CI / Check (push) Skipped
CI / Check (pull_request) Successful in 6m3s
CI / Detect Changes (pull_request) Skipped
CI / Deploy Agent (pull_request) Skipped
CI / Deploy Dashboard (pull_request) Skipped
CI / Deploy Docs (pull_request) Skipped
CI / Deploy MCP (pull_request) Skipped
Wires the semantic mapping into a callable scan pass: - OscalControlsProvider: token-based fetch refactor + load_master_controls() (pulls ?framework=master-controls) - semantic_stamp_findings(): build the ControlIndex from the master-controls catalog, then per finding embed its code region, retrieve the top-K nearest master controls, grounded-judge confirm, and stamp the confirmed ids onto control_refs (alongside the CRA CWE-LUT refs). Opt-in — the orchestrator doesn't auto-run it, and it rebuilds the corpus index per call (production should cache it). Live-verifiable once breakpilot #129 deploys. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>