The bot directory

Reviews token use, model latency, and compute from numbers you supply. It does not call a model provider or invent spend.

Checks whether a service is stuck at its replica ceiling and whether the database, not the app, is the bottleneck. Uses only the telemetry in the input.

Turns a pasted CI log into the first failed command, the likely cause, and the safest next check. It does not rerun a workflow.

Reviews pasted dependency manifests, lockfiles, and workflow changes for supply-chain risk. It does not query a registry or open a pull request.

Walks supplied code and infrastructure text for public exposure, wildcard identity, privileged containers, secret handling, and dependency risk. It does not connect to a cloud account.

Reviews a pasted IAM policy for wildcard actions, broad resources, and missing conditions. It does not call AWS or attach a policy.

Turns a pasted incident write-up into follow-up tickets a team can track. It does not create Linear issues or post to Slack.

Reads a pasted Slack incident thread and returns the user impact, the timeline, and the next fact to collect. It does not join the channel or send a message.

Reviews pasted Kubernetes manifests for privilege, exposure, and missing guards. It does not talk to a cluster.

Turns pasted alerts, logs, and the outgoing note into a handoff the next person can run. It does not page anyone.

Reviews pasted Kubernetes probes, requests, and limits to see whether a pod can stay up and whether it can still scale. It does not read cluster metrics.

Reviews pasted Terraform, security groups, and bucket or load balancer config for unintended public access. It does not connect to AWS.

Reviews a pasted pull request diff for behavior that can break, tests that do not cover it, and a description that promises more than the diff does. It does not open GitHub or post a comment.

Turns pasted merged pull requests or commit subjects into release notes a person can send. It does not read GitHub or post to Slack.

Turns supplied telemetry, logs, and architecture notes into a reliability review: errors, failed jobs, timeouts, missing signals, and the first safe change.

Reviews a pasted Terraform plan or diff for exposure, identity, and destructive changes. It does not run terraform or call a cloud API.

Turns a pasted Linear ticket into a change plan: scope, risks, and how to prove it worked. It does not update the ticket.

Reviews a pasted Linear ticket for security scope before someone builds it. It does not change the ticket or scan a repository.