Continuous, automated proxy for a curated subset of NIST CSF 2.0, CIS Controls v8, and SOC 2 controls — mapped to signals this platform actually observes. Not a certified audit.