A composite morning digest across compliance, finance, calendar, HR, time-off, and AI infra spend — assembled automatically each day.
This page is restricted to Rosenblatt internal use (access-gated) and is refreshed automatically by a scheduled job each morning around 9am ET. If the timestamp above is more than 24 hours old, the automation may have failed — check with Ryan.
Loading report…
ROSENBLATT 9AM OPS DIGEST — Saturday, July 11, 2026
=== COMPLIANCE (Vanta — SOC 2) ===
4 tests OVERDUE, 0 NEEDS_REMEDIATION:
```
+---------------------------------------------------------+---------+------------------------+---------------------------------------------------+
| Test | Status | Category | Control(s) |
+---------------------------------------------------------+---------+------------------------+---------------------------------------------------+
| High vulns identified in packages addressed (AWS Insp.) | OVERDUE | VULNERABILITY_MGMT | Vulnerabilities scanned and remediated; |
| | | | Service infrastructure maintained |
| Critical vulns identified in packages addressed (AWS) | OVERDUE | VULNERABILITY_MGMT | Vulnerabilities scanned and remediated; |
| | | | Service infrastructure maintained |
| S3 buckets allow only HTTPS traffic (AWS) | OVERDUE | INFRASTRUCTURE | Data transmission encrypted |
| CloudTrail logs bucket has delete protection (AWS) | OVERDUE | INFRASTRUCTURE | (unmapped) |
+---------------------------------------------------------+---------+------------------------+---------------------------------------------------+
```
Detail: high-severity has 12 open CVEs (mostly containerd/python3-pip/node-lodash package updates); critical has 3 open CVEs (docker.io, containerd). Both S3/CloudTrail findings point at the same bucket: `aws-cloudtrail-logs-687613142139-45ec73ca` (needs an HTTPS-only bucket policy plus Object Lock + Versioning for delete protection).
=== FINANCE (Mercury + Wave) ===
```
+--------------------------------+----------------+
| Account | Balance |
+--------------------------------+----------------+
| Mercury Checking (••1896) | $104,363.68 |
+--------------------------------+----------------+
| AMEX Blue Business Cash (1006) | ($6,349.21) |
+--------------------------------+----------------+
```
Outstanding invoices (2): INV-PS-4-7, $12,000.00, due 2026-07-13; INV-PS-R-3, $10,000.00, due 2026-07-17 (both same client).
Paid in the last 24h: none.
=== CALENDAR (Microsoft Graph) ===
Light day — one item on the calendar: "Justin G OOO" (all-day block, 07-09 through 07-11, ending today). No other meetings scheduled.
=== HR (Gusto) ===
No birthdays or work anniversaries today. Nearest upcoming: Sage Faraday's 2-year contractor anniversary on Aug 13, and Ryan Walden's birthday on Nov 9.
=== TIME-OFF (Jira, project TIME) ===
```
+------------------+-------------+------------+------------+
| Reporter | Type | Start | End |
+------------------+-------------+------------+------------+
| Justin Griffin | Sick Leave | 2026-07-09 | 2026-07-11 |
+------------------+-------------+------------+------------+
```
=== OUT-SICK (Slack) ===
Known gap — Slack out-sick detection isn't built; would require a bot scope change for message search, not yet approved.
=== AI INFRA SPEND (DeepInfra + Bedrock, combined by owner) ===
```
+----------------+-------------+----------------+-----------+
| Owner | DeepInfra | Bedrock (est.) | Combined |
+----------------+-------------+----------------+-----------+
| ryanwalden | $33.24 | $283.05 | $316.29 |
| justinhromalik | $11.60 | $34.84 | $46.44 |
| sagefaraday | $4.79 | $26.69 | $31.48 |
| andreszabala | $18.55 | — | $18.55 |
| owenwhite | $15.17 | — | $15.17 |
| eugenecho | $5.74 | $2.24 | $7.98 |
| (deleted key) | — | $0.83 | $0.83 |
| auto | $0.06 | — | $0.06 |
| justingriffin | $0.00 | — | $0.00 |
+----------------+-------------+----------------+-----------+
```
Total combined DeepInfra+Bedrock spend MTD: $436.80
Bedrock reconciliation: sum of per-key estimates $347.64 vs. CE actual (Claude-native, Bedrock Edition) $307.54 — ~13% variance, at the high end of the expected ~10-15% band, not alarming but worth a glance if it widens further.
Unattributed OpenAI/Bedrock-Mantle spend: $64.24 MTD (GPT-5.4 + GPT-5.5, Amazon Bedrock Edition) — no per-key attribution available, Mantle traffic doesn't hit the Bedrock invocation log group.
--- GitHub Copilot (pooled org total, RosenblattAI) ---
```
+------------------------+-----------+
| SKU | Net Amount|
+------------------------+-----------+
| Copilot AI Credits | $956.73 |
| Copilot Business | $47.19 |
| Copilot Cloud Agent | $0.94 |
+------------------------+-----------+
```
Total Copilot MTD: $1,004.86. Per-user breakdown not available at this plan tier.
=== GPU TRACKER TREND (vast.ai, rentable-count) ===
```chart-data
{"ws":"2026-07-11T17:26:59.499848+00:00","we":"2026-07-11T17:27:23.123444+00:00","n":14,"d":[{"c":"H200x8","odr":[1.0,null,null,null,null,null,null,null,null,null,null,null,null,0.0],"odt":[13.0,null,null,null,null,null,null,null,null,null,null,null,null,13.0],"odn":0,"br":[1.0,null,null,null,null,null,null,null,null,null,null,null,null,0.0],"bt":[13.0,null,null,null,null,null,null,null,null,null,null,null,null,13.0],"bn":0},{"c":"B300x4","odr":[0.0,null,null,null,null,null,null,null,null,null,null,null,null,0.0],"odt":[3.0,null,null,null,null,null,null,null,null,null,null,null,null,3.0],"odn":0,"br":[0.0,null,null,null,null,null,null,null,null,null,null,null,null,0.0],"bt":[3.0,null,null,null,null,null,null,null,null,null,null,null,null,3.0],"bn":0},{"c":"B200x8","odr":[1.0,null,null,null,null,null,null,null,null,null,null,null,null,1.0],"odt":[15.0,null,null,null,null,null,null,null,null,null,null,null,null,15.0],"odn":1,"br":[1.0,null,null,null,null,null,null,null,null,null,null,null,null,1.0],"bt":[15.0,null,null,null,null,null,null,null,null,null,null,null,null,15.0],"bn":1},{"c":"B300x8","odr":[1.0,null,null,null,null,null,null,null,null,null,null,null,null,1.0],"odt":[4.0,null,null,null,null,null,null,null,null,null,null,null,null,4.0],"odn":1,"br":[1.0,null,null,null,null,null,null,null,null,null,null,null,null,1.0],"bt":[4.0,null,null,null,null,null,null,null,null,null,null,null,null,4.0],"bn":1}]}
```
H200x8 on-demand: 0 rentable / ~13 avg total mkt capacity (latest reading). B300x4 on-demand: 0 rentable / ~3 avg total mkt capacity. B200x8 on-demand: 1 rentable / ~15 avg total mkt capacity. B300x8 on-demand: 1 rentable / ~4 avg total mkt capacity. Bid pricing tracks on-demand identically in this window. Note: DB was rebuilt from scratch this week (per the 2026-07-11 container reset) — this covers only ~24 seconds of collector history so far, not a real 7-day trend yet; expect this to fill in over the next few days.
--- Notes ---
- Compliance, Mercury/Wave finance, Jira time-off, DeepInfra, and Bedrock cost-reader credentials all resolved live this run (no rebuilt-skill gaps hit).
- Microsoft Graph calendar pulled successfully this run (token was valid; no re-auth needed).