毎月プラグイン更新に追われない
「Astro＋Rust WASM」静的Webアーキテクチャ

#![forbid(unsafe_code)]

#[derive(Debug, Clone, Copy, PartialEq, Eq)]
pub enum CmsArchitecture {
    LegacyDynamicPhp { php_eol: bool, plugin_count: u16, admin_public: bool },
    ModernManagedDynamic { plugin_count: u16, mfa_enabled: bool },
    StaticAstroRustWasm { readonly_zfs: bool, sri_verified: bool },
}

#[derive(Debug, Clone, Copy, PartialEq, Eq)]
pub struct AttackSurfaceMetrics {
    pub rce_vector_score: u16,
    pub sql_injection_surface: u16,
    pub monthly_patch_hours: u16,
    pub zero_attack_surface_proven: bool,
}

pub const fn evaluate_architecture_surface(arch: CmsArchitecture) -> AttackSurfaceMetrics {
    match arch {
        CmsArchitecture::LegacyDynamicPhp { php_eol, plugin_count, admin_public } => {
            let base_rce = if php_eol { 70 } else { 30 };
            let admin_penalty = if admin_public { 20 } else { 5 };
            let plugin_risk = if plugin_count > 30 { 30 } else { plugin_count };
            AttackSurfaceMetrics {
                rce_vector_score: base_rce + admin_penalty + plugin_risk,
                sql_injection_surface: 50 + plugin_risk,
                monthly_patch_hours: 6,
                zero_attack_surface_proven: false,
            }
        }
        CmsArchitecture::ModernManagedDynamic { plugin_count, mfa_enabled } => {
            let mfa_factor = if mfa_enabled { 10 } else { 35 };
            AttackSurfaceMetrics {
                rce_vector_score: mfa_factor + (plugin_count / 2),
                sql_injection_surface: 20 + (plugin_count / 2),
                monthly_patch_hours: 4,
                zero_attack_surface_proven: false,
            }
        }
        CmsArchitecture::StaticAstroRustWasm { readonly_zfs, sri_verified } => {
            AttackSurfaceMetrics {
                rce_vector_score: 0,
                sql_injection_surface: 0,
                monthly_patch_hours: 0,
                zero_attack_surface_proven: readonly_zfs && sri_verified,
            }
        }
    }
}