As a side project, I've been working on a RAG/MCP/agent service with workflows, for security: https://mappedsky.com/seizu/

This primarily builds on top of cartography (https://docs.cartography.dev/), which I'm a contributor to, which pulls infrastructure, SaaS, etc info into a Neo4j database, makes edges, and has a standardize ontology, so you can do attack path analysis, vulnerability assessment, inventory, etc.

Seizu uses the RAG built by cartography, and adds reporting, graph exploration, automations and more on-top of it. It currently ships with a couple pre-made automations:

* Automatic dependency vulnerability fixes, like dependabot, but uses codex/claude/opencode in a sandbox to do so, which ensures it doesn't just bump a version in the file, but actually assesses whether the changes in dependencies need code updates, and gives you a thorough overview on if changes aren't needed, and why changes were needed if so. If tests break, it also watches and fixes them automatically. * A workflow to run the cartography sync, making it possible to split apart the stages, run portions of the sync on different schedules, in parallel, etc, while also making it possible to properly trigger downstream syncs, or other types of workflows. * Generic AI agent workflow, which can be staged, run in parallel, or chained together via inputs/outputs, using Seizu's own custom agent (which has good LLM provider support, sandbox support with files, etc)

Workflows are built on-top of temporal, allowing it to be quite flexible.