Governor risk-sized autonomy for GitLab Duo agents

Every change an agent makes gets autonomy sized to its risk: low-risk changes ship on their own, risky ones get fewer privileges and more verification.

T0 docs T1 low T2 elevated T3 high (restricted agent, dark launch) T4 refused

Hash chain verified: 230 entries

Add GET /stats endpoint

T1live, issue closed

issue #6 · 12 Oct 13:10:05 to 12 Oct 13:43:06 (33 min 01 s) · 20 ledger entries · raw JSON

Run timeline

Issue

13:10:05

Triage

13:10:06
1 min 02 s

Delivery

13:12:06
6 min 05 s
problem

Pipeline

13:19:07
15 min 58 s

Canary

13:36:06

Promoted

13:41:06

Close

13:43:06

Tier and evidence

Tier T1 (prior from triage: T1), 1 points. A signal's floor sets a minimum tier; points add to it. No LLM is in this decision.

SignalDetailPointsFloor
touched_line_coverageunknown, +1 (no coverage data yet, so the scorer assumes worse)1

Human actions

None. No person acted on this run after it started.

Ledger entries

TimeEntryKindWhat happened
Issue
13:10:05L36-ae1511ab6aadissue_seenissue opened: Add GET /stats endpoint
Triage
13:10:06L37-576acf47fccfflow_requestedtriage flow requested
13:10:07L38-3f27b0cfae76flow_startedsession 9326423 started; session privileges [1,2,3,4,5,6,7]
13:11:08L39-d10b7319300dprior_tierprior tier T1 from triage labels area::app, type::feature
Delivery
13:12:06L40-38c634359366flow_requesteddelivery flow requested, tier T1
13:12:08L41-06838050f581flow_startedsession 9326516 started; session privileges [1,2,3,4,5]
13:15:07L43-096c12a1be21delivery_faileddelivery session 9326516 ended failed
13:16:11L44-3847478f8a06flow_requesteddelivery flow requested, tier T1
13:16:12L45-677287127e1dflow_startedsession 9326761 started; session privileges [1,2,3,4,5]
13:18:11L46-5fef5103c6b6mr_openedMR !3 opened on gov/issue-6-2
Pipeline
13:19:07L47-26aa81adfafatier_computedtier T1 (1 points, scorer v1)
13:20:09L48-e50ff67e18cfpipeline_startedpipeline 2938844705 started: RISK_TIER=T1
13:23:06L49-cd36664a5771pipeline_finishedpipeline 2938844705 finished: success
13:24:09L50-73a873f23d2fmergedMR !3 merged as 535a9a3e
13:35:05L51-1d852e9cc43cdeployedrevision app-00032-keg deployed with no traffic (pipeline 2938858923)
Canary
13:36:06L52-4dce0f6ecc22traffic_shift25% of traffic to app-00032-keg, soak 5 min
Promote / roll back
13:41:06L53-30d642be11b0traffic_shift100% of traffic to app-00032-keg
13:41:06L54-2e08376f4ddbpromotedapp-00032-keg promoted to 100% (flag off)
13:41:06L55-37b8c1cc0ee0release_outcomerelease outcome: clean_release
Close
13:43:06L56-fe81ae4901c6issue_closed_by_governorissue #6 closed by the governor after app-00032-keg went live