zuumb: how one pipeline cycle runs

Diagram guide Explore this system

Inspecting compiled semantics

E ExportT ThemeS Style0 Reset+ Zoom in- Zoom outEsc Close

Find a node

⌕ /

No matching nodes

Semantic passport

Verified source

Authored reach

Path Click where the path starts

Click two nodes on the diagram

Click a start, then an end. Paths follow the arrows.

Semantic lens Compare system roles

Choose up to two semantic kinds. One reveals its real traffic; two compare only direct authored relationships.

Choose a kind to inspect its nodes and touching relationships.

Semantic radar Building overview

Click nodeDrag to pan

Semantic radar needs more MAP space.

run_pipeline_cycle polls Wazuh, triages up to 40 pending alerts, then rebuilds incidents, chains, and similarity; the live poller is opt-in (WAZUH_LIVE_POLLING)
If nothing was ingested or triaged, the derived-state rebuild is skipped

Only a redacted brief goes to Claude, and the nav-bar toggle can turn the LLM off
Tasks are only proposals; an action dispatches only after a human click and outside dry-run, which is the default

Node index