Governor risk-sized autonomy for GitLab Duo agents

Every change an agent makes gets autonomy sized to its risk: low-risk changes ship on their own, risky ones get fewer privileges and more verification.

T0 docs T1 low T2 elevated T3 high (restricted agent, dark launch) T4 refused

Hash chain verified: 232 entries

fix(orchestrator): act on a pushed commit's revision only after its deploy job succeeds

-no app change

commit 61b2d2a8 · 12 Oct 19:34:05 to 12 Oct 19:34:05 (0 s) · 1 ledger entries · raw JSON

Run timeline

Issue

skipped

Triage

skipped

Delivery

skipped

Pipeline

19:34:05

Canary

not reached

Promote / roll back

not reached

Close

not reached

GitLab DevSecOps stages this run touched

Plan

not touched

Create

not touched

Verify

commit 61b2d2a8 pipelines

Package

commit 61b2d2a8 pipelines

Secure

commit 61b2d2a8 pipelines

Release

not touched

Configure

not touched

Monitor

not touched

Govern

not touched

Tier and evidence

No tier decision recorded for this run.

Human actions

None. No person acted on this run after it started.

Ledger entries

TimeEntryKindWhat happened
Pipeline
19:34:05L167-d06c413e0ecbapp_unchangedno app inputs changed since e6202d02 (22 files)