Optimize service continuity investment portfolio

Choose one production-exercised continuity posture per service-risk unit by maximizing retained business value minus direct/common interruption loss, full cost and CVaR under RTO, RPO, residual-risk, control, dependency, budget and resource constraints.

What it's for

Builds an investable resilience frontier across prevention, recovery and data-loss objectives while counting shared-dependency exposure once and certifying optimization only when exhaustive.

What you give it

Inputs split into evidence read from your connected systems, calibration your team owns, and numerical controls that affect precision but never the result's meaning.

Field Type Role Required
beam_width integer ≥ 1, ≤ 100000 Numerical control Optional
continuity_options array of objects (17 fields) Evidence Yes
continuity_risk_units array of objects (14 fields) Evidence Yes
exact_state_limit integer ≥ 1, ≤ 10000000 Your calibration Optional
investment_budget number ≥ 0 Your calibration Yes
max_detail_rows integer ≥ 1, ≤ 500 Numerical control Optional
random_seed integer ≥ 0, ≤ 4294967295 Your calibration Optional
resource_capacities array of objects (3 fields) ≥ 0 items Evidence Yes
risk_aversion number ≥ 0 Your calibration Optional
scenarios array of objects (9 fields) Evidence Yes
shared_dependency_groups array of objects (3 fields) Evidence Yes
simulation_count integer ≥ 1000, ≤ 200000 Your calibration Optional
tail_probability number > 0, < 1 Your calibration Optional

Each continuity_options record

Field Type Required
available_scenario_ids array of string Yes
common_loss_reduction_fraction_scenarios array of number (≥ 1 item) Yes
data_loss_reduction_fraction_scenarios array of number (≥ 1 item) Yes
dependency_option_ids array of string Yes
evidence_verified boolean Yes
exclusion_option_ids array of string Yes
id string (non-empty) Yes
implementation_cost number (≥ 0) Yes
is_current_state boolean Yes
operating_cost_scenarios array of number (≥ 1 item) Yes
option_type string (non-empty) Yes
outage_prevention_probability_scenarios array of number (≥ 1 item) Yes
production_exercise_verified boolean Yes
recovery_time_reduction_fraction_scenarios array of number (≥ 1 item) Yes
resource_demands object Yes
satisfied_control_ids array of string Yes
unit_id string (non-empty) Yes
Example input
{
  "continuity_options": [
    {
      "available_scenario_ids": [
        "base",
        "stress"
      ],
      "common_loss_reduction_fraction_scenarios": [
        0.05,
        0.05
      ],
      "data_loss_reduction_fraction_scenarios": [
        0.1,
        0.1
      ],
      "dependency_option_ids": [],
      "evidence_verified": true,
      "exclusion_option_ids": [],
      "id": "payments-current",
      "implementation_cost": 0,
      "is_current_state": true,
      "operating_cost_scenarios": [
        5,
        10
      ],
      "option_type": "current",
      "outage_prevention_probability_scenarios": [
        0.05,
        0.05
      ],
      "production_exercise_verified": true,
      "recovery_time_reduction_fraction_scenarios": [
        0.1,
        0.1
      ],
      "resource_demands": {},
      "satisfied_control_ids": [
        "tested-failover"
      ],
      "unit_id": "payments"
    },
    {
      "available_scenario_ids": [
        "base",

Truncated for display — the full payload is 163 lines.

What you get back

This is the actual output of running the example above — computed by the same function the platform calls, not an illustration.

Example output
{
  "assumptions": [
    "Risk units and shared dependencies are complete and value/loss is unique; outage priors and option prevention, recovery, data-loss and common-loss effects are locally calibrated from prospective production-representative exercises.",
    "Every selected option is executable in every scenario, satisfies required controls and relations, and uses complete implementation/operating cost plus shared capacity; common dependency loss is counted once."
  ],
  "baseline_current_state": {
    "conditional_value_at_risk": 1218010,
    "expected_financial_loss": 97965,
    "expected_net_value": 299432.765,
    "selected_option_ids": [
      "payments-current"
    ]
  },
  "constraints": {
    "investment_budget": 100,
    "resource_capacities": {
      "resilience-hours": 1
    },
    "risk_aversion": 0.25,
    "tail_probability": 0.05
  },
  "decision": "review_governed_service_continuity_investment_portfolio",
  "failed_gates": [
    {
      "gate": "maximum_expected_data_loss_exceeded",
      "rejected_state_count": 1
    },
    {
      "gate": "maximum_expected_recovery_time_exceeded",
      "rejected_state_count": 1
    },
    {
      "gate": "maximum_residual_outage_probability_exceeded",
      "rejected_state_count": 1
    }
  ],
  "limitations": [
    "The optimizer selects among preauthorized continuity investments; it does not guarantee uptime, recovery, contract compliance, customer retention, vendor performance or incident-free operation.",
    "No output authorizes production failover, architecture change, procurement, customer communication or contractual waiver; accountable owners must review feasibility and rehearse execution."
  ],
  "method": "beta_binomial_common_dependency_rto_rpo_cvar_portfolio_v1",
  "portfolio_pareto_frontier": [
    {
      "conditional_value_at_risk": 485429.2,

Truncated for display — the full payload is 93 lines.

How it works

Constrained optimization — Pick the best feasible option under real limits — budget, headcount, dependencies, capacity — rather than ranking a list and hoping it fits.

  1. 1 Draw service-unit Beta-binomial outage risk and coherent scenarios, then propagate option-specific prevention, recovery-time, data-loss and shared-dependency loss reduction through business value and loss.
  2. 2 Reject portfolios violating production-exercise evidence, allowed option types, required controls, RTO/RPO/residual-risk ceilings, scenario availability, relations, budget or shared capacity.
  3. 3 Enumerate the complete multiple-choice space when tractable and use a deterministic continuity-value beam otherwise; compare current state, selected policy, CVaR and the non-dominated value-risk frontier.

Before you trust it

Every tool in the catalog ships with the conditions under which its answer is meaningful — and the conditions under which it should abstain instead of guessing.

Assumptions & guardrails

  • Objectives use commensurable locally governed value units, constraints reflect real feasibility, and uncertainty covers plausible adverse inputs.
  • Service units and shared dependencies are complete, business value/loss is unique, and prevention/recovery/data-loss/common-loss effects were measured prospectively in locally representative exercises.
  • The recommendation is optimal only for its stated objective, feasible set, evidence, and solver guarantee; it is not a universal management optimum.
  • The optimizer selects preauthorized investments only; it does not guarantee uptime or authorize production failover, architecture changes, procurement, customer communication or contract waiver.

Minimum evidence

  • continuity_risk_units: required and organization-defined
  • shared_dependency_groups: required and organization-defined
  • continuity_options: required and organization-defined
  • scenarios: required and organization-defined
  • resource_capacities: at least 0 rows/items
  • investment_budget: required and organization-defined

How to validate it

Backtest the chosen action against simple feasible baselines on held-out scenarios, sweep costs/constraints/risk tolerance, and require constraint feasibility under adverse inputs.

Calibrating it to your org

Same for everyone

The mathematical kernel, validation rules, method version, and JSON output semantics are organization-independent; no tenant-trained coefficients or company benchmark is embedded in the function.

Specific to you

  • versioned multiple-choice service-to-continuity-option matrix joined to one coherent scenario set, unique shared dependency loss, resource demand and prospectively measured exercise effects
  • unit/shared-loss boundaries, allowed postures, required controls, residual-risk/RTO/RPO limits, option-effect evidence, scenario availability, dependencies/exclusions, budget/resources, value/loss, CVaR and production-change authority

Calibration workflow

  1. 1 Define the management decision, target outcome, aggregate unit, privacy boundary, cadence, and prediction/intervention horizon for this organization.
  2. 2 Build a tenant-scoped historical cohort using only information available before each prediction or decision; preserve zero periods, censoring, assignment probabilities, and unresolved outcomes when the method requires them.
  3. 3 Estimate statistical parameters on training history, but obtain costs, utilities, risk tolerance, practical-effect thresholds, capacity, and policy constraints from accountable decision owners.
  4. 4 Validate on later time windows or held-out aggregate units at the deployment grain, against a simple baseline and the function-specific validation strategy.
  5. 5 Deploy only if the returned decision clears evidence, overlap, calibration, robustness, and guardrail checks; warning, unsupported, schema-gap, and fallback decisions are abstentions.
  6. 6 Monitor realized outcomes, data drift, coverage, and decision regret; recalibrate at a governed cadence or after a detected regime/definition change, never merely because a stakeholder dislikes the result.

Call it from your AI

You don't wire up 388 tools in your MCP client. The GitRevio MCP server exposes 18 tools, three of which let an agent search the catalog, read a tool's schema, and run it — so the assistant finds this one on its own.

gitrevio_capabilities_search
  { "q": "choose one productionexercised continuity posture per" }
  → finds "optimize_service_continuity_investment_portfolio"

gitrevio_capability_describe
  { "capability_id": "optimize_service_continuity_investment_portfolio" }
  → returns the input schema and agent guidance shown on this page

gitrevio_capability_run
  { "capability_id": "optimize_service_continuity_investment_portfolio", "arguments": { ... } }
  → returns the result shown above

Works in Claude Desktop, Claude Code, Cursor, Cline, Continue.dev, Goose and Aider. See the MCP server.

Related tools

Audit service continuity recovery evidence integrity

Audit whether each critical service has a current, independently reviewed recovery plan whose complete capability/dependency path, backup, restore, failover, communications, RTO and RPO were proven in a recent production-representative exercise.

Statistical audit & measurement

Forecast customer facing service interruption loss

Forecast customer-facing outage frequency, duration, SLA credits, interrupted revenue, churn exposure and total financial VaR/CVaR using local zero-inclusive service history, compound log-normal severity and coherent shared-dependency events.

Forecasting & survival

Aggregate risk register copula

Aggregate risk-register occurrence and lognormal severity marginals through a validated Gaussian copula into expected loss, VaR, CVaR, dependence amplification, and tail shares.

Statistical audit & measurement

Allocate restless bandit interventions

Allocate scarce recurring interventions across evolving Markov units with Whittle indices, explicit indexability checks, and paired policy simulation.

Sequential Bayesian & bandits

Attribute commercial dependency tail loss

Calculate expected loss, VaR and CVaR for commercial value concentrated in shared technical components, then allocate every modeled tail-loss dollar exactly once across components with normalized negative-log survival hazard rather than overlapping leave-one-out sensitivities.

Forecasting & survival

Audit commercial resilience claim integrity

Audit resilience ROI claims against a unique commercial-source to technical-component graph: recompute each action's avoided loss under joint failure scenarios, cap support at graph-derived value, detect duplicate effects, probability drift and weak evidence, and prevent overlapping component benefits from being sold twice.

Network & dependency analysis

See every tool in Risk, tails & resilience →

Ready to See Your Engineering work clearly?

Request a free demo