SecurityMetric

A security metric: mean time to detect, patch latency against SLA, phish click rate, fraction of incidents predicted by threat models. The current value is read from telemetry via the location URI, not stored: telemetry as code, the same posture as Evidence.location in governance. Board reporting is a generated view over these.