# Vendored reference corpus

This directory contains files vendored (copied) from an upstream FedRAMP repository.
It is **not** a git submodule — the content is tracked directly so it is present in
every checkout of this repository with no submodule initialization required.

- **Upstream:** https://github.com/FedRAMP/rules
- **Vendored commit:** `d69e5178796ed4b14b347c3cb7389b5bc6e53582`
- **Vendored on:** 2026-08-11 (UTC)
- **Pinned to the markdown's declared source commit** for coherence (upstream rules HEAD was `d69e5178796e` at vendor time; the 2026-markdown narrative had not yet been regenerated against it).
- **Curated:** `fedramp-consolidated-rules.json` + `schemas/` + `README.md` + `AGENTS.md` (upstream `tools/` and CI configs are not vendored).

To refresh from upstream, run:

```bash
scripts/update-fedramp-refs.sh
```

Do not hand-edit these files — local edits are overwritten on the next refresh.
