mantis/reference/workflow.json at main · google/mantis · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
{
  "name": "mantis_vulnerability_pipeline",
  "config": {
    "db_path": "knowledge.db",
    "retry_attempts": 3,
    "default_model": "vertex_ai/gemini-3.7-flash",
    "reasoning_effort": "medium",
    "timeout": 180,
    "seed_prompt": "Initial Task Input: Evaluate {filepath}",
    "sandbox": {
      "type": "static-only",
      "options": {}
    }
  },
  "budget": {
    "max_wall_clock_seconds": 43200,
    "max_tokens": 10000000,
    "max_graph_steps": 500,
    "max_node_visits": 50,
    "max_llm_calls": 2000,
    "max_node_tool_calls": 200
  },
  "nodes": [
    {
      "id": "history",
      "type": "agent",
      "model": "vertex_ai/gemini-3.5-flash-lite",
      "reasoning_effort": "low",
      "tools": ["get_git_log", "get_git_diff", "read_file", "write_file", "list_files", "get_summary"]
    },
    {
      "id": "structural_index",
      "type": "agent",
      "model": "vertex_ai/gemini-3.5-flash-lite",
      "reasoning_effort": "low",
      "tools": ["read_file", "write_file", "list_files", "run_sandbox"]
    },
    {
      "id": "architect",
      "type": "agent",
      "reasoning_effort": "medium",
      "tools": ["read_file", "write_file", "list_files", "record_summary", "get_summary"]
    },
    {
      "id": "threat_modeler",
      "type": "agent",
      "reasoning_effort": "medium",
      "tools": ["read_file", "write_file", "list_files", "get_summary", "record_threat_model", "get_threat_model"]
    },
    {
      "id": "planner",
      "type": "agent",
      "reasoning_effort": "medium",
      "tools": ["read_file", "write_file", "list_files", "get_summary", "get_threat_model", "record_plan", "get_plan"]
    },
    {
      "id": "researcher",
      "type": "agent",
      "reasoning_effort": "medium",
      "tools": ["read_file", "write_file", "list_files", "get_summary", "get_threat_model", "get_plan", "report_findings", "get_findings"]
    },
    {
      "id": "deduplicator",
      "type": "agent",
      "model": "vertex_ai/gemini-3.5-flash-lite",
      "reasoning_effort": "low",
      "tools": ["read_file", "write_file", "list_files", "get_findings", "report_findings", "dedupe_findings"]
    },
    {
      "id": "reviewer",
      "type": "agent",
      "reasoning_effort": "medium",
      "tools": ["read_file", "get_findings", "get_threat_model", "get_summary"],
      "output_schema": "ReviewVerdict",
      "output_key": "verdict"
    },
    {
      "id": "reviewer_classifier",
      "type": "classifier",
      "routes": ["confirmed"]
    },
    {
      "id": "critic",
      "type": "agent",
      "reasoning_effort": "high",
      "tools": ["read_file", "get_findings", "get_threat_model"],
      "output_schema": "CriticVerdict",
      "output_key": "verdict"
    },
    {
      "id": "critic_classifier",
      "type": "classifier",
      "routes": ["viable"]
    },
    {
      "id": "reproducer",
      "type": "agent",
      "reasoning_effort": "high",
      "tools": ["run_sandbox", "run_sandbox_with_evidence", "get_findings", "get_threat_model", "read_file", "write_file"],
      "on_enter_status": "static_confirmed",
      "output_schema": "ReproVerdict",
      "output_key": "verdict"
    },
    {
      "id": "repro_classifier",
      "type": "classifier",
      "routes": ["success"]
    },
    {
      "id": "chainer",
      "type": "agent",
      "reasoning_effort": "high",
      "tools": ["read_file", "write_file", "get_findings", "get_threat_model", "record_exploit_chain"]
    },
    {
      "id": "patcher",
      "type": "agent",
      "reasoning_effort": "high",
      "tools": ["apply_patch", "run_sandbox", "run_sandbox_with_evidence", "read_file", "write_file", "get_findings", "get_security_guidance", "query_lineage"],
      "on_enter_status": "dynamic_confirmed"
    },
    {
      "id": "calibrator",
      "type": "agent",
      "reasoning_effort": "medium",
      "tools": ["score_risk", "calibrate_finding", "get_findings", "get_threat_model", "read_file", "write_file"],
      "output_schema": "FindingCalibration"
    },
    {
      "id": "reflector",
      "type": "agent",
      "reasoning_effort": "medium",
      "tools": ["read_file", "write_file", "get_findings", "record_learning"]
    },
    {
      "id": "reporter",
      "type": "agent",
      "reasoning_effort": "medium",
      "tools": ["read_file", "write_file", "get_findings", "get_plan", "get_threat_model", "get_summary", "generate_report"]
    }
  ],
  "edges": [
    {"from": "START", "to": "history"},
    {"from": "history", "to": "structural_index"},
    {"from": "structural_index", "to": "architect"},
    {"from": "architect", "to": "threat_modeler"},
    {"from": "threat_modeler", "to": "planner"},
    {"from": "planner", "to": "researcher"},
    {"from": "researcher", "to": "deduplicator"},
    {"from": "deduplicator", "to": "reviewer"},
    {"from": "reviewer", "to": "reviewer_classifier"},
    {"from": "reviewer_classifier", "to": "critic", "on": "confirmed"},
    {"from": "reviewer_classifier", "to": "calibrator", "on": "__DEFAULT__"},
    {"from": "critic", "to": "critic_classifier"},
    {"from": "critic_classifier", "to": "reproducer", "on": "viable"},
    {"from": "critic_classifier", "to": "calibrator", "on": "__DEFAULT__"},
    {"from": "reproducer", "to": "repro_classifier"},
    {"from": "repro_classifier", "to": "chainer", "on": "success"},
    {"from": "repro_classifier", "to": "calibrator", "on": "__DEFAULT__"},
    {"from": "chainer", "to": "patcher"},
    {"from": "patcher", "to": "calibrator"},
    {"from": "calibrator", "to": "reflector"},
    {"from": "reflector", "to": "reporter"}
  ]
}