# Kanit: Open-Source Continuous Compliance & Evidence Engine

> Kanit is an open-source, local-first continuous compliance CLI and automated evidence collection engine for AWS and GitHub. It automates SOC 2 Type II and ISO/IEC 27001:2022 audits by evaluating 17 automated infrastructure and repository security controls, sealing evidence with cryptographic SHA-256 hashes, and generating instant Terraform/CLI remediations.

## Quick Reference
- **Website**: https://getkanit.com
- **Source Code**: https://github.com/aliefe04/kanit
- **License**: MIT
- **Quickstart Command**: `npx @aliefe04/kanit scan --mock` (runs offline without cloud credentials)
- **Supported Frameworks**: SOC 2 Type II (Trust Services Criteria CC6, CC7, CC8), ISO/IEC 27001:2022 (Annex A Controls), CIS AWS Foundations Benchmark v3.0, HIPAA Security Safeguards, GDPR Art. 32.

## Key Features & Differentiators
- **100% Local-First & Zero-Data Leakage**: Evaluates AWS infrastructure and GitHub repositories using native local APIs. Never uploads credentials, infrastructure topology, or compliance data to 3rd-party SaaS platforms.
- **SHA-256 Tamper-Proof Evidence**: Packages all raw configuration payloads and evaluation results into cryptographically signed JSON/ZIP manifests acceptable to Tier-1 compliance auditors (Big 4, Schellman, A-LIGN).
- **Automated IaC & CLI Remediation**: Generates ready-to-apply Terraform (HCL) snippets and AWS/GitHub CLI commands for failed security controls.
- **CI/CD Pipeline Security Gate**: Native zero-exit-code check for GitHub Actions, GitLab CI, and CircleCI to block non-compliant infrastructure and repository changes before deployment.
- **Multi-Format Reporting**: Generates terminal tables, structured JSON, CSV matrices, Markdown executive summaries, and JUnit XML test reports.

## Detailed Documentation
- [Full LLM Specification](https://getkanit.com/llms-full.txt): Complete documentation of architecture, 17 automated controls matrix, CLI commands, evidence schema, and competitor comparison.
- [GitHub Repository](https://github.com/aliefe04/kanit): Source code, contributing guidelines, and CLI distribution.
- [Web Evidence Verifier](https://getkanit.com/verify): Zero-backend client-side cryptographic auditor verification portal using Web Crypto SHA-256.
- [Compliance Controls Directory](https://getkanit.com/controls): Complete programmatic SEO guide and remediation documentation for all 17 automated AWS and GitHub controls.