Automation rule engine
Match a trigger. Run a governed action. Every firing on the audit chain.
Per-project rules watch for a task or scheduler trigger and run a governed action: notify an operator, retry a task, or cancel a task. Every rule carries its own guardrails. A rolling-window circuit breaker trips a runaway rule into notify-only before it can amplify an incident, a per-project kill switch stops all automation at once, and a dry-run mode records exactly what a rule would have done without touching anything. Destructive actions (retry, cancel) require an admin who has passed a fresh MFA check, re-verified at the moment the rule fires, and every firing lands on the HMAC-chained audit log.
Ships with
- Triggers on task events and scheduler events (misfire, circuit-breaker trip, orphaned task, worker offline)
- Governed actions: notify an operator, retry a task, or cancel a task
- Rolling-window circuit breaker trips a runaway rule into notify-only automatically
- Per-project kill switch halts every rule at once; reset-circuit and delete from the dashboard
- Dry-run mode records what would fire without acting, so a new rule proves itself first
- A rule can condition on an issue fingerprint, so it fires for one specific failure signature
Highlights
- Destructive actions require an admin plus a fresh MFA check, re-verified at fire time
- Every firing writes to the HMAC-chained audit log (which rule, which trigger, what it did)
- Dashboard Automation area: rule list, create/edit builder, kill switch, reset-circuit, delete
- Notify-only actions stay available even when the breaker has tripped, so you never go dark
Related