Guardrails that stop Autopilot from doing anything destructive — rate limits, confidence thresholds, blast radius caps, and one-click kill switch.
Quick answer
Autopilot only runs an action when confidence ≥ threshold, blast radius ≤ cap, and rate limits are green. A kill switch stops all automation instantly.
Guardrails
Confidence threshold (default 0.85) — AI actions require high confidence
Blast radius cap — no more than N sites per action per hour
Rate limit — max actions per site per hour, and per org per day
Business hours — restrict noisy actions to working hours
Kill switch — Settings → Autopilot → Pause All
Dry-run mode — new rules run in shadow for 7 days before going live
Where to find it in Lemwatch
Settings → Autopilot → Safety.
How to configure
Set confidence threshold for AI-driven actions (start at 0.9 if cautious).
Set blast radius (e.g., 5 sites per action per hour).
Enable dry-run for any new custom rule.
Review the audit log weekly.
FAQ
What happens when a guardrail trips?
The action is skipped and logged as guardrail_blocked with the reason.
Can I set per-site overrides?
Yes — critical sites can require manual confirmation for all actions.