# Continuous Compliance

Record: `arch:continuous-compliance`
Kind: capability
Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md)
Severity: contextual
Scope: CI/CD, infrastructure, codebase
Canonical: https://banes-lab.com/ontology#arch-continuous-compliance

## Repair

- Refactored by: Add Automated Evidence, Add Policy Gates
- Detected by: missing automated compliance checks
- Violated by: compliance verified only manually/reactively
- Measured by: continuous control pass rate
- Enforced by: CI/CD controls

## requires

- [Policy as Code](https://banes-lab.com/records/arch/policy-as-code.md)
- [Evidence Automation](https://banes-lab.com/records/lex/evidence-automation.md)

## reinforces

- [Compliance](https://banes-lab.com/records/arch/compliance.md)
- [Auditability](https://banes-lab.com/records/arch/auditability.md)

## enables

- [Ongoing Assurance](https://banes-lab.com/records/lex/ongoing-assurance.md)

## conflicts-with

- [Point-in-Time Audit Only](https://banes-lab.com/records/lex/point-in-time-audit-only.md)

## tensions-with

- [Pipeline Complexity](https://banes-lab.com/records/lex/pipeline-complexity.md)

## tensions

- [Continuous Compliance Pipeline Complexity](https://banes-lab.com/records/tension/continuous-compliance-pipeline-complexity.md)

## referenced-by

- [Policy as Code](https://banes-lab.com/records/arch/policy-as-code.md)