- Client Info Compliance tab: overview row above the framework tiles with an
ISO/BSI switch. Mapping coverage (square donut, per mapping state) and the
Annex A footprint (all 93 controls, titles from the active corpus) or the
BSI Kernel footprint (top two practices, Show all window with all 901
requirements, unreachable ones marked, pinned detail line).
- Mapping failed and ISO control without BSI requirement open Work through
the new Compliance Engine facet ISO mapping; Client and Assessment context
row in the tab (Core release Presentation for the DashboardPanel drilldown
and context row).
- Fix: an ISO control accepted by an earlier run can be decided again after a
remap of the same pipeline version no longer proposes it.
- Overview response adds coverage, bsiFootprint and annexATitles; Work
assignments add failedFindings. Product version unchanged pending Platform release.
Compliance Engine stage 1 for BSI Grundschutz++ (Kernel requirements only):
- Pinned snapshots of the BSI Kernel catalog and the official ISO 27001
Annex A -> Grundschutz++ mapping with source URL, SHA-256 and CC BY-SA
attribution, generated by server/compliance/update-bsi-assets.mjs.
- Requirements are derived from accepted ISO controls, never stored as
decisions; missing mapping targets are reported.
- Client Info Compliance tab: BSI Grundschutz++ tile and Results window.
- Finding Reader: collapsed BSI requirements section grouped by ISO control.
- Work: BSI requirement and BSI practice facets.
- Data Hub: BSI catalog tile with Update from BSI and Use bundled catalog;
new outbound target documented in SECURITY.md.
Binh