AI On-Call Copilot with Human‑Signed Approval Gate

Описание и применение

Система AI‑помощника для обработки инцидентов быстро диагностирует проблемы, но требует криптографически подтверждённого одобрения человека перед выполнением любых действий, обеспечивая безопасность и аудит.

Задача

AIOps tools either overwhelm operators with alerts or act autonomously, risking hallucinated actions that can damage production.

Результат

The system achieved fast incident diagnosis while preventing unauthorized automated remediation, ensuring every action required a cryptographically verified human approval and was fully auditable.

Рабочий процесс

• 1. Alert received from monitoring stack
• 2. Service pulls metrics, logs, and deploy history for context
• 3. LLM generates structured diagnosis and proposed action
• 4. If action is code‑level revert, opens a PR for merge approval
• 5. If action is operational (restart, rollback, scale), posts interactive approval request to Slack/Teams/email
• 6. Human approves via signed token; token is verified, single‑use, and bound to exact action
• 7. Approved action is executed via safe execFile call with allowlist validation
• 8. All steps logged to an append‑only audit log

Доказательства

Every alert, diagnosis, approval decision, token consumption, and execution result is written to an append-only audit log.

Источник

The LLM-proposed target is never passed to kubectl until it's matched against an explicit allowlist.

Источник

Every approval request mints a cryptographically signed, single-use, short‑TTL HMAC token.

Источник