Synced from Hive. This page is pulled from kubestellar/hive@v4 during the docs build. Edit the canonical source in the Hive repository.

ADR-0003: ACMM autonomy levels

Status: Accepted (retroactive)

Context

Hive needs operator-facing control for how autonomous agents may be. The reference architecture describes ACMM as the human-selected dial that maps to per-agent modes, and the policy matrix defines which agents may advise, file issues, open hold-gated PRs, or auto-merge at each level (architecture §6, ACMM policy matrix). The same modes feed the layered guardrails in architecture §5.

Decision

Use ACMM levels L1-L6 as the public autonomy model. Levels map deterministically to per-agent modes: advisory, issues-only/measured, issues-and-PRs/holdgated, and issues-PRs-merge/full. Raising the level is a human decision. supervisor remains advisory at every level, and brainstorm never receives GitHub write authority.

Consequences

Operators can reason about fleet risk through level instead of many independent toggles. The same mode value drives prompt templates, credential scope, CLI deny lists, and proxy rules, which reduces configuration drift. The cost is that unusual deployments may need explicit per-agent overrides, and any new agent role must be placed deliberately in the matrix before it receives write or merge authority.