Sprint 32 Compliance Package Index

This package provides implementation-aligned control mappings for Phase 9 Sprint 32.

Included Artifacts

docs/compliance/SOC2_CONTROL_MAPPING.md
- SOC 2 Trust Services Criteria mapping to SpectraStrike controls and evidence.
docs/compliance/ISO27001_ANNEXA_MAPPING.md
- ISO/IEC 27001 Annex A control mapping with implementation references.
docs/compliance/NIST_800_53_MAPPING.md
- NIST SP 800-53 Rev. 5 control mapping for platform security and operations.
docs/compliance/MITRE_ATTACK_TELEMETRY_MAPPING.md
- Telemetry and finding normalization mapped to ATT&CK tactics/techniques.
docs/compliance/SECURE_SDLC_PACKAGE.md
- Secure SDLC package defining process controls, evidence, and release gates.

These mappings are implementation support artifacts and not a certification claim.
Tenant controls, legal scope authorization, and deployment hardening remain customer responsibilities.