Summary
What happened and when, using only services present in evidence. Inference is withheld until the RCA section.
Grounded analysis · heuristic compose · optional Groq or OpenAI
Studio
Facts stay attached to detector rows. Toggle the rewrite. Ask the pack a question it cannot answer.
No report on the latest run. Checkout cascade composes one. Healthy baseline and Degraded partial complete with an empty ledger.
What happened and when, using only services present in evidence. Inference is withheld until the RCA section.
Detector rows, formatted as service: type observed=x baseline=y. These are the only sentences that may be treated as ground truth.
Operational next steps. Grounding marks remediations as not_applicable — they are advice, not claims about the past.
draft is the default after compose. reviewed means a human looked. approved is the only state that may leave through a webhook. rejected keeps the JSON and records the note so the next run is not gaslit. Transitions require a reviewer name — the API will 400 without one.
draft
Default after compose. The machine wrote it. A human has not looked.
reviewed
A named reviewer looked and left a note. Still not allowed to leave the building.
approved
Owner agrees. The only state that may POST to a webhook.
rejected
Graph or copy was wrong. JSON stays. The note is how the next run is not gaslit.
Incident summary
What happened and when, using only services present in evidence. Inference is withheld until RCA.
Root cause
Ranked origin, support, rationale, ambiguities. Downstream pain is visible and not automatically the cause.
Executive
The paragraph a VP can read. No detector jargon. Uncertainties stay labeled.
Engineering handoff
The section that belongs in the ticket: windows, facts, next checks, who to page.
Facts / inferences / uncertainties
Three lists. Only facts may be treated as ground truth. Inferences are labeled. Uncertainties stay on the page.
Remediations
Advice, not claims about the past. Grounding marks them not_applicable so they cannot fake overlap.
The contract. Same shape as reports/final_reports.json.
Ticket paste. Sections for summary, RCA, facts, handoff, remediations.
War-room screen. Same content as Markdown, presentable.
Approved only. Exact URL allowlist. Delivery attempts logged as JSONL.