Internal — Rosenblatt AI

Rosenblatt Daily Ops Report

A composite morning digest across compliance, finance, calendar, HR, time-off, and AI infra spend — assembled automatically each day.

This page is restricted to Rosenblatt internal use (access-gated) and is refreshed automatically by a scheduled job each morning around 9am ET. If the timestamp above is more than 24 hours old, the automation may have failed — check with Ryan.

=== ROSENBLATT 9AM OPS DIGEST — Friday, July 10, 2026 ===

=== COMPLIANCE (Vanta) ===
5 tests OVERDUE / NEEDS_REMEDIATION:

+---------------------------------------------------------+----------+-----------------------+---------------------------------------------------------------+
| Test                                                     | Status   | Category              | Control                                                        |
+---------------------------------------------------------+----------+-----------------------+---------------------------------------------------------------+
| Critical vulns in packages addressed (AWS Inspector)     | OVERDUE  | VULNERABILITY_MGMT    | Vulnerabilities scanned and remediated; Service infra patched  |
| High vulns in packages addressed (AWS Inspector)          | OVERDUE  | VULNERABILITY_MGMT    | Vulnerabilities scanned and remediated; Service infra patched  |
| Medium vulns in packages addressed (AWS Inspector)         | OVERDUE  | VULNERABILITY_MGMT    | Vulnerabilities scanned and remediated; Service infra patched  |
| S3 buckets allow only HTTPS traffic (AWS)                  | OVERDUE  | INFRASTRUCTURE        | Data transmission encrypted                                   |
| CloudTrail logs bucket has delete protection (AWS)         | OVERDUE  | INFRASTRUCTURE        | (unmapped)                                                     |
+---------------------------------------------------------+----------+-----------------------+---------------------------------------------------------------+

Critical: 16 open findings (mostly ffmpeg/containerd CVEs). High: 102 open findings.
Medium: 80 open findings. 3 S3 buckets (incl. copilot-chat-data + replica) lack an
HTTPS-only deny policy. The CloudTrail logs bucket needs both versioning and Object
Lock enabled — this test has no SOC 2 control mapped yet.

=== FINANCE ===
BLOCKER: Mercury API returned 401 (noTokenInDBButMaybeMalformed) on /accounts and
/ar/invoices — confirmed the process-env and bws copies of MERCURY_API_KEY are
byte-identical (not a staleness issue), so the token itself appears to be
invalid/expired. Checking balance and AR invoice data could not be pulled this run —
recommend rotating/regenerating the Mercury API token. Wave data below is unaffected.

+--------------------------------+----------------+
| Account                        | Balance        |
+--------------------------------+----------------+
| Mercury Checking (xxxx)        | UNAVAILABLE    |
+--------------------------------+----------------+
| AMEX Blue Business Cash (1006) | ($6,260.21)    |
+--------------------------------+----------------+

Outstanding / recently-paid invoices: unavailable this run (Mercury API blocker above).

=== CALENDAR (today) ===
+----------+---------------------------+------------------+
| Time     | Title                     | Duration         |
+----------+---------------------------+------------------+
| 9:30 AM  | Daily Standup             | 30 min           |
| 11:30 AM | Sabrina Sain and Rosenblatt| 30 min          |
| 4:30 PM  | The Standup                | 30 min          |
+----------+---------------------------+------------------+
(All times ET. Justin G is OOO through July 10.)

=== HR (Gusto) ===
No birthdays or hire/contract anniversaries today. Nearest upcoming: Sage Faraday's
contract anniversary on Aug 13 (2 years), followed by Justin Hromalik's on Sep 15.

=== TIME-OFF (Jira TIME) ===
+------------------+-------------+------------+------------+
| Reporter         | Type        | Start      | End        |
+------------------+-------------+------------+------------+
| Justin Griffin   | Sick Leave  | 2026-07-09 | 2026-07-11 |
+------------------+-------------+------------+------------+

=== OUT-SICK ===
Known gap: Slack out-sick detection isn't built — would require a bot scope change
for message search, not yet approved.

=== AI INFRA SPEND ===
DeepInfra (July MTD, ranked by cost):
+------------------+----------+
| Key              | Cost     |
+------------------+----------+
| ryanwalden       | $33.24   |
| andreszabala     | $17.61   |
| owenwhite        | $14.82   |
| justinhromalik   | $11.60   |
| eugenecho        | $5.74    |
| sagefaraday      | $4.64    |
| auto             | $0.06    |
| justingriffin    | $0.00    |
+------------------+----------+
Total DeepInfra spend MTD: $87.71

GitHub Copilot (org-wide, July, pooled — per-user attribution not available at this
plan tier):
+------------------------+-----------+
| SKU                     | Net Amount |
+------------------------+-----------+
| Copilot AI Credits      | $842.26   |
| Copilot Business        | $42.90    |
| Copilot Cloud Agent     | $0.94     |
+------------------------+-----------+
Total Copilot spend MTD: $886.10

=== GPU TRACKER TREND (7-day rentable count, sparkline) ===
Data window: 4.8 days (less than target 7-day window)

H200x8   on-demand  █▇▄▆▄▁▅▂▁▆▁▁▄▁  (now: 0 rentable)
H200x8   bid        ▇▆▁▇▅▂▅▂▁█▁▁▃▁  (now: 0 rentable)
B300x4   on-demand  ▁▁▁▁▁█▁▂▁▂▂▁▁▁  (now: 0 rentable)
B300x4   bid        ▁▁▁▁▁█▂▂▁▂▂▁▁▁  (now: 0 rentable)
B200x8   on-demand       ▁▁▇▁▁▁▁▅█  (now: 0 rentable)
B200x8   bid             ▁▁▆▁▁▁▁▅█  (now: 0 rentable)
B300x8   on-demand       ▄▂▂▁▁▂█▇▆  (now: 0 rentable)
B300x8   bid             ▆▄▃▃▂▃█▁▇  (now: 0 rentable)