add PolicyRule and PolicyViolation models

Signed-off-by: tdruez <tdruez@aboutcode.org>

Author: tdruez

policy/migrations/0003_policyrule.py

@@ -0,0 +1,35 @@
+# Generated by Django 6.0.6 on 2026-07-07 04:49
+
+import django.db.models.deletion
+import dje.models
+import uuid
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('dje', '0015_alter_dataspaceconfiguration_purldb_api_key_and_more'),
+        ('policy', '0002_initial'),
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name='PolicyRule',
+            fields=[
+                ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('uuid', models.UUIDField(default=uuid.uuid4, editable=False, verbose_name='UUID')),
+                ('name', models.CharField(help_text='Descriptive name for this policy rule.', max_length=100)),
+                ('rule_type', models.CharField(help_text='The type of evaluation performed by this rule.', max_length=50)),
+                ('threshold', models.PositiveIntegerField(default=0, help_text='Minimum number of violations required to trigger this rule (0 means any).')),
+                ('is_active', models.BooleanField(default=True, help_text='Only active rules are evaluated.')),
+                ('event_name', models.CharField(blank=True, help_text='Notification event to fire when violations are detected.', max_length=100)),
+                ('dataspace', models.ForeignKey(editable=False, help_text='A Dataspace is an independent, exclusive set of DejaCode data, which can be either nexB master reference data or installation-specific data.', on_delete=django.db.models.deletion.PROTECT, to='dje.dataspace')),
+            ],
+            options={
+                'ordering': ['name'],
+                'unique_together': {('dataspace', 'name'), ('dataspace', 'uuid')},
+            },
+            bases=(dje.models.DataspaceForeignKeyValidationMixin, models.Model),
+        ),
+    ]

policy/models.py

@@ -244,3 +244,70 @@ def save(self, *args, **kwargs):
         if self.from_policy.content_type == self.to_policy.content_type:
             raise AssertionError
         super().save(*args, **kwargs)
+
+
+class PolicyRuleQuerySet(DataspacedQuerySet):
+    def active(self):
+        return self.filter(is_active=True)
+
+
+class PolicyRule(DataspacedModel):
+    name = models.CharField(
+        max_length=100,
+        help_text=_("Descriptive name for this policy rule."),
+    )
+    rule_type = models.CharField(
+        max_length=50,
+        help_text=_("The type of evaluation performed by this rule."),
+    )
+    threshold = models.PositiveIntegerField(
+        default=0,
+        help_text=_("Minimum number of violations required to trigger this rule (0 means any)."),
+    )
+    is_active = models.BooleanField(
+        default=True,
+        help_text=_("Only active rules are evaluated."),
+    )
+    event_name = models.CharField(
+        max_length=100,
+        blank=True,
+        help_text=_("Notification event to fire when violations are detected."),
+    )
+
+    objects = PolicyRuleQuerySet.as_manager()
+
+    class Meta:
+        unique_together = (("dataspace", "uuid"), ("dataspace", "name"))
+        ordering = ["name"]
+
+    def __str__(self):
+        return self.name
+
+
+class AbstractPolicyViolation(models.Model):
+    """Shared fields for all concrete policy violation models. No DB table."""
+
+    violation_count = models.PositiveIntegerField(
+        default=0,
+        help_text=_("Number of objects currently violating the rule."),
+    )
+    detected_date = models.DateTimeField(
+        auto_now_add=True,
+        help_text=_("The date and time when this violation was first detected."),
+    )
+    last_checked = models.DateTimeField(
+        auto_now=True,
+        help_text=_("The date and time of the last evaluation."),
+    )
+    resolved = models.BooleanField(
+        default=False,
+        help_text=_("Indicates whether this violation has been resolved."),
+    )
+    resolved_date = models.DateTimeField(
+        null=True,
+        blank=True,
+        help_text=_("The date and time when this violation was resolved."),
+    )
+
+    class Meta:
+        abstract = True