Standard operating procedure · AD8C · Administration
Safety Doctrine Review
Judgment procedure owned by Environment Health & Safety in Administration. 6 numbered steps, 1 of them a person deciding and 5 of them agent work … more
Procedure code
AD8C
Judgment
Rule versions in force
v4.0 · v1.1 · v4.3 · v5.7
4 governing rules stacked over it
In force since
2024-10-23
Earliest effective date across those rules
Last reviewed
2026-06-03
Latest review date across those rules
Rules approved by
1
Head of EHS
Rule health
3/4
1 under review · 0 superseded
There is no document register behind this header. The version, the dates and the approver names are read off the governing rules this procedure runs inside, which is the closest thing the estate holds to a document control record. Nobody wrote these procedures. There is no document library behind this page and no Word file anywhere in the estate. Every procedure below is generated from rows this platform already holds: the line and its ordered stations, the owning team and the person accountable for it, the policy items bound to that team, and the governance gates seeded against the function. The steps, the owners, the gates, the approvers, the dwell times and the volumes are read straight off those rows. The sentences that join them together are generated. Read a procedure as the estate describing itself, not as a document somebody signed.
Purpose and scope
What this procedure is for and where it stops
To run safety doctrine review to one repeatable standard inside Environment Health & Safety, part of Administration. more
Entry condition
Runs judgment. Starts when a leadership team frames the question.
Exit condition
The unit clears ratify, released by Head of EHS. An evidence record is written for the step and the unit leaves the line.
In scope
- Every unit of safety doctrine review raised inside Environment Health & Safety, from the trigger below through to the final step.
- 5 of the 6 steps, which run without a person present.
- 1 decision that stops the line until a named person releases it.
Out of scope
- Anything outside the envelope set by the owning team. It leaves the line at a gate and becomes the named approver's decision.
- Work that belongs to another function. This line records no handoff, so nothing leaves it mid-flow.
- Shared-spine work. This line has none; every step is done inside the function.
Who owns it
Runs the line
EHS Orchestrator
Accountable person
Head of EHS
The end of the escalation path. Above them sits Administration Chief of Staff for the function.
That team’s remit
Owns safety case work end to end inside Administration. more
That remit describes the whole team, not this one procedure, so its counts are larger than the ones on this page.
Autonomy
50% now · ceiling 54%
Deliberately the lowest ceiling in Administration. more
The procedure, step by step
6 numbered steps · 1 of them stop for a person
A step is one station on the line. more
| No. | Step | Who does it | What happens | System of record | Time on the step | In flight |
|---|---|---|---|---|---|---|
| 01 | Frame question Agentstrategy | Incident Intake Agent | Incident Intake Agent performs this step unattended at the strategy layer, inside the envelope its owning team has set, and writes an evidence record naming the actor, the authority it acted under and the digests of what it read and wrote. | Group ERP — Financials | 2.1 daysstandard 2.4 days | 42 |
| 02 | Gather evidence Agentstrategy | Root Cause Agent | Root Cause Agent performs this step unattended at the strategy layer, inside the envelope its owning team has set, and writes an evidence record naming the actor, the authority it acted under and the digests of what it read and wrote. | Group ERP — Financials | 40.0 hrsstandard 3.5 days | 14 |
| 03 | Model options Agentstrategy | Corrective Action Agent | Corrective Action Agent performs this step unattended at the strategy layer, inside the envelope its owning team has set, and writes an evidence record naming the actor, the authority it acted under and the digests of what it read and wrote. | Group ERP — Financials | 16.3 hrsstandard 31.6 hrs | 1 |
| 04 | Draft position Agentstrategy | Inspection Scheduling Agent | Inspection Scheduling Agent performs this step unattended at the strategy layer, inside the envelope its owning team has set, and writes an evidence record naming the actor, the authority it acted under and the digests of what it read and wrote. | Group ERP — Financials | 2.5 daysstandard 4.3 days | 32 |
| 05 | Challenge Agentstrategy | Regulatory Reporting Agent | Regulatory Reporting Agent performs this step unattended at the strategy layer, inside the envelope its owning team has set, and writes an evidence record naming the actor, the authority it acted under and the digests of what it read and wrote. | Group ERP — Financials | 24.0 hrsstandard 40.6 hrs | 21 |
| 06 | Ratify HumanpolicyDecision | Head of EHS Releases: Head of EHS | Work stops. Head of EHS reviews what the line has produced and either releases the unit or sends it back. Nothing downstream of this step runs until that decision is made.Holds until: Held for a named human when the unit exceeds the safety case decision envelope, when confidence falls below the floor, or when a policy clause is engaged. | Group ERP — Financials | 35.1 hrsstandard 2.6 days | 2 |
The swimlane
The same steps, laid out by who is holding the work
Three lanes: a person deciding, an agent working, and the shared services spine. more
Run the procedure
One unit walked along that swimlane on the happy viable agentified path
Press run and a single unit enters at station 01. Each station takes exactly the dwell this platform records for it and is held by whoever the estate says holds it. more
Nothing has happened yet. more
- The lanes are the recorded lanes. 1 of the 6 stations stop for a person and every one of them still does on this run.
- Every one of the 1 decision is still taken by the person who holds it. The happy path is that each one is released first time, not that it is skipped.
- The owning team is held to a 54% autonomy ceiling and this run sits at 84% unattended, inside it.
- 1 system is attributed across the stations, and 0 of them are connected. Nothing in this run has been watched executing against a real system of record.
One decision, held by Head of EHS. It is the last one on the line, so nothing is offered … more
- 06 Ratify — The last decision on the line. Something on every procedure ends with a person, so this one is never offered.
This is a run, not a forecast. more
Happy means nothing goes wrong: no station raises an exception, no gate sends the unit back, no rework loop fires and nothing sits in a queue between stations. more
The second clock is the allowance. more
A decision may be handed to the agent lane only if two things hold … more
The run reads the station rows only. more
What this run does not model: arrival patterns, contention between procedures for the same person, shift patterns, weekends, learning curves, and the cost of anything. more
Run it again, going wrong
The same unit, the same stations, broken the way the estate already records breaking
This is the same unit on the same stations, breaking. more
No break below was chosen. more
One play head, two tracks, the same scale. The clean run stops when it runs out of stations; the other one keeps going.
As written
6 stations, nothing waiting, nothing sent back
0 min of 9.4 days
now Frame question · Incident Intake Agent · 2.1 days
As the ledger has it
the same stations, plus 3 categories the estate already counts
0 min of 9.6 days
now Frame question · Incident Intake Agent · 2.1 days
What breaks, and where it is counted
No break below was chosen. more
What the two runs say together
3 counted categories land on this procedure. more
What this run cannot claim
These breaks are shown together on one unit so the shape of a bad day fits on one screen. more
Two clocks run. Worked time is the sum of the time the work is actually being done … more
Roles and responsibilities
7 named parties
The responsibility grid is assigned by a rule, not lifted from a chart. more
| Party | RACI | Steps | Duty | Escalates to |
|---|---|---|---|---|
EHS Orchestrator orchestrator | Runs the line | 0 | Sequences this line, holds its timetable and decides what has to surface to a person. more | Raises to Head of EHS when a unit falls outside the envelope or confidence drops below the floor. |
Incident Intake Agent agent A1% autonomy · ceiling A1% 88% clean · 6% overridden | Responsible | 1 | Executes the environment health & safety step it owns, posts its evidence, and hands the unit to the next stage. | Escalates to Head of EHS when the unit falls outside the decision envelope or confidence drops below the floor. |
Root Cause Agent agent A3% autonomy · ceiling A3% 95% clean · 8% overridden | Responsible | 1 | Executes the continuous improvement step it owns, posts its evidence, and hands the unit to the next stage. | Escalates to Head of Continuous Improvement when the unit falls outside the decision envelope or confidence drops below the floor. |
Corrective Action Agent agent A1% autonomy · ceiling A1% 88% clean · 4% overridden | Responsible | 1 | Executes the environment health & safety step it owns, posts its evidence, and hands the unit to the next stage. | Escalates to Head of EHS when the unit falls outside the decision envelope or confidence drops below the floor. |
Inspection Scheduling Agent agent A1% autonomy · ceiling A1% 90% clean · 8% overridden | Responsible | 1 | Executes the environment health & safety step it owns, posts its evidence, and hands the unit to the next stage. | Escalates to Head of EHS when the unit falls outside the decision envelope or confidence drops below the floor. |
Regulatory Reporting Agent agent A1% autonomy · ceiling A1% 96% clean · 14% overridden | Responsible | 1 | Holds the rules that bind every other agent in environment health & safety. more | Escalates on any decision that would breach a live policy version, with the clause cited. |
Head of EHS person | Accountable and responsible | 1 | Holds 1 decision on this line. more | Accountable to Head of EHS for the decisions held here. |
Decision points and escalation
1 places this procedure stops
06 · Ratify
35.1 hrsHeld for a named human when the unit exceeds the safety case decision envelope, when confidence falls below the floor, or when a policy clause is engaged.
Head of EHS
Handoffs out of this procedure
Nothing leaves this procedure for another function. It completes inside Environment Health & Safety.
The rules this procedure runs inside
4 governing rules
Environment Health & Safety Decision Envelope
under reviewAD8-POL-200 · envelope · vv4.0
Agents in this lane may act without a human when the safety case sits inside the stated value, risk and confidence envelope. more
Approved by Head of EHS · in force 2025-06-16 · reviewed 2026-05-30
Binds Incident Intake Agent, Root Cause Agent, Corrective Action Agent, Inspection Scheduling Agent, Training Compliance Agent
EU · UK · US
Environment Health & Safety Evidence Standard
activeAD8-POL-201 · evidence · vv1.1
Every autonomous decision writes inputs, the rule version applied, the model and prompt version, the output and a reversal path. more
Approved by Head of EHS · in force 2025-06-12 · reviewed 2026-04-19
Binds Incident Intake Agent, Root Cause Agent, Corrective Action Agent, Inspection Scheduling Agent, Training Compliance Agent
Global
Environment Health & Safety Escalation Rule
activeAD8-POL-202 · escalation · vv4.3
Escalation is mandatory when confidence falls below the floor, when two options sit inside the confidence band, or when a break condition on a ratified position fires. more
Approved by Head of EHS · in force 2026-04-20 · reviewed 2026-04-30
Binds Incident Intake Agent, Root Cause Agent, Corrective Action Agent, Inspection Scheduling Agent, Training Compliance Agent
Global · EU
Environment Health & Safety Autonomy Ceiling
activeAD8-POL-203 · ceiling · vv5.7
The ceiling for this lane is 54 on the platform scale. more
Approved by Head of EHS · in force 2024-10-23 · reviewed 2026-06-03
Binds Incident Intake Agent, Root Cause Agent, Corrective Action Agent, Inspection Scheduling Agent, Training Compliance Agent
LATAM · US
Systems this procedure touches
1 named · 0 connected
System attribution is a rule, not a reading. more
| System | Vendor | Domain | Criticality | Steps | Connection |
|---|---|---|---|---|---|
| Group ERP — Financials | SAP S/4HANA | ledger | critical | 6 | modeled |
0 of the 1 systems on this procedure is connected to the platform, and none of the twenty-six in the estate register is. 1 of them are marked as taking a write back, which is a property of the system, not a live path from here.
How it performs
End to end
9.4 days
Summed from the time each step sits, standard 15.9 days — running at 59% of the standard.
Touchless
11%
Agent share
83%
A week
1
In flight
112
Effort a week
2,109 human minutes · 11,437 agent minutes
Volume multiplied by the time on each step. more
Assurance over this procedure
4 governance gates sit above it
The twenty-four controls and eighteen exception classes in this platform are held at estate level … more
| Gate | What trips it | Who releases it | Clock | Waivable |
|---|---|---|---|---|
Travel above $5,000 approval | Any itinerary exceeding $5,000 in total cost | Function leader | 1 business day | No |
Security-sensitive itinerary approval | Travel to any listed destination or any executive protection requirement | Security and Chief Administrative Officer | 2 business days | No |
Records disposition approval | Any deletion, destruction or retention-period change | Records officer and Legal | 5 business days | No |
Executive calendar displacement escalation | Any change that displaces an existing external commitment | Executive assistant | 2 hours | No |
Next to it on the same team
Environment Health & Safety
What this document is and is not
These procedures describe the modeled estate. more
Actions
What is waiting on a person
What one procedure document gives you, and what to check before you treat it as the standard.
named approvers appear across the library
Every decision point on every procedure carries a job title, not a queue. more
steps in the library hand their unit to another function
A handoff is where a procedure stops being one team’s problem. more
controls exist in the estate, and they belong to no procedure in particular
Controls and exception classes are held estate-wide. more
Operations
What this desk is allowed to start
A surface that only reports is not operable. more
Trigger and bound
A procedure document prints purpose, scope, entry and exit, the numbered steps with the actor on each, the roles and their RACI position, the swimlane, the decision points and escalation, the handoffs, the governing rules with version and approver, the systems by rule and the timings. more
Live observability
What the record shows right now
The whole library, by lane, so a single document can be read against the estate it came from. more
Current distribution
2,748 steps
Is policy and strategy coming to fruition
Whether the written intent is holding here
Half. The document is complete and every actor on it is measured more
Not holding on the record
A procedure here carries a version, an approver, an in-force date and a last-review date. more