New
- Each control is mapped to the facts the agent already reports, so every server gets pass / fail / partial / manual per control with evidence lines and the fix. Nothing new to install.
- A score and a coverage figure side by side, so manual controls are never overstated, and a PDF report with a scorecard and a per-server control table.