"""Security auditor domain.

Eight sub-features feeding off ten ORM tables, one FastAPI router
mounted at ``/api/v1/auditor`` and seven scheduled jobs registered
through ``scheduled_jobs`` (see migration 092).

The auditor domain DOES NOT mutate state in other domains directly —
revocation orders, post-offboard force-logout and token revocation all
go through the canonical service in the owning domain (Leaver Blocked
guard, offboarding, apikey, etc.). This is the same domain-isolation
rule we hold the rest of the platform to.
"""
from __future__ import annotations

from app.domains.auditor.models import (
    AccessCertification,
    AccessCertificationItem,
    AuditorAssessmentCycle,
    AuditorAssessmentMeasure,
    AuditorAssessmentSection,
    AuditorCertExpiry,
    AuditorEvidencePack,
    AuditorMfaStatus,
    AuditorPatAudit,
    AuditorPublicExposureFinding,
    AuditorRiskScore,
    AuditorSecretRotationRecord,
    AuditorSelfCheckAttachment,
    AuditorSelfCheckCategory,
    AuditorSelfCheckRecord,
    AuditorSigninEvent,
)

__all__ = [
    "AccessCertification",
    "AccessCertificationItem",
    "AuditorAssessmentCycle",
    "AuditorAssessmentMeasure",
    "AuditorAssessmentSection",
    "AuditorCertExpiry",
    "AuditorEvidencePack",
    "AuditorMfaStatus",
    "AuditorPatAudit",
    "AuditorPublicExposureFinding",
    "AuditorRiskScore",
    "AuditorSecretRotationRecord",
    "AuditorSelfCheckAttachment",
    "AuditorSelfCheckCategory",
    "AuditorSelfCheckRecord",
    "AuditorSigninEvent",
]