Question 1

Why is the production API returning 502?

Accepted Answer

SAFA finds the registered service, verifies its host, and inspects bounded health evidence — without the Agent ever receiving an IP, password, or private key.

Question 2

Can the crawler reach MySQL from this node?

Accepted Answer

SAFA asks the native Broker for a verified topology path instead of guessing from IP addresses or connection details.

Question 3

What breaks if the NAS goes down?

Accepted Answer

SAFA computes the affected services from the dependency graph and returns a bounded answer.

Question 4

Does SAFA ever see my credentials?

Accepted Answer

No. Reusable credentials and vault keys never enter Agent-facing output. The native macOS Runtime resolves them locally behind policy, authorization, and redaction.

Question 5

What platforms does SAFA support?

Accepted Answer

SAFA is currently a macOS source preview. Linux and Windows runtimes are planned but not yet implemented or claimed as supported.