Explain works only on FAIL or ERROR checks from a finished run. The note names the control and condition, cites the run and rule, and marks anything unconfirmed.
AAG Assistant
Advisory AIAAG Assistant explains checks from a finished run and builds a custom profile from a prompt. It does not write check results, start a job, or start remediation.
Console path
secaudit.local/aag/connection 
What you can do
-
FAIL and ERROR checks from a finished run, cited to the run and the rule
-
No citation: unconfirmed. The check status does not change
-
A prompt becomes a custom profile, validated like an import. No job starts
-
One working provider, an encrypted key, a call log without the prompt or the key
A prompt becomes a custom profile: name, target, purpose, rules, and one check script. It passes the import validator, and no job starts on its own.
One selected provider handles every call — an internal model or an external HTTPS API. The key is encrypted, text is redacted, and the call log keeps no prompt or key.
