# Zero-Trust Policy Compliance Rate — Definition of Success

> KPI: Zero-Trust Policy Compliance Rate
> Target: not a committed target (operational signal)

**What this number means:** the percentage of infrastructure assets
continuously verified as compliant with security baselines and policies.

**How it's computed:** `1 − count(assets WHERE last_scan.status ≠ pass)
÷ count(assets)`. Sourced from `fact_policy_check` (Checkov results).

**What "good" looks like:** 100% means every resource passed every
policy check. The Nova tagging standard (nova_tagging.py, hard mode) is
the primary check.