Agent Autonomy Tiers, Multi-Key Pooling, and Thought Signatures
Mathematical foundations, 5-tier autonomy classification, dynamic round-robin API key pooling, and cryptographic thought signature verification.
1. Overview & Business Value#
SmartERP formalizes AI agent behavior using a rigorous five-tier operational autonomy matrix, ensuring complete clarity regarding which decisions can execute automatically versus those requiring explicit human sign-off.
1. Five-Tier Autonomy Classification Matrix#
| Tier | Autonomy Level | Permitted Actions | Required Human Intervention | Example Agents |
|---|---|---|---|---|
| Tier 1 | Passive Advisory | Search, summarize, generate draft text, visual analytics | None required for read operations; cannot commit state | Awaqi BI Query Copilot, Documentation Assistant |
| Tier 2 | Staged Draft | Create draft records (state='draft'), populate form fields | Mandatory human review and button click to proceed | Resume Screening Agent, Requisition Generator |
| Tier 3 | Conditional Auto | Auto-post low-risk records within pre-approved thresholds | Post-execution review; instant alerting on anomalies | Bank Reconciliation Assistant (under 5,000 ETB) |
| Tier 4 | Autonomous Exec | Execute multi-step routine workflows within strict bounds | Periodic retrospective audit logs | Shift Scheduler, Predictive Stock Replenishment |
| Tier 5 | Supervised Break-Glass | Emergency parameter tuning, system recovery orchestration | Dual-authorization cryptographic key sign-off | System Recovery Orchestrator |
2. Multi-Key Pooling and 429 Failover Mechanics#
High-throughput agents utilize a dynamic four-key round-robin pooler implemented in addons/muk_ai/providers/google.py. When an upstream API endpoint returns an HTTP 429 Rate Limit error, the pooler isolates the key for 60 seconds and immediately retries using the next healthy key in the sequence:
$$\text{ActiveKey} = \text{Keys}[(\text{Counter} \bmod N)]$$
Request ──> [Key Selector] ──> Key A (200 OK) ──> Return Response
Key B (429 Rate Limit) ──> Cooldown 60s
└──> Failover ──> Key C (200 OK)
3. Cryptographic Thought Signatures#
For complex multi-turn reasoning and tool invocation, Gemini 3.x and Claude agents generate deterministic cryptographic thought signatures (thoughtSignature). These signatures prove that tool invocations were produced directly by the model's internal reasoning chain rather than synthetic parameter injection.
2. Prerequisites & Security Access Groups#
- Required Modules:
muk_ai, muk_mcp, smarterp_ai_suite - Security Group:
Ashewa AI / User(Technical ID:muk_ai.group_ai_user) - Master Data Dependencies: Configured AI provider credentials, active system prompts, and departmental cost centers.
3. Step-by-Step UI Execution & Verification#
Step 1: Navigating to the Operational Interface#
- Log into your SmartERP instance at
https://smarterp.et/odoo. - Open the main App Switcher and select Ashewa AI.
- Select the operational workspace corresponding to this agent suite.
{screenshot:20-concepts-step1-navigation}
Step 2: Executing Agent Actions#
- Review agent prompts and execution parameters.
- Trigger the scheduled or on-demand workflow action.
- Validate output in the generated operational log.
{screenshot:20-concepts-step2-execution}
4. Advanced Configuration Points#
- Scheduled Crons:
muk_ai.ir_cron_agent_health_checkruns every 30 minutes. - Multi-Company Isolation: Multi-company record rules ensure agent context is isolated to Company 1 (
Ashewa Technology Solutions S.C.).
5. Comprehensive Troubleshooting Matrix#
| Symptom / Error | Probable Root Cause | Resolution Action |
|---|---|---|
Agent unresponsive or timeout | Network latency or API endpoint outage. | Verify provider connection in Settings → AI Providers. |
Access Denied during agent execution | User lacks assigned operational permissions. | Assign user to the designated operational group. |