Continuous controls monitoring

Production system polling 52 controls hourly, scoring health, tracking drift, auto-generating evidence.

Replaces annual point-in-time audits with real-time continuous monitoring. Distributed agent architecture: agents evaluate controls against current infrastructure state hourly, score implementation strength, track drift over time, and alert on regressions.

Each control maps to one or more evaluator functions. Agents run on EC2, poll control state, persist results to DynamoDB with timestamps, maintain a 90-day trend history, send SNS alerts on any PASS→FAIL transition, and automatically generate evidence bundles on schedule.

Full implementation, tests, and documentation available on GitHub.