The Hunt for an Open Source AI Workflow Tool

I wanted to build a SOC agent. Nothing exotic. Something that picks up an alert, investigates it across the tools we already run, and tells me what it found. And for the workflows where it wants to change something - update a WAF rule, delete a resource - it stops and asks a human first. I thought the hard part would be the agent. It was finding something to orchestrate it.