Autonomy

Most agentic systems ship with autonomy as a global switch: a human approves everything, or the system acts alone. Both settings are wrong, because reliability is never uniform across the decisions a system makes. The case for granting autonomy per decision type, what "earned" has to mean in numbers, why the demotion path matters more than the promotion path, and the decisions that should never be automated at all.

The auth feature from Part 4 ships. CI/CD agents run the deploy. Observability MCPs - Grafana, Sentry, incident.io - watch production. A few weeks in, an RBAC misconfiguration surfaces. An incident agent triages, fixes, drafts the postmortem, and updates the docs. Part 5 traces the back-arrow from production learning to next-iteration spec, and is honest about where the loop genuinely closes versus where the demos overstate it.