Add step 602 control attestation registry

editor/src/ControlAttestationRegistry.h

@@ -0,0 +1,91 @@
+#pragma once
+// Step 602: Control Attestation Registry
+
+#include <map>
+#include <string>
+#include <vector>
+
+enum class AttestationStatus {
+    Draft,
+    Signed,
+    Expired
+};
+
+struct ControlAttestation {
+    std::string attestationId;
+    std::string controlId;
+    std::string owner;
+    int daysUntilExpiry = 0;
+    AttestationStatus status = AttestationStatus::Draft;
+    std::string signer;
+};
+
+class ControlAttestationRegistry {
+public:
+    bool submit(const ControlAttestation& attestation, std::string* error) {
+        if (!error) return false;
+        error->clear();
+        if (attestation.attestationId.empty()) return fail(error, "attestation_id_missing");
+        if (attestation.controlId.empty()) return fail(error, "control_id_missing");
+        if (attestation.owner.empty()) return fail(error, "owner_missing");
+        if (attestation.daysUntilExpiry < 0) return fail(error, "expiry_days_invalid");
+        if (attestation.status == AttestationStatus::Expired) return fail(error, "status_invalid");
+        if (items_.count(attestation.attestationId) != 0) return fail(error, "attestation_duplicate");
+        items_[attestation.attestationId] = attestation;
+        order_.push_back(attestation.attestationId);
+        return true;
+    }
+
+    bool sign(const std::string& attestationId,
+              const std::string& signer,
+              std::string* error) {
+        if (!error) return false;
+        error->clear();
+        auto it = items_.find(attestationId);
+        if (it == items_.end()) return fail(error, "attestation_missing");
+        if (signer.empty()) return fail(error, "signer_missing");
+        if (it->second.status == AttestationStatus::Expired) return fail(error, "attestation_expired");
+        it->second.status = AttestationStatus::Signed;
+        it->second.signer = signer;
+        return true;
+    }
+
+    bool expire(const std::string& attestationId, std::string* error) {
+        if (!error) return false;
+        error->clear();
+        auto it = items_.find(attestationId);
+        if (it == items_.end()) return fail(error, "attestation_missing");
+        it->second.status = AttestationStatus::Expired;
+        return true;
+    }
+
+    std::vector<ControlAttestation> byStatus(AttestationStatus status) const {
+        std::vector<ControlAttestation> out;
+        for (const auto& id : order_) {
+            const auto& attestation = items_.at(id);
+            if (attestation.status == status) out.push_back(attestation);
+        }
+        return out;
+    }
+
+    int expiringWithin(int days) const {
+        int count = 0;
+        for (const auto& id : order_) {
+            const auto& attestation = items_.at(id);
+            if (attestation.status != AttestationStatus::Expired &&
+                attestation.daysUntilExpiry <= days) {
+                ++count;
+            }
+        }
+        return count;
+    }
+
+private:
+    std::map<std::string, ControlAttestation> items_;
+    std::vector<std::string> order_;
+
+    static bool fail(std::string* error, const char* code) {
+        *error = code;
+        return false;
+    }
+};