What's new?

• Turbot > Guardrails > Control prevention discovery now matches policy settings on Active and Tags controls. Previously these were excluded on the assumption they were lifecycle or hygiene controls, which silently produced no prevention rows for time-based security objectives such as key rotation, credential expiry, stale-member cleanup, and certificate expiration. Those objectives now emit preventions as their authors intended across the prevention mods.