opensre

---

🚧 Public Alpha: Core workflows are usable for early exploration, though not yet fully stable. The project is in active development, and APIs and integrations may evolve

---

Table of Contents

• Why OpenSRE?
• Install
• Quick Start
• Deployment
• How OpenSRE Works
• Benchmark
• Capabilities & integrations
• Contributing & development
• Security
• Telemetry
• License
• Citations

---

Why OpenSRE?

When something breaks in production, the evidence is scattered across logs, metrics, traces, runbooks, and Slack threads. OpenSRE is an open-source framework for AI SRE agents that resolve production incidents, built to run on your own infrastructure.

We do that because SWE-bench1 gave coding agents scalable training data and clear feedback. Production incident response still lacks an equivalent.

Distributed failures are slower, noisier, and harder to simulate and evaluate than local code tasks, which is why AI SRE, and AI for production debugging more broadly, remains unsolved.

OpenSRE is building that missing layer:

an open reinforcement learning environment for agentic infrastructure incident response, with end-to-end tests and synthetic incident simulations for realistic production failures

We do that by:

• building easy-to-deploy, customizable AI SRE agents for production incident investigation and response
• running scored synthetic RCA suites that check root-cause accuracy, required evidence, and adversarial red herrings (tests/synthetic)
• running real-world end-to-end tests across cloud-backed scenarios including Kubernetes, EC2, CloudWatch, Lambda, ECS Fargate, and Flink (tests/e2e)
• keeping semantic test-catalog naming so e2e vs synthetic and local vs cloud boundaries stay obvious (tests/README.md)

Our mission is to build AI SRE agents on top of this, scale it to thousands of realistic infrastructure failure scenarios, and establish OpenSRE as the benchmark and training ground for AI SRE.

1 https://arxiv.org/abs/2310.06770

---

Install

The root installer URL auto-detects Unix shell vs PowerShell and installs the latest build from main. OpenSRE moves quickly, so main is the latest stable version for normal installs.

macOS / Linux:

curl -fsSL https://install.opensre.com | bash

The macOS/Linux installer does not require sudo. If no writable bin directory is already on PATH, it installs to ~/.local/bin and prints the shell command to apply the PATH update.

Equivalent explicit main-channel form:

curl -fsSL https://install.opensre.com | bash -s -- --main

Homebrew:

brew tap tracer-cloud/tap
brew install tracer-cloud/tap/opensre

Windows (PowerShell):

irm https://install.opensre.com | iex

---

Quick Start

Configure once, then pick how you want to run investigations:

opensre onboard

Interactive shell — with no subcommand, opensre starts a REPL (TTY required). Describe incidents in plain language, stream investigations, and use slash commands for session control (/help, /status, /cost, /sessions, /resume, /compact, /new, /exit), integrations (/integrations list, /integrations verify), local agent fleet monitoring (/agents), and reasoning depth (/effort for OpenAI and Codex — low through max). Ctrl+C cancels an in-flight investigation without losing session state. See interactive shell commands for the full reference.

opensre

One-shot investigation — run the agent once against an alert file:

opensre investigate -i tests/e2e/kubernetes/fixtures/datadog_k8s_alert.json

Remote runtime investigation — investigate a deployed service by name (live health, logs, and deployment status):

opensre investigate --service api-backend

Hermes log watch — tail a Hermes errors.log, classify incidents, and optionally alert on Telegram:

opensre hermes watch

Other useful commands:

opensre integrations setup
opensre agents scan
opensre update
opensre uninstall   # remove opensre and all local data

---

Deployment

Two primary AWS EC2 paths and a general hosted option:

• EC2 (Docker/ECR): make build-image then make deploy — runs opensre-web and opensre-gateway containers on one instance.
• Gateway (AMI + systemd): make bake-gateway then make deploy-gateway — Telegram gateway only, no Docker, baked into a custom AMI.
• Hosted (Railway / ECS / Vercel): deploy with the repo Dockerfile; set LLM_PROVIDER and the matching API key (see .env.example), plus DATABASE_URI and REDIS_URI if persistence is needed.

Full deployment steps and prerequisites → DEPLOYMENT.md

---

How OpenSRE Works

When an alert fires, OpenSRE automatically:

1. Fetches the alert context and correlated logs, metrics, traces, and recent deploys
2. Masks sensitive identifiers (optional) before external LLM calls
3. Reasons across your connected systems to test hypotheses in a tool-calling loop
4. Generates a structured investigation report with probable root cause and linked evidence
5. Suggests next steps and, optionally, executes remediation actions
6. Posts a summary directly to Slack, PagerDuty, or Telegram — no context switching needed

For the current code-level agent architecture after removing the old graph and chain framework layers, see AGENTS.md.

---

Benchmark

Regenerate numbers with make benchmark; refresh this table from cached results via make benchmark-update-readme. See docs/DEVELOPMENT.md for details.

No benchmark results yet.

---

Capabilities & integrations

🔍 Structured incident investigation	Correlated root-cause analysis across logs, metrics, traces, deploys, and config
📋 Runbook-aware reasoning	OpenSRE reads your runbooks and applies them automatically
🔗 Evidence-backed root cause	Every conclusion is linked to the data behind it
🛡️ Reversible identifier masking	Redact pods, clusters, and account IDs before external LLM calls; restore in output
📊 Session cost & history	Per-session token tracking (/cost) and resumable REPL sessions (/sessions)
👥 Local agent fleet	Monitor Claude Code, Cursor, Codex, and other coding agents on your machine
🌐 Remote runtime RCA	Investigate deployed services by name with live health probes and recent logs
📡 Hermes log watch	Tail Hermes error logs, classify incidents, and deliver Telegram alerts
🤖 Full LLM flexibility	Bring your own model — Anthropic, OpenAI, Codex, Ollama, Gemini, OpenRouter, NVIDIA NIM, Bedrock

OpenSRE connects to 60+ tools across LLMs, observability, cloud infrastructure, data platforms, incident management, and MCP. The full matrix (with roadmap links) lives in the product docs; a detailed catalog is also maintained in-repo as the project grows.

---

Integrations

OpenSRE connects to 60+ tools and services across the modern cloud stack, from LLM providers and observability platforms to infrastructure, databases, and incident management.

| Category | Integrations | Roadmap | | ----------------------- | -----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------