<?php

/**
 * Security Score — KiyoHR
 * Rubric: start 100; Critical -15 each open; High -8; Medium -3; Low -1
 */

return [
    'rubric' => [
        'open_critical' => -15,
        'open_high' => -8,
        'open_medium' => -3,
        'open_low' => -1,
        'controls_bonus' => [
            'security_headers' => 2,
            'private_uploads' => 2,
            'api_fail_closed' => 2,
            'audit_logging' => 2,
            'payment_webhook' => 1,
        ],
    ],
    'before' => [
        'open_critical' => 3,
        'open_high' => 5,
        'open_medium' => 6,
        'score' => 42,
    ],
    'after' => [
        'open_critical' => 0,
        'open_high' => 0,
        'open_medium' => 3,
        'open_low' => 2,
        'base' => 100 - (3 * 3) - (2 * 1),
        'bonus' => 9,
        'score' => 86,
    ],
    'threshold_go' => 80,
    'verdict' => 'GO',
];