Customer data glossary

Rail level

A rail level is a step from L0 to L4 on a ladder that sets how much an AI agent may do on one job, and it belongs to a job, not to an agent or a company.

By Art Kukharenko · Published · Updated

All glossary terms

Part of the Learn hub and the customer data glossary.

What it means in practice

A rail level names what the agent may do and what the person's role becomes. The steps match the stages of the AI marketing operations roadmap.

LevelNameThe agent mayThe person isRoadmap stage
L0OffNothing; the job is manualOwnerStage 1
L1ReadRead masked data or aggregates, summarise, answer questionsReader who checksStage 2
L2ProposeDraft or recommend; nothing changesReviewer who accepts or rejectsStage 2
L3Execute after approvalExecute one named action after a named person approves the diffApproverStage 3
L4Act within boundsAct alone on low-risk, reversible actions within written limits, with auto-revertAuditorStage 4

The ladder stops at L4. Promotion needs written evidence and owner sign-off. Demotion is automatic on triggers: error budget breached, serious escaped error, drift alert, open incident, a model or tool change without a regression pass, no named owner.

Other ladders use the same numbers differently. On the Cloud Security Alliance scale, L1 means a person approves each action, and L5 is full autonomy, not considered appropriate for enterprise use today 1. So rail L3 sits closer to its L1 or L2. Feng, McDonald and Zhang also name levels by the user's role 2.

Rail levels are a vendor-neutral method, not a product setting. PrivyCDP uses AI to help review groups, workflows, unusual events and reports.

Example (mobile network, illustrative): the Anomaly Watcher runs at L1, L4 pause. It explains alerts for a person to check, and it can pause one send under a written rule. Only a person resumes the send.

Where it matters

Back to the customer data glossary or the Learn hub.

Browse use casesFunction playbooksAgent roster

FAQ

What are the levels of AI agent autonomy?

Rail levels use five, from L0 Off to L4 Act within bounds. Other published scales differ, so check which ladder a vendor means before comparing numbers.

Why does the ladder stop at L4?

L4 already lets an agent act alone, on low-risk, reversible actions within written limits. Anything beyond that would let the agent set its own limits or take actions nobody can undo, which is what these rails exclude.

Sources

  1. Cloud Security Alliance, "Leveling Up Autonomy in Agentic AI"
  2. Feng, McDonald and Zhang, "Levels of Autonomy for AI Agents"

Further reading

Published: · Updated:

Editorial dates describe content changes. Confirm current sources before making legal, security or purchasing decisions.