Verdict

The durable moat is the SPECIFIC combination — raw-law-to-buildable-requirements translation feeding an MCP-native, live-systems done-vs-gap scorecard across software AND policy controls, with a prioritised build backlog. Each link exists somewhere; nobody has all four. "Regulation-derived requirement checked against a live Jira/codebase rather than a policy PDF" is the unoccupied position.