[gibs-dev]

The control mapping point is spot on. We took that approach. Structured JSON with article-level mappings so downstream systems can consume obligations programmatically.

The Merkle root anchoring pattern is interesting. Do you anchor per-session or batch? Curious how you handle the latency tradeoff for the 4-hour DORA window where every minute of audit lag matters.