Governor risk-sized autonomy for GitLab Duo agents

Every change an agent makes gets autonomy sized to its risk: low-risk changes ship on their own, risky ones get fewer privileges and more verification.

T0 docs T1 low T2 elevated T3 high (restricted agent, dark launch) T4 refused

Hash chain verified: 230 entries

fix(app): strip whitespace from the Unleash instance ID

T1live

commit d7daa7de · 12 Oct 16:31:06 to 12 Oct 16:37:08 (6 min 02 s) · 7 ledger entries · raw JSON

Run timeline

Issue

skipped

Triage

skipped

Delivery

skipped

Pipeline

16:31:06

Canary

16:31:09
5 min 58 s

Promoted

16:37:07

Close

not reached

GitLab DevSecOps stages this run touched

Tier and evidence

Tier T1, 1 points. A signal's floor sets a minimum tier; points add to it. No LLM is in this decision.

SignalDetailPointsFloor
touched_line_coverageunknown, +1 (no coverage data yet, so the scorer assumes worse)1

Human actions

None. No person acted on this run after it started.

Ledger entries

TimeEntryKindWhat happened
Pipeline
16:31:06L100-d2fb6dc96c90tier_computedtier T1 (1 points, scorer v1)
Canary
16:31:09L101-f2c77212b7e5traffic_shift25% of traffic to app-00054-qav, soak 5 min
16:37:07L102-66aec8a0cdf4slo_checkSLO ok: 60 samples, 0 errors, p95 240.4 ms at 25%
Promote / roll back
16:37:07L103-26a6dd32470btraffic_shift100% of traffic to app-00054-qav
16:37:08L104-6de102c66daeslo_checkSLO insufficient: 10 samples, 0 errors, p95 33.4 ms at 100%
16:37:08L105-422eec93aaebpromotedapp-00054-qav promoted to 100% (flag off)
16:37:08L106-d97baf2d12eerelease_outcomerelease outcome: clean_release