-- 049: Add target_audience field to canonical_controls
-- Distinguishes who a control is relevant for: enterprises, authorities, providers, or all.

ALTER TABLE canonical_controls ADD COLUMN IF NOT EXISTS
    target_audience VARCHAR(20) DEFAULT NULL
    CHECK (target_audience IN ('enterprise', 'authority', 'provider', 'all'));

CREATE INDEX IF NOT EXISTS idx_cc_target_audience ON canonical_controls(target_audience);