Scope

When it’s used

Control over model/data/actions/system

Scope 1: No Agency

Human-driven workflows; AI just helps analyze or suggests (read-only).

Minimal: agent can’t change data or take actions.

Scope 2: Prescribed Agency

Agent can perform actions but only after human approves them (Human-in-the-loop).

Controlled: agent has permission but needs human consent before changing data/system.

Scope 3: Supervised Agency

Human triggers task, but agent executes autonomously (tool use, external calls, environment changes) within defined boundaries.

Higher: agent can act on its own, access tools/data, modify environment, but within limits.

Scope 4: Full Agency

Fully autonomous agents that can self-initiate tasks (based on triggers/patterns) and operate across systems with minimal human oversight.

Maximum: broad control over model, data, actions, and system; acts independently.

In simple terms, the more freedom an agent has, the more security you must apply agency and autonomy increase both responsibility and risk.

Why These Scopes Matter for Security

As you move from lower to higher AI agency scopes, the risks and responsibilities increase. Each scope gives the agent more control, more autonomy, and more access which means security must also scale accordingly.

• More control = more responsibility: The agent can modify systems and trigger workflows.
• More data access = stronger security required: Sensitive data demands tighter access control, encryption, and monitoring.
• More customization = more risks to manage: Tool use, API integrations, and autonomous actions expand attack surfaces.

Real-World Scenarios

• Scope 1: No Agency
  
  A marketing team uses an AI agent that only suggests email schedules. For example, they ask the agent: “When should we send our next newsletter?” The agent analyzes past open‑rates, engagement data, and suggests the best times, but it does not send the emails itself. A human still reviews the suggestion and sends the newsletter manually. This keeps control and risk low.
• Scope 2: Prescribed Agency
  
  A company’s HR department uses an AI agent to analyze job applications and shortlist candidates. The agent then proposes which applicants should be invited for interviews, but only after a human HR officer approves the list does the system send out interview invites. This gives efficiency (via AI analysis) while preserving human oversight for sensitive actions.
• Scope 3: Supervised Agency
  
  A scheduling assistant agent automatically books meetings: once a human defines the objective (e.g., “Set up a planning meeting with Team A and Team B next week”), the agent checks calendars, finds the best slot, sends invites, and updates calendars all without asking for approval each time. This saves time and reduces manual steps, while operating within defined boundaries.
• Scope 4: Full Agency
  
  A fully autonomous operations agent monitors internal systems in real‑time (e.g., server load, sales data, inventory levels) and when predefined conditions happen (e.g., “inventory below threshold” or “sales spike detected”), the agent self‑initiates workflows across multiple systems: reorder stock, notify supply chain, update dashboards, send alerts all without human intervention. This can greatly improve responsiveness and efficiency, but also carries the highest risk.

How to Choose Your Scope

Choosing the right agency scope for your AI agent is a critical step. The goal is to balance efficiency and autonomy with safety and security. Not every task requires full autonomy. Sometimes, a simple suggestion-based agent is enough.

Ask the Right Questions
To decide which scope fits your use case, consider the following: