Two controls, one query, zero screenshots

Before you start

Module 01 proved one laptop's encryption claim by querying one machine. This lab is the same discipline at cloud scale: the truth no longer sits in a file you can walk to — it sits in the cloud's four parts, reachable only as data. You are asked to produce one reproducible evidence report covering two controls — an encryption control (a STATE question, answered by a posture-service finding) and an access control (an EVENT question, answered by the audit log) — plus one SQL-derived risk metric, and to make the whole thing re-runnable so it can later go on a monitoring schedule. The terminal is a fidelity-pinned simulation of the lab box; the SQL console beside it is real SQLite running in your browser, querying the evidence table your own setup run produces. One honest boundary: `labs/happy-path.sh` is the repo's CI proof for this lab — it uses bash constructs beyond this simulation's taught subset, so read it with `cat` here and run it on a real machine.

This exercise loads a heavier engine — a desktop-class browser is recommended.