The profile is resolved per decision
This is the part that matters in an audit. The applicable profile is sealed into each record at the moment the decision was made, so an evidence pack states which laws applied then rather than which are configured today. A system that reads current configuration when producing evidence is reconstructing. Configuration drifts, and the drift is discovered in the room where it costs the most.A profile that selects nothing says so
Singapore selects no clause map, because MAS FEAT is principles-based and asks a firm to define its own objective. There is nothing enumerable to score against. The readiness screen reports that rather than inventing a percentage. A number against an instrument nobody encoded is a number with no denominator, and producing one would be the single most tempting dishonest thing this platform could do.Instruments mapped clause by clause
Instruments that are not mapped say so on their own pages, and there are two
different reasons which are never collapsed. DORA and ISO/IEC 42001 have
numbered articles and are unmapped because the maps are not written yet. MAS
FEAT and the UK approach have nothing enumerable to map. See
the regulatory mapping.
Clause maps are data
Maps are YAML, validated against the evidence registry at load. A regulatory analyst can author one without a release, and each carries aprovenance field:
platform, customer or hybrid, so a reader knows whose interpretation they
are looking at.

