v2.2.0 (6 Nov 2026)
-
Ten skills deep-updated from primary sources (the staleness top-10): EAR gains full Affiliates Rule coverage including the stay extension to Jan 10, 2027; NIS2 adds Austria's NISG 2026 and the 24-of-27 transposition state; SOC 2 adds the proposed 2027 Trust Services Criteria exposure draft; SOX ITGC adds QC 1000 and the 2025 inspections Spotlight; ITAR reframes VIII(a)(8) as effective and adds the omnibus NPRM; EU AI Act adds Implementing Regulation 2026/1755, the first GPAI information requests, and EN 18286 as the first cited harmonised standard; TPRM adds the US interagency proposal and CBI CP173; Saudi Arabia GRC adds NCNICC-1:2025; PCI DSS adds Secure SLC v2.0 and the October 31 program sunsets; Section 508 corrects the refresh-NPRM rumor and adds the FY2025 assessment.
-
Benchmark re-run (eval IDs 341-390, 100 runs, 10 independent graders): suite headline now 90% vs 49% baseline (810/446 of 902, +41 points, +364 assertions), the widest published delta yet. Standouts: Saudi Arabia 100% vs 20%, ITAR 88% vs 12%, NIS2 and Section 508 100% vs 32%. Zero grading amendments.
-
November 2026 GRC Framework Updates published covering October activity across all 36 frameworks (3 major, 19 minor, 14 no-change); October archived.
-
Corrections from primary sources: the reported October Access Board Section 508 NPRM does not exist (story traces to a 2015 article), and the EAR card reflects the November 5 stay extension instead of a November 10 snap-back.
-
Site: AgentDossier added to Additional Projects; menu rebuilt as a dark band with pill tabs; tab switching now resets scroll (sticky-measurement bug fixed); link affordance pass; Google Analytics and site-verification restored; mobile nav fix.