The three-layer brain.
Seeing is one layer. Thinking is another. Acting is a third. SentinelCloud separates them so each can be measured and replaced independently.
Multimodal ingestion. OTLP traces, JSON logs, Prometheus metrics, GitHub PR diffs, Slack threads, every stream becomes a uniform Signal.
- · OTLP receiver
- · Log shipper
- · Metrics scraper
- · GitHub webhook
- · Slack/Teams adapter
A finite state machine over six agents: Analyst, Devil’s Advocate, Strategist, Tool-Call Critic, Safety, Verifier, plus a Narrator for human summaries.
- · Analyst
- · Devil’s Advocate
- · Strategist
- · Critic
- · Safety / Compliance
- · Verifier
- · Narrator
Every action goes through a tool registry with deny-by-default policy. Real cluster connectors are pluggable; demo uses faithful simulations.
- · GitOps PR opener
- · Cloud SDK shim
- · Mesh weight toggler
- · WAF rule writer
- · Cache purger
- · Feature-flag flipper
One run, twelve phases, every phase audited.
A run is not free-form chain-of-thought. It is a finite state machine. Every transition is a measurable, replayable event.
- 01INGEST
Normalize signals; recall episodic memory.
- 02ANALYZE
Analyst hypothesises root cause grounded in signals.
- 03DEBATE
Devil’s Advocate disagrees by contract; groupthink penalty paid up front.
- 04STRATEGIZE
Strategist proposes one action with rationale, cost delta, risk.
- 05CRITIC
Tool-call critic validates the proposed action against its tool card.
- 06SAFETY
Safety agent reads the constitution and lists violations or returns [].
- 07POLICY GATE
Deterministic + LLM policy checks. If any clause fails, route to human review.
- 08VERIFY
Verifier independently predicts the outcome; disagreement >X% blocks auto-act.
- 09CONFIDENCE GATE
Fused calibrated confidence vs. risk-class threshold + blast radius.
- 10ACT
Either auto-actuate or pause for human-on-the-loop with a natural-language summary.
- 11VERIFY OUTCOME
Compare predicted vs. observed KPIs; adjust calibration.
- 12LEARN
Episode + rejected alternatives + quality score persisted to memory.
Twelve gaps. Twelve modules.
Each gap is a documented criticism of current AIOps work. Each module is the file that closes it.
| ID | Gap | Module |
|---|---|---|
| G1 | Single-LLM hallucinated commands | Tool Selector Critic |
| G2 | Brittle root-cause analysis | Topology-Aware Reasoner |
| G3 | Debate collapses to consensus | Adversarial Debate |
| G4 | No blast-radius awareness | Blast Radius Calculator |
| G5 | No counterfactual reasoning | Counterfactual Memory |
| G6 | Regex-only policy gates | Semantic Policy Engine |
| G7 | Non-reproducible benchmarks | Deterministic Scenario Engine |
| G8 | FinOps ignores eviction risk | Cost-Risk Optimizer |
| G9 | No learning loop | Episodic Memory + PRM |
| G10 | Uncalibrated confidence | Confidence Calibration Gate |
| G11 | Reactive security | WAF Rule Synthesizer |
| G12 | Single-modal ingestion | Multimodal Ingestor |