You have spent the week getting hardware to prove things about itself. Go find a person and ask them to just tell you something, no proof required.
It will feel almost reckless. It is also, most days, still the better way to live.
1/ A compliance report tells you what was true on the day the auditor visited.
That is not a criticism. It is the honest shape of the instrument, and most of enterprise security policy is built on instruments shaped exactly like this.
Discord trivia tonight, 21:00 CET
Fitting, since it's the one night a week we ask you to prove you know something instead of asking a piece of hardware to prove it for us.