booting
When production breaks, Cicatrixa reproduces the crash as a failing test, patches until your whole suite is green, and ships through a canary — before your on-call wakes up.
Get early access▼ HOW IT REFUSES TO GUESS
The objection, answered
Yes — the model in your terminal can debug. But between "a model that can debug" and "a production system that heals itself" sits everything that isn't intelligence. Nobody says "why do you need CI — you can run the tests by hand." We're CI for incident response.
Nobody asks at 3:07am. The incident must be noticed, triaged against noise, and acted on while the human is asleep. A chat window has no pager.
Context assembly is the hard 80%. Traceback, the right slice of source, recent deploys, somewhere to run code. Engineers rebuild this by hand every incident; we assemble it automatically, every time.
A sandbox with a burden of proof. Ad-hoc model use produces a plausible patch. Our harness physically cannot ship anything without a previously-failing, now-passing test and a green suite. The rule is enforced by the pipeline, not by prompt discipline.
Deploy rails. A model can't put itself on 20% of live traffic and roll itself back. We own the last mile — which is where the actual risk lives.
No reproduction, no patch. Ever.
— THE ONE RULE THE AGENT CANNOT BREAK
The healing loop
The same bar you hold human engineers to — evidence first, ship second.
Tails logs and health checks on the live service. Catches error spikes and crashes with full tracebacks.
Reads the traceback against your indexed source and pins the root cause — file, line, and the exact input that triggers it.
The step nobody else does. Writes a failing test in an isolated sandbox that proves the bug. Can't prove it? The pipeline stops. Guessing is not an option it has.
Patches until the reproduction test passes and the full existing suite stays green — verified in sandboxes, never on prod.
Optional one-click human approval on the verified diff. Autonomy is a dial you turn as trust accrues, not a leap of faith.
Ships to a slice of live traffic, watches the error rate, auto-promotes or rolls back. The regression test stays in your repo forever.
Zero infra change
No agents on your servers. No Docker to operate. Reproduction and patching happen in our isolated runners; the output lands in your repo as an ordinary pull request. Approving the PR is the deploy.
A Sentry, Datadog, or CloudWatch webhook. Five minutes, reversible any time.
Repo read, pull-request write. Nothing else. Nothing touches your infrastructure.
Each incident becomes a PR: failing test + minimal fix + green suite + canary plan.
Where we sit
| strong model in a terminal | AI SRE copilots | cicatrixa | |
|---|---|---|---|
| Notices the incident | ✗ you do | ✓ alerts | ✓ alerts |
| Assembles the context | ✗ you do | ✓ | ✓ |
| Reproduces as a failing test | ± if you insist | ✗ | ✓ always, or halts |
| Writes a verified fix | ± plausible patch | ✗ explains only | ✓ repro + suite green |
| Ships it & rolls back | ✗ | ✗ | ✓ canary, auto |
| Leaves an artifact behind | ✗ chat scrollback | ± incident report | ✓ permanent regression test |
Early access
We're onboarding a small group of design partners. Bring us one real production bug — we'll heal it free, failing test included.
Request early access