risk-nexus/docs
tegwick ace941ef05 Assess STATE against INTENT: seven gaps, one sharp failure
The 'a regulation that applies was found before it was needed' test is
not met and cannot be retro-fitted: the policy set found two obligations
already live, the e-invoicing one by about nineteen months. The catalogue
makes the test passable going forward; it does not make that instance a
pass.

Also: remediation tracking does not track — fix_tracking is a string
nobody reads, so an owner who goes quiet and a fix that goes quiet look
identical; there is no intake path for incidents or external reports, so
the register is a self-assessment aggregator rather than what INTENT
claims; and no coverage model, so a system with zero findings is
indistinguishable from one nobody assessed.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-08-21 08:16:43 +02:00
..
assessments Assess STATE against INTENT: seven gaps, one sharp failure 2026-08-21 08:16:43 +02:00
method Legal policy set: written before needed, dormant until a context activates 2026-08-20 23:36:22 +02:00
regulatory Legal policy set: written before needed, dormant until a context activates 2026-08-20 23:36:22 +02:00
rulings Record all three rulings; RISK-WP-0003 finished 2026-08-20 23:37:45 +02:00
verifications RISK-WP-0004: five of six tasks done; the executor is the operator's call 2026-08-20 08:49:23 +02:00