Every action the platform can take is a tool in the registry below. Each tool has a risk class, a reversibility flag and an autonomy level that decides what the AI may do with it: L0 human only, L1 propose, L2 act after one-tap approval, L3 act and notify, L4 act silently. New tools start at L0. Every call, from a person or the AI, goes through one control plane that validates the parameters, applies the dial, deduplicates identical calls, enforces the hourly limit, and writes one append-only, hash-chained event. Until Phase 4 write tools act on the simulated cabin (sim-cabin-1); a dry run on a real cabin describes what would happen and changes nothing.
Autonomy scoreboard: L0: 46 L3: 16 L4: 32
Every tool with its autonomy level. What each does and how is documented inside; here only the shape.
| section | tool | risk | reversible | autonomy |
|---|---|---|---|---|
| compliance | compliance.erase_payloads | statutory | no | L0 Human only |
| compliance | compliance.heritage_rules | read | yes | L4 AI acts silently, audited |
| compliance | compliance.safety_done | low | yes | L0 Human only |
| compliance | compliance.safety_due | read | yes | L4 AI acts silently, audited |
| guests | guests.attach_contact | medium | no | L3 AI acts, human notified |
| guests | guests.check_availability | read | yes | L4 AI acts silently, audited |
| guests | guests.complaint_open | low | yes | L0 Human only |
| guests | guests.complaint_update | low | yes | L0 Human only |
| guests | guests.complaints_open | read | yes | L4 AI acts silently, audited |
| guests | guests.data_request | medium | no | L0 Human only |
| guests | guests.find_booking | read | yes | L4 AI acts silently, audited |
| guests | guests.in_stay_check | medium | no | L0 Human only |
| guests | guests.list_bookings | read | yes | L4 AI acts silently, audited |
| guests | guests.lookup_knowledge | read | yes | L4 AI acts silently, audited |
| guests | guests.notify_stay | medium | no | L3 AI acts, human notified |
| guests | guests.pre_arrival_check | read | yes | L4 AI acts silently, audited |
| guests | guests.pre_arrival_tasks | low | yes | L0 Human only |
| guests | guests.preference_note | low | yes | L0 Human only |
| guests | guests.review_reply_draft | low | yes | L0 Human only |
| guests | guests.search_past_conversations | read | yes | L4 AI acts silently, audited |
| guests | guests.send_channel_message | medium | no | L3 AI acts, human notified |
| guests | guests.send_followup | medium | no | L3 AI acts, human notified |
| guests | guests.send_message | medium | no | L3 AI acts, human notified |
| guests | guests.stay_check_answer | low | yes | L0 Human only |
| guests | guests.step_answer | low | yes | L3 AI acts, human notified |
| guests | guests.step_choose | low | yes | L3 AI acts, human notified |
| guests | guests.step_complete | low | no | L3 AI acts, human notified |
| guests | guests.wellness_offer | medium | no | L0 Human only |
| money | money.expense_record | low | yes | L0 Human only |
| money | money.finance_brief | read | yes | L4 AI acts silently, audited |
| money | money.find_invoice | read | yes | L4 AI acts silently, audited |
| money | money.list_payments | read | yes | L4 AI acts silently, audited |
| money | money.rate_outlook | read | yes | L4 AI acts silently, audited |
| money | money.refund | high | no | L0 Human only |
| money | money.release_deposit | medium | no | L0 Human only |
| money | people.raise_purchase_order | medium | yes | L0 Human only |
| people | calendar.upcoming | read | yes | L4 AI acts silently, audited |
| people | mail.draft | low | yes | L0 Human only |
| people | mail.read | read | yes | L4 AI acts silently, audited |
| people | mail.search | read | yes | L4 AI acts silently, audited |
| people | mail.send | medium | no | L0 Human only |
| people | people.business_brief | read | yes | L4 AI acts silently, audited |
| people | people.checklist_next | read | yes | L4 AI acts silently, audited |
| people | people.checklist_tick | low | yes | L0 Human only |
| people | people.create_task | low | yes | L3 AI acts, human notified |
| people | people.delivery_log | low | yes | L0 Human only |
| people | people.diary_write | low | yes | L3 AI acts, human notified |
| people | people.dismiss_conversation | low | yes | L3 AI acts, human notified |
| people | people.escalate_to_human | low | yes | L3 AI acts, human notified |
| people | people.identify_team_member | read | yes | L4 AI acts silently, audited |
| people | people.meeting_mode | low | yes | L3 AI acts, human notified |
| people | people.moments | read | yes | L4 AI acts silently, audited |
| people | people.private_note | medium | no | L3 AI acts, human notified |
| people | people.propose_skill | low | yes | L3 AI acts, human notified |
| people | people.rota_set | low | yes | L0 Human only |
| people | people.rota_today | read | yes | L4 AI acts silently, audited |
| people | people.staff_briefing | read | yes | L4 AI acts silently, audited |
| people | people.stock_status | read | yes | L4 AI acts silently, audited |
| people | people.stock_update | low | yes | L0 Human only |
| people | people.supplier_lead_time | read | yes | L4 AI acts silently, audited |
| people | people.task_update | low | yes | L0 Human only |
| people | people.team_note | low | yes | L0 Human only |
| people | people.team_request | high | yes | L0 Human only |
| people | people.team_second_check | read | yes | L4 AI acts silently, audited |
| people | people.urgent_call | medium | no | L0 Human only |
| platform | platform.selftest | read | yes | L4 AI acts silently, audited |
| platform | platform.set_autonomy | statutory | yes | L0 Human only |
| platform | platform.tune_connector | medium | yes | L0 Human only |
| property | property.aurora_dim | low | yes | L0 Human only |
| property | property.construction_brief | read | yes | L4 AI acts silently, audited |
| property | property.device_lock | high | yes | L0 Human only |
| property | property.device_switch | medium | yes | L0 Human only |
| property | property.discover_speakers | low | yes | L0 Human only |
| property | property.door_lock | high | yes | L0 Human only |
| property | property.ev_control | low | yes | L0 Human only |
| property | property.ev_status | read | yes | L4 AI acts silently, audited |
| property | property.get_cabin | read | yes | L4 AI acts silently, audited |
| property | property.get_door | read | yes | L4 AI acts silently, audited |
| property | property.issue_door_code | high | yes | L0 Human only |
| property | property.list_locations | read | yes | L4 AI acts silently, audited |
| property | property.maintenance_done | low | yes | L0 Human only |
| property | property.maintenance_due | read | yes | L4 AI acts silently, audited |
| property | property.meter_reading | low | yes | L0 Human only |
| property | property.play_audio | low | yes | L0 Human only |
| property | property.power_idle_off | low | yes | L0 Human only |
| property | property.power_switch | low | yes | L0 Human only |
| property | property.revoke_door_code | medium | no | L0 Human only |
| property | property.set_scene | low | yes | L0 Human only |
| property | property.set_temperature | low | yes | L0 Human only |
| property | property.set_volume | low | yes | L0 Human only |
| property | property.turnover_check | low | yes | L0 Human only |
| property | property.wellness_book | low | yes | L3 AI acts, human notified |
| property | sourcing.apply_shipment | low | yes | L0 Human only |
| research | research.log_sighting | low | yes | L0 Human only |