{
  "standard": "CGS-1.0.0",
  "controls": [
    { "id": "CGS-AUTH-001", "title": "Authorized scope", "required": true, "evidence": "authorization_reference", "automation": "manual" },
    { "id": "CGS-INV-001", "title": "AI-agent surface inventory", "required": true, "evidence": "agent_surface_inventory", "automation": "hybrid" },
    { "id": "CGS-SEC-001", "title": "Secret-safe evidence", "required": true, "evidence": "redacted_secret_signal_summary", "automation": "automated" },
    { "id": "CGS-DATA-001", "title": "Data minimization", "required": true, "evidence": "privacy_boundary", "automation": "hybrid" },
    { "id": "CGS-INJ-001", "title": "Untrusted instruction handling", "required": true, "evidence": "instruction_boundary_result", "automation": "hybrid" },
    { "id": "CGS-PRIV-001", "title": "Least privilege", "required": true, "evidence": "privilege_review", "automation": "hybrid" },
    { "id": "CGS-HUMAN-001", "title": "Human approval gates", "required": true, "evidence": "approval_gate_policy", "automation": "hybrid" },
    { "id": "CGS-POL-001", "title": "Machine-readable policy", "required": true, "evidence": "policy_presence_and_fields", "automation": "automated" },
    { "id": "CGS-DRIFT-001", "title": "Guardprint and drift", "required": true, "evidence": "guardprint_sha256", "automation": "automated" },
    { "id": "CGS-REPORT-001", "title": "Decision-ready report", "required": true, "evidence": "report_manifest", "automation": "automated" },
    { "id": "CGS-TRACE-001", "title": "Evidence traceability", "required": true, "evidence": "evidence_digest_sha256", "automation": "automated" },
    { "id": "CGS-ATTEST-001", "title": "Signed official attestation", "required": false, "requiredFor": "CapitalGuard Verified", "evidence": "ed25519_attestation", "automation": "official" }
  ]
}