expectation/waiver policy layer

docs/schemas/finding.schema.json

@@ -6,6 +6,7 @@
   "required": [
     "id",
     "run_id",
+    "check_id",
     "status",
     "severity",
     "classification",
@@ -13,11 +14,13 @@
     "evidence_refs",
     "expected",
     "waiver_ref",
+    "policy_ref",
     "remediation"
   ],
   "properties": {
     "id": { "type": "string" },
     "run_id": { "type": "string" },
+    "check_id": { "type": "string" },
     "status": { "type": "string" },
     "severity": { "type": "string" },
     "classification": { "type": "string" },
@@ -25,6 +28,7 @@
     "evidence_refs": { "type": "array", "items": { "type": "string" } },
     "expected": { "type": "boolean" },
     "waiver_ref": { "type": ["string", "null"] },
+    "policy_ref": { "type": ["string", "null"] },
     "remediation": { "type": ["string", "null"] }
   }
 }