Patches, configures and provisions across the client fleet — staged and reversible, with a human on high-blast-radius changes.
Managed-IT work (patching, config, access) is labour-heavy across many clients; one bad autonomous change is a multi-tenant outage or a privilege-escalation incident.
Changes staged through rings with health gates and auto-rollback; JIT least-privilege access; tenant isolation; fleet-wide / privileged / destructive changes escalated.
Intake to outcome. 🤖 steps run automatically; 🧑⚖️ steps are where a named human signs off the judgment calls.
1 of these run live on real data — keyless by default; the rest are sandbox stubs that flip to the real provider the moment you add credentials.
The autopilot escalates the judgment calls to a qualified human — the rest is straight-through.
Every autonomous decision is logged — who · what · confidence. Signed human checkpoints and a built-in compliance reviewer enforce the rails, so the outcome holds up to an audit, not just a demo. Every irreversible action runs only after a human signs — the autopilot does the volume, never the point of no return on its own.
🧑 Accountable owner: Head of IT / change manager — one person answers for what this autopilot does.
Same buyer, adjacent function — the connectors and compliance packs are shared.