Software infrastructure lab

The map and runtime for autonomous software delivery.

A deterministic map of every repository, and a runtime that takes an issue to a merged, deployed change.

Cartographer — the map Healer — the evidence Pipeline — spec a PR

code graph

0 symbols · 0 edges
auth::gatewayevent::busarchivesstorage::engine

map

deterministic

index

0 LLM tokens

runtime

AWS-native

01

Wrong memory is worse than none

Undetectable is null, not a guess. Every narrated claim carries citations.

02

No capability without its consumer

If nothing calls it, it is not finished. Nothing merges to be given a use later.

03

A gate is proven by failing

If you cannot show the red, you do not have the gate. Proprietary throughout — no open-core boundary to maintain.

Works with the agents your team already uses

GitHubGitHubClaudeClaudeGoogle GeminiGeminiCursorCursorGitHub CopilotCopilotWindsurfWindsurfZed IndustriesZedModel Context ProtocolMCPGitHubGitHubClaudeClaudeGoogle GeminiGeminiCursorCursorGitHub CopilotCopilotWindsurfWindsurfZed IndustriesZedModel Context ProtocolMCP

Products

Three products. One workflow.

Cartographer charts the ground so agents know where they are. Healer turns real incidents into cited root causes. Pipeline takes an approved spec to a PR that verified itself. One artifact — the spec — and everything else produces or consumes it.

The mapPrivate

Cartographer

Charts a repo before anyone sails it.

Scans a repository into a symbolic, machine-queryable context artifact — so agents and humans never re-discover a repo with ls, grep, and cat.

  • Symbolic context artifact

    Nine closed namespaces, closed enums, three-valued semantics. One vocabulary everywhere.

  • Code-symbol index — zero LLM tokens

    tree-sitter over ~25 languages into SQLite. Impact, refs, routes, env, tests — pure SQL, milliseconds.

  • Shared graph, versioned like git

    The graph rides on git — no server to keep running for the team to share the same fresh structure.

Mission

Any agent productive in any repo within one file read.

cartographer

cartographer scan .

charted: cartographer -> .cartographer/repo-context.json

cartographer impact buildRuntimePreview .

refs agents/runtime/src/index.ts 10,129,144

radio de impacto resuelto — cero tokens de modelo

  • Deterministic — same tree, byte-identical output.
  • Never invents facts — undetectable means null.
  • No secrets — env names only.
The evidencePrivate

Healer

Real incidents into cited root causes.

Ingests incidents from Sentry and GitHub Actions, normalizes them to one type, and collapses them by signature: N events become M candidate causes before a model is ever called.

  • The funnel, before the model

    Ingest, normalize and cluster are deterministic and model-free. 500 events collapsing into 12 causes are 12 calls, not 500.

  • Zero vendor names outside the adapter

    The core does not know which tracker brought the incident. CI gate, proven red before it was trusted.

  • Nothing self-accepts

    A hypothesis reaches 'accepted' only by human decision. The log is append-only and the first verdict wins.

Mission

Nobody should have to chase a traceback by hand to learn what broke and why.

healer

healer proponer

288 incidentes -> 199 clusters (ratio 1,45:1)

expediente: 51 citas reales, cero tokens

hipótesis propuesta — espera revisión humana

  • Deterministic clustering — same input, same output order.
  • Every cause arrives with its citations; undetectable is null.
  • Acceptance rate stays null until a real person decides.
The closePrivate

Pipeline

Approved spec, free executor, verified PR.

Takes a spec a human approved and carries it to a PR whose own verify: ran and passed. The executor is external and there is exactly one — we do not build an agent.

  • One single artifact

    The spec. Cartographer and healer produce it; the executor consumes it. No interface per pair.

  • Real per-run isolation

    One ephemeral Fargate task per run, with a hard spend cap and state that persists outside the stack.

  • Constrain the what, free the how

    The contract is the outcome, not the procedure. The spec says what must be true and how it is verified.

Mission

A change reaches main from an approved spec, verified by its own commands.

pipeline

pipeline run spec-142

fargate: task efímero — aislamiento por corrida

verify: pnpm test && pnpm lint

PR abierto — verify en verde

  • No change counts without its verify: green.
  • No capability merges without its consumer.
  • State persists outside the stack before the stack exists.

How it works

Issue in. Merged, deployed change out.

Cartographer charts the ground, healer says what broke and why with citations, and pipeline carries the approved spec to a reviewed change.

01

Incident

Something breaks in production. Healer ingests it and collapses it with everything sharing its signature.

02

Map

Cartographer charts the repo into a deterministic context graph — zero LLM tokens.

03

Spec

A cited cause plus repo context compile into a spec. Nothing moves past here without a person accepting it.

04

PR

The executor takes the spec in an isolated task and opens a PR whose own verify: ran and passed.

About

Precise systems, not demos.

Legios is an independent, founder-led organization. Everything is proprietary — there is no open-core boundary to maintain.

Ground truth

Facts before guesses.

Deterministic maps and zero-LLM indexes give agents ground truth about a repository — byte-identical on every run.

25+ languages0 LLM tokens1 file read

State outlives the run

A dead task loses no data.

Every run is one ephemeral, isolated task with a hard spend cap. What it produces is written outside the stack before the stack exists — a crashed run leaves a record, not a gap.

One artifact

The spec, and nothing else.

Cartographer and healer produce it; the executor consumes it. No interface per pair, and everything proprietary.

Operator-grade

Explicit contracts, inspectable behavior.

Small composable tools with typed boundaries — you can see exactly what ran and why.

$ healer proponer

step plan  ok  1.2s

step code  ok  8.4s

step tests ok  passed

Owners

Founder-led by systems builders.

Legios is led by Sol Soletti and Valentin Torassa Colombero, whose public work points at the same center of gravity as the organization: developer tools, backend systems, infrastructure, and automation.

Sol Soletti GitHub avatar

Co-founder

Sol Soletti

Rosario, Argentina

Shapes Legios around practical developer tooling and clear software systems. Public work across TypeScript and Go.

Focus: Developer tools, backend systems, Go, TypeScript, product.

Co-founderTypeScriptGoDev toolingProduct
Valentin Torassa Colombero GitHub avatar

Co-founder

Valentin Torassa Colombero

Argentina

Public work spanning Python, TypeScript, Go, Linux, and self-hosted tooling. Strong bias toward systems and automation.

Focus: Infrastructure, automation, Linux, containers, security tooling.

Co-founderInfrastructureAutomationLinuxAWS

Technical stack

Confirmed technologies across the repositories.

Observed in the legiosai repositories — manifests, workflows, the Terraform under pipeline/infra, and project documentation.

TypeScriptNode.js 22Next.jsReacttree-sitternode:sqliteZodAJV · JSON SchemaMCPExpressBiomeVitestDockerGitHub Actions
Amazon Web ServicesAmazon Web Services

Built on AWS

Provisioned as code with Terraform

TerraformECS FargateAmazon ECRAWS Secrets ManagerAmazon S3Amazon CloudFrontAWS BudgetsAmazon Bedrock