A command-line tool that reads an audit-tools evidence package, applies declarative rulesets, and maps every finding to SOC 2, ISO 27001, and NIST controls — rendered as Markdown, self-contained HTML, or JSON. Diff and trend modes track drift over time.
One ruleset, three lenses — a point-in-time report, the drift between two runs, or a control’s history across many.
Evaluate a package against a ruleset and render a control-coverage matrix plus per-finding evidence — each with a plain-language rationale and remediation. --format md,html,json.
Compare a package to an earlier one with --baseline. Every control is classified regressed, fixed, drifted, or unchanged, showing the exact evidence rows that moved. Gate CI on regressions only.
Point --trend at a folder of dated packages for a heatmap of every control across every run, plus a failing-count trendline — compliance drift at a glance.
A report presents evidence, not a verdict — a failing row means a setting doesn’t support a control; the judgment stays with you and your auditor.
# Install from PyPI pip install audit-report # Report on an audit-tools package audit-report ./output/aws_audit_prod_2026-08 \ --format md,html,json --out report/
The exit-code contract, at a glance:
Pairs with evidence-seal — seal a package for integrity, then report on it for compliance.