Ansible can handle enterprise-scale compliance automation, but only if it's built with software engineering discipline. Here's the architecture that makes it work.