Skip to content

Latest commit

 

History

History
55 lines (40 loc) · 2.41 KB

File metadata and controls

55 lines (40 loc) · 2.41 KB
sidebar_position 4

Trust levels

A level describes the working agreement for one class of work. It is not a permanent rank for a team. Routine documentation may run unattended while an authentication change on the same board remains fully supervised.

Level Who runs the work? When does a person step in? Entry point
L1 The engineer Throughout /faff-wtf, /faff-map, /faff-jot, /faff-plot, /faff-prep
L2 The agent, one change at a time At each major gate /faff-graft
L3 The agent, across an eligible queue When work is ambiguous, blocked, or ineligible /faff-beep-boop
L4 The agent, without scheduled supervision When a guardrail refuses the run or evidence requires judgement faff lights-out

L1: you run the loop

You do the engineering. SuperDomestique helps understand the backlog, choose work, and prepare a specification. No delivery authority has been handed to an unattended process.

L2: one supervised build

/faff-graft takes one specified issue through implementation and review. The agent does the work, but the important transitions still wait for approval. This is the normal place to learn how the system behaves on a repository.

L3: an unattended queue

/faff-beep-boop drains work that a person has made eligible. The run parks anything it cannot safely call, records why, and leaves the tracker as the morning view. The run ledger refuses a clean finish while admitted work remains unaccounted for.

L3 is the current unattended path. See Unattended runs for eligibility, parking, and run records.

L4: lights-out preview

faff lights-out adds a fail-closed preflight, budget and liveness controls, adversarial review, a holdout verdict, and merge interlocks. The machinery exists, but the complete L4 claim is not yet supported by external proof.

The distinction matters: invoking a guardrail can be mechanically enforced, while the quality of a model's review remains a judgement. The evidence page links the current audit and open proof work.

Choose a level by workload

Start with a narrow class of low-risk, well-tested work. Move it from L1 to L2, then to L3 only after the results justify less scheduled attention. Other work can stay at L1 indefinitely. The adoption guide shows how eligibility and appetite support that approach.