Manual
System monitors only — no automated actions.
- Human role
- All actions performed manually.
- Real-world example
- A blinking server light. The admin reads logs and reacts.
Projects currently rated at this level in the registry:
The L0–L5 scale inherits the TM Forum AN baseline and describes autonomy of a single agent or product. L6 and L7 extend it for agent systems: an orchestrator that creates agents, and an ecosystem that develops its own infrastructure and rules.
System monitors only — no automated actions.
Projects currently rated at this level in the registry:
Executes pre-configured deterministic subtasks (cron, pipeline step). Failures emit raw logs.
Projects currently rated at this level in the registry:
Closed-loop ops in narrow domain with static rules. Health endpoint, classified errors, post-run status to ops dashboard.
Projects currently rated at this level in the registry:
Real-time sensing via structured observability (traces, eval scores). Heartbeat, post-deploy smoke gate, validated credentials, explicit exception hierarchy. Adapts via dynamic policies.
Cross-domain self-detection, self-diagnosis, self-recovery. Retry-with-classification, circuit breakers, fallback chains, state checkpointing, recovery audit trail, known-fix mapping, post-recovery verification, hard cost circuit breakers for LLM calls.
Closed-loop across services. Proactive self-improvement: A/B testing prompts and models, dynamic model routing, cost governance with auto-downgrade, eval-driven prompt refinement, knowledge graph evolution.
The autonomous unit is no longer only an executor. An orchestrator can notice a recurring class of work, design a specialized agent, assign tools and memory, constrain permissions, define tests, run it in a sandbox, evaluate quality, plug it into the workflow, and roll it back if it fails.
The whole ecosystem can observe agent health, find bottlenecks, convene councils, compare architecture options, build eval datasets, maintain internal documentation, update its own rules, plan development, reallocate resources, and build tools for itself under human-set constraints.
Why the upper pair exists
L5 answers: how can the agent do its job better? L6 asks a different question: what new working unit should exist so this class of tasks is no longer handled manually? L7 raises the scale again: how does the whole ecosystem make decisions, build infrastructure, remember failures, and change its own rules without losing human-set boundaries? These levels do not call the system AGI; they make it engineerable.
Article: after self-healingOperational dimensions without which L2–L7 become a declaration: cost, schemas, fallback, tool rights, and the eval loop.
A runaway LLM loop can burn budget before a human notices. Hard cost circuit breakers are non-negotiable.
Prompt injection (OWASP LLM01) and schema drift in LLM output. Zod/JSON schema at L3, corrective retry at L4.
Provider outage / deprecation / rate limit demands runtime model swap (Claude → GPT → local). Single-model agents fail the L4 gate.
Agentic file-write and shell-exec are a new attack surface (OWASP LLM06 Excessive Agency). High-risk tools are sandboxed at L4.
Self-optimization without labeled eval has no signal. Every decision gets a downstream signal; the meta-loop tunes prompts.