Governance
Employee lifecycle
Every hire starts on probation and proves itself before it can touch anything real.
Shadow
Probation. The employee runs and produces proposals, but actions are recorded, not executed: your accounts are never touched.
Active
Graduated. The employee executes under its trust level; consequential actions still route through approval as required.
Terminated
Retired. Removed from the workforce; its identity and audit trail are preserved for the record.
You graduate an employee from practice mode when its proposals have earned your confidence: from its profile, in one click. Until then it is genuinely harmless: every "action" it takes in shadow mode is logged as a proposal you can review, never sent to the outside world.
Repeated failures or detected anomalies can push an employee back down: trust is slashed and, if serious, the employee is quarantined (forced to level 0) until you lift it.