Requests
128,400
Marmon/Keystone OS
What are we working on?
Build governed apps, documents, and workflows with your organization's context.
Starter workspaces
Manufacturing Exposure & Resilience CenterReview synthetic exposure, identity, supplier-access, and recovery evidence across digital, warehouse, and processing environments.
Live App
Ransomware & Recovery Readiness BriefDraft a practical readiness plan for identity, IT and operational boundaries, supplier access, recovery, and communications.
Document
Governed Security Automation ReviewEvaluate security-assistance candidates through quality, access, cost, and human-action controls.
Slide Deck
Illustrative prototype. Uses public company context and simulated data; no connection to Marmon/Keystone systems.Marmon/Keystone publicly identifies as a Marmon Metal Services/Berkshire Hathaway company; this prototype is independent and illustrative.Open the Marmon Holdings OS demo
Build a manufacturing exposure and resilience center for Marmon/Keystone using synthetic data. Cover online quoting and customer accounts, warehouses and distribution, processing environments, supplier access, and recovery evidence. Require human approval before containment or access changes.
AI
I start with no access. I'll request only the evidence needed for this workspace.
Gatekeeper: Synthetic Exposure + Recovery Evidence
Read-only access to synthetic external-asset, identity, facility, supplier-access, vulnerability, and recovery records. No Marmon/Keystone system, credential, customer, employee, supplier, or operational record is connected.
Read-only access to synthetic external-asset, identity, facility, supplier-access, vulnerability, and recovery records. No Marmon/Keystone system, credential, customer, employee, supplier, or operational record is connected.
Approve read-only access.
AI
Executed deterministic query
const exposure = await env.SYNTHETIC_ATTACK_SURFACE.list({
scope: ["digital", "warehouse", "processing"]
});
const access = await env.SYNTHETIC_SUPPLIER_ACCESS.listReviews();
const recovery = await env.SYNTHETIC_RECOVERY.getEvidenceSummary();
app.render(ExposureResilience, { exposure, access, recovery });
The center is ready. Containment, account changes, production actions, supplier decisions, and readiness attestations remain human-approved.Create a 90-day ransomware and recovery readiness brief for Marmon/Keystone. Address identity and remote access, warehouse and processing asset ownership, IT and operational boundaries, backup and restore evidence, and incident communications.
AI
I'll use curated company context and request only the resources needed for this workspace.
Gatekeeper: Asset Inventory + Recovery Evidence
Read-only access to simulated asset ownership, service dependencies, remote-access reviews, recovery tests, and decision records. No production telemetry or personal information is included.
Read-only access to simulated asset ownership, service dependencies, remote-access reviews, recovery tests, and decision records. No production telemetry or personal information is included.
AI
The brief turns recovery objectives into company-owned evidence, deterministic checks, explicit exceptions, and reviewable human decisions.
Create a governed security automation review for alert and incident evidence triage, vulnerability remediation evidence packs, and supplier access reviews. Use code for deterministic steps and models only where judgment adds value.
AI
I'll use curated company context and request only the resources needed for this workspace.
Gatekeeper: Synthetic Security Data + AI Gateway
Read-only access to simulated alert, vulnerability, supplier-access, evaluation, and aggregate spend metadata. No prompts, credentials, personal information, or production records are exposed.
Read-only access to simulated alert, vulnerability, supplier-access, evaluation, and aggregate spend metadata. No prompts, credentials, personal information, or production records are exposed.
AI
Executed deterministic query
const candidates = await env.SYNTHETIC_MODEL_REGISTRY.list({
domain: "security-operations", include: ["owner", "evals", "risk-tier"]
});
const spend = await env.SYNTHETIC_AI_GATEWAY.aggregate({
by: "candidate", include: ["budget", "rate-limit"]
});
deck.render(SecurityAutomationReview, { candidates, spend });
The review is ready. AI may classify, summarize, or draft; accountable people retain every containment, access, supplier, and remediation decision.Manufacturing Exposure & Resilience Center
Illustrative data. Every exposure, finding, score, status, and event is synthetic. Public operating facts do not describe Marmon/Keystone systems, security posture, incidents, or performance.
27+
Publicly stated locations
4
Synthetic exposure queues
6
Governed demo resources
3
Illustrative approvals
Attention queue
Review: A synthetic vendor access path needs owner verification before any disable action.
Monitor: Illustrative restore evidence requires operations review before changing the readiness status.
Synthetic readiness by operating surface
Online quoting and customer accounts
92%
Complete
Warehouse and distribution systems
84%
Monitor
Processing and fabrication environments
75%
Monitor
Supplier and remote access
68%
Review
Policy follows the data. Sharing this app re-checks the viewer against every observed resource.
Illustrative policy trace
| Step | Enforced policy | Status |
|---|---|---|
| Request resource | Starts with no access; request is limited to Synthetic Exposure + Recovery Evidence | Approved read-only |
| Run deterministic query | Typed capability; credential remains isolated | Logged |
| Render app | Observed resources stay attached to the output | Bound |
| Share | Viewer permissions are checked at open time | Human controlled |
Gatekeeper: Synthetic Exposure + Recovery Evidence
Read-only access to synthetic external-asset, identity, facility, supplier-access, vulnerability, and recovery records. No Marmon/Keystone system, credential, customer, employee, supplier, or operational record is connected.
Read-only access to synthetic external-asset, identity, facility, supplier-access, vulnerability, and recovery records. No Marmon/Keystone system, credential, customer, employee, supplier, or operational record is connected.
Resource boundaries
No access by defaultThe workspace requests only the capability needed for this job.
Credential isolationGenerated code receives a typed binding, never an API key.
Human-owned actionsExternal, destructive, or consequential actions remain approval-gated.
Ransomware & Recovery Readiness Brief
Illustrative planning artifact. Illustrative planning based on public operations and synthetic scenarios, not Marmon/Keystone architecture, controls, incidents, service levels, or plans.
Marmon/Keystone - Ransomware & Recovery Readiness
Purpose
Protect material planning, quoting, inventory, processing, fulfillment, and customer support by making access ownership, service boundaries, recovery evidence, and escalation paths explicit.
Jobs to be done
| Priority | Journey moment | Required review |
|---|---|---|
| Identity and remote access | Employee and supplier connections | Security + operations review |
| Asset ownership and environment boundaries | Warehouse, machining, and fabrication | Site leadership + engineering review |
| Recovery and communications | Restore quoting, inventory, and fulfillment | Continuity + legal review |
Operating principles
- Start with a measurable job to be done, not a new tool.
- Use curated company context before model knowledge.
- The human owner remains accountable for every output.
- An agent never receives more permission than the person using it.
Gatekeepers hold credentials, scope every resource, and preserve the observation trail when work is shared.
Delivery sequence
Days 1-30: Map critical services, accountable owners, remote paths, data boundaries, and recovery objectives.
Days 31-60: Exercise synthetic identity, segmentation, restore, and communications scenarios with explicit evidence.
Days 61-90: Close evidence gaps, record accepted exceptions, and schedule repeatable recovery validation.
Control alignment
Least privilege, supplier access expiry, IT and operational separation, immutable evidence, safe recovery testing, legal review, operational safety, and human approval remain mandatory.
Public sources only. These links informed the illustrative workspace; no company systems or private data are connected.
Workspace sources
Draft a practical readiness plan for identity, IT and operational boundaries, supplier access, recovery, and communications.
marmonkeystone.commarmonkeystone.comPublic contextmarmonkeystone.commarmonkeystone.com/about-usPublic contextmarmonkeystone.commarmonkeystone.com/marmon-keystone-locationsPublic contextmarmonkeystone.commarmonkeystone.com/privacy-policyPublic contextmarmon.commarmon.com/industry-groups/metal-servicesPublic context
Gatekeeper: Asset Inventory + Recovery Evidence
Read-only access to simulated asset ownership, service dependencies, remote-access reviews, recovery tests, and decision records. No production telemetry or personal information is included.
Read-only access to simulated asset ownership, service dependencies, remote-access reviews, recovery tests, and decision records. No production telemetry or personal information is included.
Resource boundaries
No access by defaultThe workspace requests only the capability needed for this job.
Credential isolationGenerated code receives a typed binding, never an API key.
Human-owned actionsExternal, destructive, or consequential actions remain approval-gated.
Governed Security Automation Review
Public sources only. These links informed the illustrative workspace; no company systems or private data are connected.
Workspace sources
Evaluate security-assistance candidates through quality, access, cost, and human-action controls.
marmonkeystone.commarmonkeystone.comPublic contextmarmonkeystone.commarmonkeystone.com/about-usPublic contextmarmonkeystone.commarmonkeystone.com/marmon-keystone-locationsPublic contextmarmonkeystone.commarmonkeystone.com/privacy-policyPublic contextmarmon.commarmon.com/industry-groups/metal-servicesPublic context
Gatekeeper: Synthetic Security Data + AI Gateway
Read-only access to simulated alert, vulnerability, supplier-access, evaluation, and aggregate spend metadata. No prompts, credentials, personal information, or production records are exposed.
Read-only access to simulated alert, vulnerability, supplier-access, evaluation, and aggregate spend metadata. No prompts, credentials, personal information, or production records are exposed.
Resource boundaries
No access by defaultThe workspace requests only the capability needed for this job.
Credential isolationGenerated code receives a typed binding, never an API key.
Human-owned actionsExternal, destructive, or consequential actions remain approval-gated.
Integrations
Organization-wide connections for Marmon/Keystone OS. Gatekeepers hold credentials, scope resources, and log each action.
Prototype catalog. Connections and authorization states are simulated.
Gatekeepers
Productivity suite
Mail, calendar, documents, spreadsheets, and files
Collaboration
Chat, channels, meetings, and workflow notifications
Project tracking
Programs, epics, issues, sprints, and delivery status
Knowledge base
Policies, procedures, standards, and team documentation
Service management
IT tickets, incidents, change requests, and asset data
HRIS
Employee directory, organization, benefits, and lifecycle workflows
ERP & procurement
Finance, planning, purchasing, supply chain, and billing
CRM
Customer, account, partner, and service relationship data
Code platform
Repositories, reviews, issues, and engineering standards
Data platform
Governed warehouse, catalog, analytics, and reporting
Security operations
Alerts, cases, exposure, audit, and control evidence
Business intelligence
Dashboards, semantic models, and executive reporting
MCP Server Portals
Illustrative remote services available to authorized workspaces.
Security Operations
https://security.mcp.demo.example/mcp
Auto
Enterprise Data Catalog
https://data.mcp.demo.example/mcp
Needs auth
Finance & Procurement
https://finance.mcp.demo.example/mcp
Auto
People Directory
https://people.mcp.demo.example/mcp
Needs auth
Cloudflare API
https://cloudflare.mcp.demo.example/mcp
Auto
Organization Context
Shared, curated knowledge that grounds every Marmon/Keystone OS workspace. Context is versioned and read-only to agents.
Public operating context: marmonkeystone.com · Internal-looking documents below are illustrative.
company-strategy.md
Mission, operating model, annual priorities, and outcome definitions
brand-and-communications.md
Terminology, voice, accessibility, and approved communication patterns
security-standards.md
Identity, data protection, secure development, and incident requirements
responsible-ai-standard.md
AI risk tiers, evaluations, human oversight, and acceptable use
data-classification.md
Data categories, handling rules, retention, and sharing restrictions
architecture-principles.md
Technology standards, decision records, review criteria, and ownership
vendor-risk.md
Due diligence, contract controls, monitoring, and exit requirements
customer-experience.md
Journey definitions, service standards, and quality measures
operations-playbook.md
Service ownership, runbooks, escalation, continuity, and recovery
finance-controls.md
Planning, purchasing, expense, audit, and reporting procedures
people-policies.md
Hiring, onboarding, performance, leave, and workplace guidance
legal-and-compliance.md
Review paths, records, privacy, accessibility, and regulatory obligations
Skills
Reusable workflows for every function. The human requester owns the result.
| Name | Description | Group | Source |
|---|---|---|---|
| meeting-prep | Build an agenda and briefing from authorized calendar, CRM, and document context | General | Shared library |
| weekly-operating-review | Create a cross-functional summary with decisions, owners, and open risks | General | Shared library |
| incident-response | Assemble evidence, draft updates, and preserve human approval for containment | Security | Shared library |
| vendor-risk-review | Compare due-diligence evidence with security and privacy standards | Security | Shared library |
| control-evidence-pack | Map authorized evidence to control requirements and identify gaps | Security | Shared library |
| architecture-review | Review a proposal against architecture principles and decision criteria | IT & Architecture | Shared library |
| change-impact | Map dependencies, affected services, stakeholders, and rollback requirements | IT & Architecture | Shared library |
| service-health-review | Summarize service levels, incidents, changes, and capacity risks | Operations | Shared library |
| runbook-builder | Turn a procedure into a deterministic workflow with approval gates | Operations | Shared library |
| ai-model-review | Summarize ownership, evaluations, drift, risk tier, and release readiness | Data & AI | Shared library |
| data-quality-report | Assess freshness, completeness, lineage, and policy compliance | Data & AI | Shared library |
| budget-variance | Compare actuals with plan and draft a finance-reviewed variance narrative | Finance | Shared library |
| procurement-brief | Summarize requirements, alternatives, risk, and approval status | Finance | Shared library |
| job-description | Draft an accessible role description from approved job architecture | HR | Shared library |
| onboarding-plan | Create a role-based onboarding plan without expanding system permissions | HR | Shared library |
| contract-intake | Extract terms, route issues, and prepare a legal review checklist | Legal | Shared library |
| privacy-assessment | Map a proposed workflow to data categories and privacy obligations | Legal | Shared library |
| account-brief | Create a customer briefing from authorized CRM and public information | Sales | Shared library |
| proposal-draft | Build a first draft using approved claims, pricing, and brand context | Sales | Shared library |
| executive-update | Turn project evidence into a concise decision-oriented update | General | Shared library |
Profile
Illustrative account information for this public prototype.
Account
Demo User
No personal information is stored
Display name
Demo User
User ID
demo.user@example.com
AI Gateway
Illustrative demo data. Visibility and controls across every AI provider Marmon/Keystone uses — one console.
Tokens
342M
Est. spend
$9,120
Cache-hit
27%
Error rate
0.6%
p50 latency
480 ms
Models in Use
This month| Model | Route | Tokens | Spend | Share | p50 latency |
|---|---|---|---|---|---|
| Llama 3.3 70B | Workers AI | 156M | $2,140 | 310 ms | |
| Claude | via AI Gateway | 98M | $3,980 | 720 ms | |
| GPT-4o | via AI Gateway | 61M | $2,510 | 640 ms | |
| Workers AI embeddings (bge) | Workers AI | 27M | $190 | 40 ms |
Spend vs. Budget
9 days remaining$9,120spent of $12,000 cap
76%
On track · ~$2,880 left with 9 days
Top Users
Demo User 0142M tok $1,180
Demo User 0231M tok $960
Demo User 0328M tok $840
Demo User 0422M tok $610
Usage by Workspace / Team
342M tokens totalAI Enablement
121M tokens · $3,240
Platform Engineering
89M tokens · $2,460
Customer Experience
62M tokens · $1,510
Enterprise Operations
41M tokens · $1,020
Security & Compliance
29M tokens · $890
Governance
Guardrails enforced by Gatekeepers + AI Gateway, with resource-scoped access, audit trails, and human approval.
Per-team allowed models
Restrict which providers each workspace can call.
Monthly spend caps
Hard limits per team; agents stop before overrun.
Data & AI $4,000Platform $3,000
PII redaction
Strip sensitive fields from prompts before they leave.
Enabled
Prompt / response logging
Full request logs retained for audit & review.
Enabled · 90-day retention
Rate limits
Per-team request ceilings to protect budgets.
600 req / min|burst 1,000
Raise Data & AI cap to $6,000
Change queued by an agent — needs a human sign-off.
Requires approval