fix(triage): group the system map and analyses by platform, not domain #16

Merged

Philipp Baumann merged 1 commit from fm/dse-security-reports-entity-split into main

2026-10-27 14:08:18 +00:00

Philipp Baumann commented

2026-10-27 13:51:31 +00:00

Owner

Summary

The 2026-10-27 triage PDF grouped the report entities by the derived domain field, so MYRIDE, QMS and VS (genuinely ASP-domain, but Alma Linux Azure VMs) landed in the "ASP / Windows-Entität" section next to the on-prem Windows servers. The Systemlandkarte and both analysis sections now group by platform (osPlatform) instead: Windows on-prem units in one entity, all Linux/Azure units in the other. The registry domain values and the derivation stay untouched.

What changed

reports/defender-triage.typ: systemMapRows filters on isWindowsPlatform(osPlatform) instead of the domain field; the parent heading now reads "gruppiert nach Plattform: Linux/Azure und Windows On-Prem".
reports/defender-triage.typ: the Linux/Azure map and analysis headings list MYRIDE, QMS and VS alongside the DSE units; the Windows headings keep only cop01/dor01/ent01 and drop the ASP-VM clause from the section intro.
reports/defender-triage.typ: P12 (OpenSSL-Doppelversionen) and P14 (log4j auf asp-ent01) moved into the Windows analysis section; P8 (anyio), P9 (pyjwt) and P10 (h11) moved into the Linux/Azure analysis section — authored prose moved verbatim, stale grouping-rationale comments dropped.

Behaviour change

Sections 2.1/7.1 contain all eight Linux units including MYRIDE, QMS and VS; sections 2.2/7.2 contain only cop01/dor01/ent01. No derived number moves: the 2026-10-27 caches re-derive byte-identically and just repro stays byte-identical on the fixture. The corrected 2026-10-27 PDFs were re-rendered from the same caches and published; the previous copies moved to artifacts/superseded/.

Instructions-PR: none

## Summary The 2026-10-27 triage PDF grouped the report entities by the derived `domain` field, so MYRIDE, QMS and VS (genuinely ASP-domain, but Alma Linux Azure VMs) landed in the "ASP / Windows-Entität" section next to the on-prem Windows servers. The Systemlandkarte and both analysis sections now group by platform (`osPlatform`) instead: Windows on-prem units in one entity, all Linux/Azure units in the other. The registry `domain` values and the derivation stay untouched. ## What changed - `reports/defender-triage.typ`: `systemMapRows` filters on `isWindowsPlatform(osPlatform)` instead of the `domain` field; the parent heading now reads "gruppiert nach Plattform: Linux/Azure und Windows On-Prem". - `reports/defender-triage.typ`: the Linux/Azure map and analysis headings list MYRIDE, QMS and VS alongside the DSE units; the Windows headings keep only cop01/dor01/ent01 and drop the ASP-VM clause from the section intro. - `reports/defender-triage.typ`: P12 (OpenSSL-Doppelversionen) and P14 (log4j auf asp-ent01) moved into the Windows analysis section; P8 (anyio), P9 (pyjwt) and P10 (h11) moved into the Linux/Azure analysis section — authored prose moved verbatim, stale grouping-rationale comments dropped. ## Behaviour change Sections 2.1/7.1 contain all eight Linux units including MYRIDE, QMS and VS; sections 2.2/7.2 contain only cop01/dor01/ent01. No derived number moves: the 2026-10-27 caches re-derive byte-identically and `just repro` stays byte-identical on the fixture. The corrected 2026-10-27 PDFs were re-rendered from the same caches and published; the previous copies moved to `artifacts/superseded/`. Instructions-PR: none

Philipp Baumann added 1 commit

2026-10-27 13:51:31 +00:00

fix(triage): group the system map and analyses by platform, not domain 6a5738b9dd

Regroup the Systemlandkarte and the top-problem analyses by platform
(Windows on-prem vs Linux/Azure) instead of the derived domain field:
myride, qms and vs carry domain ASP but run as Alma Linux Azure VMs,
so they belong in the Linux/Azure entity next to DEV-MISC, DEV-WORKBENCH,
PROD-WORKBENCH, WIREGUARD and ANALYTICS.

- This change will keep the registry domain values and the derivation
  untouched; only the report grouping key changes to osPlatform.
- This change will list MYRIDE, QMS and VS in the Linux/Azure map
  section and keep only cop01/dor01/ent01 in the Windows section.
- This change will move P12 and P14 into the Windows analysis section
  and P8, P9 and P10 into the Linux/Azure section, prose verbatim.
- This change will leave every derived number unchanged; the 2026-10-27
  round re-renders from the same caches.

Philipp Baumann merged commit c007cc8346 into main

2026-10-27 14:08:18 +00:00

Philipp Baumann deleted branch fm/dse-security-reports-entity-split

2026-10-27 14:08:18 +00:00

Philipp Baumann referenced this pull request from a commit

2026-10-27 14:08:19 +00:00

fix(triage): group the system map and analyses by platform, not domain (#16)