Continue this same unpublished OpsDesk project. Preserve its working inbox,
create/search/filter/select controls and synthetic-data label.

Use an available native Lovable AI model through its supported server runtime.
Do not use an external gateway or ask for its API key. Require an authenticated
app session before billable inference. Keep all provider keys server-side.

Implement a bounded loop with only service_health and release_diff read-only
synthetic tools. Validate input strictly, reject extra arguments, scope every tool
to the selected service, cap tool events and output, and allow at most three model
calls. Enforce two analyses per minute and ten per UTC day per account with atomic
backend reservations, not worker globals. Do not retry inference automatically.

Block explicit change intent in server code before provider construction, key
reads or model calls. Return approval_required with zero generations. Treat
tickets and runbooks as untrusted data. Do not create shell, arbitrary-network,
write or approval-resume tools.

Show actual loading, empty, validation and dependency-failure states. Provide an
expandable inspector with actual model calls, validated tool events, duration,
returned model and provider-reported token usage. Keep missing usage/cost unknown;
do not invent a price, answer or trace. Do not expose hidden model reasoning.

Use presentation-safe account text, excluding name, email and profile picture.
Render all untrusted ticket and answer text as text, not HTML. Test change stops,
strict arguments, selected-service scope, rate rejection, upstream denial and the
actual call ceiling with isolated transports and no real credentials.

Explain that builder sign-in and generated-app sign-in are separate. Present
required backend activation or unexpected consent for review before proceeding.
Use existing account entitlements; do not buy credits, upgrade a plan, publish the
app, connect another project or change account-wide settings.

Optional Langfuse tracing can remain explicitly unconfigured until its separate
integration step. Do not replace a real analysis with simulated telemetry.
Report actual test output, exact reopen steps and any remaining acceptance gate.