{
  "format": "palo-semantic-mapping-registry",
  "schemaVersion": "1.0.0",
  "semanticVersion": "3.1.0",
  "releasedAt": "2026-08-23",
  "status": "approved-for-release",
  "authorityBoundary": "Mappings express versioned PALO relationships and rationale. They do not establish legal equivalence, compliance, certification, or deployment authorization.",
  "mappings": [
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-adversarial-testing/assess",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-adversarial-testing",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-adversarial-testing?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "assess",
        "semanticId": "https://paloframework.org/semantic/gate/assess?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-adversarial-testing/measure",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-adversarial-testing",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-adversarial-testing?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "measure",
        "semanticId": "https://paloframework.org/semantic/gate/measure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-adversarial-testing/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-adversarial-testing",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-adversarial-testing?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-affected-person-notice/classify",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-affected-person-notice",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-affected-person-notice?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "classify",
        "semanticId": "https://paloframework.org/semantic/gate/classify?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-affected-person-notice/control",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-affected-person-notice",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-affected-person-notice?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "control",
        "semanticId": "https://paloframework.org/semantic/gate/control?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-affected-person-notice/measure",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-affected-person-notice",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-affected-person-notice?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "measure",
        "semanticId": "https://paloframework.org/semantic/gate/measure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-agentic-authority/assess",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-agentic-authority",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-agentic-authority?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "assess",
        "semanticId": "https://paloframework.org/semantic/gate/assess?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-agentic-authority/control",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-agentic-authority",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-agentic-authority?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "control",
        "semanticId": "https://paloframework.org/semantic/gate/control?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-ai-literacy-effectiveness/control",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-ai-literacy-effectiveness",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-ai-literacy-effectiveness?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "control",
        "semanticId": "https://paloframework.org/semantic/gate/control?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-ai-literacy-effectiveness/frame",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-ai-literacy-effectiveness",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-ai-literacy-effectiveness?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "frame",
        "semanticId": "https://paloframework.org/semantic/gate/frame?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-ai-literacy-effectiveness/measure",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-ai-literacy-effectiveness",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-ai-literacy-effectiveness?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "measure",
        "semanticId": "https://paloframework.org/semantic/gate/measure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-ai-literacy-effectiveness/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-ai-literacy-effectiveness",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-ai-literacy-effectiveness?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-ai-output-accessibility/assess",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-ai-output-accessibility",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-ai-output-accessibility?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "assess",
        "semanticId": "https://paloframework.org/semantic/gate/assess?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-ai-output-accessibility/control",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-ai-output-accessibility",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-ai-output-accessibility?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "control",
        "semanticId": "https://paloframework.org/semantic/gate/control?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-ai-output-accessibility/measure",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-ai-output-accessibility",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-ai-output-accessibility?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "measure",
        "semanticId": "https://paloframework.org/semantic/gate/measure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-ai-output-accessibility/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-ai-output-accessibility",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-ai-output-accessibility?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-aims-internal-audit/measure",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-aims-internal-audit",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-aims-internal-audit?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "measure",
        "semanticId": "https://paloframework.org/semantic/gate/measure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-aims-internal-audit/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-aims-internal-audit",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-aims-internal-audit?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-aims-leadership-objectives/classify",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-aims-leadership-objectives",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-aims-leadership-objectives?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "classify",
        "semanticId": "https://paloframework.org/semantic/gate/classify?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-aims-leadership-objectives/frame",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-aims-leadership-objectives",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-aims-leadership-objectives?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "frame",
        "semanticId": "https://paloframework.org/semantic/gate/frame?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-aims-leadership-objectives/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-aims-leadership-objectives",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-aims-leadership-objectives?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-aims-management-review-capa/measure",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-aims-management-review-capa",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-aims-management-review-capa?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "measure",
        "semanticId": "https://paloframework.org/semantic/gate/measure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-aims-management-review-capa/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-aims-management-review-capa",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-aims-management-review-capa?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-annotation-quality/assess",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-annotation-quality",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-annotation-quality?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "assess",
        "semanticId": "https://paloframework.org/semantic/gate/assess?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-annotation-quality/measure",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-annotation-quality",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-annotation-quality?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "measure",
        "semanticId": "https://paloframework.org/semantic/gate/measure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-annotation-quality/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-annotation-quality",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-annotation-quality?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-appeal-remedy/control",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-appeal-remedy",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-appeal-remedy?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "control",
        "semanticId": "https://paloframework.org/semantic/gate/control?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-appeal-remedy/measure",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-appeal-remedy",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-appeal-remedy?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "measure",
        "semanticId": "https://paloframework.org/semantic/gate/measure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-appeal-remedy/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-appeal-remedy",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-appeal-remedy?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-article50-transparency/classify",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-article50-transparency",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-article50-transparency?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "classify",
        "semanticId": "https://paloframework.org/semantic/gate/classify?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-article50-transparency/control",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-article50-transparency",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-article50-transparency?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "control",
        "semanticId": "https://paloframework.org/semantic/gate/control?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-article50-transparency/measure",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-article50-transparency",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-article50-transparency?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "measure",
        "semanticId": "https://paloframework.org/semantic/gate/measure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-article50-transparency/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-article50-transparency",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-article50-transparency?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-change-gate/assess",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-change-gate",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-change-gate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "assess",
        "semanticId": "https://paloframework.org/semantic/gate/assess?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-change-gate/classify",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-change-gate",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-change-gate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "classify",
        "semanticId": "https://paloframework.org/semantic/gate/classify?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-change-gate/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-change-gate",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-change-gate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-data-governance-lifecycle/assess",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-data-governance-lifecycle",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-data-governance-lifecycle?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "assess",
        "semanticId": "https://paloframework.org/semantic/gate/assess?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-data-governance-lifecycle/control",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-data-governance-lifecycle",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-data-governance-lifecycle?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "control",
        "semanticId": "https://paloframework.org/semantic/gate/control?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-data-governance-lifecycle/frame",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-data-governance-lifecycle",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-data-governance-lifecycle?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "frame",
        "semanticId": "https://paloframework.org/semantic/gate/frame?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-data-governance-lifecycle/measure",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-data-governance-lifecycle",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-data-governance-lifecycle?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "measure",
        "semanticId": "https://paloframework.org/semantic/gate/measure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-data-governance-lifecycle/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-data-governance-lifecycle",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-data-governance-lifecycle?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-data-provenance/assess",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-data-provenance",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-data-provenance?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "assess",
        "semanticId": "https://paloframework.org/semantic/gate/assess?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-data-provenance/control",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-data-provenance",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-data-provenance?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "control",
        "semanticId": "https://paloframework.org/semantic/gate/control?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-decision-trace/measure",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-decision-trace",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-decision-trace?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "measure",
        "semanticId": "https://paloframework.org/semantic/gate/measure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-decision-trace/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-decision-trace",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-decision-trace?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-decommissioning/control",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-decommissioning",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-decommissioning?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "control",
        "semanticId": "https://paloframework.org/semantic/gate/control?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-decommissioning/measure",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-decommissioning",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-decommissioning?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "measure",
        "semanticId": "https://paloframework.org/semantic/gate/measure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-decommissioning/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-decommissioning",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-decommissioning?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-environmental-performance/assess",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-environmental-performance",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-environmental-performance?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "assess",
        "semanticId": "https://paloframework.org/semantic/gate/assess?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-environmental-performance/frame",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-environmental-performance",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-environmental-performance?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "frame",
        "semanticId": "https://paloframework.org/semantic/gate/frame?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-environmental-performance/measure",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-environmental-performance",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-environmental-performance?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "measure",
        "semanticId": "https://paloframework.org/semantic/gate/measure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-environmental-performance/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-environmental-performance",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-environmental-performance?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-fair-allocation/assess",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-fair-allocation",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-fair-allocation?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "assess",
        "semanticId": "https://paloframework.org/semantic/gate/assess?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-fair-allocation/classify",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-fair-allocation",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-fair-allocation?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "classify",
        "semanticId": "https://paloframework.org/semantic/gate/classify?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-fair-allocation/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-fair-allocation",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-fair-allocation?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-fairness-quality-of-service/assess",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-fairness-quality-of-service",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-fairness-quality-of-service?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "assess",
        "semanticId": "https://paloframework.org/semantic/gate/assess?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-fairness-quality-of-service/measure",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-fairness-quality-of-service",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-fairness-quality-of-service?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "measure",
        "semanticId": "https://paloframework.org/semantic/gate/measure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-fairness-quality-of-service/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-fairness-quality-of-service",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-fairness-quality-of-service?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-gpai-deployer/assess",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-gpai-deployer",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-gpai-deployer?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "assess",
        "semanticId": "https://paloframework.org/semantic/gate/assess?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-gpai-deployer/classify",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-gpai-deployer",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-gpai-deployer?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "classify",
        "semanticId": "https://paloframework.org/semantic/gate/classify?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-gpai-deployer/control",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-gpai-deployer",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-gpai-deployer?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "control",
        "semanticId": "https://paloframework.org/semantic/gate/control?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-gpai-deployer/measure",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-gpai-deployer",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-gpai-deployer?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "measure",
        "semanticId": "https://paloframework.org/semantic/gate/measure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-gpai-deployer/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-gpai-deployer",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-gpai-deployer?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-gpai-provider/classify",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-gpai-provider",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-gpai-provider?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "classify",
        "semanticId": "https://paloframework.org/semantic/gate/classify?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-gpai-provider/control",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-gpai-provider",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-gpai-provider?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "control",
        "semanticId": "https://paloframework.org/semantic/gate/control?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-gpai-provider/measure",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-gpai-provider",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-gpai-provider?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "measure",
        "semanticId": "https://paloframework.org/semantic/gate/measure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-gpai-provider/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-gpai-provider",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-gpai-provider?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-harmful-representation/assess",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-harmful-representation",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-harmful-representation?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "assess",
        "semanticId": "https://paloframework.org/semantic/gate/assess?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-harmful-representation/measure",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-harmful-representation",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-harmful-representation?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "measure",
        "semanticId": "https://paloframework.org/semantic/gate/measure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-harmful-representation/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-harmful-representation",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-harmful-representation?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-human-review/control",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-human-review",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-human-review?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "control",
        "semanticId": "https://paloframework.org/semantic/gate/control?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-human-review/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-human-review",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-human-review?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-incident-response/control",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-incident-response",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-incident-response?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "control",
        "semanticId": "https://paloframework.org/semantic/gate/control?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-incident-response/measure",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-incident-response",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-incident-response?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "measure",
        "semanticId": "https://paloframework.org/semantic/gate/measure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-incident-response/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-incident-response",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-incident-response?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-privacy-lifecycle/assess",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-privacy-lifecycle",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-privacy-lifecycle?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "assess",
        "semanticId": "https://paloframework.org/semantic/gate/assess?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-privacy-lifecycle/classify",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-privacy-lifecycle",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-privacy-lifecycle?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "classify",
        "semanticId": "https://paloframework.org/semantic/gate/classify?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-privacy-lifecycle/control",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-privacy-lifecycle",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-privacy-lifecycle?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "control",
        "semanticId": "https://paloframework.org/semantic/gate/control?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-privacy-lifecycle/frame",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-privacy-lifecycle",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-privacy-lifecycle?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "frame",
        "semanticId": "https://paloframework.org/semantic/gate/frame?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-privacy-lifecycle/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-privacy-lifecycle",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-privacy-lifecycle?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-purpose-boundary/classify",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-purpose-boundary",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-purpose-boundary?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "classify",
        "semanticId": "https://paloframework.org/semantic/gate/classify?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-purpose-boundary/frame",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-purpose-boundary",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-purpose-boundary?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "frame",
        "semanticId": "https://paloframework.org/semantic/gate/frame?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-regulatory-incident-reporting/control",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-regulatory-incident-reporting",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-regulatory-incident-reporting?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "control",
        "semanticId": "https://paloframework.org/semantic/gate/control?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-regulatory-incident-reporting/measure",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-regulatory-incident-reporting",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-regulatory-incident-reporting?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "measure",
        "semanticId": "https://paloframework.org/semantic/gate/measure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-regulatory-incident-reporting/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-regulatory-incident-reporting",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-regulatory-incident-reporting?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-runtime-production-boundary/classify",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-runtime-production-boundary",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-runtime-production-boundary?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "classify",
        "semanticId": "https://paloframework.org/semantic/gate/classify?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-runtime-production-boundary/control",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-runtime-production-boundary",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-runtime-production-boundary?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "control",
        "semanticId": "https://paloframework.org/semantic/gate/control?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-runtime-production-boundary/measure",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-runtime-production-boundary",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-runtime-production-boundary?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "measure",
        "semanticId": "https://paloframework.org/semantic/gate/measure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-runtime-production-boundary/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-runtime-production-boundary",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-runtime-production-boundary?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-system-card-explanations/assess",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-system-card-explanations",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-system-card-explanations?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "assess",
        "semanticId": "https://paloframework.org/semantic/gate/assess?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-system-card-explanations/control",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-system-card-explanations",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-system-card-explanations?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "control",
        "semanticId": "https://paloframework.org/semantic/gate/control?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-system-card-explanations/frame",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-system-card-explanations",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-system-card-explanations?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "frame",
        "semanticId": "https://paloframework.org/semantic/gate/frame?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-system-card-explanations/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-system-card-explanations",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-system-card-explanations?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-systemic-risk/assess",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-systemic-risk",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-systemic-risk?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "assess",
        "semanticId": "https://paloframework.org/semantic/gate/assess?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-systemic-risk/classify",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-systemic-risk",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-systemic-risk?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "classify",
        "semanticId": "https://paloframework.org/semantic/gate/classify?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-systemic-risk/control",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-systemic-risk",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-systemic-risk?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "control",
        "semanticId": "https://paloframework.org/semantic/gate/control?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-systemic-risk/measure",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-systemic-risk",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-systemic-risk?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "measure",
        "semanticId": "https://paloframework.org/semantic/gate/measure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-systemic-risk/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-systemic-risk",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-systemic-risk?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-third-party-due-diligence/assess",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-third-party-due-diligence",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-third-party-due-diligence?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "assess",
        "semanticId": "https://paloframework.org/semantic/gate/assess?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-third-party-due-diligence/classify",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-third-party-due-diligence",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-third-party-due-diligence?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "classify",
        "semanticId": "https://paloframework.org/semantic/gate/classify?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-gate/ctrl-third-party-due-diligence/control",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-gate",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-third-party-due-diligence",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-third-party-due-diligence?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "control",
        "semanticId": "https://paloframework.org/semantic/gate/control?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "conditional",
      "conditions": [
        "Confirm applicability and ownership for the actual case."
      ],
      "rationale": "The control is relevant to the named gate when the case scope activates it.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-adversarial-testing/kri-critical-test-failure-rate",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-adversarial-testing",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-adversarial-testing?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kri-critical-test-failure-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-critical-test-failure-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-affected-person-notice/kpi-notice-delivery-coverage",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-affected-person-notice",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-affected-person-notice?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kpi-notice-delivery-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-notice-delivery-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-agentic-authority/kpi-review-completion",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-agentic-authority",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-agentic-authority?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kpi-review-completion",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-review-completion?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-agentic-authority/kri-scope-change-rate",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-agentic-authority",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-agentic-authority?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kri-scope-change-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-scope-change-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-ai-literacy-effectiveness/kpi-ai-literacy-competence-rate",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-ai-literacy-effectiveness",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-ai-literacy-effectiveness?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kpi-ai-literacy-competence-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-ai-literacy-competence-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-ai-literacy-effectiveness/kri-trained-control-error-rate",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-ai-literacy-effectiveness",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-ai-literacy-effectiveness?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kri-trained-control-error-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-trained-control-error-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-ai-output-accessibility/kpi-accessibility-test-pass-rate",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-ai-output-accessibility",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-ai-output-accessibility?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kpi-accessibility-test-pass-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-accessibility-test-pass-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-ai-output-accessibility/kri-accessibility-blocker-rate",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-ai-output-accessibility",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-ai-output-accessibility?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kri-accessibility-blocker-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-accessibility-blocker-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-aims-internal-audit/kpi-aims-audit-completion",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-aims-internal-audit",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-aims-internal-audit?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kpi-aims-audit-completion",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-aims-audit-completion?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-aims-internal-audit/kpi-corrective-action-closure",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-aims-internal-audit",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-aims-internal-audit?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kpi-corrective-action-closure",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-corrective-action-closure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-aims-leadership-objectives/kpi-aims-objective-coverage",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-aims-leadership-objectives",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-aims-leadership-objectives?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kpi-aims-objective-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-aims-objective-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-aims-management-review-capa/kpi-aims-objective-coverage",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-aims-management-review-capa",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-aims-management-review-capa?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kpi-aims-objective-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-aims-objective-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-aims-management-review-capa/kpi-corrective-action-closure",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-aims-management-review-capa",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-aims-management-review-capa?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kpi-corrective-action-closure",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-corrective-action-closure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-annotation-quality/kpi-annotation-quality-coverage",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-annotation-quality",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-annotation-quality?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kpi-annotation-quality-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-annotation-quality-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-appeal-remedy/kpi-appeal-resolution-sla",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-appeal-remedy",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-appeal-remedy?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kpi-appeal-resolution-sla",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-appeal-resolution-sla?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-appeal-remedy/kri-overdue-remedy-rate",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-appeal-remedy",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-appeal-remedy?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kri-overdue-remedy-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-overdue-remedy-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-article50-transparency/kpi-machine-readable-marking-coverage",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-article50-transparency",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-article50-transparency?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kpi-machine-readable-marking-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-machine-readable-marking-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-article50-transparency/kri-provenance-verification-failure-rate",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-article50-transparency",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-article50-transparency?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kri-provenance-verification-failure-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-provenance-verification-failure-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-change-gate/kpi-review-completion",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-change-gate",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-change-gate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kpi-review-completion",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-review-completion?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-change-gate/kri-scope-change-rate",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-change-gate",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-change-gate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kri-scope-change-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-scope-change-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-data-governance-lifecycle/kpi-data-lifecycle-coverage",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-data-governance-lifecycle",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-data-governance-lifecycle?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kpi-data-lifecycle-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-data-lifecycle-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-data-governance-lifecycle/kpi-deletion-verification-coverage",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-data-governance-lifecycle",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-data-governance-lifecycle?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kpi-deletion-verification-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-deletion-verification-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-data-governance-lifecycle/kpi-provenance-coverage",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-data-governance-lifecycle",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-data-governance-lifecycle?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kpi-provenance-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-provenance-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-data-provenance/kpi-provenance-coverage",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-data-provenance",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-data-provenance?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kpi-provenance-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-provenance-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-data-provenance/kri-sensitive-data-events",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-data-provenance",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-data-provenance?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kri-sensitive-data-events",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-sensitive-data-events?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-decision-trace/kpi-provenance-coverage",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-decision-trace",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-decision-trace?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kpi-provenance-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-provenance-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-decision-trace/kpi-review-completion",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-decision-trace",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-decision-trace?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kpi-review-completion",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-review-completion?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-decommissioning/kpi-decommissioning-evidence-coverage",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-decommissioning",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-decommissioning?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kpi-decommissioning-evidence-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-decommissioning-evidence-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-environmental-performance/kpi-energy-measurement-coverage",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-environmental-performance",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-environmental-performance?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kpi-energy-measurement-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-energy-measurement-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-environmental-performance/kri-environmental-budget-variance",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-environmental-performance",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-environmental-performance?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kri-environmental-budget-variance",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-environmental-budget-variance?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-fair-allocation/kpi-subgroup-evaluation-coverage",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-fair-allocation",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-fair-allocation?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kpi-subgroup-evaluation-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-subgroup-evaluation-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-fair-allocation/kri-residual-disparity-rate",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-fair-allocation",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-fair-allocation?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kri-residual-disparity-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-residual-disparity-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-fairness-quality-of-service/kpi-subgroup-evaluation-coverage",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-fairness-quality-of-service",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-fairness-quality-of-service?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kpi-subgroup-evaluation-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-subgroup-evaluation-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-fairness-quality-of-service/kri-residual-disparity-rate",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-fairness-quality-of-service",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-fairness-quality-of-service?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kri-residual-disparity-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-residual-disparity-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-gpai-deployer/kpi-gpai-obligation-evidence-coverage",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-gpai-deployer",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-gpai-deployer?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kpi-gpai-obligation-evidence-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-gpai-obligation-evidence-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-gpai-deployer/kpi-vendor-evidence-coverage",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-gpai-deployer",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-gpai-deployer?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kpi-vendor-evidence-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-vendor-evidence-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-gpai-provider/kpi-gpai-obligation-evidence-coverage",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-gpai-provider",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-gpai-provider?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kpi-gpai-obligation-evidence-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-gpai-obligation-evidence-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-harmful-representation/kri-harmful-representation-rate",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-harmful-representation",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-harmful-representation?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kri-harmful-representation-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-harmful-representation-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-human-review/kpi-review-completion",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-human-review",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-human-review?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kpi-review-completion",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-review-completion?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-human-review/kri-override-failure-rate",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-human-review",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-human-review?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kri-override-failure-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-override-failure-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-incident-response/kpi-incident-triage-time",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-incident-response",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-incident-response?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kpi-incident-triage-time",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-incident-triage-time?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-incident-response/kri-sensitive-data-events",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-incident-response",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-incident-response?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kri-sensitive-data-events",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-sensitive-data-events?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-privacy-lifecycle/kpi-data-lifecycle-coverage",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-privacy-lifecycle",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-privacy-lifecycle?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kpi-data-lifecycle-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-data-lifecycle-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-privacy-lifecycle/kpi-deletion-verification-coverage",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-privacy-lifecycle",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-privacy-lifecycle?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kpi-deletion-verification-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-deletion-verification-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-privacy-lifecycle/kri-sensitive-data-events",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-privacy-lifecycle",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-privacy-lifecycle?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kri-sensitive-data-events",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-sensitive-data-events?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-purpose-boundary/kri-scope-change-rate",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-purpose-boundary",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-purpose-boundary?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kri-scope-change-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-scope-change-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-regulatory-incident-reporting/kpi-incident-triage-time",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-regulatory-incident-reporting",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-regulatory-incident-reporting?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kpi-incident-triage-time",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-incident-triage-time?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-regulatory-incident-reporting/kpi-regulatory-reporting-clock-compliance",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-regulatory-incident-reporting",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-regulatory-incident-reporting?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kpi-regulatory-reporting-clock-compliance",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-regulatory-reporting-clock-compliance?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-runtime-production-boundary/kpi-production-admission-coverage",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-runtime-production-boundary",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-runtime-production-boundary?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kpi-production-admission-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-production-admission-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-runtime-production-boundary/kri-execution-bypass-rate",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-runtime-production-boundary",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-runtime-production-boundary?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kri-execution-bypass-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-execution-bypass-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-system-card-explanations/kpi-explanation-comprehension",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-system-card-explanations",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-system-card-explanations?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kpi-explanation-comprehension",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-explanation-comprehension?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-system-card-explanations/kpi-system-card-coverage",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-system-card-explanations",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-system-card-explanations?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kpi-system-card-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-system-card-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-systemic-risk/kri-critical-test-failure-rate",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-systemic-risk",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-systemic-risk?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kri-critical-test-failure-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-critical-test-failure-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-systemic-risk/kri-systemic-risk-finding-rate",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-systemic-risk",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-systemic-risk?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kri-systemic-risk-finding-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-systemic-risk-finding-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-indicator/ctrl-third-party-due-diligence/kpi-vendor-evidence-coverage",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-indicator",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-third-party-due-diligence",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-third-party-due-diligence?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "indicator",
        "entityId": "kpi-vendor-evidence-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-vendor-evidence-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can provide a signal about the control without proving control effectiveness.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-indicator: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-adversarial-testing/src-nist-genai-profile",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-adversarial-testing",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-adversarial-testing?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-nist-genai-profile",
        "semanticId": "https://paloframework.org/semantic/source/src-nist-genai-profile?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-adversarial-testing/src-owasp-llm-top10",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-adversarial-testing",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-adversarial-testing?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-owasp-llm-top10",
        "semanticId": "https://paloframework.org/semantic/source/src-owasp-llm-top10?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-affected-person-notice/src-eu-ai-act",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-affected-person-notice",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-affected-person-notice?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-eu-ai-act",
        "semanticId": "https://paloframework.org/semantic/source/src-eu-ai-act?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-affected-person-notice/src-eu-article50-guidelines",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-affected-person-notice",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-affected-person-notice?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-eu-article50-guidelines",
        "semanticId": "https://paloframework.org/semantic/source/src-eu-article50-guidelines?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-affected-person-notice/src-wcag-22",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-affected-person-notice",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-affected-person-notice?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-wcag-22",
        "semanticId": "https://paloframework.org/semantic/source/src-wcag-22?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-agentic-authority/src-iso-42001",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-agentic-authority",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-agentic-authority?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-iso-42001",
        "semanticId": "https://paloframework.org/semantic/source/src-iso-42001?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-agentic-authority/src-nist-ai-rmf",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-agentic-authority",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-agentic-authority?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-nist-ai-rmf",
        "semanticId": "https://paloframework.org/semantic/source/src-nist-ai-rmf?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-ai-literacy-effectiveness/src-eu-ai-act",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-ai-literacy-effectiveness",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-ai-literacy-effectiveness?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-eu-ai-act",
        "semanticId": "https://paloframework.org/semantic/source/src-eu-ai-act?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-ai-literacy-effectiveness/src-iso-42001",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-ai-literacy-effectiveness",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-ai-literacy-effectiveness?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-iso-42001",
        "semanticId": "https://paloframework.org/semantic/source/src-iso-42001?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-ai-output-accessibility/src-eu-ai-act",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-ai-output-accessibility",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-ai-output-accessibility?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-eu-ai-act",
        "semanticId": "https://paloframework.org/semantic/source/src-eu-ai-act?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-ai-output-accessibility/src-iso-42005",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-ai-output-accessibility",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-ai-output-accessibility?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-iso-42005",
        "semanticId": "https://paloframework.org/semantic/source/src-iso-42005?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-ai-output-accessibility/src-wcag-22",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-ai-output-accessibility",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-ai-output-accessibility?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-wcag-22",
        "semanticId": "https://paloframework.org/semantic/source/src-wcag-22?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-aims-internal-audit/src-iso-42001",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-aims-internal-audit",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-aims-internal-audit?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-iso-42001",
        "semanticId": "https://paloframework.org/semantic/source/src-iso-42001?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-aims-leadership-objectives/src-iso-42001",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-aims-leadership-objectives",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-aims-leadership-objectives?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-iso-42001",
        "semanticId": "https://paloframework.org/semantic/source/src-iso-42001?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-aims-management-review-capa/src-iso-42001",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-aims-management-review-capa",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-aims-management-review-capa?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-iso-42001",
        "semanticId": "https://paloframework.org/semantic/source/src-iso-42001?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-annotation-quality/src-iso-42005",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-annotation-quality",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-annotation-quality?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-iso-42005",
        "semanticId": "https://paloframework.org/semantic/source/src-iso-42005?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-annotation-quality/src-nist-ai-rmf",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-annotation-quality",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-annotation-quality?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-nist-ai-rmf",
        "semanticId": "https://paloframework.org/semantic/source/src-nist-ai-rmf?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-appeal-remedy/src-eu-ai-act",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-appeal-remedy",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-appeal-remedy?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-eu-ai-act",
        "semanticId": "https://paloframework.org/semantic/source/src-eu-ai-act?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-appeal-remedy/src-iso-42005",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-appeal-remedy",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-appeal-remedy?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-iso-42005",
        "semanticId": "https://paloframework.org/semantic/source/src-iso-42005?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-article50-transparency/src-eu-ai-act",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-article50-transparency",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-article50-transparency?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-eu-ai-act",
        "semanticId": "https://paloframework.org/semantic/source/src-eu-ai-act?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-article50-transparency/src-eu-article50-guidelines",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-article50-transparency",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-article50-transparency?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-eu-article50-guidelines",
        "semanticId": "https://paloframework.org/semantic/source/src-eu-article50-guidelines?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-change-gate/src-iso-42001",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-change-gate",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-change-gate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-iso-42001",
        "semanticId": "https://paloframework.org/semantic/source/src-iso-42001?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-change-gate/src-nist-ai-rmf",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-change-gate",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-change-gate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-nist-ai-rmf",
        "semanticId": "https://paloframework.org/semantic/source/src-nist-ai-rmf?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-data-governance-lifecycle/src-eu-ai-act",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-data-governance-lifecycle",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-data-governance-lifecycle?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-eu-ai-act",
        "semanticId": "https://paloframework.org/semantic/source/src-eu-ai-act?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-data-governance-lifecycle/src-eu-gdpr",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-data-governance-lifecycle",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-data-governance-lifecycle?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-eu-gdpr",
        "semanticId": "https://paloframework.org/semantic/source/src-eu-gdpr?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-data-governance-lifecycle/src-nist-ai-rmf",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-data-governance-lifecycle",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-data-governance-lifecycle?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-nist-ai-rmf",
        "semanticId": "https://paloframework.org/semantic/source/src-nist-ai-rmf?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-data-provenance/src-eu-ai-act",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-data-provenance",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-data-provenance?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-eu-ai-act",
        "semanticId": "https://paloframework.org/semantic/source/src-eu-ai-act?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-data-provenance/src-nist-ai-rmf",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-data-provenance",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-data-provenance?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-nist-ai-rmf",
        "semanticId": "https://paloframework.org/semantic/source/src-nist-ai-rmf?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-decision-trace/src-eu-ai-act",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-decision-trace",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-decision-trace?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-eu-ai-act",
        "semanticId": "https://paloframework.org/semantic/source/src-eu-ai-act?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-decision-trace/src-nist-ai-rmf",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-decision-trace",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-decision-trace?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-nist-ai-rmf",
        "semanticId": "https://paloframework.org/semantic/source/src-nist-ai-rmf?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-decommissioning/src-eu-ai-act",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-decommissioning",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-decommissioning?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-eu-ai-act",
        "semanticId": "https://paloframework.org/semantic/source/src-eu-ai-act?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-decommissioning/src-iso-42001",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-decommissioning",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-decommissioning?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-iso-42001",
        "semanticId": "https://paloframework.org/semantic/source/src-iso-42001?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-decommissioning/src-nist-ai-rmf",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-decommissioning",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-decommissioning?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-nist-ai-rmf",
        "semanticId": "https://paloframework.org/semantic/source/src-nist-ai-rmf?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-environmental-performance/src-eu-ai-act",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-environmental-performance",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-environmental-performance?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-eu-ai-act",
        "semanticId": "https://paloframework.org/semantic/source/src-eu-ai-act?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-environmental-performance/src-iso-42001",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-environmental-performance",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-environmental-performance?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-iso-42001",
        "semanticId": "https://paloframework.org/semantic/source/src-iso-42001?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-environmental-performance/src-iso-42005",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-environmental-performance",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-environmental-performance?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-iso-42005",
        "semanticId": "https://paloframework.org/semantic/source/src-iso-42005?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-fair-allocation/src-eu-ai-act",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-fair-allocation",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-fair-allocation?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-eu-ai-act",
        "semanticId": "https://paloframework.org/semantic/source/src-eu-ai-act?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-fair-allocation/src-iso-42005",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-fair-allocation",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-fair-allocation?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-iso-42005",
        "semanticId": "https://paloframework.org/semantic/source/src-iso-42005?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-fair-allocation/src-nist-ai-rmf",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-fair-allocation",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-fair-allocation?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-nist-ai-rmf",
        "semanticId": "https://paloframework.org/semantic/source/src-nist-ai-rmf?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-fairness-quality-of-service/src-eu-ai-act",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-fairness-quality-of-service",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-fairness-quality-of-service?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-eu-ai-act",
        "semanticId": "https://paloframework.org/semantic/source/src-eu-ai-act?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-fairness-quality-of-service/src-iso-42005",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-fairness-quality-of-service",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-fairness-quality-of-service?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-iso-42005",
        "semanticId": "https://paloframework.org/semantic/source/src-iso-42005?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-fairness-quality-of-service/src-nist-ai-rmf",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-fairness-quality-of-service",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-fairness-quality-of-service?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-nist-ai-rmf",
        "semanticId": "https://paloframework.org/semantic/source/src-nist-ai-rmf?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-gpai-deployer/src-eu-ai-act",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-gpai-deployer",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-gpai-deployer?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-eu-ai-act",
        "semanticId": "https://paloframework.org/semantic/source/src-eu-ai-act?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-gpai-deployer/src-eu-gpai-code",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-gpai-deployer",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-gpai-deployer?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-eu-gpai-code",
        "semanticId": "https://paloframework.org/semantic/source/src-eu-gpai-code?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-gpai-deployer/src-nist-genai-profile",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-gpai-deployer",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-gpai-deployer?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-nist-genai-profile",
        "semanticId": "https://paloframework.org/semantic/source/src-nist-genai-profile?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-gpai-provider/src-eu-ai-act",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-gpai-provider",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-gpai-provider?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-eu-ai-act",
        "semanticId": "https://paloframework.org/semantic/source/src-eu-ai-act?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-gpai-provider/src-eu-gpai-code",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-gpai-provider",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-gpai-provider?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-eu-gpai-code",
        "semanticId": "https://paloframework.org/semantic/source/src-eu-gpai-code?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-harmful-representation/src-iso-42005",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-harmful-representation",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-harmful-representation?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-iso-42005",
        "semanticId": "https://paloframework.org/semantic/source/src-iso-42005?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-harmful-representation/src-nist-genai-profile",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-harmful-representation",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-harmful-representation?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-nist-genai-profile",
        "semanticId": "https://paloframework.org/semantic/source/src-nist-genai-profile?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-human-review/src-eu-ai-act",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-human-review",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-human-review?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-eu-ai-act",
        "semanticId": "https://paloframework.org/semantic/source/src-eu-ai-act?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-human-review/src-nist-ai-rmf",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-human-review",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-human-review?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-nist-ai-rmf",
        "semanticId": "https://paloframework.org/semantic/source/src-nist-ai-rmf?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-human-review/src-oecd-ai-principles",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-human-review",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-human-review?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-oecd-ai-principles",
        "semanticId": "https://paloframework.org/semantic/source/src-oecd-ai-principles?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-incident-response/src-iso-42001",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-incident-response",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-incident-response?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-iso-42001",
        "semanticId": "https://paloframework.org/semantic/source/src-iso-42001?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-incident-response/src-nist-ai-rmf",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-incident-response",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-incident-response?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-nist-ai-rmf",
        "semanticId": "https://paloframework.org/semantic/source/src-nist-ai-rmf?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-privacy-lifecycle/src-eu-gdpr",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-privacy-lifecycle",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-privacy-lifecycle?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-eu-gdpr",
        "semanticId": "https://paloframework.org/semantic/source/src-eu-gdpr?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-privacy-lifecycle/src-nist-ai-rmf",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-privacy-lifecycle",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-privacy-lifecycle?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-nist-ai-rmf",
        "semanticId": "https://paloframework.org/semantic/source/src-nist-ai-rmf?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-purpose-boundary/src-nist-ai-rmf",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-purpose-boundary",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-purpose-boundary?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-nist-ai-rmf",
        "semanticId": "https://paloframework.org/semantic/source/src-nist-ai-rmf?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-purpose-boundary/src-oecd-ai-principles",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-purpose-boundary",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-purpose-boundary?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-oecd-ai-principles",
        "semanticId": "https://paloframework.org/semantic/source/src-oecd-ai-principles?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-regulatory-incident-reporting/src-eu-ai-act",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-regulatory-incident-reporting",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-regulatory-incident-reporting?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-eu-ai-act",
        "semanticId": "https://paloframework.org/semantic/source/src-eu-ai-act?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-regulatory-incident-reporting/src-iso-42001",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-regulatory-incident-reporting",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-regulatory-incident-reporting?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-iso-42001",
        "semanticId": "https://paloframework.org/semantic/source/src-iso-42001?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-runtime-production-boundary/src-iso-42001",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-runtime-production-boundary",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-runtime-production-boundary?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-iso-42001",
        "semanticId": "https://paloframework.org/semantic/source/src-iso-42001?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-runtime-production-boundary/src-nist-ai-rmf",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-runtime-production-boundary",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-runtime-production-boundary?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-nist-ai-rmf",
        "semanticId": "https://paloframework.org/semantic/source/src-nist-ai-rmf?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-runtime-production-boundary/src-owasp-llm-top10",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-runtime-production-boundary",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-runtime-production-boundary?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-owasp-llm-top10",
        "semanticId": "https://paloframework.org/semantic/source/src-owasp-llm-top10?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-system-card-explanations/src-eu-ai-act",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-system-card-explanations",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-system-card-explanations?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-eu-ai-act",
        "semanticId": "https://paloframework.org/semantic/source/src-eu-ai-act?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-system-card-explanations/src-iso-42005",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-system-card-explanations",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-system-card-explanations?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-iso-42005",
        "semanticId": "https://paloframework.org/semantic/source/src-iso-42005?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-system-card-explanations/src-nist-ai-rmf",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-system-card-explanations",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-system-card-explanations?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-nist-ai-rmf",
        "semanticId": "https://paloframework.org/semantic/source/src-nist-ai-rmf?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-systemic-risk/src-eu-ai-act",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-systemic-risk",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-systemic-risk?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-eu-ai-act",
        "semanticId": "https://paloframework.org/semantic/source/src-eu-ai-act?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-systemic-risk/src-eu-gpai-code",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-systemic-risk",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-systemic-risk?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-eu-gpai-code",
        "semanticId": "https://paloframework.org/semantic/source/src-eu-gpai-code?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-systemic-risk/src-nist-genai-profile",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-systemic-risk",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-systemic-risk?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-nist-genai-profile",
        "semanticId": "https://paloframework.org/semantic/source/src-nist-genai-profile?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-systemic-risk/src-owasp-llm-top10",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-systemic-risk",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-systemic-risk?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-owasp-llm-top10",
        "semanticId": "https://paloframework.org/semantic/source/src-owasp-llm-top10?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-third-party-due-diligence/src-iso-42001",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-third-party-due-diligence",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-third-party-due-diligence?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-iso-42001",
        "semanticId": "https://paloframework.org/semantic/source/src-iso-42001?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/control-to-source/ctrl-third-party-due-diligence/src-nist-ai-rmf",
      "mappingVersion": "1.0.0",
      "mappingType": "control-to-source",
      "source": {
        "entityType": "control",
        "entityId": "ctrl-third-party-due-diligence",
        "semanticId": "https://paloframework.org/semantic/control/ctrl-third-party-due-diligence?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-nist-ai-rmf",
        "semanticId": "https://paloframework.org/semantic/source/src-nist-ai-rmf?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The registered source informs the control objective and tailoring context.",
      "basis": "Declared relationship in data/control-library.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/control-library.json",
        "generationRule": "control-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/gate-to-source/assess/src-nist-ai-rmf",
      "mappingVersion": "1.0.0",
      "mappingType": "gate-to-source",
      "source": {
        "entityType": "gate",
        "entityId": "assess",
        "semanticId": "https://paloframework.org/semantic/gate/assess?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-nist-ai-rmf",
        "semanticId": "https://paloframework.org/semantic/source/src-nist-ai-rmf?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source provides context for accountable gate deliberation.",
      "basis": "Declared relationship in data/decision-gates.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/decision-gates.json",
        "generationRule": "gate-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/gate-to-source/assess/src-nist-genai-profile",
      "mappingVersion": "1.0.0",
      "mappingType": "gate-to-source",
      "source": {
        "entityType": "gate",
        "entityId": "assess",
        "semanticId": "https://paloframework.org/semantic/gate/assess?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-nist-genai-profile",
        "semanticId": "https://paloframework.org/semantic/source/src-nist-genai-profile?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source provides context for accountable gate deliberation.",
      "basis": "Declared relationship in data/decision-gates.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/decision-gates.json",
        "generationRule": "gate-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/gate-to-source/classify/src-eu-ai-act",
      "mappingVersion": "1.0.0",
      "mappingType": "gate-to-source",
      "source": {
        "entityType": "gate",
        "entityId": "classify",
        "semanticId": "https://paloframework.org/semantic/gate/classify?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-eu-ai-act",
        "semanticId": "https://paloframework.org/semantic/source/src-eu-ai-act?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source provides context for accountable gate deliberation.",
      "basis": "Declared relationship in data/decision-gates.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/decision-gates.json",
        "generationRule": "gate-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/gate-to-source/classify/src-nist-ai-rmf",
      "mappingVersion": "1.0.0",
      "mappingType": "gate-to-source",
      "source": {
        "entityType": "gate",
        "entityId": "classify",
        "semanticId": "https://paloframework.org/semantic/gate/classify?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-nist-ai-rmf",
        "semanticId": "https://paloframework.org/semantic/source/src-nist-ai-rmf?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source provides context for accountable gate deliberation.",
      "basis": "Declared relationship in data/decision-gates.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/decision-gates.json",
        "generationRule": "gate-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/gate-to-source/control/src-iso-42001",
      "mappingVersion": "1.0.0",
      "mappingType": "gate-to-source",
      "source": {
        "entityType": "gate",
        "entityId": "control",
        "semanticId": "https://paloframework.org/semantic/gate/control?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-iso-42001",
        "semanticId": "https://paloframework.org/semantic/source/src-iso-42001?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source provides context for accountable gate deliberation.",
      "basis": "Declared relationship in data/decision-gates.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/decision-gates.json",
        "generationRule": "gate-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/gate-to-source/control/src-nist-ai-rmf",
      "mappingVersion": "1.0.0",
      "mappingType": "gate-to-source",
      "source": {
        "entityType": "gate",
        "entityId": "control",
        "semanticId": "https://paloframework.org/semantic/gate/control?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-nist-ai-rmf",
        "semanticId": "https://paloframework.org/semantic/source/src-nist-ai-rmf?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source provides context for accountable gate deliberation.",
      "basis": "Declared relationship in data/decision-gates.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/decision-gates.json",
        "generationRule": "gate-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/gate-to-source/frame/src-nist-ai-rmf",
      "mappingVersion": "1.0.0",
      "mappingType": "gate-to-source",
      "source": {
        "entityType": "gate",
        "entityId": "frame",
        "semanticId": "https://paloframework.org/semantic/gate/frame?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-nist-ai-rmf",
        "semanticId": "https://paloframework.org/semantic/source/src-nist-ai-rmf?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source provides context for accountable gate deliberation.",
      "basis": "Declared relationship in data/decision-gates.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/decision-gates.json",
        "generationRule": "gate-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/gate-to-source/frame/src-oecd-ai-principles",
      "mappingVersion": "1.0.0",
      "mappingType": "gate-to-source",
      "source": {
        "entityType": "gate",
        "entityId": "frame",
        "semanticId": "https://paloframework.org/semantic/gate/frame?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-oecd-ai-principles",
        "semanticId": "https://paloframework.org/semantic/source/src-oecd-ai-principles?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source provides context for accountable gate deliberation.",
      "basis": "Declared relationship in data/decision-gates.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/decision-gates.json",
        "generationRule": "gate-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/gate-to-source/measure/src-nist-ai-rmf",
      "mappingVersion": "1.0.0",
      "mappingType": "gate-to-source",
      "source": {
        "entityType": "gate",
        "entityId": "measure",
        "semanticId": "https://paloframework.org/semantic/gate/measure?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-nist-ai-rmf",
        "semanticId": "https://paloframework.org/semantic/source/src-nist-ai-rmf?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source provides context for accountable gate deliberation.",
      "basis": "Declared relationship in data/decision-gates.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/decision-gates.json",
        "generationRule": "gate-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/gate-to-source/prove/src-iso-42001",
      "mappingVersion": "1.0.0",
      "mappingType": "gate-to-source",
      "source": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-iso-42001",
        "semanticId": "https://paloframework.org/semantic/source/src-iso-42001?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source provides context for accountable gate deliberation.",
      "basis": "Declared relationship in data/decision-gates.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/decision-gates.json",
        "generationRule": "gate-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/gate-to-source/prove/src-nist-ai-rmf",
      "mappingVersion": "1.0.0",
      "mappingType": "gate-to-source",
      "source": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-nist-ai-rmf",
        "semanticId": "https://paloframework.org/semantic/source/src-nist-ai-rmf?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source provides context for accountable gate deliberation.",
      "basis": "Declared relationship in data/decision-gates.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/decision-gates.json",
        "generationRule": "gate-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-accessibility-test-pass-rate/assess",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-accessibility-test-pass-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-accessibility-test-pass-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "assess",
        "semanticId": "https://paloframework.org/semantic/gate/assess?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-accessibility-test-pass-rate/control",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-accessibility-test-pass-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-accessibility-test-pass-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "control",
        "semanticId": "https://paloframework.org/semantic/gate/control?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-accessibility-test-pass-rate/measure",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-accessibility-test-pass-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-accessibility-test-pass-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "measure",
        "semanticId": "https://paloframework.org/semantic/gate/measure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-accessibility-test-pass-rate/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-accessibility-test-pass-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-accessibility-test-pass-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-ai-literacy-competence-rate/control",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-ai-literacy-competence-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-ai-literacy-competence-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "control",
        "semanticId": "https://paloframework.org/semantic/gate/control?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-ai-literacy-competence-rate/frame",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-ai-literacy-competence-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-ai-literacy-competence-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "frame",
        "semanticId": "https://paloframework.org/semantic/gate/frame?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-ai-literacy-competence-rate/measure",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-ai-literacy-competence-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-ai-literacy-competence-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "measure",
        "semanticId": "https://paloframework.org/semantic/gate/measure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-ai-literacy-competence-rate/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-ai-literacy-competence-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-ai-literacy-competence-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-aims-audit-completion/measure",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-aims-audit-completion",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-aims-audit-completion?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "measure",
        "semanticId": "https://paloframework.org/semantic/gate/measure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-aims-audit-completion/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-aims-audit-completion",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-aims-audit-completion?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-aims-objective-coverage/classify",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-aims-objective-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-aims-objective-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "classify",
        "semanticId": "https://paloframework.org/semantic/gate/classify?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-aims-objective-coverage/frame",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-aims-objective-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-aims-objective-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "frame",
        "semanticId": "https://paloframework.org/semantic/gate/frame?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-aims-objective-coverage/measure",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-aims-objective-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-aims-objective-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "measure",
        "semanticId": "https://paloframework.org/semantic/gate/measure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-aims-objective-coverage/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-aims-objective-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-aims-objective-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-annotation-quality-coverage/assess",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-annotation-quality-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-annotation-quality-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "assess",
        "semanticId": "https://paloframework.org/semantic/gate/assess?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-annotation-quality-coverage/measure",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-annotation-quality-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-annotation-quality-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "measure",
        "semanticId": "https://paloframework.org/semantic/gate/measure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-annotation-quality-coverage/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-annotation-quality-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-annotation-quality-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-appeal-resolution-sla/measure",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-appeal-resolution-sla",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-appeal-resolution-sla?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "measure",
        "semanticId": "https://paloframework.org/semantic/gate/measure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-appeal-resolution-sla/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-appeal-resolution-sla",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-appeal-resolution-sla?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-corrective-action-closure/measure",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-corrective-action-closure",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-corrective-action-closure?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "measure",
        "semanticId": "https://paloframework.org/semantic/gate/measure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-corrective-action-closure/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-corrective-action-closure",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-corrective-action-closure?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-data-lifecycle-coverage/assess",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-data-lifecycle-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-data-lifecycle-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "assess",
        "semanticId": "https://paloframework.org/semantic/gate/assess?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-data-lifecycle-coverage/control",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-data-lifecycle-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-data-lifecycle-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "control",
        "semanticId": "https://paloframework.org/semantic/gate/control?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-data-lifecycle-coverage/frame",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-data-lifecycle-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-data-lifecycle-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "frame",
        "semanticId": "https://paloframework.org/semantic/gate/frame?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-data-lifecycle-coverage/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-data-lifecycle-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-data-lifecycle-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-decommissioning-evidence-coverage/control",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-decommissioning-evidence-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-decommissioning-evidence-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "control",
        "semanticId": "https://paloframework.org/semantic/gate/control?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-decommissioning-evidence-coverage/measure",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-decommissioning-evidence-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-decommissioning-evidence-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "measure",
        "semanticId": "https://paloframework.org/semantic/gate/measure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-decommissioning-evidence-coverage/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-decommissioning-evidence-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-decommissioning-evidence-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-deletion-verification-coverage/control",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-deletion-verification-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-deletion-verification-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "control",
        "semanticId": "https://paloframework.org/semantic/gate/control?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-deletion-verification-coverage/measure",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-deletion-verification-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-deletion-verification-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "measure",
        "semanticId": "https://paloframework.org/semantic/gate/measure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-deletion-verification-coverage/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-deletion-verification-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-deletion-verification-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-energy-measurement-coverage/assess",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-energy-measurement-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-energy-measurement-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "assess",
        "semanticId": "https://paloframework.org/semantic/gate/assess?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-energy-measurement-coverage/measure",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-energy-measurement-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-energy-measurement-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "measure",
        "semanticId": "https://paloframework.org/semantic/gate/measure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-energy-measurement-coverage/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-energy-measurement-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-energy-measurement-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-explanation-comprehension/assess",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-explanation-comprehension",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-explanation-comprehension?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "assess",
        "semanticId": "https://paloframework.org/semantic/gate/assess?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-explanation-comprehension/control",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-explanation-comprehension",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-explanation-comprehension?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "control",
        "semanticId": "https://paloframework.org/semantic/gate/control?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-explanation-comprehension/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-explanation-comprehension",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-explanation-comprehension?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-gpai-obligation-evidence-coverage/classify",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-gpai-obligation-evidence-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-gpai-obligation-evidence-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "classify",
        "semanticId": "https://paloframework.org/semantic/gate/classify?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-gpai-obligation-evidence-coverage/control",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-gpai-obligation-evidence-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-gpai-obligation-evidence-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "control",
        "semanticId": "https://paloframework.org/semantic/gate/control?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-gpai-obligation-evidence-coverage/measure",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-gpai-obligation-evidence-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-gpai-obligation-evidence-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "measure",
        "semanticId": "https://paloframework.org/semantic/gate/measure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-gpai-obligation-evidence-coverage/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-gpai-obligation-evidence-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-gpai-obligation-evidence-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-incident-triage-time/measure",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-incident-triage-time",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-incident-triage-time?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "measure",
        "semanticId": "https://paloframework.org/semantic/gate/measure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-incident-triage-time/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-incident-triage-time",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-incident-triage-time?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-machine-readable-marking-coverage/control",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-machine-readable-marking-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-machine-readable-marking-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "control",
        "semanticId": "https://paloframework.org/semantic/gate/control?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-machine-readable-marking-coverage/measure",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-machine-readable-marking-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-machine-readable-marking-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "measure",
        "semanticId": "https://paloframework.org/semantic/gate/measure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-machine-readable-marking-coverage/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-machine-readable-marking-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-machine-readable-marking-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-notice-delivery-coverage/control",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-notice-delivery-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-notice-delivery-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "control",
        "semanticId": "https://paloframework.org/semantic/gate/control?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-notice-delivery-coverage/measure",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-notice-delivery-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-notice-delivery-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "measure",
        "semanticId": "https://paloframework.org/semantic/gate/measure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-production-admission-coverage/classify",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-production-admission-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-production-admission-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "classify",
        "semanticId": "https://paloframework.org/semantic/gate/classify?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-production-admission-coverage/control",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-production-admission-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-production-admission-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "control",
        "semanticId": "https://paloframework.org/semantic/gate/control?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-production-admission-coverage/measure",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-production-admission-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-production-admission-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "measure",
        "semanticId": "https://paloframework.org/semantic/gate/measure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-production-admission-coverage/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-production-admission-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-production-admission-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-provenance-coverage/assess",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-provenance-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-provenance-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "assess",
        "semanticId": "https://paloframework.org/semantic/gate/assess?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-provenance-coverage/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-provenance-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-provenance-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-regulatory-reporting-clock-compliance/measure",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-regulatory-reporting-clock-compliance",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-regulatory-reporting-clock-compliance?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "measure",
        "semanticId": "https://paloframework.org/semantic/gate/measure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-regulatory-reporting-clock-compliance/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-regulatory-reporting-clock-compliance",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-regulatory-reporting-clock-compliance?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-review-completion/control",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-review-completion",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-review-completion?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "control",
        "semanticId": "https://paloframework.org/semantic/gate/control?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-review-completion/measure",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-review-completion",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-review-completion?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "measure",
        "semanticId": "https://paloframework.org/semantic/gate/measure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-review-completion/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-review-completion",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-review-completion?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-subgroup-evaluation-coverage/assess",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-subgroup-evaluation-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-subgroup-evaluation-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "assess",
        "semanticId": "https://paloframework.org/semantic/gate/assess?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-subgroup-evaluation-coverage/measure",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-subgroup-evaluation-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-subgroup-evaluation-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "measure",
        "semanticId": "https://paloframework.org/semantic/gate/measure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-subgroup-evaluation-coverage/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-subgroup-evaluation-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-subgroup-evaluation-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-system-card-coverage/assess",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-system-card-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-system-card-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "assess",
        "semanticId": "https://paloframework.org/semantic/gate/assess?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-system-card-coverage/frame",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-system-card-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-system-card-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "frame",
        "semanticId": "https://paloframework.org/semantic/gate/frame?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-system-card-coverage/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-system-card-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-system-card-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-vendor-evidence-coverage/assess",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-vendor-evidence-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-vendor-evidence-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "assess",
        "semanticId": "https://paloframework.org/semantic/gate/assess?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kpi-vendor-evidence-coverage/control",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-vendor-evidence-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-vendor-evidence-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "control",
        "semanticId": "https://paloframework.org/semantic/gate/control?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kri-accessibility-blocker-rate/control",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-accessibility-blocker-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-accessibility-blocker-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "control",
        "semanticId": "https://paloframework.org/semantic/gate/control?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kri-accessibility-blocker-rate/measure",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-accessibility-blocker-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-accessibility-blocker-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "measure",
        "semanticId": "https://paloframework.org/semantic/gate/measure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kri-accessibility-blocker-rate/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-accessibility-blocker-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-accessibility-blocker-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kri-critical-test-failure-rate/assess",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-critical-test-failure-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-critical-test-failure-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "assess",
        "semanticId": "https://paloframework.org/semantic/gate/assess?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kri-critical-test-failure-rate/measure",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-critical-test-failure-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-critical-test-failure-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "measure",
        "semanticId": "https://paloframework.org/semantic/gate/measure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kri-critical-test-failure-rate/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-critical-test-failure-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-critical-test-failure-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kri-environmental-budget-variance/measure",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-environmental-budget-variance",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-environmental-budget-variance?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "measure",
        "semanticId": "https://paloframework.org/semantic/gate/measure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kri-environmental-budget-variance/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-environmental-budget-variance",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-environmental-budget-variance?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kri-execution-bypass-rate/control",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-execution-bypass-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-execution-bypass-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "control",
        "semanticId": "https://paloframework.org/semantic/gate/control?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kri-execution-bypass-rate/measure",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-execution-bypass-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-execution-bypass-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "measure",
        "semanticId": "https://paloframework.org/semantic/gate/measure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kri-execution-bypass-rate/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-execution-bypass-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-execution-bypass-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kri-harmful-representation-rate/assess",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-harmful-representation-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-harmful-representation-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "assess",
        "semanticId": "https://paloframework.org/semantic/gate/assess?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kri-harmful-representation-rate/measure",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-harmful-representation-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-harmful-representation-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "measure",
        "semanticId": "https://paloframework.org/semantic/gate/measure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kri-harmful-representation-rate/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-harmful-representation-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-harmful-representation-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kri-multi-agent-conflict-rate/control",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-multi-agent-conflict-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-multi-agent-conflict-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "control",
        "semanticId": "https://paloframework.org/semantic/gate/control?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kri-multi-agent-conflict-rate/measure",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-multi-agent-conflict-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-multi-agent-conflict-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "measure",
        "semanticId": "https://paloframework.org/semantic/gate/measure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kri-overdue-remedy-rate/measure",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-overdue-remedy-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-overdue-remedy-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "measure",
        "semanticId": "https://paloframework.org/semantic/gate/measure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kri-overdue-remedy-rate/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-overdue-remedy-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-overdue-remedy-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kri-override-failure-rate/control",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-override-failure-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-override-failure-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "control",
        "semanticId": "https://paloframework.org/semantic/gate/control?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kri-override-failure-rate/measure",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-override-failure-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-override-failure-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "measure",
        "semanticId": "https://paloframework.org/semantic/gate/measure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kri-provenance-verification-failure-rate/measure",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-provenance-verification-failure-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-provenance-verification-failure-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "measure",
        "semanticId": "https://paloframework.org/semantic/gate/measure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kri-provenance-verification-failure-rate/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-provenance-verification-failure-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-provenance-verification-failure-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kri-residual-disparity-rate/assess",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-residual-disparity-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-residual-disparity-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "assess",
        "semanticId": "https://paloframework.org/semantic/gate/assess?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kri-residual-disparity-rate/measure",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-residual-disparity-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-residual-disparity-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "measure",
        "semanticId": "https://paloframework.org/semantic/gate/measure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kri-residual-disparity-rate/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-residual-disparity-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-residual-disparity-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kri-scope-change-rate/classify",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-scope-change-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-scope-change-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "classify",
        "semanticId": "https://paloframework.org/semantic/gate/classify?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kri-scope-change-rate/frame",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-scope-change-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-scope-change-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "frame",
        "semanticId": "https://paloframework.org/semantic/gate/frame?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kri-scope-change-rate/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-scope-change-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-scope-change-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kri-sensitive-data-events/control",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-sensitive-data-events",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-sensitive-data-events?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "control",
        "semanticId": "https://paloframework.org/semantic/gate/control?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kri-sensitive-data-events/measure",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-sensitive-data-events",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-sensitive-data-events?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "measure",
        "semanticId": "https://paloframework.org/semantic/gate/measure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kri-sensitive-data-events/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-sensitive-data-events",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-sensitive-data-events?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kri-systemic-risk-finding-rate/assess",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-systemic-risk-finding-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-systemic-risk-finding-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "assess",
        "semanticId": "https://paloframework.org/semantic/gate/assess?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kri-systemic-risk-finding-rate/control",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-systemic-risk-finding-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-systemic-risk-finding-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "control",
        "semanticId": "https://paloframework.org/semantic/gate/control?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kri-systemic-risk-finding-rate/measure",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-systemic-risk-finding-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-systemic-risk-finding-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "measure",
        "semanticId": "https://paloframework.org/semantic/gate/measure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kri-systemic-risk-finding-rate/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-systemic-risk-finding-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-systemic-risk-finding-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kri-tool-call-error-rate/control",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-tool-call-error-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-tool-call-error-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "control",
        "semanticId": "https://paloframework.org/semantic/gate/control?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kri-tool-call-error-rate/measure",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-tool-call-error-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-tool-call-error-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "measure",
        "semanticId": "https://paloframework.org/semantic/gate/measure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kri-trained-control-error-rate/measure",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-trained-control-error-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-trained-control-error-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "measure",
        "semanticId": "https://paloframework.org/semantic/gate/measure?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-gate/kri-trained-control-error-rate/prove",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-gate",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-trained-control-error-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-trained-control-error-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "gate",
        "entityId": "prove",
        "semanticId": "https://paloframework.org/semantic/gate/prove?v=3.1.0",
        "version": "3.1.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The indicator can inform the named gate but cannot make the gate decision.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-gate: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kpi-accessibility-test-pass-rate/src-wcag-22",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-accessibility-test-pass-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-accessibility-test-pass-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-wcag-22",
        "semanticId": "https://paloframework.org/semantic/source/src-wcag-22?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kpi-ai-literacy-competence-rate/src-eu-ai-act",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-ai-literacy-competence-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-ai-literacy-competence-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-eu-ai-act",
        "semanticId": "https://paloframework.org/semantic/source/src-eu-ai-act?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kpi-ai-literacy-competence-rate/src-iso-42001",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-ai-literacy-competence-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-ai-literacy-competence-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-iso-42001",
        "semanticId": "https://paloframework.org/semantic/source/src-iso-42001?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kpi-aims-audit-completion/src-iso-42001",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-aims-audit-completion",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-aims-audit-completion?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-iso-42001",
        "semanticId": "https://paloframework.org/semantic/source/src-iso-42001?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kpi-aims-objective-coverage/src-iso-42001",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-aims-objective-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-aims-objective-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-iso-42001",
        "semanticId": "https://paloframework.org/semantic/source/src-iso-42001?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kpi-annotation-quality-coverage/src-iso-42005",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-annotation-quality-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-annotation-quality-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-iso-42005",
        "semanticId": "https://paloframework.org/semantic/source/src-iso-42005?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kpi-annotation-quality-coverage/src-nist-ai-rmf",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-annotation-quality-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-annotation-quality-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-nist-ai-rmf",
        "semanticId": "https://paloframework.org/semantic/source/src-nist-ai-rmf?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kpi-appeal-resolution-sla/src-eu-ai-act",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-appeal-resolution-sla",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-appeal-resolution-sla?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-eu-ai-act",
        "semanticId": "https://paloframework.org/semantic/source/src-eu-ai-act?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kpi-appeal-resolution-sla/src-iso-42005",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-appeal-resolution-sla",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-appeal-resolution-sla?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-iso-42005",
        "semanticId": "https://paloframework.org/semantic/source/src-iso-42005?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kpi-corrective-action-closure/src-iso-42001",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-corrective-action-closure",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-corrective-action-closure?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-iso-42001",
        "semanticId": "https://paloframework.org/semantic/source/src-iso-42001?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kpi-data-lifecycle-coverage/src-eu-ai-act",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-data-lifecycle-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-data-lifecycle-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-eu-ai-act",
        "semanticId": "https://paloframework.org/semantic/source/src-eu-ai-act?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kpi-data-lifecycle-coverage/src-eu-gdpr",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-data-lifecycle-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-data-lifecycle-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-eu-gdpr",
        "semanticId": "https://paloframework.org/semantic/source/src-eu-gdpr?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kpi-data-lifecycle-coverage/src-nist-ai-rmf",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-data-lifecycle-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-data-lifecycle-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-nist-ai-rmf",
        "semanticId": "https://paloframework.org/semantic/source/src-nist-ai-rmf?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kpi-decommissioning-evidence-coverage/src-iso-42001",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-decommissioning-evidence-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-decommissioning-evidence-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-iso-42001",
        "semanticId": "https://paloframework.org/semantic/source/src-iso-42001?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kpi-decommissioning-evidence-coverage/src-nist-ai-rmf",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-decommissioning-evidence-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-decommissioning-evidence-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-nist-ai-rmf",
        "semanticId": "https://paloframework.org/semantic/source/src-nist-ai-rmf?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kpi-deletion-verification-coverage/src-eu-gdpr",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-deletion-verification-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-deletion-verification-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-eu-gdpr",
        "semanticId": "https://paloframework.org/semantic/source/src-eu-gdpr?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kpi-energy-measurement-coverage/src-iso-42001",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-energy-measurement-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-energy-measurement-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-iso-42001",
        "semanticId": "https://paloframework.org/semantic/source/src-iso-42001?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kpi-energy-measurement-coverage/src-iso-42005",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-energy-measurement-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-energy-measurement-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-iso-42005",
        "semanticId": "https://paloframework.org/semantic/source/src-iso-42005?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kpi-explanation-comprehension/src-iso-42005",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-explanation-comprehension",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-explanation-comprehension?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-iso-42005",
        "semanticId": "https://paloframework.org/semantic/source/src-iso-42005?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kpi-explanation-comprehension/src-wcag-22",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-explanation-comprehension",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-explanation-comprehension?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-wcag-22",
        "semanticId": "https://paloframework.org/semantic/source/src-wcag-22?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kpi-gpai-obligation-evidence-coverage/src-eu-ai-act",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-gpai-obligation-evidence-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-gpai-obligation-evidence-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-eu-ai-act",
        "semanticId": "https://paloframework.org/semantic/source/src-eu-ai-act?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kpi-gpai-obligation-evidence-coverage/src-eu-gpai-code",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-gpai-obligation-evidence-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-gpai-obligation-evidence-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-eu-gpai-code",
        "semanticId": "https://paloframework.org/semantic/source/src-eu-gpai-code?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kpi-incident-triage-time/src-nist-ai-rmf",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-incident-triage-time",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-incident-triage-time?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-nist-ai-rmf",
        "semanticId": "https://paloframework.org/semantic/source/src-nist-ai-rmf?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kpi-machine-readable-marking-coverage/src-eu-ai-act",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-machine-readable-marking-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-machine-readable-marking-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-eu-ai-act",
        "semanticId": "https://paloframework.org/semantic/source/src-eu-ai-act?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kpi-machine-readable-marking-coverage/src-eu-article50-guidelines",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-machine-readable-marking-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-machine-readable-marking-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-eu-article50-guidelines",
        "semanticId": "https://paloframework.org/semantic/source/src-eu-article50-guidelines?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kpi-notice-delivery-coverage/src-eu-ai-act",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-notice-delivery-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-notice-delivery-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-eu-ai-act",
        "semanticId": "https://paloframework.org/semantic/source/src-eu-ai-act?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kpi-notice-delivery-coverage/src-eu-article50-guidelines",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-notice-delivery-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-notice-delivery-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-eu-article50-guidelines",
        "semanticId": "https://paloframework.org/semantic/source/src-eu-article50-guidelines?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kpi-notice-delivery-coverage/src-wcag-22",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-notice-delivery-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-notice-delivery-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-wcag-22",
        "semanticId": "https://paloframework.org/semantic/source/src-wcag-22?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kpi-production-admission-coverage/src-iso-42001",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-production-admission-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-production-admission-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-iso-42001",
        "semanticId": "https://paloframework.org/semantic/source/src-iso-42001?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kpi-production-admission-coverage/src-nist-ai-rmf",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-production-admission-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-production-admission-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-nist-ai-rmf",
        "semanticId": "https://paloframework.org/semantic/source/src-nist-ai-rmf?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kpi-provenance-coverage/src-nist-ai-rmf",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-provenance-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-provenance-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-nist-ai-rmf",
        "semanticId": "https://paloframework.org/semantic/source/src-nist-ai-rmf?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kpi-regulatory-reporting-clock-compliance/src-eu-ai-act",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-regulatory-reporting-clock-compliance",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-regulatory-reporting-clock-compliance?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-eu-ai-act",
        "semanticId": "https://paloframework.org/semantic/source/src-eu-ai-act?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kpi-review-completion/src-nist-ai-rmf",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-review-completion",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-review-completion?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-nist-ai-rmf",
        "semanticId": "https://paloframework.org/semantic/source/src-nist-ai-rmf?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kpi-review-completion/src-oecd-ai-principles",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-review-completion",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-review-completion?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-oecd-ai-principles",
        "semanticId": "https://paloframework.org/semantic/source/src-oecd-ai-principles?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kpi-subgroup-evaluation-coverage/src-iso-42005",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-subgroup-evaluation-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-subgroup-evaluation-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-iso-42005",
        "semanticId": "https://paloframework.org/semantic/source/src-iso-42005?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kpi-subgroup-evaluation-coverage/src-nist-ai-rmf",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-subgroup-evaluation-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-subgroup-evaluation-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-nist-ai-rmf",
        "semanticId": "https://paloframework.org/semantic/source/src-nist-ai-rmf?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kpi-system-card-coverage/src-eu-ai-act",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-system-card-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-system-card-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-eu-ai-act",
        "semanticId": "https://paloframework.org/semantic/source/src-eu-ai-act?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kpi-system-card-coverage/src-nist-ai-rmf",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-system-card-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-system-card-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-nist-ai-rmf",
        "semanticId": "https://paloframework.org/semantic/source/src-nist-ai-rmf?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kpi-vendor-evidence-coverage/src-iso-42001",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kpi-vendor-evidence-coverage",
        "semanticId": "https://paloframework.org/semantic/indicator/kpi-vendor-evidence-coverage?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-iso-42001",
        "semanticId": "https://paloframework.org/semantic/source/src-iso-42001?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kri-accessibility-blocker-rate/src-iso-42005",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-accessibility-blocker-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-accessibility-blocker-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-iso-42005",
        "semanticId": "https://paloframework.org/semantic/source/src-iso-42005?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kri-accessibility-blocker-rate/src-wcag-22",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-accessibility-blocker-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-accessibility-blocker-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-wcag-22",
        "semanticId": "https://paloframework.org/semantic/source/src-wcag-22?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kri-critical-test-failure-rate/src-nist-genai-profile",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-critical-test-failure-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-critical-test-failure-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-nist-genai-profile",
        "semanticId": "https://paloframework.org/semantic/source/src-nist-genai-profile?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kri-critical-test-failure-rate/src-owasp-llm-top10",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-critical-test-failure-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-critical-test-failure-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-owasp-llm-top10",
        "semanticId": "https://paloframework.org/semantic/source/src-owasp-llm-top10?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kri-environmental-budget-variance/src-iso-42001",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-environmental-budget-variance",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-environmental-budget-variance?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-iso-42001",
        "semanticId": "https://paloframework.org/semantic/source/src-iso-42001?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kri-environmental-budget-variance/src-iso-42005",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-environmental-budget-variance",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-environmental-budget-variance?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-iso-42005",
        "semanticId": "https://paloframework.org/semantic/source/src-iso-42005?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kri-execution-bypass-rate/src-nist-ai-rmf",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-execution-bypass-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-execution-bypass-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-nist-ai-rmf",
        "semanticId": "https://paloframework.org/semantic/source/src-nist-ai-rmf?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kri-execution-bypass-rate/src-owasp-llm-top10",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-execution-bypass-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-execution-bypass-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-owasp-llm-top10",
        "semanticId": "https://paloframework.org/semantic/source/src-owasp-llm-top10?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kri-harmful-representation-rate/src-iso-42005",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-harmful-representation-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-harmful-representation-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-iso-42005",
        "semanticId": "https://paloframework.org/semantic/source/src-iso-42005?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kri-harmful-representation-rate/src-nist-genai-profile",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-harmful-representation-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-harmful-representation-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-nist-genai-profile",
        "semanticId": "https://paloframework.org/semantic/source/src-nist-genai-profile?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kri-multi-agent-conflict-rate/src-nist-ai-rmf",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-multi-agent-conflict-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-multi-agent-conflict-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-nist-ai-rmf",
        "semanticId": "https://paloframework.org/semantic/source/src-nist-ai-rmf?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kri-overdue-remedy-rate/src-iso-42005",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-overdue-remedy-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-overdue-remedy-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-iso-42005",
        "semanticId": "https://paloframework.org/semantic/source/src-iso-42005?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kri-override-failure-rate/src-eu-ai-act",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-override-failure-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-override-failure-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-eu-ai-act",
        "semanticId": "https://paloframework.org/semantic/source/src-eu-ai-act?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kri-override-failure-rate/src-oecd-ai-principles",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-override-failure-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-override-failure-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-oecd-ai-principles",
        "semanticId": "https://paloframework.org/semantic/source/src-oecd-ai-principles?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kri-provenance-verification-failure-rate/src-eu-article50-guidelines",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-provenance-verification-failure-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-provenance-verification-failure-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-eu-article50-guidelines",
        "semanticId": "https://paloframework.org/semantic/source/src-eu-article50-guidelines?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kri-residual-disparity-rate/src-eu-ai-act",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-residual-disparity-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-residual-disparity-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-eu-ai-act",
        "semanticId": "https://paloframework.org/semantic/source/src-eu-ai-act?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kri-residual-disparity-rate/src-nist-ai-rmf",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-residual-disparity-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-residual-disparity-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-nist-ai-rmf",
        "semanticId": "https://paloframework.org/semantic/source/src-nist-ai-rmf?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kri-scope-change-rate/src-nist-ai-rmf",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-scope-change-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-scope-change-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-nist-ai-rmf",
        "semanticId": "https://paloframework.org/semantic/source/src-nist-ai-rmf?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kri-sensitive-data-events/src-eu-ai-act",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-sensitive-data-events",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-sensitive-data-events?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-eu-ai-act",
        "semanticId": "https://paloframework.org/semantic/source/src-eu-ai-act?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kri-sensitive-data-events/src-nist-ai-rmf",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-sensitive-data-events",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-sensitive-data-events?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-nist-ai-rmf",
        "semanticId": "https://paloframework.org/semantic/source/src-nist-ai-rmf?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kri-systemic-risk-finding-rate/src-eu-gpai-code",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-systemic-risk-finding-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-systemic-risk-finding-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-eu-gpai-code",
        "semanticId": "https://paloframework.org/semantic/source/src-eu-gpai-code?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kri-systemic-risk-finding-rate/src-nist-genai-profile",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-systemic-risk-finding-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-systemic-risk-finding-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-nist-genai-profile",
        "semanticId": "https://paloframework.org/semantic/source/src-nist-genai-profile?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kri-tool-call-error-rate/src-nist-ai-rmf",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-tool-call-error-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-tool-call-error-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-nist-ai-rmf",
        "semanticId": "https://paloframework.org/semantic/source/src-nist-ai-rmf?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kri-trained-control-error-rate/src-eu-ai-act",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-trained-control-error-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-trained-control-error-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-eu-ai-act",
        "semanticId": "https://paloframework.org/semantic/source/src-eu-ai-act?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    },
    {
      "mappingId": "https://paloframework.org/semantic/mapping/indicator-to-source/kri-trained-control-error-rate/src-iso-42001",
      "mappingVersion": "1.0.0",
      "mappingType": "indicator-to-source",
      "source": {
        "entityType": "indicator",
        "entityId": "kri-trained-control-error-rate",
        "semanticId": "https://paloframework.org/semantic/indicator/kri-trained-control-error-rate?v=3.1.0",
        "version": "3.1.0"
      },
      "target": {
        "entityType": "source",
        "entityId": "src-iso-42001",
        "semanticId": "https://paloframework.org/semantic/source/src-iso-42001?v=1.0.0",
        "version": "1.0.0"
      },
      "coverageType": "supporting",
      "conditions": [],
      "rationale": "The source informs the indicator definition; the published threshold remains illustrative.",
      "basis": "Declared relationship in data/kpi-kri-registry.json; no legal-equivalence or compliance claim is created.",
      "approval": {
        "status": "approved",
        "scope": "PALO framework publication only; not a legal applicability or certification decision.",
        "decidedAt": "2026-08-23T08:00:00Z",
        "decidedBy": "PALO framework release process"
      },
      "validFrom": "2026-08-23T00:00:00Z",
      "provenance": {
        "generatedFrom": "data/kpi-kri-registry.json",
        "generationRule": "indicator-to-source: one immutable source-target pair per declared ID reference."
      }
    }
  ]
}