ea30ceb1f1
Key changes to system prompt: - Evidence/documentation belongs in evidence field, NOT as separate control - SBOM = 1 control (not "maintain" + "document" separately) - Security lifecycle phases (identify/assess/remediate/monitor) = separate controls - Same object + same action + same actor = 1 control (merge, not split) - Titles must contain the ACTION, not just the subject WRONG: "Vertraulichkeit Mitarbeiter" RIGHT: "Mitarbeiter zur Vertraulichkeit verpflichten" Titles serve as MCP search queries against customer documents/code. Bad titles = bad search results = unusable product. All 52,566 old pass0b controls deprecated (not deleted) for full regeneration. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>