Building an AI SRE That Doesn't Just Detect Incidents – It Fixes Them

What is AegisSRE?

It is an enterpise-grade, governed autonomous systems that combines observability, AI reasoning, and governed automation to resolve production incidents with minimal human intervention.

Imagine it’s 2 AM & our production service suddenly goes down. Traditional observability tools help engineers identify what went wrong through console logs, metrics and traces, but engineers still spend valuable time investigating the root cause, selecting the right runbook, executing remediation, and verifying recovery.

AegisSRE goes beyond observability. It detects production issues, raises incidents, diagnoses the root cause, selects the appropriate remediation, requests human approval for risky operations, executes the runbook, and independently verifies that the system has recovered.

Architecture

AegisSRE follows a multi-agent orchestration (Agent-to-Agent) architecture, where each specialized agent performs a single responsibility within the incident lifecycle. Each agent has a well-defined role:

• Coordinator: Orchaestrates the complete incident workflow.
• Classifier: Categorizes the incident and identifies the affected service.
• Diagnosis Agent: Analyzes traces, logs and telemetry to determine the root cause.
• Planning Agent: Selects the most appropriate remediation runbook.
• Approval Agent: Enforces governance by requiring human approval for medium and high-risk actions.
• Execution Agent: Executes the selected runbook in a controlled environment.
• Verification Agent: Confirms that the remediation successfully resolved the incident before closing it.

Use of Signoz

SigNoz serves as the observability backbone of AegisSRE. Every workflow stage is instrumented using OpenTelemetry, allowing SigNoz to capture and visualize:

• Distributed traces
• Workflow spans
• Application logs
• Execution timings
• Runbook execution details

How Aegis Uses SigNoz?

Aegis uses Signoz as the observability backbone of the autonomous incident response workflow.

Every workflow stage is instrumented using OpenTelemetry, allowing SigNoz to collect and visualize the complete lifecycle of an incident.

During an incident, Signoz provides:

• Distrubuted traces to allow end-to-end execution of the workflow.
• OpenTelemetry Spans for every AI agent, including coordinator, diagnosis, planning, approval, execution, and verification.
• Application logs generated during diagnosis, remediation, and verification.