compliance-scanner-agent

Assess our findings against catalog controls and emit a standard OSCAL 1.1
assessment-results document — the assessment half of the loop (their catalog,
our assessment).

- ControlLinker maps a Finding's CWE -> catalog control-ids (CRA seed mirrors
  breakpilot's _CWE_TO_REQ; extensible via ControlLinker::new)
- assess() builds an observation per linked finding + a per-control
  'not-satisfied' finding; reviewed-controls covers the full catalog set
- deterministic: stable uuid5 ids (adds uuid "v5" feature) + caller-supplied
  timestamp; pure (no DB/network)
- 3 lib tests

Not yet wired into a scan run — that lands with the control-driven router (PR-4).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-07-20 18:26:01 +02:00

models

feat(core): OSCAL assessment-results emitter + finding->control linker

2026-07-20 18:26:01 +02:00

traits

feat(onboarding): artifact ingest + classifier + native tramiton + suite seams (#138 )

2026-07-10 16:00:51 +00:00

auth.rs

feat(werkbank): runner queue endpoints + result persistence (WB-05) (#207 )

2026-07-17 11:42:29 +00:00

config.rs

feat(werkbank): runner queue endpoints + result persistence (WB-05) (#207 )