Inventory

Inventory is Sonar's structured record of programs, scopes, and discovered assets. It answers two questions: what do we know about this target? and where did that observation belong?

Responsibility

Inventory owns:

• the program and scope hierarchy;
• globally de-duplicated domains, IP addresses, ports, HTTP paths, technologies, mobile apps, wildcards, and CIDRs;
• acquisition from crawlers, workflow results, and approved external synchronization;
• freshness through the global recency phase;
• AI-assisted association of discovered observations with existing scope rules;
• verification records kept separate from discovery records.

Inventory does not execute scan commands. The distributed workflow engine produces observations and sends them to the ingestion boundary.

Lifecycle

program + scope rules
         │
         ├─────────────┐
         ▼             ▼
crawl / workflow   external sync
         └──────┬──────┘
                ▼
       global asset records
                │
                ▼
         AI scope resolution
                │
                ▼
      scoped, queryable inventory
                │
                ▼
        optional verification

Read this subsystem

Each unit has one canonical definition; guides link to those definitions instead of restating them.