Three workload families, each ending in an output a reviewer can check.

Each workload pairs a concrete input with an explicit multi-step loop. All three run on the same control plane for identity and access, audit, evaluation, FinOps, and reliability.

01 / Engineering

Codebase intelligence

Understand a repository before changing it. The system maps structure and dependencies, reads tests and build output, plans the change, produces a patch in an isolated workspace, and explains the evidence behind it.

Where it applies

  • Migrations and upgrades — framework, language, and dependency changes across many modules
  • Root-cause investigation — tracing a failure across services, logs, and recent changes
  • Architecture Q&A — answers grounded in file- and line-level citations
  • Test expansion — coverage for under-tested paths, validated by running the suite

Pipeline repo → reviewed patch

1

Ingest

Check out a pinned commit; index files, symbols, build configuration, ownership, and CI history.

2

Map

Build dependency and call graphs; locate tests, entry points, and the blast radius of the intended change.

3

Plan

Write a change plan tied to specific files, with acceptance checks defined before any code is generated.

4

Change & test

Generate the patch in a sandboxed branch; run formatters, type checks, and the relevant test suites.

5

Explain & review

Deliver a review package — diff, test output, rationale, residual risks. Merge requires a human approver.

Inputs

  • Repositories and history
  • Issues and tickets
  • CI and build logs
  • Architecture documents

Outputs

  • Patch with test evidence
  • Impact analysis
  • Migration plans
  • Cited codebase answers

Controls

  • Read-only by default
  • Writes confined to a sandbox branch
  • Secret scanning on context
  • No merge without approval

Evaluated by

  • Tests passing on held-out tasks
  • Reviewer acceptance rate
  • Post-merge regression rate
  • Cost per accepted change
02 / Knowledge

Long-document evidence processing

Turn long filings, contracts, policies, and technical reports — including their tables, figures, and attachments — into cited findings, structured records, and specific questions for a reviewer.

Where it applies

  • Regulatory and policy review — mapping obligations to evidence and flagging gaps
  • Contract analysis — clause extraction, deviation from standard terms, cross-document conflicts
  • Technical due diligence — reconciling figures across reports, appendices, and data tables
  • Structured data capture — schema-bound records with every field traceable to a source span

Pipeline documents → cited brief

1

Intake

Parse PDFs, scans, spreadsheets, and attachments while preserving page, table, and figure coordinates.

2

Structure

Segment into sections, clauses, and tables; normalize entities, dates, currencies, and units.

3

Extract

Populate fields and findings against an agreed schema, each bound to the exact source span that supports it.

4

Cross-check

Reconcile figures across documents; surface contradictions, missing items, and out-of-policy terms.

5

Brief & review

Produce a cited brief and a review queue ordered by risk and confidence. Reviewers confirm or correct each item.

Inputs

  • Filings and disclosures
  • Contracts and policies
  • Technical reports
  • Scanned exhibits and tables

Outputs

  • Cited briefs
  • Records (JSON / CSV) with spans
  • Discrepancy reports
  • Prioritized review queue

Controls

  • Claim → page and span, always
  • Unsupported statements flagged, never presented as findings
  • Access inherited from source
  • Retention set per matter

Evaluated by

  • Citation precision
  • Field-level accuracy on labeled sets
  • Recall of seeded discrepancies
  • Reviewer time per document
03 / Operations

Long-running tool orchestration

Coordinate multi-step work across applications and APIs — with explicit plans, scoped tools, checkpoints, bounded retries, and human gates — so long processes finish reliably and leave a complete trail.

Where it applies

  • Cross-system requests — work that touches ticketing, records, and line-of-business applications
  • Runbook execution — operational procedures with verification after every step
  • Exception handling — triage, evidence gathering, and a hand-off with the context attached
  • Periodic close-out work — reconciliations and checklists that span hours, not seconds

Pipeline request → closed run

1

Intake

Accept a request with its objective, constraints, data scope, and named approvers.

2

Plan

Compile the request into a task graph with dependencies, per-step tool permissions, and step and spend budgets.

3

Execute

Run steps through a scoped tool executor using idempotent calls and bounded retries with backoff.

4

Checkpoint

Persist state after each step so a run resumes after failure without repeating side effects.

5

Approve & close

Route consequential writes to a human gate; close the run with a complete, replayable record.

Illustrative example
$ run workload ops.closeout --request example/REQ-1042 identity analyst@example · tickets:read · records:write (gated) ✓ intake objective, data scope, approvers recorded ✓ plan task graph compiled · step and spend budgets set ✓ steps 1–3 evidence gathered · reconciliations drafted ✓ checkpoint state persisted after step 3 ! step 4 upstream timeout · retry 1 of 3 with backoff ✓ step 4 resumed from checkpoint · no side effect repeated ✓ step 5 exception report drafted · hand-off attached ✓ budget within run cap ◆ gate records:write held for a named approver audit run record appended · replayable

Run record

Checkpointsstate persisted after every step
Side effectsidempotent calls · none repeated on resume
Budgetstep and spend caps enforced
Consequential writenamed approver required

Inputs

  • Requests via ticket, email, or API
  • Application and data APIs
  • Runbooks and policies
  • Approval matrices

Outputs

  • Closed runs
  • Replayable run records
  • Exception reports
  • Clean human hand-offs

Controls

  • Per-tool allowlists and scopes
  • Step and spend budgets
  • Approval gates on writes
  • Per-run kill switch

Evaluated by

  • Task completion rate
  • Human intervention rate
  • Side-effect correctness
  • Time and cost per run
04 / Side by side

Comparison: different inputs, one discipline.

The workloads differ in what they read and what they produce. They share the same control plane and the same rule: nothing consequential leaves the system without evidence and an approver.

DimensionCodebase intelligenceLong-document evidence processingLong-running tool orchestration
Primary contextSource, tests, build and CI outputLong documents, tables, figuresLive system state via APIs
Core loopMap → plan → change & testStructure → extract → cross-checkPlan → execute → checkpoint
Primary artifactReviewed patch with test evidenceCited brief and recordsClosed run with replayable record
Human gateMerge approvalReviewer confirmationApproval on consequential writes
Key quality signalAccepted changes without regressionCitation precisionSide-effect correctness

Next step

Have a workload that fits one of these shapes?

Send a short description of the inputs, steps, and reviewed result. If it fits our scope, the next step is a working session with the people who own the work.