A certificate proves you were compliant on one day. It says nothing about today. Here is why point-in-time proof leaves a gap, and what to do about it.