discover-control-evidence

Transforms trusted discovery artifacts into a technical evidence package. The goal is to give auditors, security engineers, and agents a single JSON document that shows what was inventoried and which evidence domains are currently covered, without pretending that inventory alone proves compliance.

Use when

• You need machine-readable evidence for PCI DSS 4.0 or SOC 2 reviews
• You want to summarize AI BOM or environment-graph artifacts into review-ready evidence
• You need inventory-backed evidence for endpoints, dependencies, datasets, guardrails, and providers
• You want stable JSON that can be diffed over time or attached to tickets and audits

Do NOT use