# Component map

This map summarizes how top-level modules interact. It is a compact index to
module dossiers, not a replacement for them.

Advisory and evidence services
- Concelier: advisory ingestion under the Aggregation-Only Contract (AOC).
- Excititor: VEX ingestion and normalization under AOC guardrails.
- VEX Lens: conflict analysis and evidence browsing for VEX.
- Evidence Locker: long-term storage for signed evidence bundles.
- Export Center: packages evidence and offline bundles for distribution.

Scanning, SBOM, and risk
- Scanner: deterministic scan pipeline (web service + worker).
- SBOM Service: inventory store and delta cache for SBOMs.
- Graph and Cartographer: identity graph and relationship queries.
- Vuln Explorer: evidence-linked findings view with VEX-first posture.

Policy and governance
- Policy Engine: deterministic rule evaluation and explain traces.
- Task Packs and Task Runner: automation workflows with approvals.
- Governance surfaces: approvals, exceptions, and audit exports.

Identity, signing, and provenance
- Authority: identity, tokens, scopes, tenancy enforcement.
- Signer: DSSE signing and key management integration.
- Attestor: attestations, envelopes, and transparency logging.
- Issuer Directory: trusted issuer catalog for signatures and VEX.

Scheduling and orchestration
- Scheduler: change detection and rescan orchestration.
- Orchestrator: job dispatch and coordination for scans and exports.

Runtime and security enforcement
- Zastava: runtime admission and policy enforcement.
- Signals: runtime and reachability signals feeding policy and triage.

Notification and UI
- Notifications Studio: rule-based notifications and channel delivery.
- UI Console: Angular app for findings, policy, runs, and admin.
- Web Gateway: API routing and auth enforcement for UI and CLI.

Offline and telemetry
- Airgap and mirrors: offline bundles, sealing, and staleness control.
- Telemetry stack: metrics, logs, traces, and offline storage.

Related references
- docs/technical/architecture/component-map.md
- docs/modules/*/architecture.md