Multi-agent system
Fifteen specialist roles, typed artifact handoffs, activation rules, guardrails, model tiers, and architecture-impact adjudication.
Agents collaborate through validated artifacts—not hidden chain-of-thought. Every artifact records its agent definition version, model, context hash, evidence IDs, confidence, usage, latency, and decision summary.
Role registry
| Role | Primary responsibility | Typical tier |
|---|---|---|
| Audit Coordinator | scope, activation, stage and retry decisions | Luna |
| Context Curator | assemble bounded ContextPacks | Luna |
| Evidence Verifier | reject unsupported claims and contradictions | Luna |
| Security Engineer | technical vulnerabilities and control failures | Terra |
| Security Architect | boundaries, reachability, blast radius, structural weakness | Terra |
| Cloud/IaC Analyst | infrastructure entities, policy, network, identity | Terra |
| CI/CD Analyst | pipeline, artifact, deployment, and provenance relationships | Terra |
| Threat Modeler | assets, actors, paths, abuse cases, mitigations | Terra |
| Remediation Engineer | deterministic patch proposal and static rescan plan | Terra |
| Diagram Architect | safe views of the canonical graph | Terra |
| Report Synthesizer / Adjudicator | reconcile artifacts into canonical JSON | Terra |
| Finding Architecture Impact Adjudicator | determine whether scanner observations materially affect evidenced architecture | Terra |
| Compliance Control Analyst | map evidence to bounded assurance questions without certifying compliance | Terra |
| Architecture Diagnostic Analyst | identify gaps, contradictions, staleness, and unlinked signals | Luna |
| Architecture History Analyst | explain changes between comparable truth snapshots | Luna |
Sol-class models are reserved for an explicitly approved deep review. They are never selected merely because another agent failed.
YAML definitions
Definitions under resources/llm/prompts, resources/llm/skills, and resources/llm/workflows in the Veriom API repository are versioned and validated at startup. Each definition declares:
- role and activation rules;
- model tier and bounded tools;
- Pydantic input and output schemas;
- token, latency, and cost limits;
- memory policy and evidence requirements;
- prompt-injection, secret, and unsupported-claim guardrails.
Unknown tools, invalid schemas, unsafe dynamic imports, or missing versions fail startup and CI.
Evidence adjudication
An observation becomes canonical only after the verifier can resolve every cited evidence ID in the same audit and workspace. Unsupported claims remain hypotheses. Conflicting agent artifacts are retained and sent to adjudication with the underlying evidence—not resolved by majority vote.
For scanner observations, citation validity is necessary but not sufficient. Architecture relevance requires a concrete affected entity, relationship, trust boundary, identity, pipeline, data flow, or constraint. An automatic exclusion requires scanner evidence plus independent structural evidence for a concrete exclusion. Missing deployment, cloud, runtime, or reachability evidence routes to human review.