Levels and keys
Every tool an agent can call is registered at one level. An agent can only call tools at or below the level you grant it for that system.
Level 1 · Read
Read-only calls: tickets.list, billing.runs.get, alerts.get. Logged, never approved.
Level 2 · Draft
Calls that create a draft a person sends or discards: refunds.draft, mail.draft, deploys.draft_rollback.
Level 3 · Act
Changes with a recorded undo, inside limits you set per system (count, amount, scope). One click reverses a run.
Level 4 · Key
Irreversible calls, or calls over a limit. The run stops and asks a named key holder. If nobody answers, nothing happens.
Lockwork is a fictional company made as a design demo. These docs describe an invented product.