Every action the platform can take is a tool in the registry below. Each tool has a risk class, a reversibility flag and an autonomy level that decides what the AI may do with it: L0 human only, L1 propose, L2 act after one-tap approval, L3 act and notify, L4 act silently. New tools start at L0. Every call, from a person or the AI, goes through one control plane that validates the parameters, applies the dial, deduplicates identical calls, enforces the hourly limit, and writes one append-only, hash-chained event. Until Phase 4 write tools act on the simulated cabin (sim-cabin-1); a dry run on a real cabin describes what would happen and changes nothing.
Autonomy scoreboard: L0: 9 L3: 4 L4: 11
Every tool with its autonomy level. What each does and how is documented inside; here only the shape.
| section | tool | risk | reversible | autonomy |
|---|---|---|---|---|
| compliance | compliance.erase_payloads | statutory | no | L0 Human only |
| guests | guests.check_availability | read | yes | L4 AI acts silently, audited |
| guests | guests.find_booking | read | yes | L4 AI acts silently, audited |
| guests | guests.list_bookings | read | yes | L4 AI acts silently, audited |
| guests | guests.lookup_knowledge | read | yes | L4 AI acts silently, audited |
| guests | guests.search_past_conversations | read | yes | L4 AI acts silently, audited |
| guests | guests.send_message | medium | no | L3 AI acts, human notified |
| money | money.find_invoice | read | yes | L4 AI acts silently, audited |
| money | money.list_payments | read | yes | L4 AI acts silently, audited |
| money | money.refund | high | no | L0 Human only |
| money | money.release_deposit | medium | no | L0 Human only |
| money | people.raise_purchase_order | medium | yes | L0 Human only |
| people | people.create_task | low | yes | L3 AI acts, human notified |
| people | people.dismiss_conversation | low | yes | L3 AI acts, human notified |
| people | people.escalate_to_human | low | yes | L3 AI acts, human notified |
| platform | platform.selftest | read | yes | L4 AI acts silently, audited |
| platform | platform.set_autonomy | statutory | yes | L0 Human only |
| property | property.get_cabin | read | yes | L4 AI acts silently, audited |
| property | property.get_door | read | yes | L4 AI acts silently, audited |
| property | property.issue_door_code | high | yes | L0 Human only |
| property | property.list_locations | read | yes | L4 AI acts silently, audited |
| property | property.revoke_door_code | medium | no | L0 Human only |
| property | property.set_scene | low | yes | L0 Human only |
| property | property.set_temperature | low | yes | L0 Human only |