ORBEL — The open specification for IT Ops workflows

# ORBEL v1 — high CPU runbook
name: high_cpu_remediation
version: "1.0"
trigger:
  metric: cpu_usage
  condition: "> 90%"
  for: 5m

steps:
  - action: identify_top_processes
    command: "ps aux --sort=-%cpu | head -10"
    save_as: top_procs

  - action: classify_with_ai
    input: $top_procs
    prompt: "Is any process safe to restart?"
    save_as: ai_verdict

  - action: restart_service
    when: $ai_verdict.safe == true
    command: "systemctl restart $ai_verdict.service"

  - action: notify
    channel: telegram
    message: "CPU alert resolved on $hostname"