Jev 数据驻留：把每一次决策固定在正确的辖区里

def pick_endpoint(user: dict) -> str:
    # 传输地图散落成几段 if 判断。没有任何东西记录用的是哪条
    # 路径，没有风险轴，没有复核车道：EEA 用户的健康数据请求
    # 和一条美国聚合指标走同一个默认端点。充分性名单一变，
    # 每个服务各自打补丁——或者忘掉。
    if user.get("region") in ("DE", "FR", "NL"):
        return "https://eu.api.typesafe.ai/v1/jev/evaluate"
    return "https://api.typesafe.ai/v1/jev/evaluate"

import requests

GATE_ENDPOINT = "https://api.typesafe.ai/v1/jev/evaluate"
AUTO_ROUTE_CONFIDENCE = 0.85
AUTO_MAX_RISK = 2  # risk <= 2 且 confidence >= 闸门 -> 自动固定

ZONE_ENDPOINTS = {
    "eu_in_region": "https://eu.api.typesafe.ai/v1/jev/evaluate",
    "third_country_adequacy": "https://api.typesafe.ai/v1/jev/evaluate",
    "sccs_with_tia": "https://api.typesafe.ai/v1/jev/evaluate",
}

QUESTIONS = {
    "processing_route": {
        "type": "choice",
        "instructions": "这条 state 依哪条合法路径处理？",
        "criteria": {
            "eu_in_region": "评估可留在主体所在区域内",
            "third_country_adequacy": "目的地有充分性认定覆盖",
            "sccs_with_tia": "适用 SCC 且 TIA 引用已归档",
            "needs_dpa_review": "无覆盖路径——先过法务",
        },
    },
    "transfer_risk": {
        "type": "score",
        "instructions": "违规跨境代价多大？1 聚合 - 4 特殊类别",
    },
    "regional_override": {
        "type": "noul",
        "instructions": "该请求是否要求比所在辖区默认更严格的处理？",
    },
}


def gate_transfer(state: dict) -> dict:
    resp = requests.post(
        GATE_ENDPOINT,
        json={"state": state, "questions": QUESTIONS},
        timeout=5,
    )
    resp.raise_for_status()
    data = resp.json()

    route = data["processing_route"]
    risk = data["transfer_risk"]["answer"]

    if route["answer"] == "needs_dpa_review" or data["regional_override"]["answer"]:
        lane = "legal_review"  # 自动路径彻底封死
    elif route["confidence"] >= AUTO_ROUTE_CONFIDENCE and risk <= AUTO_MAX_RISK:
        lane = "auto_pinned"
    else:
        lane = "minimize_then_pin"  # 令牌化/剥离后评估裁剪 state

    return {
        "lane": lane,
        "endpoint": ZONE_ENDPOINTS.get(route["answer"]),
        "residency_record": {
            "subject_region": state.get("region"),
            "data_classes": state.get("data_classes"),
            "route": route["answer"],
            "route_confidence": route["confidence"],
            "transfer_risk": risk,
            "zone_map_version": "zone-map@2026.10",
            "tia_ref": state.get("tia_ref")
            if route["answer"] == "sccs_with_tia"
            else None,
        },
    }

// 传输地图被压缩成一个环境变量。每个服务读同一个值，
// 没有任何一个能回答「为什么」。日本用户的财务记录和美国
// 聚合指标走同一条默认路径，审计问题「这次传输依哪条合法
// 路径」在系统里没有答案。
const EVALUATION_ENDPOINT =
  process.env.REGION === "eu"
    ? "https://eu.api.typesafe.ai/v1/jev/evaluate"
    : "https://api.typesafe.ai/v1/jev/evaluate";

export const pickEndpoint = () => EVALUATION_ENDPOINT;

const GATE_ENDPOINT = "https://api.typesafe.ai/v1/jev/evaluate";
const AUTO_ROUTE_CONFIDENCE = 0.85;
const AUTO_MAX_RISK = 2;

type Lane = "auto_pinned" | "minimize_then_pin" | "legal_review";

const QUESTIONS = {
  processing_route: {
    type: "choice",
    instructions: "这条 state 依哪条合法路径处理？",
    criteria: {
      eu_in_region: "评估可留在主体所在区域内",
      third_country_adequacy: "目的地有充分性认定覆盖",
      sccs_with_tia: "适用 SCC 且 TIA 引用已归档",
      needs_dpa_review: "无覆盖路径——先过法务",
    },
  },
  transfer_risk: {
    type: "score",
    instructions: "违规跨境代价多大？1 聚合 - 4 特殊类别",
  },
  regional_override: {
    type: "noul",
    instructions: "该请求是否要求比所在辖区默认更严格的处理？",
  },
} as const;

export async function gateTransfer(state: {
  region: string;
  data_classes: string[];
  tia_ref?: string;
}) {
  const resp = await fetch(GATE_ENDPOINT, {
    method: "POST",
    headers: { "Content-Type": "application/json" },
    body: JSON.stringify({ state, questions: QUESTIONS }),
  });
  if (!resp.ok) throw new Error("Jev evaluate failed");
  const data = await resp.json();

  const route = data.processing_route as {
    answer: string;
    confidence: number;
  };
  const risk = data.transfer_risk.answer as number;

  const lane: Lane =
    route.answer === "needs_dpa_review" || data.regional_override.answer
      ? "legal_review"
      : route.confidence >= AUTO_ROUTE_CONFIDENCE && risk <= AUTO_MAX_RISK
        ? "auto_pinned"
        : "minimize_then_pin";

  // 驻留记录 = 审计追踪决策记录的兄弟记录。用下一版区域地图
  // 对日志 state 重放，即可找出新地图会拦下的所有历史传输。
  return {
    lane,
    residency_record: {
      subject_region: state.region,
      data_classes: state.data_classes,
      route: route.answer,
      route_confidence: route.confidence,
      transfer_risk: risk,
      zone_map_version: "zone-map@2026.10",
      tia_ref: route.answer === "sccs_with_tia" ? state.tia_ref : null,
    },
  };
}