Internal — Rosenblatt AI
Rosenblatt Daily Ops Report
A composite morning digest across compliance, finance, calendar, HR, time-off, and AI infra spend — assembled automatically each day.
This page is restricted to Rosenblatt internal use (access-gated) and is refreshed automatically by a scheduled job each morning around 9am ET. If the timestamp above is more than 24 hours old, the automation may have failed — check with Ryan.
Loading report…
ROSENBLATT 9AM OPS DIGEST — 2026-07-17 === COMPLIANCE (Vanta) === 4 tests OVERDUE, all INFRASTRUCTURE category, all high severity: ``` +--------------------------------------+-------------+----------------+---------------------------------------------------+ | Test | Status | Category | Related Control(s) | +--------------------------------------+-------------+----------------+---------------------------------------------------+ | EBS snapshots are encrypted (AWS) | OVERDUE | INFRASTRUCTURE | (unmapped) | | Cloudflare IP access rules enabled | OVERDUE | INFRASTRUCTURE | Network firewalls reviewed/utilized, Network & | | | | | system hardening, Firewall access restricted | | Unwanted traffic filtered (CF) | OVERDUE | INFRASTRUCTURE | (same 4 controls as above) | | Cloudflare notifications enabled | OVERDUE | INFRASTRUCTURE | (same 4 controls as above) | +--------------------------------------+-------------+----------------+---------------------------------------------------+ ``` - EBS snapshot encryption: 6 unencrypted 400 GiB snapshots flagged (snap-022e033e..., snap-0143583..., snap-059b406d..., snap-0b9c7ae9..., snap-05f1b43e..., snap-01c575ae...). Fix: copy each to an encrypted snapshot via KMS key, then delete the original. - Cloudflare IP access rules / firewall / notifications: no active IP access rules, no active WAF rules/managed rulesets, and none of the 4 required notification policies (DDoS alert, health checks, passive origin monitoring, route leak detection) are enabled. All three roll up to the same SOC 2 firewall-hardening controls — likely a single Cloudflare security configuration pass fixes all three. No DUE_SOON items requiring immediate attention beyond the above (vulnerability scan/pen test/SAT records are DUE_SOON but not overdue). === FINANCE (Mercury + Wave) === ``` +--------------------------------+----------------+ | Account | Balance | +--------------------------------+----------------+ | Mercury Checking (1896) | $114,113.68 | | Mercury Checking (3136) | $0.00 | | AMEX Blue Business Cash (1006) | ($8,668.73) | +--------------------------------+----------------+ ``` Outstanding invoices (not Paid/Cancelled): - INV-PS-R-3 (ProService) — $10,000.00, Unpaid, due 2026-07-17 (today) - INV-ET-R-2 (Entravia) — $37,600.00, Processing, invoiced 2026-07-14 No invoices paid in the last 24 hours. === PAYROLL === W-2 (next unprocessed run): pay period 2026-07-15–2026-07-28, check date 2026-08-07, deadline 2026-08-06 23:00 UTC. **BLOCKED** — Gusto blocker message (verbatim): "This payroll cannot currently be processed in this integration because we don't support hourly workers. Log in to app.gusto.com to continue." Roster is unmaterialized (employee_count: 0) — no per-employee breakdown to show; must be finished directly in app.gusto.com. Contractor (next batch, check date 2026-07-24): ``` +------------------+-------+---------+-----------+------------+ | Contractor | Hours | Rate | Bonus | Total | +------------------+-------+---------+-----------+------------+ | Sage Faraday | 82.60 | $90.00 | $0.00 | $7,434.00 | | Andres Zabala | 73.82 | $80.00 | $0.00 | $5,905.60 | | Owen White | 68.25 | $90.00 | $3,780.00 | $9,922.50 | | Justin Hromalik | 60.85 | $90.00 | $0.00 | $5,476.50 | | Eugene Cho | 62.93 | $90.00 | $630.00 | $6,293.70 | +------------------+-------+---------+-----------+------------+ | BATCH TOTAL | | | | $35,032.30 | +------------------+-------+---------+-----------+------------+ ``` Bonus callouts: Owen White $3,780.00, Eugene Cho $630.00. Combined: W-2 side is blocked, so only the contractor total is confirmed — $35,032.30 (contractor, 2026-07-24). W-2 total is pending manual processing in Gusto (not extrapolated from trailing periods). === CALENDAR (today, 2026-07-17) === ``` +---------------+---------------------------------------------------+-----------------+ | Time (ET) | Title | Attendees | +---------------+---------------------------------------------------+-----------------+ | 7:30–9:30 AM | Atlanta CTO Club Monthly Breakfast | 2 | | 9:30–10:00 AM | Daily Standup | 3 | | 1:30–2:30 PM | Yiqian Barba and Rosenblatt | 1 | | 2:30–3:00 PM | Catchup - Ryan (Rosenblatt) <> Alex (Sunstone) | 3 | | 4:30–5:00 PM | The Standup | 8 | +---------------+---------------------------------------------------+-----------------+ ``` (Note: the Atlanta CTO Club Breakfast appeared twice in the raw pull, once with 0 attendees listed and once with 2 — shown once above as the fuller record.) === HR (Gusto) === No birthdays or hire/contract anniversaries today. Nearest upcoming: Sage Faraday's 2-year contract anniversary on 2026-08-13 (started 2024-08-13). (Contractor birthdays are structurally unavailable in Gusto — permanent gap, not restated daily.) === TIME-OFF (Jira TIME) === No upcoming approved time-off requests on file (all approved requests found have end dates in the past). === OUT-SICK (gap note) === Slack out-sick detection isn't built — would require a bot scope change for message search not yet approved. === ACTIVE CLIENT ENGAGEMENTS === ``` +---------------+------------------------+-----------------+--------------------+---------------------------------+----------------+ | Client | Engagement type | Contract status | Last client action | AR status | Retainer anchor| +---------------+------------------------+-----------------+--------------------+---------------------------------+----------------+ | ProService | Retainer (Fridai) | Signed (re-signed 07-13) | Signed 07-14 | Outstanding $10,000 (Unpaid, due 07-17) | 2026-07-13 | | Entravia | Retainer | Signed (legacy import) | — | Outstanding $37,600 (Processing) | 2026-06-12 | | Nothy | Retainer | Signed (legacy import) | — | Paid up | 2026-06-18 | | Shift Living ⚠️| Advisory/evaluation | Signed (legacy import) | — | Paid up | 2026-06-09 | +---------------+------------------------+-----------------+--------------------+---------------------------------+----------------+ ``` ⚠️ Shift Living remains in "Pending confirmation" — advisory scope (not build/dev), $0 replenishment threshold/amount (no refill mechanism), and last Kimai activity 2026-06-24/25 with entries titled "final debrief"/"final meeting with leadership." Still awaiting Ryan's explicit confirmation on active vs. wound-down status; this has now recurred across multiple digest runs. (Entravia and Nothy show "—" for last client action because their Docuseal records are legacy DocuSign imports with a single "First Party" submitter — no separate Consultant/Client event to attribute, a genuine data gap from the migration, not a filtering miss.) Retainer estimates (hours-logged-based, may not reflect final billed amount; Kimai's `billable` flag is unreliable in this org and was not used as a filter): - **ProService** — anchor 2026-07-13 (Fridai retainer re-signed). Consumed 16.95h @ $125.00/hr = $2,118.75 (Eugene Cho + Owen White). Funded: $0 under a strict `invoiceDate >= anchor` read (INV-PS-R-3 was dated 2026-07-10, three days *before* the anchor) — but that invoice is clearly the funding instrument for this exact engagement ($10,000, sent days before commencement, still Unpaid). Reporting both: strict reading → **($2,118.75) over**; counting the pre-anchor initial-retainer invoice → **$7,881.25 remaining**. - **Entravia** — anchor 2026-06-12. Consumed $39,667.58 (Sage Faraday 161.68h @ $125.00/hr "AI Development Team Lead" role rate + Andres Zabala 176.88h @ $110.00/hr "Senior AI Engineer" role rate, per the Omnibus Amendment's role-based rates — not tied to either named individual). One anomalous duplicate/overlapping Kimai entry excluded: Andres Zabala had two entries both starting 2026-07-15T09:02 with different end times (13:06 and 16:05); the shorter 4.07h entry with no description was excluded as a stale duplicate of the 7.05h entry that has a real description. Funded since anchor: $74,300 counting the Unpaid $37,600 replenishment invoice (INV-ET-R-2, sent 07-14) → **$34,632.42 remaining**; but only $36,700 has actually cleared (Paid only) → **($2,967.58) over** on a collected-only basis. The headline positive number is misleading until the new replenishment invoice is paid. - **Nothy** — anchor 2026-06-18 (INV-N-R-3, latest replenishment invoice, $5,000). Consumed 23.63h @ $125.00/hr (flat rate, confirmed fresh from Nothy's own signed Project Specification — not carried over from Entravia's role-based rates) = $2,954.17 (Justin Hromalik). Funded $5,000 → **$2,045.83 remaining**. - **Shift Living** ⚠️ pending confirmation — anchor 2026-06-09 ($1,250 Initial Retainer, $0/$0 replenishment threshold/amount = no refill mechanism designed in). Consumed 15.00h @ $125.00/hr (Justin Hromalik) = $1,875.00 → **($625.00) over**. Consistent with the "concluded one-off engagement" signal already flagged on this client. In pipeline (contract sent, unsigned — not counted as active): - DealPop, Inc. (Jennifer Hawkins) — CSA sent 2026-07-14, viewed 2026-07-14, not yet signed. - eSolutionsFirst (Srinivasa Satrasala) — CSA sent 2026-07-14, viewed 2026-07-14, not yet signed. === AI INFRA SPEND (DeepInfra + Bedrock + GitHub Copilot, combined) === Window: 2026-06-19 to 2026-07-16 (aligned to the Copilot users-28-day report; DeepInfra and Bedrock CE/CloudWatch pulled for the identical window). ``` +------------------+------------+------------+------------+------------+ | Owner | DeepInfra | Bedrock | Copilot | Combined | +------------------+------------+------------+------------+------------+ | ryanwalden | $45.00 | $535.50 | $504.54 | $1,085.04 | | justinhromalik | $15.98 | $152.34 | $729.28 | $897.60 | | sagefaraday | $48.51 | $75.52 | $687.95 | $811.98 | | andreszabala | $21.01 | $3.87 | $249.51 | $274.39 | | owenwhite | $16.97 | — | $199.96 | $216.93 | | eugenecho | $14.36 | $108.32 | $89.34 | $212.02 | | justingriffin | $0.72 | — | $12.17 | $12.89 | | (deleted key) | — | $0.83 | — | $0.83 | | auto | $0.10 | — | — | $0.10 | +------------------+------------+------------+------------+------------+ ``` - Total combined DeepInfra+Bedrock+Copilot spend (window): $3,511.78 - Bedrock reconciliation: sum of per-key estimates $876.38 vs. CE actual $877.42 for Claude models (Sonnet 5/4.6, Haiku 4.5) in the 07-01→07-16 portion of the window — a tight -0.12% variance. - Unattributed OpenAI/Bedrock-Mantle spend: ~$94.87 (GPT-5.4/GPT-5.5 via Bedrock Mantle across the window) has no per-key attribution available — Mantle traffic doesn't hit the Bedrock invocation log group. - Copilot metrics-vs-billing: per-user credit estimate $2,472.75 vs. billing-API net $2,266.61 for the "Copilot AI Credits" SKU in this exact window — a 9.1% variance, wider than the typical 0-6% band seen on prior aligned runs; both figures reported as-is rather than asserting one as authoritative. --- Report assembled 2026-07-17. All sections pulled live; no section skipped or fabricated.