[{"data":1,"prerenderedAt":2831},["ShallowReactive",2],{"cycle-doc-design-c123-intents-pr5-evaluation.md":3},{"cycle":4,"project":7,"path":10,"title":11,"toc":12,"ast":20},{"id":5,"title":6},"c123","Compliance Frameworks",{"id":8,"label":9},"design","Design","intents-pr5-evaluation.md","Thread `intents-pr5`: evaluation (2026-11-05)",[13,14,15,16,17,18,19],"The short version","What changed in `..\u002Fintents`","The two metrics against PR 5","The numbers: what the mock would show","Surface by surface","Our own open questions, now answered","Worth raising with Peterson",{"type":21,"children":22},"root",[23,57,70,81,87,105,115,125,135,147,300,321,328,451,456,461,757,775,780,793,1051,1056,1090,1095,1132,1137,1150,1390,1403,1764,1778,1783,1917,1922,1971,1984,1989,2327,2337,2342,2500,2505,2525,2707,2717,2730,2735,2740],{"type":24,"tag":25,"props":26,"children":27},"element","p",{},[28,31,43,45,55],{"type":29,"value":30},"text","From ",{"type":24,"tag":32,"props":33,"children":35},"a",{"href":34},"\u002Fcycles\u002Fdesign\u002Fc123\u002Fdoc\u002Fintents-pr5-prompt",[36],{"type":24,"tag":37,"props":38,"children":40},"code",{"className":39},[],[41],{"type":29,"value":42},"intents-pr5-prompt.md",{"type":29,"value":44},". It feeds ",{"type":24,"tag":32,"props":46,"children":48},{"href":47},"\u002Fcycles\u002Fdesign\u002Fc123\u002Fdoc\u002Fintents-pr5-plan",[49],{"type":24,"tag":37,"props":50,"children":52},{"className":51},[],[53],{"type":29,"value":54},"intents-pr5-plan.md",{"type":29,"value":56},".",{"type":24,"tag":25,"props":58,"children":59},{},[60,62,68],{"type":29,"value":61},"Evaluated against the lab as it stands today, uncommitted work included: the running ",{"type":24,"tag":37,"props":63,"children":65},{"className":64},[],[66],{"type":29,"value":67},":3000",{"type":29,"value":69}," pages, their code, and PR 5's counting rule run over the lab's world.",{"type":24,"tag":25,"props":71,"children":72},{},[73,79],{"type":24,"tag":74,"props":75,"children":76},"strong",{},[77],{"type":29,"value":78},"Update, same day (Mark):",{"type":29,"value":80}," merging PR 5 wasn't meant to settle anything over the Nov 4 metric, so the \"Replace\" results below say what PR 5 asks for, not what's been decided. Mark's rule: posture reports only on what Qpoint can know and govern. Mark then ruled two metrics: a posture score of progress toward each policy's best possible mode, and a separate exceptions metric. Compliance Score stays as built, marked projected, and living reports stay over PDF. PR 6 merged later the same day; Mark ruled that its four reports replace our three, as living pages. See the plan's rulings.",{"type":24,"tag":82,"props":83,"children":85},"h2",{"id":84},"the-short-version",[86],{"type":29,"value":13},{"type":24,"tag":25,"props":88,"children":89},{},[90,95,97,103],{"type":24,"tag":74,"props":91,"children":92},{},[93],{"type":29,"value":94},"Compliance and framework detail need rework, not a polish.",{"type":29,"value":96}," PR 5 excludes what the 2026-11-04 ",{"type":24,"tag":37,"props":98,"children":100},{"className":99},[],[101],{"type":29,"value":102},"posture-score",{"type":29,"value":104}," thread built. That thread's Compliance Posture is subject-weighted and exception-adjusted, and PR 5 lists both as v1 exclusions. Compliance Score is out as well. The instinct behind the thread survives: configuration and what actually happened stay two separate readings.",{"type":24,"tag":25,"props":106,"children":107},{},[108,113],{"type":24,"tag":74,"props":109,"children":110},{},[111],{"type":29,"value":112},"Policies needs little.",{"type":29,"value":114}," The frameworks strip has to go, which c126 and c123 already planned. PR 5 now makes it a requirement.",{"type":24,"tag":25,"props":116,"children":117},{},[118,123],{"type":24,"tag":74,"props":119,"children":120},{},[121],{"type":29,"value":122},"Reports is the largest change, but it's driven by PR 6, not PR 5.",{"type":29,"value":124}," PR 6 is still open and unreviewed. It replaces our three live reports with four generated PDFs. PR 5 only forces the framework section to change.",{"type":24,"tag":25,"props":126,"children":127},{},[128,133],{"type":24,"tag":74,"props":129,"children":130},{},[131],{"type":29,"value":132},"One earlier ruling reverses.",{"type":29,"value":134}," Tracking no longer stages policies at Observe (c118 A6 and Q10, c123 F8). Tracking is now a reporting preference outside the draft.",{"type":24,"tag":82,"props":136,"children":138},{"id":137},"what-changed-in-intents",[139,141],{"type":29,"value":140},"What changed in ",{"type":24,"tag":37,"props":142,"children":144},{"className":143},[],[145],{"type":29,"value":146},"..\u002Fintents",{"type":24,"tag":148,"props":149,"children":150},"table",{},[151,178],{"type":24,"tag":152,"props":153,"children":154},"thead",{},[155],{"type":24,"tag":156,"props":157,"children":158},"tr",{},[159,163,168,173],{"type":24,"tag":160,"props":161,"children":162},"th",{},[],{"type":24,"tag":160,"props":164,"children":165},{},[166],{"type":29,"value":167},"State",{"type":24,"tag":160,"props":169,"children":170},{},[171],{"type":29,"value":172},"Files",{"type":24,"tag":160,"props":174,"children":175},{},[176],{"type":29,"value":177},"Status for us",{"type":24,"tag":179,"props":180,"children":181},"tbody",{},[182,234,279],{"type":24,"tag":156,"props":183,"children":184},{},[185,194,212,229],{"type":24,"tag":186,"props":187,"children":188},"td",{},[189],{"type":24,"tag":74,"props":190,"children":191},{},[192],{"type":29,"value":193},"PR 5",{"type":24,"tag":186,"props":195,"children":196},{},[197,202,204,210],{"type":24,"tag":74,"props":198,"children":199},{},[200],{"type":29,"value":201},"Merged 2026-11-05",{"type":29,"value":203}," (",{"type":24,"tag":37,"props":205,"children":207},{"className":206},[],[208],{"type":29,"value":209},"2a1847e",{"type":29,"value":211},", approved and merged by Mark)",{"type":24,"tag":186,"props":213,"children":214},{},[215,221,223],{"type":24,"tag":37,"props":216,"children":218},{"className":217},[],[219],{"type":29,"value":220},"observe_view-and-manage-frameworks.md",{"type":29,"value":222},", ",{"type":24,"tag":37,"props":224,"children":226},{"className":225},[],[227],{"type":29,"value":228},"observe_manage-framework.md",{"type":24,"tag":186,"props":230,"children":231},{},[232],{"type":29,"value":233},"The spec",{"type":24,"tag":156,"props":235,"children":236},{},[237,245,258,274],{"type":24,"tag":186,"props":238,"children":239},{},[240],{"type":24,"tag":74,"props":241,"children":242},{},[243],{"type":29,"value":244},"PR 6",{"type":24,"tag":186,"props":246,"children":247},{},[248,250,256],{"type":29,"value":249},"Open when evaluated; merged later on 2026-11-05 (",{"type":24,"tag":37,"props":251,"children":253},{"className":252},[],[254],{"type":29,"value":255},"6df1426",{"type":29,"value":257},")",{"type":24,"tag":186,"props":259,"children":260},{},[261,267,268],{"type":24,"tag":37,"props":262,"children":264},{"className":263},[],[265],{"type":29,"value":266},"report_view-reports.md",{"type":29,"value":222},{"type":24,"tag":37,"props":269,"children":271},{"className":270},[],[272],{"type":29,"value":273},"report_create-report.md",{"type":24,"tag":186,"props":275,"children":276},{},[277],{"type":29,"value":278},"A proposal, and it reads PR 5 as its companion",{"type":24,"tag":156,"props":280,"children":281},{},[282,287,292,295],{"type":24,"tag":186,"props":283,"children":284},{},[285],{"type":29,"value":286},"PR 4 and earlier",{"type":24,"tag":186,"props":288,"children":289},{},[290],{"type":29,"value":291},"Merged 2026-10-23 or before",{"type":24,"tag":186,"props":293,"children":294},{},[],{"type":24,"tag":186,"props":296,"children":297},{},[298],{"type":29,"value":299},"Already taken in by c121",{"type":24,"tag":25,"props":301,"children":302},{},[303,305,311,313,319],{"type":29,"value":304},"PR 5 only adds files. The older ",{"type":24,"tag":37,"props":306,"children":308},{"className":307},[],[309],{"type":29,"value":310},"observe_view-a-framework-details.md",{"type":29,"value":312}," and ",{"type":24,"tag":37,"props":314,"children":316},{"className":315},[],[317],{"type":29,"value":318},"observe_view-policies-and-frameworks.md",{"type":29,"value":320}," are still on main and still describe coverage states and gaps. Treat the two new files as the current word.",{"type":24,"tag":322,"props":323,"children":325},"h3",{"id":324},"pr-5s-rules",[326],{"type":29,"value":327},"PR 5's rules",{"type":24,"tag":329,"props":330,"children":331},"ol",{},[332,343,353,371,381,391,401,411,421,431,441],{"type":24,"tag":333,"props":334,"children":335},"li",{},[336,341],{"type":24,"tag":74,"props":337,"children":338},{},[339],{"type":29,"value":340},"Track \u002F Untrack, Tracked \u002F Untracked.",{"type":29,"value":342}," Tracking is an organization reporting preference. It changes no policy, it saves outside the shared draft and publish, and each change is audited with actor, time and previous and new state.",{"type":24,"tag":333,"props":344,"children":345},{},[346,351],{"type":24,"tag":74,"props":347,"children":348},{},[349],{"type":29,"value":350},"One measure: \"Policy enforcement posture\".",{"type":29,"value":352}," Off \u002F Observe \u002F Enforce counts and proportions, with the denominator visible.",{"type":24,"tag":333,"props":354,"children":355},{},[356,361,363,369],{"type":24,"tag":74,"props":357,"children":358},{},[359],{"type":29,"value":360},"The unit is a distinct policy-to-control mapping.",{"type":29,"value":362}," Each one counts once, equally weighted, and takes the policy's ",{"type":24,"tag":364,"props":365,"children":366},"em",{},[367],{"type":29,"value":368},"published organization default mode",{"type":29,"value":370},". Pending changes don't move it.",{"type":24,"tag":333,"props":372,"children":373},{},[374,379],{"type":24,"tag":74,"props":375,"children":376},{},[377],{"type":29,"value":378},"Exceptions annotate; they don't count.",{"type":29,"value":380}," Each bucket shows its distinct active published exception records (once per bucket, whatever the mapping count). Expired, revoked and pending ones are excluded.",{"type":24,"tag":333,"props":382,"children":383},{},[384,389],{"type":24,"tag":74,"props":385,"children":386},{},[387],{"type":29,"value":388},"Excluded in v1:",{"type":29,"value":390}," a single weighted score, compliance scoring, and exception-adjusted, subject-weighted or device-weighted calculations. More sophisticated exception-aware calculations are named as future work.",{"type":24,"tag":333,"props":392,"children":393},{},[394,399],{"type":24,"tag":74,"props":395,"children":396},{},[397],{"type":29,"value":398},"No mapped policies",{"type":29,"value":400}," reads \"No mapped policies\" with an unavailable ratio, never 0% or 100%. Unsupported requirements sit outside the denominator.",{"type":24,"tag":333,"props":402,"children":403},{},[404,409],{"type":24,"tag":74,"props":405,"children":406},{},[407],{"type":29,"value":408},"Framework detail",{"type":29,"value":410}," has four parts: understand the framework, controls and mapped policies, posture, posture over time.",{"type":24,"tag":333,"props":412,"children":413},{},[414,419],{"type":24,"tag":74,"props":415,"children":416},{},[417],{"type":29,"value":418},"Vocabulary:",{"type":29,"value":420}," \"framework controls\" is the umbrella term. Source terms stay: OWASP risks, NIST AI RMF outcomes, SOC 2 criteria. Native groupings stay. Short labels are told apart from official titles.",{"type":24,"tag":333,"props":422,"children":423},{},[424,429],{"type":24,"tag":74,"props":425,"children":426},{},[427],{"type":29,"value":428},"History is reconstructed",{"type":29,"value":430}," from retained policy, exception and mapping history, including periods before or while untracked. Reconstructed ranges are marked, and missing history is unavailable rather than zero. Mapping changes are marked so a denominator change doesn't look like progress.",{"type":24,"tag":333,"props":432,"children":433},{},[434,439],{"type":24,"tag":74,"props":435,"children":436},{},[437],{"type":29,"value":438},"Other evidence",{"type":29,"value":440}," (Sessions, Finding resolution, configuration history) can be described separately but adds no posture units.",{"type":24,"tag":333,"props":442,"children":443},{},[444,449],{"type":24,"tag":74,"props":445,"children":446},{},[447],{"type":29,"value":448},"Fixed v1 scope.",{"type":29,"value":450}," No tailoring, custom frameworks or editable mappings. Future tailoring is described but not committed.",{"type":24,"tag":82,"props":452,"children":454},{"id":453},"the-two-metrics-against-pr-5",[455],{"type":29,"value":15},{"type":24,"tag":25,"props":457,"children":458},{},[459],{"type":29,"value":460},"This is the core conflict, so it comes first.",{"type":24,"tag":148,"props":462,"children":463},{},[464,489],{"type":24,"tag":152,"props":465,"children":466},{},[467],{"type":24,"tag":156,"props":468,"children":469},{},[470,480,484],{"type":24,"tag":160,"props":471,"children":472},{},[473,478],{"type":24,"tag":37,"props":474,"children":476},{"className":475},[],[477],{"type":29,"value":102},{"type":29,"value":479}," (2026-11-04, uncommitted)",{"type":24,"tag":160,"props":481,"children":482},{},[483],{"type":29,"value":193},{"type":24,"tag":160,"props":485,"children":486},{},[487],{"type":29,"value":488},"Result",{"type":24,"tag":179,"props":490,"children":491},{},[492,513,533,559,582,605,627,648,671,692,715,735],{"type":24,"tag":156,"props":493,"children":494},{},[495,500,505],{"type":24,"tag":186,"props":496,"children":497},{},[498],{"type":29,"value":499},"\"Compliance Posture\" as one %",{"type":24,"tag":186,"props":501,"children":502},{},[503],{"type":29,"value":504},"Off \u002F Observe \u002F Enforce distribution, labelled \"Policy enforcement posture\"",{"type":24,"tag":186,"props":506,"children":507},{},[508],{"type":24,"tag":74,"props":509,"children":510},{},[511],{"type":29,"value":512},"Replace",{"type":24,"tag":156,"props":514,"children":515},{},[516,521,526],{"type":24,"tag":186,"props":517,"children":518},{},[519],{"type":29,"value":520},"Enforce 1, Observe 0.25, Off 0",{"type":24,"tag":186,"props":522,"children":523},{},[524],{"type":29,"value":525},"Three buckets, no weights",{"type":24,"tag":186,"props":527,"children":528},{},[529],{"type":24,"tag":74,"props":530,"children":531},{},[532],{"type":29,"value":512},{"type":24,"tag":156,"props":534,"children":535},{},[536,547,552],{"type":24,"tag":186,"props":537,"children":538},{},[539,541],{"type":29,"value":540},"Averaged per person, from ",{"type":24,"tag":37,"props":542,"children":544},{"className":543},[],[545],{"type":29,"value":546},"applicability()",{"type":24,"tag":186,"props":548,"children":549},{},[550],{"type":29,"value":551},"Published default mode only; subject-weighting excluded",{"type":24,"tag":186,"props":553,"children":554},{},[555],{"type":24,"tag":74,"props":556,"children":557},{},[558],{"type":29,"value":512},{"type":24,"tag":156,"props":560,"children":561},{},[562,567,572],{"type":24,"tag":186,"props":563,"children":564},{},[565],{"type":29,"value":566},"An exception weakens the number; an allow takes 10 points",{"type":24,"tag":186,"props":568,"children":569},{},[570],{"type":29,"value":571},"Exceptions annotate each bucket",{"type":24,"tag":186,"props":573,"children":574},{},[575,580],{"type":24,"tag":74,"props":576,"children":577},{},[578],{"type":29,"value":579},"Replace.",{"type":29,"value":581}," Named as future work, so deferred rather than rejected",{"type":24,"tag":156,"props":583,"children":584},{},[585,590,595],{"type":24,"tag":186,"props":586,"children":587},{},[588],{"type":29,"value":589},"Observe-only policies count as full when observing",{"type":24,"tag":186,"props":591,"children":592},{},[593],{"type":29,"value":594},"Mode only",{"type":24,"tag":186,"props":596,"children":597},{},[598,603],{"type":24,"tag":74,"props":599,"children":600},{},[601],{"type":29,"value":602},"Replace,",{"type":29,"value":604}," and this leaves a question (below)",{"type":24,"tag":156,"props":606,"children":607},{},[608,613,618],{"type":24,"tag":186,"props":609,"children":610},{},[611],{"type":29,"value":612},"Green \u002F orange \u002F red bar by threshold",{"type":24,"tag":186,"props":614,"children":615},{},[616],{"type":29,"value":617},"Not specified",{"type":24,"tag":186,"props":619,"children":620},{},[621,625],{"type":24,"tag":74,"props":622,"children":623},{},[624],{"type":29,"value":579},{"type":29,"value":626}," A health colour reads as a rating, which the intent warns against",{"type":24,"tag":156,"props":628,"children":629},{},[630,635,640],{"type":24,"tag":186,"props":631,"children":632},{},[633],{"type":29,"value":634},"\"Compliance Score\", options A–F",{"type":24,"tag":186,"props":636,"children":637},{},[638],{"type":29,"value":639},"Compliance scoring out of scope; PR 6: \"not a compliance score\"",{"type":24,"tag":186,"props":641,"children":642},{},[643],{"type":24,"tag":74,"props":644,"children":645},{},[646],{"type":29,"value":647},"Retire the name and the options",{"type":24,"tag":156,"props":649,"children":650},{},[651,656,661],{"type":24,"tag":186,"props":652,"children":653},{},[654],{"type":29,"value":655},"Findings folded into a Score cell, with a checks base",{"type":24,"tag":186,"props":657,"children":658},{},[659],{"type":29,"value":660},"Findings are linked and never read as proof; PR 6 reports Enforced \u002F Observed with the unit stated",{"type":24,"tag":186,"props":662,"children":663},{},[664,669],{"type":24,"tag":74,"props":665,"children":666},{},[667],{"type":29,"value":668},"Keep as a plain Findings column",{"type":29,"value":670},", no base",{"type":24,"tag":156,"props":672,"children":673},{},[674,679,684],{"type":24,"tag":186,"props":675,"children":676},{},[677],{"type":29,"value":678},"Coverage column and machine removed",{"type":24,"tag":186,"props":680,"children":681},{},[682],{"type":29,"value":683},"\"not overall framework coverage\"",{"type":24,"tag":186,"props":685,"children":686},{},[687],{"type":24,"tag":74,"props":688,"children":689},{},[690],{"type":29,"value":691},"Keep",{"type":24,"tag":156,"props":693,"children":694},{},[695,700,705],{"type":24,"tag":186,"props":696,"children":697},{},[698],{"type":29,"value":699},"Unaddressable items leave the table for Gaps",{"type":24,"tag":186,"props":701,"children":702},{},[703],{"type":29,"value":704},"Outside the denominator, not zero-scored",{"type":24,"tag":186,"props":706,"children":707},{},[708,713],{"type":24,"tag":74,"props":709,"children":710},{},[711],{"type":29,"value":712},"Keep,",{"type":29,"value":714}," rename Gaps",{"type":24,"tag":156,"props":716,"children":717},{},[718,723,728],{"type":24,"tag":186,"props":719,"children":720},{},[721],{"type":29,"value":722},"Pill shows the policy's own mode",{"type":24,"tag":186,"props":724,"children":725},{},[726],{"type":29,"value":727},"Published default mode",{"type":24,"tag":186,"props":729,"children":730},{},[731],{"type":24,"tag":74,"props":732,"children":733},{},[734],{"type":29,"value":691},{"type":24,"tag":156,"props":736,"children":737},{},[738,743,748],{"type":24,"tag":186,"props":739,"children":740},{},[741],{"type":29,"value":742},"\"Enforcement Posture\" naming",{"type":24,"tag":186,"props":744,"children":745},{},[746],{"type":29,"value":747},"\"Policy enforcement posture\"",{"type":24,"tag":186,"props":749,"children":750},{},[751,755],{"type":24,"tag":74,"props":752,"children":753},{},[754],{"type":29,"value":712},{"type":29,"value":756}," one word longer",{"type":24,"tag":25,"props":758,"children":759},{},[760,762,767,768,773],{"type":29,"value":761},"What survives from Mark's prompt: ",{"type":24,"tag":364,"props":763,"children":764},{},[765],{"type":29,"value":766},"how we're configured",{"type":29,"value":312},{"type":24,"tag":364,"props":769,"children":770},{},[771],{"type":29,"value":772},"how it's going",{"type":29,"value":774}," are still two readings, and each covers the other's blind spot. PR 6's Compliance Report is built the same way: posture, then Enforced \u002F Observed Findings. Only the formula and the word \"score\" go.",{"type":24,"tag":82,"props":776,"children":778},{"id":777},"the-numbers-what-the-mock-would-show",[779],{"type":29,"value":16},{"type":24,"tag":25,"props":781,"children":782},{},[783,785,791],{"type":29,"value":784},"PR 5's rule run over the lab's established world, with exceptions counted as ",{"type":24,"tag":37,"props":786,"children":788},{"className":787},[],[789],{"type":29,"value":790},"live()",{"type":29,"value":792}," counts them:",{"type":24,"tag":148,"props":794,"children":795},{},[796,842],{"type":24,"tag":152,"props":797,"children":798},{},[799],{"type":24,"tag":156,"props":800,"children":801},{},[802,807,812,817,822,827,832,837],{"type":24,"tag":160,"props":803,"children":804},{},[805],{"type":29,"value":806},"Framework",{"type":24,"tag":160,"props":808,"children":809},{},[810],{"type":29,"value":811},"Rows mapped",{"type":24,"tag":160,"props":813,"children":814},{},[815],{"type":29,"value":816},"Units",{"type":24,"tag":160,"props":818,"children":819},{},[820],{"type":29,"value":821},"Off (exc.)",{"type":24,"tag":160,"props":823,"children":824},{},[825],{"type":29,"value":826},"Observe (exc.)",{"type":24,"tag":160,"props":828,"children":829},{},[830],{"type":29,"value":831},"Enforce (exc.)",{"type":24,"tag":160,"props":833,"children":834},{},[835],{"type":29,"value":836},"Ratio",{"type":24,"tag":160,"props":838,"children":839},{},[840],{"type":29,"value":841},"Bar today",{"type":24,"tag":179,"props":843,"children":844},{},[845,888,930,972,1014],{"type":24,"tag":156,"props":846,"children":847},{},[848,853,858,863,868,873,878,883],{"type":24,"tag":186,"props":849,"children":850},{},[851],{"type":29,"value":852},"OWASP LLM (tracked)",{"type":24,"tag":186,"props":854,"children":855},{},[856],{"type":29,"value":857},"10 \u002F 10",{"type":24,"tag":186,"props":859,"children":860},{},[861],{"type":29,"value":862},"28",{"type":24,"tag":186,"props":864,"children":865},{},[866],{"type":29,"value":867},"5 (2)",{"type":24,"tag":186,"props":869,"children":870},{},[871],{"type":29,"value":872},"21 (2)",{"type":24,"tag":186,"props":874,"children":875},{},[876],{"type":29,"value":877},"2 (3)",{"type":24,"tag":186,"props":879,"children":880},{},[881],{"type":29,"value":882},"18 \u002F 75 \u002F 7",{"type":24,"tag":186,"props":884,"children":885},{},[886],{"type":29,"value":887},"50%",{"type":24,"tag":156,"props":889,"children":890},{},[891,896,900,905,910,915,920,925],{"type":24,"tag":186,"props":892,"children":893},{},[894],{"type":29,"value":895},"OWASP Agentic",{"type":24,"tag":186,"props":897,"children":898},{},[899],{"type":29,"value":857},{"type":24,"tag":186,"props":901,"children":902},{},[903],{"type":29,"value":904},"36",{"type":24,"tag":186,"props":906,"children":907},{},[908],{"type":29,"value":909},"6 (2)",{"type":24,"tag":186,"props":911,"children":912},{},[913],{"type":29,"value":914},"27 (2)",{"type":24,"tag":186,"props":916,"children":917},{},[918],{"type":29,"value":919},"3 (3)",{"type":24,"tag":186,"props":921,"children":922},{},[923],{"type":29,"value":924},"17 \u002F 75 \u002F 8",{"type":24,"tag":186,"props":926,"children":927},{},[928],{"type":29,"value":929},"54%",{"type":24,"tag":156,"props":931,"children":932},{},[933,938,943,948,953,958,963,968],{"type":24,"tag":186,"props":934,"children":935},{},[936],{"type":29,"value":937},"NIST AI RMF",{"type":24,"tag":186,"props":939,"children":940},{},[941],{"type":29,"value":942},"15 \u002F 18",{"type":24,"tag":186,"props":944,"children":945},{},[946],{"type":29,"value":947},"38",{"type":24,"tag":186,"props":949,"children":950},{},[951],{"type":29,"value":952},"6 (1)",{"type":24,"tag":186,"props":954,"children":955},{},[956],{"type":29,"value":957},"22 (2)",{"type":24,"tag":186,"props":959,"children":960},{},[961],{"type":29,"value":962},"10 (3)",{"type":24,"tag":186,"props":964,"children":965},{},[966],{"type":29,"value":967},"16 \u002F 58 \u002F 26",{"type":24,"tag":186,"props":969,"children":970},{},[971],{"type":29,"value":929},{"type":24,"tag":156,"props":973,"children":974},{},[975,980,985,990,995,1000,1004,1009],{"type":24,"tag":186,"props":976,"children":977},{},[978],{"type":29,"value":979},"ISO 27001",{"type":24,"tag":186,"props":981,"children":982},{},[983],{"type":29,"value":984},"2 \u002F 3",{"type":24,"tag":186,"props":986,"children":987},{},[988],{"type":29,"value":989},"4",{"type":24,"tag":186,"props":991,"children":992},{},[993],{"type":29,"value":994},"2 (2)",{"type":24,"tag":186,"props":996,"children":997},{},[998],{"type":29,"value":999},"1 (0)",{"type":24,"tag":186,"props":1001,"children":1002},{},[1003],{"type":29,"value":999},{"type":24,"tag":186,"props":1005,"children":1006},{},[1007],{"type":29,"value":1008},"50 \u002F 25 \u002F 25",{"type":24,"tag":186,"props":1010,"children":1011},{},[1012],{"type":29,"value":1013},"43%",{"type":24,"tag":156,"props":1015,"children":1016},{},[1017,1022,1027,1032,1035,1038,1041,1046],{"type":24,"tag":186,"props":1018,"children":1019},{},[1020],{"type":29,"value":1021},"SOC 2",{"type":24,"tag":186,"props":1023,"children":1024},{},[1025],{"type":29,"value":1026},"0 \u002F 3",{"type":24,"tag":186,"props":1028,"children":1029},{},[1030],{"type":29,"value":1031},"0",{"type":24,"tag":186,"props":1033,"children":1034},{},[],{"type":24,"tag":186,"props":1036,"children":1037},{},[],{"type":24,"tag":186,"props":1039,"children":1040},{},[],{"type":24,"tag":186,"props":1042,"children":1043},{},[1044],{"type":29,"value":1045},"unavailable",{"type":24,"tag":186,"props":1047,"children":1048},{},[1049],{"type":29,"value":1050},"\"No Qpoint policy\"",{"type":24,"tag":25,"props":1052,"children":1053},{},[1054],{"type":29,"value":1055},"Three things this shows:",{"type":24,"tag":1057,"props":1058,"children":1059},"ul",{},[1060,1070,1080],{"type":24,"tag":333,"props":1061,"children":1062},{},[1063,1068],{"type":24,"tag":74,"props":1064,"children":1065},{},[1066],{"type":29,"value":1067},"The story changes.",{"type":29,"value":1069}," \"50%\" reads as half-done. \"7% Enforce\" reads as an org that's mostly observing, which is true of this world.",{"type":24,"tag":333,"props":1071,"children":1072},{},[1073,1078],{"type":24,"tag":74,"props":1074,"children":1075},{},[1076],{"type":29,"value":1077},"The band has to change too.",{"type":29,"value":1079}," Framework detail's donut counts distinct policies (16: 2 \u002F 10 \u002F 4). PR 5 counts mappings (28: 2 \u002F 21 \u002F 5). If both appeared they would disagree, so the donut's basis moves.",{"type":24,"tag":333,"props":1081,"children":1082},{},[1083,1088],{"type":24,"tag":74,"props":1084,"children":1085},{},[1086],{"type":29,"value":1087},"SOC 2 is empty.",{"type":29,"value":1089}," It's in PR 5's proposed catalog with nothing mapped in the lab, so most of its page can't be reviewed until mappings exist.",{"type":24,"tag":25,"props":1091,"children":1092},{},[1093],{"type":29,"value":1094},"Two consequences of the rule are worth raising. Neither is a defect in the mock:",{"type":24,"tag":1057,"props":1096,"children":1097},{},[1098,1108],{"type":24,"tag":333,"props":1099,"children":1100},{},[1101,1106],{"type":24,"tag":74,"props":1102,"children":1103},{},[1104],{"type":29,"value":1105},"Observe-only policies cap the ratio.",{"type":29,"value":1107}," 11 of OWASP LLM's 28 units sit on policies that can't enforce, so it can never pass 61% Enforce. The intent doesn't say so, and a reader will assume 100% is reachable.",{"type":24,"tag":333,"props":1109,"children":1110},{},[1111,1116,1118,1124,1126,1130],{"type":24,"tag":74,"props":1112,"children":1113},{},[1114],{"type":29,"value":1115},"Pilots don't move the ratio.",{"type":29,"value":1117}," In the ",{"type":24,"tag":37,"props":1119,"children":1121},{"className":1120},[],[1122],{"type":29,"value":1123},"?stage=adoption",{"type":29,"value":1125}," world, OWASP LLM reads 11 \u002F 89 \u002F ",{"type":24,"tag":74,"props":1127,"children":1128},{},[1129],{"type":29,"value":1031},{"type":29,"value":1131}," with 5 exceptions, while Engineering and Dev are enforcing. The adoption story's main progress shows only as an annotation. PR 6 asks for a tightening \u002F loosening summary in the report; the framework page probably needs it too.",{"type":24,"tag":82,"props":1133,"children":1135},{"id":1134},"surface-by-surface",[1136],{"type":29,"value":17},{"type":24,"tag":322,"props":1138,"children":1140},{"id":1139},"compliance-listing-mockcompliance",[1141,1143,1149],{"type":29,"value":1142},"Compliance listing (",{"type":24,"tag":37,"props":1144,"children":1146},{"className":1145},[],[1147],{"type":29,"value":1148},"\u002Fmock\u002Fcompliance",{"type":29,"value":257},{"type":24,"tag":148,"props":1151,"children":1152},{},[1153,1173],{"type":24,"tag":152,"props":1154,"children":1155},{},[1156],{"type":24,"tag":156,"props":1157,"children":1158},{},[1159,1164,1168],{"type":24,"tag":160,"props":1160,"children":1161},{},[1162],{"type":29,"value":1163},"What's there",{"type":24,"tag":160,"props":1165,"children":1166},{},[1167],{"type":29,"value":193},{"type":24,"tag":160,"props":1169,"children":1170},{},[1171],{"type":29,"value":1172},"Action",{"type":24,"tag":179,"props":1174,"children":1175},{},[1176,1199,1221,1243,1261,1283,1304,1326,1347,1370],{"type":24,"tag":156,"props":1177,"children":1178},{},[1179,1184,1189],{"type":24,"tag":186,"props":1180,"children":1181},{},[1182],{"type":29,"value":1183},"Compliance Posture bar with %",{"type":24,"tag":186,"props":1185,"children":1186},{},[1187],{"type":29,"value":1188},"Distribution, denominator, exception counts",{"type":24,"tag":186,"props":1190,"children":1191},{},[1192,1197],{"type":24,"tag":74,"props":1193,"children":1194},{},[1195],{"type":29,"value":1196},"Conflict:",{"type":29,"value":1198}," replace",{"type":24,"tag":156,"props":1200,"children":1201},{},[1202,1207,1212],{"type":24,"tag":186,"props":1203,"children":1204},{},[1205],{"type":29,"value":1206},"Compliance Score cell and \"checks\" footnote",{"type":24,"tag":186,"props":1208,"children":1209},{},[1210],{"type":29,"value":1211},"Out of scope",{"type":24,"tag":186,"props":1213,"children":1214},{},[1215,1219],{"type":24,"tag":74,"props":1216,"children":1217},{},[1218],{"type":29,"value":1196},{"type":29,"value":1220}," retire; decide on a Findings column",{"type":24,"tag":156,"props":1222,"children":1223},{},[1224,1229,1234],{"type":24,"tag":186,"props":1225,"children":1226},{},[1227],{"type":29,"value":1228},"\"Stop tracking\"",{"type":24,"tag":186,"props":1230,"children":1231},{},[1232],{"type":29,"value":1233},"Untrack",{"type":24,"tag":186,"props":1235,"children":1236},{},[1237,1241],{"type":24,"tag":74,"props":1238,"children":1239},{},[1240],{"type":29,"value":1196},{"type":29,"value":1242}," rename",{"type":24,"tag":156,"props":1244,"children":1245},{},[1246,1251,1256],{"type":24,"tag":186,"props":1247,"children":1248},{},[1249],{"type":29,"value":1250},"Tracked \u002F Available sections",{"type":24,"tag":186,"props":1252,"children":1253},{},[1254],{"type":29,"value":1255},"Tracked \u002F Untracked states; untracked stays browsable",{"type":24,"tag":186,"props":1257,"children":1258},{},[1259],{"type":29,"value":1260},"Rename the section. The behaviour already fits",{"type":24,"tag":156,"props":1262,"children":1263},{},[1264,1269,1274],{"type":24,"tag":186,"props":1265,"children":1266},{},[1267],{"type":29,"value":1268},"Track stages a change in the Policy Config draft",{"type":24,"tag":186,"props":1270,"children":1271},{},[1272],{"type":29,"value":1273},"Saves independently of publication",{"type":24,"tag":186,"props":1275,"children":1276},{},[1277,1281],{"type":24,"tag":74,"props":1278,"children":1279},{},[1280],{"type":29,"value":1196},{"type":29,"value":1282}," the listing doesn't move until publish today",{"type":24,"tag":156,"props":1284,"children":1285},{},[1286,1291,1296],{"type":24,"tag":186,"props":1287,"children":1288},{},[1289],{"type":29,"value":1290},"No publisher or edition in the row",{"type":24,"tag":186,"props":1292,"children":1293},{},[1294],{"type":29,"value":1295},"Name, publisher, edition, description, state",{"type":24,"tag":186,"props":1297,"children":1298},{},[1299],{"type":24,"tag":74,"props":1300,"children":1301},{},[1302],{"type":29,"value":1303},"Missing",{"type":24,"tag":156,"props":1305,"children":1306},{},[1307,1312,1317],{"type":24,"tag":186,"props":1308,"children":1309},{},[1310],{"type":29,"value":1311},"Subtitle \"auto-tagged to the control\", \"instrumented\", \"evaluated continuously\"",{"type":24,"tag":186,"props":1313,"children":1314},{},[1315],{"type":29,"value":1316},"Mappings show relevance, not coverage",{"type":24,"tag":186,"props":1318,"children":1319},{},[1320,1324],{"type":24,"tag":74,"props":1321,"children":1322},{},[1323],{"type":29,"value":1196},{"type":29,"value":1325}," rewrite the copy",{"type":24,"tag":156,"props":1327,"children":1328},{},[1329,1334,1339],{"type":24,"tag":186,"props":1330,"children":1331},{},[1332],{"type":29,"value":1333},"Dead \"Add\" button",{"type":24,"tag":186,"props":1335,"children":1336},{},[1337],{"type":29,"value":1338},"Fixed catalog; no custom frameworks",{"type":24,"tag":186,"props":1340,"children":1341},{},[1342],{"type":24,"tag":74,"props":1343,"children":1344},{},[1345],{"type":29,"value":1346},"Remove",{"type":24,"tag":156,"props":1348,"children":1349},{},[1350,1355,1360],{"type":24,"tag":186,"props":1351,"children":1352},{},[1353],{"type":29,"value":1354},"Five frameworks, ISO 27001 among them",{"type":24,"tag":186,"props":1356,"children":1357},{},[1358],{"type":29,"value":1359},"Three proposed; approval is separate",{"type":24,"tag":186,"props":1361,"children":1362},{},[1363,1368],{"type":24,"tag":74,"props":1364,"children":1365},{},[1366],{"type":29,"value":1367},"Decision:",{"type":29,"value":1369}," F4 ruled four, with Agentic",{"type":24,"tag":156,"props":1371,"children":1372},{},[1373,1378,1383],{"type":24,"tag":186,"props":1374,"children":1375},{},[1376],{"type":29,"value":1377},"No audit of tracking",{"type":24,"tag":186,"props":1379,"children":1380},{},[1381],{"type":29,"value":1382},"Actor, time, previous and new state",{"type":24,"tag":186,"props":1384,"children":1385},{},[1386],{"type":24,"tag":74,"props":1387,"children":1388},{},[1389],{"type":29,"value":1303},{"type":24,"tag":322,"props":1391,"children":1393},{"id":1392},"framework-detail-mockcompliancedetail",[1394,1396,1402],{"type":29,"value":1395},"Framework detail (",{"type":24,"tag":37,"props":1397,"children":1399},{"className":1398},[],[1400],{"type":29,"value":1401},"\u002Fmock\u002Fcompliance\u002Fdetail",{"type":29,"value":257},{"type":24,"tag":148,"props":1404,"children":1405},{},[1406,1424],{"type":24,"tag":152,"props":1407,"children":1408},{},[1409],{"type":24,"tag":156,"props":1410,"children":1411},{},[1412,1416,1420],{"type":24,"tag":160,"props":1413,"children":1414},{},[1415],{"type":29,"value":1163},{"type":24,"tag":160,"props":1417,"children":1418},{},[1419],{"type":29,"value":193},{"type":24,"tag":160,"props":1421,"children":1422},{},[1423],{"type":29,"value":1172},{"type":24,"tag":179,"props":1425,"children":1426},{},[1427,1450,1468,1488,1510,1528,1549,1569,1591,1609,1638,1660,1678,1701,1724,1744],{"type":24,"tag":156,"props":1428,"children":1429},{},[1430,1435,1440],{"type":24,"tag":186,"props":1431,"children":1432},{},[1433],{"type":29,"value":1434},"Title row with kind, publisher, version",{"type":24,"tag":186,"props":1436,"children":1437},{},[1438],{"type":29,"value":1439},"Adds source link and tracking state",{"type":24,"tag":186,"props":1441,"children":1442},{},[1443,1448],{"type":24,"tag":74,"props":1444,"children":1445},{},[1446],{"type":29,"value":1447},"Missing:",{"type":29,"value":1449}," source link, mapping revision",{"type":24,"tag":156,"props":1451,"children":1452},{},[1453,1458,1463],{"type":24,"tag":186,"props":1454,"children":1455},{},[1456],{"type":29,"value":1457},"Quiet Tracked pill with a Stop tracking confirm",{"type":24,"tag":186,"props":1459,"children":1460},{},[1461],{"type":29,"value":1462},"Same Track \u002F Untrack control",{"type":24,"tag":186,"props":1464,"children":1465},{},[1466],{"type":29,"value":1467},"Fits; rename",{"type":24,"tag":156,"props":1469,"children":1470},{},[1471,1476,1481],{"type":24,"tag":186,"props":1472,"children":1473},{},[1474],{"type":29,"value":1475},"Nothing marks an untracked framework as excluded",{"type":24,"tag":186,"props":1477,"children":1478},{},[1479],{"type":29,"value":1480},"\"clearly identifying it as excluded from active reporting\"",{"type":24,"tag":186,"props":1482,"children":1483},{},[1484],{"type":24,"tag":74,"props":1485,"children":1486},{},[1487],{"type":29,"value":1303},{"type":24,"tag":156,"props":1489,"children":1490},{},[1491,1496,1501],{"type":24,"tag":186,"props":1492,"children":1493},{},[1494],{"type":29,"value":1495},"Donut of distinct policies",{"type":24,"tag":186,"props":1497,"children":1498},{},[1499],{"type":29,"value":1500},"Distribution of mapping units",{"type":24,"tag":186,"props":1502,"children":1503},{},[1504,1508],{"type":24,"tag":74,"props":1505,"children":1506},{},[1507],{"type":29,"value":1196},{"type":29,"value":1509}," change the basis",{"type":24,"tag":156,"props":1511,"children":1512},{},[1513,1518,1523],{"type":24,"tag":186,"props":1514,"children":1515},{},[1516],{"type":29,"value":1517},"Open findings machine",{"type":24,"tag":186,"props":1519,"children":1520},{},[1521],{"type":29,"value":1522},"Not required, not forbidden",{"type":24,"tag":186,"props":1524,"children":1525},{},[1526],{"type":29,"value":1527},"Keep. Its count differs from the Score column today, so the two need one basis",{"type":24,"tag":156,"props":1529,"children":1530},{},[1531,1536,1541],{"type":24,"tag":186,"props":1532,"children":1533},{},[1534],{"type":29,"value":1535},"\"How these are worked out\"",{"type":24,"tag":186,"props":1537,"children":1538},{},[1539],{"type":29,"value":1540},"Explain the unit, with the worked example",{"type":24,"tag":186,"props":1542,"children":1543},{},[1544],{"type":24,"tag":74,"props":1545,"children":1546},{},[1547],{"type":29,"value":1548},"Rewrite",{"type":24,"tag":156,"props":1550,"children":1551},{},[1552,1557,1562],{"type":24,"tag":186,"props":1553,"children":1554},{},[1555],{"type":29,"value":1556},"Flat table, ID and label",{"type":24,"tag":186,"props":1558,"children":1559},{},[1560],{"type":29,"value":1561},"Native groupings: NIST functions, SOC 2 categories",{"type":24,"tag":186,"props":1563,"children":1564},{},[1565],{"type":24,"tag":74,"props":1566,"children":1567},{},[1568],{"type":29,"value":1303},{"type":24,"tag":156,"props":1570,"children":1571},{},[1572,1577,1582],{"type":24,"tag":186,"props":1573,"children":1574},{},[1575],{"type":29,"value":1576},"\"Name\" header; OWASP reads \"Items\" (Mark, 2026-11-03)",{"type":24,"tag":186,"props":1578,"children":1579},{},[1580],{"type":29,"value":1581},"Umbrella \"framework controls\"; OWASP risks",{"type":24,"tag":186,"props":1583,"children":1584},{},[1585,1589],{"type":24,"tag":74,"props":1586,"children":1587},{},[1588],{"type":29,"value":1367},{"type":29,"value":1590}," this undoes a recent ruling",{"type":24,"tag":156,"props":1592,"children":1593},{},[1594,1599,1604],{"type":24,"tag":186,"props":1595,"children":1596},{},[1597],{"type":29,"value":1598},"Rows carry policy pills by own mode",{"type":24,"tag":186,"props":1600,"children":1601},{},[1602],{"type":29,"value":1603},"Same",{"type":24,"tag":186,"props":1605,"children":1606},{},[1607],{"type":29,"value":1608},"Fits",{"type":24,"tag":156,"props":1610,"children":1611},{},[1612,1623,1628],{"type":24,"tag":186,"props":1613,"children":1614},{},[1615,1621],{"type":24,"tag":37,"props":1616,"children":1618},{"className":1617},[],[1619],{"type":29,"value":1620},"note",{"type":29,"value":1622}," shows only under the bar on procedural rows",{"type":24,"tag":186,"props":1624,"children":1625},{},[1626],{"type":29,"value":1627},"Rationale and limits alongside each control",{"type":24,"tag":186,"props":1629,"children":1630},{},[1631,1636],{"type":24,"tag":74,"props":1632,"children":1633},{},[1634],{"type":29,"value":1635},"Partial:",{"type":29,"value":1637}," show it on every row",{"type":24,"tag":156,"props":1639,"children":1640},{},[1641,1646,1651],{"type":24,"tag":186,"props":1642,"children":1643},{},[1644],{"type":29,"value":1645},"Per-row posture %",{"type":24,"tag":186,"props":1647,"children":1648},{},[1649],{"type":29,"value":1650},"Not required; units are per pair",{"type":24,"tag":186,"props":1652,"children":1653},{},[1654,1658],{"type":24,"tag":74,"props":1655,"children":1656},{},[1657],{"type":29,"value":1367},{"type":29,"value":1659}," row units add up exactly to the band, so a small bar can stay honest",{"type":24,"tag":156,"props":1661,"children":1662},{},[1663,1668,1673],{"type":24,"tag":186,"props":1664,"children":1665},{},[1666],{"type":29,"value":1667},"Gaps section",{"type":24,"tag":186,"props":1669,"children":1670},{},[1671],{"type":29,"value":1672},"Outside the denominator, disclosed",{"type":24,"tag":186,"props":1674,"children":1675},{},[1676],{"type":29,"value":1677},"Keep, rename, say \"fixed v1 scope\"",{"type":24,"tag":156,"props":1679,"children":1680},{},[1681,1686,1691],{"type":24,"tag":186,"props":1682,"children":1683},{},[1684],{"type":29,"value":1685},"Footnote: \"nothing on this page is evidence for an auditor\"",{"type":24,"tag":186,"props":1687,"children":1688},{},[1689],{"type":29,"value":1690},"\"maps selected policies and evidence\"",{"type":24,"tag":186,"props":1692,"children":1693},{},[1694,1699],{"type":24,"tag":74,"props":1695,"children":1696},{},[1697],{"type":29,"value":1698},"Rewrite;",{"type":29,"value":1700}," F1 still holds",{"type":24,"tag":156,"props":1702,"children":1703},{},[1704,1709,1714],{"type":24,"tag":186,"props":1705,"children":1706},{},[1707],{"type":29,"value":1708},"No history",{"type":24,"tag":186,"props":1710,"children":1711},{},[1712],{"type":29,"value":1713},"Posture over time, with reconstruction and revision marks",{"type":24,"tag":186,"props":1715,"children":1716},{},[1717,1722],{"type":24,"tag":74,"props":1718,"children":1719},{},[1720],{"type":29,"value":1721},"Missing,",{"type":29,"value":1723}," the largest new piece",{"type":24,"tag":156,"props":1725,"children":1726},{},[1727,1732,1737],{"type":24,"tag":186,"props":1728,"children":1729},{},[1730],{"type":29,"value":1731},"No exception detail",{"type":24,"tag":186,"props":1733,"children":1734},{},[1735],{"type":29,"value":1736},"Inspect scopes and overrides without changing the count",{"type":24,"tag":186,"props":1738,"children":1739},{},[1740],{"type":24,"tag":74,"props":1741,"children":1742},{},[1743],{"type":29,"value":1303},{"type":24,"tag":156,"props":1745,"children":1746},{},[1747,1752,1757],{"type":24,"tag":186,"props":1748,"children":1749},{},[1750],{"type":29,"value":1751},"No other evidence",{"type":24,"tag":186,"props":1753,"children":1754},{},[1755],{"type":29,"value":1756},"Described separately, no units",{"type":24,"tag":186,"props":1758,"children":1759},{},[1760],{"type":24,"tag":74,"props":1761,"children":1762},{},[1763],{"type":29,"value":1303},{"type":24,"tag":322,"props":1765,"children":1767},{"id":1766},"policies-mockpolicies-policy-detail",[1768,1770,1776],{"type":29,"value":1769},"Policies (",{"type":24,"tag":37,"props":1771,"children":1773},{"className":1772},[],[1774],{"type":29,"value":1775},"\u002Fmock\u002Fpolicies",{"type":29,"value":1777},", policy detail)",{"type":24,"tag":25,"props":1779,"children":1780},{},[1781],{"type":29,"value":1782},"The policy model is untouched. PR 5 reaches Policies in three places.",{"type":24,"tag":148,"props":1784,"children":1785},{},[1786,1804],{"type":24,"tag":152,"props":1787,"children":1788},{},[1789],{"type":24,"tag":156,"props":1790,"children":1791},{},[1792,1796,1800],{"type":24,"tag":160,"props":1793,"children":1794},{},[1795],{"type":29,"value":1163},{"type":24,"tag":160,"props":1797,"children":1798},{},[1799],{"type":29,"value":193},{"type":24,"tag":160,"props":1801,"children":1802},{},[1803],{"type":29,"value":1172},{"type":24,"tag":179,"props":1805,"children":1806},{},[1807,1829,1847,1871,1889],{"type":24,"tag":156,"props":1808,"children":1809},{},[1810,1815,1820],{"type":24,"tag":186,"props":1811,"children":1812},{},[1813],{"type":29,"value":1814},"Frameworks strip on the listing: \"Active Compliance frameworks\", \"Activate All\", \"Enable Required Policies\", % complete, \"Show inactive\"",{"type":24,"tag":186,"props":1816,"children":1817},{},[1818],{"type":29,"value":1819},"Tracking never changes a policy; a framework is not a managed policy group",{"type":24,"tag":186,"props":1821,"children":1822},{},[1823,1827],{"type":24,"tag":74,"props":1824,"children":1825},{},[1826],{"type":29,"value":1196},{"type":29,"value":1828}," remove. c126 C5 and c123 X1\u002FX2 already planned this",{"type":24,"tag":156,"props":1830,"children":1831},{},[1832,1837,1842],{"type":24,"tag":186,"props":1833,"children":1834},{},[1835],{"type":29,"value":1836},"\"Active frameworks req…\" column",{"type":24,"tag":186,"props":1838,"children":1839},{},[1840],{"type":29,"value":1841},"Tracked frameworks, read-only",{"type":24,"tag":186,"props":1843,"children":1844},{},[1845],{"type":29,"value":1846},"Rename",{"type":24,"tag":156,"props":1848,"children":1849},{},[1850,1861,1866],{"type":24,"tag":186,"props":1851,"children":1852},{},[1853,1859],{"type":24,"tag":37,"props":1854,"children":1856},{"className":1855},[],[1857],{"type":29,"value":1858},"PolicyFrameworks",{"type":29,"value":1860},": Requirement, Contributes, \"Not tracked\"",{"type":24,"tag":186,"props":1862,"children":1863},{},[1864],{"type":29,"value":1865},"Source terms, rationale and limits, Untracked",{"type":24,"tag":186,"props":1867,"children":1868},{},[1869],{"type":29,"value":1870},"Revise. Its link also opens the record page rather than the composed mock",{"type":24,"tag":156,"props":1872,"children":1873},{},[1874,1879,1884],{"type":24,"tag":186,"props":1875,"children":1876},{},[1877],{"type":29,"value":1878},"Policy detail's Findings, mode and Exceptions",{"type":24,"tag":186,"props":1880,"children":1881},{},[1882],{"type":29,"value":1883},"Canonical home for those",{"type":24,"tag":186,"props":1885,"children":1886},{},[1887],{"type":29,"value":1888},"Fits; the framework page links here",{"type":24,"tag":156,"props":1890,"children":1891},{},[1892,1903,1908],{"type":24,"tag":186,"props":1893,"children":1894},{},[1895,1901],{"type":24,"tag":37,"props":1896,"children":1898},{"className":1897},[],[1899],{"type":29,"value":1900},"framework-track",{"type":29,"value":1902}," as a Policy Config line",{"type":24,"tag":186,"props":1904,"children":1905},{},[1906],{"type":29,"value":1907},"Outside the draft",{"type":24,"tag":186,"props":1909,"children":1910},{},[1911,1915],{"type":24,"tag":74,"props":1912,"children":1913},{},[1914],{"type":29,"value":1196},{"type":29,"value":1916}," see below",{"type":24,"tag":25,"props":1918,"children":1919},{},[1920],{"type":29,"value":1921},"There's no bulk route left for \"turn on this framework's policies\". PR 5's journey is: Manage Framework → Review Policy → Configure and Publish. Framework detail needs a way to go from \"5 Off\" to those policies. Today it only has per-pill links.",{"type":24,"tag":25,"props":1923,"children":1924},{},[1925,1930,1932,1938,1940,1946,1948,1953,1955,1961,1963,1969],{"type":24,"tag":74,"props":1926,"children":1927},{},[1928],{"type":29,"value":1929},"Reassuring:",{"type":29,"value":1931}," the lab's ",{"type":24,"tag":37,"props":1933,"children":1935},{"className":1934},[],[1936],{"type":29,"value":1937},"world",{"type":29,"value":1939}," is already live state, with the draft shown only under ",{"type":24,"tag":37,"props":1941,"children":1943},{"className":1942},[],[1944],{"type":29,"value":1945},"?preview=draft",{"type":29,"value":1947},". So \"use published state\" costs nothing, and the preview just needs labelling. Removing ",{"type":24,"tag":37,"props":1949,"children":1951},{"className":1950},[],[1952],{"type":29,"value":1900},{"type":29,"value":1954}," from the draft is close to one line, because ",{"type":24,"tag":37,"props":1956,"children":1958},{"className":1957},[],[1959],{"type":29,"value":1960},"OPERATIONAL",{"type":29,"value":1962}," in ",{"type":24,"tag":37,"props":1964,"children":1966},{"className":1965},[],[1967],{"type":29,"value":1968},"useGovernanceMock.ts",{"type":29,"value":1970}," already marks the kinds that apply live.",{"type":24,"tag":322,"props":1972,"children":1974},{"id":1973},"reports-mockreports",[1975,1977,1983],{"type":29,"value":1976},"Reports (",{"type":24,"tag":37,"props":1978,"children":1980},{"className":1979},[],[1981],{"type":29,"value":1982},"\u002Fmock\u002Freports",{"type":29,"value":257},{"type":24,"tag":25,"props":1985,"children":1986},{},[1987],{"type":29,"value":1988},"PR 6 is open, so this is a proposal, but the structure differs enough to weigh now.",{"type":24,"tag":148,"props":1990,"children":1991},{},[1992,2011],{"type":24,"tag":152,"props":1993,"children":1994},{},[1995],{"type":24,"tag":156,"props":1996,"children":1997},{},[1998,2003,2007],{"type":24,"tag":160,"props":1999,"children":2000},{},[2001],{"type":29,"value":2002},"c128",{"type":24,"tag":160,"props":2004,"children":2005},{},[2006],{"type":29,"value":244},{"type":24,"tag":160,"props":2008,"children":2009},{},[2010],{"type":29,"value":488},{"type":24,"tag":179,"props":2012,"children":2013},{},[2014,2035,2056,2076,2099,2119,2139,2158,2181,2201,2221,2244,2265,2285,2307],{"type":24,"tag":156,"props":2015,"children":2016},{},[2017,2022,2027],{"type":24,"tag":186,"props":2018,"children":2019},{},[2020],{"type":29,"value":2021},"Three reports: Posture, Inventory, Deployment status",{"type":24,"tag":186,"props":2023,"children":2024},{},[2025],{"type":29,"value":2026},"Four: Inventory, Findings, Compliance, Executive Summary",{"type":24,"tag":186,"props":2028,"children":2029},{},[2030],{"type":24,"tag":74,"props":2031,"children":2032},{},[2033],{"type":29,"value":2034},"Conflict",{"type":24,"tag":156,"props":2036,"children":2037},{},[2038,2043,2048],{"type":24,"tag":186,"props":2039,"children":2040},{},[2041],{"type":29,"value":2042},"Findings is a section of Posture (Mark, 2026-11-03)",{"type":24,"tag":186,"props":2044,"children":2045},{},[2046],{"type":29,"value":2047},"Its own report",{"type":24,"tag":186,"props":2049,"children":2050},{},[2051],{"type":24,"tag":74,"props":2052,"children":2053},{},[2054],{"type":29,"value":2055},"Conflict with a ruling",{"type":24,"tag":156,"props":2057,"children":2058},{},[2059,2064,2069],{"type":24,"tag":186,"props":2060,"children":2061},{},[2062],{"type":29,"value":2063},"Board folds into the catalog's band (Mark, 2026-11-03)",{"type":24,"tag":186,"props":2065,"children":2066},{},[2067],{"type":29,"value":2068},"Executive Summary is its own report",{"type":24,"tag":186,"props":2070,"children":2071},{},[2072],{"type":24,"tag":74,"props":2073,"children":2074},{},[2075],{"type":29,"value":2055},{"type":24,"tag":156,"props":2077,"children":2078},{},[2079,2084,2089],{"type":24,"tag":186,"props":2080,"children":2081},{},[2082],{"type":29,"value":2083},"Compliance stays with c123",{"type":24,"tag":186,"props":2085,"children":2086},{},[2087],{"type":29,"value":2088},"Compliance Report in the catalog",{"type":24,"tag":186,"props":2090,"children":2091},{},[2092,2097],{"type":24,"tag":74,"props":2093,"children":2094},{},[2095],{"type":29,"value":2096},"Conflict.",{"type":29,"value":2098}," c123 still owns the definition",{"type":24,"tag":156,"props":2100,"children":2101},{},[2102,2107,2112],{"type":24,"tag":186,"props":2103,"children":2104},{},[2105],{"type":29,"value":2106},"Live reader, window in the URL",{"type":24,"tag":186,"props":2108,"children":2109},{},[2110],{"type":29,"value":2111},"Fixed snapshot PDF; live browser reports out of scope",{"type":24,"tag":186,"props":2113,"children":2114},{},[2115],{"type":24,"tag":74,"props":2116,"children":2117},{},[2118],{"type":29,"value":2034},{"type":24,"tag":156,"props":2120,"children":2121},{},[2122,2127,2132],{"type":24,"tag":186,"props":2123,"children":2124},{},[2125],{"type":29,"value":2126},"No generated list",{"type":24,"tag":186,"props":2128,"children":2129},{},[2130],{"type":29,"value":2131},"Create → Generating \u002F Ready \u002F Failed → download, with a history list",{"type":24,"tag":186,"props":2133,"children":2134},{},[2135],{"type":24,"tag":74,"props":2136,"children":2137},{},[2138],{"type":29,"value":1303},{"type":24,"tag":156,"props":2140,"children":2141},{},[2142,2147,2151],{"type":24,"tag":186,"props":2143,"children":2144},{},[2145],{"type":29,"value":2146},"CSV and JSON (D7)",{"type":24,"tag":186,"props":2148,"children":2149},{},[2150],{"type":29,"value":1211},{"type":24,"tag":186,"props":2152,"children":2153},{},[2154],{"type":24,"tag":74,"props":2155,"children":2156},{},[2157],{"type":29,"value":2034},{"type":24,"tag":156,"props":2159,"children":2160},{},[2161,2166,2171],{"type":24,"tag":186,"props":2162,"children":2163},{},[2164],{"type":29,"value":2165},"Rolling, calendar, custom, compare",{"type":24,"tag":186,"props":2167,"children":2168},{},[2169],{"type":29,"value":2170},"7, 30, 90, custom; start and end comparison inside the period",{"type":24,"tag":186,"props":2172,"children":2173},{},[2174,2179],{"type":24,"tag":74,"props":2175,"children":2176},{},[2177],{"type":29,"value":2178},"Partial.",{"type":29,"value":2180}," The shared picker stays for operator pages",{"type":24,"tag":156,"props":2182,"children":2183},{},[2184,2189,2194],{"type":24,"tag":186,"props":2185,"children":2186},{},[2187],{"type":29,"value":2188},"Findings \u002F SLA, past-target lists",{"type":24,"tag":186,"props":2190,"children":2191},{},[2192],{"type":29,"value":2193},"\"SLA-specific reporting is not a new v1 requirement\"",{"type":24,"tag":186,"props":2195,"children":2196},{},[2197],{"type":24,"tag":74,"props":2198,"children":2199},{},[2200],{"type":29,"value":2034},{"type":24,"tag":156,"props":2202,"children":2203},{},[2204,2209,2214],{"type":24,"tag":186,"props":2205,"children":2206},{},[2207],{"type":29,"value":2208},"No MTTR",{"type":24,"tag":186,"props":2210,"children":2211},{},[2212],{"type":29,"value":2213},"MTTR with cohort size, trend, and new \u002F resolved \u002F reopened per bucket",{"type":24,"tag":186,"props":2215,"children":2216},{},[2217],{"type":24,"tag":74,"props":2218,"children":2219},{},[2220],{"type":29,"value":1303},{"type":24,"tag":156,"props":2222,"children":2223},{},[2224,2229,2234],{"type":24,"tag":186,"props":2225,"children":2226},{},[2227],{"type":29,"value":2228},"Posture score 78 leads the report",{"type":24,"tag":186,"props":2230,"children":2231},{},[2232],{"type":29,"value":2233},"Not in PR 6; \"not an invented numeric risk score\" for severity",{"type":24,"tag":186,"props":2235,"children":2236},{},[2237,2242],{"type":24,"tag":74,"props":2238,"children":2239},{},[2240],{"type":29,"value":2241},"Conflict,",{"type":29,"value":2243}," and it clears up the \"posture\" collision",{"type":24,"tag":156,"props":2245,"children":2246},{},[2247,2252,2257],{"type":24,"tag":186,"props":2248,"children":2249},{},[2250],{"type":29,"value":2251},"\"Framework evidence\": with evidence, partly, none",{"type":24,"tag":186,"props":2253,"children":2254},{},[2255],{"type":29,"value":2256},"Off \u002F Observe \u002F Enforce against mappings",{"type":24,"tag":186,"props":2258,"children":2259},{},[2260],{"type":24,"tag":74,"props":2261,"children":2262},{},[2263],{"type":29,"value":2264},"Conflict, from PR 5 directly",{"type":24,"tag":156,"props":2266,"children":2267},{},[2268,2273,2278],{"type":24,"tag":186,"props":2269,"children":2270},{},[2271],{"type":29,"value":2272},"Evidence pack lands in Reports",{"type":24,"tag":186,"props":2274,"children":2275},{},[2276],{"type":29,"value":2277},"\"A full audit evidence package\" out of scope",{"type":24,"tag":186,"props":2279,"children":2280},{},[2281],{"type":24,"tag":74,"props":2282,"children":2283},{},[2284],{"type":29,"value":2034},{"type":24,"tag":156,"props":2286,"children":2287},{},[2288,2293,2298],{"type":24,"tag":186,"props":2289,"children":2290},{},[2291],{"type":29,"value":2292},"No recommendations",{"type":24,"tag":186,"props":2294,"children":2295},{},[2296],{"type":29,"value":2297},"Enforce-pilot candidates, v1 target",{"type":24,"tag":186,"props":2299,"children":2300},{},[2301,2305],{"type":24,"tag":74,"props":2302,"children":2303},{},[2304],{"type":29,"value":1721},{"type":29,"value":2306}," and needs monitored-activity counts",{"type":24,"tag":156,"props":2308,"children":2309},{},[2310,2315,2320],{"type":24,"tag":186,"props":2311,"children":2312},{},[2313],{"type":29,"value":2314},"Team scope ruled, not built",{"type":24,"tag":186,"props":2316,"children":2317},{},[2318],{"type":29,"value":2319},"All Teams or one, on all four",{"type":24,"tag":186,"props":2321,"children":2322},{},[2323],{"type":24,"tag":74,"props":2324,"children":2325},{},[2326],{"type":29,"value":1303},{"type":24,"tag":25,"props":2328,"children":2329},{},[2330,2335],{"type":24,"tag":74,"props":2331,"children":2332},{},[2333],{"type":29,"value":2334},"What holds:",{"type":29,"value":2336}," R2's basis tags are PR 6's \"selected period vs current snapshot\". R6's hatching is its \"unavailable, not zero\". R3 is its \"share definitions\". R4 is its \"read-only\". The footer has the data cutoff. The document face and the rollups all carry over. The window picker stays because c128 D5 makes it the operator pages' control.",{"type":24,"tag":25,"props":2338,"children":2339},{},[2340],{"type":29,"value":2341},"Where today's sections go if PR 6 lands:",{"type":24,"tag":148,"props":2343,"children":2344},{},[2345,2361],{"type":24,"tag":152,"props":2346,"children":2347},{},[2348],{"type":24,"tag":156,"props":2349,"children":2350},{},[2351,2356],{"type":24,"tag":160,"props":2352,"children":2353},{},[2354],{"type":29,"value":2355},"Today",{"type":24,"tag":160,"props":2357,"children":2358},{},[2359],{"type":29,"value":2360},"Goes to",{"type":24,"tag":179,"props":2362,"children":2363},{},[2364,2383,2396,2409,2422,2435,2448,2461,2474,2487],{"type":24,"tag":156,"props":2365,"children":2366},{},[2367,2372],{"type":24,"tag":186,"props":2368,"children":2369},{},[2370],{"type":29,"value":2371},"Posture · Posture score, What lowers it, At-risk harnesses",{"type":24,"tag":186,"props":2373,"children":2374},{},[2375,2377],{"type":29,"value":2376},"Leaves Reports; stays on ",{"type":24,"tag":37,"props":2378,"children":2380},{"className":2379},[],[2381],{"type":29,"value":2382},"\u002Fposture",{"type":24,"tag":156,"props":2384,"children":2385},{},[2386,2391],{"type":24,"tag":186,"props":2387,"children":2388},{},[2389],{"type":29,"value":2390},"Posture · Findings and SLA",{"type":24,"tag":186,"props":2392,"children":2393},{},[2394],{"type":29,"value":2395},"Findings report, SLA replaced by MTTR",{"type":24,"tag":156,"props":2397,"children":2398},{},[2399,2404],{"type":24,"tag":186,"props":2400,"children":2401},{},[2402],{"type":29,"value":2403},"Posture · Data protection, Egress",{"type":24,"tag":186,"props":2405,"children":2406},{},[2407],{"type":29,"value":2408},"Not in PR 6. Drop, or raise as additions",{"type":24,"tag":156,"props":2410,"children":2411},{},[2412,2417],{"type":24,"tag":186,"props":2413,"children":2414},{},[2415],{"type":29,"value":2416},"Posture · Policies in force",{"type":24,"tag":186,"props":2418,"children":2419},{},[2420],{"type":29,"value":2421},"Compliance report",{"type":24,"tag":156,"props":2423,"children":2424},{},[2425,2430],{"type":24,"tag":186,"props":2426,"children":2427},{},[2428],{"type":29,"value":2429},"Posture · Framework evidence",{"type":24,"tag":186,"props":2431,"children":2432},{},[2433],{"type":29,"value":2434},"Compliance report, rewritten",{"type":24,"tag":156,"props":2436,"children":2437},{},[2438,2443],{"type":24,"tag":186,"props":2439,"children":2440},{},[2441],{"type":29,"value":2442},"Inventory · all but Spend",{"type":24,"tag":186,"props":2444,"children":2445},{},[2446],{"type":29,"value":2447},"Inventory report",{"type":24,"tag":156,"props":2449,"children":2450},{},[2451,2456],{"type":24,"tag":186,"props":2452,"children":2453},{},[2454],{"type":29,"value":2455},"Inventory · Spend",{"type":24,"tag":186,"props":2457,"children":2458},{},[2459],{"type":29,"value":2460},"Not in PR 6. Cost Center keeps it",{"type":24,"tag":156,"props":2462,"children":2463},{},[2464,2469],{"type":24,"tag":186,"props":2465,"children":2466},{},[2467],{"type":29,"value":2468},"Deployment · Coverage, States, People, Stale",{"type":24,"tag":186,"props":2470,"children":2471},{},[2472],{"type":29,"value":2473},"Inventory report's monitoring questions",{"type":24,"tag":156,"props":2475,"children":2476},{},[2477,2482],{"type":24,"tag":186,"props":2478,"children":2479},{},[2480],{"type":29,"value":2481},"Deployment · Shadow installs, Versions",{"type":24,"tag":186,"props":2483,"children":2484},{},[2485],{"type":29,"value":2486},"Not in PR 6; raise, or leave with the operator pages",{"type":24,"tag":156,"props":2488,"children":2489},{},[2490,2495],{"type":24,"tag":186,"props":2491,"children":2492},{},[2493],{"type":29,"value":2494},"Catalog's Board band",{"type":24,"tag":186,"props":2496,"children":2497},{},[2498],{"type":29,"value":2499},"Executive Summary report",{"type":24,"tag":82,"props":2501,"children":2503},{"id":2502},"our-own-open-questions-now-answered",[2504],{"type":29,"value":18},{"type":24,"tag":25,"props":2506,"children":2507},{},[2508,2509,2515,2517,2523],{"type":29,"value":30},{"type":24,"tag":37,"props":2510,"children":2512},{"className":2511},[],[2513],{"type":29,"value":2514},"CYCLE.md",{"type":29,"value":2516}," and the gap check in ",{"type":24,"tag":37,"props":2518,"children":2520},{"className":2519},[],[2521],{"type":29,"value":2522},"intents-redline.md",{"type":29,"value":2524}," §5.",{"type":24,"tag":148,"props":2526,"children":2527},{},[2528,2544],{"type":24,"tag":152,"props":2529,"children":2530},{},[2531],{"type":24,"tag":156,"props":2532,"children":2533},{},[2534,2539],{"type":24,"tag":160,"props":2535,"children":2536},{},[2537],{"type":29,"value":2538},"Question or ask",{"type":24,"tag":160,"props":2540,"children":2541},{},[2542],{"type":29,"value":2543},"PR 5's answer",{"type":24,"tag":179,"props":2545,"children":2546},{},[2547,2565,2583,2596,2612,2625,2641,2658,2676,2694],{"type":24,"tag":156,"props":2548,"children":2549},{},[2550,2555],{"type":24,"tag":186,"props":2551,"children":2552},{},[2553],{"type":29,"value":2554},"Open Q1: control layer above policies?",{"type":24,"tag":186,"props":2556,"children":2557},{},[2558,2563],{"type":24,"tag":74,"props":2559,"children":2560},{},[2561],{"type":29,"value":2562},"Yes.",{"type":29,"value":2564}," Controls, then policies",{"type":24,"tag":156,"props":2566,"children":2567},{},[2568,2573],{"type":24,"tag":186,"props":2569,"children":2570},{},[2571],{"type":29,"value":2572},"Open Q2: what covers a requirement besides policies?",{"type":24,"tag":186,"props":2574,"children":2575},{},[2576,2578],{"type":29,"value":2577},"Described separately, no units. ",{"type":24,"tag":74,"props":2579,"children":2580},{},[2581],{"type":29,"value":2582},"Our four-state proposal is declined",{"type":24,"tag":156,"props":2584,"children":2585},{},[2586,2591],{"type":24,"tag":186,"props":2587,"children":2588},{},[2589],{"type":29,"value":2590},"Open Q3: version migration",{"type":24,"tag":186,"props":2592,"children":2593},{},[2594],{"type":29,"value":2595},"Edition and mapping revision kept with each measurement. How updates are released stays open",{"type":24,"tag":156,"props":2597,"children":2598},{},[2599,2604],{"type":24,"tag":186,"props":2600,"children":2601},{},[2602],{"type":29,"value":2603},"Open Q4: browse untracked?",{"type":24,"tag":186,"props":2605,"children":2606},{},[2607],{"type":24,"tag":74,"props":2608,"children":2609},{},[2610],{"type":29,"value":2611},"Yes",{"type":24,"tag":156,"props":2613,"children":2614},{},[2615,2620],{"type":24,"tag":186,"props":2616,"children":2617},{},[2618],{"type":29,"value":2619},"Redline 1: split by object",{"type":24,"tag":186,"props":2621,"children":2622},{},[2623],{"type":29,"value":2624},"Yes, as two intents, with tracking folded in",{"type":24,"tag":156,"props":2626,"children":2627},{},[2628,2633],{"type":24,"tag":186,"props":2629,"children":2630},{},[2631],{"type":29,"value":2632},"Redline 2: evidence as mapping targets",{"type":24,"tag":186,"props":2634,"children":2635},{},[2636],{"type":24,"tag":74,"props":2637,"children":2638},{},[2639],{"type":29,"value":2640},"Declined",{"type":24,"tag":156,"props":2642,"children":2643},{},[2644,2649],{"type":24,"tag":186,"props":2645,"children":2646},{},[2647],{"type":29,"value":2648},"Redline 3: Enforced \u002F Observed \u002F Evidenced \u002F Outside",{"type":24,"tag":186,"props":2650,"children":2651},{},[2652,2656],{"type":24,"tag":74,"props":2653,"children":2654},{},[2655],{"type":29,"value":2640},{"type":29,"value":2657}," in favour of Off \u002F Observe \u002F Enforce",{"type":24,"tag":156,"props":2659,"children":2660},{},[2661,2666],{"type":24,"tag":186,"props":2662,"children":2663},{},[2664],{"type":29,"value":2665},"Redline 4: tracking moves Off to Observe",{"type":24,"tag":186,"props":2667,"children":2668},{},[2669,2674],{"type":24,"tag":74,"props":2670,"children":2671},{},[2672],{"type":29,"value":2673},"Declined,",{"type":29,"value":2675}," tracking moves nothing",{"type":24,"tag":156,"props":2677,"children":2678},{},[2679,2684],{"type":24,"tag":186,"props":2680,"children":2681},{},[2682],{"type":29,"value":2683},"Redline 5: version pinning",{"type":24,"tag":186,"props":2685,"children":2686},{},[2687,2692],{"type":24,"tag":74,"props":2688,"children":2689},{},[2690],{"type":29,"value":2691},"Accepted,",{"type":29,"value":2693}," plus mapping revision",{"type":24,"tag":156,"props":2695,"children":2696},{},[2697,2702],{"type":24,"tag":186,"props":2698,"children":2699},{},[2700],{"type":29,"value":2701},"Redline 6: fit and provenance per mapping",{"type":24,"tag":186,"props":2703,"children":2704},{},[2705],{"type":29,"value":2706},"Mostly: rationale, limits and revision",{"type":24,"tag":25,"props":2708,"children":2709},{},[2710,2715],{"type":24,"tag":37,"props":2711,"children":2713},{"className":2712},[],[2714],{"type":29,"value":2514},{"type":29,"value":2716},"'s objective needs matching edits: \"no percentage\" (PR 5 allows proportions, never a score or a % of controls satisfied), \"non-policy evidence covers a requirement\", the four working states, and F8.",{"type":24,"tag":25,"props":2718,"children":2719},{},[2720,2722,2728],{"type":29,"value":2721},"The OWASP tour still uses ",{"type":24,"tag":37,"props":2723,"children":2725},{"className":2724},[],[2726],{"type":29,"value":2727},"Evidenced",{"type":29,"value":2729}," as a per-mitigation chip. That can stay as a description of what Qpoint does for one mitigation, as long as it isn't presented as a posture.",{"type":24,"tag":82,"props":2731,"children":2733},{"id":2732},"worth-raising-with-peterson",[2734],{"type":29,"value":19},{"type":24,"tag":25,"props":2736,"children":2737},{},[2738],{"type":29,"value":2739},"Nothing has been sent; the memory rule stands that he revises the intents himself. These are for Mark to bring if he wants to.",{"type":24,"tag":329,"props":2741,"children":2742},{},[2743,2753,2763,2773,2783,2801,2811,2821],{"type":24,"tag":333,"props":2744,"children":2745},{},[2746,2751],{"type":24,"tag":74,"props":2747,"children":2748},{},[2749],{"type":29,"value":2750},"Observe-only policies",{"type":29,"value":2752}," cap the Enforce ratio (above). An annotation would solve it without changing the calculation.",{"type":24,"tag":333,"props":2754,"children":2755},{},[2756,2761],{"type":24,"tag":74,"props":2757,"children":2758},{},[2759],{"type":29,"value":2760},"Pilots are invisible in the ratio",{"type":29,"value":2762}," (above). Should the framework page show tightening vs loosening, as PR 6's report does?",{"type":24,"tag":333,"props":2764,"children":2765},{},[2766,2771],{"type":24,"tag":74,"props":2767,"children":2768},{},[2769],{"type":29,"value":2770},"The catalog omits OWASP Agentic,",{"type":29,"value":2772}," which F4 ruled in on 2026-10-27.",{"type":24,"tag":333,"props":2774,"children":2775},{},[2776,2781],{"type":24,"tag":74,"props":2777,"children":2778},{},[2779],{"type":29,"value":2780},"Should an untracked framework show current posture?",{"type":29,"value":2782}," Expected Behavior says the catalog shows posture, and also that retained samples must not read as current. Read together, it's unclear.",{"type":24,"tag":333,"props":2784,"children":2785},{},[2786,2791,2793,2799],{"type":24,"tag":74,"props":2787,"children":2788},{},[2789],{"type":29,"value":2790},"\"Qplane\".",{"type":29,"value":2792}," PR 6 calls the app Qplane throughout, and ",{"type":24,"tag":37,"props":2794,"children":2796},{"className":2795},[],[2797],{"type":29,"value":2798},"enforce_publish-policy-configuration.md",{"type":29,"value":2800}," on main uses it too. Nothing on the design side does. Is it the product's name?",{"type":24,"tag":333,"props":2802,"children":2803},{},[2804,2809],{"type":24,"tag":74,"props":2805,"children":2806},{},[2807],{"type":29,"value":2808},"Leftover wording.",{"type":29,"value":2810}," PR 6 still says \"enabled framework\" and \"disabled periods\"; PR 5 keeps \"framework toggles\".",{"type":24,"tag":333,"props":2812,"children":2813},{},[2814,2819],{"type":24,"tag":74,"props":2815,"children":2816},{},[2817],{"type":29,"value":2818},"Superseded intents on main:",{"type":29,"value":2820}," the two older framework files, plus the four the redline lists.",{"type":24,"tag":333,"props":2822,"children":2823},{},[2824,2829],{"type":24,"tag":74,"props":2825,"children":2826},{},[2827],{"type":29,"value":2828},"Findings on a framework page.",{"type":29,"value":2830}," PR 5 doesn't say which window or basis applies. Report and page should agree.",1794599401451]