Investigation - AwareXone Docs

The Investigation agent deepens a suspicious candidate under a budget: gather evidence, explore related paths, and produce an investigation artifact — without inventing exploits.

CLI

axguard investigate . --fast
axguard investigate . --deep
axguard investigate . --finding FINDING_ID
axguard investigate --explain FINDING_ID

Best-effort artifacts under .findings/axguard/investigation/ (also soft-run from audit when available).

MCP

Tool	Approval	Use
`axguard_investigate`	APPROVAL_REQUIRED	Deepen a candidate (budget-limited)
`axguard_get_investigation`	AUTO	Fetch a prior investigation artifact

Agent guidance

From skill axguard-security: after axguard_security_review, call axguard_investigate on suspicious / incomplete findings before declaring ship-ready. Keep predictive risks out of the verified count.