In short

Six autonomy levels run from AL0, which shows data, to AL5, which is autonomous. At AL1 the system recommends and a person acts; that is the default today. AL2 is a write a person confirms within a short token window, and AL3 a standing policy for one shift inside a signed envelope. A plant grants each level per action class and asset in an AutonomyPolicy, earned through wins in the value ledger and revocable at any time. Safety instrumented systems and interlocks stay outside Stamped's envelope, and AL4 and AL5 are out of scope.

LevelNameWhat the system doesWho actsExample
AL0InformShows state and evidencePeople decide unpromptedCompressor specific power trend on a screen
AL1RecommendSends a ranked card with optionsA person decides and acts"Fill head 7 is running 2 g heavy, trim it down"
AL2Confirm to actPrepares a specific write; a person confirms within a short token windowSystem writes after confirmationTwo-minute confirmed write of a header pressure setpoint
AL3Standing policyActs inside a signed envelope for a shift; reports each actionSystem; person can stopStanding procedure per shift for per-head trims within ±1 step
AL4Supervised autonomyActs across a wider envelope; person monitors by exceptionSystemNot in scope in the next 12 months
AL5AutonomousPursues plant objectives within safety systemsSystemNot in scope

This lines up with Yokogawa's IA2IA Level 0 to 5 and NAMUR WG 4.20's levels (E27). The staged authority in the fast-loop docs (stage 1 messages, stage 2 confirmed write with a 2-minute token, stage 3 standing procedure per shift) is AL1Autonomy levels (direction; fast-loop stages 1–3 = AL1–AL3), AL2 and AL3.

The policy framing:

  • Stamped's authority at a plant is whatever the plant grants in an AutonomyPolicySigned grants, envelopes, expiry (direction; L5 owns engine), per action class and asset, earned through outcomes recorded in the value ledger, and revocable at any time.
  • Safety instrumented systems (IEC 61511, E25) and the existing control system's interlocks stay outside Stamped's envelope by design; Stamped writes, when granted, only to set points the basic control system already accepts from operators.
Page history: last 5 changes
  1. 2026-10-07 docs(research): retire stale research to archive/research-2026-10 with a register ab84821
  2. 2026-10-07 docs(technical): rewrite fast-loop/; all architecture diagrams in house style 7330f47
  3. 2026-10-07 docs(technical): archive archify; add SYSTEM_VIEWS.md house diagrams; check_docs --min 1e190b6
  4. 2026-10-07 docs(technical): carry product sections; rewrite README and pointers ee1e818
  5. 2026-10-07 docs(technical): split decision board into DECISIONS.md b4db9d4

Diagram

100%

Search the architecture