Compliance tasks

Write Trestle Compliance's action-needed reminder to a workspace admin. Cover the facts below.

Trestle Compliance tracks audit-readiness controls for engineering organizations. As of Wednesday, 16 September 2026, six control tasks in the Halcyon workspace need attention: two are overdue and four are due within the next three weeks.

The tasks, in due-date order, each with an owner and a due date. The first two are overdue and should be flagged as such.

• Rotate production database credentials — Priya Raman — 4 Sep 2026 (overdue)
• Complete the Q3 access review for the deploy group — Marcus Hale — 11 Sep 2026 (overdue)
• Upload the vendor risk assessment for Sableforge — Lena Okafor — 18 Sep 2026
• Acknowledge the updated incident response policy — Jonas Reiter — 23 Sep 2026
• Enable MFA on two service accounts — Priya Raman — 30 Sep 2026
• Attach evidence for control CC6.1, logical access — Marcus Hale — 7 Oct 2026

Present the tasks as a data table with a header row: task, owner, due date. The table must read cleanly in mail clients that ignore most CSS.

Tasks that stay overdue mark their linked control as failing in the audit-readiness report until they are closed.

One call to action, a button that opens the compliance dashboard at https://trestle-email.s3.amazonaws.com/compliance

The footer states that this is an automated message from Trestle Compliance, links to the workspace at https://trestle-email.s3.amazonaws.com/dashboard, and links to reminder settings at https://trestle-email.s3.amazonaws.com/settings

Use /world/trestle-email for brand chrome and CSS (the product family). Use the absolute HTTPS URLs from tokens.json; do not use /world/ paths as image src.

Dark mode should be supported.

Leave the HTML in output/email.html, a plain-text version in output/email.txt, and the subject in output/meta.json as {"subject": "..."}. Don't include From, To, or Date headers.