Add threat-report correlation - #62

Draft

seth-goodwin wants to merge 9 commits into

elastic:mainfrom

seth-goodwin:threat-correlation

Commits on Jul 13, 2026

Add correlation tools (diamond_search, get_report)
seth-goodwin
committed
debd211
Add analyst-led workflow (input gate + scored triage view)
seth-goodwin
committed
090a105
Add deep-dive synthesis render (completes analyst-led workflow)
seth-goodwin
committed
5c2ec94
Add correlation skill, manifest entries, and tool tests
seth-goodwin
committed
cd3fbef
Fix correlation gate: drop dead button, add run-mode fork, fix viewId
seth-goodwin
committed
d40feee
Blind correlation triages on evidence, not scores
seth-goodwin
committed
3dd768a
Wire workflow-backed correlation + paint-by-numbers canvas

seth-goodwin
and
cursoragent
committed
dcd987a
Generalize deployment-specific references for the example app

seth-goodwin
and
cursoragent
committed
f1e9a2a
Add required sslVerify to script cluster credentials

seth-goodwin
and
cursoragent
committed
1bf524a