Kumoss request flow · Phases 7-8

Kumoss request flow · Phases 7-8 A sequence diagram generated by Archify. 26 · Report Generator (main model) 27 · report, plan, drift JSON, code changes to object storage (metadata in PostgreSQL) 28 · presigned URLs for the UI 29 · [checker enabled] Compliance Auditor (small, no repo tools) judges request + raw plan [checker disabled] the step yields an empty passing report instead 30 · structured findings via report_compliance_findings (rule id, severity, resource, message, fix) 31 · VERDICT: any ERROR or CRITICAL means fail — the model's own "passed" is ignored · plan pinned either way 32a · [fail] sessions.is_blocked = true 33a · [fail] iac.compliance.failed to Slack (fire-and-forget) 34a · [fail] apply and PR merge will answer 409 · PR creation still allowed 32b · [pass] sessions.is_blocked = false 33b · [pass] generated and validated — awaiting human apply PHASE 7 · Report and artifacts PHASE 8 · Independent compliance audit, verdict computed in code — when the checker is disabled the step yields an empty passing report Web UI + Core API · Sequence participant Web UI + Core API Control gates · Sequence participant Control gates LLM agents · Sequence participant LLM agents core-db · Sequence participant core-db External · Sequence participant External Legend return security async trace default message