Delegation is a dial, and there's a kill switch.

• — Watch — observes and reports. Touches nothing. The right start for every new role.
• — Suggest — drafts the work; a named person approves every output before it moves.
• — Execute — acts inside policy, with budgets and least-privilege access; anything unusual comes back to a human.

Every level writes the same audit record, so moving the dial never costs you the trail.

Budgets, access scopes, approval requirements, and autonomy thresholds live as policy code (Cedar — the same policy language AWS uses), versioned next to the agent it governs. The platform enforces it on every run; nobody has to remember it.

Any operations lead can pause a single agent or halt it entirely from the registry. In-flight work stops at the next checkpoint, pending approvals stay in the inbox, and the record shows who pulled the switch and when.