FDE SCOPEFORWARD-DEPLOYED OPERATING SYSTEM · MIT

Checklists forget.
Gates don’t.

FDE Scope turns the complete Forward-Deployed-Engineer SOP (4 zones, 18 phases, 10 executable gates) into a state machine that refuses to advance until the proof is in. Software desks and factory floors run the same engine.

SCENARIO PROFILE
Open the console Read the full 18-phase SOP → NO LLM KEY · NO DOCKER · PYTHON ≥ 3.11
APre-engagement
Qualification
Site survey · Gembasite_survey
Stakeholder map
Success criteriasuccess_criteria
BBuild
Connectair_gap
Corpus forge
Prototype · real data
Validate
Deploy · FAT/SATfat_satfunctional_safetyconformityadvance → REFUSED
hazard analysis missing
Eval
COperationalization
SLO / on-callsloshift_handover
Runbook
Monitoring · drift
Change mgmtworks_council
Flywheel → product
DHandoff
Ops handoff
Knowledge transfer
Disengage · signedhandoff_signoff

Entries the gates caught

Real incidents, synced from the public postmortem database kuba-database. On a checklist they slip through; mapped onto the board, each one is a refusal the SOP now records.

2015·05·28FDEINC-20150528-CTRIP · SEV-1

Production code deleted by hand on a busy evening; recovery ran all night on improvised steps.

FDE · PHASE 12 · RUNBOOK: rollback and safe failure modes defined before launch.CASE FILE ↗ Ctrip
2022·12·18FDEINC-20221218-ALIYUN-HK · SEV-1

A chilled-water air lock plus group-control deadlock took a whole availability zone down for over 10 hours.

FDE · GATE fat_sat: cooling and control interlocks pass on-site acceptance before launch.CASE FILE ↗ Alibaba Cloud
2025·09·18FDEINC-20250918-CLERK-DATABASE · SEV-1

A vendor auto-upgrade stormed connection pools for 4 days; monitoring sampling hid the diagnosis.

FDE · GATE slo: error budget + alert route; evidence that sampling cannot mask.CASE FILE ↗ Clerk
2025·06·26SAINC-20250626-CLERK-CLOUDRUN · SEV-1

Single-region auth trusted the vendor's redundancy promise; one regional failure logged out every customer for 45 minutes.

SA · PHASE 07 · REAL DATA: vendor promises are not verified facts; prove it on production-shaped reality.CASE FILE ↗ Clerk
2023·09·12SAINC-20230912-UNITY-RUNTIME · SEV-2

An install-fee decision shipped without stakeholder alignment; the ecosystem revolted, the CEO left, the policy died.

SA · GATE success_criteria: written criteria + ≥ 2 sponsors + aligned success metrics.CASE FILE ↗ Unity
2021·10·04SAINC-20211004-FACEBOOK · SEV-1

A maintenance command withdrew every BGP route; engineers were locked out of the very building holding the recovery tools.

SA · PHASE 12 · RUNBOOK: an out-of-band recovery path that was rehearsed, not assumed.CASE FILE ↗ Meta (Facebook)

Ten gates, executable

Not checklist rows. Gate.check(ctx) returns passed, blockers, warnings, and advance refuses until clean. Seven exist only on the factory profile.

INTERLOCK PANELKEYS 1–0 JUMP TO GATE
1site_surveySite location required; empty assets or multi-shift without network → warning.
2success_criteriaWritten criteria + ≥ 2 sponsors; sponsor without metric → warning.
3functional_safetyAchieved PL/SIL ≥ required; ISO 10218 assessed; hazard analysis mandatory.
4fat_satFAT and SAT both passed, each signed off.
5conformityEU-AI-Act high-risk ⇒ CE marking + technical construction file.
6works_councilCo-determination signed off where representatives exist (BetrVG §87).
7air_gapOffline deployment posture settled at connect time; never phone-home.
8shift_handoverMulti-shift sites need a digital handover log + per-shift runbook.
9sloSLO/SLA + error budget + alert route; missing route → warning.
0handoff_signoffRunbook + eval report + SLO + training material, customer accepted; missing boundary (G7③) / termination (G7④) → warning.
CHECKLIST

A record. Freshest the day it is filled in, then it rots as reality drifts: the box never learns the world changed.

GATE

A predicate. Re-run on every advance; a stale pass never counts. Even force evaluates and records, so the override itself stays on the audit log.

One engine, two work orders

The same state machine runs a customer-service desk and an embodied-robotics line; the profile swaps connectors, KPIs and which gates apply.

Ticket

PROFILE
Phases
15 of 18; the 3 industrial-only phases stand down.
Connectors
CSV · Zammad · Salesforce · MySQL
Gates
success_criteria · slo · handoff_signoff
Proof
resolution rate · CSAT · deflection · bad-case miner

Manufacturing

PROFILE
Phases
18 of 18: site survey, FAT/SAT deploy, works-council change management.
Connectors
OPC UA · MQTT-Sparkplug · ROS2 · MES · Historian
Gates
all 10
Proof
OEE · MTBF/MTTR · FPY/DPMO · grasp success · collision rate

One deploy, a whole crew

Every name on the roster is a real AgentScope 2.0 Agent — wired model, role toolkit, permission rules injected via AgentState. The FDE names the crew; unknown roles degrade to corpus-only, and tools without a data source are reported unbound — never faked.

Name the crewname:role[:model], repeatablefde-scope deploy --tenant acme --agent 数据员:数据分析 --agent 日志员:日志分析:qwen3-14b --connector-source csv=sample.csv
Pre-flightreview the plan first: /console#deploy, same tab as the macOS app, same build_deploy_planfde-scope web
ROSTERreal Agent per spec SUBAGENT TEMPLATEblueprint → create_app AGENTCREATE · TEAM SAYleader routes, members report SERVE--serve = real runtime

The board, already worked

Seed the console with six realistic engagements; every gate record below is produced by the engine itself, so the panels never lie.

CustomerProfilePhaseStoryState
Chayu Wanxiang · tea chainticket15/15Full handoff package, customer accepted.SIGNED
Atlas United Motors · automakermfg11/189/9 industrial gates passed: 3 shifts, works council, PL d / SIL 2, HAZOP.RUNBOOK
Nanwan Motors · automakermfg9/18FAT/SAT + functional safety + conformity genuinely blocked → advance refused.BLOCKED
Northgate Motors · automakerticket13/15Productization flywheel running.FLYWHEEL
Xunjie Mobility · ride-hailingticket8/15Real-data prototyping, SLO defined.PROTOTYPE
Xinglan Tech · outbound SaaSticket3/15Single-sponsor blocker: the Sponsor Collapse anti-pattern, caught.BLOCKED
DEMO DATA · seeded by examples/seed_mock_engagements.py; every gate record engine-generated.

Shipped, not mocked

Live capture of the double-click macOS app — universal2, codesigned DMG, single-instance guard, SIGTERM-safe exit. The same engine the CLI drives, behind a desktop icon that needs no Python.

ENGAGEMENT CONSOLEcross-project matrix · gates · recent skills
FDE Scope macOS app — engagement console with cross-project matrix
FUNCTIONAL OVERVIEW18 phases · 4 zones · 10 gates · 10 connectors
FDE Scope macOS app — 18-phase SOP functional overview
LIVE CAPTURE · FDE-Scope-0.1.0-universal2.app · 1440×952 @2x · macOS window · $ ./appbuild/build_release.sh

Zero-config crib

Core plus engagement layers carry no AgentScope dependency: no LLM key, no Docker. Green in five minutes.

Installcore + dev + webpip install -e ".[dev]"
Seed demosix realistic engagementspython examples/seed_mock_engagements.py
Open consolehttp://127.0.0.1:8080fde-scope web
OntologyTBox/ABox/SKOS browse + validate (list/validate/check); JSON-LD 1.1 export; same view at /console#ontologyfde-scope ontology export fde-core
SKILL CAPTUREdraft REVIEWreview PUBLISHpublished EXPORTAgentScope · QwenPaw

The ship list

Three ledgers, all verifiable today — not roadmap. What the product does, how it is layered, and the six engineering invariants pinned by contract tests.

Product

Feature inventory

  • 18-phase SOP · 4 zones · 10 executable gates
  • 2 profiles — ticket & manufacturing
  • 10 data connectors
  • Corpus forge — synthesize to fill gaps, not to pad
  • Eval + industrial KPI
  • Skills library — draft→review→publish→export
  • Ontology semantic layer — TBox + ABox + JSON-LD 1.1
  • Deploy three-pillar on real AgentScope 2.0
  • Handoff + flywheel, optional MiMo LLM

Architecture

Module inventory

  • Core layers — data / SOP / profiles / web
  • deploy/ — 5 modules lazy-import agentscope
  • connectors/documents.py
  • Cross-cutting — llm · config · ontology · templates · paths
  • 4 surfaces
  • Evidence model — docs/architecture-model/

Best practices

Six invariants, contract-pinned

  • Live gate re-evaluation
  • Server-generated IDs
  • Credentials env-only
  • Atomic writes
  • Rule grants only
  • Measured AgentScope window

VERIFIED BY: CI-green suite · contract pins tests/test_architecture_guard.py · evidence model docs/architecture-model/architecture-map.md

Pricing

The engine is open source; the seats around it are commercial. Start free on Community, subscribe per FDE seat on Pro, or bring us in for an Enterprise deployment.

CECommunity

Open source · MIT

¥0 / free forever

  • 18-phase SOP · 4 zones · 10 executable gates
  • 10 data connectors
  • MIT license
  • Community support

Read the README

ENTEnterprise

Quoted per deployment

Custom scoped to your deployment

  • Everything in Pro
  • Audit + evidence chain
  • Custom connector adaptation
  • SLA

Talk to us

Talk to an engineer

No forms, no tracking, no backend on this page. Email us directly and an engineer replies — or open a public issue and the whole community sees the answer.

Emailsales / trial / enterprise deploymentcontact@fde-scope.dev
Write to us → GitHub Issues REPLIES FROM ENGINEERS · NOT A TICKET BOT

Show up with
the whole SOP.

Meoo By Meoo 秒悟