Software Engineer · Pro tier

Cody

Cody is your code-and-change intelligence specialist. Point him at a local worktree, pull request, failing build, deployment, or production symptom and he follows the shortest causal chain from intent to impact. His calls are explicit: Ship, Ship after X, Hold, or Not enough evidence.

The λ method: intent → code → tests → CI → deploy → runtime. Cody climbs only the rungs the question needs, labels each one Read, Observed, Computed, Inferred, or Unverified, then names one realistic counterexample and the smallest safe move.

λ Traces the change

Intent, source, proof, delivery, and runtime joined into one causal chain.

λ Reviews with receipts

A merge verdict, load-bearing risk seams, counterexample, proof gaps, and smallest safe move.

λ Reads production

Metrics, monitors, logs, errors, and deploy evidence shaped for Paige's incident command frame.

λ Tracks delivery

Jira tickets, sprint health, and confirmable status moves — grounded in the real board.

λ Audits change plans

A deterministic completeness score for a CM or migration, with named monitor evidence checked when connected.

λ Sizes the work

An independent read on the real blast radius when someone says "two-week change".

Cody is a Pro-tier specialist. His local code lens and deterministic developer kit work without a provider connection; GitHub, Chronosphere, Datadog, Grafana, Sentry, Jira, and the rest of his engineering integrations complete the remote proof ladder. Paige owns paging and incident command; she marshals Cody when the room needs technical evidence. You can also talk to him directly.

Who Cody is#

Cody is a forensic builder: source is testimony; tests, CI, deploys, and runtime signals are corroboration. He is impressed by deletion, explicit state, boring interfaces, reversible changes, and tests that fail for the right reason. His job is to translate code reality into a decision without losing the implementation truth.

A few things define how he works:

Working with Cody#

The fastest way to get value from Cody is to hand him a link or a concrete artifact and ask for a verdict. He'll go read the real thing.

Try saying
review this PR: github.com/acme/ledger/pull/482 what does this repo actually do? they said this is a two-week change — is it?

Connecting his world#

Cody's power comes from a complete evidence chain across your engineering systems. Connect only the systems you use; leave one out and he labels that proof rung unverified rather than inventing it.

ConnectAnd Cody can…
GitHub · GitLab · AtlassianRead repositories, diffs, reviews, commits, issues, and Bitbucket context—the source of every code judgment.
Jira · LinearRecover intent, scope, ownership, cycles, and the real acceptance boundary.
Buildkite · CircleCI · source CIInspect pipelines, checks, jobs, and failures instead of treating “green” as a sufficient claim.
Vercel · CloudflareCorrelate deployments, environments, domains, edge behavior, and rollout timing.
Chronosphere · Datadog · Grafana · Sentry · New Relic · SplunkInvestigate metrics, monitors, logs, exceptions, releases, and runtime change evidence.
VantaRead compliance and audit evidence as context; Daphne retains the security verdict.

PagerDuty, OpsGenie, incident.io, and Rootly belong to Paige; Cody supplies technical change and runtime evidence instead of competing for command.

Focused reads follow your Connections policy. Creates, edits, reruns, deploys, administrative operations, and other side effects retain Zimac's explicit approval gate. Connecting a provider never approves an action.

Read any repo or file#

For remote code, give Cody the provider URL. For local code, mount the repository root in Files: he can list approved Git roots, inspect the checkout, search tracked files, read the load-bearing source, review a bounded diff, and validate a unified patch with git apply --check.

The local code drive is read-only. It does not edit, fetch, execute project code, compile, lint, test, commit, or push. Patch validation proves only mechanical applicability and whitespace—not behavior. Untracked files are listed but excluded from tracked search and diff evidence.
Try saying
walk me through how auth works in this repo what's this service responsible for? github.com/acme/billing read payments/webhooks.go and explain the retry logic

PR & diff review#

Drop a pull-request link and Cody briefs you the way a trusted staff engineer would brief their EM: what changed, the risk profile, whether the tests actually cover the change, and what to ask the author. He leads with a verdict:

Safe to merge Merge after X Hold — here's why

Then the evidence: the specific handler that swallows an error, the migration with no rollback, the concurrency path the tests don't exercise. He focuses on what a reviewer would genuinely push back on, and he's explicit about how much of the change he read.

Try saying
review github.com/acme/ledger/pull/482 — safe to merge? do the tests actually cover this diff? what should I ask the author before approving?

Scope & estimate checks#

When someone tells you a change is "a two-week job", Cody gives you an independent read. He looks at the code the change would actually touch and reports the real blast radius — the surprising coupling, the migration nobody mentioned, the tests that will need rewriting — so you can size the work on evidence instead of optimism.

Try saying
how big is it really to swap our session store? is adding multi-region a quarter or a year?

Incident archaeology#

When a bug or regression appears, Cody traces it through history — which commit introduced it, which PR shipped it, and what that change was actually trying to do. He follows the story through the diff and the surrounding code so you get the why, not just the where.

Try saying
when did checkout latency start regressing, and what changed? which PR introduced this null-pointer path?

Production metrics#

With Chronosphere connected, Cody answers observability questions with real numbers, rendered as charts. Ask about request rates, latency, error rates, saturation, or "pull the metrics for team X over the last day" and he returns a line chart with his one-line read of the trend.

He doesn't guess metric names. When he doesn't know the exact metric or label values, he discovers them first — which label your setup uses for a team or service, what metrics exist — then aggregates sensibly (top-5 series, percentiles for latency, rates for counters) so the chart stays readable.

Try saying
pull p95 latency for the checkout service over the last 24h error rate for team payments this week show request rate and errors side by side

Monitors & SLOs#

Hand Cody a monitor — a slug, an alert name, or "the checkout latency monitor" — and he looks up its own underlying PromQL and its alert thresholds, then charts that exact query over time with a threshold line for each condition (red for critical, amber for warning). You see at a glance how close the signal is running to alerting.

Try saying
how close is the checkout latency monitor to firing? chart the error-budget-burn monitor with its thresholds

Incident investigation#

During an incident, Cody is the technical investigator Paige marshals. He grounds the command room in what the systems actually show:

The boundary is deliberate. Paige owns severity, roles, paging, stakeholder clocks, and approval-gated response actions. Cody owns telemetry, deploy/change evidence, application code, and technical root cause. His output is shaped for her Red Thread rather than becoming a second command channel.
Try saying
what changed before checkout errors spiked? compare the leading root-cause hypotheses give Paige the signal, confidence, and next check

Jira tickets & sprints#

Cody works your Jira board directly:

Try saying
how's the InfraOps sprint tracking? show me INFRA-1240 in full move TECH-18433 to In Review

Change-management review#

Share a change-management doc, runbook, migration plan, or change ticket and Cody computes a deterministic 0–100 completeness score with a per-dimension breakdown: rollback, monitoring/alarms, blast radius, maintenance window, approvals, step clarity, validation, and data integrity. It is evidence about the plan, not a release verdict.

With Chronosphere connected, he checks every named alarm or monitor against the live catalog, confirming what exists and marking anything he cannot verify. A plan that says "we'll watch the error-rate alarm" gets checked rather than trusted by title. The score is computed in code, not guessed; an unavailable live source remains explicitly unverified.

Try saying
is this migration plan safe? [paste the CM] score this runbook and check its alarms are real

Query your datasets#

Upload a spreadsheet or CSV and Cody queries it like a database — filter, free-text match, sort, and group-by/aggregate — all computed locally with zero model tokens, so the numbers are exact. He inspects the schema first (real column names, the low-cardinality facets and their values), and can diff two versions of a dataset to show exactly which rows were added, removed, or changed between uploads.

Try saying
group this cost export by team and sum the spend what changed between this week's and last week's upload?

Live dashboards#

Cody can build a dashboard of live, refreshable tiles — each bound either to a local metric (cost, memory, projects, the knowledge graph) or to a Chronosphere PromQL query. A tile is populated the moment it's added and re-derives itself on demand, so it stays current for free without re-running anything. Ask for a one-off chart in the reply and he'll draw that instead.

Try saying
build me a dashboard with checkout latency and error rate add a tile tracking our monthly cloud spend

The developer code kit#

Cody carries a library of about 195 pure, deterministic developer utilities that run in-process — encoding and decoding (base64, hex, URL, JWT decode), hashing and checksums (SHA-256/512, HMAC, CRC32), compression, text and case transforms, line tools (sort, dedupe, diff, number), regex, JSON and data shaping (pretty, flatten, JSON-pointer, CSV→JSON/Markdown), number and base conversion, dates (unix↔ISO, timezone, cron describe), IDs (UUID, nanoid, tokens), and code metrics (lines of code, bracket balance, semver compare). When a request needs exact string, number, encoding, or diff work, he computes it rather than eyeballing it — nothing touches the network or a model.

Try saying
decode this JWT diff these two config blocks does 2.4.1 satisfy ^2.3.0?

Skills & self-improvement#

Like every specialist, Cody can teach himself new, proven capabilities and keep them in your Skill Vault. This runs on Zi, Zimac's own proof-carrying language: a capability installs only if a verifier proves it meets its written specification, every obligation discharged. When something exact and repeatable is worth keeping, he can gem it into a skill; for anything a proven skill covers, he runs it for a guaranteed-correct result rather than doing the arithmetic by hand.

Capabilities that touch the outside world or hold a credential are still proven safe (a secret can never leak) but never run autonomously — Cody asks for your confirmation and any credential before their first live call. Read the Zi technical report →

Watches & recorded pulls#

Tell Cody to keep an eye on something — a Jira search, a ticket, sprint progress, or a Chronosphere metric — and he adds it to your Night Shift watchlist, re-checking on a schedule and alerting you only when it materially changes (a status moves, a metric crosses a threshold). Every data pull he runs is also recorded, so before re-running an expensive query he checks whether someone pulled it recently and reuses the fresh result, citing its age.

Try saying
watch the error rate on checkout and ping me if it spikes track TECH-9 and tell me when it moves

Studios & lessons#

Cody guides you into the right screen instead of just describing it — a one-click chip into a dashboard he built, the Review studio, or Settings to connect an integration. And when you correct him — "always show the ticket keys", "lead with the verdict" — he files it as a durable lesson that changes how he and the team work from then on, and redoes the thing correctly right away.

Try saying
open the dashboard you just built next time, quote the exact line numbers