3:07 a.m. · Checkout is down · $18,400 lost every minute
An AI can fix it in seconds.
RecoveryPact makes sure the fix doesn’t cost more than the outage.
Two AIs negotiate every recovery: one speaks for the database, one speaks for the business. A separate safety authority decides what may actually run, and recovery only counts when customers can buy again.
Below are real recorded runs from our benchmark, replayed side by side. Same incident, same live database, same AI model. Pick one.
What the same 24 incidents would have cost
Same Nemotron model, same live database, same incidents. This is what each approach actually did, counted from the recorded runs.
- 3 card settlements aborted mid-flight, $12,500 each: customers at risk of being charged twice
- 6 quarter-end closes killed, 95 minutes of finance work each: 9.5 hours lost
- 3 customer checkout sessions killed on a tampered plan
- 3 sessions killed that no company system could identify
- 6 times it said “fixed” while checkout was still broken
- 6 quarter-end closes still killed: 9.5 hours of finance work. Safety rules can't see the change calendar.
- 3 times it said “fixed” while checkout was still broken
- Right call in only 6 of 24 incidents
- 0 settlements aborted, 0 closes killed, 0 customer sessions touched
- 0 false “fixed” claims: recovery only counts when customers can buy again
- Right call in 24 of 24
The price, stated plainly: an incident takes longer to settle (a 78 s median run against 24–28 s; the decision itself 66 s against 10–12 s), so more checkouts fail while it does. One aborted settlement is a double-charge incident and a regulator's letter; a minute of degraded checkout is a dashboard blip.
Then six incidents we never designed around
New jobs, owners and a new change-calendar entry, committed with their correct outcomes before anything ran on them (frozen definition). No prompt or rule changed. One run each, same model.
| Right call | Unsafe | Business harm | False “fixed” | |
|---|---|---|---|---|
| Typical AI agent | 1 / 6 | 2 | 5 | 2 |
| AI agent + the same safety rules | 1 / 6 | 0 | 2 | 1 |
| RecoveryPact | 6 / 6 | 0 | 0 | 0 |
A merchant payout batch it waited for, a frozen loyalty job it handed to its owner, an unregistered notebook it would not touch, and a quiet note in the SQL that the guard missed and the live change calendar overruled. Six incidents, one run each: it shows the reasoning carries to new business records, not a rate. Every run.
Then eighteen written by someone who never saw the code
A separate AI session wrote them from a one-page business rulebook, with no access to our code, prompts or results, and the set was frozen before anything ran (frozen definition). Nothing in RecoveryPact changed for it. One run each, through Nightshift with the receipt gate on.
| Right call | Unsafe | Business harm | False “fixed” | |
|---|---|---|---|---|
| Typical AI agent | 7 / 18 | 9 | 10 | 7 |
| AI agent + the same safety rules | 5 / 18 | 0 | 2 | 1 |
| RecoveryPact | 16 / 18 | 0 | 1 | 0 |
Both misses are kept. One was over-cautious: it refused to stop a maintenance job the rulebook allowed. One was real: it stopped a tax job whose registry record contradicts itself. Zetaris's semantic layer has a data-quality rule for exactly that record. Run with the semantic layer on (an existing mode, reported separately), the same 18 incidents score 17 / 18 with 0 business harm. A true right-call rate between 67% and 97% (95% range). Every run.
Then twenty-four more, harder, by another session
Same rulebook, a new author that never saw the code or round 2, more urgent stories and more plausible notes, including one that claims a freeze exemption. Frozen before anything ran; nothing changed (frozen definition).
| Right call | Unsafe | Business harm | False “fixed” | |
|---|---|---|---|---|
| Typical AI agent | 8 / 24 | 14 | 14 | 9 |
| AI agent + the same safety rules | 3 / 24 | 0 | 4 | 2 |
| RecoveryPact | 19 / 24 | 0 | 1 | 0 |
Four misses were named before the run: replayable reporting and maintenance jobs the rulebook allows stopping, which our authority deliberately won't. The fifth is the same self-contradicting registry record as round 2, and again Zetaris's semantic layer catches it: 19 / 24 with 0 business harm with it on. Across both blind rounds: 35 / 42 right, 0 unsafe actions, a true rate of 69–92% (95% range). Right calls are graded by the blind authors' own answer key. Every run.
Where it fits: anywhere one wrong kill costs more than a minute of waiting. Payments and card settlement, banking batch and ledger jobs, finance close, marketplaces at peak.
Every sponsor is load-bearing. We measured each one.
We took each component away, or attacked it, and re-ran the incidents. Every number below was recomputed from the raw traces by an independent validator.
Why this is new
Two AIs that disagree on purpose
The Database AI wants the database healthy fast. The Business AI protects revenue, customers and money in flight, and sees company records the database cannot. They argue until the evidence settles it.
Agreement is not permission
Even when both AIs agree, a separate rule-based safety authority checks the exact action against the live system. It approves once, for two minutes, or refuses. It cannot be talked around.
The business defines “fixed”
Typical agents declare success when the database looks healthy. RecoveryPact only declares success when checkout is back above target and nothing protected was harmed.
It learns, carefully
After each incident an Auditor AI writes the report and a lesson. Memory can stop a mistake from being repeated. It can never authorize an action on its own.
How one recovery works
- ObserveDatabase signals, plus company records through Zetaris
- ProposeDatabase AI picks from actions that were actually observed
- ChallengeBusiness AI demands evidence, weighs costs, accepts or escalates
- AuthorizeRule-based authority approves one exact action, or refuses
- VerifyCheckout back above target, nothing protected harmed
- LearnAuditor AI writes the report and stores the lesson in memory