Long-form references.

For Engineering leaders · Whitepaper · 18 pages

Replacing rule-coded compliance with an agent loop

Architecture deep-dive: corpus ingestion, agent orchestration, evaluator harness, evidence persistence. With benchmarks.

For GRC + Compliance leaders · Practitioner guide · 24 pages

SOC 2 Type II evidence collection — the agent way

How CME maps to TSC2017 + 2022 revisions, what auditors accept as evidence, sample SoA + control matrix exports.

For Security teams · Methodology paper · 12 pages

Customer-doc-driven hypotheses: methodology

How public commitments become testable hypotheses. The taxonomy of customer-doc claims we've cataloged so far.

For GRC + Compliance leaders · Reference table · 6 pages

AWS Well-Architected vs SOC 2 — crosswalk

WAR pillars mapped to SOC 2 TSC criteria. Which findings count for which framework.

For Engineering leaders · Framework definition · 32 pages

Cloud Maturity Framework — the model

The five-layer model behind the CME audit + how we operationalize each layer.