Detect
One watch surface unifies three signals: a breaking dependency from a registry, a cloud-provider API drift (Stripe, Twilio, Auth0, AWS, GCP quietly rotating a default), or a scheduled job that flaked twice on a new release.
Every repair follows the same short loop — one detector opens the incident, one repair closes it, and the morning Slack digest wraps the day so you start standup already in step.
One watch surface unifies three signals: a breaking dependency from a registry, a cloud-provider API drift (Stripe, Twilio, Auth0, AWS, GCP quietly rotating a default), or a scheduled job that flaked twice on a new release.
When a passing test pins the contract, a Fix-up PR is the cleanest move. When stepping back is the only safe move, a Rollback PR ships instead — a closed-form undo with the lockfile restored, the diff reverted, and the contract green.
Auto-applied when the failing surface has a contract test that pins it. Adds the smallest patch that returns CI to green.
Filed when stepping back is the only safe move. Restores the lockfile, reverts the minimal diff, keeps the contract test green.
Each morning, the timeline of the day's surfaces lands in one card — posted to #ops-digest in Slack before standup, so the team starts the day already in step.
Closed-form rollback is largely absent from Dependabot, Renovate, TierZero, and the broader LLM-agent wave — Aurora, OpenFang, the Codex Dependabot integration. Brackmoor files a Rollback PR with a single command: restore the lockfile, revert the minimal diff, keep the contract test green.
Every surface Brackmoor touched the day before ends up here — what changed, what broke, what was repaired, and what is still open. Posted before standup so the team starts the day in step.
Morning ops digest — 3 changes ran, 1 broke, 1 repaired.
The free community tier ships the same closed-form repair — the enterprise tier layers SBOM, compliance posture, and SOC 2 evidence on top. Either way, you start with one repo and one cron.