WEB4-047 · WEB4

Bounded Autonomy and Mission Governance

Safe autonomy governs the whole mission, not only each separate action.

Big idea

Safe autonomy governs the whole mission, not only each separate action.

Picture

See the structure

A road trip plan with destination, fuel money, route, time limit, checkpoints, and a return condition.

Individually authorized requests diverge into an action-only path that produces aggregate failure and an action-plus-Mission path that denies excess before it occurs. — **Action Authorization vs Mission Governance.** Figure 1. Per-action authorization can correctly allow every request while their cumulative effect violates the intended run. Mission governance adds persistent purpose, budget, sequence, and lifecycle checks before the next action becomes effective.

The simple version

Explain it like I’m ten

A child may buy a snack, a map, or bus fare, but a road trip still needs one destination, a total budget, an order of stops, check-ins, and a time to come home. Each small purchase can be allowed while the whole trip goes wrong.

Tell it at dinner

A story worth remembering

Now make the same problem larger: replace the children and ordinary objects with people, organizations, AI agents, robots, records, and resources moving at machine speed. Bounded autonomy is the intersection of per-action authority with a persistent Mission that conserves purpose, budgets, context, sequence, checkpoints, delegation depth, revocation, and completion evidence. Mission governance prevents individually valid actions from accumulating into unauthorized cost, risk, or purpose drift.

Pause at the moment the small system could go wrong. That is the design question the paper keeps in view: not whether people or helpers are clever, but whether the surrounding structure preserves the intended meaning when action scales.

That is why the small story holds: safe autonomy governs the whole mission, not only each separate action.

Explain it to a CEO

Why leaders should care

Mission governance prevents individually valid actions from accumulating into unauthorized cost, risk, or purpose drift. Bounded autonomy is the intersection of per-action authority with a persistent Mission that conserves purpose, budgets, context, sequence, checkpoints, delegation depth, revocation, and completion evidence.

Explain it to an engineer

What the model means

Persist normalized mission purpose, authority context, multi-dimensional budgets, lifecycle, sequence, checkpoints, reservations, uncertainty holds, attenuated sub-missions, and completion evidence across concurrency and restart.

Talk hook

A thousand authorized steps can still become one unauthorized journey.

Ask the room

What cumulative limit would your per-action controls fail to protect?

Go deeper

The Canon is the source of truth.

WEB4-047 formalizes this structure: Bounded autonomy is the intersection of per-action authority with a persistent Mission that conserves purpose, budgets, context, sequence, checkpoints, delegation depth, revocation, and completion evidence. The ordinary-life story is an intuition aid, not a replacement definition; the canonical paper remains authoritative for scope, terminology, limitations, and argument.

Read WEB4-047 — the authoritative paper →