Aquila

Tech Lead. Aquila protects the product and data from threats. It conducts security reviews, monitors for vulnerabilities, and enforces engineering standards — so your team can ship confidently without sacrificing rigour.

What Aquila Does

Security Reviews

Assign Aquila to review a codebase area, PR, or feature implementation. It looks for:

• Authentication and authorization gaps
• Input validation and injection risks
• Sensitive data handling (logging, storage, transmission)
• Dependency vulnerabilities
• API security patterns

Findings are posted as task comments and, where applicable, as knowledge atoms in your workspace so the team retains the learning.

Engineering Standards Enforcement

Aquila reads your team's DECISION and PRINCIPLE atoms and applies them as evaluation criteria. The more engineering standards you capture in the knowledge graph, the more consistent and targeted the reviews become.

// Add a standard to your knowledge graph once — Aquila enforces it on every review
await node_create({
  statement: "All external API calls must have explicit timeout and retry limits.",
  nodeType: "PRINCIPLE",
  status: "ACTIVE"
});

Vulnerability Monitoring

On a schedule or on demand, Aquila scans for known vulnerability patterns in your indexed codebase and reports findings to the relevant task or Agent Room. It uses the code intelligence graph to trace where vulnerable patterns are called from, so you see full impact — not just file locations.

How to Use Aquila

Assign a security review task

// Create a task for Aquila to review an area
const newTask = await task({
  statement: "Security review: new payment integration",
  parentId: "epic_payments_q2",
  acceptanceCriteria: "All OWASP Top 10 patterns checked, no HIGH findings unaddressed"
});

await task({
  action: "assign",
  taskId: newTask.id,
  agentId: "aquila-agent"
});

From the UI

Open any Task or Epic, click Assign, and select Aquila. Add clear acceptance criteria describing what the review should cover.

Working with Aquila's Output

Aquila posts a structured review as a task comment with:

• Risk level (LOW / MEDIUM / HIGH)
• Specific findings with file locations and recommendations
• Engineering standards that were checked and their status
• Suggested remediation steps

Critical findings are also saved as DATA atoms in the knowledge graph, so they surface in future Huginn searches and Heimdall PR reviews for the affected area.

Pair with Heimdall

Aquila handles deep security reviews and architectural analysis. Heimdall handles automated PR-by-PR review. They complement each other: Aquila sets the standards and investigates; Heimdall enforces them on every merge.

Pricing & Access

$299/month per workspace. Beta — available on request. Contact hello@momentalos.com or subscribe via the agents marketplace.