security

type AESEncryptor struct {
	// contains filtered or unexported fields
}

type APIKeyConfig struct {
	// Storage settings
	Provider  string `json:"provider"` // "secrets-manager", "parameter-store"
	KeyPrefix string `json:"key_prefix"`

	// Validation settings
	MinLength       int           `json:"min_length"`
	RequireRotation bool          `json:"require_rotation"`
	MaxAge          time.Duration `json:"max_age"`

	// Rate limiting for API keys
	RateLimit  int           `json:"rate_limit"`
	RatePeriod time.Duration `json:"rate_period"`
}

type AWSSecretsManager struct {
	// contains filtered or unexported fields
}

type AccessControlData struct {
	UserID           string    `json:"user_id"`
	Role             string    `json:"role"`
	Permissions      []string  `json:"permissions"`
	AuthMethod       string    `json:"auth_method"`
	MFAEnabled       bool      `json:"mfa_enabled"`
	LastLogin        time.Time `json:"last_login"`
	FailedAttempts   int       `json:"failed_attempts"`
	SessionTimeout   int       `json:"session_timeout"`
	PrivilegedAccess bool      `json:"privileged_access"`
}

type AccessLogEntry struct {
	Timestamp    time.Time      `json:"timestamp"`
	UserID       string         `json:"user_id"`
	Resource     string         `json:"resource"`
	Action       string         `json:"action"`
	Result       string         `json:"result"`
	IPAddress    string         `json:"ip_address"`
	SessionID    string         `json:"session_id"`
	Duration     time.Duration  `json:"duration"`
	DataAccessed []string       `json:"data_accessed"`
	Metadata     map[string]any `json:"metadata"`
}

type AdequacyDecision struct {
	Country      string     `json:"country"`
	Decision     string     `json:"decision"`
	DecisionDate time.Time  `json:"decision_date"`
	ValidUntil   *time.Time `json:"valid_until,omitempty"`
	Conditions   []string   `json:"conditions"`
}

type AdvancedComplianceValidator interface {
	ComplianceValidator // Embed base interface
	ValidateSOC2Controls(ctx LiftContext, controls *SOC2Controls) (*ComplianceResult, error)
	ValidateGDPRCompliance(ctx LiftContext, operation string, data any) (*ComplianceResult, error)
	ValidateDataProcessingBasis(ctx LiftContext, basis string) (*ComplianceResult, error)
	ValidateDataMinimization(ctx LiftContext, data any) (*ComplianceResult, error)
	ValidateConsentRequirements(ctx LiftContext, consent *ConsentData) (*ComplianceResult, error)
}

type AggregateRiskScore struct {
	OverallScore     float64        `json:"overall_score"`
	Level            string         `json:"level"`
	EventCount       int            `json:"event_count"`
	TimeRange        TimeRange      `json:"time_range"`
	RiskDistribution map[string]int `json:"risk_distribution"`
	TopRiskFactors   []RiskFactor   `json:"top_risk_factors"`
	TrendDirection   string         `json:"trend_direction"`
	Recommendations  []string       `json:"recommendations"`
	Metadata         map[string]any `json:"metadata"`
}

type AggregatedDataPoint struct {
	Timestamp time.Time      `json:"timestamp"`
	Value     float64        `json:"value"`
	Count     int            `json:"count"`
	Min       float64        `json:"min"`
	Max       float64        `json:"max"`
	Average   float64        `json:"average"`
	Sum       float64        `json:"sum"`
	StdDev    float64        `json:"std_dev"`
	Metadata  map[string]any `json:"metadata"`
}

type AggregatedMetrics struct {
	Query       MetricsQuery   `json:"query"`
	Results     []MetricResult `json:"results"`
	Summary     MetricSummary  `json:"summary"`
	GeneratedAt time.Time      `json:"generated_at"`
	Metadata    map[string]any `json:"metadata"`
}

type AlertAction struct {
	ID          string         `json:"id"`
	Name        string         `json:"name"`
	Type        string         `json:"type"`
	Description string         `json:"description"`
	Automated   bool           `json:"automated"`
	Parameters  map[string]any `json:"parameters"`
}

type AlertManager interface {
	SendAlert(alert *ComplianceAlert) error
	SendCriticalAlert(alert *ComplianceAlert) error
	GetAlertHistory(since time.Time) ([]*ComplianceAlert, error)
	ConfigureAlertRules(rules []AlertRule) error
}

type AlertRule struct {
	ID          string         `json:"id"`
	Name        string         `json:"name"`
	Description string         `json:"description"`
	Condition   string         `json:"condition"`
	Threshold   float64        `json:"threshold"`
	Severity    string         `json:"severity"`
	Recipients  []string       `json:"recipients"`
	Channels    []string       `json:"channels"`
	Enabled     bool           `json:"enabled"`
	Metadata    map[string]any `json:"metadata"`
}

type AlertThresholds struct {
	CriticalRiskScore   float64 `json:"critical_risk_score"`
	HighRiskScore       float64 `json:"high_risk_score"`
	MediumRiskScore     float64 `json:"medium_risk_score"`
	AnomalyScore        float64 `json:"anomaly_score"`
	ComplianceThreshold float64 `json:"compliance_threshold"`
	TrendDeviationLimit float64 `json:"trend_deviation_limit"`
}

type AnalyticsConfig struct {
	Enabled               bool               `json:"enabled"`
	RealTimeAnalysis      bool               `json:"real_time_analysis"`
	PredictiveAnalysis    bool               `json:"predictive_analysis"`
	AnomalyDetection      bool               `json:"anomaly_detection"`
	AutomatedRemediation  bool               `json:"automated_remediation"`
	RiskScoringEnabled    bool               `json:"risk_scoring_enabled"`
	AnalysisInterval      time.Duration      `json:"analysis_interval"`
	DataRetentionDays     int                `json:"data_retention_days"`
	MLModelUpdateInterval time.Duration      `json:"ml_model_update_interval"`
	AlertThresholds       AlertThresholds    `json:"alert_thresholds"`
	PerformanceTargets    PerformanceTargets `json:"performance_targets"`
}

type AnalyticsDataPoint struct {
	ID        string             `json:"id"`
	Timestamp time.Time          `json:"timestamp"`
	Type      string             `json:"type"`
	Source    string             `json:"source"`
	Metrics   map[string]float64 `json:"metrics"`
	Labels    map[string]string  `json:"labels"`
	Metadata  map[string]any     `json:"metadata"`
}

type AnalyticsDataStore interface {
	StoreAnalyticsData(ctx context.Context, data *AnalyticsDataPoint) error
	GetAnalyticsData(ctx context.Context, query *AnalyticsQuery) ([]*AnalyticsDataPoint, error)
	GetAggregatedMetrics(ctx context.Context, query *MetricsQuery) (*AggregatedMetrics, error)
	CleanupOldData(ctx context.Context, retentionPeriod time.Duration) error
}

type AnalyticsMetrics struct {
	Timestamp         time.Time           `json:"timestamp"`
	AggregatedMetrics *AggregatedMetrics  `json:"aggregated_metrics"`
	Performance       *PerformanceMetrics `json:"performance"`
}

type AnalyticsQuery struct {
	StartTime time.Time         `json:"start_time"`
	EndTime   time.Time         `json:"end_time"`
	Types     []string          `json:"types"`
	Sources   []string          `json:"sources"`
	Labels    map[string]string `json:"labels"`
	Limit     int               `json:"limit"`
	Offset    int               `json:"offset"`
}

type Anomaly struct {
	ID              string         `json:"id"`
	Type            string         `json:"type"`
	Severity        string         `json:"severity"`
	Score           float64        `json:"score"`
	Confidence      float64        `json:"confidence"`
	Description     string         `json:"description"`
	DetectedAt      time.Time      `json:"detected_at"`
	Events          []*AuditEvent  `json:"events"`
	Pattern         AnomalyPattern `json:"pattern"`
	Impact          string         `json:"impact"`
	Recommendations []string       `json:"recommendations"`
	Status          string         `json:"status"`
	Metadata        map[string]any `json:"metadata"`
}

type AnomalyDetector interface {
	DetectAnomalies(ctx context.Context, events []*AuditEvent) ([]*Anomaly, error)
	TrainModel(ctx context.Context, trainingData []*AuditEvent) error
	UpdateBaseline(ctx context.Context, events []*AuditEvent) error
	GetAnomalyPatterns() []AnomalyPattern
}

type AnomalyPattern struct {
	ID          string             `json:"id"`
	Name        string             `json:"name"`
	Type        string             `json:"type"`
	Description string             `json:"description"`
	Indicators  []string           `json:"indicators"`
	Thresholds  map[string]float64 `json:"thresholds"`
	Enabled     bool               `json:"enabled"`
	Metadata    map[string]any     `json:"metadata"`
}

type AnomalyRecord struct {
	Timestamp   time.Time `json:"timestamp"`
	Type        string    `json:"type"`
	Severity    string    `json:"severity"`
	Score       float64   `json:"score"`
	Resolved    bool      `json:"resolved"`
	Description string    `json:"description"`
}

type AssessedRiskFactor struct {
	PIARiskFactor
	Score      float64 `json:"score"`
	Impact     string  `json:"impact"`
	Likelihood string  `json:"likelihood"`
	Rationale  string  `json:"rationale"`
}

type AuditAnalyticsEngine struct {
	// contains filtered or unexported fields
}

type AuditDataPoint struct {
	Timestamp    time.Time      `json:"timestamp"`
	EventCount   int            `json:"event_count"`
	AnomalyCount int            `json:"anomaly_count"`
	FailureRate  float64        `json:"failure_rate"`
	Metadata     map[string]any `json:"metadata"`
}

type AuditEntry struct {
	ID        string         `json:"id"`
	UserID    string         `json:"user_id"`
	TenantID  string         `json:"tenant_id"`
	Action    string         `json:"action"`
	Resource  string         `json:"resource"`
	Timestamp time.Time      `json:"timestamp"`
	Result    string         `json:"result"`
	Metadata  map[string]any `json:"metadata,omitempty"`
}

type AuditEvent struct {
	ID           string            `json:"id"`
	Timestamp    time.Time         `json:"timestamp"`
	EventType    string            `json:"event_type"`
	Source       string            `json:"source"`
	UserID       string            `json:"user_id"`
	TenantID     string            `json:"tenant_id"`
	Action       string            `json:"action"`
	Resource     string            `json:"resource"`
	Result       string            `json:"result"`
	Severity     string            `json:"severity"`
	IPAddress    string            `json:"ip_address"`
	UserAgent    string            `json:"user_agent"`
	SessionID    string            `json:"session_id"`
	RequestID    string            `json:"request_id"`
	Duration     time.Duration     `json:"duration"`
	DataAccessed []string          `json:"data_accessed"`
	Compliance   ComplianceContext `json:"compliance"`
	Security     SecurityContext   `json:"security"`
	Metadata     map[string]any    `json:"metadata"`
}

type AuditFilter struct {
	UserID    string    `json:"user_id,omitempty"`
	TenantID  string    `json:"tenant_id,omitempty"`
	AuditID   string    `json:"audit_id,omitempty"`
	EntryType string    `json:"entry_type,omitempty"`
	Since     time.Time `json:"since,omitempty"`
	Until     time.Time `json:"until,omitempty"`
	Limit     int       `json:"limit,omitempty"`
}

type AuditLogEntry struct {
	ID            string         `json:"id"`
	AuditID       string         `json:"audit_id"`
	TenantID      string         `json:"tenant_id"`
	UserID        string         `json:"user_id"`
	EntryType     string         `json:"entry_type"` // request, response, data_access, security_event
	Timestamp     time.Time      `json:"timestamp"`
	TTL           int64          `json:"ttl"`
	Request       *AuditRequest  `json:"request,omitempty"`
	Response      *AuditResponse `json:"response,omitempty"`
	DataAccess    *DataAccessLog `json:"data_access,omitempty"`
	SecurityEvent *SecurityEvent `json:"security_event,omitempty"`
	Metadata      map[string]any `json:"metadata,omitempty"`
	Checksum      string         `json:"checksum"`
}

type AuditLogger interface {
	StartAudit(ctx LiftContext) string
	LogRequest(auditID string, request *AuditRequest) error
	LogResponse(auditID string, response *AuditResponse) error
	LogDataAccess(auditID string, access *DataAccessLog) error
	LogSecurityEvent(auditID string, event *SecurityEvent) error
}

type AuditLoggerMetrics struct {
	TotalEntries      int64         `json:"total_entries"`
	BufferedEntries   int           `json:"buffered_entries"`
	FlushCount        int64         `json:"flush_count"`
	ErrorCount        int64         `json:"error_count"`
	AverageLatency    time.Duration `json:"average_latency"`
	LastFlush         time.Time     `json:"last_flush"`
	BufferUtilization float64       `json:"buffer_utilization"`
}

type AuditMetrics struct {
	TotalEvents         int              `json:"total_events"`
	EventsByType        map[string]int   `json:"events_by_type"`
	EventsBySeverity    map[string]int   `json:"events_by_severity"`
	EventsBySource      map[string]int   `json:"events_by_source"`
	AnomalyCount        int              `json:"anomaly_count"`
	AnomaliesByType     map[string]int   `json:"anomalies_by_type"`
	FailedEvents        int              `json:"failed_events"`
	FailureRate         float64          `json:"failure_rate"`
	AverageEventSize    float64          `json:"average_event_size"`
	EventTrend          string           `json:"event_trend"`
	DataIntegrityScore  float64          `json:"data_integrity_score"`
	LogCompleteness     float64          `json:"log_completeness"`
	RetentionCompliance float64          `json:"retention_compliance"`
	HistoricalData      []AuditDataPoint `json:"historical_data"`
}

type AuditQueryResult struct {
	Entries    []AuditLogEntry `json:"entries"`
	NextToken  string          `json:"next_token,omitempty"`
	TotalCount int             `json:"total_count"`
}

type AuditRequest struct {
	UserID      string            `json:"user_id"`
	TenantID    string            `json:"tenant_id"`
	Action      string            `json:"action"`
	Resource    string            `json:"resource"`
	Timestamp   time.Time         `json:"timestamp"`
	IPAddress   string            `json:"ip_address"`
	UserAgent   string            `json:"user_agent"`
	Headers     map[string]string `json:"headers,omitempty"`
	QueryParams map[string]string `json:"query_params,omitempty"`
	RequestSize int64             `json:"request_size"`
	ContentType string            `json:"content_type"`
	SessionID   string            `json:"session_id,omitempty"`
}

type AuditRequirement struct {
	ID        string        `json:"id"`
	Name      string        `json:"name"`
	Type      string        `json:"type"`
	Frequency time.Duration `json:"frequency"`
	Scope     []string      `json:"scope"`
	Automated bool          `json:"automated"`
	External  bool          `json:"external"`
}

type AuditResponse struct {
	StatusCode   int           `json:"status_code"`
	Duration     time.Duration `json:"duration"`
	ResponseSize int64         `json:"response_size"`
	Error        error         `json:"error,omitempty"`
	DataAccess   []string      `json:"data_access,omitempty"`
	Warnings     []string      `json:"warnings,omitempty"`
}

type AuditStorage interface {
	Store(ctx context.Context, entry AuditLogEntry) error
	Query(ctx context.Context, filter AuditFilter) ([]AuditLogEntry, error)
	BatchStore(ctx context.Context, entries []AuditLogEntry) error
}

type BCRResult struct {
	Valid           bool              `json:"valid"`
	ValidationDate  time.Time         `json:"validation_date"`
	BCRApplicable   bool              `json:"bcr_applicable"`
	Issues          []ValidationIssue `json:"issues"`
	Recommendations []string          `json:"recommendations"`
	Metadata        map[string]any    `json:"metadata"`
}

type BCRValidation struct {
	CompanyGroup   string         `json:"company_group"`
	BCRVersion     string         `json:"bcr_version"`
	DataCategories []string       `json:"data_categories"`
	Purposes       []string       `json:"purposes"`
	Countries      []string       `json:"countries"`
	Metadata       map[string]any `json:"metadata"`
}

type BankingComplianceConfig struct {
	PCIDSSLevel         string   `json:"pci_dss_level"` // "1", "2", "3", "4"
	SOXCompliance       bool     `json:"sox_compliance"`
	BSACompliance       bool     `json:"bsa_compliance"`  // Bank Secrecy Act
	GLBACompliance      bool     `json:"glba_compliance"` // Gramm-Leach-Bliley Act
	FedRAMPRequired     bool     `json:"fedramp_required"`
	RegulatedCountries  []string `json:"regulated_countries"`
	DataResidencyRules  []string `json:"data_residency_rules"`
	AMLRequired         bool     `json:"aml_required"` // Anti-Money Laundering
	KYCRequired         bool     `json:"kyc_required"` // Know Your Customer
	FraudDetectionLevel string   `json:"fraud_detection_level"`
	EncryptionStandards []string `json:"encryption_standards"`
	AuditFrequency      string   `json:"audit_frequency"`
}

type BankingComplianceTemplate struct {
	// contains filtered or unexported fields
}

type BatchAnalysis struct {
	BatchID        string              `json:"batch_id"`
	EventCount     int                 `json:"event_count"`
	Timestamp      time.Time           `json:"timestamp"`
	EventAnalyses  []*EventAnalysis    `json:"event_analyses"`
	AggregateRisk  *AggregateRiskScore `json:"aggregate_risk,omitempty"`
	BatchAnomalies []*Anomaly          `json:"batch_anomalies,omitempty"`
}

type BufferedAuditLogger struct {
	// contains filtered or unexported fields
}

type BusinessContinuityData struct {
	PlanID            string        `json:"plan_id"`
	LastTested        time.Time     `json:"last_tested"`
	TestResults       string        `json:"test_results"`
	RPO               time.Duration `json:"rpo"` // Recovery Point Objective
	RTO               time.Duration `json:"rto"` // Recovery Time Objective
	BackupStrategy    string        `json:"backup_strategy"`
	DisasterRecovery  bool          `json:"disaster_recovery"`
	CommunicationPlan bool          `json:"communication_plan"`
}

type CORSConfig struct {
	AllowedOrigins   []string `json:"allowed_origins"`
	AllowedMethods   []string `json:"allowed_methods"`
	AllowedHeaders   []string `json:"allowed_headers"`
	ExposedHeaders   []string `json:"exposed_headers"`
	AllowCredentials bool     `json:"allow_credentials"`
	MaxAge           int      `json:"max_age"`

	// Dynamic origin validation
	ValidateOrigin func(origin string) bool `json:"-"`
}

type CachedSecret struct {
	Value     string
	ExpiresAt time.Time
}

type CertificationStatus struct {
	Certification  string    `json:"certification"`
	Status         string    `json:"status"`
	ValidFrom      time.Time `json:"valid_from"`
	ValidUntil     time.Time `json:"valid_until"`
	CertifyingBody string    `json:"certifying_body"`
	Scope          []string  `json:"scope"`
	Conditions     []string  `json:"conditions"`
	NextReview     time.Time `json:"next_review"`
}

type ChangeManagementData struct {
	ChangeID             string    `json:"change_id"`
	ChangeType           string    `json:"change_type"`
	Requestor            string    `json:"requestor"`
	Approver             string    `json:"approver"`
	ApprovalDate         time.Time `json:"approval_date"`
	ImplementationDate   time.Time `json:"implementation_date"`
	TestingCompleted     bool      `json:"testing_completed"`
	RollbackPlan         bool      `json:"rollback_plan"`
	DocumentationUpdated bool      `json:"documentation_updated"`
}

type ComplianceAlert struct {
	ID             string         `json:"id"`
	Type           string         `json:"type"`
	Severity       string         `json:"severity"`
	Title          string         `json:"title"`
	Description    string         `json:"description"`
	ControlID      string         `json:"control_id"`
	Timestamp      time.Time      `json:"timestamp"`
	Recipients     []string       `json:"recipients"`
	Channels       []string       `json:"channels"`
	Escalated      bool           `json:"escalated"`
	Acknowledged   bool           `json:"acknowledged"`
	AcknowledgedBy string         `json:"acknowledged_by"`
	AcknowledgedAt *time.Time     `json:"acknowledged_at,omitempty"`
	Resolved       bool           `json:"resolved"`
	ResolvedAt     *time.Time     `json:"resolved_at,omitempty"`
	Metadata       map[string]any `json:"metadata"`
}

type ComplianceConfig struct {
	EnabledFrameworks  []string          `json:"enabled_frameworks"`
	AuditRetention     time.Duration     `json:"audit_retention"`
	DataClassification map[string]string `json:"data_classification"`
	EncryptionRequired bool              `json:"encryption_required"`
	RegionRestrictions []string          `json:"region_restrictions"`
	CustomRules        []ComplianceRule  `json:"custom_rules"`
}

type ComplianceContext struct {
	Framework    string   `json:"framework"`
	Controls     []string `json:"controls"`
	Requirements []string `json:"requirements"`
	Violations   []string `json:"violations"`
	RiskLevel    string   `json:"risk_level"`
	DataCategory string   `json:"data_category"`
}

type ComplianceControl struct {
	ID          string                `json:"id"`
	Name        string                `json:"name"`
	Description string                `json:"description"`
	Framework   string                `json:"framework"`
	Category    string                `json:"category"`
	Severity    string                `json:"severity"`
	Automated   bool                  `json:"automated"`
	Frequency   time.Duration         `json:"frequency"`
	Evidence    []EvidenceRequirement `json:"evidence"`
	Tests       []ComplianceTest      `json:"tests"`
	Remediation string                `json:"remediation"`
	Metadata    map[string]any        `json:"metadata"`
}

type ComplianceDashboard struct {
	// contains filtered or unexported fields
}

type ComplianceDataPoint struct {
	Timestamp       time.Time      `json:"timestamp"`
	ComplianceScore float64        `json:"compliance_score"`
	ViolationCount  int            `json:"violation_count"`
	ControlCount    int            `json:"control_count"`
	Framework       string         `json:"framework"`
	Metadata        map[string]any `json:"metadata"`
}

type ComplianceException struct {
	ID                 string               `json:"id"`
	ControlID          string               `json:"control_id"`
	ExceptionType      string               `json:"exception_type"`
	Severity           string               `json:"severity"`
	Description        string               `json:"description"`
	DetectedDate       time.Time            `json:"detected_date"`
	ReportedBy         string               `json:"reported_by"`
	Status             string               `json:"status"` // "open", "in_progress", "resolved", "accepted"
	AssignedTo         string               `json:"assigned_to"`
	DueDate            time.Time            `json:"due_date"`
	Resolution         *ExceptionResolution `json:"resolution,omitempty"`
	Impact             string               `json:"impact"`
	RootCause          string               `json:"root_cause"`
	Remediation        string               `json:"remediation"`
	PreventiveMeasures []string             `json:"preventive_measures"`
	Metadata           map[string]any       `json:"metadata"`
}

type ComplianceFinding struct {
	ID          string    `json:"id"`
	Type        string    `json:"type"` // "violation", "weakness", "observation"
	Severity    string    `json:"severity"`
	Description string    `json:"description"`
	Evidence    string    `json:"evidence"`
	Impact      string    `json:"impact"`
	Remediation string    `json:"remediation"`
	Status      string    `json:"status"`
	AssignedTo  string    `json:"assigned_to"`
	DueDate     time.Time `json:"due_date"`
	CreatedAt   time.Time `json:"created_at"`
	UpdatedAt   time.Time `json:"updated_at"`
}

type ComplianceFramework struct {
	// contains filtered or unexported fields
}

type ComplianceIssue struct {
	ID          string         `json:"id"`
	Type        string         `json:"type"`
	Severity    string         `json:"severity"`
	Description string         `json:"description"`
	Framework   string         `json:"framework"`
	Controls    []string       `json:"controls"`
	Evidence    []string       `json:"evidence"`
	Impact      string         `json:"impact"`
	RiskScore   float64        `json:"risk_score"`
	DetectedAt  time.Time      `json:"detected_at"`
	Deadline    time.Time      `json:"deadline"`
	Metadata    map[string]any `json:"metadata"`
}

type ComplianceMetrics struct {
	OverallScore         float64                    `json:"overall_score"`
	FrameworkScores      map[string]float64         `json:"framework_scores"`
	ControlEffectiveness map[string]float64         `json:"control_effectiveness"`
	ViolationCount       int                        `json:"violation_count"`
	ViolationsByType     map[string]int             `json:"violations_by_type"`
	ViolationsBySeverity map[string]int             `json:"violations_by_severity"`
	ComplianceRate       float64                    `json:"compliance_rate"`
	TrendDirection       string                     `json:"trend_direction"`
	LastAuditDate        time.Time                  `json:"last_audit_date"`
	NextAuditDate        time.Time                  `json:"next_audit_date"`
	CertificationStatus  []CertificationStatus      `json:"certification_status"`
	Recommendations      []ComplianceRecommendation `json:"recommendations"`
	HistoricalData       []ComplianceDataPoint      `json:"historical_data"`
}

type CompliancePrediction struct {
	Timeframe       time.Duration          `json:"timeframe"`
	PredictedRisk   float64                `json:"predicted_risk"`
	Confidence      float64                `json:"confidence"`
	RiskFactors     []PredictiveRiskFactor `json:"risk_factors"`
	Scenarios       []RiskScenario         `json:"scenarios"`
	Recommendations []string               `json:"recommendations"`
	GeneratedAt     time.Time              `json:"generated_at"`
	Metadata        map[string]any         `json:"metadata"`
}

type ComplianceRecommendation struct {
	ID          string    `json:"id"`
	Priority    string    `json:"priority"`
	Category    string    `json:"category"`
	Title       string    `json:"title"`
	Description string    `json:"description"`
	Actions     []string  `json:"actions"`
	Timeline    string    `json:"timeline"`
	Cost        string    `json:"cost"`
	Impact      string    `json:"impact"`
	Owner       string    `json:"owner"`
	DueDate     time.Time `json:"due_date"`
	Status      string    `json:"status"`
}

type ComplianceReport struct {
	Framework     string                `json:"framework"`
	Period        time.Duration         `json:"period"`
	GeneratedAt   time.Time             `json:"generated_at"`
	TotalRequests int64                 `json:"total_requests"`
	Violations    []ComplianceViolation `json:"violations"`
	Summary       ComplianceSummary     `json:"summary"`
}

type ComplianceReporter interface {
	GenerateReport(framework string, period time.Duration) (*ComplianceReport, error)
	GetViolations(framework string, since time.Time) ([]ComplianceViolation, error)
	GetAuditTrail(userID, tenantID string, since time.Time) ([]AuditEntry, error)
}

type ComplianceResult struct {
	Compliant  bool                  `json:"compliant"`
	Framework  string                `json:"framework"`
	Violations []ComplianceViolation `json:"violations,omitempty"`
	Warnings   []string              `json:"warnings,omitempty"`
	Metadata   map[string]any        `json:"metadata,omitempty"`
	Timestamp  time.Time             `json:"timestamp"`
}

type ComplianceRule struct {
	ID          string         `json:"id"`
	Name        string         `json:"name"`
	Framework   string         `json:"framework"`
	Severity    string         `json:"severity"`
	Description string         `json:"description"`
	Condition   map[string]any `json:"condition"`
	Action      string         `json:"action"`
}

type ComplianceSummary struct {
	ComplianceRate   float64           `json:"compliance_rate"`
	ViolationsByType map[string]int    `json:"violations_by_type"`
	TopViolations    []string          `json:"top_violations"`
	TrendData        []ComplianceTrend `json:"trend_data"`
	Recommendations  []string          `json:"recommendations"`
}

type ComplianceTemplate interface {
	GetIndustry() string
	GetRegulations() []string
	GetControls() []ComplianceControl
	GetAudits() []AuditRequirement
	ApplyToFramework(framework *EnhancedComplianceFramework) error
}

type ComplianceTest struct {
	ID         string             `json:"id"`
	Name       string             `json:"name"`
	Type       string             `json:"type"` // "technical", "administrative", "physical"
	Automated  bool               `json:"automated"`
	Frequency  time.Duration      `json:"frequency"`
	Parameters map[string]any     `json:"parameters"`
	Thresholds map[string]float64 `json:"thresholds"`
}

type ComplianceTestResult struct {
	TestID          string              `json:"test_id"`
	TestName        string              `json:"test_name"`
	Framework       string              `json:"framework"`
	ControlID       string              `json:"control_id"`
	TestType        string              `json:"test_type"`
	ExecutionTime   time.Time           `json:"execution_time"`
	Duration        time.Duration       `json:"duration"`
	Status          string              `json:"status"` // "pass", "fail", "warning", "error"
	Score           float64             `json:"score"`
	Threshold       float64             `json:"threshold"`
	Evidence        []Evidence          `json:"evidence"`
	Findings        []ComplianceFinding `json:"findings"`
	Recommendations []string            `json:"recommendations"`
	Metadata        map[string]any      `json:"metadata"`
}

type ComplianceTrend struct {
	Date           time.Time `json:"date"`
	ComplianceRate float64   `json:"compliance_rate"`
	ViolationCount int       `json:"violation_count"`
}

type ComplianceValidator interface {
	ValidateRequest(ctx LiftContext, framework string) (*ComplianceResult, error)
	ValidateDataAccess(ctx LiftContext, dataType string) (*ComplianceResult, error)
	ValidateRegion(ctx LiftContext, region string) (*ComplianceResult, error)
}

type ComplianceViolation struct {
	ID          string         `json:"id"`
	RuleID      string         `json:"rule_id"`
	Framework   string         `json:"framework"`
	Severity    string         `json:"severity"`
	Description string         `json:"description"`
	UserID      string         `json:"user_id,omitempty"`
	TenantID    string         `json:"tenant_id,omitempty"`
	Resource    string         `json:"resource,omitempty"`
	Timestamp   time.Time      `json:"timestamp"`
	Metadata    map[string]any `json:"metadata,omitempty"`
	Resolved    bool           `json:"resolved"`
}

type ConsentData struct {
	ConsentID        string     `json:"consent_id"`
	DataSubject      string     `json:"data_subject"`
	ConsentGiven     bool       `json:"consent_given"`
	ConsentDate      time.Time  `json:"consent_date"`
	ConsentMethod    string     `json:"consent_method"`
	ConsentScope     []string   `json:"consent_scope"`
	ConsentVersion   string     `json:"consent_version"`
	WithdrawalDate   *time.Time `json:"withdrawal_date,omitempty"`
	WithdrawalMethod string     `json:"withdrawal_method,omitempty"`
	ExpiryDate       *time.Time `json:"expiry_date,omitempty"`
	Granular         bool       `json:"granular"`
	Specific         bool       `json:"specific"`
	Informed         bool       `json:"informed"`
	Unambiguous      bool       `json:"unambiguous"`
}

type ConsentEvent struct {
	EventType     string         `json:"event_type"`
	ConsentID     string         `json:"consent_id"`
	DataSubjectID string         `json:"data_subject_id"`
	Timestamp     time.Time      `json:"timestamp"`
	Details       map[string]any `json:"details"`
	IPAddress     string         `json:"ip_address"`
	UserAgent     string         `json:"user_agent"`
	Metadata      map[string]any `json:"metadata"`
}

type ConsentHistoryEntry struct {
	ID            string         `json:"id"`
	ConsentID     string         `json:"consent_id"`
	Action        string         `json:"action"` // "created", "updated", "withdrawn", "renewed"
	Timestamp     time.Time      `json:"timestamp"`
	DataSubjectID string         `json:"data_subject_id"`
	Changes       map[string]any `json:"changes"`
	UpdatedBy     string         `json:"updated_by"`
	Reason        string         `json:"reason"`
	IPAddress     string         `json:"ip_address"`
	UserAgent     string         `json:"user_agent"`
	Metadata      map[string]any `json:"metadata"`
}

type ConsentProof struct {
	Type      string         `json:"type"` // "digital_signature", "double_opt_in", "recorded_consent"
	Evidence  string         `json:"evidence"`
	Timestamp time.Time      `json:"timestamp"`
	IPAddress string         `json:"ip_address"`
	UserAgent string         `json:"user_agent"`
	Method    string         `json:"method"`
	Verified  bool           `json:"verified"`
	Signature string         `json:"signature,omitempty"`
	Metadata  map[string]any `json:"metadata"`
}

type ConsentPurpose struct {
	ID          string    `json:"id"`
	Name        string    `json:"name"`
	Description string    `json:"description"`
	Required    bool      `json:"required"`
	Consented   bool      `json:"consented"`
	ConsentDate time.Time `json:"consent_date"`
	LegalBasis  string    `json:"legal_basis"`
}

type ConsentRecord struct {
	ID                 string           `json:"id"`
	DataSubjectID      string           `json:"data_subject_id"`
	DataSubjectEmail   string           `json:"data_subject_email"`
	ConsentVersion     string           `json:"consent_version"`
	ConsentDate        time.Time        `json:"consent_date"`
	ConsentMethod      string           `json:"consent_method"` // "explicit", "implicit", "opt_in", "opt_out"
	ConsentScope       []ConsentPurpose `json:"consent_scope"`
	LegalBasis         string           `json:"legal_basis"`
	ProcessingPurposes []string         `json:"processing_purposes"`
	DataCategories     []string         `json:"data_categories"`
	Recipients         []DataRecipient  `json:"recipients"`
	RetentionPeriod    time.Duration    `json:"retention_period"`
	ExpiryDate         *time.Time       `json:"expiry_date,omitempty"`
	RenewalDate        *time.Time       `json:"renewal_date,omitempty"`
	WithdrawalDate     *time.Time       `json:"withdrawal_date,omitempty"`
	WithdrawalMethod   string           `json:"withdrawal_method,omitempty"`
	ConsentProof       *ConsentProof    `json:"consent_proof,omitempty"`
	Status             string           `json:"status"` // "active", "expired", "withdrawn", "renewed"
	Granular           bool             `json:"granular"`
	Specific           bool             `json:"specific"`
	Informed           bool             `json:"informed"`
	Unambiguous        bool             `json:"unambiguous"`
	// Additional fields needed by tests
	Purpose      string         `json:"purpose,omitempty"`
	ConsentGiven bool           `json:"consent_given"`
	Timestamp    *time.Time     `json:"timestamp,omitempty"`
	Source       string         `json:"source,omitempty"`
	IPAddress    string         `json:"ip_address,omitempty"`
	UserAgent    string         `json:"user_agent,omitempty"`
	Metadata     map[string]any `json:"metadata"`
	CreatedAt    time.Time      `json:"created_at"`
	UpdatedAt    time.Time      `json:"updated_at"`
}

type ConsentStore interface {
	StoreConsent(ctx context.Context, consent *ConsentRecord) error
	GetConsent(ctx context.Context, dataSubjectID, purpose string) (*ConsentRecord, error)
	GetAllConsents(ctx context.Context, dataSubjectID string) ([]*ConsentRecord, error)
	UpdateConsent(ctx context.Context, consentID string, updates *ConsentUpdates) error
	WithdrawConsent(ctx context.Context, consentID string, withdrawal *ConsentWithdrawal) error
	GetExpiredConsents(ctx context.Context) ([]*ConsentRecord, error)
	GetConsentsForRenewal(ctx context.Context) ([]*ConsentRecord, error)
	// Additional methods needed by tests
	RecordConsent(ctx context.Context, consent *ConsentRecord) error
	ListConsents(ctx context.Context, dataSubjectID string) ([]*ConsentRecord, error)
	GetConsentHistory(ctx context.Context, consentID string) ([]*ConsentHistoryEntry, error)
	CleanupExpiredConsents(ctx context.Context) error
}

type ConsentUpdate = ConsentUpdates

type ConsentUpdates struct {
	ConsentScope    []ConsentPurpose `json:"consent_scope,omitempty"`
	Recipients      []DataRecipient  `json:"recipients,omitempty"`
	RetentionPeriod *time.Duration   `json:"retention_period,omitempty"`
	ExpiryDate      *time.Time       `json:"expiry_date,omitempty"`
	UpdatedBy       string           `json:"updated_by"`
	UpdateReason    string           `json:"update_reason"`
	// Additional fields needed by tests
	ConsentGiven bool           `json:"consent_given,omitempty"`
	Timestamp    time.Time      `json:"timestamp,omitempty"`
	Reason       string         `json:"reason,omitempty"`
	Metadata     map[string]any `json:"metadata,omitempty"`
}

type ConsentWithdrawal struct {
	WithdrawalDate    time.Time `json:"withdrawal_date"`
	WithdrawalMethod  string    `json:"withdrawal_method"`
	Reason            string    `json:"reason,omitempty"`
	PartialWithdrawal bool      `json:"partial_withdrawal"`
	WithdrawnPurposes []string  `json:"withdrawn_purposes,omitempty"`
	RequestedBy       string    `json:"requested_by"`
	Verified          bool      `json:"verified"`
	// Additional fields needed by tests
	Timestamp time.Time      `json:"timestamp,omitempty"`
	Method    string         `json:"method,omitempty"`
	Metadata  map[string]any `json:"metadata,omitempty"`
}

type ContextualRiskFactor struct {
	RiskFactor
	Context    string         `json:"context"`
	Conditions map[string]any `json:"conditions"`
	Multiplier float64        `json:"multiplier"`
	Temporal   bool           `json:"temporal"`
	Behavioral bool           `json:"behavioral"`
}

type ControlEvidence struct {
	ID               string         `json:"id"`
	ControlID        string         `json:"control_id"`
	EvidenceType     string         `json:"evidence_type"`
	Description      string         `json:"description"`
	Source           string         `json:"source"`
	CollectionDate   time.Time      `json:"collection_date"`
	Data             map[string]any `json:"data"`
	Verified         bool           `json:"verified"`
	VerificationDate *time.Time     `json:"verification_date,omitempty"`
	VerifiedBy       string         `json:"verified_by"`
	Integrity        string         `json:"integrity"` // checksum/hash
	RetentionDate    time.Time      `json:"retention_date"`
	Archived         bool           `json:"archived"`
	Metadata         map[string]any `json:"metadata"`
}

type ControlStatus struct {
	ControlID           string         `json:"control_id"`
	CurrentStatus       string         `json:"current_status"`
	LastTestDate        time.Time      `json:"last_test_date"`
	NextTestDate        time.Time      `json:"next_test_date"`
	ComplianceRate      float64        `json:"compliance_rate"`
	ExceptionCount      int            `json:"exception_count"`
	TrendDirection      string         `json:"trend_direction"` // "improving", "stable", "declining"
	RiskLevel           string         `json:"risk_level"`
	EffectivenessRating float64        `json:"effectiveness_rating"`
	Metadata            map[string]any `json:"metadata"`
}

type ControlTestResult struct {
	ControlID       string                 `json:"control_id"`
	TestID          string                 `json:"test_id"`
	TestDate        time.Time              `json:"test_date"`
	TestType        string                 `json:"test_type"`
	Status          string                 `json:"status"` // "effective", "ineffective", "not_tested"
	Score           float64                `json:"score"`
	Threshold       float64                `json:"threshold"`
	Passed          bool                   `json:"passed"`
	Evidence        []*ControlEvidence     `json:"evidence"`
	Exceptions      []*ComplianceException `json:"exceptions"`
	Findings        []string               `json:"findings"`
	Recommendations []string               `json:"recommendations"`
	TestDuration    time.Duration          `json:"test_duration"`
	TesterID        string                 `json:"tester_id"`
	ReviewerID      string                 `json:"reviewer_id"`
	Metadata        map[string]any         `json:"metadata"`
}

type ControlTester interface {
	TestControl(ctx context.Context, control SOC2Control) (*ControlTestResult, error)
	TestAllControls(ctx context.Context) ([]*ControlTestResult, error)
	GetControlStatus(controlID string) (*ControlStatus, error)
	ScheduleControlTest(controlID string, frequency time.Duration) error
}

type CrossBorderRule struct {
	ID                 string   `json:"id"`
	Name               string   `json:"name"`
	SourceCountries    []string `json:"source_countries"`
	DestCountries      []string `json:"dest_countries"`
	DataCategories     []string `json:"data_categories"`
	RequiredSafeguards []string `json:"required_safeguards"`
	Prohibited         bool     `json:"prohibited"`
	Conditions         []string `json:"conditions"`
}

type CrossBorderTransfer struct {
	ID                 string         `json:"id"`
	DataExporter       string         `json:"data_exporter"`
	DataImporter       string         `json:"data_importer"`
	SourceCountry      string         `json:"source_country"`
	DestinationCountry string         `json:"destination_country"`
	DataCategories     []string       `json:"data_categories"`
	Purposes           []string       `json:"purposes"`
	LegalBasis         string         `json:"legal_basis"`
	Safeguards         []string       `json:"safeguards"`
	AdequacyDecision   bool           `json:"adequacy_decision"`
	SCCApplied         bool           `json:"scc_applied"`
	BCRApplied         bool           `json:"bcr_applied"`
	TransferDate       time.Time      `json:"transfer_date"`
	Volume             string         `json:"volume"`
	Frequency          string         `json:"frequency"`
	Metadata           map[string]any `json:"metadata"`
}

type CrossBorderTransferLog struct {
	TransferID         string         `json:"transfer_id"`
	DataExporter       string         `json:"data_exporter"`
	DataImporter       string         `json:"data_importer"`
	SourceCountry      string         `json:"source_country"`
	DestinationCountry string         `json:"destination_country"`
	Timestamp          time.Time      `json:"timestamp"`
	LegalBasis         string         `json:"legal_basis"`
	Safeguards         []string       `json:"safeguards"`
	Metadata           map[string]any `json:"metadata"`
}

type CrossBorderValidator interface {
	ValidateTransfer(ctx context.Context, transfer *CrossBorderTransfer) (*TransferValidation, error)
	GetAdequacyDecisions() ([]AdequacyDecision, error)
	ValidateStandardContractualClauses(ctx context.Context, clauses *SCCValidation) (*SCCResult, error)
	ValidateBindingCorporateRules(ctx context.Context, bcr *BCRValidation) (*BCRResult, error)
}

type CustomMetric struct {
	ID          string         `json:"id"`
	Name        string         `json:"name"`
	Description string         `json:"description"`
	Value       float64        `json:"value"`
	Unit        string         `json:"unit"`
	Type        string         `json:"type"`
	Category    string         `json:"category"`
	Timestamp   time.Time      `json:"timestamp"`
	Metadata    map[string]any `json:"metadata"`
}

type CustomMetricQuery struct {
	ID          string         `json:"id"`
	Name        string         `json:"name"`
	Query       string         `json:"query"`
	Type        string         `json:"type"`
	Parameters  map[string]any `json:"parameters"`
	Aggregation string         `json:"aggregation"`
	TimeRange   TimeRange      `json:"time_range"`
}

type DashboardAlert struct {
	ID             string         `json:"id"`
	Type           string         `json:"type"`
	Severity       string         `json:"severity"`
	Title          string         `json:"title"`
	Description    string         `json:"description"`
	Metric         string         `json:"metric"`
	Threshold      float64        `json:"threshold"`
	CurrentValue   float64        `json:"current_value"`
	Timestamp      time.Time      `json:"timestamp"`
	Status         string         `json:"status"`
	AcknowledgedBy string         `json:"acknowledged_by,omitempty"`
	AcknowledgedAt *time.Time     `json:"acknowledged_at,omitempty"`
	ResolvedAt     *time.Time     `json:"resolved_at,omitempty"`
	Actions        []AlertAction  `json:"actions"`
	Metadata       map[string]any `json:"metadata"`
}

type DashboardAlertManager interface {
	CheckThresholds(ctx context.Context, metrics *DashboardMetrics) ([]*DashboardAlert, error)
	SendAlert(ctx context.Context, alert *DashboardAlert) error
	GetActiveAlerts(ctx context.Context) ([]*DashboardAlert, error)
	AcknowledgeAlert(ctx context.Context, alertID string, acknowledgedBy string) error
}

type DashboardCache interface {
	Get(key string) (any, bool)
	Set(key string, value any, ttl time.Duration)
	Delete(key string)
	Clear()
}

type DashboardConfig struct {
	Enabled              bool          `json:"enabled"`
	RefreshInterval      time.Duration `json:"refresh_interval"`
	CacheEnabled         bool          `json:"cache_enabled"`
	CacheTTL             time.Duration `json:"cache_ttl"`
	RealTimeUpdates      bool          `json:"real_time_updates"`
	HistoricalDataDays   int           `json:"historical_data_days"`
	MaxDataPoints        int           `json:"max_data_points"`
	AlertingEnabled      bool          `json:"alerting_enabled"`
	ExportEnabled        bool          `json:"export_enabled"`
	CustomMetricsEnabled bool          `json:"custom_metrics_enabled"`
}

type DashboardLayout struct {
	ID          string            `json:"id"`
	Name        string            `json:"name"`
	Description string            `json:"description"`
	Widgets     []DashboardWidget `json:"widgets"`
	CreatedBy   string            `json:"created_by"`
	CreatedAt   time.Time         `json:"created_at"`
	UpdatedAt   time.Time         `json:"updated_at"`
	IsDefault   bool              `json:"is_default"`
	Permissions []string          `json:"permissions"`
}

type DashboardMetrics struct {
	Timestamp          time.Time           `json:"timestamp"`
	ComplianceMetrics  *ComplianceMetrics  `json:"compliance_metrics"`
	RiskMetrics        *RiskMetrics        `json:"risk_metrics"`
	AuditMetrics       *AuditMetrics       `json:"audit_metrics"`
	PerformanceMetrics *PerformanceMetrics `json:"performance_metrics"`
	CustomMetrics      []*CustomMetric     `json:"custom_metrics"`
	Alerts             []*DashboardAlert   `json:"alerts"`
	Summary            *DashboardSummary   `json:"summary"`
}

type DashboardSummary struct {
	OverallHealth    string             `json:"overall_health"`
	ComplianceStatus string             `json:"compliance_status"`
	RiskStatus       string             `json:"risk_status"`
	AuditStatus      string             `json:"audit_status"`
	ActiveAlerts     int                `json:"active_alerts"`
	CriticalIssues   int                `json:"critical_issues"`
	TrendDirection   string             `json:"trend_direction"`
	LastUpdated      time.Time          `json:"last_updated"`
	KeyMetrics       map[string]float64 `json:"key_metrics"`
	Recommendations  []string           `json:"recommendations"`
	Metadata         map[string]any     `json:"metadata"`
}

type DashboardWidget struct {
	ID          string         `json:"id"`
	Type        string         `json:"type"`
	Title       string         `json:"title"`
	Description string         `json:"description"`
	Position    WidgetPosition `json:"position"`
	Size        WidgetSize     `json:"size"`
	Config      WidgetConfig   `json:"config"`
	Data        any            `json:"data"`
	LastUpdated time.Time      `json:"last_updated"`
	Metadata    map[string]any `json:"metadata"`
}

type DataAccessLog struct {
	DataType       string    `json:"data_type"`
	Classification string    `json:"classification"`
	Action         string    `json:"action"` // read, write, delete, export
	RecordCount    int       `json:"record_count"`
	Fields         []string  `json:"fields,omitempty"`
	Timestamp      time.Time `json:"timestamp"`
	Purpose        string    `json:"purpose,omitempty"`
}

type DataAccessRequest struct {
	ID            string                `json:"id"`
	DataSubjectID string                `json:"data_subject_id"`
	Email         string                `json:"email"`
	RequestDate   time.Time             `json:"request_date"`
	RequestType   string                `json:"request_type"` // "access", "portability", "erasure", "rectification", "objection"
	Scope         []string              `json:"scope"`
	Verification  *IdentityVerification `json:"verification"`
	Status        string                `json:"status"`
	DueDate       time.Time             `json:"due_date"`
	// Additional fields needed by tests
	Timestamp   time.Time      `json:"timestamp,omitempty"`
	ContactInfo string         `json:"contact_info,omitempty"`
	UserID      string         `json:"user_id,omitempty"`
	Purpose     string         `json:"purpose,omitempty"`
	Region      string         `json:"region,omitempty"`
	Metadata    map[string]any `json:"metadata"`
}

type DataAccessResponse struct {
	RequestID      string         `json:"request_id"`
	ResponseDate   time.Time      `json:"response_date"`
	Data           map[string]any `json:"data"`
	DataSources    []string       `json:"data_sources"`
	Format         string         `json:"format"`
	DeliveryMethod string         `json:"delivery_method"`
	Encrypted      bool           `json:"encrypted"`
	// Additional fields needed by tests
	Status   string         `json:"status,omitempty"`
	Metadata map[string]any `json:"metadata"`
}

type DataAccessResult struct {
	Allowed       bool           `json:"allowed"`
	Data          any            `json:"data,omitempty"`
	MaskedData    any            `json:"masked_data,omitempty"`
	Restrictions  []string       `json:"restrictions,omitempty"`
	Violations    []string       `json:"violations,omitempty"`
	AuditRequired bool           `json:"audit_required"`
	ExpiresAt     time.Time      `json:"expires_at,omitempty"`
	Metadata      map[string]any `json:"metadata,omitempty"`
}

type DataAggregator interface {
	AggregateByTimeframe(ctx context.Context, data []DataPoint, interval time.Duration) ([]AggregatedDataPoint, error)
	AggregateByDimension(ctx context.Context, data []DataPoint, dimension string) (map[string]float64, error)
	CalculateTrends(ctx context.Context, data []DataPoint) (*TrendAnalysis, error)
	GenerateSummary(ctx context.Context, data []DataPoint) (*DataSummary, error)
}

type DataClassification string

type DataContext struct {
	Data           any                           `json:"data"`
	Classification DataClassification            `json:"classification"`
	Fields         map[string]DataClassification `json:"fields"`
	Metadata       map[string]any                `json:"metadata"`
	Timestamp      time.Time                     `json:"timestamp"`
	UserID         string                        `json:"user_id"`
	TenantID       string                        `json:"tenant_id"`
	Region         string                        `json:"region"`
	Purpose        string                        `json:"purpose"`
}

type DataDeletionProvider interface {
	Name() string
	DeleteUserData(ctx context.Context, request *DataDeletionRequest) (*DataDeletionResult, error)
	IsRequired() bool // Whether failure of this provider should fail the entire operation
}

type DataDeletionRequest struct {
	DataSubjectID  string    `json:"data_subject_id"`
	TenantID       string    `json:"tenant_id"`
	ErasureScope   []string  `json:"erasure_scope"`
	RetainForLegal bool      `json:"retain_for_legal"`
	RequestID      string    `json:"request_id"`
	Timestamp      time.Time `json:"timestamp"`
}

type DataDeletionResult struct {
	ProviderName      string        `json:"provider_name"`
	DeletedRecords    int           `json:"deleted_records"`
	RetainedRecords   int           `json:"retained_records"`
	DeletedDataTypes  []string      `json:"deleted_data_types"`
	RetainedDataTypes []string      `json:"retained_data_types"`
	RetentionReasons  []string      `json:"retention_reasons"`
	ProcessingTime    time.Duration `json:"processing_time"`
	Success           bool          `json:"success"`
	ErrorMessage      string        `json:"error_message,omitempty"`
}

type DataErasureRequest struct {
	DataAccessRequest
	ErasureScope   []string `json:"erasure_scope"`
	RetainForLegal bool     `json:"retain_for_legal"`
	Reason         string   `json:"reason"`
}

type DataErasureResponse struct {
	RequestID          string    `json:"request_id"`
	ResponseDate       time.Time `json:"response_date"`
	ErasedData         []string  `json:"erased_data"`
	RetainedData       []string  `json:"retained_data"`
	RetentionReason    string    `json:"retention_reason,omitempty"`
	ThirdPartyNotified bool      `json:"third_party_notified"`
	// Additional fields needed by tests
	Status       string         `json:"status,omitempty"`
	DataDeleted  []string       `json:"data_deleted,omitempty"`
	DeletedCount int            `json:"deleted_count,omitempty"`
	Metadata     map[string]any `json:"metadata"`
}

type DataObjectionRequest struct {
	DataAccessRequest
	ProcessingPurposes []string `json:"processing_purposes"`
	ObjectionReason    string   `json:"objection_reason"`
	LegalGrounds       string   `json:"legal_grounds"`
}

type DataObjectionResponse struct {
	RequestID           string         `json:"request_id"`
	ResponseDate        time.Time      `json:"response_date"`
	ProcessingStopped   bool           `json:"processing_stopped"`
	ContinuedProcessing []string       `json:"continued_processing,omitempty"`
	LegalJustification  string         `json:"legal_justification,omitempty"`
	Metadata            map[string]any `json:"metadata"`
}

type DataPoint struct {
	Timestamp time.Time         `json:"timestamp"`
	Value     float64           `json:"value"`
	Labels    map[string]string `json:"labels"`
	Metadata  map[string]any    `json:"metadata"`
}

type DataPortabilityRequest struct {
	DataAccessRequest
	TargetController string `json:"target_controller,omitempty"`
	Format           string `json:"format"` // "json", "xml", "csv"
	StructuredData   bool   `json:"structured_data"`
}

type DataPortabilityResponse struct {
	RequestID      string         `json:"request_id"`
	ResponseDate   time.Time      `json:"response_date"`
	Data           map[string]any `json:"data"`
	Format         string         `json:"format"`
	StructuredData bool           `json:"structured_data"`
	TransferMethod string         `json:"transfer_method"`
	Metadata       map[string]any `json:"metadata"`
}

type DataProcessingActivity struct {
	ID                string          `json:"id"`
	Name              string          `json:"name"`
	Description       string          `json:"description"`
	Controller        string          `json:"controller"`
	Processor         string          `json:"processor,omitempty"`
	Purposes          []string        `json:"purposes"`
	LegalBasis        []string        `json:"legal_basis"`
	DataCategories    []string        `json:"data_categories"`
	DataSubjects      []string        `json:"data_subjects"`
	Recipients        []DataRecipient `json:"recipients"`
	ThirdCountries    []string        `json:"third_countries"`
	Safeguards        []string        `json:"safeguards"`
	RetentionPeriod   time.Duration   `json:"retention_period"`
	SecurityMeasures  []string        `json:"security_measures"`
	DataSources       []string        `json:"data_sources"`
	AutomatedDecision bool            `json:"automated_decision"`
	Profiling         bool            `json:"profiling"`
	HighRisk          bool            `json:"high_risk"`
	PIARequired       bool            `json:"pia_required"`
	PIACompleted      bool            `json:"pia_completed"`
	LastReview        time.Time       `json:"last_review"`
	NextReview        time.Time       `json:"next_review"`
	Metadata          map[string]any  `json:"metadata"`
}

type DataProcessingLog struct {
	ProcessingID      string         `json:"processing_id"`
	DataSubject       string         `json:"data_subject"`
	ProcessingPurpose string         `json:"processing_purpose"`
	LegalBasis        string         `json:"legal_basis"`
	DataCategories    []string       `json:"data_categories"`
	Recipients        []string       `json:"recipients"`
	ThirdCountries    []string       `json:"third_countries"`
	RetentionPeriod   time.Duration  `json:"retention_period"`
	SecurityMeasures  []string       `json:"security_measures"`
	ConsentDetails    *ConsentData   `json:"consent_details"`
	Metadata          map[string]any `json:"metadata"`
	Timestamp         time.Time      `json:"timestamp"`
}

type DataProtectionConfig struct {
	DefaultClassification DataClassification                   `json:"default_classification"`
	FieldClassifications  map[string]DataClassification        `json:"field_classifications"`
	EncryptionKey         string                               `json:"encryption_key"`
	RegionRestrictions    map[DataClassification][]string      `json:"region_restrictions"`
	RetentionPolicies     map[DataClassification]time.Duration `json:"retention_policies"`
	AccessControls        map[DataClassification][]string      `json:"access_controls"`
	MaskingRules          map[string]MaskingRule               `json:"masking_rules"`
}

type DataProtectionData struct {
	DataClassification string        `json:"data_classification"`
	EncryptionMethod   string        `json:"encryption_method"`
	EncryptionStrength string        `json:"encryption_strength"`
	KeyManagement      string        `json:"key_management"`
	DataLocation       []string      `json:"data_location"`
	BackupEncrypted    bool          `json:"backup_encrypted"`
	TransitEncryption  bool          `json:"transit_encryption"`
	RestEncryption     bool          `json:"rest_encryption"`
	DataMasking        bool          `json:"data_masking"`
	RetentionPeriod    time.Duration `json:"retention_period"`
}

type DataProtectionManager struct {
	// contains filtered or unexported fields
}

type DataProtectionRequest struct {
	UserID         string             `json:"user_id"`
	TenantID       string             `json:"tenant_id"`
	DataType       string             `json:"data_type"`
	Classification DataClassification `json:"classification"`
	Purpose        string             `json:"purpose"`
	Region         string             `json:"region"`
	Fields         []string           `json:"fields"`
	Metadata       map[string]any     `json:"metadata"`
}

type DataRecipient struct {
	ID         string   `json:"id"`
	Name       string   `json:"name"`
	Type       string   `json:"type"` // "controller", "processor", "third_party"
	Country    string   `json:"country"`
	Purposes   []string `json:"purposes"`
	Safeguards []string `json:"safeguards"`
}

type DataRectificationRequest struct {
	DataAccessRequest
	IncorrectData map[string]any `json:"incorrect_data"`
	CorrectedData map[string]any `json:"corrected_data"`
}

type DataRectificationResponse struct {
	RequestID          string         `json:"request_id"`
	ResponseDate       time.Time      `json:"response_date"`
	RectifiedData      map[string]any `json:"rectified_data"`
	ThirdPartyNotified bool           `json:"third_party_notified"`
	Metadata           map[string]any `json:"metadata"`
}

type DataSubjectRequestLog struct {
	RequestID     string         `json:"request_id"`
	RequestType   string         `json:"request_type"`
	DataSubjectID string         `json:"data_subject_id"`
	Timestamp     time.Time      `json:"timestamp"`
	Status        string         `json:"status"`
	ProcessedBy   string         `json:"processed_by"`
	Details       map[string]any `json:"details"`
	Metadata      map[string]any `json:"metadata"`
}

type DataSubjectRightsHandler interface {
	HandleAccessRequest(ctx context.Context, request *DataAccessRequest) (*DataAccessResponse, error)
	HandlePortabilityRequest(ctx context.Context, request *DataPortabilityRequest) (*DataPortabilityResponse, error)
	HandleErasureRequest(ctx context.Context, request *DataErasureRequest) (*DataErasureResponse, error)
	HandleRectificationRequest(ctx context.Context, request *DataRectificationRequest) (*DataRectificationResponse, error)
	HandleObjectionRequest(ctx context.Context, request *DataObjectionRequest) (*DataObjectionResponse, error)
	GetRequestStatus(ctx context.Context, requestID string) (*RequestStatus, error)
}

type DataSummary struct {
	Count       int                `json:"count"`
	Min         float64            `json:"min"`
	Max         float64            `json:"max"`
	Average     float64            `json:"average"`
	Median      float64            `json:"median"`
	StdDev      float64            `json:"std_dev"`
	Percentiles map[string]float64 `json:"percentiles"`
	Metadata    map[string]any     `json:"metadata"`
}

type DataTokenizer struct {
	// contains filtered or unexported fields
}

type EcommerceComplianceConfig struct {
	PCIDSSRequired     bool     `json:"pci_dss_required"`
	GDPRRequired       bool     `json:"gdpr_required"`
	CCPARequired       bool     `json:"ccpa_required"`
	COPPARequired      bool     `json:"coppa_required"`          // Children's Online Privacy Protection Act
	AccessibilityStds  []string `json:"accessibility_standards"` // WCAG, ADA
	ConsumerProtection bool     `json:"consumer_protection"`
	DataPortability    bool     `json:"data_portability"`
	CookieConsent      bool     `json:"cookie_consent"`
	MarketingConsent   bool     `json:"marketing_consent"`
	PaymentSecurity    string   `json:"payment_security_level"`
	FraudPrevention    bool     `json:"fraud_prevention"`
	TaxCompliance      []string `json:"tax_compliance"`
	CrossBorderRules   []string `json:"cross_border_rules"`
}

type EcommerceComplianceTemplate struct {
	// contains filtered or unexported fields
}

type EncryptedCachedSecret struct {
	EncryptedValue []byte // AES-256-GCM encrypted value
	Nonce          []byte // GCM nonce
	ExpiresAt      time.Time
}

type EncryptedSecretCache struct {
	// contains filtered or unexported fields
}

type EnhancedAuditConfig struct {
	DetailedLogging     bool          `json:"detailed_logging"`
	RealTimeMonitoring  bool          `json:"real_time_monitoring"`
	AnomalyDetection    bool          `json:"anomaly_detection"`
	ThreatIntelligence  bool          `json:"threat_intelligence"`
	AutomatedResponse   bool          `json:"automated_response"`
	RetentionPeriod     time.Duration `json:"retention_period"`
	EncryptionRequired  bool          `json:"encryption_required"`
	IntegrityValidation bool          `json:"integrity_validation"`
}

type EnhancedAuditLogger interface {
	AuditLogger // Embed base interface
	StartSOC2Audit(ctx LiftContext) string
	LogSecurityControls(auditID string, controls *SOC2Controls) error
	LogGDPREvent(auditID string, event *GDPREvent) error
	LogComplianceTest(auditID string, test *ComplianceTestResult) error
	LogDataProcessing(auditID string, processing *DataProcessingLog) error
	CompleteSOC2Audit(auditID string, result any, err error) error
}

type EnhancedComplianceConfig struct {
	ComplianceConfig                     // Embed base config
	SOC2TypeII       SOC2TypeIIConfig    `json:"soc2_type_ii"`
	GDPR             GDPRConfig          `json:"gdpr"`
	IndustryTemplate IndustryTemplate    `json:"industry_template"`
	AuditEnhanced    EnhancedAuditConfig `json:"audit_enhanced"`
}

type EnhancedComplianceFramework struct {
	// contains filtered or unexported fields
}

type EventAnalysis struct {
	EventID   string         `json:"event_id"`
	Timestamp time.Time      `json:"timestamp"`
	RiskScore *RiskScore     `json:"risk_score,omitempty"`
	Anomalies []*Anomaly     `json:"anomalies,omitempty"`
	Analyses  map[string]any `json:"analyses"`
}

type Evidence struct {
	ID          string         `json:"id"`
	Type        string         `json:"type"`
	Description string         `json:"description"`
	Source      string         `json:"source"`
	Timestamp   time.Time      `json:"timestamp"`
	Data        map[string]any `json:"data"`
	Verified    bool           `json:"verified"`
}

type EvidenceCollector interface {
	CollectEvidence(ctx context.Context, control SOC2Control) (*ControlEvidence, error)
	CollectSystemEvidence(ctx context.Context) (*SystemEvidence, error)
	ValidateEvidence(evidence *ControlEvidence) (*EvidenceValidation, error)
	ArchiveEvidence(evidence *ControlEvidence) error
}

type EvidenceRequirement struct {
	Type        string `json:"type"`
	Description string `json:"description"`
	Required    bool   `json:"required"`
	Automated   bool   `json:"automated"`
}

type EvidenceValidation struct {
	Valid             bool      `json:"valid"`
	ValidationDate    time.Time `json:"validation_date"`
	ValidatedBy       string    `json:"validated_by"`
	Issues            []string  `json:"issues"`
	Recommendations   []string  `json:"recommendations"`
	IntegrityCheck    bool      `json:"integrity_check"`
	CompletenessCheck bool      `json:"completeness_check"`
	AccuracyCheck     bool      `json:"accuracy_check"`
}

type ExceptionResolution struct {
	ResolvedDate     time.Time  `json:"resolved_date"`
	ResolvedBy       string     `json:"resolved_by"`
	ResolutionType   string     `json:"resolution_type"`
	Description      string     `json:"description"`
	ActionsToken     []string   `json:"actions_taken"`
	Verified         bool       `json:"verified"`
	VerifiedBy       string     `json:"verified_by"`
	VerificationDate *time.Time `json:"verification_date,omitempty"`
}

type ExceptionTracker interface {
	RecordException(exception *ComplianceException) error
	GetExceptions(controlID string, since time.Time) ([]*ComplianceException, error)
	GetExceptionTrends() (*ExceptionTrends, error)
	ResolveException(exceptionID string, resolution *ExceptionResolution) error
}

type ExceptionTrends struct {
	Period                string         `json:"period"`
	TotalExceptions       int            `json:"total_exceptions"`
	OpenExceptions        int            `json:"open_exceptions"`
	ResolvedExceptions    int            `json:"resolved_exceptions"`
	ExceptionsByControl   map[string]int `json:"exceptions_by_control"`
	ExceptionsBySeverity  map[string]int `json:"exceptions_by_severity"`
	TrendDirection        string         `json:"trend_direction"`
	AverageResolutionTime time.Duration  `json:"average_resolution_time"`
	ComplianceRate        float64        `json:"compliance_rate"`
	Recommendations       []string       `json:"recommendations"`
}

type FeatureExtractionConfig struct {
	EnabledFeatures     []string           `json:"enabled_features"`
	TemporalWindow      time.Duration      `json:"temporal_window"`
	BehavioralWindow    time.Duration      `json:"behavioral_window"`
	ContextualDepth     int                `json:"contextual_depth"`
	FeatureWeights      map[string]float64 `json:"feature_weights"`
	NormalizationMethod string             `json:"normalization_method"`
	Metadata            map[string]any     `json:"metadata"`
}

type FeatureExtractor interface {
	Extract(event *AuditEvent, context *RiskContext) (float64, error)
	GetName() string
	GetDescription() string
	GetWeight() float64
}

type FileSecretsProvider struct {
	// contains filtered or unexported fields
}

type ForecastPoint struct {
	Timestamp  time.Time `json:"timestamp"`
	Value      float64   `json:"value"`
	Confidence float64   `json:"confidence"`
	Lower      float64   `json:"lower"`
	Upper      float64   `json:"upper"`
}

type GDPRAuditLogger interface {
	LogConsentEvent(ctx context.Context, event *ConsentEvent) error
	LogDataSubjectRequest(ctx context.Context, request *DataSubjectRequestLog) error
	LogDataProcessingActivity(ctx context.Context, activity *DataProcessingLog) error
	LogCrossBorderTransfer(ctx context.Context, transfer *CrossBorderTransferLog) error
	LogPrivacyBreach(ctx context.Context, breach *PrivacyBreachLog) error
}

type GDPRConfig struct {
	Enabled                 bool                     `json:"enabled"`
	DataProcessingBasis     []string                 `json:"data_processing_basis"`
	ConsentManagement       bool                     `json:"consent_management"`
	DataMinimization        bool                     `json:"data_minimization"`
	RightToBeForgotten      bool                     `json:"right_to_be_forgotten"`
	DataPortability         bool                     `json:"data_portability"`
	BreachNotificationHours int                      `json:"breach_notification_hours"`
	DPORequired             bool                     `json:"dpo_required"`
	PIARequired             bool                     `json:"pia_required"`
	DataRetentionPolicies   map[string]time.Duration `json:"data_retention_policies"`
}

type GDPRConsentConfig struct {
	Enabled                  bool                     `json:"enabled"`
	ConsentRenewalDays       int                      `json:"consent_renewal_days"`
	AutomaticConsentRenewal  bool                     `json:"automatic_consent_renewal"`
	GranularConsentRequired  bool                     `json:"granular_consent_required"`
	ConsentWithdrawalEnabled bool                     `json:"consent_withdrawal_enabled"`
	DataPortabilityEnabled   bool                     `json:"data_portability_enabled"`
	RightToErasureEnabled    bool                     `json:"right_to_erasure_enabled"`
	BreachNotificationHours  int                      `json:"breach_notification_hours"`
	DataRetentionPolicies    map[string]time.Duration `json:"data_retention_policies"`
	CrossBorderTransferRules []CrossBorderRule        `json:"cross_border_transfer_rules"`
	PrivacyByDesignEnabled   bool                     `json:"privacy_by_design_enabled"`
	// Additional fields needed by tests
	ConsentExpiryDays      int  `json:"consent_expiry_days"`
	RequireExplicitConsent bool `json:"require_explicit_consent"`
	RequireConsentProof    bool `json:"require_consent_proof"`
	DataRetentionDays      int  `json:"data_retention_days"`
	RequestProcessingDays  int  `json:"request_processing_days"`
	ConsentProofRequired   bool `json:"consent_proof_required"`
}

type GDPRConsentManager struct {
	// contains filtered or unexported fields
}

type GDPREvent struct {
	EventType        string         `json:"event_type"`
	DataSubject      string         `json:"data_subject"`
	DataController   string         `json:"data_controller"`
	DataProcessor    string         `json:"data_processor"`
	ProcessingBasis  string         `json:"processing_basis"`
	DataCategories   []string       `json:"data_categories"`
	Recipients       []string       `json:"recipients"`
	RetentionPeriod  time.Duration  `json:"retention_period"`
	ConsentGiven     bool           `json:"consent_given"`
	ConsentWithdrawn bool           `json:"consent_withdrawn"`
	DataPortability  bool           `json:"data_portability"`
	RightToErasure   bool           `json:"right_to_erasure"`
	Metadata         map[string]any `json:"metadata"`
	Timestamp        time.Time      `json:"timestamp"`
}

type GovernmentComplianceConfig struct {
	FedRAMPLevel         string `json:"fedramp_level"` // "Low", "Moderate", "High"
	FISMARequired        bool   `json:"fisma_required"`
	NISTFramework        string `json:"nist_framework"`  // "800-53", "800-171", "CSF"
	ATORequired          bool   `json:"ato_required"`    // Authority to Operate
	STIGCompliance       bool   `json:"stig_compliance"` // Security Technical Implementation Guides
	ILLevel              string `json:"il_level"`        // Impact Level
	CUIHandling          bool   `json:"cui_handling"`    // Controlled Unclassified Information
	PIIProtection        bool   `json:"pii_protection"`
	Section508           bool   `json:"section_508"` // Accessibility
	FOIA                 bool   `json:"foia"`        // Freedom of Information Act
	RecordsManagement    bool   `json:"records_management"`
	IncidentReporting    bool   `json:"incident_reporting"`
	ContinuousMonitoring bool   `json:"continuous_monitoring"`
}

type GovernmentComplianceTemplate struct {
	// contains filtered or unexported fields
}

type HealthcareComplianceConfig struct {
	HIPAARequired        bool     `json:"hipaa_required"`
	HITECHRequired       bool     `json:"hitech_required"`
	FDACompliance        bool     `json:"fda_compliance"`
	DEACompliance        bool     `json:"dea_compliance"`
	PHIProtectionLevel   string   `json:"phi_protection_level"`
	BAAAgreements        bool     `json:"baa_agreements"` // Business Associate Agreements
	BreachNotification   bool     `json:"breach_notification"`
	AccessLogging        bool     `json:"access_logging"`
	DataMinimization     bool     `json:"data_minimization"`
	ConsentManagement    bool     `json:"consent_management"`
	InteroperabilityStds []string `json:"interoperability_standards"`
	ClinicalTrialData    bool     `json:"clinical_trial_data"`
	MedicalDeviceData    bool     `json:"medical_device_data"`
}

type HealthcareComplianceTemplate struct {
	// contains filtered or unexported fields
}

type IPAuthorizationConfig struct {
	// AllowedIPs is a list of IP addresses that are authorized
	AllowedIPs []string
	// AllowedIPList is a comma-separated string of allowed IPs (alternative format)
	AllowedIPList string
}

type IPAuthorizationService struct {
	// contains filtered or unexported fields
}

type IPExtractionError struct {
	Message string
	Headers map[string]string
}

type IdentityVerification struct {
	Method       string         `json:"method"`
	Verified     bool           `json:"verified"`
	VerifiedBy   string         `json:"verified_by"`
	VerifiedDate time.Time      `json:"verified_date"`
	Evidence     []string       `json:"evidence"`
	Metadata     map[string]any `json:"metadata"`
}

type InMemoryAuditStorage struct {
	// contains filtered or unexported fields
}

type IncidentForecast struct {
	Type          string         `json:"type"`
	Probability   float64        `json:"probability"`
	Severity      string         `json:"severity"`
	EstimatedTime time.Time      `json:"estimated_time"`
	Confidence    float64        `json:"confidence"`
	Indicators    []string       `json:"indicators"`
	Prevention    []string       `json:"prevention"`
	Impact        IncidentImpact `json:"impact"`
	Metadata      map[string]any `json:"metadata"`
}

type IncidentImpact struct {
	Financial    float64       `json:"financial"`
	Operational  string        `json:"operational"`
	Reputational string        `json:"reputational"`
	Compliance   string        `json:"compliance"`
	Recovery     time.Duration `json:"recovery"`
}

type IncidentRecord struct {
	Timestamp  time.Time `json:"timestamp"`
	Type       string    `json:"type"`
	Severity   string    `json:"severity"`
	Impact     string    `json:"impact"`
	Resolved   bool      `json:"resolved"`
	Resolution string    `json:"resolution"`
}

type IncidentResponseData struct {
	IncidentID       string    `json:"incident_id"`
	IncidentType     string    `json:"incident_type"`
	Severity         string    `json:"severity"`
	DetectionTime    time.Time `json:"detection_time"`
	ResponseTime     time.Time `json:"response_time"`
	ContainmentTime  time.Time `json:"containment_time"`
	ResolutionTime   time.Time `json:"resolution_time"`
	NotificationSent bool      `json:"notification_sent"`
	LessonsLearned   string    `json:"lessons_learned"`
}

type IndustryComplianceReport struct {
	Industry            string                     `json:"industry"`
	Regulations         []RegulationCompliance     `json:"regulations"`
	OverallScore        float64                    `json:"overall_score"`
	ComplianceStatus    string                     `json:"compliance_status"`
	CriticalFindings    []ComplianceFinding        `json:"critical_findings"`
	Recommendations     []ComplianceRecommendation `json:"recommendations"`
	NextAuditDate       time.Time                  `json:"next_audit_date"`
	CertificationStatus []CertificationStatus      `json:"certification_status"`
	RiskAssessment      *IndustryRiskAssessment    `json:"risk_assessment"`
	GeneratedAt         time.Time                  `json:"generated_at"`
}

type IndustryComplianceTemplate interface {
	GetIndustry() string
	GetRegulations() []string
	GetControls() []ComplianceControl
	GetAudits() []AuditRequirement
	GetRiskAssessments() []RiskAssessmentTemplate
	GetComplianceMiddleware() []LiftMiddleware
	ValidateCompliance(ctx LiftContext) (*ComplianceResult, error)
	GenerateComplianceReport() (*IndustryComplianceReport, error)
}

type IndustryComplianceTemplateManager struct {
	// contains filtered or unexported fields
}