io.tooloracle/ampel

Detailed Ampel for a specific DORA article. Each check with GREEN/YELLOW/RED conditions and evidence.

Re-run full assessment for an entity. Recomputes Ampel statuses from all available evidence.

Chain-linked audit log with integrity check.

Live Azure AD integration: MFA registration %, risky users, conditional access policies. DORA Art. 9 evidence. Requires Azure AD config in integrations_config.json.

Approve BaFin report for submission (4-eyes principle). Creates signed approval evidence.

Generate ITS 2024/1772 compliant BaFin incident report draft. All mandatory fields per DORA Art. 19/20. Preview mode — requires board approval.

Executive board summary: overall score, top 5 risks, overdue findings, SLA breaches, concentration risk, evidence health, owner workload. Designed for management/board reporting.

Approve or reject a bridge resolution. On approval: creates signed evidence, upgrades Ampel to GREEN, logs to audit chain.

Bridge gap analysis: classifies gaps by DATA/EVIDENCE/POLICY/WORKFLOW with closure path, owner, effort level.

Start bridge resolution workflow. Generates templates (Risk Acceptance, Contract Renegotiation, Concentration Policy, Exit Strategy), tracks approval process. Call bridge_approve to sign off.

Check status of all bridge resolution workflows for an entity. Shows open, pending, closed, rejected.

Oracle Event Bus status: events, cross-refs, connected oracles.

Check DORA Art. 30 contract clauses for a provider. Returns PASS/WARN/BLOCK with missing clauses and bridge classification.

Collect live Art. 10 evidence from NVD, CISA KEV, CERT-Bund. Auto-assesses.

Analyze contract against 15 DORA Art. 30 mandatory clauses. Returns compliance status per clause with confidence score, extracted text, gap reasoning, suggested fix.

Overview of all analyzed contracts per entity. Shows clause gaps, review status, document versions.

Upload contract text for DORA Art. 30 analysis. Creates document record with SHA-256 hash, version tracking, audit trail.

Register a new regulated entity.

Create temporary trial entity (48h) for self-service DORA assessment. No login needed.

Enterprise cross-oracle assessment. Runs 18 checks across CyberShield (NIS2/ISO 27001), SupplyChainOracle (LkSG/CSRD), HealthGuard (MDR/GDPR), CFOCoPilot (XRechnung), TaxOracle (DAC6), LegalTechOracle (DORA contracts). Auto-stores evidence and updates Ampel status.

Tag findings with cross-regulation impact (DORA + MiCA + AMLR). Shows which DORA findings also affect MiCA insider info or AMLR screening.

Map CVE/vulnerability to internal ICT providers and systems. Auto-creates findings for critical matches. DORA Art. 10.

Full provider dependency graph: providers, systems, checks, blast radius, SPOF detection.

List all registered regulated entities.

Get findings, SLA breaches, escalation status per entity.

Export evidence pack for article/check/entity. Pruefer-ready: evidence, assessments, findings, audit trail, signatures.

All evidence artefacts for an entity with hashes and expiry dates.

Run freshness watchdog. Expires stale evidence, downgrades GREEN->YELLOW->GREY if evidence too old.

DORA compliance gaps. RED/GREY/YELLOW items with priority and required actions.

Generate data-driven DORA Ampel PDF report. Score, gap analysis, provider register, audit trail integrity.

Generate watermarked trial report with score, gaps, and CTA.

Server + DB status.

DORA incident lifecycle: log, classify, notify (BaFin), close. Each step creates signed evidence.

LLM-based DORA Art. 30 contract analysis. Paste contract text, get clause-by-clause PRESENT/PARTIAL/MISSING for all 15 mandatory clauses. TEMPORARILY DISABLED (returns TOOL_TEMPORARILY_DISABLED).

Full entity onboarding: creates initial RED assessments for all 39 checks, collects auto-evidence from live sources, re-assesses, and returns readiness score.

Quick connectivity test.

Generate DORA policy/framework document draft for a specific article. 8 templates available (Art. 5,6,8,10,11,17,28,30). Uses entity data for customization.

Enrich provider dependencies with OECD economic risk: GDP, unemployment, CLI per provider country. DORA Art. 28-31 relevant.

Full DORA readiness score + Ampel per article. Returns GREEN/YELLOW/RED/GREY for all 26 articles, score 0-100, days until deadline.

AI Regulatory Watchdog: scrapes EBA/ESMA/BaFin/CERT-Bund for DORA updates. Returns alerts with affected articles and severity. Run daily via cron or on-demand.

Register an ICT third-party provider for DORA Art. 28 Register of Information. Stores provider data and creates evidence.

Show cross-regulation impacts for a specific DORA article. Maps DORA → MiCA + AMLR.

Re-test a finding: collect fresh evidence, reassess check, auto-close if GREEN. Full closed-loop.

Trigger escalation engine: auto-create findings, check SLA, escalate.

Run complete DORA+MiCA assessment for trial entity. Returns score, gaps, automation potential.

Score trend over time: weekly deltas, trajectory, peer benchmark. Shows improvement or decline.

ServiceNow incident + change management sync. DORA Art. 17/21 evidence. Returns 30-day incident stats, classification, resolution rates.

Update finding lifecycle: claim, set remediation plan, request re-test, close, or accept risk. Status flow: open -> in_progress -> retest_pending -> closed | risk_accepted.

Simulate provider failure: which articles/checks are affected, score impact, risk level.

Simulate stale evidence: what happens if a check stays stale for N days.