Autonomy and the hard floor

Business-Gym runs at about level 2 today — supervised, and propose-only. The control loop ticks on its own, drafts proposals, and puts them in your approval queue. It does not act on the consequential ones. Underneath every level sits a hard floor of four risk classes that stay human no matter how high the dial goes.

Where does Business-Gym actually sit today?

At roughly L2, supervised. The loop runs by itself: it ticks, it works, it writes proposals into the approval queue. What it does not do is execute the decision for you.

Every Head enrolled today is on the supervised setting. L4 has not been reached. L5 is not something the product is trying to get to.

What is the hard floor?

Four classes of action that never auto-graduate, at any level, on any dial setting:

• Move money
• Sign legally
• Send external customer communication — customer email, Teams, public posts
• Change permissions

This is a design invariant, not a current default. Raising a level does not raise the floor with it.

Tip

You do not need to track what level anything is on to know what is safe. Ask instead: is this action in one of the four risk classes? If yes, a human does it — whatever the level says.

What does the ladder look like?

The L0–L5 autonomy ladder: Business-Gym sits at about L2, supervised and propose-only, and the four risk classes below the hard floor — move money, sign legally, send external customer comms, change permissions — stay human at every rung.

What can I set per Head?

Each Head has its own autonomy dial with three positions: off, supervised, auto.

• off — that Head does not run.
• supervised — it works and proposes; you decide. This is where all 10 enrolled Heads sit today.
• auto — the third position on the dial. No enrolled Head is on it.

Caution

Moving a Head up the dial does not move the floor. Money, legal signatures, external customer communication and permission changes stay human regardless of the setting.

What happens if something goes wrong?

The mode a Head actually runs at is a computed value — effectiveAutonomyMode — not just whatever the dial says. If a panic switch is thrown or an automatic rollback fires, that value folds back down to supervised.

The failure direction is toward proposing, not toward acting.

What about L3, L4 and L5?

They are designed, not available. The ladder above L2 describes where the product is going, not what your team can do today, and this page will say so until that changes.

• L3 and L4 exist in the design of the ladder. L4 has not been reached, and neither is behaviour you can switch on today.
• L5 is deliberately not a target. It is on the ladder as the end of the scale, not as a roadmap item.

Treat anything above L2 in this page as a description of the shape of the ladder — not of what the product does for you right now.

Next: read how work reaches you in the first place in the inbound → approve → execute loop, or meet the department heads that carry these dials.