POSA_Copyrighter/web/operator-gui/assets/case-character.svg
유창욱 3f7b3a9cf2 chore: initial commit of copyrighter (rights_filter)
Image rights / copyright detection system: SQLite store, HTTP app,
search integrations (Naver, Google Custom Search, Google Cloud Vision
web detection), image analysis (fingerprints, face/person detection,
evidence enrichment, risk scoring), an admin/review layer, governance
and retention policies, batch jobs, and a browser-based operator GUI.

This baseline incorporates a full code-review remediation pass
(46 fixes; 358 tests passing). Highlights:

CRITICAL
- Prevent evidence cascade-delete during the schema-constraint
  migration by disabling FK enforcement around the table rebuild.

Security
- Sandbox served media (neutralize stored XSS from uploaded/collected
  SVGs) via CSP + nosniff on the untrusted media routes.
- Strip embedded EXIF/GPS from external image derivatives before they
  are sent to third-party APIs.
- Return a clean 404 (not an uncaught StopIteration) for PATCH on an
  unknown provider.

Correctness
- LLM-summary failures no longer add +30 to the risk score.
- Decode only explicit JS escapes so Korean image URLs are not mangled.
- Consume search quota only after a successful request.
- Naver/Google adapters map responses inside the failure boundary, so a
  malformed response degrades to evidence instead of crashing enrichment.
- Domain-aware provider attribution; face-box IoU de-duplication; count
  searches (not result items); per-box crop isolation; clamp evidence
  confidence and Google CSE num; real submittedEpoch; and more.

Robustness
- Offline LLM connect fast-fails (short connect timeout) so seed/reload
  requests are not stalled; full read timeout preserved for generation.
- Malformed numeric env vars fall back to defaults instead of crashing
  startup.

Performance
- Per-submission evidence reads (no full-table scan per rescore),
  audit-log LIMIT, lazy active-store lookup, hoisted timestamps.

Tests
- ~24 regression tests added pinning the above fixes.

Runtime data (data/, outputs/, *.sqlite3, *.log), secrets (.env), and
node_modules are gitignored.
2026-06-09 09:50:31 +09:00

16 lines
1.1 KiB
XML

<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 640 480" role="img" aria-labelledby="title desc">
<title id="title">Generic character submission</title>
<desc id="desc">A stylized character-style image used as a rights review sample.</desc>
<rect width="640" height="480" fill="#dfe8e4"/>
<path d="M104 410c28-121 103-188 216-188s188 67 216 188z" fill="#435b50"/>
<circle cx="320" cy="198" r="104" fill="#f0c7a8" stroke="#26302d" stroke-width="7"/>
<path d="M218 182c18-93 67-139 149-139 61 13 91 55 90 127-60-39-135-40-239 12z" fill="#5c352c"/>
<circle cx="284" cy="192" r="14" fill="#172124"/>
<circle cx="362" cy="192" r="14" fill="#172124"/>
<circle cx="280" cy="187" r="5" fill="#fffaf2"/>
<circle cx="358" cy="187" r="5" fill="#fffaf2"/>
<path d="M281 244c33 23 61 23 88 0" fill="none" stroke="#9a4c41" stroke-width="10" stroke-linecap="round"/>
<path d="M184 110l58-50 26 62M454 112l-58-50-26 62" fill="#435b50" stroke="#26302d" stroke-width="7" stroke-linejoin="round"/>
<rect x="72" y="66" width="118" height="28" fill="#d1a339"/>
<rect x="72" y="108" width="88" height="20" fill="#5c7f99"/>
</svg>