IaC plan diff + drift-detector live view.
Pick a plan, see the diff. Click a resource, see its current state vs. desired state. Drift alarms are receipts.
HCL2 plan output, resource by resource.
The planfile is the contract. 14 additions, 0 changes, 0 destroys. Each resource carries a content-addressed module source (git+sha) so the same plan re-derives byte-identically on any host. Plan output is JSON-rendered for diffing and HCL-rendered for reading.
Anatomy — operational specs
Per-resource creation log with timing + provider response.
Every resource creation records (timestamp, provider, http_status, latency_ms). PG&E rate-limited at 4 rps; total apply ran 6m12s end-to-end. State file encrypted AES-256-GCM and uploaded with a lock_id that any concurrent apply would have to wait on.
Anatomy — operational specs
Background loop diffing live state against the desired state.
Re-runs `tofu plan -refresh-only` 96 times per day. Any non-zero drift surfaces as a receipt and a page. Median 30-day drift: 0. When drift is intentional (e.g., utility back-office changed a rate), it's adopted via `tofu apply -target=...` with a fresh plan-sign-apply cycle.
Anatomy — operational specs
Every agentic tool call gated by a Cedar predicate.
An agent that wants to run `tofu/apply` calls the MCP server with a planfile URI. A Cedar 4.0 predicate (`sre-prod-low-cost.cedar`) checks principal role + estimated cost; only admitted calls reach OpenTofu. The audit_id is the join key between agent trace and IaC apply receipt.
Anatomy — operational specs
Cost-center + joule-budget tags on every resource.
FOCUS 1.1 schema tags get applied at apply time: cost_center, service, joule_budget_per_day. Cloud-cost API rolls dollars; Insights rolls joules. When the joule_budget threshold is crossed, a receipt fires before the dollar bill is even due.
Anatomy — operational specs
EngineeringOS, in one line
build, made inspectable.
Click anything. The same primitives that compose the rest of the Transaction Science family — receipts, joules, signed transport — show up here too. The family is one system.