How miladsrc/ai-swe-engine works
SASE Engine is an offline AI-assisted software-development platform with a governed, auditable lifecycle. Humans initiate projects and make required approval decisions; agents draft requirements and specifications, then generate code and real test evidence. The orchestrator coordinates these stages through the traceability API, which enforces identity and merge gates and records artifacts. The README documents the broad workflow and capabilities; source excerpts show selected agent, API, and persistence details, so some subsystem links below reflect documented behavior rather than inspected implementations.
Main entry points: main.py FastAPI application · audit.py Audit log · orchestrator.py Pipeline orchestrator · coder_agent.py Coder agent
Components 30
Development workflow
- Pipeline orchestrator
agents/orchestrator.py - Product agent
agents/product_agent.py - Spec agent
agents/spec_agent.py - Coder agent
agents/coder_agent.py
Agent runtime
- Reviewer agent
agents/reviewer.py - Verifier
agents/verifier.py - LLM backends
agents/llm.py - Engine client
agents/engine_client.py - Evidence checks
agents/verification.py - Security scanner
agents/scanner.py
Traceability and governance
- FastAPI application
api/main.py - Project requirements
api/routers/requirements.py - Agent run records
api/routers/agent_runs.py - Blueprints
api/routers/blueprints.py - Change requests
api/routers/crp.py - Merge requests
api/routers/mrp.py - Decision records
api/routers/vcr.py - CI evidence
api/routers/evidence.py - Verification requests
api/routers/verification_requests.py - Traceability views
api/routers/traceability.py - Authentication
api/routers/auth.py - Advisory review API
api/routers/review.py - Governance gates
api/gates.py - Identity enforcement
api/security.py - Audit log
api/audit.py
Interfaces and state
- Web dashboard
static/ui/app.js - Artifact models
api/models.py - PostgreSQL
api/database.py
Other components
- Human
- Local Ollama
Connections 48
- Human → Web dashboard: uses
- Human → FastAPI application: submits decisions
README.md - Web dashboard → FastAPI application: calls
- Pipeline orchestrator → Product agent: runs
agents/orchestrator.py - Pipeline orchestrator → Spec agent: runs
agents/orchestrator.py - Pipeline orchestrator → Coder agent: runs
agents/orchestrator.py - Pipeline orchestrator → Reviewer agent: spawns
agents/orchestrator.py - Pipeline orchestrator → Verifier: spawns
agents/orchestrator.py - Product agent → LLM backends: drafts with
agents/product_agent.py - Spec agent → LLM backends: generates with
agents/spec_agent.py - Coder agent → LLM backends: generates with
agents/coder_agent.py - Coder agent → Security scanner: scans code
agents/coder_agent.py - Coder agent → Evidence checks: runs checks
README.md - LLM backends → Local Ollama: requests inference
agents/llm.py - Product agent → Engine client: calls API
agents/product_agent.py - Spec agent → Engine client: calls API
agents/spec_agent.py - Coder agent → Engine client: records artifacts
agents/coder_agent.py - Reviewer agent → Engine client: submits review
agents/reviewer.py - Verifier → Evidence checks: checks commit
agents/verifier.py - Engine client → FastAPI application: sends requests
README.md - FastAPI application → Project requirements: registers routes
api/main.py - FastAPI application → Agent run records: registers routes
api/main.py - FastAPI application → Blueprints: registers routes
api/main.py - FastAPI application → Change requests: registers routes
api/main.py - FastAPI application → Merge requests: registers routes
api/main.py - FastAPI application → Decision records: registers routes
api/main.py - FastAPI application → CI evidence: registers routes
api/main.py - FastAPI application → Verification requests: registers routes
api/main.py - FastAPI application → Traceability views: registers routes
api/main.py - FastAPI application → Authentication: registers routes
api/main.py - FastAPI application → Advisory review API: registers routes
api/main.py - Project requirements → Governance gates: enforces
api/routers/requirements.py - Merge requests → Governance gates: checks readiness
api/routers/mrp.py - Advisory review API → Identity enforcement: requires reviewer identity
api/routers/review.py - Authentication → Audit log: records actions
api/routers/auth.py - Agent run records → Audit log: records actions
api/routers/agent_runs.py - Change requests → Governance gates: checks blockers
api/routers/crp.py - Project requirements → Audit log: records actions
api/routers/requirements.py - Merge requests → Audit log: records actions
api/routers/mrp.py - Decision records → Audit log: records decisions
api/routers/vcr.py - CI evidence → Audit log: records actions
api/routers/evidence.py - Verification requests → Audit log: records actions
api/routers/verification_requests.py - Advisory review API → Audit log: records review
api/routers/review.py - Agent run records → Artifact models: persists records
api/routers/agent_runs.py - Merge requests → Artifact models: reads and writes
api/routers/mrp.py - Audit log → Artifact models: creates entries
api/audit.py - Artifact models → PostgreSQL: uses ORM base
api/models.py - FastAPI application → PostgreSQL: opens sessions
api/main.py