Compliance mappings: softening pass per RECONCILIATION 2026-05-16 §7

[sftimeless]

Summary

• Softens absolute and overclaiming wording in mappings/control-frameworks.schema-mapping.json without changing mappings, evidence types, structure, or schema.
• Reconciles verification-status and SOC 2 overlay wording to match the verified framework blocks.
• Scopes AI RMF, ISO 42001, NIST/FedRAMP, CIS, MITRE, and ASVS evidence language to tamper-evident artifacts, authorization-decision context, and customer/auditor review boundaries.

Validation

• python -m json.tool /Users/cmunoz/Desktop/Business/Keel/Product/keel-permit/mappings/control-frameworks.schema-mapping.json /tmp/control-frameworks.schema-mapping.pretty.json
• git diff --check
• rg -n "immutable|tamper-proof|guarantees compliance|Keel IS|is satisfied|prevents tampering|non-repudiation is satisfied" /Users/cmunoz/Desktop/Business/Keel/Product/keel-permit/mappings/control-frameworks.schema-mapping.json
• rg -n "Permit primitive IS|Permit IS|prevent post-export tampering|≥6 months|≥6mo|at least six months|requires logs kept at least six months|decision_details captures Keel authorization reasoning|Replay drift detection identifies whether decisions become biased|ensures audit log integrity|ensures records cannot be silently dropped|Sub-criterion verbatim text was not directly verified|NOT been separately verified" /Users/cmunoz/Desktop/Business/Keel/Product/keel-permit/mappings/control-frameworks.schema-mapping.json