What are we working on?
Ask a question, create an output, or build an app that works with your tools and data.
Get Started
Build a store systems health dashboard
Monitor POS uptime, network health, and system status across stores
App
Monitor POS uptime, network health, and system status across stores
Draft an incident response policy
Generate a policy grounded in your security standards and PCI-DSS
Document
Generate a policy grounded in your security standards and PCI-DSS
Build a Q3 architecture review deck
Pull data from Jira and Confluence into slides
Slide Deck
Pull data from Jira and Confluence into slides
Connect to our store systems monitoring and build a dashboard showing POS uptime, self-checkout status, and network health across our top stores.
AI
I'll need access to the Store Systems Monitoring API. Let me request that through a Gatekeeper.
🔒 Gatekeeper: Store Systems Monitoring API
Requesting read-only access to POS status, self-checkout health, and network telemetry. The Gatekeeper holds the credential and logs every query.
Requesting read-only access to POS status, self-checkout health, and network telemetry. The Gatekeeper holds the credential and logs every query.
Approved.
AI
Access granted. Pulling store systems data now.
Executed code
const systems = await env.STORE_SYSTEMS.getHealth({
stores: "top-10",
include: ["pos", "selfCheckout", "network", "bopis"]
});
const degraded = systems.filter(
s => s.posUptime < 99.0 || s.networkScore < 0.95
);
app.render(StoreHealthDashboard, { systems, degraded });
AI
Store Systems Health Dashboard is live. Connected via Gatekeeper -- read-only, every query logged.
I see 3 stores with degraded systems. Want me to auto-create ServiceNow tickets when POS uptime drops below 99%?
I see 3 stores with degraded systems. Want me to auto-create ServiceNow tickets when POS uptime drops below 99%?
+
Draft an updated Incident Response Policy for our PCI-DSS environment. Base it on our current security standards and NIST 800-61.
AI
I'll pull from your company's context library to ground this in Home Depot's standards.
📚 Context Library: Security Standards
Loading Home Depot's current IR policy (v2.3), PCI-DSS v4.0.1 requirements, and NIST SP 800-61r3 framework. These are curated by your security team and read-only to the agent.
Loading Home Depot's current IR policy (v2.3), PCI-DSS v4.0.1 requirements, and NIST SP 800-61r3 framework. These are curated by your security team and read-only to the agent.
AI
Context loaded. I've identified 3 gaps in the current policy:
1. Missing AI/ML system incident classification
2. Containment SLAs not aligned with PCI-DSS v4.0.1
3. Self-checkout and BOPIS incident procedures need updating
I'll address all three in the updated draft.
1. Missing AI/ML system incident classification
2. Containment SLAs not aligned with PCI-DSS v4.0.1
3. Self-checkout and BOPIS incident procedures need updating
I'll address all three in the updated draft.
AI
Incident Response Policy v3.0 draft is ready. Structured per NIST 800-61 with Home Depot-specific procedures and PCI-DSS mappings.
You can edit directly, export to Google Docs, or share for review. The document stays connected to the context library -- if standards change, I can flag sections that need updating.
You can edit directly, export to Google Docs, or share for review. The document stays connected to the context library -- if standards change, I can flag sections that need updating.
+
Build a Q3 architecture review deck summarizing our infrastructure changes, migration status, and upcoming initiatives. Pull data from Jira and Confluence.
AI
I'll need access to your project tracking and wiki.
🔒 Gatekeeper: Jira (read-only)
Requesting access to the INFRA and PLATFORM projects. Read epics, status, and completion data only.
Requesting access to the INFRA and PLATFORM projects. Read epics, status, and completion data only.
🔒 Gatekeeper: Confluence (read-only)
Requesting access to the Architecture Decisions space. Read pages only.
Requesting access to the Architecture Decisions space. Read pages only.
Both approved.
AI
Executed code
const epics = await env.JIRA.getEpics({
projects: ["INFRA", "PLATFORM"],
quarter: "Q3-2026"
});
const adrs = await env.CONFLUENCE.getPages({
space: "architecture-decisions",
since: "2026-07-01"
});
deck.generate(QuarterlyReview, { epics, adrs });
AI
Q3 Architecture Review deck is ready -- 4 slides from live Jira and Confluence data.
You can regenerate anytime to pick up changes, or edit individual slides. Export to Google Slides or PDF when ready to present.
You can regenerate anytime to pick up changes, or edit individual slides. Export to Google Slides or PDF when ready to present.
+
Gadget
Code
Connections
Store Systems Health Dashboard
99.4%
POS Uptime
3
Degraded Stores
2,310
Stores Online
14ms
Avg Response Time
System Alerts
⚠️ Kennesaw, GA (#0101) -- POS Lane 12-16 offline. Hardware failure reported. ServiceNow INC00847291 auto-created.
⚠️ Tempe, AZ (#0455) -- Self-checkout cluster 2 degraded. 3 of 8 terminals unresponsive.
⚠️ Jersey City, NJ (#6104) -- Network latency elevated (89ms avg). ISP link failover active.
System Health by Store
Atlanta, GA (#0110)
100%
Healthy
Austin, TX (#6892)
99%
Healthy
Chicago, IL (#1902)
99%
Healthy
Dallas, TX (#0553)
98%
Healthy
Jersey City, NJ (#6104)
91%
Elevated
Tempe, AZ (#0455)
78%
Degraded
Kennesaw, GA (#0101)
62%
Critical
Page
Source
Connections
Incident Response Policy v3.0
The Home Depot -- Incident Response Policy
1. Purpose
This policy establishes the procedures, roles, and responsibilities for detecting, responding to, containing, and recovering from information security incidents affecting The Home Depot's systems, networks, and data. It applies to all PCI-DSS cardholder data environments (CDEs) and extends to AI/ML systems introduced in FY2026.
2. Scope
- All production systems including POS, ecommerce, and BOPIS platforms
- Cardholder data environments (PCI-DSS v4.0.1 scope)
- Self-checkout kiosk fleet and Pro Xtra digital platform
- AI/ML inference endpoints and training pipelines [NEW]
- Third-party integrations, vendor APIs, and installation services systems
3. Incident Classification
| Severity | Definition | Response SLA | Escalation |
|---|---|---|---|
| Critical | Active breach, data exfiltration, or POS compromise | 15 min | CISO + Legal + Exec |
| High | Confirmed unauthorized access, malware, or CDE exposure | 30 min | Security Lead + IT Ops |
| Medium | Suspicious activity, policy violation, or failed attack | 4 hours | Security Analyst |
| Low | Informational events, vulnerability findings, config drift | 24 hours | Assigned Engineer |
| AI/ML [NEW] | Model poisoning, prompt injection, training data exposure | 1 hour | Security Lead + AI Team |
PCI-DSS v4.0.1 Requirement 12.10.1: The incident response plan must be reviewed annually and updated to address emerging threats including AI-assisted attack vectors.
4. Escalation Matrix
| Role | Contact | Triggered At |
|---|---|---|
| SOC Analyst (on-call) | soc-oncall@homedepot.com | All incidents |
| Security Architecture Lead | R. Martinez | High / Critical |
| IT Operations | it-ops-lead@homedepot.com | Infrastructure impact |
| CISO | ciso@homedepot.com | Critical only |
Slides
Source
Connections
Q3 Architecture Review
Integrations
Connect external services to Home Depot OS. Gatekeepers govern access, scope permissions, and log every action.
Gatekeepers
Google Workspace
Gmail, Docs, Sheets, Slides, Calendar, Drive
Slack
Send messages, read channels, manage workflows
Jira
Projects, epics, issues, sprints, and boards
Confluence
Read and write wiki pages, search spaces
ServiceNow
IT tickets, HR cases, change requests, CMDB, facilities
Workday
Employee data, org charts, payroll, time off, benefits
SAP
Finance, supply chain, procurement, and inventory management
Salesforce
Pro accounts, contractor CRM, project leads, and installation services
GitHub
Access repositories, create PRs, manage issues
Snowflake
Data warehouse, analytics, cross-department reporting
Splunk / SIEM
Security events, alerts, monitoring, and correlation data
Power BI / Tableau
Dashboards, executive reporting, and data visualization
MCP Servers
Remote MCP servers available to all workspaces.
Store Systems Monitoring API
https://storesys.mcp.homedepot.internal/mcp
Auto
POS Transaction System
https://pos.mcp.homedepot.internal/mcp
Needs auth
Pro Xtra Database
https://proxtra.mcp.homedepot.internal/mcp
Needs auth
Employee Directory
https://directory.mcp.homedepot.internal/mcp
Auto
Cloudflare API
https://mcp.cloudflare.com/mcp
Auto
Context
Curated reference documents that ground your agent in Home Depot's knowledge. Published centrally, read-only to all agents and workspaces.
company-strategy-fy2027.md
Home Depot's strategic priorities, One Home Depot strategy, annual objectives, and key results by business unit
brand-voice-guidelines.md
Tone, terminology, customer-facing communication standards, and approved messaging templates
security-standards.md
Security policies, PCI-DSS v4.0.1 requirements, internal controls, and cryptographic standards
architecture-principles.md
Enterprise architecture standards, decision criteria, review templates, and technology radar
vendor-requirements.md
Third-party assessment criteria, scoring methodology, and risk thresholds by vendor tier
infrastructure-inventory.md
System catalog with ownership, SLAs, dependency mappings, and change advisory contacts
pro-customer-playbook.md
Pro Xtra program strategy, contractor engagement models, B2B digital experience, and loyalty tiers
supply-chain-procedures.md
Distribution center operations, rapid deployment centers, last-mile delivery, and BOPIS protocols
hr-policies.md
Leave policies, performance review criteria, hiring procedures, and compensation guidelines
financial-reporting-standards.md
Chart of accounts, reporting cadence, audit requirements, and SOX compliance procedures
Skills
| Name | Description | Group | Source |
|---|---|---|---|
| meeting-prep | Scan calendar, gather context from connected systems, and generate briefing docs | General | Home Depot |
| weekly-report | Compile team activity summaries from Jira, Slack, email, and calendar data | General | Home Depot |
| incident-response | Draft or update incident response policies grounded in Home Depot security standards and NIST/PCI-DSS | Security | Home Depot |
| vendor-assessment | Generate vendor security questionnaires and compute risk scores against internal standards | Security | Home Depot |
| compliance-audit | Gather PCI-DSS compliance evidence, map controls, and generate audit packages | Security | Home Depot |
| architecture-review | Build quarterly architecture review decks from Jira and Confluence data | Architecture | Home Depot |
| change-impact | Analyze change impact across systems, map dependencies, and identify affected teams | Architecture | Home Depot |
| api-catalog | Discover, document, and visualize internal API endpoints with ownership and health | Architecture | Home Depot |
| pro-insights | Analyze Pro Xtra data trends, contractor engagement, loyalty tier movement, and spend patterns | Pro Services | Home Depot |
| competitive-brief | Research competitors and generate comparison briefs with pricing and market positioning | Pro Services | Home Depot |
| store-systems-health | Monitor POS, self-checkout, and network health across stores with auto-ticketing | Operations | Home Depot |
| supplier-scorecard | Generate supplier performance reports from procurement data, delivery metrics, and quality scores | Operations | Home Depot |
| cost-optimization | Cloud and infrastructure spend analysis, trend visualization, and optimization recommendations | Operations | Home Depot |
| budget-analysis | Pull spend data from SAP, compare to budget, flag variances, and forecast quarter-end | Finance | Home Depot |
| job-posting-draft | Draft job descriptions from role requirements, team context, and compensation guidelines | HR | Home Depot |
| onboarding-guide | Generate new hire documentation from wikis, org charts, and system access procedures | HR | Home Depot |