Governor risk-sized autonomy for GitLab Duo agents

Every change an agent makes gets autonomy sized to its risk: low-risk changes ship on their own, risky ones get fewer privileges and more verification.

T0 docs T1 low T2 elevated T3 high (restricted agent, dark launch) T4 refused

Hash chain verified: 230 entries

feat(governor): export OpenTelemetry from the governor service

T2live

commit 351282d6 · 12 Oct 14:13:07 to 12 Oct 14:24:08 (11 min 01 s) · 7 ledger entries · raw JSON

Run timeline

Issue

skipped

Triage

skipped

Delivery

skipped

Pipeline

14:13:07

Canary

14:13:07
11 min 00 s

Promoted

14:24:07

Close

not reached

GitLab DevSecOps stages this run touched

Tier and evidence

Tier T2, 4 points. A signal's floor sets a minimum tier; points add to it. No LLM is in this decision.

SignalDetailPointsFloor
dependency_manifestpyproject.toml, uv.lock0T2
lines_changed282 lines3
touched_line_coverageunknown, +1 (no coverage data yet, so the scorer assumes worse)1

Human actions

None. No person acted on this run after it started.

Ledger entries

TimeEntryKindWhat happened
Pipeline
14:13:07L58-4bb00074640btier_computedtier T2 (4 points, scorer v1)
Canary
14:13:07L59-4e023a25fa87traffic_shift10% of traffic to app-00038-mar, soak 10 min
14:24:07L67-40268b85bdbbslo_checkSLO ok: 110 samples, 0 errors, p95 37.3 ms at 10%
Promote / roll back
14:24:07L68-6e0d4787bac8traffic_shift100% of traffic to app-00038-mar
14:24:07L69-c0c2226cfa62slo_checkSLO insufficient: 10 samples, 0 errors, p95 61.4 ms at 100%
14:24:08L70-b3ed849d06a1promotedapp-00038-mar promoted to 100% (flag off)
14:24:08L71-df17974c89c1release_outcomerelease outcome: clean_release