feat(controls): B2 — grounded surface checks for absence-based CRA controls (#219)

compliance-core/src/config.rs

@@ -80,6 +80,11 @@ pub struct BreakpilotConfig {
     /// scale path and stays gated until verified live against a deployed
     /// master-controls catalog.
     pub semantic_mapping: bool,
+    /// Enable the **grounded surface** pass for absence-based controls (retrieve
+    /// the code surface a control governs, judge whether it holds). Off by
+    /// default: absence detection is the least deterministic path and stays gated
+    /// until tuned against live scans.
+    pub grounded_control_checks: bool,
 }
 
 impl Default for BreakpilotConfig {
@@ -89,6 +94,7 @@ impl Default for BreakpilotConfig {
             token: None,
             snapshot_dir: "/data/compliance-scanner/oscal".to_string(),
             semantic_mapping: false,
+            grounded_control_checks: false,
         }
     }
 }