catalog

type Catalog struct {
	Groups   []Group
	Controls map[string]*Control // keyed by control ID
}

type Control struct {
	ID                     string   `yaml:"id"`
	Title                  string   `yaml:"title"`
	Description            string   `yaml:"description"`
	Category               string   `yaml:"category"`     // technical | policy | process | physical
	CSFFunction            string   `yaml:"csf_function"` // identify | protect | detect | respond | recover | govern
	Status                 string   `yaml:"status"`       // verified | to_do | planned | validated
	Owner                  string   `yaml:"owner"`        // platform | operator | shared
	Components             []string `yaml:"components,omitempty"`
	References             []string `yaml:"references,omitempty"`
	OperatorResponsibility string   `yaml:"operator_responsibility,omitempty"`

	// DerivedStatus is computed by the derive step — not persisted in YAML.
	// It is set when all findings for this control are resolved with evidence.
	DerivedStatus string `yaml:"-"`
}

type FrameworkCatalog struct {
	Framework struct {
		ID      string `yaml:"id"`
		Title   string `yaml:"title"`
		Version string `yaml:"version"`
		Source  string `yaml:"source"`
	} `yaml:"framework"`
	Requirements []FrameworkRequirement           `yaml:"requirements"`
	ByID         map[string]*FrameworkRequirement `yaml:"-"`
}

type FrameworkRequirement struct {
	ID          string `yaml:"id"`
	Title       string `yaml:"title"`
	Section     string `yaml:"section"`
	Description string `yaml:"description"`
}

type Group struct {
	ID       string    `yaml:"id"`
	Title    string    `yaml:"title"`
	Controls []Control `yaml:"-"`
}

type GroupFile struct {
	Group    Group     `yaml:"group"`
	Controls []Control `yaml:"controls"`
}

type Metadata struct {
	Version string `yaml:"version"`
	Groups  []struct {
		ID   string `yaml:"id"`
		File string `yaml:"file"`
	} `yaml:"groups"`
}