Glossary

ArchPilot - The bot module that leaves line-by-line architecture comments on every PR/MR.

ArchScan - The module that produces a quality score and a seven-section report for a codebase.

ArchSecurity - CWE-tagged SAST; maps findings to OWASP/PCI-DSS/STIG/CASA.

ADR - Architecture Decision Record. Numbered decisions following the MADR lifecycle.

MADR - Markdown Architectural Decision Records; a common format/lifecycle for ADRs.

Runner - The language-specific analyzer Docker image that runs in the customer’s CI pipeline.

Report API - The token-protected API surface that runners send their analysis results to.

Layer - A logical architectural layer defined in arch.yaml (e.g. presentation, domain, infrastructure).

Dependency graph - A graph of directed dependencies between modules/files; reveals cycles and leaks.

Workspace - The tenant boundary; projects and members belong to it.

Licence - The installation’s signed licence; it defines the limits and which modules are enabled.

SAST - Static Application Security Testing; static security analysis without running the code.

CWE - Common Weakness Enumeration; a standard identification system for security weaknesses.

SaaS / OnPrem - Deployment modes; OnPrem is a fully on-premises (air-gapped) installation.