Commitment-portfolio modeling (bedrock / foundation / elastic / experimental layers). Computes measured baseline from attribution events, recommends per-layer commit purchases with estimated annual savings.

pleme-io GitHub Action — force a FluxCD reconcile + wait for Ready

Per-team / per-product / per-tenant cost rendering from attribution events. Standardized recurring views (multi-period tables, period-over-period deltas with sparklines, top-N) for team-level showback.

Universal cost-allocation tag taxonomy validator and enforcer for cloud resources and Kubernetes labels. First tool of the pleme-io FinOps forge distribution; generic by construction, organization-specific overlays via extends.

pleme-io GitHub Action — emit BLAKE3 source/build/artifact attestation hashes for a release

Shared utilities for the pleme-io *-forge tool family — human-duration parser and common types consumed by every forge tool. MIT-licensed library crate.

pleme-io GitHub Action — pull a helmworks chart, render with operator values, fail on contract violations (pre-merge gate)

Constructive Substrate Engineering audit linter — measures CSE adherence across the pleme-io fleet

Multi-signal rightsizing recommendations (CPU + memory at p99 with burst-headroom multiplier ≤ target utilization on proposed shape). Preserves master regions and high-criticality tiers; emits per-resource recommendations with estimated monthly savings.

Kotoba (言葉) — MCP server framework for pleme-io applications. Eliminates boilerplate when building MCP servers with rmcp; provides prelude re-exports, json_ok / json_err / json_result response helpers, and consistent JSON formatting.

Cost-anomaly detection over attribution-forge event streams. Rolling-baseline percent-change and stddev thresholds per dimension; CI-friendly exit codes via configurable severity.

Cargo for shell — Nix-native, git-as-registry, Rust + Tatara-Lisp shell-package manager. Resolves `(defshellpkg …)` manifests from git, emits typed `(deflockedpkg …)` lockfiles, materializes package trees for `frost-lisp::defload` to consume. Pairs with frost + frostmourne.

pleme-io GitHub Action — assert pause-contract invariants on a paused-first ARC runner pool

Always-on tatara-lisp reconciler runtime embeddable in pleme-io apps. SeaORM/SQLite persistence; gRPC + GraphQL + OpenAPI-derived REST; MCP tool catalog.

Declarative lifecycle policies (TTL, expiry, storage-class transitions) for cloud + Kubernetes resources. Evaluates a policy bundle against a resource inventory and emits a deterministic action plan with explicit preservation guards.

pleme-io GitHub Action — combine N per-arch OCI manifests into a single multi-arch image tag

Kubernetes operator that reconciles tatara.pleme.io/Program CRDs to running WASM/WASI pods

Canonical WASI HTTP service deployable to rio via substrate's wasi-service-flux-flake

Universal cost-attribution data plane — ingests cloud billing exports (AWS CUR, GCP Billing Export, Azure Cost Management) into a canonical JSON-Lines event schema via CSV + column-mapping. Cost-weighted coverage verification.

Discovery hub for pleme-io's reusable GitHub Actions surface — README catalog, version compat matrix, contributing guide, attestation flow + reusable test/release workflows