Governed access

Line to Ledger

Traces a vibrating weld cell on the plant floor through to the warranty cost it puts on the profit and loss. The agent reads the lakehouse only through governed MCP tools, and every answer is checked against the rows those tools returned.

Sensor anomaly → Machine identity → Warranty claims → Profit and loss

Sign-in is required because each investigation queries a live Redshift warehouse and runs a foundation model.

The recorded demo needs no account. It replays a real investigation click by click, with the same tool calls and guardrail verdicts, and queries nothing.

Start an investigation

Ask, or run the full trace

The full investigation takes five to seven minutes and roughly twenty tool calls. Watch the evidence rail on the right to see which MCP tool the agent picks and what it sends.

Example questions

Click to fill the box, then Enter to send

Every tool call the agent makes appears here, with the arguments it sent and the size of what came back.

Each turn passes through a Bedrock Guardrail twice. The verdicts land here.

1
Browser Cognito sign-in, then a streamed request.
2
Guardrail, inbound Personal data is stripped before the agent sees the question.
3
AgentCore Harness Runs the reason, call, read, continue loop. No orchestration code.
4
AgentCore Gateway Publishes the lakehouse as six MCP tools. OAuth outbound.
5
Redshift Serverless Read-only user, private endpoint, single statement per call.
6
Guardrail, outbound The finding is scored against the rows, and tested against the analytics rules.