Cookbooks
Learn the framework through reproducible, synthetic incident investigations with explicit safety boundaries.
Available cookbooks
Every cookbook name links to its directory on GitHub, where the README walks through setup and each step. All of them include an offline smoke path—no credentials or network required.
| Cookbook | What it demonstrates |
|---|---|
| Simple log diagnosis ↗ | Complete offline CLI flow from a local failure log to report and memory. |
| Structured rule evaluation ↗ | Typed fields, quantifiers, required evidence, ranking, and fixture testing. |
| Evidence and JSON reporting ↗ | Bounded evidence collection and the versioned machine-readable report. |
| Prometheus / Alertmanager ↗ | Diagnosing a real-world-shaped alert webhook with rules and bounded evidence. |
| Data pipeline investigation ↗ | Schema, lineage, telemetry, code, and knowledge context. |
| ML regression monitoring ↗ | Feature drift and model-performance investigation. |
| Software-delivery CI investigation ↗ | Dependency, permission, and infrastructure-reference investigation. |
| Recording a resolution ↗ | Human-confirmed resolution and the local truth transition. |
| Guarded proposal ↗ | Playbooks, default-deny policy, evidence-linked proposals, and approvals. |
| Verification and replay ↗ | Explicit verification records, conservative learning, and replay evaluation. |
| Webhook and HTTP evidence ↗ | Authenticated webhook normalization and the hardened HTTP evidence connector. |
| PostgreSQL memory ↗ | Shared durable memory and custom schemas through the independent plugin. |
| Plugin package ↗ | A complete independently packaged plugin with manifest and contract tests. |
Framework versus cookbook
The core owns typed interfaces and safe defaults. Each cookbook owns its synthetic fixtures, scenario rules, knowledge, service composition, prompts, and any optional Agno or OpenRouter integration. Start with a cookbook for a runnable demonstration, then use the architecture and reference pages to examine the framework contracts behind it.