audit, advisories and doctors/setup work

docs/modules/ui/architecture.md

@@ -178,11 +178,18 @@ Each feature folder builds as a **standalone route** (lazy loaded). All HTTP sha
   - Kernel/privilege preflight checks for eBPF/ETW observers.
   - Helm and systemd install templates.
   - Agent download and registration flow.
-* **Models**: `integration.models.ts` defines `IntegrationDraft`, `IntegrationProvider`, `WizardStep`, `PreflightCheck`, `AuthMethod`, and provider constants.
- 
----
-
-## 4) Auth, sessions & RBAC
+* **Models**: `integration.models.ts` defines `IntegrationDraft`, `IntegrationProvider`, `WizardStep`, `PreflightCheck`, `AuthMethod`, and provider constants.
+
+### 3.12 Advisor (Ask Stella)
+
+* **Chat panel** scoped to the current artifact, CVE, or release, with citations and evidence chips.
+* **Citations and Evidence** drawer lists object refs (SBOM, VEX, scan IDs) and hashes.
+* **Action confirmation** modal required for any tool action; disabled when policy denies.
+* **Budget indicators** show quota or token budget exhaustion with retry hints.
+
+---
+
+## 4) Auth, sessions & RBAC
 
 ### 4.1 OIDC flow