{
  "schema": "compliance-crosswalk/v1",
  "tool": "tiberscope",
  "frameworks": [
    {
      "id": "DORA",
      "name": "Digital Operational Resilience Act (Reg. 2022/2554)",
      "controls": [
        { "ref": "Art. 24", "name": "Advanced testing (TLPT)",           "how": "scope subcommand answers the 5 applicability questions per Art. 24; plan subcommand emits a compliant 4-phase methodology + timeline.", "coverage": "evidences" },
        { "ref": "Art. 25", "name": "Testing requirements",              "how": "plan tracks Prep 4w / TI 4w / RT 12w / Closure 4w minimums.", "coverage": "evidences" },
        { "ref": "Art. 26", "name": "Requirements for testers",          "how": "brief subcommand includes tester-qualification requirements section.", "coverage": "partial" }
      ]
    },
    {
      "id": "TIBER-EU",
      "name": "TIBER-EU framework (ECB)",
      "controls": [
        { "ref": "Prep phase",     "name": "Preparation phase (~4 weeks)", "how": "Baked into plan output.", "coverage": "evidences" },
        { "ref": "TI phase",       "name": "Threat intelligence phase (~4 weeks)", "how": "Baked into plan output.", "coverage": "evidences" },
        { "ref": "RT phase",       "name": "Red team phase (~12 weeks)",   "how": "Baked into plan output; map subcommand references pentree nodes + sibling suite tools.", "coverage": "evidences" },
        { "ref": "Closure phase",  "name": "Closure phase (~4 weeks)",     "how": "Baked into plan output.", "coverage": "evidences" }
      ]
    }
  ]
}