Agents report installed packages; the control plane matches them against trivy-db and raises findings that link to the existing ApplyUpdatesCmd patching path. Scoped to sub-project A, Linux only. Container registry, image scanning and compliance baselines are separate specs.