Capability map From operations to AI workflows
Tools are grouped by the work they support: infrastructure operations, dependable delivery, recovery, workflow integration and agent engineering. The agent toolkit is presented as working knowledge.
01
Infrastructure foundation
Cloud & AWS
AWSEC2VPCIAMS3RDSRoute 53CloudFrontCloudWatchWAF
- Design secure cloud foundations for small and growing systems.
- Set up DNS, SSL, storage, access, and deployment paths with clear ownership.
- Document operating steps so teams can maintain the system after handover.
02
Runtime operations
Linux & Containers
LinuxDockerDocker ComposeLXC/LXDNginxReverse proxysystemd
- Deploy and maintain production Linux workloads with predictable service behavior.
- Containerize apps and internal tools without overcomplicating the runtime.
- Investigate resource, process, network, SSL, and service-level issues.
03
Deployment reliability
CI/CD & Release
GitHub ActionsGitLab CIJenkinsArtifact registryEnvironment gatesRollback runbook
- Build release flows that are repeatable, inspectable, and easier to roll back.
- Connect source, build, test, immutable artifact, deployment, and post-deploy validation into practical pipelines.
- Keep release notes and handover instructions clear for operations teams.
04
Operational visibility
Observability & Incident Response
ZabbixUptime KumaCloudWatchMetricsStructured logsTracing conceptsAlert routing
- Collect useful metrics and logs, add traces where the workload supports them, and route actionable alerts.
- Create incident notes that explain symptoms, impact, cause, and next action.
- Reduce blind spots around DNS, SSL, mail, website, and infrastructure state.
05
Restore confidence
Backup & Disaster Recovery
KopiaS3 / WasabiLXD snapshotsIndependent backupsRestore testingRTO / RPO
- Use snapshots as short-lived restore points, with independent backups, retention, cleanup, and status reporting.
- Align backup workflows with practical RTO/RPO expectations.
- Test restores and document recovery runbooks so a successful backup job is not mistaken for recoverability.
06
Access and exposure control
Security & Edge
CloudflareWAFIAMVPNpfSenseSSH hardeningSPFDKIMDMARC
- Harden common entry points across DNS, edge, server access, and identity.
- Apply least-privilege thinking to infrastructure and operations workflows.
- Configure SPF, DKIM, and DMARC for sender authentication and policy visibility without presenting them as a guarantee of inbox delivery.
07
Controlled agent operations
Automation & AI Ops
n8nOpenClawHermes AgentMCPWebhooksAI agentsRAGQdrantDocument parsing
- Connect apps, alerts, documents, and business events into reliable workflows.
- Design self-hosted agent runtimes with scoped tools, memory, schedules, and human review where risk is higher.
- Turn repeated support and admin tasks into maintainable, observable automation.
08
Tools & working knowledge
AI Agent Engineering
OpenClawHermes AgentHermes A2AHermes KanbanLangChainLangGraphLangfuse
- Familiar with these tools across agent workflows and LLM application development.
- Published examples distinguish the OpenClaw reference architecture from the Hermes engineering lab.
- Current project interests include sales knowledge retrieval and ERP assistance with access rules defined per user.
09
Operational integration
Business Systems
OdooWordPressGoogle WorkspaceSharePointMonday.comPDF/OCRReports
- Support business systems where infrastructure, documents, and workflows meet.
- Integrate files, APIs, notifications, and approval steps across daily operations.
- Keep client-facing systems stable, documented, and easier to troubleshoot.