlController.php

[FEAT] Modulo Controlli periodici (control monitoring §9.1/A.8.16) — v1.23.0

2026-06-17 09:21:03 +02:00

PolicyController.php

[FIX] Epic C / C1 — correzioni post-verifica flotta (1 major + 5 minor)

2026-06-16 18:40:31 +02:00

RaciController.php

[FEAT] Epic C / C3 — rimosso modulo 'Analisi GAP ACN' (superato da C1)

2026-06-16 19:24:29 +02:00

ReviewScheduleController.php

[FEAT] ISO-readiness: Audit interni (§9.2) + Riesame Direzione (§9.3) + Calendario scadenze (mig.055-056, v1.22.0)

2026-06-17 07:48:49 +02:00

RiskController.php

[FIX] computeFair: validazione range input (no overflow DECIMAL, no negativi/NaN/vuln>1) - finding review

2026-05-30 12:15:13 +02:00

ServicesController.php

[BACKUP] Sessione 2026-06-14: supervisore autonomo + contesto + mig.039 + UI V2 plan

2026-06-14 16:35:41 +02:00

StakeholderActivityController.php

[FEAT] Epic C / C5 — chiusura open-items: email gated + fonti + provenienza 92/87

2026-06-16 23:32:27 +02:00

StakeholderController.php

[FEAT] Epic C / C5.1 — Modulo Stakeholder: registro + matrice di Mendelow (mig.051)

2026-06-16 20:54:57 +02:00

StakeholderPortalController.php

[FIX] Epic C / C5 hardening — esiti flotta di verifica multi-agente (mig.054)

2026-06-16 22:52:31 +02:00

SupplierPortalController.php

[FEAT] Fase 3 backend: portale fornitore OTP/magic-link (SupplierPortalController)

2026-05-31 17:40:20 +02:00

SupplyChainController.php

[FEAT] A4 Fasi 4.4 + 4.5 (A4 COMPLETA 5/5): scadenziario centralizzato review_schedule (mig.044; ReviewScheduleController list/create/update/delete/complete/sync) + stakeholder estesi clienti/partner GV.SC-02 (mig.045 suppliers.stakeholder_type, SupplyChainController::stakeholderMap). Pagine review-schedule.html + stakeholders.html (Bootstrap Italia/AGID). Workflow build+review adversariale (3 major risolti: 045 da DELIMITER -> ALTER bare runner-safe). help GV.SC-04/05 allineati al titolo canonico ACN. Cache-buster ?v=20260620.

2026-06-15 23:10:28 +02:00

TrainingController.php

[CORE] Initial project scaffold - NIS2 Agile Compliance Platform

2026-02-17 17:50:18 +01:00

WebhookController.php

[FIX] Database::execute() → Database::query() in 5 controller

2026-03-07 16:49:58 +01:00

WhistleblowingController.php

[FIX] Database::execute() → Database::query() in 5 controller

2026-03-07 16:49:58 +01:00