Assurance WorkspaceDemo sessionConsoleDIntake Adapters
Every way evidence can enter. An adapter transforms producer-native records into evidence envelopes — registration does not prove evidence is flowing.
Producer adapters
Read/transform adapters over producer-native records. They do not start scans, enqueue jobs, or write assurance.
- SaaS Static Scanner Adapterready
producer: saas-static
Transforms producer records into evidence envelopes when producer data exists.
- SaaS Runtime Tests Adapterready
producer: saas-runtime
Transforms producer records into evidence envelopes when producer data exists.
- Compliance Wizard Adapterready
producer: saas-wizard
Transforms producer records into evidence envelopes when producer data exists.
- AI Inventory Adapterready
producer: saas-inventory
Transforms producer records into evidence envelopes when producer data exists.
- Regulatory Engine Adapterready
producer: saas-regulatory
Transforms producer records into evidence envelopes when producer data exists.
- GitHub Evidence Adapterready
producer: ci-cd-scanner
Transforms producer records into evidence envelopes when producer data exists.
- CI/CD Scanner Adapterready
producer: ci-cd-scanner
Transforms producer records into evidence envelopes when producer data exists.
- SARIF Import Adapterready
producer: sarif-import
Transforms producer records into evidence envelopes when producer data exists.
Direct intake paths
Surfaces and APIs that accept evidence directly. Each preserves its own provenance and limitations.
- Structured event ingressAPI
JSON events, state snapshots, capability and relation declarations through the bounded batch API.
Ingest contract → - OTLP telemetry receiverAPI
Traces, metrics, and logs from a running system with a scoped ingest token.
Connect telemetry → - Cloud IAM grant observation
Observes what bound provider credentials can technically reach — grant evidence, never a verdict.
Open IAM intake → - DAI document upload
Policy and delegation documents parsed into declared-evidence facts for an AI system.
Upload DAI evidence → - Telecom intakespecialized
Telecom evidence intake — A1 policy events, slice/session records for telecom-scenario evaluation.
- Estate import (CSV / JSON)
Bulk declaration of AI systems and assets — declared evidence, not verified connectivity.
Import systems → - SARIF / scan import
External scanner results imported as evidence records with external-source limitations.
Import a report →
Held producers
Registered in the producer registry but disconnected. MCP_TO_SAAS_EVIDENCE_INGESTION_HOLD remains active — these cannot feed evidence today.
- AI AppSec (MCP)held
producer: mcp-ai-appsec
Open-source static analysis package. Registered producer, ingestion held.
- MCP Tenant Isolationheld
producer: mcp-tenant-isolation
Tenant isolation checks for MCP server code. Registered producer, ingestion held.