Compliance program

HSC-008: map controls to SOC 2 / ISO 27001 / DPDP, evidence them continuously, and track readiness toward attestation.