AAG does not start jobs, change statuses, or write remediation. Explain works from completed runs and cites the run and the rule; Generate produces description, rules, and check-script files that pass the same validator as imports, and no job starts on its own.
Advisory AI assistance
Advisory contourAAG (AI Audit Generation) is an advisory contour beside the compliance cycle: it explains what a finished check verified, or turns a prompt into a custom profile draft.
AAG explains finished checks and drafts custom profiles beside the compliance cycle — with guardrails that keep results, jobs, and secrets out of the model’s reach
What you can do
-
One working provider per instance, internal or external HTTPS
-
Secrets redacted before any call; keys and prompts never logged
-
Explanations cite run and rule, with unconfirmed parts marked
-
Generated profiles validated like imports before joining the list
An administrator connects one working provider — an internal model inside the perimeter or an external HTTPS API — and switches the contour on for that row. While the contour is off, every saved provider stays offline. Operator text is redacted before the provider is chosen, API keys travel only in request headers, and the call log keeps outcome and input hash without prompts or keys.
Valid generated packages join the profile list as custom without overwriting existing names. Failed tasks can be run again, and repeated requests reuse saved results, so teams can review AI text calmly before anything reaches an audit.
How requests move
- 01
Administrator saves one provider and turns the AI contour on
- 02
Operator explains finished checks or drafts a custom profile from a prompt
- 03
Team reviews the text, edits profile fields, and imports valid packages only
- 04
Jobs, results, and remediation stay untouched until operators act
Advisory only: AI text supports operator review and never replaces evidence from runs.