Agent

Discovery Agent: understand before you build

Most software problems start before the first line of code: an unclear idea, a hidden risk, a technology choice nobody questioned. The Discovery Agent works on exactly that stage.

What it produces

How it checks its own work

After the first pass, the output is attacked against established standards before a single specification is written, including ISO 25010, ISO 31000, ISO 27001, SOC 2, GDPR, NIST CSF, OWASP ASVS and the OWASP list for LLM applications. Findings are fixed, and the audit repeats until it comes back clean.

Where it fits

Discovery is the first documented phase of the Marduk pipeline. A person approves it before design and specification begin, and its decisions carry into every later step.

Keep reading