5 Commits

Include renames

Author	SHA1	Message	Date
ehoandClaude Opus 4.8	5cae44f163	feat(security): ABAC P2/P3-lite — BIG-nummer redaction, authz audit, guard; clear dev audit ... - fix(deps): pin @babel/core ^7.29.7 via overrides → npm audit 0 (dev+prod), no --force / no Angular downgrade; README corrected - feat(brief): field-level PII reveal (PRD-0002 §5c) — CaseContext BIG-nummer ships masked; step-up-stubbed (X-Step-Up), audited POST /brief/reveal-bignummer unmasks it; drafter-only capability, deny-by-default. Realized on the BIG-nummer (no BSN on the wire) - feat(authz): no-PII AuditAuthz log for reveal attempts + org-admin denials (§8) - feat(routes): wire capabilityGuard('orgtemplate:edit') onto brief/huisstijl (§6) - test: backend +5 (Authz + reveal endpoint), FE +3 (adapter boundary, store swap) - docs: PRD-0002 §5c/§9, WP-18 follow-up, README Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-20 19:59:20 +02:00
ehoandClaude Sonnet 5	cbb8ae548c	docs(backlog): add WP-18..22 (productie-volwassenheid phase) ... Gap analysis found the POC's designed-but-unbuilt strategic gaps: ABAC authorization (ADR-0002/PRD-0002 phase P1), no e2e coverage, unproven i18n second-locale seam, thin resilience seams (correlation-id, idempotency, retry), and in-memory-only persistence. Each WP is grounded in the current code (file paths + line numbers), not just the analysis. Also corrects PRD-0001's stale 'Proposed' status header — the Mijn aanvragen vertical is fully built. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2026-07-03 20:07:05 +02:00
ehoandClaude Opus 4.8	e82309786d	style: format frontend, docs and skills with prettier; add .prettierignore ... One-time prettier --write so the new format:check CI gate starts green. .prettierignore excludes generated (api-client.ts, documentation.json), vendored (public/cibg-huisstijl), and backend (dotnet format owns it). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-03 13:39:31 +02:00
ehoandClaude Opus 4.8	7887355ca3	docs(prd): add PRD-0002 — attribute-based access control (ABAC) ... Specifies fine-grained, app-owned access control layered on the AD roles: capability gating, data-scoping, field/PII-level, and step-up/SoD. Backend-authoritative (per ADR-0001), UI mirrors decisions; extends ADR-0002. Privacy-by-design: data-minimized decision DTOs, server-side PII redaction, audit, deny-by-default. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-02 12:33:12 +02:00
ehoandClaude Opus 4.8	8c3f4c22ee	Mijn aanvragen (A): backend Aanvraag store + lifecycle endpoints ... Adds the backend-owned Aanvraag aggregate (PRD 0001, phase A) — the system of record the dashboard will read. In-memory static store mirroring DocumentStore. - ApplicationStore: create/get/list/draft-sync/cancel/submit; status COMPUTED ON READ (Mappers.ToStatusDto(now)) so auto-approval is pure timestamp arithmetic, no timers/jobs (ProcessingWindow = 8s). - Endpoints: GET /applications, GET/POST/PUT/DELETE /applications/{id}, POST /applications/{id}/submit. - Lifecycle: registratie duo -> auto (Goedgekeurd after window), handmatig -> manual pending (no 422); herregistratie/intake 0 uren -> Afgewezen else auto. Cancel blocks submitted aanvragen (409, no withdrawal in scope). - Old /registrations endpoint + RejectRegistratie 422 left intact (retire in E). - ApplicationTests: lifecycle + auto-approve window boundary (pure). 54/54 green. Also checks in the PRD (docs/prd/0001). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-01 11:35:19 +02:00