{"id":"PLT-004","section":"Platform, Privacy & Assurance","requirement":"Support Linux endpoints","acceptance":"Provide Linux visibility or document an equivalent coverage method.","tier":"AT0, AT4","whyItMatters":"Engineering teams on Linux are often the heaviest AI users.","verificationMethod":"LT","verificationTest":"AI use on a pilot Linux endpoint is visible, or an equivalent method is shown.","formerly":"ARC-003","alsoIn":[],"sort":58,"adoptionContext":"Linux support is relevant to shadow applications and code-agent workflows on employee endpoints; the operating system is a coverage choice, not an adoption tier itself.","mappings":[{"frameworks":["csf","iso27001"],"explanation":"Linux visibility or a tested network, MCP or API alternative can close an endpoint-monitoring blind spot. Platform support or a documented alternative is not itself anomaly detection or endpoint security; equivalent coverage must be demonstrated.","kind":"framework","references":{"csf":["DE.CM-09"],"iso27001":["A.8.16"]},"relation":null,"conditions":[]},{"frameworks":["soc2"],"explanation":"Linux visibility or an equivalent collection route can supply security-monitoring telemetry within the system boundary. Demonstrate actual, attributable security-relevant events; documenting an available method alone does not establish monitoring coverage.","kind":"framework","references":{"soc2":["CC7.2"]},"relation":null,"conditions":[]}],"area":"Platform, Privacy & Assurance","areaSlug":"PLT","url":"/r/PLT-004","frameworkRefs":{"ISO27001":["A.8.16"],"NIST-CSF":["DE.CM-09"],"SOC2":["CC7.2"]}}