Local-first support automation.

Why we built cognilogs

The reply was easy. The answer took a day.

We kept meeting the same ticket: a migration went out to the wrong cohort, a certificate rotated before the metadata was live, and a customer was locked out. The reply took five minutes. The work behind it took six systems.

“A reply is only as good as the work behind it.”

Ticket · #2189Investigating

SSO loop after certificate rotation

audit logcohort queryRCA review
Evidence attached, with a person able to take over.

From ticket to truth.

The first version of this idea came from a support team we worked with during a messy migration. A rollout email had gone to a cohort that was not in the pilot. Some customers could sign in to the new workspace; some could not. The support lead had a queue full of angry tickets and no single place that showed what had actually happened.

The answer was spread across an identity provider, a rollout job, a database, a feature flag, and a code path. The team spent a day reconstructing the timeline while customers waited. The reply itself was the smallest part of the job.

We built cognilogs around that middle. It polls any ticketing system, reads the request, checks the places an engineer would check, and either resolves the work or hands it over with the evidence attached. It can enable features through an API or a browser, draft an RCA for human review, and watch the child ticket until it closes.

We run it locally because support data is sensitive and model choice matters. You choose the model and the infrastructure. Stronger models produce better work; the evidence, approval, and audit rules stay the same.

cognilogs is early. We are building with a small group of teams and will publish real outcomes when they exist.

One ticket, one loopTicketing event → close
01

Intake

Any ticketing system

02

Understand

Intent + gaps

03

Act

Check, fix, enable

04

Decide

Confidence + review

05

Watch

SLA + CSAT

What we believe.

Resolve before routing.

The product earns its place by finishing the work and handing over only what needs a person.

Show the evidence.

Every answer and every escalation carries the context, sources, and confidence behind it.

Keep judgment human.

Automation can act, but a person can inspect, override, and sign off on the critical work.

Close the loop.

A reply is one step. Ownership continues through the child ticket, the SLA, and the CSAT.

Keep data close.

Local deployment puts ticket content, run history, and the model inside the environment you control.

Go deep before wide.

Any ticketing system can be polled. The depth of the investigation matters more than the length of the connector list.

Where we are now.

The product is in preview. Here is what is built, what is next, and what we are still working through.

Read the product guide
Run · ticket 21890.93
IntentIssue · identity
EvidenceAudit + code + cohort
ActionMetadata restored
Above threshold · RCA in review
SLA watch · 15mChild ticket linked

In the loop

  • Any ticketing system
  • Intent + prerequisite checks
  • Audit, code, and database checks
  • Feature enablement with approval
  • Confidence gate
  • Child ticket + SLA watch

Next

  • More local model profiles
  • Deeper admin actions
  • More approval paths
  • Broader connector coverage
  • More design-partner playbooks

In progress

  • Security review pack
  • Certification program
  • Outcome benchmarks
  • Public pricing detail
  • More deployment guides

Zero avoidable handoffs.

The work that needs a person still reaches one. We remove the handoffs that exist only because the system lacked context.