Requests
128,400
Marmon Holdings, Inc. OS
What are we working on?
Build governed apps, documents, and workflows with your organization's context.
Starter workspaces
Federated Cyber Risk Command CenterAlign security maturity with business risk across autonomous operating companies while preserving local ownership.
Live App
Federated Security Operating ModelDraft a decision brief that combines shared security guardrails with company-owned implementation and risk decisions.
Document
Cyber & AI Governance ReviewCompare security automation candidates through common evaluation, data-boundary, cost, and human-approval controls.
Slide Deck
Illustrative prototype. Uses public company context and simulated data; no connection to Marmon Holdings, Inc. systems.Marmon Holdings publicly identifies as a Berkshire Hathaway company; this prototype is independent and illustrative.Open the Marmon/Keystone OS demo
Build a permission-scoped cyber risk command center for Marmon's autonomous companies. Use aggregate evidence, material exceptions, and accountable local owners. Include a synthetic Marmon/Keystone manufacturing scenario without pooling raw company data.
AI
I start with no access. I'll request only the evidence needed for this workspace.
Gatekeeper: Federated Security Evidence
Read-only access to simulated control attestations, material-event metadata, risk exceptions, and ownership records. Raw company logs, credentials, and operational data remain isolated.
Read-only access to simulated control attestations, material-event metadata, risk exceptions, and ownership records. Raw company logs, credentials, and operational data remain isolated.
Approve read-only access.
AI
Executed deterministic query
const summaries = await env.FEDERATED_RISK.listSummaries({
scope: "industry-group", evidence: "aggregate-only"
});
const exceptions = await env.SECURITY_EXCEPTIONS.list({
status: ["review", "monitor"], includeOwner: true
});
app.render(FederatedRiskView, { summaries, exceptions });
The portfolio view is ready. It centralizes evidence and decisions while each operating company retains ownership of systems, remediation, and risk acceptance.Create a federated security operating model for Marmon. Address identity, manufacturing and operational resilience, third-party access, incident escalation, and evidence exchange while preserving local accountability.
AI
I'll use curated company context and request only the resources needed for this workspace.
Gatekeeper: Standards + Decision Records
Read-only access to simulated standards, maturity submissions, risk exceptions, and decision records. Operating-company production data and credentials are not exposed.
Read-only access to simulated standards, maturity submissions, risk exceptions, and decision records. Operating-company production data and credentials are not exposed.
AI
The brief defines shared outcomes and review paths without replacing local implementation, operational judgment, or risk ownership.
Create an executive governance review for cross-company security evidence summarization, manufacturing threat triage, and third-party access review. Keep data company-scoped and include quality, privacy, cost, and human decision gates.
AI
I'll use curated company context and request only the resources needed for this workspace.
Gatekeeper: Model Registry + AI Gateway
Read-only access to simulated use-case metadata, evaluation summaries, control attestations, and aggregate spend. Prompts, credentials, and raw operating-company data are not exposed.
Read-only access to simulated use-case metadata, evaluation summaries, control attestations, and aggregate spend. Prompts, credentials, and raw operating-company data are not exposed.
AI
Executed deterministic query
const candidates = await env.MODEL_REGISTRY.list({
domain: "security", include: ["owner", "evals", "risk-tier"]
});
const controls = await env.AI_GATEWAY.getPolicySummary({
include: ["dlp", "budgets", "rate-limits"]
});
deck.render(CyberAIReview, { candidates, controls });
The review is ready. Each candidate remains company-scoped, evaluation-gated, gateway-routed, and accountable to a human owner.Federated Cyber Risk Command Center
Illustrative data. Every score, exception, status, and event is synthetic. Public organizational facts do not describe Marmon's security posture, systems, incidents, or performance.
11
Public industry groups
120+
Public autonomous companies
4
Synthetic exceptions
2
Illustrative approvals
Attention queue
Review: A synthetic manufacturing access exception requires a local business owner and enterprise risk reviewer.
Monitor: An illustrative third-party connection is nearing its proposed review date; evidence remains bound to the source company.
Synthetic evidence readiness by sample scope
Marmon/Keystone sample
86%
Monitor
Rail group sample
93%
Complete
Medical group sample
78%
Monitor
Foodservice Technologies sample
69%
Review
Policy follows the data. Sharing this app re-checks the viewer against every observed resource.
Illustrative policy trace
| Step | Enforced policy | Status |
|---|---|---|
| Request resource | Starts with no access; request is limited to Federated Security Evidence | Approved read-only |
| Run deterministic query | Typed capability; credential remains isolated | Logged |
| Render app | Observed resources stay attached to the output | Bound |
| Share | Viewer permissions are checked at open time | Human controlled |
Gatekeeper: Federated Security Evidence
Read-only access to simulated control attestations, material-event metadata, risk exceptions, and ownership records. Raw company logs, credentials, and operational data remain isolated.
Read-only access to simulated control attestations, material-event metadata, risk exceptions, and ownership records. Raw company logs, credentials, and operational data remain isolated.
Resource boundaries
No access by defaultThe workspace requests only the capability needed for this job.
Credential isolationGenerated code receives a typed binding, never an API key.
Human-owned actionsExternal, destructive, or consequential actions remain approval-gated.
Federated Security Operating Model
Illustrative planning artifact. Based on Marmon's public supported-autonomy operating model and synthetic scenarios, not internal architecture, controls, priorities, or plans.
Marmon - Federated Security Operating Model
Purpose
Align security maturity to business risk across a diverse industrial portfolio through common outcomes, permission-scoped evidence, explicit exceptions, and accountable local execution.
Jobs to be done
| Priority | Journey moment | Required review |
|---|---|---|
| Identity and privileged-access baseline | Enterprise guardrail, local implementation | Company security + risk review |
| Manufacturing and operational resilience | Company-owned protection and recovery | Operations + security review |
| Third-party access and incident evidence | Exception-based portfolio reporting | Risk + legal review |
Operating principles
- Start with a measurable job to be done, not a new tool.
- Use curated company context before model knowledge.
- The human owner remains accountable for every output.
- An agent never receives more permission than the person using it.
Gatekeepers hold credentials, scope every resource, and preserve the observation trail when work is shared.
Delivery sequence
Map: Identify accountable local owners, critical services, data boundaries, and relevant obligations.
Pilot: Model an opt-in Marmon/Keystone scenario with synthetic evidence, isolated access, and explicit success measures.
Scale: Publish reusable controls, exception paths, and recovery measures without centralizing raw company data.
Control alignment
Local autonomy, least privilege, credential isolation, evidence provenance, legal review, operational safety, recovery testing, and human-owned risk decisions are mandatory design inputs.
Public sources only. These links informed the illustrative workspace; no company systems or private data are connected.
Workspace sources
Draft a decision brief that combines shared security guardrails with company-owned implementation and risk decisions.
Gatekeeper: Standards + Decision Records
Read-only access to simulated standards, maturity submissions, risk exceptions, and decision records. Operating-company production data and credentials are not exposed.
Read-only access to simulated standards, maturity submissions, risk exceptions, and decision records. Operating-company production data and credentials are not exposed.
Resource boundaries
No access by defaultThe workspace requests only the capability needed for this job.
Credential isolationGenerated code receives a typed binding, never an API key.
Human-owned actionsExternal, destructive, or consequential actions remain approval-gated.
Cyber & AI Governance Review
Public sources only. These links informed the illustrative workspace; no company systems or private data are connected.
Workspace sources
Compare security automation candidates through common evaluation, data-boundary, cost, and human-approval controls.
Gatekeeper: Model Registry + AI Gateway
Read-only access to simulated use-case metadata, evaluation summaries, control attestations, and aggregate spend. Prompts, credentials, and raw operating-company data are not exposed.
Read-only access to simulated use-case metadata, evaluation summaries, control attestations, and aggregate spend. Prompts, credentials, and raw operating-company data are not exposed.
Resource boundaries
No access by defaultThe workspace requests only the capability needed for this job.
Credential isolationGenerated code receives a typed binding, never an API key.
Human-owned actionsExternal, destructive, or consequential actions remain approval-gated.
Integrations
Organization-wide connections for Marmon Holdings, Inc. OS. Gatekeepers hold credentials, scope resources, and log each action.
Prototype catalog. Connections and authorization states are simulated.
Gatekeepers
Productivity suite
Mail, calendar, documents, spreadsheets, and files
Collaboration
Chat, channels, meetings, and workflow notifications
Project tracking
Programs, epics, issues, sprints, and delivery status
Knowledge base
Policies, procedures, standards, and team documentation
Service management
IT tickets, incidents, change requests, and asset data
HRIS
Employee directory, organization, benefits, and lifecycle workflows
ERP & procurement
Finance, planning, purchasing, supply chain, and billing
CRM
Customer, account, partner, and service relationship data
Code platform
Repositories, reviews, issues, and engineering standards
Data platform
Governed warehouse, catalog, analytics, and reporting
Security operations
Alerts, cases, exposure, audit, and control evidence
Business intelligence
Dashboards, semantic models, and executive reporting
MCP Server Portals
Illustrative remote services available to authorized workspaces.
Security Operations
https://security.mcp.demo.example/mcp
Auto
Enterprise Data Catalog
https://data.mcp.demo.example/mcp
Needs auth
Finance & Procurement
https://finance.mcp.demo.example/mcp
Auto
People Directory
https://people.mcp.demo.example/mcp
Needs auth
Cloudflare API
https://cloudflare.mcp.demo.example/mcp
Auto
Organization Context
Shared, curated knowledge that grounds every Marmon Holdings, Inc. OS workspace. Context is versioned and read-only to agents.
Public operating context: marmon.com · Internal-looking documents below are illustrative.
company-strategy.md
Mission, operating model, annual priorities, and outcome definitions
brand-and-communications.md
Terminology, voice, accessibility, and approved communication patterns
security-standards.md
Identity, data protection, secure development, and incident requirements
responsible-ai-standard.md
AI risk tiers, evaluations, human oversight, and acceptable use
data-classification.md
Data categories, handling rules, retention, and sharing restrictions
architecture-principles.md
Technology standards, decision records, review criteria, and ownership
vendor-risk.md
Due diligence, contract controls, monitoring, and exit requirements
customer-experience.md
Journey definitions, service standards, and quality measures
operations-playbook.md
Service ownership, runbooks, escalation, continuity, and recovery
finance-controls.md
Planning, purchasing, expense, audit, and reporting procedures
people-policies.md
Hiring, onboarding, performance, leave, and workplace guidance
legal-and-compliance.md
Review paths, records, privacy, accessibility, and regulatory obligations
Skills
Reusable workflows for every function. The human requester owns the result.
| Name | Description | Group | Source |
|---|---|---|---|
| meeting-prep | Build an agenda and briefing from authorized calendar, CRM, and document context | General | Shared library |
| weekly-operating-review | Create a cross-functional summary with decisions, owners, and open risks | General | Shared library |
| incident-response | Assemble evidence, draft updates, and preserve human approval for containment | Security | Shared library |
| vendor-risk-review | Compare due-diligence evidence with security and privacy standards | Security | Shared library |
| control-evidence-pack | Map authorized evidence to control requirements and identify gaps | Security | Shared library |
| architecture-review | Review a proposal against architecture principles and decision criteria | IT & Architecture | Shared library |
| change-impact | Map dependencies, affected services, stakeholders, and rollback requirements | IT & Architecture | Shared library |
| service-health-review | Summarize service levels, incidents, changes, and capacity risks | Operations | Shared library |
| runbook-builder | Turn a procedure into a deterministic workflow with approval gates | Operations | Shared library |
| ai-model-review | Summarize ownership, evaluations, drift, risk tier, and release readiness | Data & AI | Shared library |
| data-quality-report | Assess freshness, completeness, lineage, and policy compliance | Data & AI | Shared library |
| budget-variance | Compare actuals with plan and draft a finance-reviewed variance narrative | Finance | Shared library |
| procurement-brief | Summarize requirements, alternatives, risk, and approval status | Finance | Shared library |
| job-description | Draft an accessible role description from approved job architecture | HR | Shared library |
| onboarding-plan | Create a role-based onboarding plan without expanding system permissions | HR | Shared library |
| contract-intake | Extract terms, route issues, and prepare a legal review checklist | Legal | Shared library |
| privacy-assessment | Map a proposed workflow to data categories and privacy obligations | Legal | Shared library |
| account-brief | Create a customer briefing from authorized CRM and public information | Sales | Shared library |
| proposal-draft | Build a first draft using approved claims, pricing, and brand context | Sales | Shared library |
| executive-update | Turn project evidence into a concise decision-oriented update | General | Shared library |
Profile
Illustrative account information for this public prototype.
Account
Demo User
No personal information is stored
Display name
Demo User
User ID
demo.user@example.com
AI Gateway
Illustrative demo data. Visibility and controls across every AI provider Marmon Holdings, Inc. uses — one console.
Tokens
342M
Est. spend
$9,120
Cache-hit
27%
Error rate
0.6%
p50 latency
480 ms
Models in Use
This month| Model | Route | Tokens | Spend | Share | p50 latency |
|---|---|---|---|---|---|
| Llama 3.3 70B | Workers AI | 156M | $2,140 | 310 ms | |
| Claude | via AI Gateway | 98M | $3,980 | 720 ms | |
| GPT-4o | via AI Gateway | 61M | $2,510 | 640 ms | |
| Workers AI embeddings (bge) | Workers AI | 27M | $190 | 40 ms |
Spend vs. Budget
9 days remaining$9,120spent of $12,000 cap
76%
On track · ~$2,880 left with 9 days
Top Users
Demo User 0142M tok $1,180
Demo User 0231M tok $960
Demo User 0328M tok $840
Demo User 0422M tok $610
Usage by Workspace / Team
342M tokens totalAI Enablement
121M tokens · $3,240
Platform Engineering
89M tokens · $2,460
Customer Experience
62M tokens · $1,510
Enterprise Operations
41M tokens · $1,020
Security & Compliance
29M tokens · $890
Governance
Guardrails enforced by Gatekeepers + AI Gateway, with resource-scoped access, audit trails, and human approval.
Per-team allowed models
Restrict which providers each workspace can call.
Monthly spend caps
Hard limits per team; agents stop before overrun.
Data & AI $4,000Platform $3,000
PII redaction
Strip sensitive fields from prompts before they leave.
Enabled
Prompt / response logging
Full request logs retained for audit & review.
Enabled · 90-day retention
Rate limits
Per-team request ceilings to protect budgets.
600 req / min|burst 1,000
Raise Data & AI cap to $6,000
Change queued by an agent — needs a human sign-off.
Requires approval