Governor risk-sized autonomy for GitLab Duo agents

Every change an agent makes gets autonomy sized to its risk: low-risk changes ship on their own, risky ones get fewer privileges and more verification.

T0 docs T1 low T2 elevated T3 high (restricted agent, dark launch) T4 refused

Hash chain verified: 230 entries

revert: [demo] injected regression (Gate 4 run 2)

T3live

commit dffd77e9 · 12 Oct 16:38:09 to 12 Oct 16:59:08 (20 min 58 s) · 8 ledger entries · raw JSON

Run timeline

Issue

skipped

Triage

skipped

Delivery

skipped

Pipeline

16:38:09

Canary

16:38:11
20 min 56 s

Promoted

16:59:07

Close

not reached

GitLab DevSecOps stages this run touched

Tier and evidence

Tier T3, 1 points. A signal's floor sets a minimum tier; points add to it. No LLM is in this decision.

SignalDetailPointsFloor
auth_or_secretsapp/users.py0T3
touched_line_coverageunknown, +1 (no coverage data yet, so the scorer assumes worse)1

Human actions

None. No person acted on this run after it started.

Ledger entries

TimeEntryKindWhat happened
Pipeline
16:38:09L107-05d076909d4ftier_computedtier T3 (1 points, scorer v1)
Canary
16:38:11L108-a320b6f4e582flag_not_usedflag t3_dark_launch kept off: the change removes flag-gated code; the flag stays off so the stable revision's gated path stays dark, and the canary does not read the flag
16:38:11L109-e64c10b7efdbtraffic_shift1% of traffic to app-00056-dar, soak 20 min
16:59:07L110-b1e64359539dslo_checkSLO ok: 210 samples, 0 errors, p95 65.2 ms at 1%
Promote / roll back
16:59:07L111-ee1f94c091dbtraffic_shift100% of traffic to app-00056-dar
16:59:07L112-89cd30a350fcslo_checkSLO insufficient: 10 samples, 0 errors, p95 67.2 ms at 100%
16:59:08L113-7b8c73670db1promotedapp-00056-dar promoted to 100% (flag off)
16:59:08L114-01fa27d2c157release_outcomerelease outcome: clean_release