SecFusionAgent Technical Design 2: Task, Investigation, and Execution Plane

SecFusionAgent Technical Design 2: Task, Investigation, and Execution Plane An architecture diagram generated by Archify. Task Entry · User · Event · Watch · Architecture component · TaskIntent Task Entry User · Event · Watch TaskIntent Shared Task Runtime · Contract · Run · Role · Architecture component · TaskContract / TaskRun Shared Task Runtime Contract · Run · Role TaskContract / TaskRun Context & Handoff · Refs · Revisions · Scope · Architecture component · ContextManifest Context & Handoff Refs · Revisions · Scope ContextManifest Controlled Perception · Exact · Hybrid · External · M4–M6 Investigation / Perception / Decision Plane · Request → Percept Controlled Perception Exact · Hybrid · External Request → Percept M4 Context / State · View · Case · EvidenceNeed · M4–M6 Investigation / Perception / Decision Plane · Read / Durable M4 Context / State View · Case · EvidenceNeed Read / Durable M6 Decision Runtime · Conclusion · Citation · Unknown · M4–M6 Investigation / Perception / Decision Plane · DecisionResult M6 Decision Runtime Conclusion · Citation · Unknown DecisionResult M3 Enrichment Role · State · Operators · Architecture component · Background / Delegated M3 Enrichment Role State · Operators Background / Delegated M5 Investigation Role · Need · Planner · Bounded loop · M4–M6 Investigation / Perception / Decision Plane · VERIFY / INVESTIGATE / WATCH M5 Investigation Role Need · Planner · Bounded loop VERIFY / INVESTIGATE / WATCH Skill / Experience · Procedure · Guard · Fallback · M4–M6 Investigation / Perception / Decision Plane · Procedural prior Skill / Experience Procedure · Guard · Fallback Procedural prior M1–M3 Evidence World · Facts · Relations · Incidents · Docs · Architecture component · Raw evidence M1–M3 Evidence World Facts · Relations · Incidents · Docs Raw evidence Async Event Plane · Event log · Redis Streams · Architecture component · Wake / Refresh Async Event Plane Event log · Redis Streams Wake / Refresh Execution Control Plane · Capability · Policy · Budget · Architecture component · Identity · Network · Sandbox Execution Control Plane Capability · Policy · Budget Identity · Network · Sandbox M4–M6 Investigation / Perception / Decision Plane

Task / Context / two canonical Roles

  • • TaskIntent → TaskContract → TaskRun; Role is runtime configuration, while a persistent Case spans multiple short runs
  • • ContextManifest hands off refs and revisions; M3 Enrichment and M5 Investigation share Task Runtime but keep separate state and completion

Evidence / State / Control

  • • Evidence World owns durable facts; Percept is a current slice; M4 separates read-only ContextView from persistent Case / EvidenceNeed
  • • Capability, Policy, Budget, Identity, Network, Sandbox, and side-effect gates constrain real actions