# Controls cache

This directory holds JSON snapshots of AWS security controls used by the
audit-terraform skill's legacy fsbp/cis subagents. Refresh with:

    python scripts/refresh-controls.py

Files:
- `fsbp.json` — AWS Foundational Security Best Practices, indexed by terraform
  resource type
- `cis.json` — CIS AWS Foundations Benchmark, indexed by terraform resource
  type
- `meta.json` — fetch timestamps + source URLs per file

Cache is considered stale at >30 days. Security agents check `meta.json` and
fall back to live WebFetch if a file is missing, empty, or stale.