feat: implement assurance graph and screening evidence

README.md

@@ -12,9 +12,12 @@ The first complete vertical is sanctions screening. Connectors acquires immutabl
 
 The module includes database migrations, tenant-isolated APIs, an operational
 WebUI, append-only dispositions, time-bounded false-positive exceptions,
-freshness reconciliation, explicit consumer gates, and audit events. Queue and
-audit summaries deliberately retain only the minimum subject data needed for
-the workflow.
+freshness reconciliation, explicit consumer gates, and audit events. It also
+provides a revisioned horizontal assurance graph from obligation through
+effectiveness review, with bounded traversal, opaque governed-object links,
+search, and optimistic concurrency. Queue, search, audit, and aggregate
+summaries deliberately retain only the minimum subject data needed for their
+purpose.
 
 ## Initial Ownership
 
@@ -27,6 +30,8 @@ the workflow.
 - immutable sanctions list catalogues
 - sanctions screening and reviewer dispositions
 - stable screening evidence references and freshness gates
+- effective-dated obligations, risks, controls, evidence, findings, corrective
+  measures, and effectiveness reviews
 
 ## Boundaries