typst (PDF) and Python (HTML/Markdown) are now the only guidance engines
and the default with no flags. Delete the Gemfile, the output_format==adoc
branch (bundle exec asciidoctor[-pdf]), the adoc/ template tree, the
asciidoctor-pdf themes, and the --pdf-engine/--html-engine flags.
Canonical outputs unchanged for users: <baseline>_<lang>.pdf (typst) and
.html (Python); the intermediate is now .typ instead of .adoc. typst (the
'typst' Python package) is required for the PDF -- a missing package is a
hard error with a 'uv sync' hint (covered by a test). Keep asciidoctor.css
/ -dark.css, now inlined by the Python HTML backend. Also drop the unused
renovate config.
- Implemented `script.py` for generating compliance scripts with Jinja2 templating and audit plist creation.
- Created `local_report.py` to generate local compliance reports in Excel and HTML formats, including pie chart visualizations.
- Developed `mapping.py` to update security rules with custom controls based on CSV input and generate baseline YAML files.
- Introduced `scap.py` for creating SCAP-compliant XML files, with support for different OS types and export formats.
