sharang/compliance-scanner-agent
1
0
Fork 0
Code Issues 79 Pull Requests 1 Actions Packages Projects Releases 1 Wiki Activity

docs(features): compliance control-mapping pipeline #223

Merged
sharang merged 1 commits from docs/control-mapping into main 2026-07-22 07:30:11 +00:00
Conversation 0 Commits 1 Files Changed 2
+128
1 Commits
Author SHA1 Message Date
Sharang ParnerkarandClaude Fable 5 d03f027fa1 docs(features): control mapping pipeline (grounded in the C5 live results)
CI / Check (push) Skipped
CI / Check (pull_request) Successful in 5m53s
Details
CI / Detect Changes (pull_request) Skipped
Details
CI / Deploy Agent (pull_request) Skipped
Details
CI / Deploy Dashboard (pull_request) Skipped
Details
CI / Deploy Docs (pull_request) Skipped
Details
CI / Deploy MCP (pull_request) Skipped
Details 
Extensive feature doc for the compliance control-mapping engine:
- core principle (tools detect, LLM judges/grounds — never detects)
- coverage model + the CRA hybrid (4 semgrep / 8 grounded / 4 not-code-checkable)
- the three mapping paths (LUT 5b / semantic 5c / grounded-surface 5d) with a
  mermaid flow, and the shared grounding gate
- semantic retrieval detail incl. the query-enrichment tuning
- two worked examples from the live C5 run (auth file + varied vulns)
- known limitations (absence findings, catch-all controls, corpus noise)
- config flags + an appendix on the master-controls data pipeline war-story
  (dump-triplication -> migration 160 dedup; 502 -> 200)

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
 2026-07-22 09:23:04 +02:00