FDE Scope turns the complete Forward-Deployed-Engineer SOP (4 zones, 18 phases, 10 executable gates) into a state machine that refuses to advance until the proof is in. Software desks and factory floors run the same engine.
Real incidents, synced from the public postmortem database kuba-database. On a checklist they slip through; mapped onto the board, each one is a refusal the SOP now records.
Production code deleted by hand on a busy evening; recovery ran all night on improvised steps.
A chilled-water air lock plus group-control deadlock took a whole availability zone down for over 10 hours.
A vendor auto-upgrade stormed connection pools for 4 days; monitoring sampling hid the diagnosis.
Single-region auth trusted the vendor's redundancy promise; one regional failure logged out every customer for 45 minutes.
An install-fee decision shipped without stakeholder alignment; the ecosystem revolted, the CEO left, the policy died.
A maintenance command withdrew every BGP route; engineers were locked out of the very building holding the recovery tools.
Not checklist rows. Gate.check(ctx) returns passed, blockers, warnings, and advance refuses until clean. Seven exist only on the factory profile. 返回通过/阻断/警告，advance 不干净就拒绝。其中七个只存在于工厂场景。
A record. Freshest the day it is filled in, then it rots as reality drifts: the box never learns the world changed.
A predicate. Re-run on every advance; a stale pass never counts. Even force evaluates and records, so the override itself stays on the audit log.
The same state machine runs a customer-service desk and an embodied-robotics line; the profile swaps connectors, KPIs and which gates apply.
Every name on the roster is a real AgentScope 2.0 Agent — wired model, role toolkit, permission rules injected via AgentState. The FDE names the crew; unknown roles degrade to corpus-only, and tools without a data source are reported unbound — never faked.
fde-scope deploy --tenant acme --agent 数据员:数据分析 --agent 日志员:日志分析:qwen3-14b --connector-source csv=sample.csvfde-scope webSeed the console with six realistic engagements; every gate record below is produced by the engine itself, so the panels never lie.
Live capture of the double-click macOS app — universal2, codesigned DMG, single-instance guard, SIGTERM-safe exit. The same engine the CLI drives, behind a desktop icon that needs no Python.
Core plus engagement layers carry no AgentScope dependency: no LLM key, no Docker. Green in five minutes.
pip install -e ".[dev]"python examples/seed_mock_engagements.pyfde-scope webfde-scope ontology export fde-coreThree ledgers, all verifiable today — not roadmap. What the product does, how it is layered, and the six engineering invariants pinned by contract tests.
功能清单
架构清单
最佳实践 · 六条不变式
VERIFIED BY: CI-green suite · contract pins tests/test_architecture_guard.py · evidence model docs/architecture-model/architecture-map.md
The engine is open source; the seats around it are commercial. Start free on Community, subscribe per FDE seat on Pro, or bring us in for an Enterprise deployment.
社区版 · 开源 MIT
¥0 / free forever
专业版 · 按席位订阅
¥4,800 / FDE seat / month
Placeholder price · final pricing subject to commercial discussion
企业版 · 面议
Custom scoped to your deployment
No forms, no tracking, no backend on this page. Email us directly and an engineer replies — or open a public issue and the whole community sees the answer.
contact@fde-scope.dev