Hold the ceiling at A4 for h2r control tower. The tower processes at scale with deterministic rules. Payroll disbursement keeps a dual human approval because an error is unrecoverable within the pay cycle. Raise it only after two consecutive quarters where the override rate stays under five percent and every override has a written cause.

Hold the ceiling at A4 for s2p control tower. Three-way match and invoice capture are the most mature agentic transactions in the enterprise. Bank detail changes hold a human gate — that is where the fraud is. Raise it only after two consecutive quarters where the override rate stays under five percent and every override has a written cause.

Hold the ceiling at A4 for o2c control tower. Matching, billing and dunning are fully agentic. Credit holds on strategic accounts and write-offs above threshold are human decisions with revenue consequences. Raise it only after two consecutive quarters where the override rate stays under five percent and every override has a written cause.

Hold the ceiling at A4 for r2r control tower. Reconciliation and accrual mechanics run agentic. The close sign-off is a personal attestation by a named officer and will never be delegated to an agent. Raise it only after two consecutive quarters where the override rate stays under five percent and every override has a written cause.

Hold the ceiling at A4 for service catalog & intake. Intake and routing are pure classification. Adding a service to the catalog commits delivery capacity and holds an approval. Raise it only after two consecutive quarters where the override rate stays under five percent and every override has a written cause.

Hold the ceiling at A2 for global process ownership. Mining and variant detection are agentic. Mandating one global process overrides local judgment across jurisdictions and needs a human process owner to carry it. Raise it only after two consecutive quarters where the override rate stays under five percent and every override has a written cause.

Agents in this lane may act without a human when the payroll transaction sits inside the stated value, risk and confidence envelope. Outside it, the unit holds at a gate with a named approver and a running clock.

Every autonomous decision writes inputs, the rule version applied, the model and prompt version, the output and a reversal path. An action with no evidence record is treated as a control failure, not a fast decision.

Agents in this lane may act without a human when the invoice sits inside the stated value, risk and confidence envelope. Outside it, the unit holds at a gate with a named approver and a running clock.

Every autonomous decision writes inputs, the rule version applied, the model and prompt version, the output and a reversal path. An action with no evidence record is treated as a control failure, not a fast decision.

Escalation is mandatory when confidence falls below the floor, when two options sit inside the confidence band, or when a break condition on a ratified position fires. Tower Lead, Source-to-Pay owns the response clock.

The ceiling for this lane is 93 on the platform scale. Three-way match and invoice capture are the most mature agentic transactions in the enterprise. Bank detail changes hold a human gate — that is where the fraud is. The ceiling is a governance decision, not a technical limit, and only Tower Lead, Source-to-Pay can propose moving it.