Predictive security - AwareXone Docs

Predictive security surfaces risk expansion signals from observable change (PR/diff shape, architecture shifts, agent/MCP surface). It is explicitly not a confirmed vulnerability report.

CLI

axguard predict .
axguard predict --pr --base ./base
axguard predict --architecture
axguard predict --agent
axguard predict --mcp
axguard predict --what-if

Also: axguard paths . --predictive for graph-adjacent predictive hooks.

MCP

Tool	Use
`axguard_predict_security_risks`	Risk expansion signals
`axguard_analyze_change_risk`	Change-focused predictive view

Rules for agents and CI

Label output as predictive / risk, never merge into verified finding counts
Do not fail a release on predictive-only noise unless you deliberately choose to
After fixes, verify with axguard_verify_fix / re-audit — predictive closure is not resolution