feat(testing): COMPASS — compliance/policy assertion harness

[kristopherjturner]

COMPASS — Compliance / policy assertion harness

Classification (ADR-0004)

Axis	Value
Scope	compliance
Target	cluster
Authority	canonical
Lifecycle	post-deploy · drift-audit

Summary

Azure Policy / CIS / STIG assertions against a live cluster, reported against the IIC canon. Highest value for regulated deployments.

Deferral rationale

Requires live cluster access and a policy-assertion vocabulary not yet designed. The MAPROOM schema reserves a compliance section to avoid collision when COMPASS ships.

Acceptance criteria

• Policy-assertion vocabulary designed
• Live cluster access pattern established
• AzureLocal.Compass module (sibling to AzureLocal.Maproom, not part of it)
• MAPROOM compliance schema section wired to COMPASS output
• Module docs added under docs/

Target: v0.3.0+