Investigates infrastructure questions across source control, cloud, and Kubernetes as a unified read-only system. It runs API queries in ephemeral sandboxes, cross-checks findings against live evidence, and records tool calls in an auditable JSONL log.