Autonomy with limits
Decide how much the agent can do on its own with a fixed rule, not intuition.
What it is
Autonomy is how much the agent can do without asking for your permission. The Agent Sheet uses five steps: N0 Consults (only researches and answers), N1 Recommends (prepares drafts and suggestions), N2 Prepares, you approve (gets everything ready, but nothing leaves without your OK), N3 Executes (acts on its own and reports back) and N4 Manages processes (runs an entire process, with a report and alarms). Each step above removes you from a decision and demands more control.
Why learn
The most common mistake is giving the agent the maximum step on day one, because the demo looked great. The ladder replaces the question “Do I trust the AI?” with “What evidence do I have for this step?”. It also names what you agree on with the team: “this agent is N2” says exactly what it can and can’t do.
Key concepts
- N0 Consults: research and answer only—doesn’t touch anything.
- N1 Recommends: prepares and suggests—the decision is yours.
- N2 Prepares and you approve: nothing goes out without your explicit OK.
- N3 and N4: executes on its own or runs the process, reporting back.
What it is
The rule starts with the action: consult becomes N0, preparation becomes N1, execution becomes N3, coordinating a process becomes N4. Then comes the brake: if the level is 3 or higher and the task involves money, something irreversible, or people from outside, the level drops to N2. Irreversible is what can’t be undone—like a sent message or a deleted file. People from outside means anyone outside the team: customer, patient, supplier, family.
Why learn
These three risks are what turn a small error into losses, complaints, or a legal issue. An internal mistake you fix before anyone sees it; a wrong message sent to 200 patients doesn’t come back. That’s why it doesn’t matter how good the agent is: with any of the three, it prepares and you approve.
Key concepts
- Money: discount, refund, charge, budget, proposal.
- Irreversible: send, publish, delete, cancel.
- People from outside: customer, patient, student, family, supplier.
- Brake: any one of the three is enough to block and keep it at N2.
What it is
An official source is the place the agent must treat as truth: the system’s agenda, the orders dashboard, the discipline syllabus. The rule has a second brake: if the level is above N1 and you haven’t defined the official source, it drops to N1. Without knowing where the truth is, the agent can only suggest, never act. This applies even to internal tasks with none of the three risks.
Why learn
An agent without a defined source fills in the gaps with what seems plausible: an old spreadsheet, a WhatsApp message, a guess. When it only suggests, you catch the mistake before it becomes an action. When it executes, the guess becomes the wrong purchase request or false information to the customer. Defining the source is what unlocks action—not the model’s quality.
Key concepts
- Official source: the only place that counts as truth.
- Doesn’t count: something that looks like a source, but isn’t, like an old spreadsheet.
- If it’s missing: warn and don’t invent.
- Brake: without a source, any level above N1 drops to N1.
What it is
Prohibitions are a short list of things the agent does not do on its own at any level, even if someone asks insistently. They work like guardrails—a protective barrier: the agent can move freely within the lane, but it doesn’t cross the wall. Each prohibition needs to come with what to say when someone requests it, so the agent can refuse without being rude and pass the case to you.
Why learn
The level says how much it can do; the prohibitions say where it never goes. Without them, a polite customer can get a discount, a student can get a grade early, and someone can get a volunteer’s phone number. And without the refusal phrase, the agent either gets stuck or improvises an excuse. Prohibitions are also the first test before you activate the agent.
Key concepts
- Short list: 3 to 5 prohibitions—the ones that cost the most if they happen.
- Concrete verb: “give a discount,” not “be careful with prices.”
- Refusal phrase: what it says when someone asks.
- Escalate to you: every refusal becomes a note in the report.
What it is
The level isn’t final: it goes up when there’s evidence and comes down when there’s doubt. Promotion criteria are fixed: from N1 to N2, defined official source and 2 weeks of drafts with no major errors; from N2 to N3, 4 straight weeks approving with no need to correct anything, and only on the part of the task that doesn’t involve risk; from N3 to N4, 2 months of clean reports and working alarms. If there’s a doubt between two levels, choose the lower one.
Why learn
Without criteria, promotion happens from exhaustion: you stop reviewing because “it’s always right” and, without noticing, the agent turned into N3. With criteria, the increase is a decision recorded—and explained to the team. And the rule only lowers on its own: the person who raises the level is you, with proof—never the agent or urgency.
Key concepts
- N1 to N2: defined official source and 2 weeks of drafts with no errors.
- N2 to N3: 4 weeks approving without correcting—only for the no-risk part.
- N3 to N4: 2 months of clean reports and alarms working.
- When in doubt, go down: the lowest level is always the safe answer.
What it is
Now you apply the whole rule to three ready-made Agent Sheet cases from the gallery: the real estate company's lead triager, the restaurant's inventory controller, and the agency's campaign reporter. For each one, write down the action, the risks, and whether there is an official source, then calculate the level before opening the link. After that, compare with what the Agent Sheet calculated. The full gallery is at inematds.github.io/7pa/galeria/en/.
Why learn
Reading the rule is easy; applying it to real cases is what locks in the reasoning. The three cases were chosen because they represent three different levels: one stuck because of risk, one open because it's internal, and one that touches an entire process. If you get all three right, you can calculate the level of any task in your business.
Key concepts
- Real estate: executes, with money and people from outside.
- Restaurant: executes, internal, reversible, with a source.
- Agency: coordinates an internal process, with a source.
- Check: open the link and compare with your answer.