Glossary of acronyms · Nick Duong

AI and LLM

ADK: Agent Development Kit Google's open-source framework for building agents and multi-agent systems. ReliBot and GitHubScanner run on it.Used in ReliBot · GitHubScanner
GenAI: Generative AI Models that generate text, code or images. "OCI GenAI" is Oracle's managed LLM service.Used in GraphRAG
GPU: Graphics Processing Unit The accelerator used to host models. OCI "GPU shapes" are GPU-equipped VM sizes.Used in GitHubScanner · GraphRAG
GraphRAG: Graph Retrieval-Augmented Generation RAG that retrieves facts from a knowledge graph (entities and their relationships) instead of text chunks.Used in GraphRAG
LLM: Large Language Model A model such as Gemini or Claude that reads and writes text. Every agent here is an LLM plus tools.Used in ReliBot · GitHubScanner · GraphRAG
LLMOps: LLM Operations Running LLM apps in production: prompt versioning, evaluation, latency and success-rate monitoring.Used in GraphRAG
MCP: Model Context Protocol An open standard for exposing tools and data to LLM agents. MyClawBot's tools are in-process MCP tools.Used in ReliBot
NLTK: Natural Language Toolkit A Python NLP library. Its data files are baked into the container image to cut cold-start time.Used in GraphRAG
ONNX: Open Neural Network Exchange A portable model format. ReliBot runs its embedding model locally through ONNX, with no API call.Used in ReliBot
RAG: Retrieval-Augmented Generation Look up relevant documents first, then have the LLM answer from them instead of from memory.Used in GraphRAG
SDK: Software Development Kit A library for building on a platform, such as the Claude Agent SDK.Used in ReliBot

Search and data

BM25: Best Match 25 The classic keyword-ranking formula behind SQLite FTS5. Strong on exact tokens such as error codes and CVE IDs.Used in ReliBot
FTS5: Full-Text Search, version 5 SQLite's built-in full-text index.Used in ReliBot
HNSW: Hierarchical Navigable Small World A graph-based approximate nearest-neighbour index for fast vector search. ChromaDB uses it.Used in GraphRAG
KB: Knowledge Base "Bedrock KB" is Amazon Bedrock Knowledge Bases, a managed RAG service.Used in GraphRAG
MD5: Message Digest 5 A fast hash. Used here only to detect which files changed, not for security.Used in GraphRAG
MMR: Maximal Marginal Relevance A re-ranking step that trades relevance against diversity, so the top results aren't near-duplicates.Used in ReliBot
SHA: Secure Hash Algorithm A "git SHA" is the hash that uniquely identifies a commit.Used in GitHubScanner · GraphRAG
SHA-1: Secure Hash Algorithm 1 A 160-bit hash. Used here for deduplication and snippet-integrity checks, not for security.Used in ReliBot · GitHubScanner
SQL: Structured Query Language The standard language for querying relational databases.Used in ReliBot · GitHubScanner
SQL/PGQ: SQL Property Graph Queries The ISO SQL extension for graph queries. Oracle Database 23ai uses it for property graphs.Used in GraphRAG
TTL: Time To Live How long a record or cache entry is kept before it expires.Used in ReliBot · GitHubScanner
WAL: Write-Ahead Logging A SQLite journal mode where readers don't block the writer.Used in ReliBot

Security

BAA: Business Associate Agreement The HIPAA contract a vendor (for example, a model endpoint) must sign before it can process PHI.Used in GraphRAG
CMEK: Customer-Managed Encryption Keys You hold the keys that encrypt your cloud data, and can revoke them.Used in GraphRAG
CORS: Cross-Origin Resource Sharing The browser rule for which other websites may call your API.Used in GraphRAG
CSP: Content Security Policy A browser header that limits which scripts and resources a page may load.Used in GitHubScanner
CVE: Common Vulnerabilities and Exposures The ID of one specific, publicly known vulnerability, such as CVE-2021-44228 (Log4Shell).Used in ReliBot · GitHubScanner
CVSS: Common Vulnerability Scoring System A 0–10 severity score: how bad a vulnerability would be if exploited.Used in GitHubScanner
CWE: Common Weakness Enumeration A catalogue of weakness types. CWE-89 is SQL injection; CWE-502 is unsafe deserialization.Used in GitHubScanner
DLP: Data Loss Prevention Finding and redacting sensitive data, for example before documents are ingested.Used in GraphRAG
EOL: End of Life A version that no longer gets security patches.Used in GitHubScanner
EPSS: Exploit Prediction Scoring System The probability (0–1) that a CVE is exploited in the next 30 days. Published by FIRST.Used in GitHubScanner
FIRST: Forum of Incident Response and Security Teams The global body that maintains EPSS and CVSS.Used in GitHubScanner
IdP: Identity Provider The service behind SSO, such as Okta or Microsoft Entra ID.Used in GraphRAG
JWKS: JSON Web Key Set The published public keys used to verify JWT signatures, such as Microsoft's keys for Teams bots.Used in ReliBot
JWT: JSON Web Token A signed token that carries identity claims.Used in ReliBot · GitHubScanner
OIDC: OpenID Connect An identity layer on OAuth 2.0. It lets a CI job prove who it is and get short-lived cloud credentials without stored keys.Used in GitHubScanner · GraphRAG
OSS: Open-Source Software Third-party packages. The "OSS licence + vuln" gate checks their licences and known CVEs.Used in GitHubScanner
OSV: Open Source Vulnerabilities Google's vulnerability database (osv.dev), keyed by package and version range.Used in GitHubScanner
OWASP: Open Worldwide Application Security Project The nonprofit behind the Top 10 risk lists, including the Top 10 for LLM Applications (LLM01 to LLM10).Used in GitHubScanner
PHI: Protected Health Information Health data covered by the US HIPAA rules. None was in the GraphRAG corpus.Used in GraphRAG
PII: Personally Identifiable Information Data that identifies a person, such as a name, email or SSN.Used in GraphRAG
PR: Pull Request A proposed code change, reviewed before it is merged.Used in GitHubScanner
RS256: RSA Signature with SHA-256 An asymmetric JWT signing algorithm. GitHub App JWTs use it.Used in GitHubScanner
SAST: Static Application Security Testing Scanning source code for vulnerabilities without running it.Used in GitHubScanner
SBOM: Software Bill of Materials An inventory of every dependency and version in a build.Used in GitHubScanner
SQLi: SQL injection Untrusted input that changes the meaning of a database query.Used in GitHubScanner
SSO: Single Sign-On One corporate login for many apps.Used in GraphRAG
STRIDE: Spoofing, Tampering, Repudiation, Information disclosure, Denial of service, Elevation of privilege Microsoft's threat-modelling checklist.Used in GitHubScanner
TLS: Transport Layer Security Encryption in transit: https://, neo4j+s://.Used in GraphRAG
WAF: Web Application Firewall Filters malicious HTTP traffic before it reaches the app.Used in GraphRAG
XXE: XML External Entity An injection where an XML parser is tricked into reading local files or calling URLs.Used in GitHubScanner

Cloud and delivery

ALB: Application Load Balancer AWS's HTTP load balancer. It can enforce OIDC login itself.Used in GitHubScanner · GraphRAG
APM: Application Performance Monitoring Request tracing and latency monitoring.Used in GraphRAG
AWS: Amazon Web Services Amazon's cloud. GitHubScanner's CI/CD pipeline runs in AWS.Used in GitHubScanner · GraphRAG
CI: Continuous Integration Building and testing every change automatically.Used in GitHubScanner · GraphRAG
CI/CD: Continuous Integration / Continuous Delivery The automated build, test, scan and deploy pipeline.Used in GitHubScanner · GraphRAG
ECR: Elastic Container Registry AWS's container image registry.Used in GitHubScanner · GraphRAG
ECS: Elastic Container Service AWS's container service. Fargate is its serverless mode.Used in GitHubScanner · GraphRAG
GCP: Google Cloud Platform Google's cloud. GitHubScanner and GraphRAG run on it.Used in GitHubScanner · GraphRAG
GCS: Google Cloud Storage GCP's object storage (buckets).Used in GitHubScanner · GraphRAG
IaC: Infrastructure as Code Cloud resources defined in code and versioned, such as Terraform or CloudFormation.Used in GitHubScanner
IAM: Identity and Access Management Who can do what. "Cloud Run IAM" means only authenticated callers can reach the service.Used in GitHubScanner · GraphRAG
IAP: Identity-Aware Proxy Google's SSO gate in front of a web app.Used in GitHubScanner · GraphRAG
KEDA: Kubernetes Event-Driven Autoscaling Scales Kubernetes workloads on events, including down to zero.Used in GraphRAG
KMS: Key Management Service Managed encryption keys (AWS KMS, Cloud KMS).Used in GitHubScanner · GraphRAG
OCI: Oracle Cloud Infrastructure Oracle's cloud. The service maps show the OCI equivalent of each component.Used in GitHubScanner · GraphRAG
OCIR: OCI Registry OCI's container image registry.Used in GitHubScanner · GraphRAG
OKE: Oracle Kubernetes Engine OCI's managed Kubernetes (formerly Container Engine for Kubernetes).Used in GitHubScanner · GraphRAG
RDS: Relational Database Service AWS's managed SQL databases (PostgreSQL, MySQL and others).Used in GitHubScanner
S3: Simple Storage Service AWS's object storage.Used in GitHubScanner · GraphRAG
SA: Service Account A non-human identity that a workload runs as.Used in GitHubScanner · GraphRAG
SQS: Simple Queue Service AWS's managed message queue.Used in GitHubScanner
STS: Security Token Service Exchanges one credential for a short-lived one. GCP STS powers WIF; AWS STS powers AssumeRole.Used in GitHubScanner
vCPU: Virtual CPU One virtual processor core allotted to a container or VM.Used in GraphRAG
VM: Virtual Machine A rented server. GraphRAG's always-on Neo4j VM was most of its cost.Used in GraphRAG
VPC: Virtual Private Cloud A private network in the cloud. VPC Service Controls put a perimeter around GCP APIs to stop data exfiltration.Used in GitHubScanner · GraphRAG
WIF: Workload Identity Federation Lets an outside identity (an AWS role, a GitHub OIDC token) act as a GCP service account without a JSON key.Used in GitHubScanner · GraphRAG

Operations

API: Application Programming Interface How programs call each other, such as a REST endpoint.Used in ReliBot · GitHubScanner · GraphRAG
CLI: Command-Line Interface A terminal tool.Used in ReliBot
QPM: Queries Per Minute A rate limit unit.Used in GitHubScanner
SLA: Service-Level Agreement A promised target, such as a 12 s latency budget at 99% success.Used in GraphRAG
SRE: Site Reliability Engineering The discipline (and teams) that keep production running. ReliBot's main users.Used in ReliBot