NewEvery agent tool call now routes through the governed MCP gateway — policy check, audit log, then dispatch.Read the changelogarrow_forward
XOOZLYAI Orchestrator
routeHow it workssmart_toyAgent fleetshieldGovernance & trustsellPricingmenu_bookDocsarticleBloghistoryChangelog
Log inStart free
grid_viewProductsrouteHow it workssmart_toyAgent fleetshieldGovernance & trustsellPricingmenu_bookDocsarticleBloghistoryChangelogHelp centreLog in
Start free
  1. XOOZLY
  2. chevron_rightEngineering & research
Loading the blog…
XOOZLYAI Orchestrator

Ready to orchestrate your AI fleet with total confidence?

Start a project, set a cost cap, and watch the loop run with every tool call policy-checked and logged before it leaves the platform.

Start freearrow_forwardSee what shipped
  • check_circleNo credit card required
  • check_circleYour keys, your model spend
  • check_circleEvery tool call audited

Platform

  • All productsarrow_forward
  • Orchestration looparrow_forward
  • Agent fleetarrow_forward
  • Governed control planearrow_forward
  • Pricingarrow_forward

Trust & legal

  • Trust centrearrow_forward
  • Security & compliancearrow_forward
  • AI use policyarrow_forward
  • Report a vulnerabilityarrow_forward
  • Data subject requestsarrow_forward

Resources

  • Documentation & guidesarrow_forward
  • Engineering & research blogarrow_forward
  • Changelogarrow_forward
  • Uptime & reliabilityarrow_forward

Browse by domain

  • Strategy & Researcharrow_forward
  • Developmentarrow_forward
  • QAarrow_forward
  • Governance & Orchestrationarrow_forward
  • All 10 domainsarrow_forward
XOOZLY
© 2026 XOOZLY · 61 agents · 10 domains · 8 SDLC stationsAI use policyarrow_forwardLog inarrow_forward99.9% uptime SLAarrow_forward
  1. XOOZLY
  2. chevron_rightEngineering & research
  3. chevron_rightDispatch
Loading this dispatch…
  1. XOOZLY
  2. chevron_rightEngineering & research
  3. chevron_rightInside the Rule Optimizer: proposals a human still has to approve
AI Ops

Inside the Rule Optimizer: proposals a human still has to approve

Failure patterns detected across autonomous runs become proposed rule edits — never silent ones. A human approves, approval writes a new version, and every version stays rollback-ready.

AOAgent OperationsverifiedRule files & optimization·Aug 03, 2026·6 min read
𝕏in
On this page
  1. 01A proposal is not a change
  2. 02Why not let a good proposal apply itself
At a glance
Proposals auto-applied without review0%
Input: run historyOutput: proposed version
Architectural questions?

The trust centre publishes the governance posture behind everything described here.

Open the trust centrearrow_forward
01

A proposal is not a change

The Rule Optimizer reads what actually happened across a project's runs and proposes an edit to an agent's rule file. It cannot apply that edit. Approval is a human action, and approving creates a new versioned row rather than mutating the one in place.

That constraint is what makes the whole loop safe to leave running. Every version that ever governed a run is still readable, so a regression can be traced to the exact rule text in force at the time, and rolling back is selecting an earlier version rather than reconstructing one.

02

Why not let a good proposal apply itself

Because the cost of the two mistakes is not symmetric. A good proposal that waits for approval costs a few hours. A bad proposal that applied itself silently changes how every subsequent run in that project behaves, and the first signal is usually an unrelated failure days later.

AOWritten by the Agent OperationsRule files & optimization. Dispatches from this team cover the parts of the platform they build and operate.

Related in the product

  • arrow_forwardThe orchestration loop
  • arrow_forwardThe agent fleet
Governed by default

Ready to govern your autonomous fleet?

Continuous guardrails, hard cost caps and an audit row behind every tool call — the same path this dispatch describes.

Start freearrow_forwardRead the trust centre
Suggested reading

More from the engineering blog

Explore all dispatchesarrow_forward
  • GovernanceAug 10, 2026

    Why we built a central MCP gateway instead of trusting agents directly

    Direct agent-to-tool connections create unmonitored credential use, missing audit trails and uncontrollable rate limits. Here is how one centralized proxy enforces policy, writes the audit row and dispatches — in that order — before a request reaches a third-party server.

    verified_userONE PATH PER TOOL CALLPolicy check → audit log → connector dispatchNo domain may bypass it
    8 min readRead article: Why we built a central MCP gateway instead of trusting agents directlyarrow_forward
  • EngineeringJul 28, 2026

    Deterministic guardrails vs. probabilistic LLM evaluators

    Why we separate hard execution bounds from fuzzy evaluation loops, and what the fleet's 61 agents can and cannot do without an explicit grant.

    61/61Agents governed
    0Bypass paths
    6Steps per station
    11 min readRead article: Deterministic guardrails vs. probabilistic LLM evaluatorsarrow_forward
  • FinOpsJul 19, 2026

    Eliminating runaway inference costs with hard project-level caps

    Inside the per-project spending limit that is read before a run starts rather than reconciled after it finishes, and the auto-pause that follows a breach.

    Worked example — one project's monthAuto-pause threshold 80%
    Spent to date · 78%Hard ceiling · 100%
    5 min readRead article: Eliminating runaway inference costs with hard project-level capsarrow_forward