Assign agent autonomy by task risk, not model capability: a 4-level framework for trustworthy IT ops

Bonree · reddit · 2026-11-04

An ops practitioner lays out a framework for safely introducing agentic AI into IT operations: assign autonomy based on task risk, not model capability, granting minimum authority and expanding only with evidence the workflow is reliable, recoverable and verifiable.

Four questions before delegating a task: reversibility (can it be undone quickly?), blast radius (one test instance vs. customer traffic?), verifiability (can metrics/tests/humans confirm the outcome?), and sensitivity (customer data, credentials, production config, financial actions?).

A four-level autonomy model:

Includes a task-to-level mapping table: routine inspections and alert triage start at Observe/Recommend, while config changes, schema edits, data deletion, access-control changes and financial actions always require human approval.

Original post →

More from coding & agent

coding & agent channel →