WorkflowsGoverned workflowParallel makers converge
Incident to safe recovery
An incident timeline, containment state, recovery proposal, rollback path, and operator decision.
- BLUEPRINT: Roles, gates and limits are specified. No runtime runs this workflow yet. A governed workflow contract across the houses. The roles, gate and limits are specified; no runtime runs it yet.
The run, step by step
Steps
Who does what, in order.
Starts when: A bounded incident signal and accountable operator are present.
Your yes
Recovery gate
As designed, nothing moves past this point until a person says yes. Silence never counts as approval.
Publish
Ships with proof
An incident timeline, containment state, recovery proposal, rollback path, and operator decision.
What it hands you, and what stops it
Exit proof
An incident timeline, containment state, recovery proposal, rollback path, and operator decision.
Kept with the run
Append a redacted incident receipt and prevention action; never expose private incident data publicly.
It stops on
- Containment scope unknown.
- Evidence integrity uncertain.
- Recovery is destructive or irreversible.
If it fails
Failure receipt with last valid evidence, limit reached, and safe resumption condition. It never retries on its own.
The agents in this workflow
SentinelOperational Risk AnalystTrust & SafetyPREVIEW: One of the seven crew roles. Explore the profile; it is not running in production.
CipherData Privacy AnalystTrust & SafetyBLUEPRINT: Designed and documented with its house. Not runnable yet.
BeaconIncident Response CoordinatorTrust & SafetyBLUEPRINT: Designed and documented with its house. Not runnable yet.
VeraDecision Evidence ReviewerSovereign CommandPREVIEW: One of the seven crew roles. Explore the profile; it is not running in production.
