C

cato

Landing page, ten scenarios, claims ledger and a posture mirror an assessor can check without an account. Guide: https://evidence-factory.gitlab.io/guide/

Chapter 4: a Go binary at report phase. Gaps are published and advisory, so the merge request stays green. Guide: https://evidence-factory.gitlab.io/guide/

Chapter 6: a CI component at enforce phase. A planted off-catalog include stays red: the gate stops it. Guide: https://evidence-factory.gitlab.io/guide/

Chapter 3: the driver. One tool provisions the group, assesses controls, pushes verdicts and exports OSCAL. Guide: https://evidence-factory.gitlab.io/guide/

Chapter 5: a container image at cutover phase. A planted unsigned-image gap stays red: the floor blocks it. Guide: https://evidence-factory.gitlab.io/guide/

Renders the group README and its ten scenarios as one site. Holds no prose; edit gitlab-profile. Guide: https://evidence-factory.gitlab.io/guide/

Chapter 2: the policy plane. The NIST 800-53 framework, the policy that injects the line, approval gates. Guide: https://evidence-factory.gitlab.io/guide/

Chapter 1: the governed CI/CD Catalog and evidence line, with pinned components every workload builds from. Guide: https://evidence-factory.gitlab.io/guide/