feat: add profile drift governance workflow

app/api/controllers/admin.py

@@ -19,8 +19,10 @@ from app.api.schemas.admin import (
 )
 from app.core.advisor_backtest_contracts import AllocationBacktestQuery
 from app.core.contracts import RequestContext
+from app.core.profile_governance_contracts import ProfileDriftReviewRequest
 from app.service.admin_service import AdminService
 from app.service.allocation_backtest_service import AllocationBacktestService
+from app.service.profile_governance_service import ProfileGovernanceService
 
 router = APIRouter(
     prefix="/api/v1/admin", tags=["platform-admin"], dependencies=[Depends(enforce_rate_limit)]
@@ -36,6 +38,31 @@ async def run_asset_allocation_backtest(
     return await AllocationBacktestService().run(payload, context, key)
 
 
+@router.get("/advisor/profile-tags")
+async def list_profile_tags(
+    customer_id: int = Query(gt=0),
+    context: RequestContext = Depends(build_request_context),  # noqa: B008
+) -> dict[str, object]:
+    return await ProfileGovernanceService().tags(customer_id, context)
+
+
+@router.get("/advisor/profile-drift-reviews")
+async def list_profile_drift_reviews(
+    context: RequestContext = Depends(build_request_context),  # noqa: B008
+) -> dict[str, object]:
+    return await ProfileGovernanceService().pending_reviews(context)
+
+
+@router.post("/advisor/profile-drift-reviews/{review_id}/reviews")
+async def review_profile_drift(
+    payload: ProfileDriftReviewRequest,
+    review_id: int = Path(gt=0),
+    context: RequestContext = Depends(build_request_context),  # noqa: B008
+    key: str | None = Header(default=None, alias="Idempotency-Key"),
+) -> dict[str, object]:
+    return await ProfileGovernanceService().review(review_id, payload, context, key)
+
+
 def register_resource(
     resource: str,
     schema: type[BaseModel],

app/api/controllers/asset_allocation.py

@@ -19,4 +19,6 @@ async def generate_asset_allocation(
     payload: AssetAllocationQuery,
     context: RequestContext = Depends(build_request_context),  # noqa: B008
 ) -> dict[str, object]:
-    return await AssetAllocationService().generate_for_agent(payload, context)
+    return await AssetAllocationService(enforce_profile_governance=True).generate_for_agent(
+        payload, context
+    )

app/api/controllers/portfolio_analysis.py

@@ -19,4 +19,6 @@ async def analyze_portfolio(
     payload: PortfolioAnalysisQuery,
     context: RequestContext = Depends(build_request_context),  # noqa: B008
 ) -> dict[str, object]:
-    return await PortfolioAnalysisService().analyze_for_agent(payload, context)
+    return await PortfolioAnalysisService(enforce_profile_governance=True).analyze_for_agent(
+        payload, context
+    )

app/api/controllers/recommendations.py

@@ -28,7 +28,9 @@ async def generate_recommendation(
     context: RequestContext = Depends(build_request_context),  # noqa: B008
     key: str | None = Header(default=None, alias="Idempotency-Key"),
 ) -> dict[str, object]:
-    return await ProductRecommendationService().generate(payload, context, key)
+    return await ProductRecommendationService(enforce_profile_governance=True).generate(
+        payload, context, key
+    )
 
 
 @advisor_router.get("/recommendations/published")