[Epic]: ISO/IEC 42001 certification path

## Summary
Pursue ISO/IEC 42001 certification readiness — the first international AI-management-system standard — covering clauses 4 through 10, so lightbridge can credibly say "certification in progress" ahead of it becoming an RFP expectation.

## Intent / Source of truth
ISO/IEC 42001 is becoming the AI-specific equivalent of ISO 27001 and is expected on RFPs by 2027. Being able to say "certification in progress" is a credible differentiator — most incumbents cite SOC 2 only. Source: 2026-08-13 enterprise-readiness research pass.

## Scope
- [ ] Gap analysis against ISO/IEC 42001 clauses 4-10 (context, leadership, planning, support, operation, performance evaluation, improvement)
- [ ] AI management system documentation (AI policy, risk register, impact assessments)
- [ ] Internal audit and management review cycle toward certification readiness

## Out of scope
- Engaging the external certification body (commercial decision, not engineering deliverable — this epic is readiness, matching the SOC 2 epic's split)

## Verification
A completed gap analysis against every clause; an internal audit conducted against the documented AI management system with findings tracked to closure.

## Risk assessment
As a novel standard (adopted 2023), guidance and auditor expectations are still maturing; scope the gap analysis conservatively and revisit as the standard's interpretation stabilizes industry-wide.

## AI Usage Declaration
Drafted with AI assistance during the 2026-08-13 cross-repo backlog consolidation and enterprise-readiness research. A human owns intent, verification and consequences.