CAM.

18 cloud assets traced through full provisioning chain. 5 created outside the approved CAM workflow. 2 lack any change-attestation record.

Untracked provisioning is the auditor's favorite finding.

CA-013 · prod-api-cluster OUTSIDE CAM

Created 2025-10-14 via console. No ticket, no peer approval.

Backfill change record, attest gap, harden gating policy.