audit-labs/control-coverage

 1# Changelog
 2
 3All notable changes to this project are documented here. The format is based on
 4[Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres
 5to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 6
 7## [1.0.0] - 2026-08-07
 8
 9First stable release. The bundled catalogs, the coverage / Statement of
10Applicability / JSON output schemas, and the `--fail-under` gate are committed
11under semantic versioning. Reads
12[audit-report](https://github.com/audit-labs/audit-report)'s v1 JSON contract.
13
14## [0.1.0] - 2026-08-06
15
16### Added
17
18- Control-first coverage and blind-spot analysis over a corpus of audit-report
19  JSON, producing a true coverage percentage and an unaddressed-control (blind-spot)
20  list from the framework's full control catalog.
21- Bundled catalogs: SOC 2 (61 controls across all five Trust Services categories),
22  ISO 27001:2022 Annex A (93), NIST SP 800-53 Moderate baseline (177).
23- Statement of Applicability generation from a scope file (exclusions + reasons),
24  with `exclude_families` to drop a whole category/theme/family from the denominator.
25- Trend mode (`--baseline`) and crosswalk mode (`--crosswalk`, greedy minimal
26  evidence set); md/html/json output.
27- `--fail-under N` coverage gate for CI.
28- PyPI trusted-publishing release workflow.
29
30[1.0.0]: https://github.com/audit-labs/control-coverage/releases/tag/v1.0.0
31[0.1.0]: https://github.com/audit-labs/control-coverage/releases/tag/v0.1.0