A vector database storing historical incidents, runbooks, and past remediation outcomes.
Why? Allows the RCA engine to perform semantic search to find similar past outages.
Failure Mode: If unavailable, the RCA engine degrades to deterministic heuristics instead of Retrieval-Augmented Generation.
OPA Governance
The Open Policy Agent (OPA) enforces security constraints before any infrastructure mutation occurs.
Why? Decouples security logic from workflow code. Ensures that even if the AI or Correlator hallucinations an incorrect fix, OPA will block it if it violates policy (e.g., "Never restart kube-system pods").
Guarantees: Fail-closed execution. No action is taken unless explicitly allowed by a loaded rego policy.