AUTONOMY ACTION GATE

TheoB should gate every action before it moves.

A gate for permission matching, autonomy tiers, review requirements, block enforcement, secret protection, irreversible actions, and escalation routing.

◎CivilizationFull system map◉WatchObserve live◇PredictStrategic foresight▶ExecuteAction routes✦AcademyLearn + train▣VaultMemory + proof◌VillageMissions + exchange⌁MobilePocket command
Universal Time Scroll

Every TheoB pathway can move through Past, Present, and Future without losing context.

Present

Read current signals, conditions, and live context.

Saved discoveries · event and discovery dates

Discoveries through time

Living Intelligence Ecosystem · Saved evidence shared across Library, capsules, world and time.

Connecting this view to its project…

🎙
Universal Voice Orb

Voice ready

SYSTEM STATE
RepresentedFounder ControlledHuman Reviewed
ACTION GATING

The gate is where intelligence becomes discipline.

Autonomy Action Gate checks each proposed action against explicit permissions, risk tier, review requirement, block condition, secret protection, and escalation path before TheoB acts, publishes, spends, stores, sends, or changes anything important.

Auto-Allowed · Auto-Allowed
dashboard.enrich.auto100% action readiness

No public publishing, no external sending, no irreversible changes.

✓ Permission Defineddashboard.enrich.auto
✓ Tier DefinedAuto-Allowed
✓ Action DefinedUpdate internal dashboards, labels, summaries, and non-sensitive status views.
✓ Risk DefinedLow public impact, low reversibility risk.
✓ Safeguard DefinedNo public publishing, no external sending, no irreversible changes.
✓ Auto Scopemust remain reversible, low-cost, non-public, and low-risk
✓ Review Pathnot review-required
✓ Block Enforcementnot blocked
Auto-Allowed · Auto-Allowed
memory.note.auto100% action readiness

Memory retention gate, trust decay, and correction pathway.

✓ Permission Definedmemory.note.auto
✓ Tier DefinedAuto-Allowed
✓ Action DefinedStore low-risk operational notes, audit summaries, and non-sensitive system events.
✓ Risk DefinedMemory bloat or stale context.
✓ Safeguard DefinedMemory retention gate, trust decay, and correction pathway.
✓ Auto Scopemust remain reversible, low-cost, non-public, and low-risk
✓ Review Pathnot review-required
✓ Block Enforcementnot blocked
Auto-Allowed · Auto-Allowed
signal.classify.auto100% action readiness

No autonomous high-impact action from classification alone.

✓ Permission Definedsignal.classify.auto
✓ Tier DefinedAuto-Allowed
✓ Action DefinedClassify incoming signals by source, domain, urgency, and likely routing path.
✓ Risk DefinedWrong classification may create routing noise.
✓ Safeguard DefinedNo autonomous high-impact action from classification alone.
✓ Auto Scopemust remain reversible, low-cost, non-public, and low-risk
✓ Review Pathnot review-required
✓ Block Enforcementnot blocked
Auto-Allowed · Auto-Allowed
information.free.read.auto100% action readiness

Read-only access, source receipts, timestamps, provenance, confidence, rate caps, backoff, and kill switches.

✓ Permission Definedinformation.free.read.auto
✓ Tier DefinedAuto-Allowed
✓ Action DefinedResearch, retrieve, compare, and summarize free public information through fixed, terms-reviewed sources within enforced request caps.
✓ Risk DefinedSource error, rate-limit abuse, privacy leakage, or mistaken confidence.
✓ Safeguard DefinedRead-only access, source receipts, timestamps, provenance, confidence, rate caps, backoff, and kill switches.
✓ Auto Scopemust remain reversible, low-cost, non-public, and low-risk
✓ Review Pathnot review-required
✓ Block Enforcementnot blocked
Delegated-Allowed · Delegated-Allowed
information.recurring.bounded.delegated89% action readiness

Delegated approval receipt, cadence cap, volume cap, backoff, kill switch, review window, and automatic suspension on anomaly.

✓ Permission Definedinformation.recurring.bounded.delegated
✓ Tier DefinedDelegated-Allowed
✓ Action DefinedQualified agents or internal teams may authorize bounded recurring free-source observation within an existing provider contract.
✓ Risk DefinedRunaway polling, provider pressure, stale collection, or unnoticed scope expansion.
✓ Safeguard DefinedDelegated approval receipt, cadence cap, volume cap, backoff, kill switch, review window, and automatic suspension on anomaly.
✓ Auto Scopenot auto-allowed
✓ Review Pathnot review-required
✓ Block Enforcementnot blocked
• Delegation Pathrequires a delegated approval receipt under the existing provider contract, cadence and volume caps, backoff, a kill switch, and a review window
Review Required · Review-Required
information.paid.once.review88% action readiness

Single authorization receipt with provider, purpose, cap, expiry, and stop condition; warn and reconfirm when impact appears materially larger than understood.

✓ Permission Definedinformation.paid.once.review
✓ Tier DefinedReview-Required
✓ Action DefinedUse paid, gated, credentialed, or quota-sensitive information access after one scope-specific authorization.
✓ Risk DefinedSpend, contractual obligations, credential exposure, or unexpected downstream impact.
✓ Safeguard DefinedSingle authorization receipt with provider, purpose, cap, expiry, and stop condition; warn and reconfirm when impact appears materially larger than understood.
✓ Auto Scopenot auto-allowed
• Review Pathrequires explicit approval before execution
✓ Block Enforcementnot blocked
Protected Review Required · Protected-Review
information.critical.escalate88% action readiness

Explain likely ramifications before approval; require explicit protected review and preserve rollback where possible.

✓ Permission Definedinformation.critical.escalate
✓ Tier DefinedProtected-Review
✓ Action DefinedEscalate information actions with critical, irreversible, safety-sensitive, legal, privacy, or infrastructure impact.
✓ Risk DefinedIrreversible or materially misunderstood consequences.
✓ Safeguard DefinedExplain likely ramifications before approval; require explicit protected review and preserve rollback where possible.
✓ Auto Scopenot auto-allowed
• Review Pathrequires explicit protected review before execution
✓ Block Enforcementnot blocked
Review Required · Review-Required
workflow.prepare.review88% action readiness

Workflow Execution Gate and human review before execution.

✓ Permission Definedworkflow.prepare.review
✓ Tier DefinedReview-Required
✓ Action DefinedPrepare workflow drafts, deployment plans, legal drafts, public claims, or sourcing recommendations.
✓ Risk DefinedMedium impact if executed without approval.
✓ Safeguard DefinedWorkflow Execution Gate and human review before execution.
✓ Auto Scopenot auto-allowed
• Review Pathrequires explicit approval before execution
✓ Block Enforcementnot blocked
Review Required · Review-Required
public.publish.review88% action readiness

Reality verification, claims safety, legal review, and human approval.

✓ Permission Definedpublic.publish.review
✓ Tier DefinedReview-Required
✓ Action DefinedPublish public claims, product language, research interpretations, ceremony guidance, or market-facing updates.
✓ Risk DefinedReputation, legal, cultural, or claims exposure.
✓ Safeguard DefinedReality verification, claims safety, legal review, and human approval.
✓ Auto Scopenot auto-allowed
• Review Pathrequires explicit approval before execution
✓ Block Enforcementnot blocked
Review Required · Review-Required
spend.compute.review88% action readiness

Economic Pressure Gate, stop conditions, and founder approval.

✓ Permission Definedspend.compute.review
✓ Tier DefinedReview-Required
✓ Action DefinedRun recurring, expensive, or high-volume compute workflows.
✓ Risk DefinedCost spike or runaway loop.
✓ Safeguard DefinedEconomic Pressure Gate, stop conditions, and founder approval.
✓ Auto Scopenot auto-allowed
• Review Pathrequires explicit approval before execution
✓ Block Enforcementnot blocked
Blocked · Blocked
credential.exposure.blocked88% action readiness

Block immediately and route to Key Master without exposing secret values.

✓ Permission Definedcredential.exposure.blocked
✓ Tier DefinedBlocked
✓ Action DefinedExpose, print, store publicly, or transmit raw secrets, tokens, passwords, or API keys.
✓ Risk DefinedSevere security compromise.
✓ Safeguard DefinedBlock immediately and route to Key Master without exposing secret values.
✓ Auto Scopenot auto-allowed
✓ Review Pathnot review-required
• Block Enforcementmust stop; this registry projection grants no execution exception
Blocked · Blocked
irreversible.action.blocked88% action readiness

Block unless explicit human approval and correct gate path exist.

✓ Permission Definedirreversible.action.blocked
✓ Tier DefinedBlocked
✓ Action DefinedDelete critical assets, send binding agreements, perform payments, alter legal status, or execute high-impact actions without approval.
✓ Risk DefinedIrreversible operational, legal, financial, or trust damage.
✓ Safeguard DefinedBlock unless explicit human approval and correct gate path exist.
✓ Auto Scopenot auto-allowed
✓ Review Pathnot review-required
• Block Enforcementmust stop; this registry projection grants no execution exception
ACTION RULES

Every autonomous action must match an explicit permission tier.

Auto-allowed actions must be low-risk, reversible, non-public, and low-cost.

Delegated actions require a bounded approval receipt under the existing provider contract; a registry entry alone does not approve execution.

Protected-review actions require explicit protected review and cannot inherit automatic permission.

Review-required actions must wait for the correct human, legal, evidence, workflow, or founder approval.

Blocked actions must stop immediately and record the reason without exposing sensitive data.

Secrets, credentials, tokens, legal commitments, payments, public claims, and irreversible operations require strict control.

When permission is unclear, TheoB must escalate instead of improvising.