Target Context
Permission Layers
In regulated environments, not everyone who uses the system should be able to direct AI actions.
Separation of duties is a key control in financial and healthcare systems.
Confidence-Gated Autonomy
How much should the agent's confidence level affect its autonomy?
Above this confidence, agent can act with minimal oversight
In this range, agent queues actions for human review
Below medium threshold, agent blocks and requests explicit approval
| Confidence | Low Risk | High Risk |
|---|---|---|
| High (>90%) | Auto-execute | Execute + notify |
| Medium (70-90%) | Queue for review | Require approval |
| Low (<70%) | Require approval | Block + escalate |
Operational Guardrails
Additional constraints independent of confidence
Restrict autonomous execution to 9 AM - 6 PM local time
Maximum autonomous actions per hour
Maximum records affected per action
Actions exceeding this require additional approval
Flag actions involving PII, financial data, or health records
Actions touching sensitive fields require approval regardless of confidence
This agent can be instructed by Admin and Developer. It can read all data and create records, update records, but cannot delete.
Actions above 90% confidence will auto-execute if they affect fewer than 10 records. All other write actions require manager approval.
Autonomous execution is limited to business hours and 20 actions per hour.