Governor risk-sized autonomy for GitLab Duo agents

Every change an agent makes gets autonomy sized to its risk: low-risk changes ship on their own, risky ones get fewer privileges and more verification.

T0 docs T1 low T2 elevated T3 high (restricted agent, dark launch) T4 refused

Hash chain verified: 230 entries

[demo] injected regression

T3rolled back

commit e0574f5a · 12 Oct 17:19:06 to 12 Oct 17:23:07 (4 min 01 s) · 9 ledger entries · raw JSON · related: issue 11

Run timeline

Issue

skipped

Triage

skipped

Delivery

skipped

Pipeline

17:19:06

Canary

17:19:08
54 s

Rolled back

17:22:07
problem

Close

17:23:07
problem

GitLab DevSecOps stages this run touched

Tier and evidence

Tier T3, 1 points. A signal's floor sets a minimum tier; points add to it. No LLM is in this decision.

SignalDetailPointsFloor
auth_or_secretsapp/users.py0T3
touched_line_coverageunknown, +1 (no coverage data yet, so the scorer assumes worse)1

Human actions

None. No person acted on this run after it started.

Ledger entries

TimeEntryKindWhat happened
Pipeline
17:19:06L118-75fa3af32941tier_computedtier T3 (1 points, scorer v1)
Canary
17:19:08L119-f9d8833a6245flag_onfeature flag t3_dark_launch turned on
17:19:08L120-1487b5a99ea9traffic_shift1% of traffic to app-00063-suh, soak 20 min
17:20:01L121-3b9e3bde9259flag_checkcanary flag check 1: on
Promote / roll back
17:22:07L122-ea07cd591a31slo_breachSLO breach: error rate 15% > 5% (3/20)
17:22:07L123-fdeb2820b472rolled_backrolled back from app-00063-suh to app-00056-dar
17:22:08L124-6ebd0dee2e4eflag_offfeature flag t3_dark_launch turned off
17:22:08L125-bd39242e0073release_outcomerelease outcome: rollback
Close
17:23:07L127-d7012a3ca2ecstopstopped: SLO breach; rolled back and opened incident #11.