How it works

Three steps from breakage to morning digest.

Every repair follows the same short loop — one detector opens the incident, one repair closes it, and the morning Slack digest wraps the day so you start standup already in step.

Step 01

Detect

One watch surface unifies three signals: a breaking dependency from a registry, a cloud-provider API drift (Stripe, Twilio, Auth0, AWS, GCP quietly rotating a default), or a scheduled job that flaked twice on a new release.

Step 02

Repair

When a passing test pins the contract, a Fix-up PR is the cleanest move. When stepping back is the only safe move, a Rollback PR ships instead — a closed-form undo with the lockfile restored, the diff reverted, and the contract green.

Fix-up PR

Auto-applied when the failing surface has a contract test that pins it. Adds the smallest patch that returns CI to green.

Rollback PR

Filed when stepping back is the only safe move. Restores the lockfile, reverts the minimal diff, keeps the contract test green.

Step 03

Digest

Each morning, the timeline of the day's surfaces lands in one card — posted to #ops-digest in Slack before standup, so the team starts the day already in step.

The capability the rest of the field skipped

Rollback is a first-class output, not a manual scratch patch.

Closed-form rollback is largely absent from Dependabot, Renovate, TierZero, and the broader LLM-agent wave — Aurora, OpenFang, the Codex Dependabot integration. Brackmoor files a Rollback PR with a single command: restore the lockfile, revert the minimal diff, keep the contract test green.

brk rollback @nightly-reconcile
PR #423 — rollback nightly-reconcile to 1.4.2Restores package.json, reverts the diff in workers/reconcile.ts, keeps contract test green. One-merge to apply.
contract: pass
diff: 2 files
risk: low
The artifact you actually see

The morning digest — in your #ops-digest channel.

Every surface Brackmoor touched the day before ends up here — what changed, what broke, what was repaired, and what is still open. Posted before standup so the team starts the day in step.

#ops-digest
09:02 local
BrackmoorAPPtoday at 09:02

Morning ops digest — 3 changes ran, 1 broke, 1 repaired.

  • deps
    stripe@17.4.0 — minor bump. PR #421 open with smoke test passing.
  • cloud
    twilio API contract drift — ‘date_sent’ became ISO string. Auto-fix PR #422, CI green.
  • rollback
    cron: nightly-reconcile — flaked twice; new release suspect. Rollback PR #423 ready, one-merge to step back.
Brackmoor — always-on ops watch
Next step

See pricing, or skip the queue.

The free community tier ships the same closed-form repair — the enterprise tier layers SBOM, compliance posture, and SOC 2 evidence on top. Either way, you start with one repo and one cron.