Autonomy levels L0–L4
From every decision requiring human approval (L0), to a low-risk-auto / high-risk-approval split (L2), to self-evolution (L4) — stepwise, at the organization's pace.
The first promise of an enterprise AI operating system is that it can be stopped.
Autonomy levels · approval gates · rollback·audit trail · budget guard · Kill Switch are part of the core skeleton, not features.
From every decision requiring human approval (L0), to a low-risk-auto / high-risk-approval split (L2), to self-evolution (L4) — stepwise, at the organization's pace.
"Who, when, on what grounds, and which alternative was chosen" is linked 1:1 to every execution. Available instantly on audit request.
Every executed decision carries a restore plan. Price, exposure, campaign and segment decisions revert to the previous state in one click.
When anomalies, budget overrun or user reports cross a threshold, only that Agent stops immediately. Other operational flows are unaffected.
Start at L0 and widen autonomy only as much as KPI evidence accumulates. Policy, legal and high-risk decisions remain the human domain at every level.
AI only proposes. Every execution is performed by a human.
For low-risk, structured tasks, AI drafts and a human approves.
Low-risk decisions run automatically; high-risk ones split off into the approval queue.
Mostly automatic execution. Only high-risk, policy and legal decisions are made by a human.
Execution patterns, validated by KPI evidence, self-evolve into the default for the next plan.
Enterprises don't need fast automation — they need reversible automation. Here's how a generic AI and AXCommerce diverge when things fail.
With execution evidence scattered, tracing the cause is hard, and reversing means manually restoring data.
Every R2+ execution carries idempotency · audit · before/after snapshots · a rollback plan. If something's wrong, one click returns to the previous state.
Every decision, execution, approval and rollback is logged automatically. AI Agent memory stores no raw PII, secrets or full logs — only summaries, owner, retention period, tenant scope and evidence references are allowed.