Evidence Engines
How DocPull and PolicyStrata feed the commercial Agent Assurance control plane.
Boundary
Agent Assurance orchestrates the OSS engines; it should not reimplement them.
| Engine | Owns | Agent Assurance stores |
|---|---|---|
| DocPull | Source inventory, context sync, diffs, citation coverage | Context finding summaries and artifact refs |
| PolicyStrata | Policy witnesses, tenant/PII/SQL/RLS invariants | Policy finding summaries and release gate state |
DocPull Signals
- Source freshness.
- Missing or stale source dependencies.
- Citation coverage.
- Context pack reproducibility.
- Source diff references.
PolicyStrata Signals
- Tenant isolation failures.
- PII minimization failures.
- SQL and RLS drift.
- Contract entitlement drift.
- Policy witness mismatches.
Integration Contract
{
"id": "tenant_scope_required",
"engine": "policystrata",
"severity": "fail",
"title": "Tenant scope is required",
"summary": "Generated SQL can access account rows without tenant predicate.",
"witnessRef": "policystrata/witnesses.redacted.json#tenant-scope"
}