Cert-Ready by Design

Control Object {
  id:                 "ctrl-rbac-001"
  name:               "Tenant isolation at database level"
  category:           "Access Control"

  implementation: {
    type:             "RLS Policy"
    reference:        "policies/tenant_isolation.sql"
    deployed:         true
    last_verified:    "2026-02-20T09:14:00Z"
  }

  evidence_generator: {
    type:             "automated_test"
    schedule:         "every_6h"
    test_reference:   "tests/tenant_isolation_test.sql"
  }

  evidence_history: [
    {
      timestamp:      "2026-02-20T09:14:00Z"
      status:         "passed"
      control_version: "1.3"
      test_version:   "2.1"
      raw_data:       { ... }
    },
    ...
  ]

  framework_mapping: {
    iso_27001:        "A.9.4.1"
    soc2:             "CC6.1"
    eu_ai_act:        "Art. 12"
  }

  owner:              "security-team"
  last_change:        "2026-02-18T14:22:00Z"
  change_reason:      "Policy update for new entity"
}