Autonomy levels
Six autonomy levels run from AL0, which shows data, to AL5, which is autonomous. At AL1 the system recommends and a person acts; that is the default today. AL2 is a write a person confirms within a short token window, and AL3 a standing policy for one shift inside a signed envelope. A plant grants each level per action class and asset in an AutonomyPolicy, earned through wins in the value ledger and revocable at any time. Safety instrumented systems and interlocks stay outside Stamped's envelope, and AL4 and AL5 are out of scope.
| Level | Name | What the system does | Who acts | Example |
|---|---|---|---|---|
| AL0 | Inform | Shows state and evidence | People decide unprompted | Compressor specific power trend on a screen |
| AL1 | Recommend | Sends a ranked card with options | A person decides and acts | "Fill head 7 is running 2 g heavy, trim it down" |
| AL2 | Confirm to act | Prepares a specific write; a person confirms within a short token window | System writes after confirmation | Two-minute confirmed write of a header pressure setpoint |
| AL3 | Standing policy | Acts inside a signed envelope for a shift; reports each action | System; person can stop | Standing procedure per shift for per-head trims within ±1 step |
| AL4 | Supervised autonomy | Acts across a wider envelope; person monitors by exception | System | Not in scope in the next 12 months |
| AL5 | Autonomous | Pursues plant objectives within safety systems | System | Not in scope |
This lines up with Yokogawa's IA2IA Level 0 to 5 and NAMUR WG 4.20's levels (E27). The staged authority in the fast-loop docs (stage 1 messages, stage 2 confirmed write with a 2-minute token, stage 3 standing procedure per shift) is AL1Autonomy levels (direction; fast-loop stages 1–3 = AL1–AL3), AL2 and AL3.
The policy framing:
- Stamped's authority at a plant is whatever the plant grants in an AutonomyPolicySigned grants, envelopes, expiry (direction; L5 owns engine), per action class and asset, earned through outcomes recorded in the value ledger, and revocable at any time.
- Safety instrumented systems (IEC 61511, E25) and the existing control system's interlocks stay outside Stamped's envelope by design; Stamped writes, when granted, only to set points the basic control system already accepts from operators.
Page history: last 5 changes
- docs(research): retire stale research to archive/research-2026-10 with a register
ab84821 - docs(technical): rewrite fast-loop/; all architecture diagrams in house style
7330f47 - docs(technical): archive archify; add SYSTEM_VIEWS.md house diagrams; check_docs --min
1e190b6 - docs(technical): carry product sections; rewrite README and pointers
ee1e818 - docs(technical): split decision board into DECISIONS.md
b4db9d4