canina/docs/audit/36-mandatory-semantic-scope.json

[
  {
    "path": "backend/src/auth/auth.controller.ts",
    "reason": "Finding evidence for ARCH-001, SEC-003, and DOC-001",
    "relatedFindingIds": ["ARCH-001", "SEC-003", "DOC-001"],
    "relatedDiagnosticIds": [],
    "module": "Authentication and Authorization Backend",
    "semanticReviewRequired": true
  },
  {
    "path": "backend/src/auth/auth.service.ts",
    "reason": "Finding evidence for ARCH-001, SEC-002, and SEC-003",
    "relatedFindingIds": ["ARCH-001", "SEC-002", "SEC-003"],
    "relatedDiagnosticIds": [],
    "module": "Authentication and Authorization Backend",
    "semanticReviewRequired": true
  },
  {
    "path": "backend/src/auth/jwt.strategy.ts",
    "reason": "Finding evidence for SEC-001",
    "relatedFindingIds": ["SEC-001"],
    "relatedDiagnosticIds": [],
    "module": "Authentication and Authorization Backend",
    "semanticReviewRequired": true
  },
  {
    "path": "backend/src/auth/auth.module.ts",
    "reason": "Security sensitive module configuration",
    "relatedFindingIds": ["SEC-001"],
    "relatedDiagnosticIds": [],
    "module": "Authentication and Authorization Backend",
    "semanticReviewRequired": true
  },
  {
    "path": "backend/src/auth/jwt-auth.guard.ts",
    "reason": "Authorization guard verification",
    "relatedFindingIds": ["ADM-001"],
    "relatedDiagnosticIds": [],
    "module": "Authentication and Authorization Backend",
    "semanticReviewRequired": true
  },
  {
    "path": "backend/src/auth/dto/send-otp.dto.ts",
    "reason": "Authentication request payload validation",
    "relatedFindingIds": ["SEC-002", "SEC-003"],
    "relatedDiagnosticIds": [],
    "module": "Authentication and Authorization Backend",
    "semanticReviewRequired": true
  },
  {
    "path": "backend/src/auth/dto/verify-otp.dto.ts",
    "reason": "Authentication verification payload validation",
    "relatedFindingIds": ["SEC-002"],
    "relatedDiagnosticIds": [],
    "module": "Authentication and Authorization Backend",
    "semanticReviewRequired": true
  },
  {
    "path": "src/App.tsx",
    "reason": "Finding evidence for FE-001 and TS-001",
    "relatedFindingIds": ["FE-001", "TS-001"],
    "relatedDiagnosticIds": [],
    "module": "Storefront Shell and Routing",
    "semanticReviewRequired": true
  },
  {
    "path": "src/components/Header.tsx",
    "reason": "Finding evidence for FE-001",
    "relatedFindingIds": ["FE-001"],
    "relatedDiagnosticIds": [],
    "module": "Storefront Shell and Routing",
    "semanticReviewRequired": true
  },
  {
    "path": "src/store/userStore.ts",
    "reason": "Finding evidence for ARCH-001",
    "relatedFindingIds": ["ARCH-001"],
    "relatedDiagnosticIds": [],
    "module": "Authentication UI, Stores and API Clients",
    "semanticReviewRequired": true
  },
  {
    "path": "src/components/LoginModal.tsx",
    "reason": "Finding evidence for ARCH-001",
    "relatedFindingIds": ["ARCH-001"],
    "relatedDiagnosticIds": [],
    "module": "Authentication UI, Stores and API Clients",
    "semanticReviewRequired": true
  },
  {
    "path": "backend/src/orders/orders.service.ts",
    "reason": "Finding evidence for BE-001 and BE-002",
    "relatedFindingIds": ["BE-001", "BE-002"],
    "relatedDiagnosticIds": [],
    "module": "Orders Backend",
    "semanticReviewRequired": true
  },
  {
    "path": "backend/src/settings/settings.controller.ts",
    "reason": "Finding evidence for ADM-001",
    "relatedFindingIds": ["ADM-001"],
    "relatedDiagnosticIds": [],
    "module": "Settings and Administrative Backend",
    "semanticReviewRequired": true
  },
  {
    "path": "backend/prisma/schema.prisma",
    "reason": "Database modeling and rejected DB-001 verification",
    "relatedFindingIds": [],
    "relatedDiagnosticIds": [],
    "module": "Prisma Schema, Migrations and Seed",
    "semanticReviewRequired": true
  },
  {
    "path": "backend/prisma/seed.ts",
    "reason": "Finding evidence for TS-002 and DIAG-001",
    "relatedFindingIds": ["TS-002"],
    "relatedDiagnosticIds": ["DIAG-001"],
    "module": "Prisma Schema, Migrations and Seed",
    "semanticReviewRequired": true
  },
  {
    "path": "backend/src/common/metrics.controller.ts",
    "reason": "Finding evidence for TS-003 and DIAG-002",
    "relatedFindingIds": ["TS-003"],
    "relatedDiagnosticIds": ["DIAG-002"],
    "module": "NestJS Bootstrap and Shared Infrastructure",
    "semanticReviewRequired": true
  },
  {
    "path": "backend/src/pets/pets.controller.spec.ts",
    "reason": "Finding evidence for TEST-001 and DIAG-003",
    "relatedFindingIds": ["TEST-001"],
    "relatedDiagnosticIds": ["DIAG-003"],
    "module": "Unit and E2E Tests",
    "semanticReviewRequired": true
  },
  {
    "path": "backend/src/settings/settings.controller.spec.ts",
    "reason": "Finding evidence for TEST-001 and DIAG-004",
    "relatedFindingIds": ["TEST-001"],
    "relatedDiagnosticIds": ["DIAG-004"],
    "module": "Unit and E2E Tests",
    "semanticReviewRequired": true
  },
  {
    "path": "backend/src/users/users.controller.spec.ts",
    "reason": "Finding evidence for TEST-001, DIAG-005, and DIAG-006",
    "relatedFindingIds": ["TEST-001"],
    "relatedDiagnosticIds": ["DIAG-005", "DIAG-006"],
    "module": "Unit and E2E Tests",
    "semanticReviewRequired": true
  },
  {
    "path": "package.json",
    "reason": "Finding evidence for DEVOPS-001",
    "relatedFindingIds": ["DEVOPS-001"],
    "relatedDiagnosticIds": [],
    "module": "Docker, NGINX, Prometheus and Deployment Config",
    "semanticReviewRequired": true
  },
  {
    "path": "backend/package.json",
    "reason": "Finding evidence for DEVOPS-001",
    "relatedFindingIds": ["DEVOPS-001"],
    "relatedDiagnosticIds": [],
    "module": "Docker, NGINX, Prometheus and Deployment Config",
    "semanticReviewRequired": true
  },
  {
    "path": "swagger.yml",
    "reason": "Finding evidence for DOC-001",
    "relatedFindingIds": ["DOC-001"],
    "relatedDiagnosticIds": [],
    "module": "Documentation and OpenAPI Artifacts",
    "semanticReviewRequired": true
  },
  {
    "path": ".env.example",
    "reason": "Security configuration template review",
    "relatedFindingIds": ["SEC-001"],
    "relatedDiagnosticIds": [],
    "module": "Authentication and Authorization Backend",
    "semanticReviewRequired": true
  },
  {
    "path": "docker-compose.yml",
    "reason": "Infrastructure service orchestration review",
    "relatedFindingIds": ["DEVOPS-001"],
    "relatedDiagnosticIds": [],
    "module": "Docker, NGINX, Prometheus and Deployment Config",
    "semanticReviewRequired": true
  },
  {
    "path": "nginx.conf",
    "reason": "Reverse proxy security configuration review",
    "relatedFindingIds": ["DEVOPS-001"],
    "relatedDiagnosticIds": [],
    "module": "Docker, NGINX, Prometheus and Deployment Config",
    "semanticReviewRequired": true
  },
  {
    "path": "backend/src/main.ts",
    "reason": "NestJS application bootstrap, CORS, and Helmet configuration",
    "relatedFindingIds": ["SEC-001"],
    "relatedDiagnosticIds": [],
    "module": "NestJS Bootstrap and Shared Infrastructure",
    "semanticReviewRequired": true
  },
  {
    "path": "backend/src/redis/redis.service.ts",
    "reason": "Temporary OTP state storage review",
    "relatedFindingIds": ["SEC-002"],
    "relatedDiagnosticIds": [],
    "module": "Redis and Temporary Auth State",
    "semanticReviewRequired": true
  },
  {
    "path": "backend/src/users/users.controller.ts",
    "reason": "User profile & address management authorization review",
    "relatedFindingIds": ["TEST-001"],
    "relatedDiagnosticIds": [],
    "module": "Users and Addresses Backend",
    "semanticReviewRequired": true
  },
  {
    "path": "backend/src/users/users.service.ts",
    "reason": "User profile & address service implementation review",
    "relatedFindingIds": [],
    "relatedDiagnosticIds": [],
    "module": "Users and Addresses Backend",
    "semanticReviewRequired": true
  }
]