Compliance posture

Every point below is a sealed run — hash-chained, anchored, independently verifiable — not a mutable dashboard refresh. Continuous dashboards tell you what a vendor believes right now; this is what the evidence proved, run after run.