Organization governance
Governance is the organization-level counterpart to per-agent autonomy. It sets rules that apply to every agent in the organization, on top of each agent’s own settings.
Find it in Console → Settings → Organization, in the Governance panel. Owners and admins can see it; only the organization owner can change it.
Minimum approval level
Section titled “Minimum approval level”The minimum approval level is the least cautious any agent here may be.
An agent set looser than the minimum is raised to it. An agent set stricter keeps its own, stricter setting — the floor is a floor, not a target. Set it to Supervised and nobody can quietly put an agent on Autopilot.
Leave it at no minimum and each agent decides for itself, which is the default.
Organization approval rules
Section titled “Organization approval rules”The same always allow / must ask / never rules you can set on a single agent, applied to every agent in the organization. Rules are written by action — send_email, bash:git push*, mcp:linear/*.
“Never” wins over everything an individual agent allows. It is the one control that cannot be worked around from inside an agent’s own settings, which is what makes it the right place for something your company simply doesn’t do.
Always confirm payments and credentials
Section titled “Always confirm payments and credentials”Every organization starts with a final confirmation on spending money and handling secrets, regardless of any agent’s autonomy level or rules. This is the safety floor, and it is on by default.
When a question goes unanswered
Section titled “When a question goes unanswered”An agent can stop to ask a clarifying question, and it can mark one answer as Recommended. Unattended work (a Loop, a scheduled follow-up, a long goal) can then sit waiting for a reply that nobody is there to give.
Choose how long a question waits: Keep waiting (the default), 15 minutes, 1 hour, 4 hours or 24 hours. After that time with no reply, the agent takes the answer it recommended and carries on, and it is told that nobody chose it.
Where the agent marked no recommended answer, it is told nobody chose. It makes the safest reasonable assumption and says in its reply what it assumed. If a wrong guess would be costly (the wrong audience, the wrong data, something hard to undo), it stops and reports what it needs answered instead.
Whatever the agent does next still asks for approval wherever its autonomy level says it must. Approvals for a plan or an action are never answered for you, whatever you set here. Only questions are. An approval nobody answers within three days counts as rejected.
With Keep waiting, a question still unanswered after 72 hours expires: the agent is told nobody replied and finishes without the answer.