Rosenblatt logo
Internal — Rosenblatt AI

Rosenblatt Daily Ops Report

A composite morning digest across compliance, finance, calendar, HR, time-off, and AI infra spend — assembled automatically each day.

Last updated 2026-07-28 03:25 PM EDT

This page is restricted to Rosenblatt internal use (access-gated) and is refreshed automatically by a scheduled job each morning around 9am ET. If the timestamp above is more than 24 hours old, the automation may have failed — check with Ryan.

Loading report…

============================================================
ROSENBLATT OPS DIGEST — 2026-07-28
============================================================

=== COMPLIANCE (Vanta) ===
28 tests need attention (8 OVERDUE, 20 DUE_SOON). OVERDUE tests with mapped controls:
+---------------------------------------------+----------+----------------+---------------------------------------+
| Test                                         | Status   | Category       | Control(s)                           |
+---------------------------------------------+----------+----------------+---------------------------------------+
| EBS snapshots are encrypted (AWS)            | OVERDUE  | INFRASTRUCTURE | (unmapped) - 17 unencrypted snapshots|
| Cloudflare IP access rules enabled           | OVERDUE  | INFRASTRUCTURE | access-firewalls, network-firewalls-*|
| Unwanted traffic filtered (Cloudflare)       | OVERDUE  | INFRASTRUCTURE | access-firewalls, network-firewalls-*|
| Cloudflare notifications enabled             | OVERDUE  | INFRASTRUCTURE | access-firewalls, network-firewalls-*|
| S3 buckets allow only HTTPS traffic (AWS)    | OVERDUE  | INFRASTRUCTURE | data-encrypted-in-transit (6 buckets)|
| DynamoDB PITR enabled (AWS)                  | OVERDUE  | DATA_STORAGE   | (unmapped) - 10 tables               |
| GitHub PRs approved/justified                | OVERDUE  | SOFTWARE_DEV   | (unmapped) - 2 PRs flagged           |
| S3 cross-region replication (AWS)            | OVERDUE  | DATA_STORAGE   | (unmapped) - 11 buckets, medium sev. |
+---------------------------------------------+----------+----------------+---------------------------------------+
Notable: all 3 Cloudflare gaps (IP access rules, firewall, notifications) roll up to the same 4 SOC 2 firewall controls — matches the known Cloudflare MCP token scope gap (401 on zone firewall/access-rules, account alerting) — needs manual dashboard fix, not fixable via this token.
Remaining 20 tests are DUE_SOON (vulnerability scan, pen test report, security training records, log retention, monitoring alarms, MSA template) — standard recurring evidence requests, none urgent today.

=== FINANCE ===
+--------------------------------+----------------+
| Account                        | Balance        |
+--------------------------------+----------------+
| Mercury Checking ..1896        | $120,840.99    |
+--------------------------------+----------------+
| AMEX Blue Business Cash (1006) | ($9,498.52)    |
+--------------------------------+----------------+
Outstanding invoices: Nothy INV-N-R-4, $965.00, Unpaid (issued 2026-07-23).
No invoices paid in the last 24h.

=== PAYROLL ===
W-2: next unprocessed payroll — pay period 2026-07-15 to 2026-07-28, check date 2026-08-07, deadline 2026-08-06T23:00Z. Roster not yet materialized (calculated_at: null, pre-prepare state).
Contractor: last processed batch was 2026-07-24 (all Funded), totaling $65,692.90 across 5 contractors (Owen White +$3,780 bonus, Eugene Cho +$630 bonus). No new contractor batch currently scheduled through 2026-09-15.
+------------------+--------+-------+--------+------------+
| Contractor       | Hours  | Rate  | Bonus  | Total      |
+------------------+--------+-------+--------+------------+
| Sage Faraday     | 82.60  | $90   | $0     | $7,434.00  |
| Owen White       | 68.25  | $90   | $3,780 | $9,922.50  |
| Eugene Cho       | 62.93  | $90   | $630   | $6,293.70  |
| Andres Zabala    | 73.82  | $80   | $0     | $5,905.60  |
| Justin Hromalik  | 60.85  | $90   | $0     | $5,476.50  |
+------------------+--------+-------+--------+------------+
(Shown for context — last processed batch, since no new batch is currently scheduled.)
Combined upcoming payroll outflow: W-2 total pending manual processing in Gusto (roster not materialized); no contractor batch currently scheduled.

=== CALENDAR (today, 2026-07-28) ===
+-----------------------------------+----------+----------+------------+
| Meeting                            | Start    | End      | Attendees  |
+-----------------------------------+----------+----------+------------+
| Daily Standup                      | 9:30 AM  | 10:00 AM | 3          |
| Derek Day and Rosenblatt           | 10:00 AM | 10:30 AM | 1          |
| Shawn <-> Ryan Walden -- 30 min    | 11:00 AM | 11:30 AM | 2          |
| Guild Design Weekly                | 3:30 PM  | 4:00 PM  | 8          |
| The Standup                        | 4:30 PM  | 5:00 PM  | 6          |
| Cohen Pert and Rosenblatt          | 5:00 PM  | 5:30 PM  | 1          |
+-----------------------------------+----------+----------+------------+
(Times shown in ET; duplicate 'Booked:' entry for the Shawn call collapsed into one row.)

=== HR: BIRTHDAYS / ANNIVERSARIES ===
None today. Nearest upcoming: Sage Faraday - contract anniversary 2026-08-13. Justin Hromalik - contract anniversary 2026-09-15. Benjamin Bartolome - contract anniversary 2026-10-31. Ryan Walden - birthday 2026-11-09.
(Contractor records carry no date_of_birth in Gusto -- permanent, known gap.)

=== TIME-OFF (upcoming approved, Jira TIME) ===
+-----------------+-----------+------------+------------+
| Reporter        | Type      | Start      | End        |
+-----------------+-----------+------------+------------+
| Justin Griffin  | Vacation  | 2026-08-19 | 2026-08-23 |
+-----------------+-----------+------------+------------+

=== OUT-SICK (gap note) ===
Slack out-sick detection not built -- would require a bot scope change for message search not yet approved.

=== ACTIVE CLIENT ENGAGEMENTS ===
+---------------+---------------------+------------------+----------------------------+---------------+-------------+
| Client        | Engagement type     | Contract status  | Last client action        | AR status     | Retainer    |
|               |                      |                  |                            |                | anchor      |
+---------------+---------------------+------------------+----------------------------+---------------+-------------+
| ProService    | Retainer            | Signed (re-signed| Signed 07-14 (Mikaela      | Paid up       | 2026-07-13  |
|               |                      | 07-13/14)        | Ferguson)                  |                |             |
| Entravia      | Retainer            | Signed CSA       | -- (legacy DocuSign import;| Paid up       | 2026-07-14  |
|               |                      | (2026-06-12)     | single 'First Party'      |               |             |
|               |                      |                  | submitter, no distinct    |               |             |
|               |                      |                  | client-side event)        |               |             |
| Nothy         | Retainer            | Signed CSA+PS    | -- (legacy import, same   | $965 Unpaid   | 2026-07-23  |
|               |                      | (2026-03/05)     | as above)                 | (INV-N-R-4)   |             |
+---------------+---------------------+------------------+----------------------------+---------------+-------------+
| Shift Living  | Advisory/eval        | Signed CSA+PS    | -- (legacy import)        | Paid up       | 2026-06-09  |
| (pending      | (Replenishment       | (2026-06-09)     |                            |               |             |
| confirmation) | Thresh/Amt = $0)     |                  |                            |               |             |
+---------------+---------------------+------------------+----------------------------+---------------+-------------+
Shift Living remains flagged 'Pending confirmation' -- still no Kimai activity since anchor and no new funding; awaiting Ryan's explicit call on active vs. wound-down.

Retainer balance detail (funded since anchor via Mercury Paid+Unpaid, consumed since anchor via all logged Kimai hours x contracted/role rate):
- **ProService** -- funded $10,000 (Paid, INV-PS-R-3) since anchor 2026-07-13, consumed $7,368.75 (Owen White 53.50h + Eugene Cho 5.45h, both @ $125/hr per the signed Project Spec) -> **remaining ~$2,631.25**.
- **Entravia** -- funded $37,600 (Paid, INV-ET-R-2) since anchor 2026-07-14, consumed $13,551.42 (Andres Zabala 71.85h @ $110/hr 'Senior AI Engineer' role rate + Sage Faraday 45.18h @ $125/hr 'AI Development Team Lead' role rate, per the Omnibus Amendment's role-based structure) -> **remaining ~$24,048.58**. Two Sage Faraday entries (07-14, 07-16) ran 8.75-9.5h -- reviewed, plausible single-session lengths, not flagged as stuck timers.
- **Nothy** -- funded $0 since anchor 2026-07-23 (the INV-N-R-4 replenishment invoice itself is Unpaid, not yet collected) vs. $0 logged hours in that window -> **remaining $0, but the $965 replenishment itself is outstanding/uncollected.**
- **Shift Living** -- funded $1,250 (Paid, INV-SL-R-1) since anchor 2026-06-09, consumed $1,875.00 (Justin Hromalik 15.00h @ $125/hr) -> **remaining ($625.00) -- over.** Consistent with the prior 'may be a concluded one-off engagement' flag (Replenishment Thresh/Amt = $0, advisory scope).

Pipeline (contract sent, unsigned): DealPop, Inc. (Jennifer Hawkins) -- CSA pending. eSolutionsFirst (Srinivasa Satrasala) -- CSA pending.

=== AI INFRA SPEND (combined, window 2026-06-30 to 2026-07-27, 28-day aligned) ===
+----------------+------------+------------+------------+------------+
| Owner          | DeepInfra  | Bedrock    | Copilot    | Combined   |
+----------------+------------+------------+------------+------------+
| ryanwalden     | $34.53     | $1,381.37  | $893.05    | $2,308.95  |
| sagefaraday    | $29.10     | $391.12    | $859.45    | $1,279.67  |
| justinhromalik | $15.98     | $529.69    | $616.57    | $1,162.24  |
| andreszabala   | $21.03     | $4.46      | $349.61    | $375.10    |
| eugenecho      | $7.51      | $197.18    | $65.81     | $270.50    |
| owenwhite      | $16.95     | --         | $246.10    | $263.05    |
| justingriffin  | $0.00      | --         | $6.03      | $6.03      |
| (deleted key)  | --         | $0.83      | --         | $0.83      |
| auto           | $0.10      | --         | --         | $0.10      |
+----------------+------------+------------+------------+------------+
Total combined DeepInfra+Bedrock+Copilot spend (window): $5,666.47
Bedrock reconciliation: per-key CloudWatch estimate $2,504.66 vs. CE actual $2,510.92 (Claude Sonnet 5 only) -- -0.25% variance, tight. Non-Sonnet-5 Bedrock spend not in this table: GPT-5.5 (Mantle) $64.17, GPT-5.4 $0.27, Claude Haiku 4.5 $0.001, Sonnet 4.6 $0.29 -- all unattributed by key (Mantle traffic doesn't hit the invocation log group).
Copilot metrics-vs-billing: per-user credits x $0.01/credit = $3,036.61 vs. billing-API net (window-filtered) $2,947.94 -- ~3.0% variance, within the expected 0-10% band.
(Note: AWS CLI, not the AWS MCP, was used for the Bedrock pull this run -- the aws MCP server is enabled at the account level but no aws MCP tools were exposed to this session's toolset; flagged for Ryan to check session/toolset config. Same underlying credential and API either way, and results reconciled cleanly.)

============================================================
END OF REPORT