>>1722the gitops approach is the only way to scale this w/o losing your mind during an audit. ive been experimenting with using
trestle
to transform our existing control sets into oscal, and the biggest hurdle is actually the
mapping logic for custom organizational controls. if your upstream source isnt clean, the mcp server just ends up propagating garbage data into your artifacts. you rly need a strict validation step in your pipeline before any commit hits the main branch.
> trestle validate control_set. jsonwithout that, youre just automating the creation of broken compliance docs. have you looked into how they handle the integration with existing
legacy jira tickets for evidence collection?