operations-assessments

_No description in Cargo.toml._

What it is for

Library crates for audit/evaluation assessments.

This crate provides reusable types for storing and tracking assessments across different domains: security scans, compliance audits, performance checks, accessibility evaluations, and more.

# Features

• Assessment workflow: Pending -> InProgress -> Completed/Failed/Cancelled
• Findings with severity: Track individual issues discovered during assessments
• Cached summaries: Pre-aggregated statistics for quick dashboard access
• Entity-agnostic: Attach assessments to any entity via EntityRef pattern
• Domain events: Integration points for notifications and external systems

# Example

use operations_assessments::{Assessment, Finding, Severity, AssessmentStatus, HasId};
use uuid::Uuid;

// Create and run an assessment
let entity_id = Uuid::new_v4();
let mut assessment = Assessment::new(
Uuid::new_v4(),
"website",
entity_id,
"security",
);

// Start the assessment
assessment.start().unwrap();
assert_eq!(assessment.status, AssessmentStatus::InProgress);

// Create findings
let finding = Finding::new(
Uuid::new_v4(),
assessment.id(),
Severity::High,
"ssl",
"Missing HSTS header",
"The server does not return a Strict-Transport-Security header",
)
.with_recommendation("Add HSTS header with max-age of at least 1 year");

// Complete the assessment with a score
assessment.complete(Some(75)).unwrap();
assert_eq!(assessment.status, AssessmentStatus::Completed);
assert_eq!(assessment.overall_score, Some(75));

# Database Schema

The migration in migrations/001_assessments_init.sql creates:

• assessments - Main assessment records
• findings - Individual issues found during assessments
• assessment_summaries - Cached aggregate statistics

# Repository Pattern

Implement AssessmentRepository for your storage backend:

use operations_assessments::{AssessmentRepository, Assessment};

struct MyRepository { /* ... */ }

#async_trait
impl AssessmentRepository for MyRepository {
async fn create_assessment(&self, assessment: &Assessment) -> Result<()> {
// Your implementation
Ok(())
}
// ... other methods
}

Capabilities

No public items.

How to use it

From this crate's own rustdoc:

use operations_assessments::{Assessment, Finding, Severity, AssessmentStatus, HasId};
use uuid::Uuid;

// Create and run an assessment
let entity_id = Uuid::new_v4();
let mut assessment = Assessment::new(
    Uuid::new_v4(),
    "website",
    entity_id,
    "security",
);

// Start the assessment
assessment.start().unwrap();
assert_eq!(assessment.status, AssessmentStatus::InProgress);

// Create findings
let finding = Finding::new(
    Uuid::new_v4(),
    assessment.id(),
    Severity::High,
    "ssl",
    "Missing HSTS header",
    "The server does not return a Strict-Transport-Security header",
)
.with_recommendation("Add HSTS header with max-age of at least 1 year");

// Complete the assessment with a score
assessment.complete(Some(75)).unwrap();
assert_eq!(assessment.status, AssessmentStatus::Completed);
assert_eq!(assessment.overall_score, Some(75));

From this crate's own rustdoc:

use operations_assessments::{AssessmentRepository, Assessment};

struct MyRepository { /* ... */ }

#[async_trait]
impl AssessmentRepository for MyRepository {
    async fn create_assessment(&self, assessment: &Assessment) -> Result<()> {
        // Your implementation
        Ok(())
    }
    // ... other methods
}

Module structure

No public modules: the crate root is its whole surface.

Public surface

No public items.

Re-exports. Exported here, defined elsewhere.

Boundary

Reaches into foundation.

Shares tier operations with 40 other crates: operations-approval-workflow, operations-block-imaging, operations-boot-media, operations-browser-agent-worker, operations-camera-discovery, operations-camera-liveview, operations-camera-registry, operations-compliance, … (40 total).

_What this crate deliberately does NOT own is a judgment. No committed registry records one for it, so none is stated here._

Where it sits

Tier flow. Which tiers this crate's own edges cross.

flowchart LR
  n_operations["operations"] --> n_foundation["foundation"]

Dependencies

Runtime, in this workspace.

Runtime, from outside the workspace.

Development, from outside the workspace.

Build. None.

Depended on by. 2 workspace crates.

Signal flow — what reaches this crate, and what it reaches.

flowchart LR
  n_application_assessments["application-assessments"] -->|uses| SELF
  n_platform_privacy_scan_api["platform-privacy-scan-api"] -->|uses| SELF
  SELF["operations-assessments"]
  SELF -->|runtime| n_foundation_basemodels["foundation-basemodels"]
  classDef self fill:#1f883d,stroke:#1f883d,color:#fff;
  class SELF self;

Feature flags

No Cargo features are defined: every capability is unconditional, so no consumer can receive a half-wired crate.

Targets

Error model

No public error type was detected: no public item declares a type named *Error, and no public signature returns one.

Operational characteristics

No unsafe block, unsafe fn, unsafe impl or unsafe trait was found by the parser anywhere in this crate's source.

Configuration

No environment variable is read with a literal name anywhere in this crate. A variable whose key is computed at run time cannot be listed here, and is not claimed to be absent.

Related capabilities

2 workspace crates depend on this one: application-assessments, platform-privacy-scan-api.

Verification

What the tests establish, by name:

• test_assessment_created_event — src/events.rs
• test_event_serialization — src/events.rs
• test_finding_added_event — src/events.rs
• test_finding_status_changed_event — src/events.rs
• test_summary_refreshed_has_no_assessment_id — src/events.rs
• test_assessment_category_scores — src/models.rs
• test_assessment_has_id — src/models.rs
• test_assessment_invalid_state_transitions — src/models.rs
• test_assessment_list_query — src/models.rs
• test_assessment_score_validation — src/models.rs
• test_assessment_soft_delete — src/models.rs
• test_assessment_status_display — src/models.rs
• test_assessment_status_parse — src/models.rs
• test_assessment_status_state_checks — src/models.rs
• test_assessment_workflow — src/models.rs
• test_create_assessment_input_validation — src/models.rs
• test_create_finding_input_validation — src/models.rs
• test_finding_builder — src/models.rs
• test_finding_reopen — src/models.rs
• test_finding_status_parse — src/models.rs
• test_finding_status_resolved — src/models.rs
• test_finding_wont_fix — src/models.rs
• test_finding_workflow — src/models.rs
• test_severity_actionable — src/models.rs
• test_severity_ordering — src/models.rs
• test_severity_parse — src/models.rs
• test_severity_weight — src/models.rs
• test_summary_actionable_findings — src/models.rs
• test_summary_is_improving — src/models.rs
• test_summary_risk_level — src/models.rs
• _… 4 more_

Documentation coverage

Metrics

pie showData
    title Rust source composition
    "Code" : 1672
    "Blank or comment" : 661

Generation

Rendered by tools-corpus corpus readme from repository evidence alone, renderer schema 2, lexicon current. No model, network service or database was consulted. Regenerate with tools-corpus corpus readme --write; verify with --check.