ENG-2764: Add context_snapshot and last_evaluated_at to privacy_assessment

[galvana]

Ticket ENG-2764

Description Of Changes

Add data model foundation for scheduled re-evaluation of privacy assessments. This is PR 1 of 3 for ENG-2764.

• New context_snapshot (JSONB) column on privacy_assessment to store a snapshot of the privacy context and template question state at generation time, enabling material change detection during re-evaluation
• New last_evaluated_at (DateTime) column to track when the assessment was last evaluated
• Two new EventAuditType enum values: privacy_assessment_re_evaluated and privacy_assessment_re_evaluated_unchanged for auditing re-evaluation outcomes

Code Changes

• src/fides/api/alembic/migrations/versions/xx_2026_02_28_1200_190e4603ad38_add_context_snapshot_to_assessment.py - New Alembic migration adding context_snapshot and last_evaluated_at columns
• src/fides/api/models/privacy_assessment.py - Add new columns to PrivacyAssessment model
• src/fides/api/models/event_audit.py - Add privacy_assessment_re_evaluated and privacy_assessment_re_evaluated_unchanged enum values

Steps to Confirm

1. Run the migration: alembic upgrade head
2. Verify the privacy_assessment table has the new context_snapshot (JSONB, nullable) and last_evaluated_at (DateTime, nullable) columns
3. Verify the downgrade removes both columns cleanly

Pre-Merge Checklist

• Issue requirements met
• All CI pipelines succeeded
• CHANGELOG.md updated
• Database migrations:
  • Ensure that your downrev is up to date with the latest revision on main
  • Ensure that your downgrade() migration is correct and works
• Documentation:
  • No documentation updates required

Made with Cursor

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

2 Skipped Deployments

Project	Deployment	Actions	Updated (UTC)
fides-plus-nightly	Ignored	Preview	Mar 21, 2026 6:15am
fides-privacy-center	Ignored		Mar 21, 2026 6:15am

[greptile-apps]

Greptile Summary

This PR adds data model foundations for scheduled re-evaluation of privacy assessments: a context_snapshot (JSONB) column and last_evaluated_at (DateTime) column on privacy_assessment, a high_risk_only (Boolean) column on privacy_assessment_task, and two new EventAuditType enum values for auditing re-evaluation outcomes.

• Migration down_revision conflict: The new migration (190e4603ad38) and the existing ca2c622bad39 (questionnaire_tone_prompt) both set down_revision = "074796d61d8a", creating multiple Alembic heads. This will cause alembic upgrade head to fail and must be fixed before merge.
• The model changes and enum additions are clean and follow existing codebase conventions.
• The changelog entry omits the high_risk_only column that was also added in this PR.

Confidence Score: 2/5

• This PR has a migration conflict that will break alembic upgrades — must be resolved before merge.
• The model and enum changes are straightforward and safe, but the migration file has a duplicate down_revision that creates branched Alembic history. This will prevent alembic upgrade head from running, blocking all deployments. The fix is simple (update the down_revision), but the PR cannot be merged as-is.
• Pay close attention to the migration file: src/fides/api/alembic/migrations/versions/xx_2026_02_28_1200_190e4603ad38_add_context_snapshot_to_assessment.py

Important Files Changed

Filename	Overview
src/fides/api/alembic/migrations/versions/xx_2026_02_28_1200_190e4603ad38_add_context_snapshot_to_assessment.py	New Alembic migration adding context_snapshot, last_evaluated_at, and high_risk_only columns. Has a down_revision conflict with ca2c622bad39 — both point to 074796d61d8a, creating multiple Alembic heads that will block upgrades.
src/fides/api/models/privacy_assessment.py	Adds context_snapshot (JSONB), last_evaluated_at (DateTime), and high_risk_only (Boolean) columns to the model classes. Clean implementation consistent with existing patterns.
src/fides/api/models/event_audit.py	Adds two new EventAuditType enum values for re-evaluation audit events. Straightforward addition following existing conventions.
changelog/7530-assessment-re-evaluation-model.yaml	Changelog entry for the new columns. Only mentions context_snapshot and last_evaluated_at — omits the high_risk_only column also added in this PR.

_{Last reviewed commit: 2e7223d}

[thabofletcher]

Approved - will send over a review doc with some minor recommendations and the tests that were run. There is probably a new downrev needed as well