Workflow Verification

Don’t trust the configuration. Run the process.

A verification is a short chain of steps — reads, writes, or a cloud browser — that walks a real process against your live systems. Each step must observe what it expects, and cleanup always runs.

Workflow Verification · Runs

A new hire can sign in and reach their apps

Final state0:41Daily · 06:00 UTC1 step writes

Okta + cloud browser

3 steps + cleanup

OKTA_API_TOKEN · TEST_HIRE_PROFILE

Create a test hire in Okta

Step 1 · Code · Writes

Observed ACTIVE · 4 apps assignedMet · 5s

Sign in as the test hire

Step 2 · Cloud browser · Read-only

Observed session establishedMet · 11s

Open Google Workspace, Slack, and Jira

Step 3 · Cloud browser · Read-only

Observed 3 of 3 apps loadedMet · 12s

Deactivate and delete the test hire

Cleanup · always runs

Observed user deletedMet · 6s
Passedjust now

Steps met

3/3

Cleanup

Done

Duration

0:41

History

Passednow
Passed1d ago0:39
Passed2d ago0:42
Failed3d ago0:40

Step 3: Jira returned 403

Every app loaded as the new hire — onboarding works end to end, and the test hire is gone.

Prove onboarding actually works

Step 3 expected

3 of 3 apps

loaded as the new hire

Cleanup always runs

How it works

From a sentence to a scheduled proof.
In five steps.

  1. 1

    Describe

    Name the process that must keep working, or pick a suggestion for a system you've connected. AI drafts the steps, what each must observe, and the cleanup.

  2. 2

    Bind credentials

    Choose vault credentials by name. Values resolve server-side, only when the verification runs.

  3. 3

    Preview & edit

    Walk the whole chain before anything runs. Steps are read-only by default, and any step that writes is marked.

  4. 4

    Run

    Each step must observe what it expects before the next one starts. Cleanup always runs, pass or fail.

  5. 5

    Schedule

    Run daily, hourly, or on demand. Every run keeps what each step observed and how long it took.

Library

A library of proofs.
Each with its last result.

Every verification shows the systems it touches, whether it writes, how often it runs, and what happened last time.

Workflow Verification

Verifications

All 6Scheduled 6Failed 1
VerificationSystemsStepsEffectRunsLast result

A new hire can sign in and reach their apps

Okta · browser3 + cleanupWritesDailyPassed

A user can reset their password

Okta · email4 + cleanupWritesDailyPassed

Nightly backup restores to a clean instance

AWS RDS5 + cleanupWritesWeeklyFailed

Checkout API responds within its latency budget

Cloud Run3Read-onlyHourlyPassed

DNS changes reach every zone

Cloudflare2Read-onlyDailyCould not verify

A leaver's sessions are revoked

Okta · Google3 + cleanupWritesDailyPassed

The failed restore took 4h 20m — over its 4-hour window. The fix is already in Remediation.

Start from suggestions for what you connect

Suggestions · Okta

10 ideas

ready to build from the systems you connected

Safety

Safe to run against production.
Because it has to be.

Read-only by default

New steps read. Anything more needs to be declared, and nothing runs until you press Run.

Writes are marked

Any step that changes something is flagged on the step and on the verification before it can run.

Cleanup always runs

Test users, records, and sessions are removed at the end — even when a step fails.

Credentials by name

Verifications reference vault credentials by name. Values never appear in the definition.

Examples

Processes teams prove.
Every day, not once a year.

A new hire can reach every app on day one
A user can reset their password
A nightly backup restores to a clean instance
A service responds within its latency budget
A leaver's sessions are revoked
DNS changes reach every zone

Prove the process works.
Before someone finds out it doesn't.

Start with the process your helpdesk hears about most. Panaptico drafts the steps; you review them and press Run.