Where does aizome sit against the emerging agentic AI risk framework? This control mapping shows exactly - 25 control objectives, six domains, three coverage levels: Native (aizome delivers directly), Contributes (aizome provides critical enforcement and telemetry), and Out of scope (organizational processes aizome deliberately doesn't claim to own). No overclaiming. No gaps hidden in fine print.