Control Diff Engine

Every control mutation — effectiveness re-grade, owner transfer, evidence-rule change, retirement — is captured here as an immutable diff entry. Auditors and regulators reconstruct the control posture at any historical point without trusting the operator's word.