Type-I
Non-normative executor: produces outputs and performs tasks without entitlement logic.
Speed & convenience
Tool execution
No entitlement
- Can: generate drafts, call tools, complete workflows
- Cannot: justify why an assertion is institutionally permissible
- Risk: “well-logged wrongness” (trace without defensibility)
Type-II
Normative agent (local scope): bounded commitments with entitlement and evaluation before action.
Commitment
Entitlement checks
Refuse / revise
- Requires: Commit → Entitle → Evaluate → Release (local)
- Strength: task-scoped norm compliance and refusal behavior
- Gap: not automatically audit-survivable institutionally
Type-III
Institutional normative agent: AER gates, defeaters, policy versions, accountable roles, and audit-ready artifacts.
Ask → Evidence → Release
Defeaters
Policy-versioned trace
Human accountability
Ask: normalize intent into bounded artifact request (audience, posture, prohibitions, accountable roles)
Evidence: gather only from approved sources; bundle + reference; flag gaps
Release: defeater checks; approve-for-review / downgrade / refuse; log policy version + evidence bundle ID
Type-III is not “more autonomy.” It is less autonomy, more answerability:
outputs are drafts for accountable humans to approve.