Skip to content

What you can ask

Aletheia answers questions about your infrastructure by running the same read-only queries the rest of the product uses, then explaining what it found.

It is not a general-purpose chatbot with your data pasted into it. It has a fixed set of queries it can run, and everything it says has to come from their results.

Area What it can look up
Inventory Search resources by name, type, account, region, tag, or management state; read one resource in full
Code mapping Which code declares a resource, with confidence and evidence
Applications List applications, read one, read what belongs to it
Ownership Who owns a resource or application, and how that was decided
Relationships A resource’s direct relationships, and a bounded dependency graph
Changes Search the change timeline; read one resource’s history

That list is the boundary. There is no query it can run that you could not run yourself in the product.

  • “What is in production that isn’t declared in Terraform?”
  • “Who owns the RDS instances in eu-west-1?”
  • “What changed on this load balancer last week, and was it deployed?”
  • “What would be affected if I changed this security group?”
  • “Which applications have no owner?”
  • Anything that asks it to change something. It is read-only and says so.
  • Anything about another organization’s data. It cannot see any.
  • Anything requiring data Aletheia does not hold — cost, billing, or live metrics.

Each query re-checks your permissions before it runs. The assistant is not a way around access control: if you cannot read the audit log in the product, asking about it here returns the same refusal.

A query that is denied is recorded as denied in the AI audit log, not silently skipped.

Answers rest on what discovery last collected. Where a cited record is stale, the citation carries its age, so an answer built on week-old data is visibly built on week-old data.

Aletheia does not go and look at AWS to answer a question. It reads what discovery already collected. If the inventory is stale, the answer is stale, and the citation says so.