Thread `posture-score`: prompt (2026-11-04)

Mark's prompt, verbatim. Two earlier sends were interrupted partway; each was a shorter draft of this one, so only the full version is kept. What it produced: posture-score-plan.md.

let's do it, let's create a plan for accomplishing the following

We need a notion of two different compliance metrics.

Compliance Posture. Think of this as how well we are configured according to frameworks and standards

• This relates directly to policy mode (inactive, observe, enforce)
  • enforce is strong while the other two would be weaker
• This also encompasses exceptions–exceptions would also weaken

Compliance Score

This reflects how well we are doing abiding by the compliance posture–ie, how many findings / violations

Application

Compliance details page

• Remove coverage DataMachine
• Remove coverage column
• Rename Mapped Policies -> Enforcement Posture
• Remove header items.
• Rename column items -> name
• Add two columns Compliance Posture and Compliance Score
  • compliance posture
    • Let's use a bar that is green when at 100%, orange when less than, red when very low to show visually how close we are on this row
  • Compliance Score
    • Fold findings into this
    • We've talked about perhaps trying to indicate how many items were "scanned?" without any findings to give a notion of the percentage of total items that caused a finding to occur. Let's explore options here as well as multiple options for how to show this?
      • two numbers, clean / findings?
        • 30k calls, 4 findings?
      • percentage?
• Where else should these two metrics apply?
  • explore the exisitng pages and make suggestions