Production Prompt Orchestration

AI pipelines that earn the right to act

VectorStep turns any webhook into a multi-step AI pipeline — and only lets a step act autonomously when its confidence survives a second opinion, evidence checks, hard deterministic facts, and its own measured track record.

Pipeline detail

Every pipeline’s steps, agents and run history in one page — the structure, not just the outcome

An agent finishes a task and says “I’m 95% confident.”
Should you believe it?

LLMs can be completely wrong and still sound calm, structured, and sure of themselves. Confidence, as an agent reports it, is a style of writing as much as a measurement. VectorStep never trusts one number — it builds a trust vector from independent signals and gates every autonomous action on the weakest one. Not an average. The floor.

What you get on day one

A pipeline runner first. The trust machinery is opt-in.

Every gating signal on this page — verifier, grounding, calibration, readiness — is additive. None of it is required to run a production pipeline.

YAML pipelines, git-controlled

Triggers, steps and flow control are declarative config, versioned like everything else you own. No UI required to author or ship one.

Parallel groups & dynamic fan-out

Fan out over discovered work at runtime, run branches concurrently, and merge the results back into the next step.

Flow control that expects failure

Conditional steps, a per-step failure policy, and automatic retries — because real pipelines don't get to assume every step succeeds.

Cron schedules & sub-pipelines

Trigger on a schedule as easily as on a webhook, and chain pipelines together without an external scheduler in the loop.

Human-in-the-loop, natively

Route an approval to Telegram, Slack or Teams and the pipeline waits — no separate approvals system to bolt on.

Any provider, any tool, any webhook

Any LLM provider and MCP tools through the Gateway; webhooks in from any source, notifications out to any destination.

Write a step once. use: it everywhere.

The reusable step library is why the config in the next section is a dozen lines instead of a hundred. Write the prompt template and the output contract once, then reference it with use: sre-investigationfrom any pipeline. An inline pipeline — the kind with the prompt template and the LLM output contract written out in full — gets long fast; a step-library pipeline stays readable in review.

AlertmanagerGrafanaAtlassianGeneric webhooksCron schedulesVectorStep GatewayOpenClawTelegramSlackTeamsMCPPrometheusOpenTelemetry

Developer experience

Built to fit the way you already ship software

Everything in git

Every pipeline and every step is YAML in version control. Changes go through the same code review as the rest of your codebase.

Hot reload, no restart

POST /reloador SIGHUPpicks up config changes without dropping a run in flight.

Validate before you write

A dedicated validate endpoint checks a pipeline against the schema and never mutates state — wire it into CI before anything merges.

SQLite to Postgres, same code path

SQLite for zero-infra local development, Postgres for production — no branching logic, no surprises when you promote.

Metrics and tracing built in

Prometheus metrics and OpenTelemetry tracing ship with the service — plug in your existing stack, nothing to bolt on.

Via MCP

Author from Claude Code or Claude Desktop

Two MCP servers expose pipeline and agent authoring directly to an AI coding assistant — write, inspect and iterate on pipelines without leaving your editor.

The trust vector

Four independent signals. The weakest one decides.

S

Self-report

What the agent says about its own work. The starting point — and the least trustworthy number in the whole system, treated accordingly.

V

Verifier

A second agent reviews the reasoning — or independently redoes the task, blind. A verifier can lower confidence, never raise it. Consensus is not comfort.

G

Grounding

Is every load-bearing claim backed by an actual tool call in the agent’s own trace? Plausible-sounding prose doesn’t count. Evidence does.

D

Deterministic checks

Real commands, real queries, real approvals — no model in the loop. One failed hard check forces trust to zero. No averaging. No partial credit.

A real gating decision, start to finish

Threshold 75% — the agent was “95% confident” the whole time.

95%self-report
95%verifier: 85%, above veto floor
62%calibration: real track record
50%grounding: evidence ceiling
escalate50% < 75% → a human decides

Every step of this chain — with the exact numbers for that specific run — is visible in the run’s Trust panel under “How was this calculated?”. Nothing is a black box.

Calibration

Does “90% confident” actually mean 90%?

VectorStep bins every marked outcome per agent, model, provider, prompt version and agent version, then measures what each confidence band was actually worth. If an agent says 90% but its history at that level is 67% — you’ll see it, in plain English, before it ever bites you.

  • Advisory by default — watch for weeks with zero risk to behaviour
  • Opt-in enforcement replaces the guess with the measured fact
  • Editing a prompt or agent starts a fresh bucket — history never silently pools
  • Bins only trusted once they earn enough marked samples

sre-agent · claude-sonnet · confidence 90–100%

31 marked runs in this band

What the agent predicted~95%
What actually happened62%
Runs scoring ~90% here are only 62% correct — consider raising the threshold, swapping the model, or enforcing grounding.

Config-driven

The whole pipeline is YAML you can read in review

No SDK, no DSL, no redeploy. Pipelines, reusable steps, verifiers, grounding, calibration and hard checks are declarative config — versioned in git, hot-reloaded on change, validated before a byte is written.

  • Mix executors freely — Gateway agents, OpenClaw, humans, webhooks, sub-pipelines
  • Parallel groups and dynamic fan-out over discovered work
  • Human-in-the-loop approvals via Telegram, Slack or Teams
  • Testing → production stages, with promotion readiness measured, not guessed
Read the pipeline schema docs →
name: alert-triage
description: Triage critical alerts and notify on completion
trigger:
  source: alertmanager
  match: { severity: critical }

steps:
  - name: investigate
    use: sre-investigation       # reusable step library
    executor: gateway
    executor_config:
      agent: sre-agent
    confidence_threshold: 0.75
    on_low_confidence: escalate  # a human sees it instead

No verifier, no grounding, no calibration, no readiness — a legitimate way to run this pipeline in production.

name: alert-triage-critical
description: Triage critical alerts, act only when trust survives every check
trigger:
  source: alertmanager
  match: { severity: critical }

steps:
  - name: investigate
    use: sre-investigation       # reusable step library
    executor: gateway
    agent: sre-agent
    confidence_threshold: 0.75
    on_low_confidence: escalate  # a human sees it instead

    verifier:
      mode: independent          # blind second agent
      combination_strategy: minimum

    grounding:
      enforce: true              # claims need evidence

    calibration:
      enforce: true              # trust the track record
      on_uncalibrated: escalate

    deterministic_checks:
      - type: shell              # still breaching, live?
        command: ./checks/alert-still-firing.sh

The whole safety story is YAML you can read in review, too.

Gated is Simple plus four opt-in blocks — verifier, grounding, calibration, deterministic checks. Nothing in Simple is removed to get there.

Operate with evidence

Every question you’d ask in an incident review, answerable with data

Which model actually performs?

Per-step breakdowns by agent, model and provider — success rate, tokens, latency and judged accuracy, un-blended. “Did that prompt edit help?” has a diff and a number.

Is this pipeline ready for production?

Owner-defined readiness criteria across four tiers — operational, confidence, accuracy, calibration — judged against real evidence, with a guided builder that previews any criteria change in ~300ms.

What still needs a human mark?

A marking queue of every step lacking human accuracy feedback — the exact labels calibration and readiness are built from. Live-tail any run while it happens.

Stop trusting vibes. Start measuring trust.

From first webhook to a gated, calibrated production pipeline — the quick start takes about ten minutes.