A composite morning digest across compliance, finance, calendar, HR, time-off, and AI infra spend — assembled automatically each day.
This page is restricted to Rosenblatt internal use (access-gated) and is refreshed automatically by a scheduled job each morning around 9am ET. If the timestamp above is more than 24 hours old, the automation may have failed — check with Ryan.
Loading report…
ROSENBLATT 9AM OPS DIGEST — 2026-07-18 === COMPLIANCE (Vanta) === 4 tests OVERDUE, all high severity: ``` +-------------------------------------+---------+----------------+---------------------------------------------------------------+ | Test | Status | Category | Rolls up to (control) | +-------------------------------------+---------+----------------+---------------------------------------------------------------+ | EBS snapshots are encrypted (AWS) | OVERDUE | INFRASTRUCTURE | (unmapped) | | Cloudflare IP access rules enabled | OVERDUE | INFRASTRUCTURE | Network firewalls reviewed; Network firewalls utilized; | | | | | Network and system hardening standards maintained; | | | | | Firewall access restricted | | Unwanted traffic filtered | OVERDUE | INFRASTRUCTURE | Network firewalls reviewed; Network firewalls utilized; | | (Cloudflare) | | | Network and system hardening standards maintained; | | | | | Firewall access restricted | | Cloudflare notifications enabled | OVERDUE | INFRASTRUCTURE | Network firewalls reviewed; Network firewalls utilized; | | | | | Network and system hardening standards maintained; | | | | | Firewall access restricted | +-------------------------------------+---------+----------------+---------------------------------------------------------------+ ``` - EBS snapshots: 7 unencrypted AWS EBS snapshots (400 GiB each) — remediate-by 2026-07-15 (already past due). No mapped SOC 2 control yet. - The 3 Cloudflare tests all roll up to the same 4 firewall/hardening controls: no active IP access rules, no active WAF/firewall config, and none of the 4 required notification policies (DDoS alert, health checks, passive origin monitoring, route leak detection) are enabled. Remediate-by dates 2026-07-16/17 (past due). === FINANCE (Mercury + Wave) === ``` +--------------------------------+----------------+ | Account | Balance | +--------------------------------+----------------+ | Mercury Checking (••1896) | $151,713.68 | | AMEX Blue Business Cash (1006) | ($8,668.73) | +--------------------------------+----------------+ ``` Outstanding invoices: 1 — INV-PS-R-3 (ProService), $10,000.00, Unpaid, dated 2026-07-10. No invoices paid in the last 24 hours. === PAYROLL === ⚠️ UNAVAILABLE this run — the native `mcp_gusto_*` tools are not exposed in this session's toolset (only Vanta MCP tools + general tools are available). Cannot pull the next W-2 payroll or next contractor payment batch. This is a gap in this run's tool access, not a Gusto-side outage — flagging so it gets fixed rather than silently omitted. Combined payroll outflow line cannot be computed this run. === CALENDAR (Microsoft Graph) === Light day — one meeting: "The Envelope: A Pitch Night w Entrepreneurs First" at 5:00–8:00 PM ET (Ryan accepted). === HR: BIRTHDAYS / ANNIVERSARIES (Gusto) === ⚠️ UNAVAILABLE this run — same Gusto MCP tool-access gap as Payroll above (`mcp_gusto_*` tools not present in this session's toolset). Cannot check today's birthdays/hire anniversaries. (Contractor birthdays are a permanent known gap regardless — no `date_of_birth` field on contractor records.) === TIME-OFF (Jira TIME project) === No upcoming approved time-off requests (0 with end date on or after 2026-07-18, out of 17 approved requests on file). === OUT-SICK (Slack) === Gap note: no Slack message-search API available in this environment to detect out-sick mentions — this would require a bot scope change not yet approved. === ACTIVE CLIENT ENGAGEMENTS === ``` +--------------+-----------------+---------------------------+---------------------+------------------------------+----------------+ | Client | Engagement type | Contract status | Last client action | AR status | Retainer anchor | +--------------+-----------------+---------------------------+---------------------+------------------------------+----------------+ | ProService | Retainer (T&M) | Signed PS (re-signed | Signed 07-14 | $10,000 outstanding | 2026-07-13 | | | | 2026-07-13/14) | | (INV-PS-R-3, Unpaid) | | | Entravia | Retainer (T&M) | Signed CSA+PS+Amendment | — (legacy DocuSign | Paid up (latest INV-ET-R-2, | 2026-07-14 | | | | (2026-06-12) | import, no separate | $37,600, Paid 06-12/07-14) | | | | | | client-side event) | | | | Nothy | Retainer (T&M) | Signed CSA (03-03) + PS | — (legacy DocuSign | Paid up (latest INV-N-R-3, | 2026-06-18 | | | | Retainer (05-15) | import, no separate | $5,000, Paid) | | | | | | client-side event) | | | | Shift Living | Retainer ⚠️ | Signed CSA+PS (2026-06-09) | — (legacy DocuSign | Paid up (only INV-SL-R-1, | 2026-06-09 | | pending | | | import, no separate | $1,250, Paid) | | | confirmation | | | client-side event) | | | +--------------+-----------------+---------------------------+---------------------+------------------------------+----------------+ ``` **ProService** — funded $10,000 (INV-PS-R-3, Unpaid, dated 3 days *before* the 2026-07-13 commencement anchor — see note below) vs. $0 if strictly filtering `invoiceDate >= anchor`. Consumed: 16.95h (Eugene Cho 4.95h + Owen White 12.00h) @ $125/hr = $2,118.75 since anchor. **Remaining: -$2,118.75 (over) on the strict filter, or +$7,881.25 if counting INV-PS-R-3 as the funding instrument for this retainer** (it was clearly sent for this exact new engagement, just dated slightly ahead of the signing) — reporting both per the skill's edge-case guidance rather than picking one. Hours-logged-based estimate, not a final billed amount. **Entravia** — funded $37,600 (INV-ET-R-2, Paid) since anchor 2026-07-14. Consumed: role-based rates per the Omnibus Amendment — Sage Faraday (AI Development Team Lead) 20.77h @ $125/hr = $2,595.83, Andres Zabala (Senior AI Engineer) 27.05h @ $110/hr = $2,975.50, total $5,571.33. **Remaining: +$32,028.67.** One anomalous Kimai entry excluded: Andres Zabala had two same-start (2026-07-15T09:02) entries with different end times (7.05h with a real description, 4.07h with none) — kept the 7.05h/described one, excluded the 4.07h duplicate per the same-day-overlap sanity check. Two Sage Faraday entries ran 8.75h and 9.50h (07-16, 07-14) — reviewed but kept as real work (no "final"/stuck-timer language, not trailing entries). Hours-logged-based estimate. **Nothy** — funded $5,000 (INV-N-R-3, Paid) since anchor 2026-06-18. Consumed: Justin Hromalik 23.63h @ $125/hr (flat rate per Nothy's own PS, re-verified fresh — not reused from Entravia's role-based rates) = $2,954.17. **Remaining: +$2,045.83.** Hours-logged-based estimate. **Shift Living** ⚠️ pending confirmation — funded $1,250 (INV-SL-R-1, Paid, the only invoice on file — no replenishment mechanism, Threshold/Amount both $0.00) since anchor 2026-06-09. Consumed: Justin Hromalik 15.00h @ $125/hr = $1,875.00. **Remaining: -$625.00 (over).** Still sitting in "Pending confirmation" per the roster — last Kimai entry 2026-06-24/25 (24+ days silent as of today), entries literally titled "final debrief"/"final meeting with leadership." Awaiting Ryan's explicit word on whether this is still active or wound down — surfacing again rather than defaulting it either way. In pipeline (contract sent, not yet fully signed): - DealPop, Inc. (Jennifer Hawkins) — CSA sent 2026-07-14, awaiting client signature. - eSolutionsFirst (Srinivasa Satrasala) — CSA sent 2026-07-14, opened 2026-07-14, not yet signed. === AI INFRA SPEND (DeepInfra + Bedrock + Copilot, combined) === Window aligned across all three sources: 2026-06-20 to 2026-07-17 inclusive (per Copilot's users-28-day report). ``` +------------------+------------+------------+------------+------------+ | Owner | DeepInfra | Bedrock | Copilot | Combined | +------------------+------------+------------+------------+------------+ | ryanwalden | $45.00 | $543.32 | $504.54 | $1,092.85 | | justinhromalik | $15.98 | $169.69 | $751.94 | $937.62 | | sagefaraday | $45.05 | $77.11 | $696.42 | $818.58 | | andreszabala | $20.74 | $4.04 | $253.28 | $278.05 | | owenwhite | $16.97 | — | $210.12 | $227.09 | | eugenecho | $14.36 | $108.32 | $89.34 | $212.01 | | justingriffin | $0.72 | — | $12.17 | $12.89 | | (deleted key) | — | $0.83 | — | $0.83 | | auto | $0.10 | — | — | $0.10 | +------------------+------------+------------+------------+------------+ ``` - Total combined DeepInfra+Bedrock+Copilot spend (window): $3,580.02 - Bedrock reconciliation: sum of per-key estimates $903.30 (Claude models only) vs. CE actual $903.87 for Claude models over the same window — variance -0.06%, a tight match. - Unattributed OpenAI/Bedrock-Mantle spend: $94.88 (GPT-5.4/5.5 via Bedrock Mantle) — no per-key attribution available, this traffic doesn't hit the Bedrock invocation log group. - Copilot metrics-vs-billing note: per-user `ai_credits_used` summed to an estimated $2,517.80 vs. the billing API's net $2,311.66 for the same window — variance 8.92%, within the observed 0-10% band for this reconciliation (consumption metric, not an invoice-exact split).