Governor risk-sized autonomy for GitLab Duo agents

Every change an agent makes gets autonomy sized to its risk: low-risk changes ship on their own, risky ones get fewer privileges and more verification.

T0 docs T1 low T2 elevated T3 high (restricted agent, dark launch) T4 refused

Hash chain verified: 230 entries

fix(governor): a dark launch only soaks once the canary shows the flag on

T1live

commit c182de9b · 12 Oct 16:25:06 to 12 Oct 16:30:08 (5 min 02 s) · 7 ledger entries · raw JSON

Run timeline

Issue

skipped

Triage

skipped

Delivery

skipped

Pipeline

16:25:06

Canary

16:25:08
4 min 59 s

Promoted

16:30:07

Close

not reached

GitLab DevSecOps stages this run touched

Tier and evidence

Tier T1, 2 points. A signal's floor sets a minimum tier; points add to it. No LLM is in this decision.

SignalDetailPointsFloor
lines_changed72 lines1
touched_line_coverageunknown, +1 (no coverage data yet, so the scorer assumes worse)1

Human actions

None. No person acted on this run after it started.

Ledger entries

TimeEntryKindWhat happened
Pipeline
16:25:06L93-8aa90e8d74bbtier_computedtier T1 (2 points, scorer v1)
Canary
16:25:08L94-a1b9f59a5714traffic_shift25% of traffic to app-00051-raf, soak 5 min
16:30:07L95-d9841e8b472dslo_checkSLO ok: 50 samples, 0 errors, p95 85.8 ms at 25%
Promote / roll back
16:30:07L96-6b81f0d9dcfbtraffic_shift100% of traffic to app-00051-raf
16:30:08L97-4c152d5ef029slo_checkSLO insufficient: 10 samples, 0 errors, p95 69.6 ms at 100%
16:30:08L98-540a89469106promotedapp-00051-raf promoted to 100% (flag off)
16:30:08L99-9ceea36b3182release_outcomerelease outcome: clean_release