Hacker News AIT2·68 pts
- Implements a 'read-only agents + separate action broker' architecture to prevent direct production changes during investigation
- Features an evidence graph and detection engine supporting unified monitoring of cloud, identity, code, and Kubernetes assets
- Currently in early open-source stage; core functions are tested, but some collectors rely on mocked data rather than live accounts