Replace inventory-counting risk with bounded workload scoring and separate confidence

This commit is contained in:
2026-10-30 12:34:39 -07:00
parent f65ade9fff
commit 57e716b710
26 changed files with 10351 additions and 87 deletions

View File

@@ -34,3 +34,7 @@ The original empty repository had no existing application or project instruction
## Windows local collection milestone
Added independent read-only PowerShell modules and the local Python backend, without replacing the existing application. OS identity is accepted only for known Server build/product-type combinations. The existing QThread routes Windows auto-detect/profile choices to the backend and retains the same result, history and reporting flow. Python runs each fixed local section in a separate supervised PowerShell process, with cancellation, per-section/overall budgets, output bounds and cleanup. Per-check UTC timestamps, sanitized errors, scope and permission limitations extend schema v1 additively; old fixtures remain valid. The real-host validation tool produces full private evidence and a separate metadata-only summary for review. Remote Windows collection is not part of this milestone.
## Retirement scoring correction
Implemented model v2 using the existing analyzer/report/UI boundaries: workload correlation and OS/client/unknown classification, maximum-of-grouped-evidence scoring, independent coverage/confidence, validated configurable policy and full audit metadata. HTML now leads with actionable findings and saves complete inventory separately. Regression scenarios and the synthetic 1,565-point incident reconstruction are documented in SCORING.md. Remote collection remains outside this change.