{
  "normative_structure": {
    "iso_42001_number": 42001,
    "iso_42001_edition_year": 2023,
    "iso_23894_edition_year": 2023,
    "iso_5259_part1_year": 2024,
    "iso_5259_part5_year": 2025,
    "iso_42005_edition_year": 2025,
    "en_18286_edition_year": 2026,
    "eu_ai_act_year": 2024,
    "eu_ai_act_article_9": 9,
    "eu_ai_act_article_10": 10,
    "eu_ai_act_article_12": 12,
    "eu_ai_act_article_14": 14,
    "eu_ai_act_article_15": 15,
    "eu_ai_act_article_17": 17,
    "eu_ai_act_article_40": 40,
    "eu_ai_act_article_50": 50,
    "audit_retention_days": 365,
    "confident_wrong_floor_pct": 12.7,
    "wtl_token_compression_min_x": 74.2,
    "wtl_token_compression_max_x": 88.4,
    "prefill_gate_seconds": 9.44,
    "management_clauses_min": 4,
    "management_clauses_max": 10,
    "management_clauses_count": 7,
    "annex_a_groups_count": 9,
    "annex_a_controls_total": 38,
    "annex_a_exclusions": 0,
    "additional_controls_count": 5,
    "total_soa_controls": 43,
    "controlled_specs_count": 14,
    "repositories_in_scope": 7,
    "rag_connectors_count": 14,
    "rag_chunks_millions": 4.31,
    "mcp_tools_count": 53,
    "single_task_agents_count": 39
  },
  "annex_a_breakdown": {
    "a2_policies_controls": 3,
    "a3_internal_org_controls": 2,
    "a4_resources_controls": 5,
    "a5_impact_controls": 4,
    "a6_lifecycle_controls": 9,
    "a6_1_subcontrols": 2,
    "a6_2_subcontrols": 7,
    "a7_data_controls": 5,
    "a8_information_controls": 4,
    "a9_use_controls": 3,
    "a10_third_party_controls": 3,
    "soa_implemented_annex_a": 2,
    "soa_partial_annex_a": 32,
    "soa_planned_annex_a": 4,
    "soa_implemented_additional": 5,
    "soa_total_operating_or_implemented": 7
  },
  "verification_mechanisms_by_control": {
    "code_or_ast_enforced": 14,
    "sql_schema_or_view_enforced": 9,
    "cloud_or_terraform_enforced": 8,
    "controlled_governance_record": 12
  },
  "raci_governance": {
    "lifecycle_activities_rows": 38,
    "governance_roles_cols": 8,
    "total_matrix_cells": 304,
    "lines_of_defense": 3,
    "first_line_roles": 4,
    "second_line_roles": 2,
    "third_line_roles": 1,
    "top_management_roles": 1,
    "tm_accountable_count": 3,
    "apo_accountable_count": 10,
    "apo_responsible_count": 18,
    "sm_accountable_count": 7,
    "sm_responsible_count": 2,
    "se_responsible_count": 7,
    "sre_accountable_count": 1,
    "sre_responsible_count": 4,
    "rc_accountable_count": 10,
    "rc_responsible_count": 3,
    "sec_accountable_count": 7,
    "sec_responsible_count": 4,
    "aud_responsible_count": 1,
    "rows_with_unique_accountable": 38,
    "rows_with_at_least_one_responsible": 38,
    "unique_accountable_pct": 100.0,
    "responsible_coverage_pct": 100.0,
    "self_audit_overlaps_after": 0,
    "lifecycle_gate_qualifiers": 4,
    "stage_gated_activity_rows": 10,
    "internal_interested_parties": 8,
    "external_interested_parties": 7,
    "total_interested_parties": 15,
    "reporting_obligations": 6,
    "concern_intake_sla_days": 2,
    "concern_retention_years": 3,
    "training_modules_count": 5,
    "enablement_sessions_count": 11,
    "leaderboard_min_cell_suppression": 5
  },
  "aiia_and_risk": {
    "impact_dimensions_count": 7,
    "reassessment_triggers_count": 6,
    "remediation_actions_count": 27,
    "measurable_ai_objectives_count": 6,
    "output_paths_dlp_enforced": 4,
    "output_paths_total": 4,
    "data_sources_assessed": 9,
    "personal_data_categories": 3,
    "operating_privacy_controls": 11,
    "disclosed_technical_gaps": 12,
    "triage_tokens_before_k": 13.7,
    "triage_tokens_after_k": 217.0,
    "eu_ai_act_articles_mapped": 7,
    "eu_ai_act_overlap_pct_min": 70,
    "eu_ai_act_overlap_pct_max": 80
  },
  "code_vs_claim_audit": {
    "audit_subagents_total": 8,
    "evidence_subagents": 4,
    "control_family_subagents": 4,
    "total_gap_findings": 104,
    "technical_findings": 27,
    "management_findings": 24,
    "annex_a_findings": 31,
    "documentation_integrity_findings": 19,
    "external_statement_findings": 3,
    "ste100_procedural_max_words": 20,
    "ste100_descriptive_max_words": 25,
    "contemporaneous_change_records": 8,
    "retrospective_change_records": 6,
    "total_change_records": 14,
    "ast_linter_runtime_ms": 50,
    "safety_test_functions_checked": 8,
    "tautological_mock_functions_caught": 2,
    "mock_only_files_caught": 8,
    "tprm_questions_total": 31,
    "tprm_unverified_yes_before": 29,
    "tprm_unverified_na_before": 2,
    "tprm_verified_yes_after": 1,
    "tprm_verified_partial_after": 17,
    "tprm_verified_no_after": 11,
    "tprm_verified_na_after": 2,
    "monitored_pipeline_sources": 37,
    "unclassified_public_comments_90d": 0,
    "public_comment_audit_window_days": 400,
    "public_comment_recent_window_days": 90,
    "min_sample_suppression_n": 10,
    "judge_human_kappa_floor": 0.6
  }
}
