What are we working on?

Ask a question, create an output, or build an app that works with your tools and data.

+

Add resource

Get Started

📊

Build a warehouse operations dashboard
Connect to inventory data and build a live dashboard

App

📄

Draft an incident response policy
Generate a policy grounded in your security standards

Document

📊

Build a Q3 architecture review deck
Pull data from Jira and Confluence into slides

Slide Deck

Connect to our warehouse inventory system and build a dashboard showing stock levels, reorder alerts, and fulfillment velocity across our top locations.

AI

I'll need access to your warehouse inventory API. Let me request that through a Gatekeeper.

🔒 Gatekeeper: Warehouse Inventory API
Requesting read-only access to stock levels, reorder thresholds, and fulfillment metrics. The Gatekeeper holds the credential and logs every query.

Approved.

AI

Access granted. Pulling inventory data now.

Executed code

const inventory = await env.WAREHOUSE.getStockLevels({
  locations: "top-8",
  include: ["stock", "reorder", "velocity"]
});
const alerts = inventory.filter(
  loc => loc.stockPct < loc.reorderThreshold
);
app.render(Dashboard, { inventory, alerts });

AI

Warehouse Operations Dashboard is live. Connected via Gatekeeper -- read-only, every query logged.

I see 2 locations below reorder threshold. Want me to add Slack alerts when a location drops below 20%?

+

Draft an updated Incident Response Policy for our PCI-DSS environment. Base it on our current security standards and NIST 800-61.

AI

I'll pull from your company's context library to ground this in Costco's standards.

📚 Context Library: Security Standards
Loading Costco's current IR policy (v2.3), PCI-DSS v4.0.1 requirements, and NIST SP 800-61r3 framework. These are curated by your security team and read-only to the agent.

AI

Context loaded. I've identified 3 gaps in the current policy:

1. Missing AI/ML system incident classification
2. Containment SLAs not aligned with PCI-DSS v4.0.1
3. Third-party notification procedures need updating

I'll address all three in the updated draft.

AI

Incident Response Policy v3.0 draft is ready. Structured per NIST 800-61 with Costco-specific procedures and PCI-DSS mappings.

You can edit directly, export to Google Docs, or share for review. The document stays connected to the context library -- if standards change, I can flag sections that need updating.

+

Build a Q3 architecture review deck summarizing our infrastructure changes, migration status, and upcoming initiatives. Pull data from Jira and Confluence.

AI

I'll need access to your project tracking and wiki.

🔒 Gatekeeper: Jira (read-only)
Requesting access to the INFRA and PLATFORM projects. Read epics, status, and completion data only.

🔒 Gatekeeper: Confluence (read-only)
Requesting access to the Architecture Decisions space. Read pages only.

Both approved.

AI

Executed code

const epics = await env.JIRA.getEpics({
  projects: ["INFRA", "PLATFORM"],
  quarter: "Q3-2026"
});
const adrs = await env.CONFLUENCE.getPages({
  space: "architecture-decisions",
  since: "2026-07-01"
});
deck.generate(QuarterlyReview, { epics, adrs });

AI

Q3 Architecture Review deck is ready -- 4 slides from live Jira and Confluence data.

You can regenerate anytime to pick up changes, or edit individual slides. Export to Google Slides or PDF when ready to present.

+

Gadget

Code

Connections

Warehouse Operations Dashboard

94.2%

Avg Stock Level

2

Reorder Alerts

1,847

Orders Fulfilled Today

2.1h

Avg Fulfillment Time

Reorder Alerts

⚠️ Tukwila, WA (#001) -- Paper goods at 12%, below 20% reorder threshold. PO auto-generated.

⚠️ San Jose, CA (#321) -- Electronics at 18%, approaching reorder threshold.

Stock Levels by Location

Issaquah, WA (#002)

97%

Healthy

Seattle, WA (#110)

93%

Healthy

Portland, OR (#088)

89%

Healthy

Los Angeles, CA (#205)

76%

Healthy

Phoenix, AZ (#415)

64%

Monitor

San Jose, CA (#321)

18%

Low

Tukwila, WA (#001)

12%

Reorder

Page

Source

Connections

Incident Response Policy v3.0

Costco Wholesale -- Incident Response Policy

Version 3.0 · Draft · August 2026 · Classification: Internal · Owner: Enterprise Security Architecture

1. Purpose

This policy establishes the procedures, roles, and responsibilities for detecting, responding to, containing, and recovering from information security incidents affecting Costco Wholesale's systems, networks, and data. It applies to all PCI-DSS cardholder data environments (CDEs) and extends to AI/ML systems introduced in FY2026.

2. Scope

All production systems including POS, ecommerce, and warehouse management
Cardholder data environments (PCI-DSS v4.0.1 scope)
AI/ML inference endpoints and training pipelines [NEW]
Third-party integrations and partner API connections

3. Incident Classification

Severity	Definition	Response SLA	Escalation
Critical	Active breach, data exfiltration, or POS compromise	15 min	CISO + Legal + Exec
High	Confirmed unauthorized access, malware, or CDE exposure	30 min	Security Lead + IT Ops
Medium	Suspicious activity, policy violation, or failed attack	4 hours	Security Analyst
Low	Informational events, vulnerability findings, config drift	24 hours	Assigned Engineer
AI/ML [NEW]	Model poisoning, prompt injection, training data exposure	1 hour	Security Lead + AI Team

PCI-DSS v4.0.1 Requirement 12.10.1: The incident response plan must be reviewed annually and updated to address emerging threats including AI-assisted attack vectors.

4. Escalation Matrix

Role	Contact	Triggered At
SOC Analyst (on-call)	soc-oncall@costco.com	All incidents
Security Architecture Lead	D. Hobbs	High / Critical
IT Operations	it-ops-lead@costco.com	Infrastructure impact
CISO	ciso@costco.com	Critical only

Slides

Source

Connections

Q3 Architecture Review

Slide 1 of 4

Q3 2026 Architecture Review

Enterprise Architecture · Costco Wholesale · August 18, 2026

Slide 2 of 4

Infrastructure Initiatives -- Q3 Status

Initiative	Owner	Status	%
API Gateway v3 Migration	E. Chavez	In Progress	68%
Zero Trust Network Rollout	D. Hobbs	In Progress	45%
Warehouse RFID Integration	B. John	Complete	100%
PCI-DSS v4.0.1 Remediation	K. Cambron	In Progress	82%
Cloud Cost Optimization	B. Beecroft	Complete	100%

Source: Jira INFRA & PLATFORM · Aug 18, 2026

Slide 3 of 4

Key Metrics

99.97%

Platform Uptime

-23%

Cloud Spend vs Q2

14

ADRs Published

3.2s

P95 API Latency

Slide 4 of 4

Q4 Roadmap

AI Agent Workspace Pilot -- Deploy Costco OS to Architecture & Security teams.

API Gateway v3 Cutover -- Complete migration with 30-day parallel run.

Zero Trust Phase 2 -- Extend to warehouse and POS networks. Target 80% coverage.

PCI-DSS v4.0.1 Certification -- Complete remediation, schedule QSA assessment.

Vendor Assessment Automation -- Pilot agent-driven security questionnaires for top 50 vendors.

Integrations

Connect external services to Costco OS. Gatekeepers govern access, scope permissions, and log every action.

Gatekeepers

🎯

Jira

Access projects, epics, issues, and sprint data

📖

Confluence

Read and write wiki pages, search spaces

📧

Google Workspace

Gmail, Docs, Sheets, Slides, Calendar, Drive

💬

Slack

Send messages, read channels, manage workflows

💻

GitHub

Access repositories, create PRs, manage issues

🛠

ServiceNow

Tickets, incidents, change requests, CMDB

🛡

Splunk / SIEM

Security events, alerts, and correlation data

❄

Snowflake

Query data warehouse, analytics, and reports

MCP Servers

Remote MCP servers available to all workspaces.

Warehouse Inventory API

https://inventory.mcp.costco.internal/mcp

Auto

POS Transaction System

https://pos.mcp.costco.internal/mcp

Needs auth

Member Database

https://members.mcp.costco.internal/mcp

Needs auth

Cloudflare API

https://mcp.cloudflare.com/mcp

Auto

Context

Curated reference documents that ground your agent in Costco's knowledge. Published centrally, read-only to all agents and workspaces.

md

security-standards.md

Costco security policies, PCI-DSS v4.0.1 requirements, internal controls, and approved cryptographic standards

md

architecture-principles.md

Enterprise architecture standards, decision criteria, review templates, and technology radar

md

incident-response-v2.3.md

Current incident response policy -- the baseline agents use when drafting updated versions

md

vendor-requirements.md

Third-party security assessment criteria, scoring methodology, and risk thresholds by vendor tier

md

infrastructure-inventory.md

System catalog with ownership, SLAs, dependency mappings, and change advisory contacts

md

onboarding-procedures.md

New hire processes, system access guides, and team-specific runbooks by department

md

api-governance.md

API design standards, versioning policy, deprecation procedures, and naming conventions

md

cloud-cost-policies.md

Cloud spend guardrails, tagging requirements, reserved instance strategy, and optimization playbook

Context & Skills

Name	Description	Group	Source
incident-response	Draft or update incident response policies grounded in Costco security standards and NIST/PCI-DSS frameworks	Security	Costco
vendor-assessment	Generate vendor security questionnaires and compute risk scores against internal standards	Security	Costco
architecture-review	Build quarterly architecture review decks from Jira and Confluence data	Architecture	Costco
change-impact	Analyze change impact across systems, map dependencies, and identify affected teams	Architecture	Costco
compliance-audit	Gather PCI-DSS compliance evidence, map controls, and generate audit packages	Security	Costco
runbook-automation	Convert static runbooks into interactive step-by-step tools with automated pre-checks	Operations	Costco
onboarding-guide	Generate team onboarding documentation from internal wikis and org charts	General	Costco
meeting-prep	Scan calendar, gather context from connected systems, and generate briefing docs	General	Costco
cost-analysis	Pull cloud spend data, visualize trends, and recommend optimization opportunities	Operations	Costco
api-catalog	Discover, document, and visualize internal API endpoints with ownership and health status	Architecture	Costco