[FEATURE] AI 2 : Executive Summary and Prioritised Remediation Plan Endpoint

[TFT444]

Objective

Expose a POST /api/ai/insights endpoint that takes scan findings and returns an AI generated executive summary and prioritised remediation plan.

What needs to be built

• api/routes/ai.py registered as a blueprint in app.py
• POST /api/ai/insights accepting findings JSON, provider name and user API key
• Output: executive_summary in plain text and remediation_plan ordered by severity highest first
• JWT auth required
• No keys stored server side

Acceptance criteria

• Returns executive summary readable by a non-technical person
• Remediation plan ordered by severity
• Works with all three providers
• JWT auth enforced
• Unit testable with mocked responses

Dependencies

Depends on Issue 1 (provider abstraction layer)

Priority

High