AI Control Tower · execution

awaiting-approvalL2seed fixture

exec-clb-01

Stage-1 thin slice: one tenant, one read-only agent, one local model, one tool, one approval gate, one immutable execution ID.

Incident
inc-clb-01
Agent
Kubernetes Agent 01
Model
llama-3.3-70b (Ollama)
Tool
k8s-read
Tenant
Nordic Federated Bank
Customer
FS Core Banking Platform
Audit corr
corr-clb-01
Approval
apr-clb-01
All executionsIncident workspaceApproval queue

exec-clb-01

Prompt → agent → model → MCP → evidence → policy → approval path.

Read-only Agent OS
  • No shell execution
  • No cluster-admin
  • No secret reads
  • No database writes
  • No firewall changes
  • No autonomous remediation
  1. promptok2026-08-09T08:12:04Z

    1. Operator prompt

    Investigate CrashLoopBackOff on payments-auth in cu-fsprod production.

    • injectionScore=0.02
    • template=sre-investigate-v3
  2. securityok2026-08-09T08:12:04Z

    2. Prompt firewall

    No jailbreak / injection; ticket body sanitised. Context bounded to tn-nordic.

    • verdict=allow
  3. agentok2026-08-09T08:12:05Z

    3. Planner → Kubernetes Agent

    ag-kubernetes-01 selected; maxSteps=12; skill=pod-crashloop-diagnose.

    • agent=ag-kubernetes-01
    • skill=pod-crashloop-diagnose
  4. modelok2026-08-09T08:12:06Z

    4. Model Gateway · Sovereign Mode

    Routed to local Ollama llama-3.3-70b. External provider APIs denied by network policy.

    • provider=ollama
    • latencyMs=286
    • tokens=4200
  5. mcpok2026-08-09T08:12:18Z

    5. MCP · k8s-read

    get pod payments-auth-7d9f8c6b4-xq2n1 — verbs limited to get/list/watch.

    • tool=k8s-read
    • permission=allow
  6. apiok2026-08-09T08:12:18Z

    6. API path · kube-apiserver

    Read-only API call to fs-prod-k8s; latency 41ms; no secret material returned.

    • cluster=fs-prod-k8s
    • latencyMs=41
  7. evidenceok2026-08-09T08:12:41Z

    7. Evidence sealed

    Previous logs + change correlation hashed into evidence channel.

    • artifacts=ev-clb-1,ev-clb-2,ev-clb-3
  8. verificationok2026-08-09T08:13:28Z

    8. Validator Agent

    Independent validation: missing AUTH_JWKS_URI accepted; OOM rejected. Confidence 94%.

    • confidence=94
  9. policywarn2026-08-09T08:13:40Z

    9. OPA · ConfigMap patch

    REQUIRE APPROVAL for production configmap.patch. Kill switch idle.

    • decision=REQUIRE_APPROVAL
  10. approvalpending2026-08-09T08:13:44Z

    10. Approval queued

    apr-clb-01 pending Platform Engineering + Change Manager. No remediator write yet.

    • approvalId=apr-clb-01
  11. actionblocked2026-08-09T08:13:44Z

    11. Remediation held

    Deterministic workflow not started. Stage-1 exit: investigate + prove + decide only.

    • engine=StackStorm
    • started=false