feat(compliance): 통제 커버리지 정직성 — reviewed/draft 비율 노출 + draft 라벨

- /controls/tree coverage에 review{reviewed,draft,total,pct} 추가(정직한 검토 진척도)
- 컨트롤 트리: 커버리지 옆 '검토완료 58/194' 표시 + 미검토 통제에 draft 배지
- 커버리지 %는 reviewed+증적 연결 통제만 집계임을 툴팁으로 명시. 한/영 i18n

Author: saranf

src/mori_soc/api/i18n.py

@@ -303,6 +303,10 @@ def _i18n_toggle_html(fixed: bool = True) -> str:
         "dash.ctl.snap_confirm": "설정된 범위의 전 통제를 지금 일괄 스냅샷할까요?",
         "dash.ctl.snap_running": "일괄 스냅샷 중…", "dash.ctl.snap_done": "건 스냅샷됨",
         "dash.ctl.zip": "전체 증적 ZIP",
+        "dash.ctl.reviewed": "검토완료",
+        "dash.ctl.review_tip": "커버리지 %는 검토완료(reviewed)+증적 연결 통제만 집계합니다. 나머지는 초안(draft)이며 공식 고시 대비 검토 전입니다.",
+        "dash.ctl.draft": "초안",
+        "dash.ctl.draft_tip": "초안 — 공식 고시 대비 검토 전",
         "dash.ctl.nlp_ttl": "법령/고시 텍스트 → 통제 초안",
         "dash.ctl.nlp_help": "법령 원문을 붙여넣으면 통제 초안으로 바꿔서 저장해요. Claude 키가 있으면 더 정확하게, 없으면 조항 단위로 나눠요.",
         "dash.ctl.nlp_fw": "프레임워크(예: 개인정보보호법)", "dash.ctl.nlp_ph": "법령/고시 전문을 붙여넣으세요…",
@@ -1094,6 +1098,10 @@ def _i18n_toggle_html(fixed: bool = True) -> str:
         "dash.ctl.snap_confirm": "Snapshot all controls in scope right now?",
         "dash.ctl.snap_running": "Snapshotting…", "dash.ctl.snap_done": " snapshotted",
         "dash.ctl.zip": "All evidence ZIP",
+        "dash.ctl.reviewed": "reviewed",
+        "dash.ctl.review_tip": "Coverage % counts only reviewed controls that have wired-up evidence. The rest are drafts — not yet validated against the official standard text.",
+        "dash.ctl.draft": "draft",
+        "dash.ctl.draft_tip": "Draft — not yet reviewed against the official standard text",
         "dash.ctl.nlp_ttl": "Regulation text → control drafts",
         "dash.ctl.nlp_help": "Paste regulation text to convert·save it as draft controls. Precise structuring with a Claude API key; clause-level heuristic otherwise.",
         "dash.ctl.nlp_fw": "Framework (e.g. PIPA)", "dash.ctl.nlp_ph": "Paste the full regulation/notice text…",

src/mori_soc/api/templates/dashboard.py

@@ -3915,7 +3915,9 @@ def render_user_dashboard_html(
         const cov = data.coverage || {};
         const covEl = document.getElementById('control_tree_coverage');
         if (covEl && cov.lite && cov.full) {
-          covEl.textContent = `lite ${cov.lite.pct}% (${cov.lite.covered}/${cov.lite.total}) · full ${cov.full.pct}% (${cov.full.covered}/${cov.full.total})`;
+          let t = `lite ${cov.lite.pct}% (${cov.lite.covered}/${cov.lite.total}) · full ${cov.full.pct}% (${cov.full.covered}/${cov.full.total})`;
+          covEl.innerHTML = escapeHtml(t)
+            + (cov.review ? ` · <span style=\"color:#a16207\" title=\"${tt('dash.ctl.review_tip','커버리지 %는 검토완료(reviewed)+증적 연결 통제만 집계합니다. 나머지는 초안(draft)이며 공식 고시 대비 검토 전입니다.')}\">${tt('dash.ctl.reviewed','검토완료')} ${cov.review.reviewed}/${cov.review.total} (${cov.review.pct}%)</span>` : '');
         }
         const fwLabel = { 'isms-p': 'ISMS-P', 'iso27001': 'ISO 27001:2022', 'custom': 'Custom / 법령' };
         const smap = data.status_map || {};
@@ -3932,9 +3934,10 @@ def render_user_dashboard_html(
           const clickable = 'cursor:pointer';  // M2-7: 상태 편집 위해 전 항목 클릭 가능
           const st = smap[c.id];
           const stBadge = (st && st.status && st.status !== '미정') ? _ctlStatusBadge(st.status) : '';
+          const draftBadge = (c.status && c.status !== 'reviewed') ? `<span title=\"${tt('dash.ctl.draft_tip','초안 — 공식 고시 대비 검토 전')}\" style=\"background:#fef9c3;color:#a16207;border:1px solid #a1620733;padding:0 5px;border-radius:5px;font-size:9px;margin-left:4px;vertical-align:middle\">${tt('dash.ctl.draft','draft')}</span>` : '';
           const pdf = c.mapped ? `<a href=\"/controls/detail/${enc}/evidence.pdf\" target=\"_blank\" title=\"${tt('dash.ctl.pdf','증적 팩 PDF')}\" style=\"margin-left:6px;text-decoration:none;font-size:11px\"></a>` : '';
           const editBtns = _ctlCanEdit ? `<span onclick=\"openControlEditor('${enc}')\" title=\"${tt('dash.ctl.edit','수정')}\" style=\"cursor:pointer;margin-left:6px;font-size:11px\"></span><span onclick=\"deleteControl('${enc}')\" title=\"${tt('dash.ctl.del','삭제')}\" style=\"cursor:pointer;margin-left:3px;font-size:11px\"></span>` : '';
-          return `<div style=\"padding:3px 0;${dim}\"><span onclick=\"toggleControlDetail('${enc}', this)\" style=\"${clickable}\"><span style=\"color:#111827;font-size:11px\">${escapeHtml(c.id)}</span> ${escapeHtml(title)}${stBadge}${srcs}</span>${pdf}${editBtns}<div class=\"ctl-detail\" style=\"display:none;margin:4px 0 8px 16px;padding:6px 10px;background:#f9fafb;border:1px solid #e5e7eb;border-radius:8px;font-size:12px\"></div></div>`;
+          return `<div style=\"padding:3px 0;${dim}\"><span onclick=\"toggleControlDetail('${enc}', this)\" style=\"${clickable}\"><span style=\"color:#111827;font-size:11px\">${escapeHtml(c.id)}</span> ${escapeHtml(title)}${draftBadge}${stBadge}${srcs}</span>${pdf}${editBtns}<div class=\"ctl-detail\" style=\"display:none;margin:4px 0 8px 16px;padding:6px 10px;background:#f9fafb;border:1px solid #e5e7eb;border-radius:8px;font-size:12px\"></div></div>`;
         };
         let html = '';
         (data.tree || []).forEach(fw => {

src/mori_soc/services/control_catalog.py

@@ -126,11 +126,21 @@ def _sort_key(cid: str):
             domains.append({"domain": dnode["domain"], "sections": sections})
         tree.append({"framework": fw, "domains": domains})
 
+    # 카탈로그 검토 진척도(정직성): reviewed vs draft. 커버리지 %는 reviewed+증적 연결
+    # 통제만 집계되지만, 전체 194 중 몇 %가 실제 검토됐는지를 별도로 노출한다.
+    total = len(controls)
+    reviewed = sum(1 for c in controls if str(c.get("status", "draft")) == "reviewed")
     return {
         "meta": cat.get("meta", {}),
         "coverage": {
             "lite": _coverage(controls, _LITE_SOURCES),
             "full": _coverage(controls, _FULL_SOURCES),
+            "review": {
+                "reviewed": reviewed,
+                "draft": total - reviewed,
+                "total": total,
+                "pct": round(reviewed / total * 100, 1) if total else 0.0,
+            },
         },
         "tree": tree,
     }