Synced from Hive. This page is pulled from kubestellar/hive@v4 during the docs build. Edit the canonical source in the Hive repository.

ACMM Policy Matrix

Policy Modes

Each agent runs in of four modes, controlling what actions it can take on GitHub.

ModeSuffixBeadsIssuesPRsMergeGH Auth
Advisory-advisory.mdYesNoNoNoNo
Measured-measured.mdYesYesNoNoYes
Holdgated-holdgated.mdYesYesYes + hold labelNoYes
Full-full.mdYesYesYesYes (auto on green CI)Yes
  • Advisory: Agent observes and records findings as beads on the dashboard. No GitHub interaction.
  • Measured: Agent can file GitHub issues to make findings visible to the team. No code changes.
  • Holdgated: Agent can write code and open PRs, but every PR gets a hold label. A human must review and remove hold before merge. Agent never merges.
  • Full: Agent operates autonomously — opens PRs and merges on green CI. Highest trust level.

ACMM Levels

L1 — Inception (Assisted) (2 agents)

A single interactive advisor helps with repo setup and architecture decisions. Guide agent makes advisory beads. Brainstorm agent handles project inception — turning raw ideas into structured KB facts and scaffold. No feedback loops. See the Inception operator guide for the end-to-end workflow and API reference.

AgentModeTemplate
guideadvisoryguide-advisory.md
brainstormadvisorybrainstorm-advisory.md

L2 — Advisory (Instructed) (5 agents)

Agents observe and report findings as advisory beads on the dashboard and tracking issue. No GitHub issues or PRs created. Humans decide what to act on.

AgentModeTemplate
supervisoradvisorysupervisor-nogithub.md
scanneradvisoryscanner-advisory.md
qualityadvisoryquality-advisory.md
guideadvisoryguide-advisory.md
brainstormadvisorybrainstorm-advisory.md

L3 — Quality-Gated (Measured) (6 agents)

Quality agent opens GitHub issues and PRs about testing gaps, coverage, and CI workflows. All other agents remain advisory. CI-maintainer joins to monitor build health. Key artifact: measurement infrastructure.

AgentModeTemplate
supervisoradvisorysupervisor-nogithub.md
scanneradvisoryscanner-advisory.md
ci-maintaineradvisoryci-maintainer-advisory.md
qualityholdgatedquality-holdgated.md
guideadvisoryguide-advisory.md
brainstormadvisorybrainstorm-advisory.md

L4 — Security-Aware (Adaptive) (7 agents)

All agents open GitHub issues — bugs, docs gaps, CI problems, security vulnerabilities. Quality, sec-check, and ci-maintainer may open PRs. Security agent joins. Closed-loop feedback: agents act on their own findings.

AgentModeTemplate
supervisoradvisorysupervisor-nogithub.md
scannermeasuredscanner-issues.md
ci-maintainerholdgatedci-maintainer-holdgated.md
qualityholdgatedquality-holdgated.md
guidemeasuredguide-issues.md
sec-checkholdgatedsec-check-holdgated.md
brainstormadvisorybrainstorm-advisory.md

L5 — Semi-Autonomous (Semi-Automated) (9 agents)

Agents open issues AND pull requests. All PRs get a hold label — humans batch-review and approve. Architect produces RFCs, strategist coordinates across agents. The system proposes; it does not merge autonomously.

AgentModeTemplate
supervisoradvisorysupervisor-nogithub.md
scannerholdgatedscanner-holdgated.md
ci-maintainerholdgatedci-maintainer-holdgated.md
qualityholdgatedquality-holdgated.md
guideholdgatedguide-holdgated.md
sec-checkholdgatedsec-check-holdgated.md
architectholdgatedarchitect-holdgated.md
strategistholdgatedstrategist-holdgated.md
brainstormadvisorybrainstorm-advisory.md

L6 — Fully Autonomous (10 agents)

Agents open issues, create PRs, and auto-merge on green CI. No hold label. Outreach agent handles community engagement (highest trust — external-facing). Governor at fastest cadence.

AgentModeTemplate
supervisoradvisorysupervisor-nogithub.md
scannerfullscanner-automerge.md
ci-maintainerfullci-maintainer-full.md
qualityfullquality-full.md
guidefullguide-full.md
sec-checkfullsec-check-full.md
architectfullarchitect-full.md
strategistfullstrategist-full.md
outreachfulloutreach-full.md
brainstormadvisorybrainstorm-advisory.md

Example config alignment

src/hive.yaml.example uses the built-in quality lane for automated test suites, coverage gates, and regression checks. There is no built-in tester lane in the ACMM packs, known-agent defaults, or shipped policy templates; operators who want a separate tester must define it as a custom agent with explicit metadata and a policy template.

Key Rules

  1. All PRs are holdgated below L6. No agent can auto-merge unless running at L6 (Fully Autonomous).
  2. Advisory agents never get GH auth. The ${GH_AUTH} template variable is injected into measured, holdgated, and full templates.
  3. Supervisor uses no-GitHub advisory mode. At every level, supervisor uses supervisor-nogithub.md in the built-in ACMM packs — it monitors agent health, not code.
  4. Mode escalation is per-agent. At L4, some agents are measured (issues) while others are holdgated (issues + PRs). The level defines the mix.
  5. Knowledge priming works at all levels. The ${KNOWLEDGE} template variable injects relevant facts from git sources and wiki layers regardless of the agent’s mode.
  6. Brainstorm is always advisory. It produces KB facts and beads, never GitHub issues or PRs. Its role evolves from inception (L1) to ideation (L2+), but its mode stays advisory at all levels.

Changing a hive’s ACMM level

Promoting or demoting a running hive between levels is a single operation — the hive reconciles its agent roster and per-agent modes to match the target level.

From the dashboard: open the Governor config and set the ACMM level. This is the normal path.

Over the API: PUT /api/packs/level with {"level": N} where N is 1–6.

What happens when the level changes (handlePackSetLevelApplyPack):

  1. The new level is written to acmm_level in hive.yaml and persisted.
  2. Per-agent mode overrides are cleared so stale modes from the previous level are not re-applied on the next config reload.
  3. ApplyPack cascades the target level’s pack-defined agent fields (mode, kick_template, description, …) into the live config and reconciles the roster — adding every agent the level introduces (for example architect/strategist at higher levels) and applying each agent’s mode for that level (advisory → measured → holdgated → full).

Notes:

  • Promotion adds agents and capability; demotion narrows it. Moving up to L6 makes agents auto-merge on green CI; moving down returns them to holdgated or advisory. The per-level capability grid is the table at the top of this page.
  • Operator-created agents are preserved. ApplyPack reconciles pack agents; agents you created yourself are not removed by a level change (deletion is tombstoned separately — see agent configuration).
  • On a hosted hive the level can also be hub/admin-managed; the ConfigMap seed is authoritative for acmm_level on those (see the operator reference on config precedence).