Synthetic Continuous Controls Monitoring project for Procure-to-Pay audit analytics, focused on traceable findings, control evidence, materiality, run manifests and data quality.

Risk-based, multi-layer assurance harness for golf-web-app: deterministic CI gates (Playwright, Schemathesis, axe, k6, SAST/SCA/secrets/DAST, pandera), AI evaluation, four local-Ollama agents (risk, triage, exploratory, security), and Prometheus/Grafana observability. Risk register + findings log are first-class artifacts.