It is a governed operational system where agents reason, workflows control execution, and trusted network tools perform deterministic actions. Most agentic AI pitches stop at the demo. The hard part is the governance that lets it run in production.
Operate from service and network intent, not raw CLI prompts.
Approval by risk level, with an auditable delegation chain.
Source of truth, controllers, ITSM and automation tools carry out the action.
Every task completes a full cycle and feeds what it learned back in.
That boundary is the whole design. Reasoning stays flexible; production action stays deterministic, approved and reversible.
Enterprise acceptance does not come from better models. It comes from explicit authority levels, evidence and rollback. This is the table a risk committee actually asks for, and the one most agentic AI proposals cannot produce.
| Level | Authority | Permitted scope | Control requirement |
|---|---|---|---|
| L0 Observe | Read only | Collect data, summarise, answer questions | No approval |
| L1 Advise | Recommendation | Root cause, impact analysis, remediation proposal | Engineer reviews |
| L2 Plan | Change plan | Workflow draft, pre-checks, risk score | Technical approval |
| L3 Execute | Controlled action | Orchestrated transaction, controller action, ITSM update | Named human approval |
| L4 Closed loop | Low-risk autonomous | Pre-approved fixes inside a policy envelope | Policy and audit evidence |
No estate starts at L4. Most should not get there for years, and only for scenarios that have been certified individually. The value of the ladder is that it lets an organisation adopt agentic operations at L1 today without arguing about L4.
Top-level agents coordinate. Specialist agents use approved tools only. A management plane makes every agent registered, versioned, permissioned and observable, which is what prevents shadow agents appearing in production.
Receives intent, delegates work, manages the outcome
Creates the task plan, dependencies and success criteria
Launches the deterministic process and approvals
Checks policy, risk, scope and forbidden actions
Correlates events and establishes root cause
Drafts and executes controlled change
Watches service health and tunes it
Checks posture and control drift
Every phase is useful on its own. None of them requires committing to the next.
Agent platform, tool gateway, source-of-truth and observability integrations, read-only agents.
Root cause, assurance, documentation and compliance agents making recommendations with a human in the loop.
Workflow-driven changes through the orchestrator and controllers, with approval and rollback.
Low-risk autonomous remediation, for certified scenarios only.
Layered architecture, agent hierarchy, management plane, workflow and integration fabric, autonomy policy and the tool capability matrix. Vendor-neutral and free to use.
Tell us where you are on the journey, from a source of truth to full AIOps, or from a first security baseline to a defensible posture, and we will tell you exactly how we would help you own the outcome.