Function push_entry_sub_results 

fn push_entry_sub_results(
    sub_results: &mut Vec<ProbeSubResult>,
    entry: &EvidenceControlEntry,
    framework_filter: Option<&str>,
    status: ProbeStatus,
    effective_mode: ProbeMode,
    override_reason: Option<&str>,
)

Expand one EvidenceControlEntry into ProbeSubResults respecting the probe’s selection mode. Pushes one sub-result per (framework, article) tuple in scope. override_reason carries the operator’s audit rationale (when an override applied) onto every sub-result the entry produces; the value is shared across all per-article rows because the override is on the control, not the article.