KNOWLEDGE WORKSPACE
IN BUILDThe compliance library — regulatory text, the CMMC control catalog, and the evidence artifacts behind an assessment — lives in IRIX, a shared 3D filesystem workspace with a per-pod research agent. jp.cooey.club is not deployed yet — evidence paths are recorded now and resolve into IRIX when it lands.
THE SPLIT · WHERE YOUR DATA LIVES
◈ IRIX · shared
public reference
- The control catalog & requirement text
- The NIST / DoD-CIO corpus (14 CMMC domains)
- Your evidence artifacts — the actual files
- The per-pod research agent (grounded, cited)
▣ COOEY · yours
fully private · per tenant
- Your answers — status, owner, method
- Your POA&M, risk register and TPRM
- Evidence pointers, never the files themselves
- Your triage cases and audit trail
A refresh of the shared catalog can never touch your assessment — they are different systems with different data classes. That separation is what lets the reference library be public and continuously updated while your compliance posture stays private to your tenant.
Documents
127
in the regulatory library
Controls
—
sign in to track your controls
Corpus answers
0
cached · shared estate-wide
Precomputed
0
controls answered ahead of time
CORPUS TAXONOMY · TODAY'S PERMALINK IS TOMORROW'S PATH
regulatory library →
Every document we collect is keyed bucket-slug/document-id. That string is its permalink here and the path it keeps when the library moves into the IRIX filesystem — so links made today survive the move.
| SHELF | CORPUS PATH | DOCS | ENRICHED |
|---|---|---|---|
| CMMC / DFARS · eCFR | ecfr/<doc-id> | 98 | 98 |
| Federal rulemaking | federal-register/<doc-id> | 14 | 14 |
| NIST publications | nist/<doc-id> | 14 | 14 |
| OIRA · OMB review | reginfo/<doc-id> | 1 | 0 |
CONTROL DOMAINS · CMMC 2.0
assessment →
AC
Access Control
AT
Awareness & Training
AU
Audit & Accountability
CM
Configuration Management
IA
Identification & Authentication
IR
Incident Response
MA
Maintenance
MP
Media Protection
PS
Personnel Security
PE
Physical Protection
RA
Risk Assessment
CA
Security Assessment
SC
System & Communications Protection
SI
System & Information Integrity
The shared corpus is filed by these domains; your assessment answers the same 14 families privately.
CONNECTION STATUS
○
Workspace & evidence artifacts
Evidence paths are recorded against your controls now, and become links the day the workspace deploys. Nothing you record is lost in the meantime.
○
Compliance research agent
Control deep-dives on the assessment page light up when the corpus agent connects.
Answers are grounded in the collected NIST / DoD-CIO corpus and cited — never generated from thin air. Because that corpus is public reference material, an answer is computed once and shared across the estate rather than re-run per tenant.