Compliance positioning

Policy. Framework mappings are navigation and assessment aids. They are not legal advice, certification, regulatory approval, or proof of implementation. The current canonical implementation provides framework-neutral mappings with explicit applicability, status, assurance, evidence, exception, owner, and review fields. The BSI mapping remains a bounded navigation view. Issue #138 records the implementation and exact review evidence. Neither surface publishes a portfolio-wide compliance conclusion.