Score each vendor's filing compliance (red / amber / green) and flag ITC risk from non-filers. GSTIN format validated (15 chars, PAN chars 3-12, state code 01-38).