Overview
Read-only investigation workflows grouped by operational domain.
reckon does not add a wrapper command. The agent calls each wired CLI
directly, using the workspace's isolated credentials and the command contract in
CLAUDE.md.
Groups
Observability
Grafana alerts, CubeAPM telemetry, AWS infrastructure signals, and optional Elasticsearch logs.
CI/CD
Jenkins build evidence and GitHub change context.
Data & infrastructure
Kafka, Kubernetes, Redis, MongoDB, PostgreSQL, and MySQL diagnostics.
Investigation order
- Read
infra-knowledge/for the service inventory, label conventions, deployment-specific quirks, and known issues. - Assess Grafana alerts, Jenkins failures, and the CubeAPM service inventory.
- Narrow the incident with traces, logs, metrics, deployment history, and dependency evidence.
- Use AWS, GitHub, Kafka, Kubernetes, Redis, Elasticsearch, or a database only where the earlier signals point.
- Correlate timestamps and write evidence under
incidents/<YYYY-MM-DD>-<slug>/.
This is a curated investigation surface, not exhaustive upstream CLI
documentation. Use each installed tool's --help when you need syntax beyond
the grounded workflows shown here.
Humans mitigate; this workspace observes. Do not expand a diagnosis into builds, writes, deploys, scaling, queue production, consumer-group joins, or database mutations.