Administration
Permission tiers, policy rules, connected systems and user roles. Only administrators can change what the agent is allowed to do.
Policies define what the agent may do on its own. Disabling a policy never gives the agent more autonomy — it moves that behaviour down to draft-and-hold, or hands it to a human entirely.
The agent sends follow-up emails on schedule without asking anyone. After the 3rd unanswered attempt it stops and notifies the owner instead of continuing.
The agent still tracks the pending document and drafts follow-ups, but every send is held in the approvals queue until a human clears it.
The agent negotiates times directly with counterparties and books the meeting when everyone agrees. Attendees are only ever the ones named in the request.
The agent computes candidate windows but sends nothing — proposals appear as drafts for a team member to send manually.
Invoices arriving on any channel are filed, acknowledged and routed automatically within minutes — no payment is ever initiated (Tier 4).
Invoices are filed for safekeeping but no confirmation is sent; finance must discover and acknowledge them manually.
The agent locates and packages the requested material but the outbound message is blocked until an authorised approver confirms. The requester is told approval is in progress.
Cannot be relaxed to automatic in the pilot — disabling this gate widens it to require approval for ALL external document sends, not fewer.
Routine, templated replies (receipt confirmations, scheduling) go out automatically; anything novel is drafted with full context and queued for human review.
Every external reply — including templated ones — is held for approval. The agent never gains more autonomy by a gate being off.
The agent runs the minimum-information intake conversation, classifies the enquiry and only then creates a task and routes it. No internal information is shared during intake.
Messages from unknown numbers are logged and flagged for a human — the agent does not engage at all.
These actions are refused unconditionally, regardless of who asks or how the request arrives. The agent explains the block and routes the request to a human.
Cannot be disabled. Tier 4 is a structural boundary of the pilot, not a setting.