FAIL SAFE

Agent Health

Timeouts, invalid schemas, provider failures, retries, circuit state, bounded inputs, and cost are visible per agent.

LEVEL_1_RECOMMENDSHADOW_MODEREAL MUTATIONS OFF

Safety boundary

Agents analyze and propose. Deterministic policy and execution services retain all business authority.

Current mode

Shadow decisions are recorded as WOULD_EXECUTE. Financial, inventory, order, procurement, ad-spend, and channel mutations remain disabled.

Operator preview

Every action exposes target, evidence, impact, risk, confidence, dependencies, budget use, policy reasons, and hard checks.