Rosenblatt logo
Internal — Rosenblatt AI

Rosenblatt Daily Ops Report

A composite morning digest across compliance, finance, calendar, HR, time-off, and AI infra spend — assembled automatically each day.

Last updated 2026-07-18 08:59 AM EDT

This page is restricted to Rosenblatt internal use (access-gated) and is refreshed automatically by a scheduled job each morning around 9am ET. If the timestamp above is more than 24 hours old, the automation may have failed — check with Ryan.

Loading report…

ROSENBLATT 9AM OPS DIGEST — 2026-07-18

=== COMPLIANCE (Vanta) ===

4 tests OVERDUE, all high severity:

```
+-------------------------------------+---------+----------------+---------------------------------------------------------------+
| Test                                | Status  | Category       | Rolls up to (control)                                         |
+-------------------------------------+---------+----------------+---------------------------------------------------------------+
| EBS snapshots are encrypted (AWS)   | OVERDUE | INFRASTRUCTURE | (unmapped)                                                     |
| Cloudflare IP access rules enabled  | OVERDUE | INFRASTRUCTURE | Network firewalls reviewed; Network firewalls utilized;       |
|                                     |         |                | Network and system hardening standards maintained;             |
|                                     |         |                | Firewall access restricted                                     |
| Unwanted traffic filtered           | OVERDUE | INFRASTRUCTURE | Network firewalls reviewed; Network firewalls utilized;       |
| (Cloudflare)                        |         |                | Network and system hardening standards maintained;             |
|                                     |         |                | Firewall access restricted                                     |
| Cloudflare notifications enabled    | OVERDUE | INFRASTRUCTURE | Network firewalls reviewed; Network firewalls utilized;       |
|                                     |         |                | Network and system hardening standards maintained;             |
|                                     |         |                | Firewall access restricted                                     |
+-------------------------------------+---------+----------------+---------------------------------------------------------------+
```

- EBS snapshots: 7 unencrypted AWS EBS snapshots (400 GiB each) — remediate-by 2026-07-15 (already past due). No mapped SOC 2 control yet.
- The 3 Cloudflare tests all roll up to the same 4 firewall/hardening controls: no active IP access rules, no active WAF/firewall config, and none of the 4 required notification policies (DDoS alert, health checks, passive origin monitoring, route leak detection) are enabled. Remediate-by dates 2026-07-16/17 (past due).

=== FINANCE (Mercury + Wave) ===

```
+--------------------------------+----------------+
| Account                        | Balance        |
+--------------------------------+----------------+
| Mercury Checking (••1896)      | $151,713.68    |
| AMEX Blue Business Cash (1006) | ($8,668.73)    |
+--------------------------------+----------------+
```

Outstanding invoices: 1 — INV-PS-R-3 (ProService), $10,000.00, Unpaid, dated 2026-07-10.
No invoices paid in the last 24 hours.

=== PAYROLL ===

⚠️ UNAVAILABLE this run — the native `mcp_gusto_*` tools are not exposed in this
session's toolset (only Vanta MCP tools + general tools are available). Cannot pull
the next W-2 payroll or next contractor payment batch. This is a gap in this run's
tool access, not a Gusto-side outage — flagging so it gets fixed rather than
silently omitted. Combined payroll outflow line cannot be computed this run.

=== CALENDAR (Microsoft Graph) ===

Light day — one meeting: "The Envelope: A Pitch Night w Entrepreneurs First" at 5:00–8:00 PM ET (Ryan accepted).

=== HR: BIRTHDAYS / ANNIVERSARIES (Gusto) ===

⚠️ UNAVAILABLE this run — same Gusto MCP tool-access gap as Payroll above (`mcp_gusto_*`
tools not present in this session's toolset). Cannot check today's birthdays/hire
anniversaries. (Contractor birthdays are a permanent known gap regardless — no
`date_of_birth` field on contractor records.)

=== TIME-OFF (Jira TIME project) ===

No upcoming approved time-off requests (0 with end date on or after 2026-07-18, out of 17 approved requests on file).

=== OUT-SICK (Slack) ===

Gap note: no Slack message-search API available in this environment to detect out-sick mentions — this would require a bot scope change not yet approved.

=== ACTIVE CLIENT ENGAGEMENTS ===

```
+--------------+-----------------+---------------------------+---------------------+------------------------------+----------------+
| Client       | Engagement type | Contract status           | Last client action  | AR status                    | Retainer anchor |
+--------------+-----------------+---------------------------+---------------------+------------------------------+----------------+
| ProService   | Retainer (T&M)  | Signed PS (re-signed       | Signed 07-14         | $10,000 outstanding          | 2026-07-13     |
|              |                 | 2026-07-13/14)             |                      | (INV-PS-R-3, Unpaid)         |                |
| Entravia     | Retainer (T&M)  | Signed CSA+PS+Amendment    | — (legacy DocuSign   | Paid up (latest INV-ET-R-2,  | 2026-07-14     |
|              |                 | (2026-06-12)               | import, no separate  | $37,600, Paid 06-12/07-14)   |                |
|              |                 |                            | client-side event)   |                               |                |
| Nothy        | Retainer (T&M)  | Signed CSA (03-03) + PS    | — (legacy DocuSign   | Paid up (latest INV-N-R-3,   | 2026-06-18     |
|              |                 | Retainer (05-15)           | import, no separate  | $5,000, Paid)                |                |
|              |                 |                            | client-side event)   |                               |                |
| Shift Living | Retainer ⚠️      | Signed CSA+PS (2026-06-09) | — (legacy DocuSign   | Paid up (only INV-SL-R-1,    | 2026-06-09     |
| pending      |                 |                            | import, no separate  | $1,250, Paid)                |                |
| confirmation |                 |                            | client-side event)   |                               |                |
+--------------+-----------------+---------------------------+---------------------+------------------------------+----------------+
```

**ProService** — funded $10,000 (INV-PS-R-3, Unpaid, dated 3 days *before* the 2026-07-13
commencement anchor — see note below) vs. $0 if strictly filtering `invoiceDate >= anchor`.
Consumed: 16.95h (Eugene Cho 4.95h + Owen White 12.00h) @ $125/hr = $2,118.75 since anchor.
**Remaining: -$2,118.75 (over) on the strict filter, or +$7,881.25 if counting INV-PS-R-3 as
the funding instrument for this retainer** (it was clearly sent for this exact new engagement,
just dated slightly ahead of the signing) — reporting both per the skill's edge-case guidance
rather than picking one. Hours-logged-based estimate, not a final billed amount.

**Entravia** — funded $37,600 (INV-ET-R-2, Paid) since anchor 2026-07-14. Consumed: role-based
rates per the Omnibus Amendment — Sage Faraday (AI Development Team Lead) 20.77h @ $125/hr =
$2,595.83, Andres Zabala (Senior AI Engineer) 27.05h @ $110/hr = $2,975.50, total $5,571.33.
**Remaining: +$32,028.67.** One anomalous Kimai entry excluded: Andres Zabala had two
same-start (2026-07-15T09:02) entries with different end times (7.05h with a real description,
4.07h with none) — kept the 7.05h/described one, excluded the 4.07h duplicate per the
same-day-overlap sanity check. Two Sage Faraday entries ran 8.75h and 9.50h (07-16, 07-14) —
reviewed but kept as real work (no "final"/stuck-timer language, not trailing entries).
Hours-logged-based estimate.

**Nothy** — funded $5,000 (INV-N-R-3, Paid) since anchor 2026-06-18. Consumed: Justin Hromalik
23.63h @ $125/hr (flat rate per Nothy's own PS, re-verified fresh — not reused from Entravia's
role-based rates) = $2,954.17. **Remaining: +$2,045.83.** Hours-logged-based estimate.

**Shift Living** ⚠️ pending confirmation — funded $1,250 (INV-SL-R-1, Paid, the only invoice on
file — no replenishment mechanism, Threshold/Amount both $0.00) since anchor 2026-06-09.
Consumed: Justin Hromalik 15.00h @ $125/hr = $1,875.00. **Remaining: -$625.00 (over).** Still
sitting in "Pending confirmation" per the roster — last Kimai entry 2026-06-24/25 (24+ days
silent as of today), entries literally titled "final debrief"/"final meeting with leadership."
Awaiting Ryan's explicit word on whether this is still active or wound down — surfacing again
rather than defaulting it either way.

In pipeline (contract sent, not yet fully signed):
- DealPop, Inc. (Jennifer Hawkins) — CSA sent 2026-07-14, awaiting client signature.
- eSolutionsFirst (Srinivasa Satrasala) — CSA sent 2026-07-14, opened 2026-07-14, not yet signed.

=== AI INFRA SPEND (DeepInfra + Bedrock + Copilot, combined) ===

Window aligned across all three sources: 2026-06-20 to 2026-07-17 inclusive (per Copilot's
users-28-day report).

```
+------------------+------------+------------+------------+------------+
| Owner            | DeepInfra  | Bedrock    | Copilot    | Combined   |
+------------------+------------+------------+------------+------------+
| ryanwalden       | $45.00     | $543.32    | $504.54    | $1,092.85  |
| justinhromalik   | $15.98     | $169.69    | $751.94    | $937.62    |
| sagefaraday      | $45.05     | $77.11     | $696.42    | $818.58    |
| andreszabala     | $20.74     | $4.04      | $253.28    | $278.05    |
| owenwhite        | $16.97     | —          | $210.12    | $227.09    |
| eugenecho        | $14.36     | $108.32    | $89.34     | $212.01    |
| justingriffin    | $0.72      | —          | $12.17     | $12.89     |
| (deleted key)    | —          | $0.83      | —          | $0.83      |
| auto             | $0.10      | —          | —          | $0.10      |
+------------------+------------+------------+------------+------------+
```

- Total combined DeepInfra+Bedrock+Copilot spend (window): $3,580.02
- Bedrock reconciliation: sum of per-key estimates $903.30 (Claude models only) vs. CE actual
  $903.87 for Claude models over the same window — variance -0.06%, a tight match.
- Unattributed OpenAI/Bedrock-Mantle spend: $94.88 (GPT-5.4/5.5 via Bedrock Mantle) — no
  per-key attribution available, this traffic doesn't hit the Bedrock invocation log group.
- Copilot metrics-vs-billing note: per-user `ai_credits_used` summed to an estimated $2,517.80
  vs. the billing API's net $2,311.66 for the same window — variance 8.92%, within the
  observed 0-10% band for this reconciliation (consumption metric, not an invoice-exact split).