icdev 0.0.3__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- args/agent_config.yaml +113 -0
- args/audit_regimes/cisa_sbd.json +381 -0
- args/audit_regimes/cmmc_l2.json +906 -0
- args/audit_regimes/dod_cssp.json +393 -0
- args/audit_regimes/dodi_5000_87.json +297 -0
- args/audit_regimes/fedramp_moderate.json +650 -0
- args/audit_regimes/ieee_1012.json +373 -0
- args/audit_regimes/nist_800_171.json +624 -0
- args/audit_regimes/nist_800_53.json +907 -0
- args/cloudforge_blueprints/aws_commercial.yaml +29 -0
- args/cloudforge_blueprints/aws_govcloud_il4.yaml +34 -0
- args/cloudforge_blueprints/aws_govcloud_il5.yaml +38 -0
- args/cloudforge_blueprints/azure_commercial.yaml +28 -0
- args/cloudforge_blueprints/azure_gov_il4.yaml +32 -0
- args/cloudforge_blueprints/azure_gov_il5.yaml +36 -0
- args/cloudforge_blueprints/gcp_commercial.yaml +28 -0
- args/cloudforge_blueprints/oci_commercial.yaml +28 -0
- args/cloudforge_config.yaml +231 -0
- args/cloudforge_runbook_templates/backup_verify.yaml +98 -0
- args/cloudforge_runbook_templates/dr_failover.yaml +107 -0
- args/cloudforge_runbook_templates/health_check.yaml +97 -0
- args/cloudforge_runbook_templates/incident_response.yaml +101 -0
- args/cloudforge_runbook_templates/migration_cutover.yaml +105 -0
- args/cloudforge_runbook_templates/patch_rollout.yaml +92 -0
- args/cloudforge_runbook_templates/zone_provision.yaml +93 -0
- args/code_pattern_config.yaml +151 -0
- args/code_quality_config.yaml +47 -0
- args/compliance_config.yaml +17 -0
- args/control_inheritance.yaml +177 -0
- args/csp_mcp_config.yaml +41 -0
- args/cui_markings.yaml +35 -0
- args/databridge_config.yaml +232 -0
- args/db_config.yaml +116 -0
- args/decision_tables/agent_trust_decision.yaml +143 -0
- args/decision_tables/ato_boundary_impact.yaml +132 -0
- args/decision_tables/deployment_approval.yaml +152 -0
- args/degradation_matrix.yaml +163 -0
- args/devsecops_config.yaml +286 -0
- args/endpoint_security_config.yaml +207 -0
- args/exit_criteria.yaml +102 -0
- args/feature_flags.yaml +235 -0
- args/file_access_tiers.yaml +88 -0
- args/forge_studio/blueprint_config.yaml +27 -0
- args/forge_studio/component_catalog.json +411 -0
- args/forge_studio/workflow_templates.yaml +103 -0
- args/govcon_config.yaml +41 -0
- args/harness_config.yaml +67 -0
- args/innovation_config.yaml +321 -0
- args/knowledge_graph_config.yaml +113 -0
- args/llm_config.yaml +222 -0
- args/marketplace_config.yaml +260 -0
- args/monitoring_config.yaml +127 -0
- args/mosa_config.yaml +190 -0
- args/observability_tracing_config.yaml +170 -0
- args/owasp_agentic_config.yaml +171 -0
- args/pipeline_gates.yaml +197 -0
- args/project_defaults.yaml +235 -0
- args/prompt_chains.yaml +163 -0
- args/rag_config.yaml +167 -0
- args/research_config.yaml +89 -0
- args/resilience_config.yaml +197 -0
- args/ricoas_config.yaml +191 -0
- args/security_gates.yaml +763 -0
- args/storage_config.yaml +63 -0
- args/writeguard_config.yaml +131 -0
- args/zta_config.yaml +247 -0
- context/__init__.py +6 -0
- context/agent/__init__.py +6 -0
- context/agent/response_schemas/__init__.py +6 -0
- context/agent/response_schemas/debate_position.json +46 -0
- context/agent/response_schemas/fitness_scorecard.json +74 -0
- context/agent/response_schemas/review_decision.json +39 -0
- context/agent/response_schemas/task_decomposition.json +82 -0
- context/agent/response_schemas/veto_decision.json +40 -0
- context/agentic/__init__.py +6 -0
- context/agentic/architecture_patterns.md +269 -0
- context/agentic/capability_registry.yaml +223 -0
- context/agentic/csp_integration.md +30 -0
- context/agentic/csp_mcp_registry.yaml +280 -0
- context/agentic/fitness_rubric.md +56 -0
- context/agentic/governance_baseline.md +205 -0
- context/ci/__init__.py +6 -0
- context/ci/worktree_templates.json +44 -0
- context/cloud/__init__.py +6 -0
- context/cloud/csp_service_registry.json +739 -0
- context/compliance/__init__.py +6 -0
- context/compliance/ai_rmf_crosswalk.yaml +226 -0
- context/compliance/atlas_mitigations.json +293 -0
- context/compliance/atlas_techniques.json +833 -0
- context/compliance/cisa_sbd_requirements.json +477 -0
- context/compliance/cjis_security_policy.json +522 -0
- context/compliance/cmmc_practices.json +2494 -0
- context/compliance/cmmc_report_template.md +142 -0
- context/compliance/cnssi_1253_overlay.json +109 -0
- context/compliance/control_crosswalk.json +1914 -0
- context/compliance/control_families/__init__.py +6 -0
- context/compliance/csp_certifications.json +251 -0
- context/compliance/cssp_report_template.md +193 -0
- context/compliance/cui_templates/__init__.py +6 -0
- context/compliance/cui_templates/banner_block.txt +4 -0
- context/compliance/cui_templates/code_header.txt +8 -0
- context/compliance/cui_templates/document_template.md +35 -0
- context/compliance/data_type_framework_map.json +321 -0
- context/compliance/data_type_registry.json +147 -0
- context/compliance/dod_cssp_8530.json +463 -0
- context/compliance/eu_ai_act_annex_iii.json +108 -0
- context/compliance/export_templates/__init__.py +6 -0
- context/compliance/export_templates/emass_controls.csv.j2 +4 -0
- context/compliance/export_templates/evidence_package.md.j2 +39 -0
- context/compliance/export_templates/executive_summary.md.j2 +55 -0
- context/compliance/export_templates/poam_tracking.csv.j2 +4 -0
- context/compliance/fedramp_20x_ksi_schemas.json +133 -0
- context/compliance/fedramp_high_baseline.json +4370 -0
- context/compliance/fedramp_moderate_baseline.json +2183 -0
- context/compliance/fedramp_report_template.md +181 -0
- context/compliance/fips_200_areas.json +362 -0
- context/compliance/gao_ai_accountability.json +262 -0
- context/compliance/hipaa_security_rule.json +720 -0
- context/compliance/hitrust_csf_v11.json +930 -0
- context/compliance/impact_level_profiles.json +251 -0
- context/compliance/incident_response_template.md +1110 -0
- context/compliance/iso27001_2022_controls.json +750 -0
- context/compliance/iso27001_nist_bridge.json +382 -0
- context/compliance/iso42001_controls.json +254 -0
- context/compliance/ivv_checklist_template.md +80 -0
- context/compliance/ivv_report_template.md +116 -0
- context/compliance/ivv_requirements.json +372 -0
- context/compliance/mosa_crosswalk.json +327 -0
- context/compliance/mosa_framework.json +250 -0
- context/compliance/narrative_templates/AC.md.j2 +101 -0
- context/compliance/narrative_templates/AU.md.j2 +106 -0
- context/compliance/narrative_templates/IA.md.j2 +104 -0
- context/compliance/narrative_templates/SC.md.j2 +102 -0
- context/compliance/narrative_templates/SI.md.j2 +111 -0
- context/compliance/narrative_templates/__init__.py +6 -0
- context/compliance/narrative_templates/default.md.j2 +50 -0
- context/compliance/narrative_templates/executive_summary.j2 +27 -0
- context/compliance/narrative_templates/poam_milestone.j2 +19 -0
- context/compliance/narrative_templates/ssp_section.j2 +11 -0
- context/compliance/nist_800_171_controls.json +1552 -0
- context/compliance/nist_800_207_crosswalk.json +399 -0
- context/compliance/nist_800_207_zta.json +258 -0
- context/compliance/nist_800_53.json +324 -0
- context/compliance/nist_ai_600_1_genai.json +326 -0
- context/compliance/nist_ai_rmf.json +206 -0
- context/compliance/nist_sp_800_60_types.json +1667 -0
- context/compliance/omb_m25_21_high_impact_ai.json +248 -0
- context/compliance/omb_m26_04_unbiased_ai.json +262 -0
- context/compliance/owasp_agentic_asi.json +133 -0
- context/compliance/owasp_agentic_threats.json +285 -0
- context/compliance/owasp_llm_top10.json +274 -0
- context/compliance/pci_dss_v4.json +510 -0
- context/compliance/poam_template.md +117 -0
- context/compliance/safeai_controls.json +512 -0
- context/compliance/sbd_report_template.md +77 -0
- context/compliance/siem_config_templates/__init__.py +6 -0
- context/compliance/siem_config_templates/filebeat.yml +213 -0
- context/compliance/siem_config_templates/log_sources.json +208 -0
- context/compliance/soc2_trust_criteria.json +661 -0
- context/compliance/ssp_template.md +432 -0
- context/compliance/stig_templates/__init__.py +6 -0
- context/compliance/stig_templates/webapp_stig.json +139 -0
- context/compliance/xai_requirements.json +108 -0
- context/dashboard/__init__.py +6 -0
- context/dashboard/nlq_examples.json +50 -0
- context/dashboard/schema_descriptions.json +23 -0
- context/icdev_methodology.md +100 -0
- context/integration/__init__.py +6 -0
- context/integration/approval_workflows.json +32 -0
- context/integration/gitlab_field_mappings.json +33 -0
- context/integration/jira_field_mappings.json +32 -0
- context/integration/reqif_export_schema.json +23 -0
- context/integration/servicenow_field_mappings.json +22 -0
- context/languages/__init__.py +6 -0
- context/languages/framework_patterns.json +205 -0
- context/languages/language_registry.json +279 -0
- context/llm/__init__.py +6 -0
- context/llm/example_provider.py +89 -0
- context/marketplace/assets/writeguard-core.yaml +100 -0
- context/marketplace/assets/writeguard-govcon.yaml +45 -0
- context/marketplace/assets/writeguard-style-guides.yaml +44 -0
- context/mbse/__init__.py +6 -0
- context/mbse/des_report_template.md +162 -0
- context/mbse/des_requirements.json +411 -0
- context/mbse/digital_thread_patterns.json +403 -0
- context/mbse/reqif_schema.json +280 -0
- context/mbse/sysml_element_types.json +432 -0
- context/oscal/NIST_SP-800-53_rev5_catalog.json +254987 -0
- context/oscal/README.md +43 -0
- context/patterns/__init__.py +6 -0
- context/profiles/__init__.py +6 -0
- context/profiles/dod_baseline_v1.yaml +145 -0
- context/profiles/fedramp_baseline_v1.yaml +143 -0
- context/profiles/financial_baseline_v1.yaml +142 -0
- context/profiles/healthcare_baseline_v1.yaml +135 -0
- context/profiles/law_enforcement_v1.yaml +129 -0
- context/profiles/startup_v1.yaml +134 -0
- context/rag/source_mappings.json +42 -0
- context/requirements/__init__.py +6 -0
- context/requirements/ambiguity_patterns.json +97 -0
- context/requirements/boundary_impact_rules.json +123 -0
- context/requirements/default_constitutions.json +67 -0
- context/requirements/document_extraction_rules.json +58 -0
- context/requirements/gap_patterns.json +108 -0
- context/requirements/readiness_rubric.json +78 -0
- context/requirements/red_alternative_patterns.json +210 -0
- context/requirements/safe_templates.json +72 -0
- context/requirements/spec_quality_checklist.json +122 -0
- context/research/regulatory_registry.json +114 -0
- context/research/verticals/cybersecurity.json +127 -0
- context/research/verticals/defense.json +104 -0
- context/research/verticals/fintech.json +125 -0
- context/research/verticals/healthcare.json +118 -0
- context/research/verticals/logistics.json +117 -0
- context/research/verticals/trading.json +145 -0
- context/simulation/__init__.py +6 -0
- context/simulation/architecture_patterns.json +36 -0
- context/simulation/coa_templates.json +38 -0
- context/simulation/cost_models.json +23 -0
- context/simulation/risk_categories.json +46 -0
- context/supply_chain/__init__.py +6 -0
- context/supply_chain/isa_templates.json +129 -0
- context/supply_chain/nist_800_161_controls.json +247 -0
- context/supply_chain/scrm_risk_matrix.json +147 -0
- context/templates/__init__.py +6 -0
- context/templates/ansible/__init__.py +6 -0
- context/templates/ansible/playbooks/__init__.py +6 -0
- context/templates/ansible/roles/__init__.py +6 -0
- context/templates/gitlab_ci/__init__.py +6 -0
- context/templates/grafana/__init__.py +6 -0
- context/templates/kubernetes/__init__.py +6 -0
- context/templates/project/__init__.py +6 -0
- context/templates/project/api/__init__.py +6 -0
- context/templates/project/cli/__init__.py +6 -0
- context/templates/project/data_pipeline/__init__.py +6 -0
- context/templates/project/iac/__init__.py +6 -0
- context/templates/project/javascript_frontend/__init__.py +6 -0
- context/templates/project/javascript_frontend/src/__init__.py +6 -0
- context/templates/project/javascript_frontend/tests/__init__.py +6 -0
- context/templates/project/microservice/__init__.py +6 -0
- context/templates/project/python_backend/__init__.py +6 -0
- context/templates/project/python_backend/src/__init__.py +6 -0
- context/templates/project/python_backend/tests/__init__.py +6 -0
- context/templates/project/python_backend/tests/features/__init__.py +6 -0
- context/templates/project/python_backend/tests/steps/__init__.py +6 -0
- context/templates/terraform/__init__.py +6 -0
- context/templates/terraform/govcloud_base/__init__.py +6 -0
- context/templates/terraform/modules/__init__.py +6 -0
- context/tone/__init__.py +6 -0
- context/writing/grammar_rules/common_errors.json +306 -0
- context/writing/grammar_rules/govcon_vocabulary.json +113 -0
- context/writing/style_guides/academic.yaml +43 -0
- context/writing/style_guides/business.yaml +42 -0
- context/writing/style_guides/government.yaml +59 -0
- context/writing/style_guides/proposal.yaml +58 -0
- context/writing/style_guides/technical.yaml +43 -0
- docs/adr/README.md +66 -0
- docs/adr/connector-forge-decisions.md +318 -0
- docs/adr/core-decisions.md +289 -0
- docs/adr/db-decisions.md +94 -0
- docs/adr/harness-decisions.md +122 -0
- docs/adr/innovation-decisions.md +262 -0
- docs/adr/marketplace-decisions.md +109 -0
- docs/adr/sbd-decisions.md +109 -0
- docs/adr/scale-engine-decisions.md +108 -0
- docs/adr/writeguard-decisions.md +136 -0
- docs/architecture/bounded-contexts.md +1032 -0
- docs/features/phase-65-writeguard.md +139 -0
- docs/features/phase-66-marketplace-commerce.md +79 -0
- docs/features/phase-67-knowledge-ingestion-rag-autodraft.md +97 -0
- docs/features/phase-68-enhanced-autodraft-pipeline.md +109 -0
- docs/features/phase-69-proposalai-marketplace-module.md +131 -0
- docs/features/phase-70-databridge.md +214 -0
- docs/features/phase-71-databridge-messaging.md +102 -0
- docs/implementation-plan-architecture-evolution.md +614 -0
- docs/marketplace/CONTRIBUTING.md +124 -0
- docs/marketplace/module_manifest_schema.yaml +83 -0
- docs/research/ai-architecture-patterns-2024-2026.md +1236 -0
- docs/research/app-builder-platform-analysis.md +582 -0
- docs/research/architecture-patterns-c4-ddd-agentic.md +871 -0
- docs/research/flowable-boat-competitive-analysis.md +426 -0
- docs/research/modern-dev-practices-2024-2026.md +1615 -0
- docs/research/secure-by-design-cloudyrion-adaptation.md +270 -0
- goals/agent_management.md +144 -0
- goals/ai_accountability.md +90 -0
- goals/ai_narratives.md +79 -0
- goals/ai_transparency.md +76 -0
- goals/ato_simulator.md +78 -0
- goals/audit_engine.md +177 -0
- goals/bite_sized_plans.md +225 -0
- goals/boundary_supply_chain.md +206 -0
- goals/brainstorming_gate.md +186 -0
- goals/build_app.md +604 -0
- goals/cato_live_evidence.md +77 -0
- goals/cloudforge.md +106 -0
- goals/code_intelligence.md +197 -0
- goals/compliance_workflow.md +858 -0
- goals/connector_forge.md +133 -0
- goals/databridge.md +128 -0
- goals/deploy_workflow.md +390 -0
- goals/developer_scorecard.md +78 -0
- goals/devsecops_workflow.md +408 -0
- goals/firmware_sbom.md +79 -0
- goals/forge_hub.md +78 -0
- goals/golden_path.md +77 -0
- goals/harness_engineering.md +91 -0
- goals/integration_testing.md +189 -0
- goals/knowledge_graph.md +128 -0
- goals/maintenance_audit.md +196 -0
- goals/manifest.md +50 -0
- goals/monitoring.md +126 -0
- goals/mosa_workflow.md +463 -0
- goals/multi_agent_orchestration.md +68 -0
- goals/observability_traceability_xai.md +154 -0
- goals/owasp_agentic_security.md +395 -0
- goals/pr_intelligence.md +78 -0
- goals/requirements_intake.md +213 -0
- goals/secure_by_design.md +135 -0
- goals/security_scan.md +381 -0
- goals/self_healing.md +120 -0
- goals/simulation_engine.md +111 -0
- goals/subagent_review.md +205 -0
- goals/systematic_debugging.md +257 -0
- goals/tdd_workflow.md +403 -0
- goals/template_exchange.md +77 -0
- goals/thread_heatmap.md +77 -0
- goals/threat_modeler.md +77 -0
- goals/verification_iron_law.md +192 -0
- goals/vsm_dashboard.md +76 -0
- goals/writeguard.md +89 -0
- goals/zero_trust_architecture.md +403 -0
- hardprompts/__init__.py +6 -0
- hardprompts/agent/__init__.py +6 -0
- hardprompts/agent/agentic_architect.md +100 -0
- hardprompts/agent/debate_prompt.md +32 -0
- hardprompts/agent/fitness_evaluation.md +48 -0
- hardprompts/agent/governance_review.md +214 -0
- hardprompts/agent/reviewer_prompt.md +34 -0
- hardprompts/agent/skill_design.md +172 -0
- hardprompts/agent/task_decomposition.md +275 -0
- hardprompts/agent/veto_check_prompt.md +33 -0
- hardprompts/architect/__init__.py +6 -0
- hardprompts/architect/api_design.md +283 -0
- hardprompts/architect/data_model.md +277 -0
- hardprompts/architect/system_design.md +180 -0
- hardprompts/builder/__init__.py +6 -0
- hardprompts/builder/code_generation.md +59 -0
- hardprompts/builder/refactor.md +58 -0
- hardprompts/builder/scaffold_project.md +69 -0
- hardprompts/builder/test_generation.md +87 -0
- hardprompts/ci/__init__.py +6 -0
- hardprompts/ci/worktree_setup.md +35 -0
- hardprompts/compliance/__init__.py +6 -0
- hardprompts/compliance/cmmc_assessment.md +63 -0
- hardprompts/compliance/cssp_assessment.md +75 -0
- hardprompts/compliance/cui_marking.md +86 -0
- hardprompts/compliance/fedramp_assessment.md +55 -0
- hardprompts/compliance/ivv_assessment.md +96 -0
- hardprompts/compliance/poam_generation.md +57 -0
- hardprompts/compliance/sbd_assessment.md +101 -0
- hardprompts/compliance/security_categorization.md +74 -0
- hardprompts/compliance/ssp_generation.md +56 -0
- hardprompts/compliance/stig_evaluation.md +63 -0
- hardprompts/dashboard/__init__.py +6 -0
- hardprompts/dashboard/nlq_system_prompt.md +26 -0
- hardprompts/infra/__init__.py +6 -0
- hardprompts/infra/k8s_manifests.md +118 -0
- hardprompts/infra/pipeline_generation.md +160 -0
- hardprompts/infra/terraform_generation.md +92 -0
- hardprompts/integration/__init__.py +6 -0
- hardprompts/integration/approval_review.md +17 -0
- hardprompts/integration/jira_mapping.md +25 -0
- hardprompts/integration/servicenow_mapping.md +14 -0
- hardprompts/knowledge/__init__.py +6 -0
- hardprompts/knowledge/pattern_detection.md +73 -0
- hardprompts/knowledge/recommendation_engine.md +90 -0
- hardprompts/knowledge/root_cause_analysis.md +91 -0
- hardprompts/maintenance/__init__.py +6 -0
- hardprompts/maintenance/maintenance_assessment.md +82 -0
- hardprompts/mbse/__init__.py +6 -0
- hardprompts/mbse/digital_thread.md +67 -0
- hardprompts/mbse/model_import.md +62 -0
- hardprompts/mbse/model_to_code.md +65 -0
- hardprompts/modernization/__init__.py +6 -0
- hardprompts/modernization/legacy_analysis.md +93 -0
- hardprompts/modernization/migration_planning.md +150 -0
- hardprompts/modernization/seven_r_assessment.md +107 -0
- hardprompts/proposal_draft.md +53 -0
- hardprompts/rag_citation.md +12 -0
- hardprompts/rag_rerank.md +31 -0
- hardprompts/requirements/__init__.py +6 -0
- hardprompts/requirements/bdd_generation.md +35 -0
- hardprompts/requirements/clarification_prioritization.md +29 -0
- hardprompts/requirements/decomposition.md +60 -0
- hardprompts/requirements/document_extraction.md +45 -0
- hardprompts/requirements/gap_detection.md +70 -0
- hardprompts/requirements/intake_conversation.md +101 -0
- hardprompts/requirements/readiness_assessment.md +39 -0
- hardprompts/requirements/spec_quality.md +33 -0
- hardprompts/requirements/traceability_analysis.md +23 -0
- hardprompts/security/__init__.py +6 -0
- hardprompts/security/endpoint_security.md +78 -0
- hardprompts/security/threat_model.md +70 -0
- hardprompts/security/vulnerability_assessment.md +81 -0
- hardprompts/simulation/__init__.py +6 -0
- hardprompts/simulation/architecture_impact.md +27 -0
- hardprompts/simulation/coa_alternative.md +27 -0
- hardprompts/simulation/coa_generation.md +25 -0
- hardprompts/simulation/compliance_impact.md +28 -0
- hardprompts/simulation/cost_estimation.md +33 -0
- hardprompts/simulation/risk_assessment.md +28 -0
- hardprompts/translation/code_translation.md +68 -0
- hardprompts/translation/dependency_suggestion.md +44 -0
- hardprompts/translation/test_translation.md +64 -0
- hardprompts/translation/translation_repair.md +59 -0
- icdev-0.0.3.dist-info/METADATA +909 -0
- icdev-0.0.3.dist-info/RECORD +1214 -0
- icdev-0.0.3.dist-info/WHEEL +5 -0
- icdev-0.0.3.dist-info/entry_points.txt +9 -0
- icdev-0.0.3.dist-info/licenses/LICENSE +201 -0
- icdev-0.0.3.dist-info/licenses/NOTICE +11 -0
- icdev-0.0.3.dist-info/top_level.txt +7 -0
- memory/MEMORY.md +52 -0
- memory/logs/2026-02-14.md +17 -0
- memory/logs/2026-03-03.md +2 -0
- memory/logs/__init__.py +1 -0
- tools/a2a/icdev_callback_client.py +210 -0
- tools/agent/cards/architect_card.json +29 -0
- tools/agent/cards/builder_card.json +34 -0
- tools/agent/cards/compliance_card.json +29 -0
- tools/agent/cards/connector_forge_card.json +49 -0
- tools/agent/cards/devsecops_zta_card.json +24 -0
- tools/agent/cards/knowledge_card.json +29 -0
- tools/agent/cards/monitor_card.json +29 -0
- tools/agent/cards/orchestrator_card.json +29 -0
- tools/agent/cards/requirements_analyst_card.json +24 -0
- tools/agent/cards/security_card.json +29 -0
- tools/agent/cards/simulation_card.json +24 -0
- tools/agent/cards/supply_chain_card.json +24 -0
- tools/analysis/__init__.py +1 -0
- tools/analysis/code_analyzer.py +770 -0
- tools/analysis/runtime_feedback.py +379 -0
- tools/analytics/__init__.py +2 -0
- tools/analytics/scorecard.py +538 -0
- tools/analytics/vsm_engine.py +612 -0
- tools/architecture/__init__.py +2 -0
- tools/architecture/adr_extractor.py +393 -0
- tools/audit/__init__.py +1 -0
- tools/audit/audit_logger.py +199 -0
- tools/audit/audit_query.py +153 -0
- tools/audit/decision_recorder.py +73 -0
- tools/audit_engine/__init__.py +12 -0
- tools/audit_engine/ai_advisor.py +906 -0
- tools/audit_engine/cli.py +286 -0
- tools/audit_engine/comparator.py +305 -0
- tools/audit_engine/eject_scaffolder.py +399 -0
- tools/audit_engine/engine.py +614 -0
- tools/audit_engine/git_fetcher.py +341 -0
- tools/audit_engine/regime_loader.py +200 -0
- tools/audit_engine/regime_updater.py +325 -0
- tools/audit_engine/report_card.py +289 -0
- tools/audit_engine/scanner.py +684 -0
- tools/audit_engine/self_heal.py +1042 -0
- tools/ci/__init__.py +2 -0
- tools/ci/connectors/__init__.py +2 -0
- tools/ci/connectors/base_connector.py +80 -0
- tools/ci/connectors/connector_registry.py +188 -0
- tools/ci/connectors/mattermost_connector.py +159 -0
- tools/ci/connectors/slack_connector.py +197 -0
- tools/ci/core/__init__.py +2 -0
- tools/ci/core/air_gap_detector.py +115 -0
- tools/ci/core/comment_handler.py +192 -0
- tools/ci/core/conversation_manager.py +480 -0
- tools/ci/core/event_envelope.py +500 -0
- tools/ci/core/event_router.py +444 -0
- tools/ci/core/failure_parser.py +397 -0
- tools/ci/core/recovery_engine.py +527 -0
- tools/ci/gate_enforcer.py +361 -0
- tools/ci/modules/__init__.py +2 -0
- tools/ci/modules/agent.py +271 -0
- tools/ci/modules/git_ops.py +175 -0
- tools/ci/modules/state.py +117 -0
- tools/ci/modules/vcs.py +303 -0
- tools/ci/modules/workflow_ops.py +295 -0
- tools/ci/modules/worktree.py +337 -0
- tools/ci/pipeline_config_generator.py +558 -0
- tools/ci/pr_intelligence.py +485 -0
- tools/ci/triggers/__init__.py +2 -0
- tools/ci/triggers/gitlab_task_monitor.py +327 -0
- tools/ci/triggers/poll_trigger.py +237 -0
- tools/ci/triggers/webhook_server.py +356 -0
- tools/ci/workflows/__init__.py +2 -0
- tools/ci/workflows/icdev_build.py +140 -0
- tools/ci/workflows/icdev_comply.py +284 -0
- tools/ci/workflows/icdev_document.py +152 -0
- tools/ci/workflows/icdev_e2e.py +188 -0
- tools/ci/workflows/icdev_patch.py +186 -0
- tools/ci/workflows/icdev_plan.py +202 -0
- tools/ci/workflows/icdev_plan_build.py +41 -0
- tools/ci/workflows/icdev_plan_build_test.py +46 -0
- tools/ci/workflows/icdev_plan_build_test_review.py +47 -0
- tools/ci/workflows/icdev_review.py +126 -0
- tools/ci/workflows/icdev_sdlc.py +261 -0
- tools/ci/workflows/icdev_test.py +240 -0
- tools/cli/__init__.py +1 -0
- tools/cli/output_formatter.py +756 -0
- tools/cloudforge/__init__.py +12 -0
- tools/cloudforge/airgap/__init__.py +2 -0
- tools/cloudforge/airgap/il_classifier.py +70 -0
- tools/cloudforge/airgap/offline_validator.py +42 -0
- tools/cloudforge/airgap/shift_emulator.py +155 -0
- tools/cloudforge/airgap/sneakernet.py +91 -0
- tools/cloudforge/cd_hub/__init__.py +2 -0
- tools/cloudforge/cd_hub/canary_deployer.py +88 -0
- tools/cloudforge/cd_hub/gitops_renderer.py +123 -0
- tools/cloudforge/cd_hub/hub_controller.py +143 -0
- tools/cloudforge/cd_hub/pipeline_bridge.py +30 -0
- tools/cloudforge/cd_hub/rollback_engine.py +29 -0
- tools/cloudforge/cd_hub/spoke_agent.py +51 -0
- tools/cloudforge/compliance/__init__.py +2 -0
- tools/cloudforge/compliance/ato_accelerator.py +272 -0
- tools/cloudforge/compliance/control_inheritor.py +127 -0
- tools/cloudforge/compliance/evidence_generator.py +129 -0
- tools/cloudforge/compliance/poam_bridge.py +41 -0
- tools/cloudforge/compliance/ssp_bridge.py +52 -0
- tools/cloudforge/compliance/stig_bridge.py +41 -0
- tools/cloudforge/container_forge/__init__.py +2 -0
- tools/cloudforge/container_forge/bigbang_renderer.py +85 -0
- tools/cloudforge/container_forge/hardener.py +169 -0
- tools/cloudforge/container_forge/image_scanner_bridge.py +33 -0
- tools/cloudforge/container_forge/runtime_policy.py +87 -0
- tools/cloudforge/container_forge/sbom_bridge.py +42 -0
- tools/cloudforge/finops/__init__.py +2 -0
- tools/cloudforge/finops/anomaly_detector.py +78 -0
- tools/cloudforge/finops/budget_tracker.py +96 -0
- tools/cloudforge/finops/chargeback.py +69 -0
- tools/cloudforge/finops/cost_collector.py +141 -0
- tools/cloudforge/finops/optimizer.py +55 -0
- tools/cloudforge/hybrid/__init__.py +2 -0
- tools/cloudforge/hybrid/connection_manager.py +141 -0
- tools/cloudforge/hybrid/dns_federator.py +56 -0
- tools/cloudforge/hybrid/health_monitor.py +108 -0
- tools/cloudforge/hybrid/identity_federator.py +53 -0
- tools/cloudforge/hybrid/network_bridge.py +68 -0
- tools/cloudforge/hybrid/topology_manager.py +147 -0
- tools/cloudforge/hybrid/workload_abstractor.py +92 -0
- tools/cloudforge/iac/__init__.py +2 -0
- tools/cloudforge/iac/drift_detector.py +154 -0
- tools/cloudforge/iac/module_library.py +265 -0
- tools/cloudforge/iac/opentofu_adapter.py +89 -0
- tools/cloudforge/iac/pulumi_renderer.py +292 -0
- tools/cloudforge/iac/state_backend.py +146 -0
- tools/cloudforge/iac/terraform_renderer.py +626 -0
- tools/cloudforge/landing_zone/__init__.py +2 -0
- tools/cloudforge/landing_zone/blueprint_loader.py +98 -0
- tools/cloudforge/landing_zone/blueprint_validator.py +113 -0
- tools/cloudforge/landing_zone/zone_provisioner.py +306 -0
- tools/cloudforge/landing_zone/zone_state.py +143 -0
- tools/cloudforge/mbse_thread/__init__.py +2 -0
- tools/cloudforge/mbse_thread/ato_thread_weaver.py +111 -0
- tools/cloudforge/mbse_thread/control_tracer.py +68 -0
- tools/cloudforge/mbse_thread/system_boundary.py +83 -0
- tools/cloudforge/metastore/__init__.py +2 -0
- tools/cloudforge/metastore/dependency_graph.py +202 -0
- tools/cloudforge/metastore/discovery.py +192 -0
- tools/cloudforge/metastore/registry.py +185 -0
- tools/cloudforge/metastore/rto_tracker.py +92 -0
- tools/cloudforge/metastore/runbook_linker.py +82 -0
- tools/cloudforge/migration/__init__.py +2 -0
- tools/cloudforge/migration/assessor.py +187 -0
- tools/cloudforge/migration/cutover_orchestrator.py +117 -0
- tools/cloudforge/migration/databridge_bridge.py +92 -0
- tools/cloudforge/migration/planner.py +98 -0
- tools/cloudforge/migration/risk_scorer.py +97 -0
- tools/cloudforge/migration/validation_runner.py +45 -0
- tools/cloudforge/migration/workload_inventory.py +107 -0
- tools/cloudforge/provider.py +319 -0
- tools/cloudforge/providers/__init__.py +2 -0
- tools/cloudforge/providers/aws_commercial.py +92 -0
- tools/cloudforge/providers/aws_govcloud.py +229 -0
- tools/cloudforge/providers/aws_secret.py +83 -0
- tools/cloudforge/providers/azure_commercial.py +80 -0
- tools/cloudforge/providers/azure_gov.py +91 -0
- tools/cloudforge/providers/azure_secret.py +71 -0
- tools/cloudforge/providers/gcp.py +102 -0
- tools/cloudforge/providers/oci.py +102 -0
- tools/cloudforge/registry.py +140 -0
- tools/cloudforge/runbooks/__init__.py +2 -0
- tools/cloudforge/runbooks/ai_generator.py +119 -0
- tools/cloudforge/runbooks/dag_validator.py +219 -0
- tools/cloudforge/runbooks/engine.py +470 -0
- tools/cloudforge/runbooks/models.py +99 -0
- tools/cloudforge/runbooks/snippet_library.py +158 -0
- tools/cloudforge/runbooks/template_loader.py +122 -0
- tools/cloudforge/runbooks/visualization.py +108 -0
- tools/cloudforge/siem/__init__.py +2 -0
- tools/cloudforge/siem/alert_rules.py +86 -0
- tools/cloudforge/siem/correlation_engine.py +61 -0
- tools/cloudforge/siem/log_aggregator.py +113 -0
- tools/cloudforge/siem/siem_dashboard_data.py +28 -0
- tools/cloudforge/supply_chain/__init__.py +2 -0
- tools/cloudforge/supply_chain/bridge.py +33 -0
- tools/cloudforge/supply_chain/iac_dependency_scanner.py +36 -0
- tools/cloudforge/supply_chain/provider_trust_scorer.py +54 -0
- tools/compat/__init__.py +21 -0
- tools/compat/cli_harmonizer.py +251 -0
- tools/compat/datetime_utils.py +18 -0
- tools/compat/db_utils.py +190 -0
- tools/compat/platform_utils.py +123 -0
- tools/compliance/__init__.py +1 -0
- tools/compliance/accountability_manager.py +391 -0
- tools/compliance/ai_accountability_audit.py +287 -0
- tools/compliance/ai_impact_assessor.py +267 -0
- tools/compliance/ai_incident_response.py +295 -0
- tools/compliance/ai_inventory_manager.py +233 -0
- tools/compliance/ai_reassessment_scheduler.py +250 -0
- tools/compliance/ai_transparency_audit.py +247 -0
- tools/compliance/atlas_assessor.py +276 -0
- tools/compliance/atlas_report_generator.py +1199 -0
- tools/compliance/base_assessor.py +591 -0
- tools/compliance/cato_live_engine.py +607 -0
- tools/compliance/cato_monitor.py +1371 -0
- tools/compliance/cato_scheduler.py +698 -0
- tools/compliance/cjis_assessor.py +76 -0
- tools/compliance/classification_manager.py +1340 -0
- tools/compliance/cmmc_assessor.py +1478 -0
- tools/compliance/cmmc_report_generator.py +1087 -0
- tools/compliance/compliance_detector.py +452 -0
- tools/compliance/compliance_exporter.py +418 -0
- tools/compliance/compliance_status.py +810 -0
- tools/compliance/control_mapper.py +488 -0
- tools/compliance/crosswalk_engine.py +1208 -0
- tools/compliance/cssp_assessor.py +1032 -0
- tools/compliance/cssp_evidence_collector.py +716 -0
- tools/compliance/cssp_report_generator.py +1103 -0
- tools/compliance/cui_marker.py +387 -0
- tools/compliance/diagram_validator.py +599 -0
- tools/compliance/emass/__init__.py +2 -0
- tools/compliance/emass/emass_client.py +822 -0
- tools/compliance/emass/emass_export.py +758 -0
- tools/compliance/emass/emass_sync.py +807 -0
- tools/compliance/eu_ai_act_classifier.py +193 -0
- tools/compliance/evidence_collector.py +459 -0
- tools/compliance/fairness_assessor.py +310 -0
- tools/compliance/fedramp_20x_ksi_emitter.py +692 -0
- tools/compliance/fedramp_assessor.py +1795 -0
- tools/compliance/fedramp_authorization_packager.py +137 -0
- tools/compliance/fedramp_ksi_generator.py +349 -0
- tools/compliance/fedramp_report_generator.py +1115 -0
- tools/compliance/fips199_categorizer.py +869 -0
- tools/compliance/fips200_validator.py +304 -0
- tools/compliance/firmware_sbom.py +646 -0
- tools/compliance/gao_ai_assessor.py +228 -0
- tools/compliance/gao_evidence_builder.py +302 -0
- tools/compliance/hipaa_assessor.py +78 -0
- tools/compliance/hitrust_assessor.py +49 -0
- tools/compliance/incident_response_plan.py +705 -0
- tools/compliance/inheritance_engine.py +693 -0
- tools/compliance/iso27001_assessor.py +92 -0
- tools/compliance/iso42001_assessor.py +114 -0
- tools/compliance/ivv_assessor.py +2314 -0
- tools/compliance/ivv_report_generator.py +1649 -0
- tools/compliance/model_card_generator.py +291 -0
- tools/compliance/mosa_assessor.py +117 -0
- tools/compliance/multi_regime_assessor.py +441 -0
- tools/compliance/narrative_generator.py +1012 -0
- tools/compliance/narrative_quality_gate.py +701 -0
- tools/compliance/narrative_workflow.py +814 -0
- tools/compliance/nist_800_207_assessor.py +191 -0
- tools/compliance/nist_ai_600_1_assessor.py +185 -0
- tools/compliance/nist_ai_rmf_assessor.py +110 -0
- tools/compliance/nist_lookup.py +244 -0
- tools/compliance/omb_m25_21_assessor.py +225 -0
- tools/compliance/omb_m26_04_assessor.py +185 -0
- tools/compliance/oscal_catalog_adapter.py +395 -0
- tools/compliance/oscal_generator.py +2157 -0
- tools/compliance/oscal_tools.py +1182 -0
- tools/compliance/oscal_validator.py +692 -0
- tools/compliance/owasp_agentic_assessor.py +227 -0
- tools/compliance/owasp_asi_assessor.py +197 -0
- tools/compliance/owasp_llm_assessor.py +245 -0
- tools/compliance/pci_dss_assessor.py +80 -0
- tools/compliance/pi_compliance_tracker.py +1447 -0
- tools/compliance/poam_generator.py +388 -0
- tools/compliance/resolve_marking.py +272 -0
- tools/compliance/sbd_assessor.py +2070 -0
- tools/compliance/sbd_report_generator.py +1223 -0
- tools/compliance/sbom_generator.py +993 -0
- tools/compliance/siem_config_generator.py +661 -0
- tools/compliance/slsa_attestation_generator.py +479 -0
- tools/compliance/soc2_assessor.py +77 -0
- tools/compliance/ssp_generator.py +556 -0
- tools/compliance/stig_checker.py +712 -0
- tools/compliance/swft_evidence_bundler.py +326 -0
- tools/compliance/system_card_generator.py +303 -0
- tools/compliance/template_exchange.py +513 -0
- tools/compliance/traceability_matrix.py +1268 -0
- tools/compliance/universal_classification_manager.py +1159 -0
- tools/compliance/xacta/__init__.py +2 -0
- tools/compliance/xacta/xacta_client.py +438 -0
- tools/compliance/xacta/xacta_export.py +546 -0
- tools/compliance/xacta/xacta_sync.py +322 -0
- tools/compliance/xai_assessor.py +231 -0
- tools/core/__init__.py +2 -0
- tools/core/circuit_breaker.py +353 -0
- tools/core/compliance_sidecar.py +344 -0
- tools/core/container.py +110 -0
- tools/core/errors.py +256 -0
- tools/core/feature_flags.py +311 -0
- tools/core/task_dlq.py +350 -0
- tools/dashboard/__init__.py +2 -0
- tools/dashboard/app.py +6288 -0
- tools/dashboard/templates/agent_evolution.html +287 -0
- tools/dashboard/templates/agents/list.html +71 -0
- tools/dashboard/templates/agents.html +132 -0
- tools/dashboard/templates/architecture.html +289 -0
- tools/dashboard/templates/ato_simulator.html +170 -0
- tools/dashboard/templates/audit_engine.html +844 -0
- tools/dashboard/templates/base.html +236 -0
- tools/dashboard/templates/cato_live.html +116 -0
- tools/dashboard/templates/cloudforge.html +195 -0
- tools/dashboard/templates/cloudforge_finops.html +111 -0
- tools/dashboard/templates/cloudforge_hybrid.html +122 -0
- tools/dashboard/templates/cloudforge_metastore.html +234 -0
- tools/dashboard/templates/cloudforge_migration.html +87 -0
- tools/dashboard/templates/cloudforge_runbooks.html +201 -0
- tools/dashboard/templates/cloudforge_siem.html +94 -0
- tools/dashboard/templates/compliance_accel.html +292 -0
- tools/dashboard/templates/crashes.html +122 -0
- tools/dashboard/templates/databridge.html +305 -0
- tools/dashboard/templates/databridge_analytics.html +195 -0
- tools/dashboard/templates/databridge_mapping.html +345 -0
- tools/dashboard/templates/databridge_messaging.html +321 -0
- tools/dashboard/templates/decisions.html +258 -0
- tools/dashboard/templates/devices.html +151 -0
- tools/dashboard/templates/devsecops_maturity.html +278 -0
- tools/dashboard/templates/edge_ai.html +128 -0
- tools/dashboard/templates/firmware.html +120 -0
- tools/dashboard/templates/firmware_sbom.html +193 -0
- tools/dashboard/templates/forge_hub.html +196 -0
- tools/dashboard/templates/forge_studio.html +379 -0
- tools/dashboard/templates/forge_studio_analytics.html +360 -0
- tools/dashboard/templates/forge_studio_builder.html +1637 -0
- tools/dashboard/templates/forge_studio_compliance.html +310 -0
- tools/dashboard/templates/forge_studio_deploy.html +573 -0
- tools/dashboard/templates/forge_studio_enterprise.html +888 -0
- tools/dashboard/templates/forge_studio_marketplace.html +502 -0
- tools/dashboard/templates/forge_studio_workflow.html +696 -0
- tools/dashboard/templates/golden_path.html +175 -0
- tools/dashboard/templates/govcon.html +280 -0
- tools/dashboard/templates/harness.html +148 -0
- tools/dashboard/templates/index.html +207 -0
- tools/dashboard/templates/intelligence.html +336 -0
- tools/dashboard/templates/knowledge/index.html +190 -0
- tools/dashboard/templates/knowledge_graph.html +739 -0
- tools/dashboard/templates/login.html +51 -0
- tools/dashboard/templates/marketplace.html +336 -0
- tools/dashboard/templates/marketplace_admin.html +247 -0
- tools/dashboard/templates/missions.html +403 -0
- tools/dashboard/templates/narratives.html +154 -0
- tools/dashboard/templates/pr_intelligence.html +151 -0
- tools/dashboard/templates/proposals/detail.html +300 -0
- tools/dashboard/templates/proposals/list.html +52 -0
- tools/dashboard/templates/proposals/sam_detail.html +132 -0
- tools/dashboard/templates/proposals/section_detail.html +375 -0
- tools/dashboard/templates/research.html +222 -0
- tools/dashboard/templates/resilience.html +300 -0
- tools/dashboard/templates/scorecard.html +162 -0
- tools/dashboard/templates/simulator.html +131 -0
- tools/dashboard/templates/template_exchange.html +147 -0
- tools/dashboard/templates/thread_heatmap.html +151 -0
- tools/dashboard/templates/threat_model.html +195 -0
- tools/dashboard/templates/vsm.html +141 -0
- tools/dashboard/templates/writeguard.html +277 -0
- tools/databridge/__init__.py +5 -0
- tools/databridge/agent/__init__.py +2 -0
- tools/databridge/agent/daemon.py +227 -0
- tools/databridge/agent/tunnel.py +101 -0
- tools/databridge/agent/ws_relay.py +91 -0
- tools/databridge/analytics.py +167 -0
- tools/databridge/arrow_pipeline.py +327 -0
- tools/databridge/connection_manager.py +424 -0
- tools/databridge/connector.py +331 -0
- tools/databridge/connectors/__init__.py +2 -0
- tools/databridge/connectors/argocd_connector.py +160 -0
- tools/databridge/connectors/avro_connector.py +203 -0
- tools/databridge/connectors/azure_blob.py +63 -0
- tools/databridge/connectors/cdc_connector.py +205 -0
- tools/databridge/connectors/csv_connector.py +172 -0
- tools/databridge/connectors/datadog_connector.py +153 -0
- tools/databridge/connectors/discord_messaging.py +215 -0
- tools/databridge/connectors/dynamics365.py +151 -0
- tools/databridge/connectors/elasticsearch_connector.py +145 -0
- tools/databridge/connectors/email_base.py +114 -0
- tools/databridge/connectors/excel_connector.py +175 -0
- tools/databridge/connectors/fsspec_base.py +300 -0
- tools/databridge/connectors/gcs.py +53 -0
- tools/databridge/connectors/github_connector.py +138 -0
- tools/databridge/connectors/gitlab_connector.py +132 -0
- tools/databridge/connectors/gmail_connector.py +182 -0
- tools/databridge/connectors/hdfs.py +57 -0
- tools/databridge/connectors/health_base.py +401 -0
- tools/databridge/connectors/hubspot.py +124 -0
- tools/databridge/connectors/imap_connector.py +171 -0
- tools/databridge/connectors/jenkins_connector.py +138 -0
- tools/databridge/connectors/jira_connector.py +86 -0
- tools/databridge/connectors/json_connector.py +184 -0
- tools/databridge/connectors/kafka_connector.py +246 -0
- tools/databridge/connectors/kinesis_connector.py +238 -0
- tools/databridge/connectors/local_fs.py +30 -0
- tools/databridge/connectors/matrix.py +197 -0
- tools/databridge/connectors/mattermost_messaging.py +184 -0
- tools/databridge/connectors/messaging_base.py +172 -0
- tools/databridge/connectors/mssql.py +63 -0
- tools/databridge/connectors/mysql.py +57 -0
- tools/databridge/connectors/netsuite.py +170 -0
- tools/databridge/connectors/o365_mail.py +196 -0
- tools/databridge/connectors/oracle.py +65 -0
- tools/databridge/connectors/pagerduty_connector.py +162 -0
- tools/databridge/connectors/parquet_connector.py +131 -0
- tools/databridge/connectors/postgresql.py +58 -0
- tools/databridge/connectors/s3.py +65 -0
- tools/databridge/connectors/saas_base.py +198 -0
- tools/databridge/connectors/salesforce.py +126 -0
- tools/databridge/connectors/sap.py +89 -0
- tools/databridge/connectors/servicenow.py +60 -0
- tools/databridge/connectors/signal_messaging.py +150 -0
- tools/databridge/connectors/slack_messaging.py +203 -0
- tools/databridge/connectors/smtp_connector.py +126 -0
- tools/databridge/connectors/soap_base.py +258 -0
- tools/databridge/connectors/splunk_connector.py +171 -0
- tools/databridge/connectors/sql_base.py +310 -0
- tools/databridge/connectors/sqlite_connector.py +76 -0
- tools/databridge/connectors/teams.py +148 -0
- tools/databridge/connectors/telegram.py +192 -0
- tools/databridge/connectors/whatsapp.py +137 -0
- tools/databridge/data_profiler.py +99 -0
- tools/databridge/forge/__init__.py +6 -0
- tools/databridge/forge/base_selector.py +150 -0
- tools/databridge/forge/code_generator.py +206 -0
- tools/databridge/forge/community_hub.py +539 -0
- tools/databridge/forge/forge_agent.py +306 -0
- tools/databridge/forge/import_handler.py +133 -0
- tools/databridge/forge/integration_tester.py +127 -0
- tools/databridge/forge/marketplace_publisher.py +164 -0
- tools/databridge/forge/promoter.py +159 -0
- tools/databridge/forge/sandbox_manager.py +257 -0
- tools/databridge/forge/spec_parser.py +358 -0
- tools/databridge/forge/static_validator.py +363 -0
- tools/databridge/forge/templates/__init__.py +591 -0
- tools/databridge/format_converter.py +188 -0
- tools/databridge/mapping_engine.py +348 -0
- tools/databridge/messaging/__init__.py +5 -0
- tools/databridge/messaging/agent_bridge.py +254 -0
- tools/databridge/messaging/message_envelope.py +111 -0
- tools/databridge/messaging/message_logger.py +204 -0
- tools/databridge/messaging/messaging_daemon.py +326 -0
- tools/databridge/messaging/oauth2_manager.py +411 -0
- tools/databridge/pii_detector.py +221 -0
- tools/databridge/registry.py +352 -0
- tools/databridge/relay_server.py +105 -0
- tools/databridge/scale/__init__.py +16 -0
- tools/databridge/scale/backpressure.py +134 -0
- tools/databridge/scale/chunked_pipeline.py +169 -0
- tools/databridge/scale/connection_pool.py +293 -0
- tools/databridge/scale/engine.py +492 -0
- tools/databridge/scale/worker_pool.py +140 -0
- tools/databridge/scale/write_batcher.py +250 -0
- tools/databridge/schema_engine.py +324 -0
- tools/databridge/stream_manager.py +225 -0
- tools/databridge/sync_engine.py +411 -0
- tools/databridge/transforms.py +302 -0
- tools/db/__init__.py +1 -0
- tools/db/backup.py +312 -0
- tools/db/backup_manager.py +832 -0
- tools/db/init_icdev_db.py +7753 -0
- tools/db/init_sparkpilot_db.py +431 -0
- tools/db/migrate.py +177 -0
- tools/db/migrate_innovation_audit.py +165 -0
- tools/db/migration_runner.py +548 -0
- tools/db/migrations/001_baseline/meta.json +9 -0
- tools/db/migrations/001_baseline/up.py +67 -0
- tools/db/migrations/002_memory_enhancements/down.sql +8 -0
- tools/db/migrations/002_memory_enhancements/meta.json +9 -0
- tools/db/migrations/002_memory_enhancements/up.py +119 -0
- tools/db/migrations/003_dev_profiles/meta.json +8 -0
- tools/db/migrations/003_dev_profiles/up.py +93 -0
- tools/db/migrations/004_innovation_engine/down.py +19 -0
- tools/db/migrations/004_innovation_engine/up.py +227 -0
- tools/db/migrations/005_phase_37_ai_security/down.py +19 -0
- tools/db/migrations/005_phase_37_ai_security/up.py +257 -0
- tools/db/migrations/006_phase_36_evolution/down.py +21 -0
- tools/db/migrations/006_phase_36_evolution/up.py +323 -0
- tools/db/migrations/007_phase_38_cloud/down.py +14 -0
- tools/db/migrations/007_phase_38_cloud/up.py +110 -0
- tools/db/migrations/008_phase36_37_integration/up.py +55 -0
- tools/db/migrations/__init__.py +2 -0
- tools/db/pg_migrate.py +642 -0
- tools/db/storage.py +1080 -0
- tools/decisions/__init__.py +2 -0
- tools/decisions/dmn_engine.py +695 -0
- tools/devsecops/__init__.py +2 -0
- tools/devsecops/attestation_manager.py +449 -0
- tools/devsecops/network_segmentation_generator.py +604 -0
- tools/devsecops/pdp_config_generator.py +1246 -0
- tools/devsecops/pipeline_security_generator.py +475 -0
- tools/devsecops/policy_generator.py +644 -0
- tools/devsecops/profile_manager.py +374 -0
- tools/devsecops/service_mesh_generator.py +1063 -0
- tools/devsecops/zta_maturity_scorer.py +355 -0
- tools/devsecops/zta_terraform_generator.py +1301 -0
- tools/edge_ai/__init__.py +2 -0
- tools/edge_ai/model_manager.py +200 -0
- tools/embedded/__init__.py +2 -0
- tools/embedded/cmake_generator.py +318 -0
- tools/embedded/crash_analyzer.py +191 -0
- tools/embedded/nl_to_firmware.py +277 -0
- tools/events/__init__.py +1 -0
- tools/events/event_bus.py +199 -0
- tools/finetune/pair_generator.py +832 -0
- tools/fleet/__init__.py +2 -0
- tools/fleet/device_registry.py +148 -0
- tools/fleet/ota_manager.py +153 -0
- tools/forge_studio/__init__.py +13 -0
- tools/forge_studio/analytics/__init__.py +0 -0
- tools/forge_studio/analytics/process_miner.py +383 -0
- tools/forge_studio/audit.py +183 -0
- tools/forge_studio/blueprint/__init__.py +2 -0
- tools/forge_studio/blueprint/build_tracker.py +317 -0
- tools/forge_studio/blueprint/export_engine.py +441 -0
- tools/forge_studio/blueprint/parent_client.py +335 -0
- tools/forge_studio/catalog/__init__.py +2 -0
- tools/forge_studio/catalog/component_registry.py +176 -0
- tools/forge_studio/catalog/schema_validator.py +193 -0
- tools/forge_studio/compliance/__init__.py +1 -0
- tools/forge_studio/compliance/compliance_wiring.py +554 -0
- tools/forge_studio/deploy/__init__.py +1 -0
- tools/forge_studio/deploy/airgap_packager.py +466 -0
- tools/forge_studio/deploy/deploy_engine.py +1792 -0
- tools/forge_studio/deploy/env_manager.py +431 -0
- tools/forge_studio/eject/__init__.py +2 -0
- tools/forge_studio/eject/docker_compose_generator.py +237 -0
- tools/forge_studio/eject/eject_engine.py +230 -0
- tools/forge_studio/eject/expo_scaffolder.py +303 -0
- tools/forge_studio/eject/nextjs_scaffolder.py +338 -0
- tools/forge_studio/enterprise/__init__.py +0 -0
- tools/forge_studio/enterprise/custom_frameworks.py +826 -0
- tools/forge_studio/enterprise/hardening_engine.py +1530 -0
- tools/forge_studio/enterprise/sso_manager.py +718 -0
- tools/forge_studio/enterprise/whitelabel_engine.py +887 -0
- tools/forge_studio/formula/__init__.py +0 -0
- tools/forge_studio/formula/expression_engine.py +562 -0
- tools/forge_studio/formula/formula_registry.py +265 -0
- tools/forge_studio/generator/__init__.py +2 -0
- tools/forge_studio/generator/app_generator.py +584 -0
- tools/forge_studio/generator/complexity_detector.py +368 -0
- tools/forge_studio/generator/prompt_templates.py +104 -0
- tools/forge_studio/generator/spec_builder.py +192 -0
- tools/forge_studio/intake_bridge.py +898 -0
- tools/forge_studio/marketplace/__init__.py +0 -0
- tools/forge_studio/marketplace/component_hub.py +428 -0
- tools/forge_studio/models.py +369 -0
- tools/forge_studio/renderer/__init__.py +2 -0
- tools/forge_studio/renderer/json_render_engine.py +623 -0
- tools/forge_studio/renderer/layout_engine.py +214 -0
- tools/forge_studio/renderer/rn_component_map.py +182 -0
- tools/forge_studio/supabase/__init__.py +2 -0
- tools/forge_studio/supabase/auth_generator.py +283 -0
- tools/forge_studio/supabase/migration_generator.py +93 -0
- tools/forge_studio/supabase/schema_generator.py +281 -0
- tools/forge_studio/tenant_manager.py +387 -0
- tools/forge_studio/workflow/__init__.py +2 -0
- tools/forge_studio/workflow/bpmn_adapter.py +489 -0
- tools/govcon/draft_orchestrator.py +1151 -0
- tools/govcon/engine_enrichment.py +373 -0
- tools/govcon/knowledge_base.py +487 -0
- tools/govcon/knowledge_ingestion.py +510 -0
- tools/govcon/sam_scanner.py +754 -0
- tools/harness/__init__.py +6 -0
- tools/harness/exit_criteria_evaluator.py +231 -0
- tools/harness/maturity_assessor.py +347 -0
- tools/harness/scaffold_harness.py +416 -0
- tools/harness/trace_analyzer.py +281 -0
- tools/infra/__init__.py +1 -0
- tools/infra/ansible_generator.py +867 -0
- tools/infra/dockerfile_generator.py +359 -0
- tools/infra/infra_status.py +384 -0
- tools/infra/ironbank_metadata_generator.py +403 -0
- tools/infra/k8s_generator.py +1000 -0
- tools/infra/pipeline_generator.py +830 -0
- tools/infra/rollback.py +389 -0
- tools/infra/terraform_generator.py +1140 -0
- tools/infra/terraform_generator_azure.py +1252 -0
- tools/infra/terraform_generator_gcp.py +951 -0
- tools/infra/terraform_generator_ibm.py +359 -0
- tools/infra/terraform_generator_oci.py +918 -0
- tools/infra/terraform_generator_onprem.py +318 -0
- tools/knowledge/__init__.py +1 -0
- tools/knowledge/knowledge_ingest.py +281 -0
- tools/knowledge/pattern_detector.py +681 -0
- tools/knowledge/recommendation_engine.py +449 -0
- tools/knowledge/self_heal_analyzer.py +492 -0
- tools/knowledge_graph/__init__.py +2 -0
- tools/knowledge_graph/graph_rag.py +498 -0
- tools/knowledge_graph/ingester.py +406 -0
- tools/knowledge_graph/insight_generator.py +369 -0
- tools/knowledge_graph/text_network.py +832 -0
- tools/llm/__init__.py +72 -0
- tools/llm/anthropic_provider.py +170 -0
- tools/llm/azure_openai_provider.py +338 -0
- tools/llm/bedrock_provider.py +315 -0
- tools/llm/embedding_provider.py +438 -0
- tools/llm/gemini_provider.py +381 -0
- tools/llm/ibm_watsonx_provider.py +231 -0
- tools/llm/oci_genai_provider.py +462 -0
- tools/llm/ollama_provider.py +350 -0
- tools/llm/openai_provider.py +225 -0
- tools/llm/prompt_registry.py +447 -0
- tools/llm/provider.py +355 -0
- tools/llm/provider_sdk.py +175 -0
- tools/llm/router.py +1124 -0
- tools/llm/semantic_cache.py +394 -0
- tools/llm/vertex_ai_provider.py +374 -0
- tools/maintenance/__init__.py +2 -0
- tools/maintenance/dependency_scanner.py +1016 -0
- tools/maintenance/maintenance_auditor.py +804 -0
- tools/maintenance/remediation_engine.py +957 -0
- tools/maintenance/vulnerability_checker.py +978 -0
- tools/manifest.md +1066 -0
- tools/marketplace/asset_installer.py +639 -0
- tools/marketplace/feedback_validator.py +359 -0
- tools/marketplace/license_client.py +458 -0
- tools/marketplace/module_crypto.py +544 -0
- tools/marketplace/module_runtime.py +236 -0
- tools/marketplace/token_store.py +264 -0
- tools/mbse/__init__.py +3 -0
- tools/mbse/des_assessor.py +1173 -0
- tools/mbse/des_report_generator.py +787 -0
- tools/mbse/diagram_extractor.py +792 -0
- tools/mbse/digital_thread.py +1650 -0
- tools/mbse/model_code_generator.py +1115 -0
- tools/mbse/model_control_mapper.py +410 -0
- tools/mbse/pi_model_tracker.py +1079 -0
- tools/mbse/reqif_parser.py +1468 -0
- tools/mbse/sync_engine.py +1789 -0
- tools/mbse/thread_heatmap.py +445 -0
- tools/mbse/xmi_parser.py +1558 -0
- tools/mcp/builder_server.py +64 -0
- tools/mcp/compliance_server.py +64 -0
- tools/mcp/connector_forge_server.py +155 -0
- tools/mcp/core_server.py +64 -0
- tools/mcp/devsecops_server.py +11 -0
- tools/mcp/devsecops_zta_server.py +64 -0
- tools/mcp/knowledge_server.py +64 -0
- tools/mcp/monitor_server.py +64 -0
- tools/mcp/ops_server.py +300 -0
- tools/mcp/requirements_analyst_server.py +64 -0
- tools/mcp/requirements_server.py +11 -0
- tools/mcp/security_server.py +64 -0
- tools/mcp/simulation_server.py +64 -0
- tools/mcp/supply_chain_server.py +64 -0
- tools/mcp/tool_registry.py +299 -0
- tools/memory/__init__.py +2 -0
- tools/memory/auto_capture.py +346 -0
- tools/memory/embed_memory.py +157 -0
- tools/memory/history_compressor.py +334 -0
- tools/memory/hybrid_search.py +235 -0
- tools/memory/maintenance_cron.py +288 -0
- tools/memory/memory_consolidation.py +439 -0
- tools/memory/memory_db.py +132 -0
- tools/memory/memory_read.py +101 -0
- tools/memory/memory_write.py +221 -0
- tools/memory/semantic_search.py +138 -0
- tools/memory/time_decay.py +434 -0
- tools/missions/__init__.py +2 -0
- tools/missions/mission_engine.py +459 -0
- tools/monitor/__init__.py +1 -0
- tools/monitor/alert_correlator.py +486 -0
- tools/monitor/auto_resolver.py +603 -0
- tools/monitor/health_checker.py +507 -0
- tools/monitor/heartbeat_daemon.py +779 -0
- tools/monitor/log_analyzer.py +507 -0
- tools/monitor/metric_collector.py +484 -0
- tools/mosa/__init__.py +10 -0
- tools/mosa/icd_generator.py +358 -0
- tools/mosa/modular_design_analyzer.py +682 -0
- tools/mosa/mosa_code_enforcer.py +348 -0
- tools/mosa/tsp_generator.py +265 -0
- tools/observability/__init__.py +100 -0
- tools/observability/genai_attributes.py +88 -0
- tools/observability/instrumentation.py +140 -0
- tools/observability/mlflow_exporter.py +193 -0
- tools/observability/otel_tracer.py +168 -0
- tools/observability/provenance/__init__.py +3 -0
- tools/observability/provenance/prov_recorder.py +322 -0
- tools/observability/shap/__init__.py +3 -0
- tools/observability/shap/agent_shap.py +274 -0
- tools/observability/sqlite_tracer.py +360 -0
- tools/observability/trace_context.py +205 -0
- tools/observability/tracer.py +230 -0
- tools/orchestration/__init__.py +1 -0
- tools/orchestration/peer_channels.py +254 -0
- tools/orchestration/saga_coordinator.py +390 -0
- tools/project/__init__.py +1 -0
- tools/project/manifest_loader.py +418 -0
- tools/project/project_create.py +350 -0
- tools/project/project_list.py +171 -0
- tools/project/project_scaffold.py +1715 -0
- tools/project/project_status.py +478 -0
- tools/project/session_context_builder.py +752 -0
- tools/project/validate_manifest.py +54 -0
- tools/rag/corrective_rag.py +582 -0
- tools/rag/source_registry.py +482 -0
- tools/requirements/__init__.py +1 -0
- tools/requirements/ai_governance_scorer.py +207 -0
- tools/requirements/boundary_analyzer.py +1281 -0
- tools/requirements/clarification_engine.py +605 -0
- tools/requirements/complexity_scorer.py +369 -0
- tools/requirements/consistency_analyzer.py +789 -0
- tools/requirements/constitution_manager.py +592 -0
- tools/requirements/decomposition_engine.py +764 -0
- tools/requirements/document_extractor.py +1002 -0
- tools/requirements/elicitation_techniques.py +508 -0
- tools/requirements/gap_detector.py +260 -0
- tools/requirements/intake_engine.py +2175 -0
- tools/requirements/prd_generator.py +839 -0
- tools/requirements/prd_validator.py +584 -0
- tools/requirements/readiness_scorer.py +302 -0
- tools/requirements/spec_organizer.py +1015 -0
- tools/requirements/spec_quality_checker.py +1083 -0
- tools/requirements/traceability_builder.py +566 -0
- tools/research/__init__.py +3 -0
- tools/research/academic_scanner.py +130 -0
- tools/research/build_buy_analyzer.py +229 -0
- tools/research/challenge_scorer.py +280 -0
- tools/research/community_scanner.py +174 -0
- tools/research/cross_engine_bridge.py +124 -0
- tools/research/dossier_generator.py +305 -0
- tools/research/landscape_scanner.py +315 -0
- tools/research/regulatory_scanner.py +248 -0
- tools/research/research_manager.py +469 -0
- tools/research/source_scanner.py +150 -0
- tools/research/vertical_loader.py +118 -0
- tools/saas/__init__.py +0 -0
- tools/saas/licensing/__init__.py +0 -0
- tools/saas/licensing/license_validator.py +345 -0
- tools/scaffold/__init__.py +2 -0
- tools/scaffold/golden_path.py +504 -0
- tools/security/__init__.py +1 -0
- tools/security/agent_output_validator.py +330 -0
- tools/security/agent_trust_scorer.py +652 -0
- tools/security/ai_bom_generator.py +718 -0
- tools/security/ai_telemetry_logger.py +469 -0
- tools/security/atlas_red_team.py +541 -0
- tools/security/code_pattern_scanner.py +382 -0
- tools/security/confabulation_detector.py +265 -0
- tools/security/container_scanner.py +489 -0
- tools/security/dependency_auditor.py +942 -0
- tools/security/endpoint_security_scanner.py +626 -0
- tools/security/mcp_tool_authorizer.py +242 -0
- tools/security/output_verifier.py +427 -0
- tools/security/prompt_injection_detector.py +737 -0
- tools/security/sast_runner.py +946 -0
- tools/security/secret_detector.py +376 -0
- tools/security/threat_modeler.py +678 -0
- tools/security/tool_chain_validator.py +357 -0
- tools/security/vuln_scanner.py +536 -0
- tools/simulation/__init__.py +2 -0
- tools/simulation/ato_simulator.py +517 -0
- tools/simulation/coa_generator.py +1539 -0
- tools/simulation/monte_carlo.py +745 -0
- tools/simulation/scenario_manager.py +1060 -0
- tools/simulation/simulation_engine.py +1091 -0
- tools/simulator/__init__.py +2 -0
- tools/simulator/sim_runner.py +272 -0
- tools/supply_chain/__init__.py +2 -0
- tools/supply_chain/cve_triager.py +690 -0
- tools/supply_chain/dependency_graph.py +630 -0
- tools/supply_chain/isa_manager.py +526 -0
- tools/supply_chain/scrm_assessor.py +531 -0
- tools/supply_chain/slsa_verifier.py +473 -0
- tools/testing/__init__.py +2 -0
- tools/testing/acceptance_validator.py +411 -0
- tools/testing/api_surface_extractor.py +749 -0
- tools/testing/claude_dir_validator.py +831 -0
- tools/testing/data_types.py +199 -0
- tools/testing/e2e_runner.py +715 -0
- tools/testing/fuzz_cli.py +306 -0
- tools/testing/health_check.py +483 -0
- tools/testing/platform_check.py +143 -0
- tools/testing/production_audit.py +1836 -0
- tools/testing/production_remediate.py +803 -0
- tools/testing/screenshot_validator.py +538 -0
- tools/testing/smoke_test.py +283 -0
- tools/testing/test_agent_models.py +117 -0
- tools/testing/test_orchestrator.py +957 -0
- tools/testing/utils.py +229 -0
- tools/writeguard/__init__.py +1 -0
- tools/writeguard/main.py +1 -0
- tools/writing/__init__.py +7 -0
- tools/writing/ai_content_detector.py +316 -0
- tools/writing/analysis_engine.py +454 -0
- tools/writing/batch_analyzer.py +276 -0
- tools/writing/coherence_analyzer.py +221 -0
- tools/writing/govcon_bridge.py +509 -0
- tools/writing/grammar_checker.py +270 -0
- tools/writing/plagiarism_detector.py +106 -0
- tools/writing/readability_scorer.py +201 -0
- tools/writing/rewriter.py +96 -0
- tools/writing/signal_registrar.py +167 -0
- tools/writing/snippet_manager.py +276 -0
- tools/writing/style_enforcer.py +220 -0
- tools/writing/style_guide_manager.py +438 -0
- tools/writing/tone_profiler.py +168 -0
|
@@ -0,0 +1,426 @@
|
|
|
1
|
+
# Innovation & Competitive Analysis: Flowable BOAT & Process Automation Landscape
|
|
2
|
+
|
|
3
|
+
**CUI // SP-CTI**
|
|
4
|
+
**Date:** 2026-03-08
|
|
5
|
+
**Classification:** Internal Research — ICDEV Adaptation Strategy
|
|
6
|
+
|
|
7
|
+
---
|
|
8
|
+
|
|
9
|
+
## Executive Summary
|
|
10
|
+
|
|
11
|
+
Flowable's BOAT (Business Orchestration and Automation Technologies) platform represents a converging trend: **unified process + decision + case automation with governed AI agents**. The $25B BOAT market (projected 2027) is being reshaped by agentic AI, with Gartner predicting 40% of enterprise apps will feature task-specific AI agents by end of 2026. ICDEV is uniquely positioned to dominate the **government/defense segment** of this market — a segment Flowable and competitors largely ignore — by extending its existing orchestration primitives with standards-based process automation and decision engines.
|
|
12
|
+
|
|
13
|
+
---
|
|
14
|
+
|
|
15
|
+
## 1. Flowable BOAT Platform Analysis
|
|
16
|
+
|
|
17
|
+
### What BOAT Is
|
|
18
|
+
**Business Orchestration and Automation Technologies** — a Gartner-coined framework for unifying fragmented automation tools (RPA, BPA, iPaaS, low-code, IDP) under a single orchestration layer.
|
|
19
|
+
|
|
20
|
+
### Core Capabilities
|
|
21
|
+
| Capability | Description |
|
|
22
|
+
|------------|-------------|
|
|
23
|
+
| **Process Orchestration** | BPMN 2.0 workflow engine across systems, teams, geographies |
|
|
24
|
+
| **Case Management** | CMMN (Case Management Model & Notation) for non-linear, adaptive processes |
|
|
25
|
+
| **Decision Automation** | DMN (Decision Model & Notation) for business rules separated from workflow |
|
|
26
|
+
| **AI Agent Orchestration** | 4 agent types: Utility, Document, Knowledge, Orchestrator |
|
|
27
|
+
| **Human-in-the-Loop** | Caseworkers request AI assistance while retaining decision control |
|
|
28
|
+
| **Governance** | Audit trails, token tracking, cost transparency, policy alignment |
|
|
29
|
+
|
|
30
|
+
### 2025.2 Release (Jan 2026) — Key Innovations
|
|
31
|
+
1. **Governed Multi-Agent AI Orchestration** — AI agents operate within process guardrails
|
|
32
|
+
2. **AI Behavior Timelines** — Visual timeline of agent requests, responses, tool usage
|
|
33
|
+
3. **Token/Cost Transparency** — Track AI spend per process instance
|
|
34
|
+
4. **AI-Assisted Change Management** — Dependency analysis before model changes
|
|
35
|
+
5. **Human-in-the-Loop Patterns** — Frontline teams trigger AI summaries/recommendations mid-workflow
|
|
36
|
+
|
|
37
|
+
### Market Position
|
|
38
|
+
- **Target:** Banking, Insurance, Healthcare, Manufacturing
|
|
39
|
+
- **Pricing:** Open-source core (free), commercial enterprise edition
|
|
40
|
+
- **Mindshare:** 6.1% (up from 3.3% YoY — fastest growing in category)
|
|
41
|
+
- **Deployment:** Cloud, on-premises (Windows/Linux)
|
|
42
|
+
|
|
43
|
+
### Strengths
|
|
44
|
+
- Complete standards support (BPMN + CMMN + DMN)
|
|
45
|
+
- Open-source foundation (no vendor lock-in story)
|
|
46
|
+
- Best-in-class case management (CMMN)
|
|
47
|
+
- Governed AI agents in regulated environments
|
|
48
|
+
|
|
49
|
+
### Weaknesses
|
|
50
|
+
- No FedRAMP authorization
|
|
51
|
+
- No government/defense market presence
|
|
52
|
+
- No compliance framework integration (NIST, CMMC, etc.)
|
|
53
|
+
- No embedded/IoT workflow support
|
|
54
|
+
- Limited supply chain and boundary analysis
|
|
55
|
+
|
|
56
|
+
---
|
|
57
|
+
|
|
58
|
+
## 2. Competitive Landscape
|
|
59
|
+
|
|
60
|
+
### Tier 1 — Direct Competitors (Process Automation)
|
|
61
|
+
|
|
62
|
+
| Platform | Mindshare | Key Differentiator | Gov/Defense | AI Approach |
|
|
63
|
+
|----------|-----------|-------------------|-------------|-------------|
|
|
64
|
+
| **Camunda** | 21.8% (↓) | BPMN+DMN, visual-first, 700+ enterprises | Limited | Agentic orchestration (Apr 2025) |
|
|
65
|
+
| **Flowable** | 6.1% (↑) | BPMN+CMMN+DMN, open-source, case management | None | 4 governed agent types |
|
|
66
|
+
| **Temporal** | 7.2% (↑) | Code-first, durable execution, Saga patterns | None | Workflow-native, no BPM |
|
|
67
|
+
| **Pega** | Large | Intelligent automation, case mgmt, low-code | FedRAMP (legacy) | Built-in AI decisioning |
|
|
68
|
+
| **Appian** | Large | Low-code, process mining, RPA | **FedRAMP Authorized** | AI process automation |
|
|
69
|
+
| **ServiceNow** | Dominant | IT workflow, ITSM, platform | **FedRAMP High, IL5** | AI Agents (June 2025 IL5) |
|
|
70
|
+
|
|
71
|
+
### Tier 2 — Adjacent Competitors
|
|
72
|
+
|
|
73
|
+
| Platform | Focus | Gov Presence |
|
|
74
|
+
|----------|-------|-------------|
|
|
75
|
+
| **n8n** | Open-source workflow automation | None |
|
|
76
|
+
| **Prefect** | Data pipeline orchestration | None |
|
|
77
|
+
| **Power Automate** | Microsoft low-code automation | FedRAMP via Azure Gov |
|
|
78
|
+
| **Kissflow** | BPM/workflow SaaS | None |
|
|
79
|
+
| **Bonitasoft** | Open-source BPM | Limited |
|
|
80
|
+
|
|
81
|
+
### Full Competitive Positioning Matrix
|
|
82
|
+
|
|
83
|
+
| Vendor | BPMN/CMMN/DMN | AI-Native | Open Source | Gov/Defense | Embeddable | Price |
|
|
84
|
+
|--------|---------------|-----------|-------------|-------------|------------|-------|
|
|
85
|
+
| **Flowable** | All three | Growing (2025.1) | Apache 2.0 | Some (EU) | Yes | Low |
|
|
86
|
+
| **Camunda** | BPMN+DMN | Strong (Agentic) | Partial (C7 EOL) | Weak | Limited | Medium |
|
|
87
|
+
| **Temporal** | None | Infrastructure | MIT | Weak | Yes | Medium |
|
|
88
|
+
| **n8n** | None | Strong (RAG/LLM) | Fair-code | Weak | Yes | Low |
|
|
89
|
+
| **Pega** | Proprietary | Strongest | No | **FedRAMP High** | No | Very High |
|
|
90
|
+
| **Appian** | Proprietary | Strong | No | **FedRAMP High + IL5** | No | Very High |
|
|
91
|
+
| **Power Automate** | None | Copilot | No | **GCC/GCC High/DoD** | No | Medium |
|
|
92
|
+
| **ServiceNow** | None | AI Agents | No | **FedRAMP High, IL5** | No | Very High |
|
|
93
|
+
| **Bonitasoft** | BPMN | Emerging | GPL | Some (EU) | Yes | Low |
|
|
94
|
+
| **Kissflow** | None | Weak | No | None | No | Medium |
|
|
95
|
+
|
|
96
|
+
### Key Market Intelligence
|
|
97
|
+
- **Temporal** raised $300M Series D at **$5B valuation** (Feb 2026) — riding "durable execution for AI"
|
|
98
|
+
- **Camunda** exceeded **$100M ARR** in 2024, but mindshare declining (27.8% → 21.8%)
|
|
99
|
+
- **Pega** launched "Blueprint for Government Efficiency Toolkit" (2025), FedRAMP High for GenAI
|
|
100
|
+
- **Appian** DISA IL5 Provisional ATO renewed 3 years — trusted by **every cabinet-level US agency**
|
|
101
|
+
- **Power Automate** offering **free M365 Copilot** to federal G5 users through Sep 2026
|
|
102
|
+
- **BRMS market** growing 12.1% CAGR to $5.8B by 2035; 58% of new systems integrate native AI
|
|
103
|
+
|
|
104
|
+
### Key Competitive Insight
|
|
105
|
+
**The gov/defense process automation market is dominated by Appian, Pega, ServiceNow, and Power Automate** — all are expensive, proprietary, and lack:
|
|
106
|
+
- NIST 800-53 native control mapping
|
|
107
|
+
- CMMC/FedRAMP auto-crosswalk
|
|
108
|
+
- Supply chain risk management integration
|
|
109
|
+
- Digital thread traceability (MBSE)
|
|
110
|
+
- ATO boundary impact analysis
|
|
111
|
+
- Zero Trust Architecture integration
|
|
112
|
+
|
|
113
|
+
**This is ICDEV's whitespace.**
|
|
114
|
+
|
|
115
|
+
---
|
|
116
|
+
|
|
117
|
+
## 3. Market Trends (2025-2026)
|
|
118
|
+
|
|
119
|
+
### Trend 1: Agentic Process Automation
|
|
120
|
+
- 40% of enterprise apps will feature AI agents by end of 2026 (Gartner)
|
|
121
|
+
- 1,445% surge in multi-agent system inquiries Q1 2024 → Q2 2025
|
|
122
|
+
- "Puppeteer orchestrators" coordinating specialist agents replacing monolithic models
|
|
123
|
+
- **ICDEV already has this** — 12-agent architecture with A2A protocol
|
|
124
|
+
|
|
125
|
+
### Trend 2: FedRAMP 20x Automation
|
|
126
|
+
- 80%+ of FedRAMP requirements will have automated validation (narrative → machine-readable)
|
|
127
|
+
- Kovr.ai achieved FedRAMP authorization in 6 weeks using automation
|
|
128
|
+
- FedRAMP Consolidated Rules 2026 (CR26) provides 2.5-year roadmap
|
|
129
|
+
- **ICDEV opportunity:** cATO Live Evidence + OSCAL streaming already align with 20x
|
|
130
|
+
|
|
131
|
+
### Trend 3: Governed AI in Regulated Industries
|
|
132
|
+
- Flowable 2025.2 explicitly targets "regulated operations"
|
|
133
|
+
- Human-in-the-loop patterns are table stakes
|
|
134
|
+
- Token tracking, cost transparency, behavior auditing required
|
|
135
|
+
- **ICDEV already has:** AI telemetry (SHA-256 hashed), ATLAS assessment, trust scoring
|
|
136
|
+
|
|
137
|
+
### Trend 4: Hyperautomation Convergence
|
|
138
|
+
- Process automation + AI + RPA + process mining → unified platform
|
|
139
|
+
- 42% faster process execution with hyperautomation
|
|
140
|
+
- Decision engines (DMN) separating rules from workflows
|
|
141
|
+
- **ICDEV gap:** No formal DMN engine or visual BPMN modeler
|
|
142
|
+
|
|
143
|
+
### Trend 5: Process Mining & Bottleneck Detection
|
|
144
|
+
- Automated discovery of actual process flows vs. designed flows
|
|
145
|
+
- Statistical bottleneck analysis replaces manual observation
|
|
146
|
+
- **ICDEV has partial coverage:** VSM Engine (DORA metrics, p90 bottleneck detection)
|
|
147
|
+
|
|
148
|
+
---
|
|
149
|
+
|
|
150
|
+
## 4. ICDEV Current Capability Mapping
|
|
151
|
+
|
|
152
|
+
### What ICDEV Already Has (vs. BOAT Platforms)
|
|
153
|
+
|
|
154
|
+
| BOAT Capability | ICDEV Equivalent | Coverage |
|
|
155
|
+
|-----------------|-----------------|----------|
|
|
156
|
+
| Process Orchestration | Runbook Engine (DAG execution, Kahn's algorithm) | ★★★☆☆ |
|
|
157
|
+
| Decision Automation | Gate Enforcer, Feature Flags, Pipeline Gates | ★★☆☆☆ |
|
|
158
|
+
| Case Management | Requirements Intake (RICOAS 5-stage pipeline) | ★★☆☆☆ |
|
|
159
|
+
| AI Agent Orchestration | 12-agent A2A architecture, prompt chains | ★★★★★ |
|
|
160
|
+
| Human-in-the-Loop | Intake sessions, narrative approval workflow | ★★★☆☆ |
|
|
161
|
+
| Audit/Governance | Append-only audit trail, AI telemetry, provenance | ★★★★★ |
|
|
162
|
+
| Visual Process Modeling | None (no BPMN/CMMN visual editor) | ☆☆☆☆☆ |
|
|
163
|
+
| Decision Tables (DMN) | None (rules embedded in Python) | ☆☆☆☆☆ |
|
|
164
|
+
| Process Mining | VSM Engine (DORA metrics, bottleneck detection) | ★★★☆☆ |
|
|
165
|
+
| RPA Integration | DataBridge connectors, Connector Forge | ★★★☆☆ |
|
|
166
|
+
| Saga/Compensation | Saga Coordinator (tools/orchestration/) | ★★★☆☆ |
|
|
167
|
+
| Event-Driven | Event Bus (tools/events/) | ★★☆☆☆ |
|
|
168
|
+
| Circuit Breaking | Circuit Breaker (tools/core/) | ★★★★☆ |
|
|
169
|
+
|
|
170
|
+
### What Makes ICDEV Unique (Competitors Don't Have)
|
|
171
|
+
|
|
172
|
+
| Capability | Competitive Moat |
|
|
173
|
+
|------------|-----------------|
|
|
174
|
+
| **9-framework compliance crosswalk** | One control → auto-populates FedRAMP, CMMC, 800-171, CISA SbD |
|
|
175
|
+
| **ATO boundary impact analysis** | GREEN/YELLOW/ORANGE/RED tier assessment |
|
|
176
|
+
| **Digital thread traceability** | SysML XMI → requirements → code → compliance |
|
|
177
|
+
| **Supply chain risk management** | Dependency graph, SCRM assessment, CVE triage |
|
|
178
|
+
| **Zero Trust Architecture** | 7-pillar DoD ZTA scoring, NIST 800-207 |
|
|
179
|
+
| **cATO live evidence streaming** | Continuous OSCAL, evidence freshness monitoring |
|
|
180
|
+
| **Monte Carlo ATO simulation** | PERT-sampled timeline prediction |
|
|
181
|
+
| **Embedded/IoT workflow** | FreeRTOS, fleet management, OTA, TinyML |
|
|
182
|
+
| **AI security stack** | ATLAS, OWASP LLM, prompt injection, agent trust |
|
|
183
|
+
|
|
184
|
+
---
|
|
185
|
+
|
|
186
|
+
## 5. Innovation Adaptation Recommendations
|
|
187
|
+
|
|
188
|
+
### Priority 1: Decision Automation Engine (DMN-Lite) ★★★★★
|
|
189
|
+
**What:** A lightweight DMN-compatible decision table engine for compliance and operational rules.
|
|
190
|
+
**Why:** Every competitor (Flowable, Camunda, Pega) has DMN. ICDEV's gate logic is scattered across Python scripts.
|
|
191
|
+
**How:**
|
|
192
|
+
- Create `tools/decisions/dmn_engine.py` — YAML-defined decision tables
|
|
193
|
+
- Support FEEL (Friendly Enough Expression Language) subset
|
|
194
|
+
- Integrate with existing gate enforcer and pipeline gates
|
|
195
|
+
- Store decision results in audit trail (NIST AU compliance)
|
|
196
|
+
- Map decisions to NIST 800-53 controls automatically
|
|
197
|
+
|
|
198
|
+
**Business Value:** Replace hardcoded gate logic with declarative, auditable decision tables. Enables non-developer compliance officers to modify rules.
|
|
199
|
+
|
|
200
|
+
**Adaptation from Flowable:** Their DMN separation of decision logic from workflow is the right pattern. ICDEV should do this with YAML-defined tables (air-gap safe, GOTCHA args layer).
|
|
201
|
+
|
|
202
|
+
### Priority 2: Process Workflow Engine (BPMN-Lite) ★★★★☆
|
|
203
|
+
**What:** Extend the runbook DAG engine into a general-purpose process orchestration engine.
|
|
204
|
+
**Why:** The runbook engine already has DAG execution (Kahn's algorithm), conditional branching, and snippet composition. It's 80% of a BPMN engine.
|
|
205
|
+
**How:**
|
|
206
|
+
- Extend `tools/cloudforge/runbooks/engine.py` to support:
|
|
207
|
+
- User tasks (human approval gates)
|
|
208
|
+
- Timer events (SLA enforcement)
|
|
209
|
+
- Parallel gateways (already have via DAG)
|
|
210
|
+
- Exclusive gateways (already have via conditional branching)
|
|
211
|
+
- Sub-processes (already have via snippets)
|
|
212
|
+
- Add `tools/workflow/process_engine.py` as a thin wrapper
|
|
213
|
+
- Define compliance workflows as process definitions in `args/workflows/`
|
|
214
|
+
- Track process instances in DB with state machine
|
|
215
|
+
|
|
216
|
+
**Adaptation from Flowable:** Their BPMN+CMMN foundation. ICDEV doesn't need a full visual modeler — YAML process definitions + CLI execution fits the air-gap, DevSecOps workflow better.
|
|
217
|
+
|
|
218
|
+
### Priority 3: Governed AI Agent Orchestration Dashboard ★★★★☆
|
|
219
|
+
**What:** Visual timeline of AI agent actions, costs, and decisions — matching Flowable 2025.2's governance features.
|
|
220
|
+
**Why:** ICDEV already has 12 agents, AI telemetry, provenance, and SHAP attribution. But it lacks a unified governance view.
|
|
221
|
+
**How:**
|
|
222
|
+
- New dashboard page: `/agent-governance`
|
|
223
|
+
- Display: agent action timelines, token usage per agent/task, cost tracking
|
|
224
|
+
- Integrate existing: `ai_telemetry_logger.py`, `agent_trust_scorer.py`, `agent_shap.py`
|
|
225
|
+
- Add: per-process-instance AI cost rollup
|
|
226
|
+
- Map agent decisions to compliance controls
|
|
227
|
+
|
|
228
|
+
**Adaptation from Flowable:** Their AI behavior timelines and token tracking. ICDEV already collects this data — it just needs visualization.
|
|
229
|
+
|
|
230
|
+
### Priority 4: Case Management for ATO Workflows ★★★☆☆
|
|
231
|
+
**What:** CMMN-inspired adaptive case management for ATO authorization processes.
|
|
232
|
+
**Why:** ATO isn't a linear process — it's a case with stages, milestones, discretionary tasks, and human judgment. Perfect fit for CMMN patterns.
|
|
233
|
+
**How:**
|
|
234
|
+
- Model ATO as a "case" with stages: Initiation → Categorization → Selection → Implementation → Assessment → Authorization → Monitoring
|
|
235
|
+
- Each stage has required tasks, discretionary tasks, and milestones
|
|
236
|
+
- Integrate with existing: boundary analyzer, compliance generators, cATO engine
|
|
237
|
+
- Track case state with entry/exit criteria per stage
|
|
238
|
+
|
|
239
|
+
**Adaptation from Flowable:** Their CMMN case management engine. ICDEV should adopt the pattern (not the standard) for compliance-specific case workflows.
|
|
240
|
+
|
|
241
|
+
### Priority 5: Process Mining for Compliance Workflows ★★★☆☆
|
|
242
|
+
**What:** Analyze actual workflow execution patterns vs. designed workflows from audit trail data.
|
|
243
|
+
**Why:** VSM Engine already does DORA metrics and bottleneck detection. Extending to process mining reveals compliance workflow inefficiencies.
|
|
244
|
+
**How:**
|
|
245
|
+
- Mine audit_trail for actual process flows (event sequences per project)
|
|
246
|
+
- Compare against designed workflows (goal definitions)
|
|
247
|
+
- Identify: bottlenecks, rework loops, skipped gates, SLA violations
|
|
248
|
+
- Generate conformance reports
|
|
249
|
+
|
|
250
|
+
**Adaptation from Competitors:** Camunda's Optimize module and Celonis-style process mining, applied to compliance/ATO workflows.
|
|
251
|
+
|
|
252
|
+
### Priority 6: FedRAMP 20x Automation Accelerator ★★★★★
|
|
253
|
+
**What:** Machine-readable compliance validation aligned with FedRAMP 20x's 80%+ automation target.
|
|
254
|
+
**Why:** FedRAMP 20x is shifting from narratives to automated validation. ICDEV's cATO Live Evidence and OSCAL streaming are already 60% there.
|
|
255
|
+
**How:**
|
|
256
|
+
- Extend `cato_live_engine.py` to emit FedRAMP 20x Key Security Indicators (KSIs)
|
|
257
|
+
- Create `tools/compliance/fedramp_20x_validator.py` — automated control validation
|
|
258
|
+
- Generate machine-readable evidence packages (OSCAL Assessment Results)
|
|
259
|
+
- Integrate with continuous monitoring pipeline
|
|
260
|
+
- Map to CR26 (Consolidated Rules 2026) requirements
|
|
261
|
+
|
|
262
|
+
**Market Timing:** CR26 launches May 2026. First-mover advantage for automated FedRAMP 20x compliance.
|
|
263
|
+
|
|
264
|
+
### Priority 7: Connector Forge → iPaaS Bridge ★★☆☆☆
|
|
265
|
+
**What:** Position Connector Forge as ICDEV's iPaaS (Integration Platform as a Service) layer.
|
|
266
|
+
**Why:** BOAT platforms integrate RPA + iPaaS + BPA. ICDEV's Connector Forge + DataBridge already provide dynamic integration — just needs the BOAT framing.
|
|
267
|
+
**How:**
|
|
268
|
+
- Rebrand Connector Forge marketplace as "Integration Hub"
|
|
269
|
+
- Add pre-built connectors for government systems (ServiceNow, DOORS, Jira, GitLab)
|
|
270
|
+
- Expose connectors as workflow service tasks
|
|
271
|
+
- Enable Forge connectors to be called from process definitions
|
|
272
|
+
|
|
273
|
+
---
|
|
274
|
+
|
|
275
|
+
## 6. Strategic Positioning
|
|
276
|
+
|
|
277
|
+
### ICDEV's Unique Value Proposition vs. BOAT Platforms
|
|
278
|
+
|
|
279
|
+
```
|
|
280
|
+
┌─────────────────────────────────────────────────────────────────┐
|
|
281
|
+
│ ICDEV DIFFERENTIATION │
|
|
282
|
+
│ │
|
|
283
|
+
│ Flowable/Camunda: Process + Decision + Case + AI │
|
|
284
|
+
│ ServiceNow: IT Workflow + ITSM + AI │
|
|
285
|
+
│ Appian: Low-Code + Process + RPA + AI │
|
|
286
|
+
│ │
|
|
287
|
+
│ ICDEV: Process + Decision + AI Agents │
|
|
288
|
+
│ + 9-Framework Compliance Crosswalk │
|
|
289
|
+
│ + ATO Boundary Impact Analysis │
|
|
290
|
+
│ + Digital Thread (MBSE) │
|
|
291
|
+
│ + Supply Chain Risk Management │
|
|
292
|
+
│ + Zero Trust Architecture │
|
|
293
|
+
│ + cATO Live Evidence (OSCAL) │
|
|
294
|
+
│ + FedRAMP 20x Automation │
|
|
295
|
+
│ + Embedded/IoT Workflow │
|
|
296
|
+
│ + AI Security (ATLAS/OWASP) │
|
|
297
|
+
│ │
|
|
298
|
+
│ = The only BOAT platform built for government compliance │
|
|
299
|
+
└─────────────────────────────────────────────────────────────────┘
|
|
300
|
+
```
|
|
301
|
+
|
|
302
|
+
### Tagline Options
|
|
303
|
+
1. **"BOAT for Government"** — Business Orchestration & Automation Technologies, compliance-native
|
|
304
|
+
2. **"Process Automation with Built-in ATO"** — Every workflow is auditable, every decision is traceable
|
|
305
|
+
3. **"The Compliance-Native BOAT Platform"** — One process engine, nine compliance frameworks
|
|
306
|
+
|
|
307
|
+
### Go-to-Market Priority
|
|
308
|
+
1. **FedRAMP 20x early adopters** — Agencies racing to automate compliance validation
|
|
309
|
+
2. **DoD programs needing cATO** — Continuous ATO with governed AI agents
|
|
310
|
+
3. **Defense contractors (CMMC L2/L3)** — Automated compliance workflow
|
|
311
|
+
4. **IC community** — Air-gap compatible (all stdlib, SQLite fallback)
|
|
312
|
+
|
|
313
|
+
---
|
|
314
|
+
|
|
315
|
+
## 7. Implementation Roadmap
|
|
316
|
+
|
|
317
|
+
| Phase | Innovation | Effort | Impact |
|
|
318
|
+
|-------|-----------|--------|--------|
|
|
319
|
+
| **Phase A** | DMN-Lite Decision Engine | 2-3 sprints | Replaces scattered gate logic, auditable |
|
|
320
|
+
| **Phase B** | FedRAMP 20x KSI Emitter | 1-2 sprints | First-mover, CR26 alignment |
|
|
321
|
+
| **Phase C** | Process Engine (extend runbook DAG) | 3-4 sprints | BPMN-lite for compliance workflows |
|
|
322
|
+
| **Phase D** | Agent Governance Dashboard | 2 sprints | Matches Flowable 2025.2, visual proof |
|
|
323
|
+
| **Phase E** | ATO Case Management | 2-3 sprints | CMMN-inspired adaptive ATO workflow |
|
|
324
|
+
| **Phase F** | Process Mining | 2 sprints | Conformance analysis from audit trail |
|
|
325
|
+
| **Phase G** | iPaaS Positioning | 1 sprint | Rebrand + pre-built gov connectors |
|
|
326
|
+
|
|
327
|
+
---
|
|
328
|
+
|
|
329
|
+
## 8. Market Data & Validated Trends (Deep Research)
|
|
330
|
+
|
|
331
|
+
### Agentic Process Automation — Hard Numbers
|
|
332
|
+
- **79% of organizations** already run AI agents in production (PwC May 2025)
|
|
333
|
+
- **Only 11%** have reached full production — infrastructure is the blocker, not AI capability (Deloitte)
|
|
334
|
+
- **40%+ agentic AI projects may be canceled by 2027** due to lack of measurable ROI (Gartner)
|
|
335
|
+
- **BRMS market:** $2.48B in 2026 (global business rules/decision engine market)
|
|
336
|
+
- **Hyperautomation market:** approaching **$1.04 trillion** (CAGR 11.9%)
|
|
337
|
+
|
|
338
|
+
### FedRAMP 20x — Mandatory Timeline
|
|
339
|
+
- **March 2025:** GSA announced FedRAMP 20x
|
|
340
|
+
- **September 2026:** All CSPs must transition to **machine-readable OSCAL authorization packages**
|
|
341
|
+
- **Goal:** Reduce authorization timelines from **years to weeks**
|
|
342
|
+
- **80%+ of requirements** will have automated validation (narratives → machine-readable)
|
|
343
|
+
- FedRAMP PMO collaborating with OMB, NIST, and CISA on interoperable standards
|
|
344
|
+
|
|
345
|
+
### DoD Workflow Automation — Active Mandates
|
|
346
|
+
- **DD Form 2875 replacement:** All DoD system access requests must use automated ICAM workflows by **September 2026**
|
|
347
|
+
- **Appian achieved IL5 provisional ATO** — used for US Army Global Force Information Management
|
|
348
|
+
- **DoD Software Modernization FY25-26** mandates commercial practices and DevSecOps
|
|
349
|
+
- **BigBear.AI and Palantir** selected alongside Appian for force planning systems
|
|
350
|
+
|
|
351
|
+
### Decision Automation — Three-Paradigm Convergence
|
|
352
|
+
1. **Deterministic rules** (decision tables, DMN) — for auditability
|
|
353
|
+
2. **Probabilistic ML models** — for optimization
|
|
354
|
+
3. **Generative AI inference** — for drafting/summarization
|
|
355
|
+
- Gartner: **AI will augment or automate 50% of business decisions by 2027**
|
|
356
|
+
- Strongest architectures combine all three paradigms
|
|
357
|
+
|
|
358
|
+
### Process Mining — From Retrospective to Autonomous
|
|
359
|
+
- 61% of respondents prioritize process improvement (Deloitte Global Process Mining Survey 2025)
|
|
360
|
+
- Evolution: static discovery → **real-time intelligence + autonomous optimization**
|
|
361
|
+
- Emerging platforms automatically generate executable automation code from discovered processes
|
|
362
|
+
- **ICDEV opportunity:** Mine audit_trail for process variants, bottlenecks, conformance
|
|
363
|
+
|
|
364
|
+
### Cross-Cutting Patterns Confirmed
|
|
365
|
+
| Pattern | Evidence | ICDEV Alignment |
|
|
366
|
+
|---------|----------|----------------|
|
|
367
|
+
| Hybrid human-AI governance | Every vendor adopting; every trend shows it | ★★★★★ (intake sessions, narrative approval) |
|
|
368
|
+
| Deterministic + probabilistic convergence | BRMS + ML + GenAI unifying | ★★★☆☆ (deterministic gates, needs DMN) |
|
|
369
|
+
| Machine-readable everything | OSCAL, BPMN 2.0, DMN, FedRAMP 20x | ★★★★☆ (OSCAL streaming, needs DMN) |
|
|
370
|
+
| Continuous over periodic | Compliance, monitoring, process mining | ★★★★★ (cATO live evidence) |
|
|
371
|
+
| Infrastructure as real bottleneck | 79% using agents, only 11% in full production | ★★★★☆ (air-gap ready, stdlib) |
|
|
372
|
+
|
|
373
|
+
---
|
|
374
|
+
|
|
375
|
+
## 9. Risk Assessment
|
|
376
|
+
|
|
377
|
+
| Risk | Mitigation |
|
|
378
|
+
|------|-----------|
|
|
379
|
+
| Over-engineering BPMN support | Keep YAML-defined, no visual modeler needed |
|
|
380
|
+
| DMN scope creep | Implement FEEL subset only, not full spec |
|
|
381
|
+
| Competing with ServiceNow on workflow | Don't — compete on compliance depth |
|
|
382
|
+
| FedRAMP 20x final rules may differ | Build on OSCAL foundation (standard-agnostic) |
|
|
383
|
+
| Air-gap requirements limit features | All stdlib, no cloud dependencies (already core design) |
|
|
384
|
+
|
|
385
|
+
---
|
|
386
|
+
|
|
387
|
+
## Sources
|
|
388
|
+
|
|
389
|
+
- [Flowable BOAT Solution](https://www.flowable.com/solutions/boat)
|
|
390
|
+
- [Flowable 2025.2 Multi-Agent AI Orchestration](https://hackread.com/flowable-2025-2-multi-agent-ai-orchestration-enterprises/)
|
|
391
|
+
- [Flowable Governed AI Agents in Regulated Operations](https://www.newsfilecorp.com/release/279826)
|
|
392
|
+
- [Flowable Process Automation with Agentic AI](https://www.processexcellencenetwork.com/ai/news/flowable-eyes-new-standard-in-process-automation-with-agentic-ai)
|
|
393
|
+
- [BOAT Guide (Kissflow)](https://kissflow.com/workflow/bpm/business-orchestration-and-automation-technologies-boat/)
|
|
394
|
+
- [Camunda vs Flowable Comparison](https://onlu.ch/en/camunda-vs-flowable-a-comparison-of-bpm-engines/)
|
|
395
|
+
- [Camunda Decision Engine (DMN)](https://camunda.com/platform/decision-engine/)
|
|
396
|
+
- [Gartner: 40% Enterprise Apps with AI Agents by 2026](https://www.gartner.com/en/newsroom/press-releases/2025-08-26-gartner-predicts-40-percent-of-enterprise-apps-will-feature-task-specific-ai-agents-by-2026-up-from-less-than-5-percent-in-2025)
|
|
397
|
+
- [Gartner Top Strategic Technology Trends 2026](https://www.gartner.com/en/newsroom/press-releases/2025-10-20-gartner-identifies-the-top-strategic-technology-trends-for-2026)
|
|
398
|
+
- [Deloitte: AI Agent Orchestration](https://www.deloitte.com/us/en/insights/industry/technology/technology-media-and-telecom-predictions/2026/ai-agent-orchestration.html)
|
|
399
|
+
- [ServiceNow Agentic AI for Government](https://www.servicenow.com/blogs/2025/driving-government-efficiency-agentic-ai)
|
|
400
|
+
- [FedRAMP AI Initiative](https://www.fedramp.gov/ai/)
|
|
401
|
+
- [FedRAMP 20x Automation Framework](https://www.crowell.com/en/insights/client-alerts/fedramp-20x-proposed-framework-aims-to-increase-automation-and-efficiency)
|
|
402
|
+
- [FedRAMP 20x Three Months In](https://www.fedramp.gov/2025-06-26-fedramp-20x-three-months-in-and-maximizing-innovation/)
|
|
403
|
+
- [Automation Key to Federal IT Compliance](https://fedscoop.com/why-automation-is-key-to-modernizing-federal-it-compliance/)
|
|
404
|
+
- [Temporal vs Camunda vs Conductor Comparison](https://medium.com/@easwaranvijayakumar/workflow-orchestration-showdown-temporal-io-vs-orkes-conductor-vs-camunda-e59fd79c2b65)
|
|
405
|
+
|
|
406
|
+
- [Why the Next Era of Agentic Automation Changes Everything](https://beam.ai/agentic-insights/ai-landscape-2026-why-the-era-of-agentic-automation-changes-everything)
|
|
407
|
+
- [How Agentic AI Reshapes Process Excellence](https://www.processexcellencenetwork.com/process-excellence/articles/8-ways-agentic-ai-will-transform-process-excellence-in-2026)
|
|
408
|
+
- [AI Agent Trends 2026 | SS&C Blue Prism](https://www.blueprism.com/resources/blog/future-ai-agents-trends/)
|
|
409
|
+
- [Benefits of BPMN AI Agents | Camunda](https://camunda.com/blog/2025/05/benefits-bpmn-ai-agents/)
|
|
410
|
+
- [Decision Tables for Automating Business Rules | Camunda](https://camunda.com/blog/2025/02/decision-tables-for-automating-business-rules/)
|
|
411
|
+
- [Future of AI Automated Decision Making | InRule](https://inrule.com/ai-automated-decision-making-trends/)
|
|
412
|
+
- [6 Trends Shaping Process Mining in 2026](https://www.processexcellencenetwork.com/process-mining/articles/6-trends-shaping-process-mining-in-2026)
|
|
413
|
+
- [GSA Announces FedRAMP 20x](https://www.gsa.gov/about-us/newsroom/news-releases/gsa-announces-fedramp-20x-03242025)
|
|
414
|
+
- [FedRAMP 20x Overview](https://www.fedramp.gov/20x/)
|
|
415
|
+
- [DoD Replaces Paper-Based Access Requests with Automated ICAM](https://federalnewsnetwork.com/cybersecurity/2026/02/dod-replaces-paper-based-access-requests-with-automated-icam-workflow/)
|
|
416
|
+
- [Defense Digital Modernization | Appian](https://appian.com/blog/2026/defense-digital-modernization)
|
|
417
|
+
- [DoD DevSecOps & ATO Reform | GovCIO](https://govciomedia.com/dod-advances-devsecops-ato-reform-to-speed-mission-ready-software/)
|
|
418
|
+
- [Hyperautomation Complete 2026 Guide | Leapwork](https://www.leapwork.com/blog/hyperautomation-what-why-how)
|
|
419
|
+
- [Regulatory Compliance AI Automation 2026 | Terralogic](https://terralogic.com/regulatory-compliance-ai-automation-2026/)
|
|
420
|
+
- [Flowable AI Studio & Agent Engine](https://www.flowable.com/solutions/ai-business-process-automation)
|
|
421
|
+
- [Flowable 2025.1 Agentic AI Release](https://www.flowable.com/blog/releases/flowable-2025-1-intelligent-orchestration)
|
|
422
|
+
- [Flowable A2A/MCP Agent Orchestration](https://hackread.com/flowable-summer-2025-update-agentic-ai-capabilities/)
|
|
423
|
+
|
|
424
|
+
---
|
|
425
|
+
|
|
426
|
+
*Generated by ICDEV Innovation Engine — 2026-03-08*
|