Skip to content

Roadmap

This catalog is the single source of truth. Later phases generate automation from the same control front-matter - no re-authoring.

Phase Deliverable Status
1 Control schema, 43 authored controls, docs site, CI in progress
2 Bash audit script + Ansible remediation role planned
3 OpenSCAP XCCDF/OVAL content (oscap-scannable) planned
4 Upstream contribution to ComplianceAsCode planned

License note

This project is licensed GPL-3.0. The Phase 4 upstream target, ComplianceAsCode/content, is BSD-3-Clause. Contributing content upstream will require a relicense or dual-license decision. This does not block Phases 1-3.