Change Guardian

Change Guardian answers one question before anyone patches a server: what will actually break if I do this? Every hospital keeps a map of its own IT systems, called a CMDB, but that map goes out of date as systems change, and a patch that looks harmless on the map can cut off something nobody knew was connected. Change Guardian compares the map against what the systems really do, and warns you when a safe-looking change is not safe.

The headline example makes the point plainly. A security patch and reboot for one host, dc1-host-07, looks like it touches 4 components and one business service, so it reads as low risk. The evidence says otherwise: the lab results database on that host feeds critical lab results to the Emergency departments of 51 hospitals, so the real blast radius is 107 components across 51 hospitals, and the risk is high. The agent also spots that the map names the wrong owning team.

Under the hood, both versions of the truth live in one FalkorDB graph: the links people declared, and the links that traffic, scans, backups and logins prove. The agent picks its own steps from 18 read-only graph tools, explains each step, and every number in its verdict is checked against the graph. It then warns the right people and proposes a fix to the map that a person approves, and it remembers approvals and rejections so it does not raise a rejected finding again.

Honest limits: everything in the live demo is fictional — Northwind Health is an invented hospital system, sized like a large real one, because real hospital data cannot be used. The agent got 7 of 9 test scenarios right, with both misses about warning the wrong team, and the public demo allows only a few live agent runs per visitor per day under a one-dollar daily cap, replaying a recorded run after that. The repository had 0 stars at the 29 October 2026 check.