{
  "schema": "compliance-crosswalk/v1",
  "tool": "signtree",
  "frameworks": [
    {
      "id": "ISO27001",
      "name": "ISO/IEC 27001:2022",
      "controls": [
        { "ref": "A.5.28", "name": "Collection of evidence",               "how": "Verifies Ed25519 signatures on suite artefacts (jfind bundles, evidence files).", "coverage": "evidences" },
        { "ref": "A.8.24", "name": "Use of cryptography",                  "how": "Ed25519 verify_strict conforms to RFC 8032 §5.1.7.", "coverage": "supports" }
      ]
    },
    {
      "id": "NIS2",
      "name": "NIS2 Directive (Dir. 2022/2555)",
      "controls": [
        { "ref": "Art. 21 §2(h)", "name": "Cryptography use, including encryption", "how": "Ed25519 verification.", "coverage": "supports" }
      ]
    }
  ]
}