oscal-compass-lab Review OSCAL Mappings
Human-in-the-loop review workflow for source traceability and mapping quality.
Read first
docs/OSCAL-REVIEW-WORKFLOW.mdadapters/generic-agent-package/prompts/review-oscal-mappings.mdplugins/document-transform/oscal-document-workbench/templates/review-queue.mdplugins/document-transform/oscal-document-workbench/templates/control-mapping-review.csv
Steps
- Load
source-map.csvand any generatedreports/review-queue.md. - For each
needs_reviewor unmapped row:- make sure the source text supports the OSCAL target
- mark unsupported claims
needs_revieworreject - identify missing evidence
- keep reviewer notes
- Make or update the review queue:
bash plugins/document-transform/oscal-document-workbench/scripts/build-review-queue.sh <workspace>/extracted/source-map.csv --output <workspace>/reports/review-queue.md
- Summarize counts of mapped,
needs_review, and unmapped items. - Block "ready for assessment" claims while unresolved review rows remain.
Reviewer decisions
Use explicit statuses in the traceability map.
Allowed source-map.csv statuses:
mappedneeds_reviewunmappedreject
Allowed reviewer decisions in the queue. Keep these separate from mapping status:
approveremaprejectneeds_more_evidencedefer
Do not silently rewrite uncertain source statements as implemented technical reality.