Governor risk-sized autonomy for GitLab Duo agents

Every change an agent makes gets autonomy sized to its risk: low-risk changes ship on their own, risky ones get fewer privileges and more verification.

T0 docs T1 low T2 elevated T3 high (restricted agent, dark launch) T4 refused

Hash chain verified: 230 entries

revert: [demo] injected regression (Gate 4 run 1 stopped in CI lint)

T1live

commit ac2d27a9 · 12 Oct 15:27:06 to 12 Oct 15:32:09 (5 min 03 s) · 7 ledger entries · raw JSON

Run timeline

Issue

skipped

Triage

skipped

Delivery

skipped

Pipeline

15:27:06

Canary

15:27:07
5 min 00 s

Promoted

15:32:08

Close

not reached

GitLab DevSecOps stages this run touched

Tier and evidence

Tier T1, 0 points. A signal's floor sets a minimum tier; points add to it. No LLM is in this decision.

SignalDetailPointsFloor

Human actions

None. No person acted on this run after it started.

Ledger entries

TimeEntryKindWhat happened
Pipeline
15:27:06L75-4e4aff95ee08tier_computedtier T1 (0 points, scorer v1)
Canary
15:27:07L76-d2739d82c2actraffic_shift25% of traffic to app-00045-zeq, soak 5 min
15:32:08L77-84b928a6cfb6slo_checkSLO ok: 50 samples, 0 errors, p95 76.4 ms at 25%
Promote / roll back
15:32:08L78-453c24d51538traffic_shift100% of traffic to app-00045-zeq
15:32:09L79-4fedf40464dcslo_checkSLO insufficient: 10 samples, 0 errors, p95 71.7 ms at 100%
15:32:09L80-b3366ee7df77promotedapp-00045-zeq promoted to 100% (flag off)
15:32:09L81-f1fcacc61233release_outcomerelease outcome: clean_release