create_finding
Record a claim about the target together with the evidence behind it. The Gateway checks the evidence: an artifact or entity that doesn't exist in this workspace is rejected with an explanation, and a finding can't be confirmed without at…
Instructions
Record a claim about the target together with the evidence behind it. The Gateway checks the evidence: an artifact or entity that doesn't exist in this workspace is rejected with an explanation, and a finding can't be confirmed without at least one piece of evidence - so cite artifacts from list_artifacts, and say where (for example "com/acme/Api.java:12"). It is saved as unverified unless you set a status, and with source "ai". Returns the created finding; change it later with update_finding. Creates the workspace if it doesn't exist.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| claim | Yes | The claim, one clear statement, e.g. "The login request sends the password over cleartext HTTP". Must not be empty. | |
| status | No | Defaults to "unverified". "confirmed" needs at least one piece of evidence. | |
| evidence | No | Evidence for the claim. Each item cites an artifact from list_artifacts and can add the graph entity it is about, where in the artifact, and a note. Every cited artifact and entity must exist in this workspace, and an entity must have been observed in the artifact it is cited with. | |
| reasoning | No | Why the evidence supports the claim. Optional. | |
| workspace | No | Workspace name (not id). Created if it doesn't exist, and this call is recorded as a job in its history. Defaults to "default". | |
| confidence | No | How sure you are. Optional. |