[
  {
    "id": "ev-001",
    "title": "Politique de sécurité de l’information v1.4",
    "pillar": "security",
    "auditorReady": true,
    "visibility": "auditor",
    "linkedMilestones": [
      "sec-governance"
    ],
    "updatedAt": "2026-04-09"
  },
  {
    "id": "ev-002",
    "title": "Export Keycloak – MFA et rôles administrateurs",
    "pillar": "security",
    "auditorReady": false,
    "visibility": "internal",
    "linkedMilestones": [
      "sec-iam",
      "con-access"
    ],
    "updatedAt": "2026-03-29"
  },
  {
    "id": "ev-003",
    "title": "Journal des changements Forgejo / Pull Requests",
    "pillar": "security",
    "auditorReady": true,
    "visibility": "auditor",
    "linkedMilestones": [
      "sec-change",
      "pi-inputs"
    ],
    "updatedAt": "2026-04-15"
  },
  {
    "id": "ev-004",
    "title": "Rapport Icinga – disponibilité des services",
    "pillar": "availability",
    "auditorReady": true,
    "visibility": "auditor",
    "linkedMilestones": [
      "ava-monitoring",
      "ava-incidents",
      "sec-logging"
    ],
    "updatedAt": "2026-04-16"
  },
  {
    "id": "ev-005",
    "title": "Procédure de sauvegarde et test de restauration",
    "pillar": "availability",
    "auditorReady": true,
    "visibility": "auditor",
    "linkedMilestones": [
      "ava-backup",
      "ava-resilience"
    ],
    "updatedAt": "2026-04-12"
  },
  {
    "id": "ev-006",
    "title": "Cartographie des flux critiques de traitement",
    "pillar": "processing-integrity",
    "auditorReady": false,
    "visibility": "internal",
    "linkedMilestones": [
      "pi-flows",
      "pi-audit"
    ],
    "updatedAt": "2026-04-04"
  },
  {
    "id": "ev-007",
    "title": "Registre de classification des données",
    "pillar": "confidentiality",
    "auditorReady": false,
    "visibility": "internal",
    "linkedMilestones": [
      "con-classification",
      "con-lifecycle"
    ],
    "updatedAt": "2026-03-18"
  },
  {
    "id": "ev-008",
    "title": "Registre des renseignements personnels",
    "pillar": "privacy",
    "auditorReady": false,
    "visibility": "internal",
    "linkedMilestones": [
      "pri-mapping",
      "pri-rules",
      "pri-retention"
    ],
    "updatedAt": "2026-04-02"
  },
  {
    "id": "ev-009",
    "title": "Journal des incidents et post-mortems",
    "pillar": "security",
    "auditorReady": true,
    "visibility": "auditor",
    "linkedMilestones": [
      "sec-ir",
      "ava-incidents"
    ],
    "updatedAt": "2026-04-10"
  },
  {
    "id": "ev-010",
    "title": "Registre des fournisseurs critiques",
    "pillar": "confidentiality",
    "auditorReady": false,
    "visibility": "internal",
    "linkedMilestones": [
      "con-thirdparty",
      "pri-incidents"
    ],
    "updatedAt": "2026-03-27"
  },
  {
    "id": "ev-011",
    "title": "Inventaire des services in-scope",
    "pillar": "availability",
    "auditorReady": true,
    "visibility": "auditor",
    "linkedMilestones": [
      "ava-inventory",
      "sec-governance"
    ],
    "updatedAt": "2026-04-11"
  },
  {
    "id": "ev-012",
    "title": "Matrice contrôles ↔ preuves",
    "pillar": "security",
    "auditorReady": true,
    "visibility": "auditor",
    "linkedMilestones": [
      "sec-governance",
      "sec-change",
      "con-review",
      "pri-review",
      "pi-audit"
    ],
    "updatedAt": "2026-04-16"
  }
]