What problem does it solve? When designing compliance controls on the Fianu platform, agents must pick the right evidence plugin and understand the exact shape of that plugin's evidence output before writing Rego rules. Choosing the wrong plugin or referencing nonexistent schema fields produces controls that cannot evaluate policy correctly. ## Core Features & Use Cases - Plugin Catalog Lookup: Maps evidence types (SAST, SCA, container scanning, SBOM, signature, DAST, IaC, testing, deployment, pipeline, code review, access control) to candidate plugins via a categorized reference catalog. - Schema Discovery: Queries GET /controls/:entity_key/schemas?producer={pluginPath} to retrieve the field paths and types available in a plugin's evidence output for Rego rule authoring. - Fallback Guidance: Recommends API-sourced controls when no plugin covers the required evidence, and handles edge cases like plugins present in the catalog but not enabled in the target tenant. - Use Case: Given a requirement for container image vulnerability evidence, consult the catalog to shortlist Prisma, Wiz, Trivy, or Lacework, then run schema discovery on each candidate and pick the plugin whose fields best cover the requirement. ## Quick Start Ask the agent to pick an evidence plugin for a new control requiring dependency vulnerability scanning and show the schema fields available for its Rego rule.
