Agent Autonomy is the page where you pick what each agent is allowed to do without a human. Four tiers: shadow (logs only), suggest (writes runbooks), auto-rollback (acts but auto-reverts on regression), full auto. Promotions are slow, demotions are fast. Operators can override either way.
Shadow: agent observes, reasons, writes to memory; never proposes an action to a tool. Suggest: agent writes a runbook for a human to run; never executes itself. Auto-rollback: agent executes, but if Ground-Truth Verifier fails at T+5m, the platform automatically reverts. Full auto: agent executes without auto-revert, only used for low-risk actions on agents with high trust.
Promotion requires three things: a minimum trust score (50 for suggest, 70 for auto-rollback, 90 for full auto), a minimum sample size (verified actions in the last 30 days), and an operator approval. There is no auto-promotion ever. Operators see a "ready for promotion" badge but the click is theirs.
Demotion is automatic and immediate. Three regressions in 7 days demote the agent one tier. A high-severity regression (caused or worsened a sev-1) demotes by two tiers. Trust drops below the tier floor demotes immediately. The asymmetry is intentional: trust takes weeks to earn, seconds to lose.
Sometimes an agent is great at one class and unproven at others. Per-class overrides let you set different tiers per class on the same agent. log-triager full-auto on "route alerts to teams" but only suggest on "summarize for postmortem." The override is captured in config and visible on the agent's autonomy detail page.
Subscribe to Nova AI Ops on YouTube for demos, tutorials, and feature deep-dives.
Adopting AI for ops is a series of small "let it do that" decisions. Autonomy tiers are how you make them deliberate.