Devpost Submission: BlastRadius Rovo & MCP Teamwork Graph Sentinel for Atlassian Forge

Hackathon: Codegeist 2026
Prize Target: Main Prize ($120k Cash Pool) + 3 Bonus Tracks:

1. Best Agents - Rovo ($1,500 x 6)
2. Best app with Atlassian MCP ($1,500 x 6)
3. Best apps with Teamwork Graph ($1,500 x 6)

---

1. Project Summary

BlastRadius Sentinel is an enterprise resilience Forge app that combines Atlassian Rovo Agent intelligence, Teamwork Graph Cypher dependency traversal, and a Model Context Protocol (MCP) server. When developers propose code changes in pull requests, BlastRadius Sentinel inspects git diff patterns, traverses cross-service dependency graphs, calculates deterministic incident blast radius scores (0–100), and correlates mitigation runbooks from Confluence before changes reach production.

---

2. Inspiration & Problem Statement

In distributed cloud architectures, isolated service changes frequently create cascading outages:

• An alteration to database schemas or JWT token verification logic in a core service can silently disrupt downstream services.
• Code reviewers often lack topological awareness of which services, teams, or on-call responders will be impacted.
• SRE teams spend valuable MTTR minutes locating emergency Confluence runbooks and past Jira incident post-mortems after an outage occurs.

BlastRadius Sentinel addresses this gap by shifting blast radius evaluation left into the developer workflow.

---

3. Key Architectural Pillars

A. Atlassian Rovo Agent (rovo:agent)

Configured natively in manifest.yml:

• System prompt instructs the agent to analyze pull requests, traverse service relationships, and recommend concrete canary deployments.
• Conversation starters enable fast queries directly inside Rovo Studio.
• Bound to three custom Forge actions:
  • calculate-blast-radius-action
  • query-teamwork-graph-action
  • correlate-runbooks-action

B. Atlassian Model Context Protocol Server (rovo:mcp & webtrigger)

Exposes tools and resources via standard JSON-RPC 2.0:

• Declared under rovo:mcp for native Rovo tools catalog integration.
• Exposed via a Forge webtrigger dynamic endpoint for IDE clients (Claude Desktop, Cursor, Rovo Dev CLI).
• Tools supported:
  • calculate_blast_radius
  • query_teamwork_graph
  • correlate_runbooks
  • simulate_incident_mitigation
• Resources supported: twg://graph/topology, twg://runbooks/all, twg://incidents/historic.

C. Atlassian Teamwork Graph API (Cypher + GraphQL)

• Uses @forge/api (requestTeamworkGraph) with Cypher queries to traverse dependency edges between microservices, teams, and on-call schedules.
• Maps direct versus transitive dependencies across service tiers (Tier 1 core vs Tier 2/3 auxiliary).

D. Jira Issue Panel (jira:issuePanel)

• Renders an interactive SRE panel directly on Jira incident tickets (render: native).
• Displays live blast radius scores, affected microservice counts, estimated MTTR, and links to verified Confluence mitigation runbooks.

---

4. Deterministic Scoring Logic

Unlike unconstrained LLM estimations, BlastRadius Sentinel uses deterministic mathematical evaluation:

• Code Sensitivity (0–45 pts): Evaluates file paths against sensitive domains (Database migrations, Auth/Security, Infrastructure configs, Billing).
• Topology Exposure (0–40 pts): Weighted score based on direct vs transitive dependencies and service tiers.
• Incident Recurrence Penalty (0–15 pts): Historical penalty for components involved in previous Sev-1/Sev-2 outages.
• Risk Tiers:
  • LOW (0–29): Standard rolling release.
  • MEDIUM (30–59): Recommended canary verification.
  • HIGH (60–84): Mandatory 3-stage canary rollout (2% -> 25% -> 100%).
  • CRITICAL (85–100): Production deployment blocked pending Tier-1 on-call sign-off.

---

5. Verification & Test Suite

The project includes a comprehensive test suite executed with Node's native test runner (node --test tests/test_forge_app.mjs):

• 24 tests across 4 test suites:
  • Scoring engine pattern matching and calculation.
  • Teamwork Graph Cypher traversal and queries.
  • MCP JSON-RPC 2.0 protocol compliance (initialize, tools, resources, prompts).
  • Forge action handlers, Jira issue panel resolvers, and webtrigger HTTP endpoints.
• 100% test pass rate with zero external dependencies.

---

6. Deliverables Included

• Manifest: manifest.yml with valid Forge syntax.
• Source Code:
  • src/index.js: Action resolvers, issue panel handler, webtrigger.
  • src/blast_radius.js: Deterministic risk calculation.
  • src/twg_graph.js: Teamwork Graph Cypher client.
  • src/mcp_handler.js: Model Context Protocol server.
• Test Suite: tests/test_forge_app.mjs.
• Interactive Simulator: docs/index.html.
• Thumbnail: assets/thumbnail_1280x800.png.
• Demo Video: assets/demo_codegeist_1080p.mp4 (40s, 1080p, 30fps).
• License: MIT License.

Built With

• atlassian-forge
• docker
• github-actions
• node.js
• rovo-mcp
• typescript