Skip to main content

Architecture

NimbusGuard is three independent repositories, each with its own lifecycle, Docker setup, and versioning.

Components​

  • Platform (backend) — FastAPI + SQLAlchemy async + PostgreSQL. The system of record for auth, RBAC, organizations, cloud accounts, inventory, findings, and controls.
  • Web app (frontend) — Next.js + React + Tailwind + shadcn/ui. UI only; all business logic lives in the Platform.
  • Evaluation Engine — FastAPI + Open Policy Agent (OPA). Stateless; evaluates a normalized resource against a control and returns a structured result.

Evaluation results​

The Engine returns one of five states: PASS, FAIL, NOT_APPLICABLE, NOT_EVALUATED, ERROR.

:::danger Critical invariant NOT_EVALUATED and ERROR must never be silently converted into PASS. :::

:::warning Placeholder ⚠️ Add a component diagram and deployment topology here. :::