Compliance & risk engine

The compliance engine aggregates risk findings from every other module — claim safety violations, syndication leaks, thin-content pages, AI runs that weren't reviewed before going out, duplicate syndication patterns — and renders a single severity-sorted list. Each finding has a rule id, a citation, and the operator action that resolves it.

Findings can be overridden with a justification; the override is logged in the workspace audit log with the user id, timestamp, and the rule id that was overridden. This is the surface auditors and counsel review during a dispute.