Human first: the automation ladder
Nothing is automated before a person has run it by hand and understood it. Agents design the steps; zuki runs them. Since D27, writing docs, tests and code is delegated to agents and reviewed by zuki before it merges; running anything still climbs this ladder.
| Level | Who runs it | Moves up when |
|---|---|---|
| L0 By hand | zuki, one step at a time, from a runbook step | zuki has logged a clean run and understands each command |
| L1 Scripted | zuki, running one pnpm script that wraps the L0 steps | zuki has logged a clean run of the script |
| L2 Automated | CI or a scheduled job |
- A step climbs one level at a time. An agent may propose a promotion; zuki decides.
- Some steps stay at L0 for good: pushing to production, the cutover run, anything that touches v1 production, rotating keys and deleting data.
- Agents never hold credentials for the repository, staging or production, and never run anything against staging or production. They reach the repository only through the Claude GitHub app, on branches and pull requests, and never merge (D28).
- A step is done when zuki has logged a clean run, not when an agent has written it.