real Railway execution, not simulatedindependent verification

Resolve incidents with evidence, not guesswork.

OnCallOS diagnoses production incidents against your real history, safely auto-executes the low-risk fixes against your real infrastructure, and escalates the rest — with full context already attached.

INC-3921Deploy caused error spike — checkout-apineeds approval
INC-3920Stale pricing cache — checkout-apiauto-resolved
INC-3919Traffic spike, 500s — checkout-apiauto-resolved
4
real remediation tools
restart, scale, rollback, cache-clear — each a real Railway API call
100%
independently verified
no action is marked resolved on its own self-report
0
shared secrets across orgs
every org gets its own webhook secret and credentials

From alert to resolution, fully traceable

Every incident moves through the same four stages — nothing happens silently, and nothing destructive happens without approval.

01Detect

Datadog alerts land in seconds

Each org connects Datadog with its own unique webhook secret and API key — configured from Settings in under a minute, with copy-paste instructions and a payload template ready to go.

// datadog.controller.ts
export class DatadogController {
@Post()
async receiveWebhook(payload) {
// secret checked against THIS org only
await queue.add(alert);
}
}
02Diagnose

Grounded in your own incident history

Before diagnosing anything, OnCallOS retrieves the most similar past incidents — by meaning, not keywords — and picks the correct one of four real tools based on the actual root cause, not just the symptom.

Diagnosis · INC-3921
SEV2 — HIGH

Error rate spiked immediately after the latest deployment — the code, not load or cache, is the likely cause.

Recommended action
rollback_deployment("checkout-api")
03Resolve

Real Railway actions, snapshot first

Low-risk, well-understood fixes execute for real against your connected Railway services — after capturing the exact state needed to undo them. Anything risky goes to a human for approval, every time.

// execution.service.ts
if (risk === 'low') {
await snapshot(service);
await runTool(diagnosis);
} else {
await requestApproval(diagnosis);
}
04Verify

Nothing is marked resolved on trust alone

After every action, OnCallOS independently re-checks the real infrastructure state — not the API call's own success flag — before writing a resolution. If verification fails, the incident stays open for a human.

checkRollback target: SUCCESS, liveverified
checkDeployment created after snapshotverified
checkMutation's own success flagnot trusted alone

Built for trust, not just speed

An autonomous system that touches production has to earn every action it takes.

Human approval gates

High-risk or unfamiliar actions always wait for explicit sign-off — never guessed at.

Snapshot & rollback

State is captured before every action, so a bad fix can always be undone with one click.

Scoped credentials

Railway tokens are AES-256-GCM encrypted at rest and validated against the real API before saving.

Full audit log

Every diagnosis, action, and approval is recorded and reviewable after the fact.

Independent verification

Every action is re-checked against real infrastructure state — never just the API call's own success flag.

Per-org isolation

Each org gets its own Datadog webhook secret and its own connected services — never shared.

Stop getting paged for the same fix twice

Connect Datadog and your first Railway service in minutes.