8-stage agentic remediation

Stage	Specialist agent	Input trigger	Primary action and output	Operational gate
1. Detect	Discovery Agent	SAST, DAST, SCA, EASM feeds	Ingests, de-duplicates, and normalizes raw findings across repositories	Continuous background sync
2. Contextualize	Contextualization Agent	Normalized finding + Knowledge Graph	Maps AST call paths, resolves asset ownership, and checks data sensitivity	Ground-truth code parsing
3. Prioritize	Prioritization Agent	Enriched finding records	Calculates composite risk scores and clusters findings with shared root causes	Blast radius thresholding
4. Plan	Remediation Planning Agent	Prioritized vulnerability cluster	Drafts localized code patches, weighs candidates, and checks side effects	Confidence score assertion
5. Approve	Exception handling / HiTL Agent	Proposed diff + rationale	Reviews candidate patch, sandbox test logs, and blast radius metrics	Supervised engineer approval
6. Remediate	Patch Orchestration Agent	Approved code fix	Opens pull requests directly in GitHub or GitLab and tags component owners	Native CI/CD integration
7. Verify	Validation Agent	Deployed candidate fix	Re-runs exploit triggers and regression suites inside isolated	Isolated testbed validation
8. Audit	Compliance Agent	Verified closed findings	Generates timestamped evidence bundles mapped to OWASP ASVS and NIST SSDF	Continuous feedback sync

100%