ComposeBuild, remediate, review, export, rollback
Workspace
Run the engineering loop from one control surface.
Ask Boetica to create a new app, build inside an existing repo, remediate, babysit a PR, review evidence, prepare a procurement packet, or roll back an incident. The workspace shows you what will run, why it is allowed, what it costs, and what proof it will leave.
Workspace control
One surface for runs, proof, and next actions.
The workspace combines the run composer, task thread, live artifacts, Atlas context, dashboards, and diagnostics so teams can operate without stitching together separate tools.
ThreadPlan steps, attempts, CI, PR, evidence
AtlasRepo map with owners, controls, findings
DiagnoseWebhook, sandbox, verifier, queue blockers
compose.run() -> policy / budget / sandbox previewtask.thread() -> attempts, model route, costdiagnostics.next() -> exact blocker and ownerdispatch preflightlive artifactssearchable proof
Dispatch preflight
Before work starts, reviewers see repo trust, policy, branch protection, sandbox, budget, evidence type, and blockers.
Task thread
Plans, attempts, CI polling, PR state, model route, cost, thread messages, and reviewer decisions stay in one trace.
Live diagnostics
Stuck tasks, webhook failures, sandbox provisioning, verifier failures, queue blockers, and connector issues resolve to concrete next actions.
Composer
One composer, multiple governed run modes.
Create App, Build, Remediate, Babysit PR, Review, Evidence Export, Procurement Pack, and Incident/Rollback are first-class modes with policy, budget, reviewer, and evidence behavior attached.
- Greenfield app creation
- Mode-specific preflight
- Project instructions
- Approval gates
Thread
A run is readable while it is happening.
The task thread records plan steps, status changes, attempts, PR and CI state, evidence packets, output evaluation, spend, and reviewer actions without hiding failure states.
- Plan-step status
- Attempt history
- PR and CI trail
- Evidence and rollback
Signed remediation PR
boetica/auth-rate-limit-pr
@@ apps/web/src/app/api/login/route.ts- await password.verify(body.password)+ await limiter.consume(requestIp)+ await password.verify(body.password)+ await audit.append(evidencePacket)
evidence packetKMS + Sigstore (cosign)
- packet hash
- 91f4e2a0
- prev hash
- 5e1c8a44
- trust boundary
- sandbox attested · egress denied
- merge policy
- platform-eng / human merge
SOC 2 CC6.6signedNIST AC-6signed
Operate
Dashboards and search turn proof into daily workflow.
Saved views, global search, Atlas context, readiness actions, and diagnostics help operators find work, explain blockers, and decide what can safely run next.
- Saved dashboards
- Global search
- Atlas overlays
- Support diagnostics