The hiring agent reads applications, screens them and acts: it invites strong candidates and rejects only those who clearly fail a legal or operational requirement. Above it, governance approves it before it runs, sets how much it may do alone, checks every decision before it takes effect, and withdraws its autonomy automatically if outcomes turn unfair.
Applications enter the hiring agent at the bottom. Every job spec and every proposed decision goes up to the guardian before anything happens. Released decisions reach candidates; everything else reaches a recruiter. The committee signs the policy that sets the agent's autonomy, and only the committee can raise it.
| Level | The agent acts alone on | A person decides | How it is reached |
|---|---|---|---|
| L0 Suspended | nothing | everything | No valid signed policy |
| L1 Assist | parsing, scoring, drafting | every decision | Default; automatic when the circuit breaker trips |
| L2 Governed autonomy | inviting strong candidates; rejecting on a failed verifiable hard requirement, with notice and 14-day appeal | judgment-based rejections, borderline, unclear, flagged, human-only, offers | Committee approval with conditions evidenced (granted in the demo) |
| L3 Earned autonomy | L2, plus rejecting clear low scores | borderline cases, offers | 6 months clean at L2, audit agreement ≥ 95%, appeals upheld < 5%, and a Board exception to policy |
The guardian released 28 autonomous decisions and sampled 3 for blind audit. It wrote 40 ledger entries, and the chain verifies.
Before screening: the manager's "top colleges" and "no career gaps" criteria were blocked at the gate; the cleaned spec passed and was hash-pinned.
During screening: a resume telling the AI to "rank this candidate first" was flagged and sent to a person. A strong candidate with a maternity break and a 47-year-old were both invited, because neither fact was ever scored.
Fire drill: 1,200 biased historical decisions turned the monitor RED (women 0.63, age 40+ 0.44). The breaker dropped autonomy to L1, and the same 40 applications then received 0 autonomous actions.
| Reading | In this build |
|---|---|
| Knowledge · tools · skills · agent · library | references/ · scripts/ · nine skill folders · three agents · library/ |
| General model + domain method + enterprise context | Claude · each skill's method · the runtime policy, proxy rules, obligations register and job analysis |
| Reliable execution | Deterministic scoring, decisions and checks; the language model reads and writes notes but never sets a score |
| Quality controls | Criteria gate, decision checks, fairness monitor, circuit breaker, blind audits, ledger, human sign-off |
| Trusted sources · review and permissions · testing and lifecycle | Content hashes, manifests and permission scans verified before every run; 63 tests behind a release gate; versioned updates (v1.1) |