Trace how repository context becomes reviewable, publishable GitLab issues with full auditability.
Who this is forArchitects and senior engineers evaluating trust boundaries.
Ingestion
- Provider APIs supply repo tree, CI config, and branch metadata.
- Graph builder materializes nodes/edges; snapshot stored with optional R2 ref.
- Events: audit.ingestion_completed, audit.graph_built.
Analysis
- Specialists consume shared graph payload in parallel lanes (repo vs runtime).
- Findings cluster by category/asset; synthesizer produces issue candidates.
- Rejected candidates persist as artifacts with validation errors.
Governance
- Human review in /app before publish: the review gate prevents direct agent-to-GitLab publish.
- Work item attributes automation applies labels/metadata on publish.
- Reconciliation detects drift between local snapshot and remote issue.
Was this article helpful?
