2341bda621
Registry filled proposed_obligation_id for the 3 NIST primary_implementation controls: SI-7->signed_update_integrity, SI-2->provide_security_updates, CM-7->remote_access_attack_surface_min. Adopted onto cra_nist.jsonl so the join is now EXACT (obligation_id) instead of the coarse citation_unit fallback. obligation-status now surfaces SI-2 under provide_security_updates; test extended. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>