Skip to content

Relocate CRA mapping into docs/compliance_mapping/ (Phase 3'.1 step B-1)#10

Merged
R00T-Kim merged 2 commits into
mainfrom
phase-3-compliance-report
Apr 19, 2026
Merged

Relocate CRA mapping into docs/compliance_mapping/ (Phase 3'.1 step B-1)#10
R00T-Kim merged 2 commits into
mainfrom
phase-3-compliance-report

Conversation

@R00T-Kim
Copy link
Copy Markdown
Owner

Summary

Phase 3'.1 Track B first PR. Sets up the directory structure for the four-document compliance-mapping suite (CRA Annex I / FDA Section 524B / ISO 21434 / UN R155) that ships through Phase 3'.1.

The existing docs/cra_compliance_mapping.md is git mv'd into docs/compliance_mapping/cra_annex_i.md (history preserved) and its header is rewritten to:

  1. Declare the four-file suite layout so readers see what's coming.
  2. Spell out the mandatory "compatible with" wording rule (already enforced by scripts/check_doc_consistency.py rule 3 — this is the documentary side).
  3. Cross-link planned siblings:
    • docs/compliance_mapping/fda_section_524b.md (Phase 3'.1 step B-2)
    • docs/compliance_mapping/iso_21434.md (Phase 3'.1 step B-3)
    • docs/compliance_mapping/un_r155.md (Phase 3'.1 step B-3)

Why this is a separate PR

Track B is independent of Track A (Phase 2C+ detection work, PR #9): Plan ~/.claude/plans/twinkly-hugging-leaf.md runs them in parallel. This PR has zero file overlap with PR #9 and zero dependency on it; both can merge in either order.

References updated

  • README.md and README.ko.md — Regulatory Alignment row
  • docs/status.md — v2.5 CRA bullet
  • CHANGELOG.md — v2.5 release-line entry
  • scripts/check_doc_consistency.pyREQUIRED_DOCS list

Test plan

  • grep -rn 'docs/cra_compliance_mapping' . — 0 stale references
  • python3 scripts/check_doc_consistency.py — OK
  • pytest -q — full suite green
  • CI green on the new branch

Plan reference

See ~/.claude/plans/twinkly-hugging-leaf.md for the broader Track A / Track B parallel plan and the Phase 3'.1 sub-step breakdown (B-1 through B-5).

🤖 Generated with Claude Code

R00T-Kim and others added 2 commits April 19, 2026 19:30
… B-1

Sets up the four-document compliance-mapping suite that Phase 3'.1
delivers (CRA Annex I / FDA Section 524B / ISO 21434 / UN R155).
The existing CRA file is preserved verbatim except for the header,
which now declares the suite layout and tightens the "compatible
with" wording requirement so subsequent mapping documents inherit a
single, consistent style.

- git mv docs/cra_compliance_mapping.md docs/compliance_mapping/cra_annex_i.md
  (history preserved; SCOUT 2.5.0+ release evidence stays intact)
- header revised: doc version 1.0 -> 1.1, added "Last revised" field,
  added explicit non-substitution rule for the "compliant with" /
  "compliance" / "ready" wording (already enforced by
  check_doc_consistency.py rule 3 -- this is the documentary side)
- "Companion mappings (Phase 3'.1, planned)" section added so readers
  see the four-file roadmap and which Phase 3'.1 step ships each one
- references updated:
    README.md, README.ko.md       (Regulatory Alignment row)
    docs/status.md                (v2.5 CRA bullet)
    CHANGELOG.md                  (v2.5 release-line entry)
    scripts/check_doc_consistency.py  (REQUIRED_DOCS list)

Verification:
  grep -rn 'docs/cra_compliance_mapping' .   # 0 stale references
  python3 scripts/check_doc_consistency.py   # OK
  pytest -q                                   # full suite green

Phase 3'.1 Track B first PR (Pivot 2026-04-19).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
… (Phase 3'.1 B-2 + B-3)

Completes the four-document compliance-mapping suite established by
B-1. All three new files reuse the cra_annex_i.md template (header
with version + last-revised + standard reference, mandatory "compatible
with" disclaimer, companion-mappings cross-link, executive summary,
regulatory-context section, per-requirement coverage table, output
formats section, coverage gaps, roadmap, references).

- docs/compliance_mapping/fda_section_524b.md
    Maps the four 21 USC §360n-2(b) statutory obligations and the
    September 2023 FDA premarket cybersecurity guidance content
    elements. Calls out the sponsor-side responsibilities (security
    objectives, threat-model documents, QMS, labelling, postmarket
    cybersecurity management plan).
- docs/compliance_mapping/iso_21434.md
    Maps ISO/SAE 21434:2021 work products across clauses 8, 9, 10, 11,
    13, and 15 (TARA). Distinguishes tool-friendly work products
    (WP-08-01..04, WP-10-04..05, WP-13-02) from manufacturer-side
    narratives.
- docs/compliance_mapping/un_r155.md
    Maps §7.2 (CSMS) and §7.3 (vehicle type) requirements, plus a
    per-threat guide covering the 15 most relevant Annex 5 threat
    categories (manipulation, replay, malware insertion, network-design
    vulnerabilities, etc.). Co-published with iso_21434.md per the
    standard / regulation pairing.

Verification:
  python3 scripts/check_doc_consistency.py   # OK
  pytest -q                                   # full suite green

Phase 3'.1 Track B second + third commits on PR #10 (Pivot 2026-04-19).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
@R00T-Kim R00T-Kim merged commit 2e10587 into main Apr 19, 2026
6 checks passed
@R00T-Kim R00T-Kim deleted the phase-3-compliance-report branch April 19, 2026 15:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant