How khilaraj123/uaa works
UAA turns API code and artifacts into evidence-backed assurance results: discovery feeds endpoint inventories, agents perform semantic understanding and adversarial test design, and the deterministic engine executes specifications, evaluates assertions, tracks coverage, audits security, and reports run history. The CLI is the sampled runtime entry point; framework adapters and agent-skill stages are included as documented capabilities. Unsampled agent internals and discovery-to-CLI wiring are not inferred.
Main entry points: cli.py Assurance CLI · __init__.py Discovery Adapters · runner.py Execution Runner · SKILL.md Discovery Review
Components 27
Agent Workflow
- Audit Orchestrator
skills/api-audit-orchestrator/SKILL.md - Discovery Review
skills/api-discovery/SKILL.md - Semantic Understanding
skills/api-understanding/SKILL.md - Adversarial Test Design
skills/api-test-design/SKILL.md - Test Review
skills/api-test-review/SKILL.md - Execution Skill
skills/api-test-execution/SKILL.md - Security Audit Skill
skills/api-security-audit/SKILL.md - Reporting Skill
skills/api-reporting/SKILL.md
API Discovery
- Discovery Adapters
adapters/discovery/__init__.py - Adapter Interface
adapters/discovery/base.py - FastAPI Adapter
adapters/discovery/fastapi/fastapi_adapter.py - Express Adapter
adapters/discovery/express/express_adapter.py - .NET Adapter
adapters/discovery/dotnet/dotnet_adapter.py
Assurance Engine
- Endpoint Models
engine/specification/models.py - Assurance CLI
engine/cli.py - Execution Runner
engine/execution/runner.py - Assertion Evaluator
engine/assertions/evaluator.py - Coverage Ledger
engine/coverage/ledger.py - Security Analyzer
engine/security/rules.py - Finding Store
engine/security/findings.py - Protocol Adapters
adapters/protocols
Results and Validation
- Run History
engine/reporting/history.py - Audit Reports
engine/reporting/reporter.py - Artifact Validators
validators - Schema Validation
validators/schema_validator.py
Other components
- Engineer
- Target API
Connections 32
- Engineer → Audit Orchestrator: initiates audit
README.md - Audit Orchestrator → Discovery Review: coordinates
README.md - Discovery Review → Semantic Understanding: reviews discovery
README.md - Semantic Understanding → Adversarial Test Design: traces behavior
README.md - Adversarial Test Design → Test Review: submits scenarios
README.md - Test Review → Execution Skill: approves tests
README.md - Execution Skill → Security Audit Skill: passes evidence
README.md - Security Audit Skill → Reporting Skill: passes findings
README.md - Discovery Review → Discovery Adapters: uses adapters
README.md - Discovery Adapters → FastAPI Adapter: registers
adapters/discovery/__init__.py - Discovery Adapters → Express Adapter: registers
adapters/discovery/__init__.py - Discovery Adapters → .NET Adapter: registers
adapters/discovery/__init__.py - FastAPI Adapter → Adapter Interface: implements
adapters/discovery/fastapi/fastapi_adapter.py - Express Adapter → Adapter Interface: implements
adapters/discovery/express/express_adapter.py - .NET Adapter → Adapter Interface: implements
adapters/discovery/dotnet/dotnet_adapter.py - FastAPI Adapter → Endpoint Models: creates endpoints
adapters/discovery/fastapi/fastapi_adapter.py - Express Adapter → Endpoint Models: creates endpoints
adapters/discovery/express/express_adapter.py - .NET Adapter → Endpoint Models: creates endpoints
adapters/discovery/dotnet/dotnet_adapter.py - Engineer → Assurance CLI: runs commands
engine/cli.py - Assurance CLI → Execution Runner: executes suite
engine/cli.py - Execution Runner → Target API: sends requests
README.md - Execution Runner → Assertion Evaluator: evaluates assertions
engine/execution/runner.py - Assurance CLI → Coverage Ledger: builds ledger
engine/cli.py - Assurance CLI → Security Analyzer: runs audit
engine/cli.py - Security Analyzer → Finding Store: records findings
engine/security/rules.py - Assurance CLI → Run History: tracks runs
engine/cli.py - Assurance CLI → Audit Reports: generates reports
engine/cli.py - Assurance CLI → Artifact Validators: validates artifacts
engine/cli.py - Artifact Validators → Schema Validation: checks schemas
validators/validate_testspec.py - Execution Skill → Protocol Adapters: supports protocols
- Protocol Adapters → Execution Runner: executes scenarios
adapters/protocols/http/http_adapter.py - Assurance CLI → Discovery Adapters: discovers endpoints