What are we working on?

Ask a question, create an output, or build an app that works with your tools and data.

+

Add resource

Get Started

📊

Build a warehouse operations dashboard
Connect to inventory data and build a live dashboard

App

📄

Draft an incident response policy
Generate a policy grounded in your security standards

Document

📊

Build a Q3 architecture review deck
Pull data from Jira and Confluence into slides

Slide Deck

Connect to our warehouse inventory system and build a dashboard showing stock levels, reorder alerts, and fulfillment velocity across our top locations.

AI

I'll need access to your warehouse inventory API. Let me request that through a Gatekeeper.

🔒 Gatekeeper: Warehouse Inventory API
Requesting read-only access to stock levels, reorder thresholds, and fulfillment metrics. The Gatekeeper holds the credential and logs every query.

Approved.

AI

Access granted. Pulling inventory data now.

Executed code

const inventory = await env.WAREHOUSE.getStockLevels({
  locations: "top-8",
  include: ["stock", "reorder", "velocity"]
});
const alerts = inventory.filter(
  loc => loc.stockPct < loc.reorderThreshold
);
app.render(Dashboard, { inventory, alerts });

AI

Warehouse Operations Dashboard is live. Connected via Gatekeeper -- read-only, every query logged.

I see 2 locations below reorder threshold. Want me to add Slack alerts when a location drops below 20%?

+

Draft an updated Incident Response Policy for our PCI-DSS environment. Base it on our current security standards and NIST 800-61.

AI

I'll pull from your company's context library to ground this in Costco's standards.

📚 Context Library: Security Standards
Loading Costco's current IR policy (v2.3), PCI-DSS v4.0.1 requirements, and NIST SP 800-61r3 framework. These are curated by your security team and read-only to the agent.

AI

Context loaded. I've identified 3 gaps in the current policy:

1. Missing AI/ML system incident classification
2. Containment SLAs not aligned with PCI-DSS v4.0.1
3. Third-party notification procedures need updating

I'll address all three in the updated draft.

AI

Incident Response Policy v3.0 draft is ready. Structured per NIST 800-61 with Costco-specific procedures and PCI-DSS mappings.

You can edit directly, export to Google Docs, or share for review. The document stays connected to the context library -- if standards change, I can flag sections that need updating.

+

Build a Q3 architecture review deck summarizing our infrastructure changes, migration status, and upcoming initiatives. Pull data from Jira and Confluence.

AI

I'll need access to your project tracking and wiki.

🔒 Gatekeeper: Jira (read-only)
Requesting access to the INFRA and PLATFORM projects. Read epics, status, and completion data only.

🔒 Gatekeeper: Confluence (read-only)
Requesting access to the Architecture Decisions space. Read pages only.

Both approved.

AI

Executed code

const epics = await env.JIRA.getEpics({
  projects: ["INFRA", "PLATFORM"],
  quarter: "Q3-2026"
});
const adrs = await env.CONFLUENCE.getPages({
  space: "architecture-decisions",
  since: "2026-07-01"
});
deck.generate(QuarterlyReview, { epics, adrs });

AI

Q3 Architecture Review deck is ready -- 4 slides from live Jira and Confluence data.

You can regenerate anytime to pick up changes, or edit individual slides. Export to Google Slides or PDF when ready to present.

+

Gadget

Code

Connections

Warehouse Operations Dashboard

94.2%

Avg Stock Level

2

Reorder Alerts

1,847

Orders Fulfilled Today

2.1h

Avg Fulfillment Time

Reorder Alerts

⚠️ Tukwila, WA (#001) -- Paper goods at 12%, below 20% reorder threshold. PO auto-generated.

⚠️ San Jose, CA (#321) -- Electronics at 18%, approaching reorder threshold.

Stock Levels by Location

Issaquah, WA (#002)

97%

Healthy

Seattle, WA (#110)

93%

Healthy

Portland, OR (#088)

89%

Healthy

Los Angeles, CA (#205)

76%

Healthy

Phoenix, AZ (#415)

64%

Monitor

San Jose, CA (#321)

18%

Low

Tukwila, WA (#001)

12%

Reorder

Page

Source

Connections

Incident Response Policy v3.0

Costco Wholesale -- Incident Response Policy

Version 3.0 · Draft · August 2026 · Classification: Internal · Owner: Enterprise Security Architecture

1. Purpose

This policy establishes the procedures, roles, and responsibilities for detecting, responding to, containing, and recovering from information security incidents affecting Costco Wholesale's systems, networks, and data. It applies to all PCI-DSS cardholder data environments (CDEs) and extends to AI/ML systems introduced in FY2026.

2. Scope

All production systems including POS, ecommerce, and warehouse management
Cardholder data environments (PCI-DSS v4.0.1 scope)
AI/ML inference endpoints and training pipelines [NEW]
Third-party integrations and partner API connections

3. Incident Classification

Severity	Definition	Response SLA	Escalation
Critical	Active breach, data exfiltration, or POS compromise	15 min	CISO + Legal + Exec
High	Confirmed unauthorized access, malware, or CDE exposure	30 min	Security Lead + IT Ops
Medium	Suspicious activity, policy violation, or failed attack	4 hours	Security Analyst
Low	Informational events, vulnerability findings, config drift	24 hours	Assigned Engineer
AI/ML [NEW]	Model poisoning, prompt injection, training data exposure	1 hour	Security Lead + AI Team

PCI-DSS v4.0.1 Requirement 12.10.1: The incident response plan must be reviewed annually and updated to address emerging threats including AI-assisted attack vectors.

4. Escalation Matrix

Role	Contact	Triggered At
SOC Analyst (on-call)	soc-oncall@costco.com	All incidents
Security Architecture Lead	D. Hobbs	High / Critical
IT Operations	it-ops-lead@costco.com	Infrastructure impact
CISO	ciso@costco.com	Critical only

Slides

Source

Connections

Q3 Architecture Review

Slide 1 of 4

Q3 2026 Architecture Review

Enterprise Architecture · Costco Wholesale · August 18, 2026

Slide 2 of 4

Infrastructure Initiatives -- Q3 Status

Initiative	Owner	Status	%
API Gateway v3 Migration	E. Chavez	In Progress	68%
Zero Trust Network Rollout	D. Hobbs	In Progress	45%
Warehouse RFID Integration	B. John	Complete	100%
PCI-DSS v4.0.1 Remediation	K. Cambron	In Progress	82%
Cloud Cost Optimization	B. Beecroft	Complete	100%

Source: Jira INFRA & PLATFORM · Aug 18, 2026

Slide 3 of 4

Key Metrics

99.97%

Platform Uptime

-23%

Cloud Spend vs Q2

14

ADRs Published

3.2s

P95 API Latency

Slide 4 of 4

Q4 Roadmap

AI Agent Workspace Pilot -- Deploy Costco OS to Architecture & Security teams.

API Gateway v3 Cutover -- Complete migration with 30-day parallel run.

Zero Trust Phase 2 -- Extend to warehouse and POS networks. Target 80% coverage.

PCI-DSS v4.0.1 Certification -- Complete remediation, schedule QSA assessment.

Vendor Assessment Automation -- Pilot agent-driven security questionnaires for top 50 vendors.

Integrations

Connect external services to Costco OS. Gatekeepers govern access, scope permissions, and log every action.

Gatekeepers

📧

Google Workspace

Gmail, Docs, Sheets, Slides, Calendar, Drive

💬

Slack

Send messages, read channels, manage workflows

🎯

Jira

Projects, epics, issues, sprints, and boards

📖

Confluence

Read and write wiki pages, search spaces

🛠

ServiceNow

IT tickets, HR cases, change requests, CMDB, facilities

💼

Workday

Employee data, org charts, payroll, time off, benefits

📦

SAP

Finance, supply chain, procurement, and inventory management

☁

Salesforce

Merchandising accounts, marketing campaigns, membership CRM

💻

GitHub

Access repositories, create PRs, manage issues

❄

Snowflake

Data warehouse, analytics, cross-department reporting

🛡

Splunk / SIEM

Security events, alerts, monitoring, and correlation data

📊

Power BI / Tableau

Dashboards, executive reporting, and data visualization

MCP Servers

Remote MCP servers available to all workspaces.

Warehouse Inventory API

https://inventory.mcp.costco.internal/mcp

Auto

POS Transaction System

https://pos.mcp.costco.internal/mcp

Needs auth

Member Database

https://members.mcp.costco.internal/mcp

Needs auth

Employee Directory

https://directory.mcp.costco.internal/mcp

Auto

Cloudflare API

https://mcp.cloudflare.com/mcp

Auto

Context

Curated reference documents that ground your agent in Costco's knowledge. Published centrally, read-only to all agents and workspaces.

md

company-strategy-fy2027.md

Costco's strategic priorities, mission, annual objectives, and key results by business unit

md

brand-voice-guidelines.md

Tone, terminology, member-facing communication standards, and approved messaging templates

md

security-standards.md

Security policies, PCI-DSS v4.0.1 requirements, internal controls, and cryptographic standards

md

architecture-principles.md

Enterprise architecture standards, decision criteria, review templates, and technology radar

md

vendor-requirements.md

Third-party assessment criteria, scoring methodology, and risk thresholds by vendor tier

md

infrastructure-inventory.md

System catalog with ownership, SLAs, dependency mappings, and change advisory contacts

md

member-experience-playbook.md

Member journey maps, retention strategies, service standards, and NPS benchmarks

md

supply-chain-procedures.md

Logistics workflows, supplier management, warehouse operations, and distribution protocols

md

hr-policies.md

Leave policies, performance review criteria, hiring procedures, and compensation guidelines

md

financial-reporting-standards.md

Chart of accounts, reporting cadence, audit requirements, and SOX compliance procedures

Skills

Name	Description	Group	Source
meeting-prep	Scan calendar, gather context from connected systems, and generate briefing docs	General	Costco
weekly-report	Compile team activity summaries from Jira, Slack, email, and calendar data	General	Costco
incident-response	Draft or update incident response policies grounded in Costco security standards and NIST/PCI-DSS	Security	Costco
vendor-assessment	Generate vendor security questionnaires and compute risk scores against internal standards	Security	Costco
compliance-audit	Gather PCI-DSS compliance evidence, map controls, and generate audit packages	Security	Costco
architecture-review	Build quarterly architecture review decks from Jira and Confluence data	Architecture	Costco
change-impact	Analyze change impact across systems, map dependencies, and identify affected teams	Architecture	Costco
api-catalog	Discover, document, and visualize internal API endpoints with ownership and health	Architecture	Costco
member-insights	Analyze member data trends, churn signals, renewal rates, and engagement patterns	Membership	Costco
competitive-brief	Research competitors and generate comparison briefs with pricing and market positioning	Membership	Costco
supplier-scorecard	Generate supplier performance reports from procurement data, delivery metrics, and quality scores	Operations	Costco
cost-optimization	Cloud and infrastructure spend analysis, trend visualization, and optimization recommendations	Operations	Costco
budget-analysis	Pull spend data from SAP, compare to budget, flag variances, and forecast quarter-end	Finance	Costco
job-posting-draft	Draft job descriptions from role requirements, team context, and compensation guidelines	HR	Costco
onboarding-guide	Generate new hire documentation from wikis, org charts, and system access procedures	HR	Costco
runbook-automation	Convert static runbooks into interactive step-by-step tools with automated pre-checks	Operations	Costco