Internal — Rosenblatt AI
Rosenblatt Daily Ops Report
A composite morning digest across compliance, finance, calendar, HR, time-off, and AI infra spend — assembled automatically each day.
This page is restricted to Rosenblatt internal use (access-gated) and is refreshed automatically by a scheduled job each morning around 9am ET. If the timestamp above is more than 24 hours old, the automation may have failed — check with Ryan.
Loading report…
ROSENBLATT OPS DIGEST — Wednesday, November 04, 2026
Generated 2026-11-04 08:45 AM EST by Dagster (run 66840f5a-7a76-4d4f-815e-366a4248d59c).
=== COMPLIANCE ALERTS (VANTA) ===
+-------------------------------------------------------------------------------+---------+-------+--------------------------+-----------------------------+
| Test | Overdue | Items | Category | Control(s) |
+-------------------------------------------------------------------------------+---------+-------+--------------------------+-----------------------------+
| GitHub code changes were approved or provided justification for exception | 103d | 11 | Software development | CHG-2, CHG-1 |
| GitHub code changes have automated checks enabled. | 97d | 10 | Software development | CHG-2, CHG-1 |
| S3 backup configured for redundancy across regions (AWS) | 94d | 23 | Data storage | (unmapped) |
| S3 buckets allow only HTTPS traffic (AWS) | 93d | 5 | Infrastructure | NET-1 |
| GitHub repository visibility has been set to private | 90d | 2 | Software development | CHG-2, CHG-1 |
| Point-in-time recovery on DynamoDB enabled (AWS) | 79d | 2 | Data storage | (unmapped) |
| Server logs retained for 365 days (AWS) | 76d | 1 | Logging | MON-2 |
| Offboarding completed for terminated personnel within SLA | 75d | 2 | Employees | IAC-8 |
| General security awareness training records tracked | 66d | 4 | Employees | SAT-1 |
| Medium vulnerabilities identified in packages are addressed (AWS Inspector) | 51d | 54 | Vulnerability management | VPM-2, VPM-1 |
| Critical vulnerabilities identified in packages are addressed (AWS Inspector) | 27d | 299 | Vulnerability management | VPM-2, VPM-1 |
| EBS snapshots are encrypted (AWS) | 26d | 30 | Infrastructure | (unmapped) |
| Enabled IAM User Access Keys must not be older than 90 days | 22d | 1 | Infrastructure | (unmapped) |
| Bitwarden accounts deprovisioned when personnel leave | 16d | 1 | Account security | IAC-8 |
| Cloudflare accounts deprovisioned when personnel leave | 16d | 1 | IT | IAC-8 |
| Jira accounts deprovisioned when personnel leave | 16d | 2 | Account security | IAC-8 |
| Slack accounts deprovisioned when personnel leave | 16d | 2 | Account security | IAC-8 |
| High vulnerabilities identified in packages are addressed (AWS Inspector) | 13d | 1354 | Vulnerability management | VPM-2, VPM-1 |
| Personnel agree to Access Control Policy | 12d | 1 | Policies | IAC-2, GOV-11 |
| Personnel agree to Asset Management Policy | 12d | 1 | Policies | GOV-11, AST-1 |
| Personnel agree to Business Continuity and Disaster Recovery Plan | 12d | 1 | Policies | BCD-1, BCD-2, GOV-11 |
| Personnel agree to Code of Conduct | 12d | 1 | Policies | GOV-11, HRS-3, HRS-2 |
| Personnel agree to Cryptography Policy | 12d | 1 | Policies | GOV-11 |
| Personnel agree to Data Management Policy | 12d | 1 | Policies | DCH-5, GOV-11, AST-2, GOV-5 |
| Personnel agree to Human Resource Security Policy | 12d | 1 | Policies | GOV-11, HRS-3 |
| Personnel agree to Incident Response Plan | 12d | 1 | Policies | GOV-11, IRO-2, IRO-3 |
| Personnel agree to Information Security Policy (AUP) | 12d | 1 | Policies | GOV-7, GOV-11 |
| Personnel agree to Information Security Roles and Responsibilities | 12d | 1 | Policies | GOV-7, IAC-2, GOV-11 |
| Personnel agree to Operations Security Policy | 12d | 1 | Policies | GOV-11, IRO-3 |
| Personnel agree to Physical Security Policy | 12d | 1 | Policies | GOV-11, PES-3, PES-2, PES-1 |
| Personnel agree to Risk Management Policy | 12d | 1 | Policies | RSK-3, GOV-11 |
| Personnel agree to Secure Development Policy | 12d | 1 | Policies | CHG-2, CHG-3, GOV-11, CHG-1 |
| Personnel agree to Third-Party Management Policy | 12d | 1 | Policies | TPM-2, GOV-11 |
| Personnel have computers monitored by Vanta Device Monitor or an MDM | 12d | 1 | Computers | VPM-2, MON-1, END-1 |
| Inventory items have active owners | 12d | 2 | Infrastructure | AST-3 |
+-------------------------------------------------------------------------------+---------+-------+--------------------------+-----------------------------+
=== FINANCE ===
+-------------------------------+-------------+
| Account | Balance |
+-------------------------------+-------------+
| Mercury Checking ••1896 | $46,916.77 |
| Upwork Personal ••3136 | $0.00 |
| Blue Business Cash(TM) (1006) | ($6,288.08) |
+-------------------------------+-------------+
No outstanding invoices.
No invoices paid in the last 24h.
=== PAYROLL ===
Next W-2 payroll — pay period 2026-10-07 to 2026-10-20, check date 2026-10-30, deadline 2026-11-05T00:00:00Z.
Roster not yet materialized for this payroll.
No contractor payment currently scheduled.
=== CALENDAR ===
⚠️ UNAVAILABLE this run — HTTP 400 from https://login.microsoftonline.com/***/oauth2/v2.0/token: {"error":"invalid_grant","error_description":"AADSTS700082: The refresh token has expired due to inactivity. The token was issued on 2026-07-25T20:26:51.2784150Z and was inactive for 90.00:00:00. Trace ID: d1d23c6d-ae11-4deb-a8e7-3e5be05b2b00 Correlation ID: 6207d74c-e6c4-47e0-b704-0a5c5dff4903 Timestamp: 2026-11-04 13:45:11Z","error_codes":[700082],"timestamp":"2026-11-04 13:45:11Z","trace_id":"d1d23c6d-ae11-4deb-a8e7-3e5be05b2b00","correlation_id":"6207d74c-e6c4-47e0-b704-0a5c5dff4903","error_
=== HR: BIRTHDAYS & ANNIVERSARIES ===
None today. Next birthdays: Ryan Walden in 5 day(s) (30 year(s)).
None today. Next hire anniversaries: Eugene Cho in 76 day(s) (1 year(s)).
=== TIME OFF ===
No upcoming approved time-off requests.
=== OUT SICK ===
Not tracked. Detecting out-sick messages would require a Slack message-search scope that has not been approved for this workspace.
=== ACTIVE CLIENT ENGAGEMENTS ===
+--------------+---------------------+--------------------------------------------------------------------------------+--------------------+-----------+-----------------+
| Client | Engagement | Contract status | Last client action | AR status | Retainer anchor |
+--------------+---------------------+--------------------------------------------------------------------------------+--------------------+-----------+-----------------+
| ProService | Retainer | Signed Project Specification (Fridai retainer, re-signed 2026-07-13/14) | Signed 07-14 | Paid up | — |
| Entravia | Retainer | Signed CSA (2026-06-12), combined CSA + Project Spec + Omnibus Amendment No. 1 | Signed 09-11 | Paid up | 2026-06-12 |
| Nothy | Retainer | Signed CSA (2026-03-03) + signed retainer Project Specification (2026-05-15) | Executed 05-23 | Paid up | 2026-06-18 |
| Shift Living | Advisory/evaluation | ⚠️ pending confirmation — Signed CSA+PS (2026-06-09) | Executed 06-09 | Paid up | 2026-06-09 |
+--------------+---------------------+--------------------------------------------------------------------------------+--------------------+-----------+-----------------+
Retainer estimates:
- **ProService** — no retainer anchor recorded in roster.py, so no remaining-balance estimate this run.
- **Entravia** — funded $169,500.00 collected ($169,500.00 invoiced), consumed $118,363.67 (1076.0h @ $110.00/hr per Entravia's own contract) since 2026-06-12 → **remaining $51,136.33**. Role-based rate (Senior AI Engineer, $110/hr) per Entravia's own contract.. Estimate is based on hours logged, not a final billed amount.
- **Nothy** — funded $5,965.00 collected ($5,965.00 invoiced), consumed $4,318.75 (34.6h @ $125.00/hr per Nothy's own contract) since 2026-06-18 → **remaining $1,646.25**. Flat $125/hr per Nothy's own contract — not Entravia's $110/hr role rate.. Estimate is based on hours logged, not a final billed amount.
- **Shift Living** — no contracted hourly rate recorded in the roster; 0.0h logged since 2026-06-09. Add the rate from this client's own contract to roster.py to get a remaining-balance estimate.
In pipeline (contract sent, unsigned — not servicing):
- DealPop, Inc. (Jennifer Hawkins) — CSA submission pending
- eSolutionsFirst (Srinivasa Satrasala) — CSA submission pending
=== AI INFRA SPEND ===
Window: 2026-10-06 to 2026-11-02 (all four providers aligned).
+----------------+-----------+----------------+---------+-----------+----------+
| Owner | DeepInfra | Bedrock (est.) | Copilot | Fireworks | Combined |
+----------------+-----------+----------------+---------+-----------+----------+
| ryanwalden | — | — | $75.01 | $1.37 | $76.38 |
| justinhromalik | — | — | $5.14 | $0.09 | $5.23 |
| andreszabala | — | — | $0.09 | $0.02 | $0.11 |
+----------------+-----------+----------------+---------+-----------+----------+
Total combined DeepInfra+Bedrock+Copilot+Fireworks spend (window): $81.72
Copilot: ai_credits_used is a consumption metric, not an invoice split — per-user total $80.25 vs. billing netAmount $57.60 (39.3% variance; roughly 0-10% is normal for this reconciliation).
Caveat: DeepInfra unavailable: HTTP 401 from https://api.deepinfra.com/v1/api-tokens: {"detail":"User is not authorized to access this resource"}
Caveat: Bedrock spend-by-key unavailable (No module named 'boto3'); other providers still shown.
ERROR: CALENDAR — HTTP 400 from https://login.microsoftonline.com/***/oauth2/v2.0/token: {"error":"invalid_grant","error_description":"AADSTS700082: The refresh token has expired due to inactivity. The token was issued on 2026-07-25T20:26:51.2784150Z and was inactive for 90.00:00:00. Trace ID: d1d23c6d-ae11-4deb-a8e7-3e5be05b2b00 Correlation ID: 6207d74c-e6c4-47e0-b704-0a5c5dff4903 Timestamp: 2026-11-04 13:45:11Z","error_codes":[700082],"timestamp":"2026-11-04 13:45:11Z","trace_id":"d1d23c6d-ae11-4deb-a8e7-3e5be05b2b00","correlation_id":"6207d74c-e6c4-47e0-b704-0a5c5dff4903","error_