- Client Info: Defender, Compliance and AI Overview move into Michael's
ClientInfoTabs (Overview, Security, Defender, Compliance, AI Overview);
engine tabs are lazy so hidden tabs start no requests.
- Drop the old client-info-tabs nav styles; compliance switches use the
shared defender-tabs segmented style.
- Port the derived-forest note into client-info-facts.ts; tolerate
observations without attributes.
- Risk register ring opens the matched record (recordId is optional for
scoped acceptances).
- Import gate: additive synthetic Defender vulnerability and alert contracts.
PingCastle snapshots stay unchanged pending review.
- Version 2.25.0; AGENTS engine list names the Remediation Engine.
- Move AI overview and privacy-safe JSON export into Compliance Engine
- Add ISO control and theme facets to Work, including GPO settings
- Enrich ISO queries with baseline context, Windows code meanings and technical explanations
- Count GPO settings once and preserve editable decisions across mapping runs
- Fix GPO mapping version conflicts and backup domain identity resolution
- Add regression coverage and update architecture and reimport documentation