Autonomy Envelopes
Per-task permission boundaries — budget caps, tool allowlists, time windows
Tier 1
env-readonly-rag
Read-only RAG search and document retrieval. No writes, no external calls, no cost.
qdrant_search
sqlite_read
rag_query
Tier 2
env-psf-sweep
PSF opportunity sweep — read freelance platforms, match capabilities, draft proposals. No submission without human approval.
qdrant_search
sqlite_read
sqlite_write
psf_sweep
proposal_draft
Tier 2
env-provider-micro
Small provider API calls under $0.05 — embeddings, completions, STT. Hard budget cap enforced.
openai_embed
openai_complete
whisper_stt
qdrant_upsert