{"scan_id":"79a17194-bdd4-4857-a1ad-b8a65ebc0f48","controls":[{"gaps":[],"severity":"minor","confidence":"low","control_id":"ACC-07","code_status":"missing","evidence_found":[],"cer_observability":"T2","overlay_relevance":[],"recommended_next_artifact":["doc_file","notebook","report"]},{"gaps":[],"severity":"minor","confidence":"low","control_id":"DOC-05","code_status":"missing","evidence_found":[],"cer_observability":"T2","overlay_relevance":[],"recommended_next_artifact":["doc_file","notebook","report"]},{"gaps":[],"severity":"info","confidence":"low","control_id":"FAIR-01","code_status":"not_evaluable","evidence_found":[],"cer_observability":"T2","overlay_relevance":[],"recommended_next_artifact":["doc_file","notebook","report"]},{"gaps":[],"severity":"info","confidence":"low","control_id":"FAIR-02","code_status":"not_evaluable","evidence_found":[],"cer_observability":"T2","overlay_relevance":[],"recommended_next_artifact":["doc_file","notebook","report"]},{"gaps":["No governance policy document found"],"severity":"minor","confidence":"low","control_id":"GOV-01","code_status":"missing","evidence_found":[],"cer_observability":"T2","overlay_relevance":[],"recommended_next_artifact":["doc_file","notebook","report"]},{"gaps":[],"severity":"info","confidence":"low","control_id":"HUMO-02","code_status":"not_evaluable","evidence_found":[],"cer_observability":"T2","overlay_relevance":[],"recommended_next_artifact":["doc_file","notebook","report"]},{"gaps":[],"severity":"info","confidence":"low","control_id":"HUMO-04","code_status":"not_evaluable","evidence_found":[],"cer_observability":"T2","overlay_relevance":[],"recommended_next_artifact":["doc_file","notebook","report"]},{"gaps":[],"severity":"info","confidence":"low","control_id":"PRIV-01","code_status":"not_evaluable","evidence_found":[],"cer_observability":"T2","overlay_relevance":[],"recommended_next_artifact":["doc_file","notebook","report"]},{"gaps":[],"severity":"minor","confidence":"low","control_id":"PRIV-03","code_status":"missing","evidence_found":[],"cer_observability":"T2","overlay_relevance":[],"recommended_next_artifact":["doc_file","notebook","report"]},{"gaps":["No right-to-erasure procedure documented"],"severity":"minor","confidence":"low","control_id":"PRIV-04","code_status":"missing","evidence_found":[],"cer_observability":"T2","overlay_relevance":[],"recommended_next_artifact":["doc_file","notebook","report"]},{"gaps":[],"severity":"minor","confidence":"low","control_id":"PRIV-05","code_status":"missing","evidence_found":[],"cer_observability":"T2","overlay_relevance":[],"recommended_next_artifact":["doc_file","notebook","report"]},{"gaps":[],"severity":"minor","confidence":"low","control_id":"SAFE-01","code_status":"missing","evidence_found":[],"cer_observability":"T2","overlay_relevance":["GEN-01"],"recommended_next_artifact":["doc_file","notebook","report"]},{"gaps":[],"severity":"info","confidence":"low","control_id":"SAFE-04","code_status":"not_evaluable","evidence_found":[],"cer_observability":"T2","overlay_relevance":[],"recommended_next_artifact":["doc_file","notebook","report"]},{"gaps":[],"severity":"info","confidence":"low","control_id":"SEC-01","code_status":"not_evaluable","evidence_found":[],"cer_observability":"T2","overlay_relevance":[],"recommended_next_artifact":["doc_file","notebook","report"]},{"gaps":[],"severity":"info","confidence":"low","control_id":"SEC-02","code_status":"not_evaluable","evidence_found":[],"cer_observability":"T2","overlay_relevance":[],"recommended_next_artifact":["doc_file","notebook","report"]},{"gaps":["No dependency lockfile or pinned manifest found"],"severity":"minor","confidence":"low","control_id":"SEC-03","code_status":"missing","evidence_found":[],"cer_observability":"T2","overlay_relevance":["REL-01"],"recommended_next_artifact":["doc_file","notebook","report"]},{"gaps":[],"severity":"minor","confidence":"low","control_id":"SEC-06","code_status":"missing","evidence_found":[],"cer_observability":"T2","overlay_relevance":["REL-03"],"recommended_next_artifact":["doc_file","notebook","report"]},{"gaps":[],"severity":"info","confidence":"low","control_id":"SEC-07","code_status":"not_evaluable","evidence_found":[],"cer_observability":"T2","overlay_relevance":[],"recommended_next_artifact":["doc_file","notebook","report"]},{"gaps":[],"severity":"minor","confidence":"low","control_id":"TRAN-01","code_status":"missing","evidence_found":[],"cer_observability":"T2","overlay_relevance":["GEN-02","GEN-04"],"recommended_next_artifact":["doc_file","notebook","report"]},{"gaps":[],"severity":"info","confidence":"low","control_id":"TRAN-05","code_status":"not_evaluable","evidence_found":[],"cer_observability":"T2","overlay_relevance":[],"recommended_next_artifact":["doc_file","notebook","report"]},{"gaps":[],"severity":"minor","confidence":"low","control_id":"TRAN-07","code_status":"missing","evidence_found":[],"cer_observability":"T2","overlay_relevance":[],"recommended_next_artifact":["doc_file","notebook","report"]},{"gaps":[],"severity":"info","confidence":"low","control_id":"TRAN-08","code_status":"not_evaluable","evidence_found":[],"cer_observability":"T2","overlay_relevance":[],"recommended_next_artifact":["doc_file","notebook","report"]}],"commit_sha":"8103433","project_id":"79a17194-bdd4-4857-a1ad-b8a65ebc0f48","assurance_level":"ug","escalation_hints":[],"registry_version":"v2","metadata_supplement":[],"gen_signals_detected":false,"rel_signals_detected":false}