{
  "schema": "compliance-crosswalk/v1",
  "tool": "shellrec",
  "frameworks": [
    {
      "id": "ISO27001",
      "name": "ISO/IEC 27001:2022",
      "controls": [
        { "ref": "A.8.15", "name": "Logging",                              "how": "Signed session recordings + Ed25519 chain of custody.", "coverage": "evidences" }
      ]
    },
    {
      "id": "PCI-DSS",
      "name": "PCI-DSS v4.0",
      "controls": [
        { "ref": "Req. 10.2", "name": "Audit logs (privileged actions)",   "how": "Records privileged-session activity with tamper-evident signatures.", "coverage": "evidences" }
      ]
    },
    {
      "id": "SOC2",
      "name": "SOC 2 (Trust Services Criteria)",
      "controls": [
        { "ref": "CC7.2", "name": "System monitoring — detection of unauthorized changes", "how": "Session recordings form the change-evidence artefact.", "coverage": "evidences" }
      ]
    }
  ]
}