Launch

Last December a Kubernetes routing failure taught me two things at once: that Claude was already better at SRE work than I was, and that I was the safety layer — every command it proposed passed through my judgment before it touched the cluster. Joe is the agent built from that lesson: a deterministic Read/Mutate boundary enforced in code, not configuration, launching in observation mode, open source, because governed-by-construction only means something if you can inspect the construction.

Earlier this year I started building Joe — a software infrastructure copilot. Then I needed a way to verify, before letting it touch anything real, that it would behave according to the rules I'd built into its code. Nothing I found fit. So I built OASIS.