Autonomy action classes

An action class is the unit autonomy is set on: a kind of externally visible act rather than a feature or an agent. Nine classes exist, and each carries its own level. For what the levels mean, see the autonomy ladder.

The nine classes

Locked means the level cannot be raised by anyone, through any route. It is refused in code rather than configured.

Class	Covers	Ships at	Locked
content.draft	Drafting content that stays inside your workspace	L3 act within policy
publish.cms	Publishing to a site or content system	L1 approve each
publish.social	Posting to a social account	L1 approve each
publish.email	Sending bulk email	L1 approve each
crm.write	Writing to customer records	L1 approve each
task.delegate	Agent-created tasks handing work to other agents	L1 approve each
task.dispatch	Starting a run when a task is assigned to an agent	L1 approve each
proposal.accept.low_risk	Accepting low-risk proposals without you	L1 approve each
ad.spend	Spending money on advertising	L1 approve each	locked at L1

content.draft is the only class that ships above L1, because a draft nobody outside your workspace can see is not an act you need to pre-approve. Everything externally visible starts at L1 and stays there until you raise it.

Raising a class

A level is never raised by the system. An agent may only propose a graduation, and a proposal is only offered once the class has a track record that clears every part of this bar:

Bar	Value
Recorded actions in the window	20 or more
Approval rate	95% or better
Incidents in the window	0
Window	The last 30 days

Clearing the bar produces a proposal in your approvals queue. Accepting it raises the class by one step. Nothing is raised two steps at once, and nothing is raised without that acceptance.

A locked class never clears the bar

ad.spend accumulates a track record like any other class, and the raise is still refused. The lock is not a threshold.

Losing a level

Two things pull a class back down one step, immediately and without asking:

• An incident on that class. Recording an action with an incident outcome opens an incident and demotes the class in the same move.
• A guard breach. More than 5 automatic executions of one class in 24 hours is treated as a runaway, not a busy day. The class drops a level and an incident opens.

Demotion is always one step: L3 goes to L2, and L2 goes to L1. L1 is the floor.

What a track record counts

Every governed action leaves a record with one of these outcomes. The approval rate above is computed from them.

Outcome	Means
approved	You approved the proposed action
rejected	You rejected it
executed_ok	The agent acted under L2 or L3 and it worked
executed_failed	The agent acted and the action failed
reverted	The action was undone after the fact
incident	The action caused an incident, which demotes the class

Next steps

• The autonomy ladder: what each level means in practice.
• Marketing autonomy: raising a class with evidence, screen by screen.
• Incidents: what opens one and how to close it.