expectation/waiver policy layer

2026-05-07 14:05:22 +02:00
parent 5a6091fd2a
commit 4f8d8a1f52
13 changed files with 313 additions and 3 deletions
--- a/docs/ARCHITECTURE-BLUEPRINT.md
+++ b/docs/ARCHITECTURE-BLUEPRINT.md
@@ -377,6 +377,10 @@ accepted gaps.
 Use waivers for time-bounded exceptions with owner, reason, expiry, and review
 metadata.

+The first implementation supports assessment-profile references to JSON
+expectation and waiver sets. These policies annotate findings as expected or
+waived after evidence normalization and finding creation.
+
 ### Report Builder

 Builds human and machine-readable outputs: