Answer security questionnaires and compliance attestations from your evidence — a model-agnostic RAG kernel.