REST covers profiles, hosts, jobs, remediation, reports, and AAG. WebSockets carry the live log of a check, a scan, or a remediation, so progress is visible without a refresh.
02
Control plane
API & CoreThe control plane checks the request, writes the record, and only then queues the work.
FastAPI serves REST and live WebSocket updates. secaudit_core stores profiles, AuditFlow, jobs, reports, and AAG tasks, and a run is written before it is queued.
Where it sits in the stack
- 01 Access layer
- 02Control plane Focus
- 03 Data and messaging
- 04 Execution layer
- 05 Managed targets
FastAPIWebSocketsecaudit_coreOutbox
How requests move
- 01
The console or an API client sends a request
- 02
FastAPI checks the token and the input
- 03
secaudit_core writes the record
- 04
The outbox queues the work for a worker
What this layer does
-
FastAPI for profiles, jobs, reports, and AAG
-
Live logs over WebSocket
-
The run is stored before a worker starts it
-
AAG cannot write a check result or start a job
secaudit_core is the shared model for the API and the workers: custom and catalog profiles, AuditFlow, jobs, waivers, and reports. The job run is stored before a worker can start it. Delivery goes through a transactional outbox.
An AAG task is stored and queued on its own. Explain and generate do not write a check result and do not start a job or a remediation. The API returns credential metadata, not the secret.