IT service providers.
Triage, runbooks, and ticket-grade automation across every tool your operators already touch. Computer use plus MCP plugins plus a real CLI — so the agent can do the thing, not just describe it.
Where it shows up
Triage
Read tickets, classify, summarize prior context, propose next steps. Branch into deeper investigation only when the cheap path doesn’t suffice.
Runbooks
Encode runbooks as MCP tools. Agents execute them with full audit, sandboxed by default — macOS Seatbelt or Linux bwrap.
CI-style operations
agi execin headless mode for scripted incident workflows. Pipe in a ticket, get a structured response back.
Posture
| Sandboxed tools | Dangerous tools (file writes, shell, network) sandboxed by default. |
| Provider routing | Cheap models for triage, flagship for the hard 1%. Cross-provider in one thread. |
| Audit trail | Journaled tool calls, replayable sessions, exportable to your SIEM. |
| BYOK enforcement | Force BYOK org-wide. Zero managed-cloud spend unless you opt in. |