Inside the local Falco review builder

Inside the local Falco review builder An architecture diagram generated by Archify. Inputs · Rules + logs + context · Architecture component Inputs Rules + logs + context Evidence intake · Rule names + alert groups · Architecture component Evidence intake Rule names + alert groups Local AI · Ollama / qwen3.5:0.8b · Architecture component · loopback only Local AI Ollama / qwen3.5:0.8b loopback only Selection checks · Exact evidence + constraints · Architecture component · observed logs only Selection checks Exact evidence + constraints observed logs only Python compiler · Exception macro + rule edit · Architecture component Python compiler Exception macro + rule edit Validation · Static / engine / replay · Architecture component · runtime is optional Validation Static / engine / replay runtime is optional Engineer review · Reason + counts + YAML diff · Architecture component · no default approval Engineer review Reason + counts + YAML diff no default approval Accepted exports · Rule copies + audit records · Architecture component · source files unchanged Accepted exports Rule copies + audit records source files unchanged read assess + propose IDs + fields checked scope candidate bundle show status accept; no failures Legend Frontend Backend Database Security