v0.5.1 — ISO/IEC 42001 Annex A control mapping
Completes the last roadmap item.
Added
- ISO/IEC 42001 Annex A control mapping — the 38 Annex A reference controls (A.2.2 … A.10.4), titles only, each tagged with its most-relevant EU AI Act article as a Companion-derived analytical alignment. Rendered as section 5.2.1 of the risk-assessment report to support drafting an AIMS Statement of Applicability alongside the assessment.
- The control list was cross-verified against multiple public summaries — the depth at which third-party summaries diverge. The 38-control count and the A.6.1.x / A.6.2.x life-cycle sub-structure match the standard. (The module previously stopped at the category level for exactly this reason; now resolved with verification, titles only — no paid standard text.)
- Tests (
tests/test_iso_42001.py): the 38-control count, well-formedness, that every control resolves to a real EU AI Act article, full category coverage and rendering.
110 tests pass; ruff clean. Deterministic engine unchanged; the mapping is data + an analytical alignment with an explicit provenance line.