MACHINE CREW /
SECURITY / AUTHORITY / RESPONSIBILITY

Permissions before execution.

Each role has defined access, execution rules and escalation paths. These are deployment design principles; the actual configuration is verified for client systems.

Three operating modes

READ

Reads data and prepares recommendations.

DRAFT

Drafts an action. An authorised person approves execution.

AUTONOMOUS

Executes only agreed action types after rule and limit checks.

ERP access

A dedicated service identity with minimum permissions for specified objects and actions. No general administrator access. The authority matrix is agreed and verified before launch.

Credentials

We design integrations so the model receives no passwords or keys. Credentials live in an agreed secrets manager, preferably in the client environment. An authorised connector retrieves them when needed. They are excluded from prompts and logs.

Revocation and incidents

Before launch, we agree access revocation, secret rotation, process pause, owner notification and fallback handling. Network restrictions, OAuth and MFA depend on system capabilities.

Audit trail

For significant actions we define records of time, role, system, data source, approval, outcome and error. Data scope, retention and access are agreed with the client.

Responsibility

Machine Crew is responsible for technical operation within the agreed scope. The client defines business policies, supplies data and appoints approvers. Responsibility for erroneous communications, losses, escalations and data protection is allocated in the contract. Approval does not automatically remove Crew responsibility for technical faults.

Communication and data

Digital workers identify themselves as AI in direct human interaction. Before deployment, we agree what data model providers receive, its location, retention and processing terms. Access is limited to process needs.

Example authority matrix

Digital Order Specialist. Limits and scope are agreed individually.

Read order data
READ
Prepare an ERP order
DRAFT
Send an approved status message
AUTONOMOUS
Discount beyond the agreed limit
MANAGER APPROVAL
Change master data or accept contractual liability
PROHIBITED
The question is not “WHICH AI SHOULD WE BUY?”

Start with the tasks your team should not have to do by hand.

Describe your business and process. Explore where a digital team could help, what capacity it might release and where to start.

5–8 minutes. Instant results: process time and cost, automation scenarios and next steps. No email required.

Free initial analysis