leverage

type ControlAggregate struct {
	Links int
	// Credit is the inherited-credit rule at the leverage layer: ≥1 link AND every link
	// Status == active AND every link (live-derived) Satisfaction == full AND
	// TotalResponsibilities > 0. The last clause denies credit to a link whose upstream
	// responsibilities resolve to empty — a dangling link (upstream Provided/responsibility
	// rows deleted, so BulkResolve returns []) or a genuinely zero-responsibility offering
	// — which would otherwise silently inflate compliance before drift detection runs.
	// The evidence-wins and in-scope conditions are applied by the consumer, not here.
	Credit bool
	// Status is the worst link status: drifted > revoked > superseded > active.
	Status relational.SSPLeverageStatus
	// Satisfaction is full iff every link is full, else partial.
	Satisfaction relational.SSPLeverageSatisfaction
	// OutstandingCount and TotalResponsibilities are summed across links.
	OutstandingCount      int
	TotalResponsibilities int
	// InheritedFrom is the deduped set of upstream origins, in first-seen order.
	InheritedFrom []Origin
}

type ControlKey struct {
	SSPID     uuid.UUID
	ControlID string
}

type LinkSummary struct {
	LinkID          uuid.UUID
	DownstreamSSPID uuid.UUID
	UpstreamSSPID   uuid.UUID
	OfferingID      uuid.UUID

	UpstreamSSPTitle string
	OfferingTitle    string
	OfferingVersion  int

	ControlID   string // as stored (casing preserved); folded only when aggregating
	StatementID *string

	Status       relational.SSPLeverageStatus
	Satisfaction relational.SSPLeverageSatisfaction

	OutstandingCount      int
	TotalResponsibilities int
}

type Origin struct {
	UpstreamSSPID    uuid.UUID
	UpstreamSSPTitle string
	OfferingID       uuid.UUID
	OfferingTitle    string
	OfferingVersion  int
}

type Projection struct {
	Link          relational.SSPLeverageLink
	OfferingTitle string
	ByComponentID uuid.UUID
	// Inherited is the downstream's own InheritedControlImplementation row this link
	// created; nil only if it has since been deleted out from under the link.
	Inherited    *relational.InheritedControlImplementation
	Satisfaction relational.SSPLeverageSatisfaction
	Outstanding  []Responsibility
	// Responsibilities is the FULL upstream responsibility set under this link (uuid +
	// description), so downstream surfaces can label every responsibility — including
	// ones already satisfied — with the upstream's own text. Outstanding is the subset
	// of this with no matching downstream satisfied entry.
	Responsibilities []Responsibility
	Posture          map[uuid.UUID]string
	DriftRiskID      *uuid.UUID
}

type Responsibility struct {
	ResponsibilityUUID uuid.UUID `json:"responsibilityUuid"`
	Description        string    `json:"description"`
}