How it works
Tell Deixic what you need help with, or let a change in your tools start the work. You decide what it can do. We keep track of what’s finished, what still needs attention, and when we need your help.
Example workflow · Employee offboarding
Deixic checks Google Workspace, GitHub, and AWS for the person’s remaining access. Your security team approves the admin change. We remove the access and check again, keeping you informed if something needs more time.
Result The listed access is removed and verified. GitHub account deletion was not authorized.
07 Closed
| System | Desired | Observed |
|---|---|---|
| HR systemTerminated | Terminated | Terminated |
| Google WorkspaceSuspended | Suspended | Suspended |
| GitHubNot a member | Not a member | Not a member |
| AWS access keyInactive | Inactive | Inactive |
| AWS prod adminNot assigned | Not assigned | Not assigned |
Choose which changes Deixic can make and which need someone’s approval.
| Class | Examples | Decision | Who decides | Recorded as |
|---|---|---|---|---|
| Observe | Read branch rules in GitHub, list AWS access keys, read the termination date in the HR system | Runs | Policy | Allow, with the target and a credential reference |
| Change | Turn on required reviews, deactivate an unused access key, remove a departed user from a Google Workspace group | Runs within the policy you grant | The policy you wrote | Allow, with the policy that allowed it |
| Sensitive | Remove a production admin role, enforce rules on administrators, change an organization-wide sign-in policy | Waits for a named approver | A named approver, in the app or Slack | Require approval, then the approver, the reason, and the decision time |
| Outside authority | Delete an account, set a policy only your company decides | Denied, or sent to you as a decision | You | Deny, or the decision and who made it |
You can see what Deixic wants to change, why, the policy that applies, and who or what it affects. The person you choose can approve or decline in the app or Slack. If the proposed change is different, Deixic asks again.
coding-agent · Platform
A successful request doesn’t always mean the change has taken effect. We check again and show you anything that still needs attention.
In this example, AWS still shows admin access after Deixic asks to remove it. We keep checking until AWS confirms it’s gone. Then we update the SOC 2 evidence. See the record of what changed.
You can review the changes, approvals, and checks whenever you need them. Read the technical details
If something has to wait, you won’t need to explain the task again. Deixic remembers what’s done and what still needs your attention.
If one of your tools limits how quickly Deixic can work, we wait and continue when it’s ready.
If we need more access, we ask the person responsible and wait for them to grant it.
Take the time you need to review a change. Deixic waits for your decision and keeps the work already finished.
Owner, activity, status, and month-to-date spend for each agent. Agent identity, Read agent spend
