Zwall
Talk to an Engineer
Talk to an Engineer
Documentation
Docs Home › Ai Preview › Status and Scope

Status and Scope

AI Preview — status and scope

Status: PREVIEW (off by default)

EnterpriseAudience: Enterprise evaluator, security engineer

Supported now

  • Label: AI Preview
  • OpenAI-compatible chat-completions client only (including a local compatible server)
  • Operator-triggered log explanation and incident analysis
  • Unpublished rule-draft / recommendation records
  • Human approval required when AI is enabled (require_human_approval forced true)
  • recommendation_only: true on status; enforcement_applied is not a live apply path
  • Saving a provider does not by itself start analysis and does not store a key in the browser
  • manager_readiness_depends_on_ai: false — /health/ready does not wait on AI

Example Manager YAML: ai.enabled: false, provider: "openai_compatible". Public operator keys: Operator control.

Status API: GET /api/v1/ai/status — AI Preview API.

Unsupported / not current

  • Autonomous blocking or autonomous response
  • First-class xAI, Claude, Gemini, or Azure OpenAI product integrations
  • Automatic analysis of Hosting Agent sources
  • Dedicated private Zwall AI — IN_DEVELOPMENT, not generally available
  • Training export (ai.training_export.enabled must remain false)

Internal development endpoints

Additional internal AI development endpoints exist in Enterprise source, default off, and are not part of AI Preview. They are not customer GA features.

  • Operator control
  • Provider credentials stay Manager-side (not the browser). Custody details are provided separately to Enterprise customers.
  • Limitations