STORY · breakpilot-compliance Qdrant RAG controls as ControlsProvider tools #192

Open
opened 2026-07-16 22:16:33 +00:00 by sharang · 0 comments
Owner

As a compliance analyst I want the scanner to pull controls from the
breakpilot-compliance Qdrant RAG (300k+ atomic controls, ~400 laws) and use
them as tools so that findings map to real regulatory controls and new
findings are revealed.

Part of #186. Implements the #136 ControlsProvider seam.

Acceptance criteria

  • A ControlsProvider backed by the breakpilot-compliance Qdrant RAG,
    queryable by framework / jurisdiction / context.
  • Retrieved controls exposed as tools/checks that can surface additional
    findings and map existing findings → controls.
  • Pluggable (built-in OSCAL default when the tenant lacks the RAG).
**As a** compliance analyst **I want** the scanner to pull controls from the **breakpilot-compliance Qdrant RAG** (300k+ atomic controls, ~400 laws) and use them as tools **so that** findings map to real regulatory controls and new findings are revealed. Part of #186. Implements the #136 `ControlsProvider` seam. ## Acceptance criteria - [ ] A `ControlsProvider` backed by the breakpilot-compliance Qdrant RAG, queryable by framework / jurisdiction / context. - [ ] Retrieved controls exposed as tools/checks that can surface additional findings and map existing findings → controls. - [ ] Pluggable (built-in OSCAL default when the tenant lacks the RAG).
sharang added the enhancementonboarding labels 2026-07-16 22:16:33 +00:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: sharang/compliance-scanner-agent#192