Claude

Engineer Knowledge Copilot

Claude agent·claude-opus-4-8
Connected
T1 · Inline
Full fidelity·The agent's model and tool calls route through Sentry's gateway.
Accountable owner

S. Iyer

Network Engineering lead

Boundary last reviewed Jun 2026

Blast radius

Documentation only. Cannot touch network elements, tickets or customer data.

Governance at Tier 1 · Inline

Full – approve, block or pause any action before it executes.

Running inside boundary

Every agent can be stopped instantly, from here, whichever harness it runs in.

Runs freely

Reads · logged, never queued

  • ✓Vector store retrieval (incidents, runbooks, change logs)
  • ✓Confluence read
  • ✓Jira read
  • ✓GitHub read
  • ✓AWS S3 docs read

Gates for approval

Writes · propose → human approves → run

  • ⏸Confluence page update (runbook corrections)

Refused at the tool call

Outside the declared boundary

  • ✕Writes to Jira or GitHub
  • ✕Any network element or OSS/BSS access
  • ✕Any system not declared above

Approval activity

Open the full queue →

  • Update runbook RB-201

    confluence_page_update → Confluence · 1 hr ago · Low risk

Audit history

This agent only · append-only
  • Tue 09:12Auto-allowed: 214 read-only tool calls (retrieval, SOQL, Graph)