QA REPORT -- Human-adjudicated semantic alignment crosswalk
Generated by code/03_qa.py. Read this before trusting any figure or manuscript number.

== Row counts ==
Total crosswalk rows: 90
  CSF 2.0: 22 rows
  CPG: 40 rows
  NERC CIP: 17 rows
  TSA: 11 rows

== Mapping confidence ==
  high: 53 rows
  medium: 13 rows
  LOW: 2 rows
  n/a: 22 rows
  -> 13 medium-confidence rows were reviewed by the author (sign-off 2026-09-19); 2 LOW-confidence rows are the CPG 2.0 placeholders, retained UNRESOLVED_SOURCE_BLOCKED per that same sign-off (docs/VERIFY_CHECKLIST.md).

== Cross-check: authored adjudication vs. computed framework presence ==
PASS -- all 22 adjudicated categories match the frameworks actually present in crosswalk.csv.

== Adjudication verdict counts (22 CSF 2.0 categories) ==
  Reinforce: 2
  Partial: 10
  Gap: 9
  Conflict: 1

== Categories where all three frameworks are already CURRENTLY BINDING (not proposal-dependent) ==
  ID.RA (Risk Assessment)
  PR.PS (Platform Security)
  RS.CO (Incident Response Reporting and Communication)
  RC.RP (Incident Recovery Plan Execution)

== Rows carrying a documented UNRESOLVED_SOURCE_BLOCKED status (author-reviewed 2026-09-19, deferred to v0.2) ==
  CPG-1.A
  CPG-1.B
  CPG-1.C
  CPG-1.D
  CPG-1.I
  CPG-2.F
  CPG-2.J
  CPG-2.S
  CPG-2.X
  CPG-GOV-NEW
  CPG-3P-NEW
  Marquee claim, separately reconfirmed by the author: RS.CO 'Conflict' verdict (reporting-timeline misalignment) -- see docs/VERIFY_CHECKLIST.md.

== Named spot checks (minimum per docs/VERIFY_CHECKLIST.md) ==
  CIP-013: Easy case -- confirm CIP-013-2 is titled 'Supply Chain Risk Management' at nerc.com/standards/reliability-standards/cip/cip-013-2
  TSA-SD-REPORT24H: Hard case -- confirm the 24-hour figure and 'to CISA' destination against GAO-25-107947 directly, not this pipeline's paraphrase
  CIP-008-REPORT: Extreme case -- confirm the 1-hour E-ISAC/NCCIC clock in CIP-008-6/7 primary text at nerc.com; this is the marquee RS.CO Conflict claim
  CPG-2.F: Easy case -- confirm 'Network Segmentation' title and description on CISA's CPG page
  TSA-PROP-CRM: Hard case -- confirm 49 CFR 1586.203/1586.207/1586.229 citations against the Federal Register NPRM text directly
  CIP-014: Random case (seed=CSF-cat count 22) -- confirm CIP-014-3 physical-security risk-assessment framing
  CPG-GOV-NEW: Placeholder row -- verify this against the primary CPG 2.0 PDF before it appears in any final document