Framework controls and the evidence ClawMetry stored for them in a period. Coverage, not compliance: this is supporting evidence for a review, not a certification.