FileGRC 0.18.9

Reconcile provider account populations separately from permission grants. Model v13 adds optional per-source reconciliation for actual retained account rows, current authorization, owned service identities, provider-managed exclusions, removals, inherited identity stores and Components without independent accounts. Unknown access, missing rows, invalid identities, ineffective owners and unsupported proof remain blockers.

Component Evidence can retain fixed attachments and external references while naming its authoritative source Component. Authenticated UI observations retain their actual provenance rather than pretending to be API exports or rendered pages.

Nested CLI guides expose model-defined object schemas and access-review scaffolds leave real account facts blank. Removal proof checks actual observation timestamps; source dates use the workspace timezone. Existing records and their existing approval workflow remain supported. No model migration or additional independent approval is introduced.