# khilaraj123/uaa architecture

> Architecture diagram of the GitHub repository khilaraj123/uaa, generated by GitDiagram from its file tree, README and a sample of source files (last updated 2026-11-10). It is an AI-made overview: check details against the source.

- Interactive diagram: https://gitdiagram.com/khilaraj123/uaa
- Repository: https://github.com/khilaraj123/uaa

## Overview

UAA turns API code and artifacts into evidence-backed assurance results: discovery feeds endpoint inventories, agents perform semantic understanding and adversarial test design, and the deterministic engine executes specifications, evaluates assertions, tracks coverage, audits security, and reports run history. The CLI is the sampled runtime entry point; framework adapters and agent-skill stages are included as documented capabilities. Unsampled agent internals and discovery-to-CLI wiring are not inferred.

Main entry points: [`engine/cli.py`](https://github.com/khilaraj123/uaa/blob/main/engine/cli.py) (Assurance CLI), [`adapters/discovery/__init__.py`](https://github.com/khilaraj123/uaa/blob/main/adapters/discovery/__init__.py) (Discovery Adapters), [`engine/execution/runner.py`](https://github.com/khilaraj123/uaa/blob/main/engine/execution/runner.py) (Execution Runner), [`skills/api-discovery/SKILL.md`](https://github.com/khilaraj123/uaa/blob/main/skills/api-discovery/SKILL.md) (Discovery Review)

## Diagram (Mermaid)

```mermaid
flowchart TD

subgraph group_agents["Agent Workflow"]
  node_orchestrator["Audit Orchestrator<br/>[SKILL.md]"]
  node_discovery_skill["Discovery Review<br/>[SKILL.md]"]
  node_understanding["Semantic Understanding<br/>[SKILL.md]"]
  node_test_design["Adversarial Test Design<br/>[SKILL.md]"]
  node_test_review["Test Review<br/>[SKILL.md]"]
  node_execution_skill["Execution Skill<br/>[SKILL.md]"]
  node_security_skill["Security Audit Skill<br/>[SKILL.md]"]
  node_reporting_skill["Reporting Skill<br/>[SKILL.md]"]
end

subgraph group_discovery["API Discovery"]
  node_adapter_registry["Discovery Adapters<br/>[__init__.py]"]
  node_discovery_base["Adapter Interface<br/>[base.py]"]
  node_fastapi_adapter["FastAPI Adapter<br/>[fastapi_adapter.py]"]
  node_express_adapter["Express Adapter<br/>[express_adapter.py]"]
  node_dotnet_adapter[".NET Adapter<br/>[dotnet_adapter.py]"]
end

subgraph group_engine["Assurance Engine"]
  node_endpoint_model["Endpoint Models<br/>[models.py]"]
  node_cli["Assurance CLI<br/>[cli.py]"]
  node_runner["Execution Runner<br/>[runner.py]"]
  node_evaluator["Assertion Evaluator<br/>[evaluator.py]"]
  node_coverage["Coverage Ledger<br/>[ledger.py]"]
  node_security["Security Analyzer<br/>[rules.py]"]
  node_findings["Finding Store<br/>[findings.py]"]
  node_protocol_adapters["Protocol Adapters"]
end

subgraph group_outputs["Results and Validation"]
  node_history[("Run History<br/>[history.py]")]
  node_reporter["Audit Reports<br/>[reporter.py]"]
  node_validators["Artifact Validators"]
  node_schema_validator["Schema Validation"]
end

node_user(("Engineer"))
node_target_api{{"Target API"}}

node_user -->|"initiates audit"| node_orchestrator
node_orchestrator -->|"coordinates"| node_discovery_skill
node_discovery_skill -->|"reviews discovery"| node_understanding
node_understanding -->|"traces behavior"| node_test_design
node_test_design -->|"submits scenarios"| node_test_review
node_test_review -->|"approves tests"| node_execution_skill
node_execution_skill -->|"passes evidence"| node_security_skill
node_security_skill -->|"passes findings"| node_reporting_skill
node_discovery_skill -->|"uses adapters"| node_adapter_registry
node_adapter_registry -->|"registers"| node_fastapi_adapter
node_adapter_registry -->|"registers"| node_express_adapter
node_adapter_registry -->|"registers"| node_dotnet_adapter
node_fastapi_adapter -->|"implements"| node_discovery_base
node_express_adapter -->|"implements"| node_discovery_base
node_dotnet_adapter -->|"implements"| node_discovery_base
node_fastapi_adapter -->|"creates endpoints"| node_endpoint_model
node_express_adapter -->|"creates endpoints"| node_endpoint_model
node_dotnet_adapter -->|"creates endpoints"| node_endpoint_model
node_user -->|"runs commands"| node_cli
node_cli -->|"executes suite"| node_runner
node_runner -->|"sends requests"| node_target_api
node_runner -->|"evaluates assertions"| node_evaluator
node_cli -->|"builds ledger"| node_coverage
node_cli -->|"runs audit"| node_security
node_security -->|"records findings"| node_findings
node_cli -->|"tracks runs"| node_history
node_cli -->|"generates reports"| node_reporter
node_cli -->|"validates artifacts"| node_validators
node_validators -->|"checks schemas"| node_schema_validator
node_execution_skill -.->|"supports protocols"| node_protocol_adapters
node_protocol_adapters -->|"executes scenarios"| node_runner
node_cli -.->|"discovers endpoints"| node_adapter_registry

click node_orchestrator "https://github.com/khilaraj123/uaa/blob/main/skills/api-audit-orchestrator/SKILL.md"
click node_discovery_skill "https://github.com/khilaraj123/uaa/blob/main/skills/api-discovery/SKILL.md"
click node_understanding "https://github.com/khilaraj123/uaa/blob/main/skills/api-understanding/SKILL.md"
click node_test_design "https://github.com/khilaraj123/uaa/blob/main/skills/api-test-design/SKILL.md"
click node_test_review "https://github.com/khilaraj123/uaa/blob/main/skills/api-test-review/SKILL.md"
click node_execution_skill "https://github.com/khilaraj123/uaa/blob/main/skills/api-test-execution/SKILL.md"
click node_security_skill "https://github.com/khilaraj123/uaa/blob/main/skills/api-security-audit/SKILL.md"
click node_reporting_skill "https://github.com/khilaraj123/uaa/blob/main/skills/api-reporting/SKILL.md"
click node_adapter_registry "https://github.com/khilaraj123/uaa/blob/main/adapters/discovery/__init__.py"
click node_discovery_base "https://github.com/khilaraj123/uaa/blob/main/adapters/discovery/base.py"
click node_fastapi_adapter "https://github.com/khilaraj123/uaa/blob/main/adapters/discovery/fastapi/fastapi_adapter.py"
click node_express_adapter "https://github.com/khilaraj123/uaa/blob/main/adapters/discovery/express/express_adapter.py"
click node_dotnet_adapter "https://github.com/khilaraj123/uaa/blob/main/adapters/discovery/dotnet/dotnet_adapter.py"
click node_endpoint_model "https://github.com/khilaraj123/uaa/blob/main/engine/specification/models.py"
click node_cli "https://github.com/khilaraj123/uaa/blob/main/engine/cli.py"
click node_runner "https://github.com/khilaraj123/uaa/blob/main/engine/execution/runner.py"
click node_evaluator "https://github.com/khilaraj123/uaa/blob/main/engine/assertions/evaluator.py"
click node_coverage "https://github.com/khilaraj123/uaa/blob/main/engine/coverage/ledger.py"
click node_security "https://github.com/khilaraj123/uaa/blob/main/engine/security/rules.py"
click node_findings "https://github.com/khilaraj123/uaa/blob/main/engine/security/findings.py"
click node_protocol_adapters "https://github.com/khilaraj123/uaa/tree/main/adapters/protocols"
click node_history "https://github.com/khilaraj123/uaa/blob/main/engine/reporting/history.py"
click node_reporter "https://github.com/khilaraj123/uaa/blob/main/engine/reporting/reporter.py"
click node_validators "https://github.com/khilaraj123/uaa/tree/main/validators"
click node_schema_validator "https://github.com/khilaraj123/uaa/blob/main/validators/schema_validator.py"

classDef toneNeutral fill:#f8fafc,stroke:#334155,stroke-width:1.5px,color:#0f172a
classDef toneBlue fill:#dbeafe,stroke:#2563eb,stroke-width:1.5px,color:#172554
classDef toneAmber fill:#fef3c7,stroke:#d97706,stroke-width:1.5px,color:#78350f
classDef toneMint fill:#dcfce7,stroke:#16a34a,stroke-width:1.5px,color:#14532d
classDef toneRose fill:#ffe4e6,stroke:#e11d48,stroke-width:1.5px,color:#881337
classDef toneIndigo fill:#e0e7ff,stroke:#4f46e5,stroke-width:1.5px,color:#312e81
classDef toneTeal fill:#ccfbf1,stroke:#0f766e,stroke-width:1.5px,color:#134e4a
class node_orchestrator,node_discovery_skill,node_understanding,node_test_design,node_test_review,node_execution_skill,node_security_skill,node_reporting_skill toneBlue
class node_adapter_registry,node_discovery_base,node_fastapi_adapter,node_express_adapter,node_dotnet_adapter toneAmber
class node_endpoint_model,node_cli,node_runner,node_evaluator,node_coverage,node_security,node_findings,node_protocol_adapters,node_target_api toneMint
class node_history,node_reporter,node_validators,node_schema_validator toneRose
class node_user toneIndigo
```

## Components

### Agent Workflow

- [Audit Orchestrator](https://github.com/khilaraj123/uaa/blob/main/skills/api-audit-orchestrator/SKILL.md): `skills/api-audit-orchestrator/SKILL.md`
- [Discovery Review](https://github.com/khilaraj123/uaa/blob/main/skills/api-discovery/SKILL.md): `skills/api-discovery/SKILL.md`
- [Semantic Understanding](https://github.com/khilaraj123/uaa/blob/main/skills/api-understanding/SKILL.md): `skills/api-understanding/SKILL.md`
- [Adversarial Test Design](https://github.com/khilaraj123/uaa/blob/main/skills/api-test-design/SKILL.md): `skills/api-test-design/SKILL.md`
- [Test Review](https://github.com/khilaraj123/uaa/blob/main/skills/api-test-review/SKILL.md): `skills/api-test-review/SKILL.md`
- [Execution Skill](https://github.com/khilaraj123/uaa/blob/main/skills/api-test-execution/SKILL.md): `skills/api-test-execution/SKILL.md`
- [Security Audit Skill](https://github.com/khilaraj123/uaa/blob/main/skills/api-security-audit/SKILL.md): `skills/api-security-audit/SKILL.md`
- [Reporting Skill](https://github.com/khilaraj123/uaa/blob/main/skills/api-reporting/SKILL.md): `skills/api-reporting/SKILL.md`

### API Discovery

- [Discovery Adapters](https://github.com/khilaraj123/uaa/blob/main/adapters/discovery/__init__.py): `adapters/discovery/__init__.py`
- [Adapter Interface](https://github.com/khilaraj123/uaa/blob/main/adapters/discovery/base.py): `adapters/discovery/base.py`
- [FastAPI Adapter](https://github.com/khilaraj123/uaa/blob/main/adapters/discovery/fastapi/fastapi_adapter.py): `adapters/discovery/fastapi/fastapi_adapter.py`
- [Express Adapter](https://github.com/khilaraj123/uaa/blob/main/adapters/discovery/express/express_adapter.py): `adapters/discovery/express/express_adapter.py`
- [.NET Adapter](https://github.com/khilaraj123/uaa/blob/main/adapters/discovery/dotnet/dotnet_adapter.py): `adapters/discovery/dotnet/dotnet_adapter.py`

### Assurance Engine

- [Endpoint Models](https://github.com/khilaraj123/uaa/blob/main/engine/specification/models.py): `engine/specification/models.py`
- [Assurance CLI](https://github.com/khilaraj123/uaa/blob/main/engine/cli.py): `engine/cli.py`
- [Execution Runner](https://github.com/khilaraj123/uaa/blob/main/engine/execution/runner.py): `engine/execution/runner.py`
- [Assertion Evaluator](https://github.com/khilaraj123/uaa/blob/main/engine/assertions/evaluator.py): `engine/assertions/evaluator.py`
- [Coverage Ledger](https://github.com/khilaraj123/uaa/blob/main/engine/coverage/ledger.py): `engine/coverage/ledger.py`
- [Security Analyzer](https://github.com/khilaraj123/uaa/blob/main/engine/security/rules.py): `engine/security/rules.py`
- [Finding Store](https://github.com/khilaraj123/uaa/blob/main/engine/security/findings.py): `engine/security/findings.py`
- [Protocol Adapters](https://github.com/khilaraj123/uaa/tree/main/adapters/protocols): `adapters/protocols`

### Results and Validation

- [Run History](https://github.com/khilaraj123/uaa/blob/main/engine/reporting/history.py): `engine/reporting/history.py`
- [Audit Reports](https://github.com/khilaraj123/uaa/blob/main/engine/reporting/reporter.py): `engine/reporting/reporter.py`
- [Artifact Validators](https://github.com/khilaraj123/uaa/tree/main/validators): `validators`
- [Schema Validation](https://github.com/khilaraj123/uaa/blob/main/validators/schema_validator.py): `validators/schema_validator.py`

### Other components

- **Engineer**
- **Target API**

## Connections

- Engineer → Audit Orchestrator: initiates audit (evidence: `README.md`)
- Audit Orchestrator → Discovery Review: coordinates (evidence: `README.md`)
- Discovery Review → Semantic Understanding: reviews discovery (evidence: `README.md`)
- Semantic Understanding → Adversarial Test Design: traces behavior (evidence: `README.md`)
- Adversarial Test Design → Test Review: submits scenarios (evidence: `README.md`)
- Test Review → Execution Skill: approves tests (evidence: `README.md`)
- Execution Skill → Security Audit Skill: passes evidence (evidence: `README.md`)
- Security Audit Skill → Reporting Skill: passes findings (evidence: `README.md`)
- Discovery Review → Discovery Adapters: uses adapters (evidence: `README.md`)
- Discovery Adapters → FastAPI Adapter: registers (evidence: `adapters/discovery/__init__.py`)
- Discovery Adapters → Express Adapter: registers (evidence: `adapters/discovery/__init__.py`)
- Discovery Adapters → .NET Adapter: registers (evidence: `adapters/discovery/__init__.py`)
- FastAPI Adapter → Adapter Interface: implements (evidence: `adapters/discovery/fastapi/fastapi_adapter.py`)
- Express Adapter → Adapter Interface: implements (evidence: `adapters/discovery/express/express_adapter.py`)
- .NET Adapter → Adapter Interface: implements (evidence: `adapters/discovery/dotnet/dotnet_adapter.py`)
- FastAPI Adapter → Endpoint Models: creates endpoints (evidence: `adapters/discovery/fastapi/fastapi_adapter.py`)
- Express Adapter → Endpoint Models: creates endpoints (evidence: `adapters/discovery/express/express_adapter.py`)
- .NET Adapter → Endpoint Models: creates endpoints (evidence: `adapters/discovery/dotnet/dotnet_adapter.py`)
- Engineer → Assurance CLI: runs commands (evidence: `engine/cli.py`)
- Assurance CLI → Execution Runner: executes suite (evidence: `engine/cli.py`)
- Execution Runner → Target API: sends requests (evidence: `README.md`)
- Execution Runner → Assertion Evaluator: evaluates assertions (evidence: `engine/execution/runner.py`)
- Assurance CLI → Coverage Ledger: builds ledger (evidence: `engine/cli.py`)
- Assurance CLI → Security Analyzer: runs audit (evidence: `engine/cli.py`)
- Security Analyzer → Finding Store: records findings (evidence: `engine/security/rules.py`)
- Assurance CLI → Run History: tracks runs (evidence: `engine/cli.py`)
- Assurance CLI → Audit Reports: generates reports (evidence: `engine/cli.py`)
- Assurance CLI → Artifact Validators: validates artifacts (evidence: `engine/cli.py`)
- Artifact Validators → Schema Validation: checks schemas (evidence: `validators/validate_testspec.py`)
- Execution Skill → Protocol Adapters: supports protocols
- Protocol Adapters → Execution Runner: executes scenarios (evidence: `adapters/protocols/http/http_adapter.py`)
- Assurance CLI → Discovery Adapters: discovers endpoints