What you can ask
Aletheia answers questions about your infrastructure by running the same read-only queries the rest of the product uses, then explaining what it found.
It is not a general-purpose chatbot with your data pasted into it. It has a fixed set of queries it can run, and everything it says has to come from their results.
What it can reach
Section titled “What it can reach”| Area | What it can look up |
|---|---|
| Inventory | Search resources by name, type, account, region, tag, or management state; read one resource in full |
| Code mapping | Which code declares a resource, with confidence and evidence |
| Applications | List applications, read one, read what belongs to it |
| Ownership | Who owns a resource or application, and how that was decided |
| Relationships | A resource’s direct relationships, and a bounded dependency graph |
| Changes | Search the change timeline; read one resource’s history |
That list is the boundary. There is no query it can run that you could not run yourself in the product.
Questions that work well
Section titled “Questions that work well”- “What is in production that isn’t declared in Terraform?”
- “Who owns the RDS instances in
eu-west-1?” - “What changed on this load balancer last week, and was it deployed?”
- “What would be affected if I changed this security group?”
- “Which applications have no owner?”
Questions it will decline
Section titled “Questions it will decline”- Anything that asks it to change something. It is read-only and says so.
- Anything about another organization’s data. It cannot see any.
- Anything requiring data Aletheia does not hold — cost, billing, or live metrics.
Permissions still apply
Section titled “Permissions still apply”Each query re-checks your permissions before it runs. The assistant is not a way around access control: if you cannot read the audit log in the product, asking about it here returns the same refusal.
A query that is denied is recorded as denied in the AI audit log, not silently skipped.
Freshness
Section titled “Freshness”Answers rest on what discovery last collected. Where a cited record is stale, the citation carries its age, so an answer built on week-old data is visibly built on week-old data.
Where to go next
Section titled “Where to go next”- How answers cite evidence for reading an answer.
- What the assistant will not do for the boundaries in full.