N

nist-800-53

Bedrock RMF — self-hosted NIST 800-53 Rev 5 / RMF compliance management (an eMASS / Xacta alternative): control implementations to the CCI, POA&Ms, evidence, HW/SW inventory, PPSM, STIG checklists, cloud inheritance. AGPL-3.0.

Chapter 5: a container image at cutover phase. The unsigned-image gap is planted, and the red pipeline is the point: watch the floor block it.

The landing page and the ten scenarios. The thesis, the claims ledger, and the public posture mirror an assessor can check without an account.

Chapter 6: a CI component at enforce phase. The off-catalog include is planted, and the red pipeline is the point: watch the gate stop it.

Chapter 3: the driver. One tool provisions the group, assesses each control, pushes verdicts, and exports OSCAL.

Chapter 2: the policy plane. The NIST 800-53 framework, the Pipeline Execution Policy that injects the line, and the approval gates.

Chapter 1: the governed CI/CD Catalog and the evidence line. Published, pinned components every workload builds from.

Chapter 4: a Go binary at report phase. Gaps are published and advisory, so the merge request stays green while the finding rides along.

Renders the Evidence Factory group README and its ten scenarios as one site. This project holds no prose; edit gitlab-profile.