Example processit

Managed IT services automation software

An example of managed IT services as a governed process: agents do the 8 steps, and a person signs 2 gates before anything irreversible happens. Download it, import it into your workspace, and adapt it to your systems.

Download example · JSONImport into Minctrl →

minctrl.process/v1 · hash 97ade22e6101…638c

The graph8 agent steps2 human gatessigns: Head of IT / change manager

Managed-IT autopilot

Managed-IT work (patching, config, access) is labour-heavy across many clients; one bad autonomous change is a multi-tenant outage or a privilege-escalation incident. Changes staged through rings with health gates and auto-rollback; JIT least-privilege access; tenant isolation; fleet-wide / privileged / destructive changes escalated.

The governed flow · branches, parallel work & a human on the irreversible step
routine single-tenant changefleet-wide / privileged / destructive changeregression — roll back and replancanary healthy
Start
agent · low risk
Detect the change needed (patch / config / remediation), pull tenant + fleet context and take a pre-change snapshot
agent · low risk
Plan a staged ring rollout (canary -> rings) with health gates and a tested rollback, scoped to one tenant
parallel · fan-out / join
Run the pre-flight checks concurrently
agent · low risk
Classify blast radius and change type (fleet-wide / privileged / destructive vs single-tenant routine) against SOC 2 controls
agent · low risk
Verify JIT least-privilege grant and tenant isolation hold for the planned change
decision
Join checks; route on blast radius
agent · medium risk
Routine single-tenant change: auto-apply to the canary ring under the health gate with auto-rollback armed — a reversible, in-policy change
gate · human sign-off
Change manager approves the fleet-wide / privileged / destructive change before it touches any devicesigns: MSP engineer / change manager
agent · high riskirreversible
Apply the approved high-blast-radius change to the canary ring with a health gate; auto-halt on regression
decision
Canary healthy?
gate · human sign-off
Change manager signs off the fleet-wide widen after reviewing canary health metricssigns: MSP engineer / change manager
agent · high riskirreversible
Widen the rollout fleet-wide across the remaining rings
agent · low risk
Verify post-change health, revoke JIT access, and log every action for the SOC 2 audit trail
Done
low riskmedium riskhigh riskbranch / reworkgate · human sign-off
Use this example
01

Download the file

A minctrl.process/v1 document: the graph and the hash of the process it becomes.

02

Import it in Processes

Import into Minctrl opens this example in your workspace; one click stores it as your first version. Import JSON does the same with the file, and a file changed after download is refused.

03

Connect your systems

Every connector starts in shadow: steps run, nothing leaves Minctrl until you configure a connector and switch it live.

04

Adapt it

Change signers, time limits and steps on the canvas. Each save is a new version; a running case stays on the version it started with.

Questions
How do I automate managed IT services with Minctrl?

Start from this example. Import the file in Processes, connect your own systems, and adapt the steps on the canvas. Agents run the reversible steps; every irreversible step waits at a gate for the role you choose. The example has 8 steps and 2 gates; you can change any of them.

Is managed IT services in Minctrl auditable?

Every run start, signature and change to the process is written to a hash-chained audit log your auditor can verify and export. A run is pinned to the exact graph it started on.

Does the AI decide everything?

No. Minctrl will not make a process runnable while an irreversible step can be reached without a human gate, and one person cannot sign two gates of the same run.

More examples