Glossary

CloudThinker Glossary

Definitions for the concepts behind Frontier Investigation Agents and AI-powered cloud operations.

AIOps

AIOps (Artificial Intelligence for IT Operations) refers to the use of machine learning and data analytics to automate and enhance IT operations. Traditional AIOps platforms focus primarily on log analysis, metric correlation, and anomaly detection — surfacing insights for human operators to act on.

CloudThinker extends the AIOps model with autonomous AI agents that don't just detect and alert, but investigate root cause, execute remediation runbooks, and resolve incidents end-to-end.

CloudThinker goes past alert correlation. It builds Frontier Investigation Agents that find the why behind every production issue and propose the fix. Your engineers approve.

Read the full guide → What is AIOps?

Vibe Coding

Vibe coding, coined by Andrej Karpathy in February 2025, is an AI-assisted development style where the human describes intent in natural language and an LLM generates the code. The developer guides, tests, and accepts diffs rather than authoring them — trading line-level control for exponential iteration speed.

Collins named it the 2025 Word of the Year; Merriam-Webster added it as slang the same year. Independent 2025–2026 assessments (SUSVIBES, Tenzai) found high security-vulnerability rates in functionally-correct vibe-coded code, which is why production-safe teams pair vibe coding with agentic code review and approval-gated production access.

Vibe coding is the developer experience. Shipping it safely still takes code review, approval gates, and agents that investigate production issues.

Read the full guide → What is Vibe Coding?

Day-2 Operations

Day-2 operations is everything after go-live: scaling, patching, upgrading, securing, observing, and cost-optimising a production system across its entire lifecycle. Originally a Kubernetes term, it has become the shared label for the unbounded post-deployment phase that traditional DevOps under-served — and that agentic operators are now built to own.

  • Day-0Design and architecture — before any infrastructure exists.
  • Day-1Install and first deploy — the system is in production but has not yet aged.
  • Day-2Run the system — patches, upgrades, drift, capacity, cost, incidents — for as long as it lives.

Most outages and most cloud waste live in Day-2. Agentic operators own the four canonical Day-2 domains (observability, security, networking, cost) across the fleet under team-encoded policy.

Read the full guide → What are Day-2 Operations?

Graduated Autonomy

Graduated Autonomy is CloudThinker's four-level framework for incrementally expanding what AI agents are allowed to do independently.

  • Level 1 — NotifyAgents surface findings and recommendations for human review, taking no automated actions.
  • Level 2 — SuggestAgents draft remediation plans and propose specific actions for engineer approval.
  • Level 3 — Act with ApprovalAgents execute actions after an authorized team member approves the proposed change.
  • Level 4 — AutonomousAgents operate fully independently within defined guardrails, with a complete audit trail of every decision and outcome.

Teams configure autonomy levels per agent, per environment, and per team role using RBAC-gated governance.

Skills Framework

The CloudThinker Skills Framework is the modular system that defines what AI agents can do and how they do it. A Skill is an instruction set given to an AI agent once — encoding your team's processes, output formats, trigger conditions, and guardrails.

Skills are organized in three categories:

  • Public SkillsBuilt-in universal capabilities like document processing.
  • Connection SkillsPurpose-built integrations for AWS, GitHub, Datadog, Jira, Slack, and 50+ other tools.
  • Custom Workspace SkillsTeam-specific skills encoding incident runbooks, code review standards, reporting formats, and any other repeatable process.

The /create-skill command lets teams build new skills in natural language.

Sandbox Isolation

CloudThinker's Sandbox Isolation is a three-tier security model that ensures every AI agent action is safe before execution.

  • Tier 1 — Organization sandboxIsolates agent workloads at the account level.
  • Tier 2 — Workspace sandboxScopes actions to specific team environments.
  • Tier 3 — Ephemeral sandboxCreates short-lived, isolated microVMs for executing potentially destructive operations like infrastructure changes or script execution.

Every ephemeral sandbox is destroyed after use and produces a complete audit trail. This model allows teams to run fully autonomous operations without risk of unintended side effects.

Dynamic Topology

Dynamic Topology is CloudThinker's real-time infrastructure dependency mapping capability. Using the /create-topo command, CloudThinker agents automatically discover and map the relationships between services, databases, APIs, queues, and infrastructure components across your multi-cloud environment.

The resulting topology graph is continuously updated as your architecture changes, and is used by the Incident Response Agent to understand blast radius, identify cascading failure paths, and prioritize remediation steps based on service criticality.

MemGraph

MemGraph is CloudThinker's agent memory architecture that combines short-term working memory, long-term episodic memory, semantic retrieval, and file memory into a unified knowledge graph.

When an AI agent resolves an incident, the resolution — including root cause, steps taken, and outcome — is stored in MemGraph. Future agents can retrieve this context to resolve similar incidents faster, avoid previously failed approaches, and surface recurring patterns for permanent engineering fixes.

MemGraph makes CloudThinker's agents continuously smarter over time.

Runbook

In CloudThinker, a Runbook is a structured, executable operations playbook that defines the steps an AI agent takes to diagnose and resolve a specific class of infrastructure issue.

CloudThinker ships with 325+ pre-built runbooks covering common failure modes across AWS, Kubernetes, databases, networking, and application services.

Runbooks can be triggered manually, on a schedule, or automatically by the Incident Response Agent when a matching alert pattern is detected. Custom runbooks can be created with the /create-task command using natural language descriptions.

Frontier Investigation Agents

Engineers get their time back. For creative work.

Agents investigate every issue across application, cloud, security, database and Kubernetes, find the why and propose the fix. Your engineers approve, under your policies and audit trail.