CogniDev Workbench

From intent to
proven code.

Open a repository and the whole system is read first: the layers, the flows, and where a change will land. The workbench then proposes the work, writes the plan, builds it task by task and produces the evidence. Every gate is yours to approve.

Runs on your machine. Works with any model. Shared across your team.

Desktop app CLI Docker

The same playbooks, analysis and reports on all three.

01 · Capabilities

What we can do

Each area below is covered by a playbook: a defined process, with the stacks it has been proven on.

Greenfield

Start a new service with its architecture, tests, CI and delivery already in place.

Next.js · Java · .NET · Go · Rust · Scala · Node · Python · Terraform

Domain blueprints

Begin from an industry model rather than an empty repository. The capabilities, entities and business flows are already defined.

Capital Markets — 50 capabilities across 7 desk areas · custom blueprints on any runtime

Understand & document

Map an undocumented system: layers, flows, use cases, routes, data model and call graph, each traced to the files it comes from.

Java · .NET · Node / TypeScript · Python · Go · Rust · Scala · COBOL · RPG · CL · DDS · C · C++ · SQL

Feature work

Add to an existing codebase following its own layers and conventions, with tests and wiring included.

Next.js · Java · .NET · Go · Rust · Scala · Terraform

Vibe-code rescue

Bring an AI-generated prototype up to a standard a team can maintain: structure, code quality, tests, lint, CI, documentation and deployment. Issues are repaired and re-checked, not only reported.

Ten checks, each one fixed and verified before the next

Modernization

Move framework and language versions forward on the same system, with the build passing at every step.

Java → current LTS · .NET → latest · AngularJS → Angular 22 · Scala · dependency uplift

Migration

Move a system onto a supported stack. Behaviour is carried across and verified as equivalent.

COBOL → Java · COBOL → .NET · IBM i (RPG, CL, DDS) → .NET or Java · VBScript / classic ASP → .NET 10 · AngularJS → React

Decomposition

Split a monolith along boundaries derived from the code: services, contracts, data ownership and the transactions between them.

Java · .NET · Node / TypeScript · Python

Data & databases

Move a schema between dialects, move or transform the data behind it, and bring logic held in stored procedures into application code.

Dialect → dialect · data movement · stored procedures → .NET · schema and data-access mapping

APIs & contracts

Expose an API over an existing domain, or bring the APIs you already have under a single governed contract.

API-first for .NET · expose over an existing domain · API Studio · contract governance

Testing & proof

Build the test coverage a system is missing, and verify a migration by comparing the new system's behaviour against the original.

Selenium → Playwright · tests → Gherkin · equivalence checks · test data · coverage gates

Security & governance

Score every repository and enforce thresholds in CI. Findings are ranked by reachability, so the list stays actionable.

Secrets · CVEs / SBOM · SAST · OWASP Top 10 · scorecards · SOC 2 · HIPAA · PCI-DSS · GDPR · ISO 27001

Each run produces a branch, one commit per verified task, and a report committed alongside your code. See the full library →

02 · Method

How we do it

Every capability above runs as a playbook: a versioned process that defines the steps, the approval gates, the tools it runs and the standards it enforces. The same job runs the same way from the desktop app, the command line or CI.

Playbook structure

Playbook
Tools it runs
What it knows
Architecture Rules Standards References Prior runs

Every run, the same six gates

  1. 1

    Understand

    The structural map, and a plain-language statement of what the codebase is and does.

  2. 2

    Propose

    The options the code supports, each with the evidence that qualified it.

  3. 3

    Plan

    A file-level plan, written down before anything changes.

  4. 4

    Approve

    You read the plan and approve it. Nothing is written until you do.

  5. 5

    Execute

    Task by task. Each one compiles and typechecks before it lands, one commit per passing task.

  6. 6

    Prove

    A report of files, commits, tasks and checks. The work lands as a pull request and is never auto-merged.

Delivery and updates

Design

Each playbook is authored in advance: the ordered steps, the approval gates, the tools it may run, the standards it enforces and the questions it is permitted to ask. None of it is decided at run time.

Injection

Your architecture rules, reference implementations and coding standards are placed alongside a playbook, and the run is held to them. The playbook itself is not forked or rewritten.

Auto-injection

Opening a folder reads the code before anything is offered. Only the playbooks the evidence supports are listed, each with the reason it qualified. Nothing runs until one is selected.

Self-updating

Playbooks are versioned and signed, and are delivered over the air. A correction authored once reaches every installation without a reinstall, and each run records the version it used.

Where the token cost goes

How much this saves depends on the repository, so the workbench meters it rather than quoting a figure: every call reports its tokens and its cost against the step that made it.

Desktop app, command line, Docker, or called as a skill by a coding agent — the same playbook, the same output. Models are your own: Anthropic, Bedrock, Copilot, OpenRouter, z.ai, Kimi, or any OpenAI-compatible endpoint, including Ollama and vLLM on your own hardware. Nothing leaves the machine you ran it on.

03 · Comparison

How this differs

Assistants and agent skills both put a model in charge of the whole run, so the same request can produce a different result each time. A playbook keeps the process fixed and calls the model where judgement is actually needed.

CogniDev WorkbenchA playbook AI coding assistantsCursor · Copilot · Windsurf Agent skillsClaude Skills · MCP skills
Unit of workA playbook — a versioned process with ordered steps and approval gatesA promptA set of instructions the model reads and interprets
What drives the runThe playbook. The model is called at the steps that need judgement, inside a fixed processThe model, end to endThe model, end to end
Same input, same resultYes. The map, the options and the plan are derived from the codeNoNo
ArchitectureProven industry architectures, selected per project, with the trade-offs recordedWhatever the prompt describesWhatever the instructions describe
Scaffolding and code generationDedicated parsers and generators, versioned with the playbookGenerated textGenerated text
Token costPaid once for understanding, then per judgement call, metered per stepRe-paid on every prompt, by every developerRe-paid on every invocation
Codebase understandingParsed and written to disk, updated incrementally, shared across the teamRetrieved per prompt, discarded afterRetrieved per invocation, discarded after
Your standards and referencesInjected alongside the playbook and enforced at every gatePasted into the promptWritten into the instructions
Long-running workResumable, verified per task, one commit per passing taskOne conversation at a timeOne session at a time
What a reviewer receivesThe plan, per-task commits, a verification log and a reportA chat transcriptA chat transcript
Unattended runsCommand line and Docker — the same playbook, the same outputInteractiveDepends on the host

The difference is where the model sits: inside a defined process, at the steps that need judgement, rather than driving the run from end to end.

Get started

Run a playbook on your repository.

Tell us your stack and what you need done, and we will point you at the right playbook.