GovOPlaN/govoplan-risk-compliance
1
0
Fork 0
Code Issues 2 Pull Requests Actions Packages Projects Releases Wiki Activity

feat: implement sanctions screening vertical

Browse Source
This commit is contained in:
Albrecht Degering
2026-07-29 18:46:53 +02:00
parent 05c3a2257a
commit 11404ac42f
25 changed files with 6531 additions and 38 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
README.md
View File

@@ -4,11 +4,13 @@
**Repository type:** module (domain).
<!-- govoplan-repository-type:end -->
`govoplan-risk-compliance` is the GovOPlaN platform module seed for risk and compliance workflows for data protection incidents, DPIAs, compliance controls, audit measures, risk registers, and internal-control evidence.
`govoplan-risk-compliance` owns risk and compliance workflows for data protection incidents, DPIAs, compliance controls, audit measures, risk registers, internal-control evidence, and legal screening decisions.
Its runtime module ID is `risk_compliance`; the repository and Python distribution retain the hyphenated `govoplan-risk-compliance` name.
This repository is initialized as a discoverable module seed. It exposes a module manifest, initial permissions, role templates, documentation metadata, Gitea workflow templates, and a focused manifest test. It intentionally does not yet add HTTP routes, database models, migrations, or WebUI navigation.
The first complete vertical is sanctions screening. Connectors acquires immutable source evidence; Risk Compliance imports and normalizes exact list versions, runs deterministic version-pinned screening, and presents potential matches to an independent reviewer. Fuzzy matching only creates review candidates and never confirms a legal match.
The module includes database migrations, tenant-isolated APIs, an operational WebUI, append-only dispositions, time-bounded false-positive exceptions, and audit events. Queue and audit summaries deliberately retain only the minimum subject data needed for the workflow.
## Initial Ownership
@@ -18,6 +20,8 @@ This repository is initialized as a discoverable module seed. It exposes a modul
- data protection incident records
- audit measures
- internal-control evidence
- immutable sanctions list catalogues
- sanctions screening and reviewer dispositions
## Boundaries
@@ -40,6 +44,7 @@ Expected optional integrations:
- files
- tasks
- notifications
- connectors
## Development Install