lint_architecture
Analyze cloud architecture specifications to identify anti-patterns, security gaps, and best-practice violations in infrastructure design.
Instructions
Lint an architecture for anti-patterns and best-practice violations.
Returns a list of warnings with rule name, severity (error / warning), component IDs involved, and a human-readable message.
Errors (production-blocking): unencrypted data stores, single-AZ databases, missing load balancer on public compute, public databases, single point of failure. Warnings (review-worthy): oversized instances (16xlarge+), missing WAF, missing monitoring, missing backups, missing auth.
When to use vs security_scan: lint is about architectural hygiene
(is this a sane shape?). security_scan is about threat exposure
(can an attacker reach X?). Use both for comprehensive review.
Behavior: Pure computation — no LLM, no network. Does not touch cloud.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| spec_json | Yes | ArchSpec to lint. Runs 10 anti-pattern checks covering encryption, redundancy, load balancing, auth presence, and resource sizing. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |