Bug fixes

• The read-only Compiled Rules and Compiled Items policies behind the IAM Approved and Required controls — covering Role, Group, and User policy attachments and inline policy statements, the IAM Policy statements, and Role trust-relationship statements — did not recompile when their underlying Rules or Items policies changed, so those controls evaluated against stale values. This has been resolved; the compiled values now update whenever the underlying policies change.