Overview
How might we design per-action autonomy so people can trust and act on AI output?
When this pattern fits
- Essential for AI coding agents, workflow automation, and productivity assistants where different actions carry different risk profiles and users need calibrated autonomy per capability, not per app.
When to skip or lighten it
- Single-capability agents where per-action settings duplicate a global toggle.
- Audiences who will never open advanced settings; offer sensible defaults first.
- When the platform cannot enforce different policies per tool call.
States
State model coming soon
Key UX elements
Key UX elements coming soon
Anti-patterns to avoid
One “Autopilot” switch that silently enables irreversible actions.
Per-action settings buried with no summary of current policy.
Defaults that auto-approve send/delete on first connect.
Policies that drift after model or connector updates without notice.
How products use it
| Product | Implementation |
|---|---|
| Email agents | Auto-draft known threads; approve send to new recipients. |
| Cursor / coding agents | Freer edits in working trees; gated pushes to protected branches. |
| ChatGPT agent mode | Differentiated confirms for browsing vs messaging vs purchases. |
| Enterprise IT bots | Auto-read; approve write to production systems. |
Implementation
Copy this prompt to generate a production-ready implementation in Cursor, Claude Code, Lovable, or any AI coding agent.
Generate a production-ready implementation of the "Per-Action Autonomy" AI interface design pattern.
Pattern Definition:Frequently asked questions
What is per-action autonomy in AI agents?
Per-action autonomy sets how independently each capability may run, so read, draft, and send can have different approval rules inside the same agent.
Why not a single autonomy slider?
Risk is not uniform. A global slider either blocks useful automation or over-authorizes dangerous actions. Per-action policies match real trust gradients.
How should defaults be set?
Default to ask-to-approve for irreversible or external actions, and allow freer autonomy for reversible local drafts. Make the policy matrix visible and editable.