You publish the requirement. You publish the filings. What is hard to see from inside is the two read against each other: which systems recorded as being under an annual requirement have filed nothing since, and which are filing figures that lean on the default values your own form supplies.
That is a view of your program built from your own published data, and you can check every row against the file it came from.
If a solicitation requires a subcontractor on file before award, the capability statement is written to be that document.