# Tool routing

Load one card only when its situation matches:

- Endpoint readiness and supported payloads: [online_status](tools/online_status.md)
- Fetch current OSV evidence into the local cache: [refresh_advisories](tools/refresh_advisories.md)
- Match the repository inventory against that cache: [scan_dependency_vulnerabilities](tools/scan_dependency_vulnerabilities.md)
- Bounded static review of installed dependency files: [scan_dependency_malware](tools/scan_dependency_malware.md)
- Retrieve the owner-managed architecture target: [pull_architecture_contract](tools/pull_architecture_contract.md)
- Inspect the exact source-free upload without sending it: [preview_sync](tools/preview_sync.md)
- Send only an explicitly approved preview: [sync_graph](tools/sync_graph.md)

Use the separate Weavatrix plugin for local repository intelligence and the
separate Weavatrix Refactor plugin for source changes.