LensReading which lens this session carries.

Standard operating procedure · IT6B · Information Technology

Application Release

Transactional procedure owned by Application Management in Information Technology. 6 numbered steps, 1 of them a person deciding and 5 of them agent work …

Procedure code

IT6B

Transactional

Rule versions in force

v4.1 · v3.8 · v2.9 · v2.4

4 governing rules stacked over it

In force since

2025-03-23

Earliest effective date across those rules

Last reviewed

2026-08-03

Latest review date across those rules

Rules approved by

1

Director, Application Services

Rule health

4/4

0 under review · 0 superseded

There is no document register behind this header. The version, the dates and the approver names are read off the governing rules this procedure runs inside, which is the closest thing the estate holds to a document control record. Nobody wrote these procedures. There is no document library behind this page and no Word file anywhere in the estate. Every procedure below is generated from rows this platform already holds: the line and its ordered stations, the owning team and the person accountable for it, the policy items bound to that team, and the governance gates seeded against the function. The steps, the owners, the gates, the approvers, the dwell times and the volumes are read straight off those rows. The sentences that join them together are generated. Read a procedure as the estate describing itself, not as a document somebody signed.

Purpose and scope

What this procedure is for and where it stops

To run application release to one repeatable standard inside Application Management, part of Information Technology.

Entry condition

Runs transactional. Starts when a threshold is crossed.

Exit condition

The unit clears verify.

In scope

  • Every unit of application release raised inside Application Management, from the trigger below through to the final step.
  • 5 of the 6 steps, which run without a person present.
  • 1 decision that stops the line until a named person releases it.

Out of scope

  • Anything outside the envelope set by the owning team. It leaves the line at a gate and becomes the named approver's decision.
  • Work that belongs to another function. This line records no handoff, so nothing leaves it mid-flow.
  • The 2 steps carried on the shared AI GBS spine. They are done for this line but not by this function.

Who owns it

Runs the line

Application Management Orchestrator

Accountable person

Director, Application Services

The end of the escalation path. Above them sits IT Chief of Staff for the function.

That team’s remit

Owns application change work end to end inside Information Technology.

That remit describes the whole team, not this one procedure, so its counts are larger than the ones on this page.

Autonomy

72% now · ceiling 84%

Health monitoring and known-fault remediation are agentic.

The procedure, step by step

6 numbered steps · 1 of them stop for a person

A step is one station on the line.

No.StepWho does itWhat happensSystem of recordTime on the stepIn flight
01

Schedule

Agentworkflow

Application Health Agent

Application Health Agent performs this step unattended at the workflow layer, inside the envelope its owning team has set, and writes an evidence record naming the actor, the authority it acted under and the digests of what it read and wrote.Configuration Management Database2.7 hrsstandard 3.5 hrs11
02

Impact scan

Agentworkflow

Release Coordination Agent

Release Coordination Agent performs this step unattended at the workflow layer, inside the envelope its owning team has set, and writes an evidence record naming the actor, the authority it acted under and the digests of what it read and wrote.IT Service Management45 minstandard 1.4 hrs7
03

Test

Agentworkflow

Integration Monitoring Agent

Integration Monitoring Agent performs this step unattended at the workflow layer, inside the envelope its owning team has set, and writes an evidence record naming the actor, the authority it acted under and the digests of what it read and wrote.Configuration Management Database1.8 hrsstandard 3.4 hrs37
04

Change board approve

HumanpolicyDecision

Director, Application Services

Releases: Director, Application Services

Work stops. Director, Application Services reviews what the line has produced and either releases the unit or sends it back. Nothing downstream of this step runs until that decision is made.Holds until: Held for a named human when the unit exceeds the application change decision envelope, when confidence falls below the floor, or when a policy clause is engaged.IT Service Management4.3 hrsstandard 8.6 hrs2
05

Deploy

GBSgbs

Vendor Escalation Agent

Vendor Escalation Agent performs this step unattended on the shared AI GBS transaction spine, outside the function, inside the envelope its owning team has set, and writes an evidence record naming the actor, the authority it acted under and the digests of what it read and wrote.IT Service Management1.8 hrsstandard 2.7 hrs17
06

Verify

GBSgbs

Vendor Escalation Agent

Vendor Escalation Agent performs this step unattended on the shared AI GBS transaction spine, outside the function, inside the envelope its owning team has set, and writes an evidence record naming the actor, the authority it acted under and the digests of what it read and wrote.IT Service Management12 minstandard 22 min38

The swimlane

The same steps, laid out by who is holding the work

Three lanes: a person deciding, an agent working, and the shared services spine.

Person1 station and 37% of the dwellAgent3 stations and 46% of the dwellShared spine2 stations and 17% of the dwell2 crossings between lanes
Human
decides
Agent
does the work
GBS
shared spine
System
attributed by rule
Configuration Management Database
IT Service Management
Configuration Management Database
IT Service Management
IT Service Management
IT Service Management
Click any station to see who does it, what it costs in time, the rule that gates it and the system attributed to it.

Run the procedure

One unit walked along that swimlane on the happy viable agentified path

Press run and a single unit enters at station 01. Each station takes exactly the dwell this platform records for it and is held by whoever the estate says holds it.

speed
worked clock
00:00
allowance clock
00:00
stations cleared
0/6
the happy path, worked time0 min of 12 hrs
the same run against its allowance0 min of 20 hrs
Human
decides · 1
Agent
does the work · 3
GBS
shared spine · 2
run log

Nothing has happened yet.

where the worked time goes12 hrs a unit
Person4.3 hrs · 37%Agent5.3 hrs · 46%Shared spine2.0 hrs · 17%2 crossings between lanes
what makes this path viable
  • The lanes are the recorded lanes. 1 of the 6 stations stop for a person and every one of them still does on this run.
  • Every one of the 1 decision is still taken by the person who holds it. The happy path is that each one is released first time, not that it is skipped.
  • The owning team is held to a 84% autonomy ceiling and this run sits at 63% unattended, inside it.
  • 2 systems are attributed across the stations, and 0 of them are connected. Nothing in this run has been watched executing against a real system of record.
what would have to change

One decision, held by Director, Application Services.

stays with a person
  • 04 Change board approve — The last decision on the line. Something on every procedure ends with a person, so this one is never offered.
what this run is, and what it is not

This is a run, not a forecast.

Happy means nothing goes wrong: no station raises an exception, no gate sends the unit back, no rework loop fires and nothing sits in a queue between stations.

The second clock is the allowance.

A decision may be handed to the agent lane only if two things hold …

The run reads the station rows only.

What this run does not model: arrival patterns, contention between procedures for the same person, shift patterns, weekends, learning curves, and the cost of anything.

Run it again, going wrong

The same unit, the same stations, broken the way the estate already records breaking

This is the same unit on the same stations, breaking.

No break below was chosen.

One play head, two tracks, the same scale. The clean run stops when it runs out of stations; the other one keeps going.

As written

6 stations, nothing waiting, nothing sent back

0 min of 12 hrs

now Schedule · Application Health Agent · 2.7 hrs

As the ledger has it

the same stations, plus 2 categories the estate already counts

0 min of 13 hrs

now Schedule · Application Health Agent · 2.7 hrs

personagentshared spinework the break addsnobody working it

What breaks, and where it is counted

No break below was chosen.

What the two runs say together

2 counted categories land on this procedure.

What this run cannot claim

These breaks are shown together on one unit so the shape of a bad day fits on one screen.

Two clocks run. Worked time is the sum of the time the work is actually being done …

Roles and responsibilities

6 named parties

The responsibility grid is assigned by a rule, not lifted from a chart.

PartyRACIStepsDutyEscalates to

Application Management Orchestrator

orchestrator

Runs the line0Sequences this line, holds its timetable and decides what has to surface to a person. Raises to Director, Application Services when a unit falls outside the envelope or confidence drops below the floor.

Application Health Agent

agent

A3% autonomy · ceiling A3%

93% clean · 10% overridden

Responsible1Watches application management continuously. Escalates to Director, Application Services when the unit falls outside the decision envelope or confidence drops below the floor.

Release Coordination Agent

agent

A3% autonomy · ceiling A3%

99% clean · 2% overridden

Responsible1Executes the application management step it owns, posts its evidence, and hands the unit to the next stage.Escalates to Director, Application Services when the unit falls outside the decision envelope or confidence drops below the floor.

Integration Monitoring Agent

agent

A3% autonomy · ceiling A3%

91% clean · 9% overridden

Responsible1Watches application management continuously. Escalates to Director, Application Services when the unit falls outside the decision envelope or confidence drops below the floor.

Director, Application Services

person

Accountable and responsible1Holds 1 decision on this line. Accountable to Director, Application Services for the decisions held here.

Vendor Escalation Agent

agent

A3% autonomy · ceiling A3%

94% clean · 8% overridden

Responsible2Runs the repeatable portion of application management inside the shared transaction spine at spine cost and spine controls.Escalates to Director, Application Services when the unit falls outside the decision envelope or confidence drops below the floor.

Decision points and escalation

1 places this procedure stops

04 · Change board approve

4.3 hrs

Held for a named human when the unit exceeds the application change decision envelope, when confidence falls below the floor, or when a policy clause is engaged.

Director, Application Services

Handoffs out of this procedure

Nothing leaves this procedure for another function. It completes inside Application Management.

The rules this procedure runs inside

4 governing rules

Application Management Decision Envelope

active

IT6-POL-200 · envelope · vv4.1

Agents in this lane may act without a human when the application change sits inside the stated value, risk and confidence envelope.

Approved by Director, Application Services · in force 2025-10-18 · reviewed 2026-06-07

Binds Release Coordination Agent, Vendor Escalation Agent, Configuration Agent, Lifecycle Agent

Global · EU

Application Management Evidence Standard

active

IT6-POL-201 · evidence · vv3.8

Every autonomous decision writes inputs, the rule version applied, the model and prompt version, the output and a reversal path.

Approved by Director, Application Services · in force 2025-03-23 · reviewed 2026-05-31

Binds Release Coordination Agent, Vendor Escalation Agent, Configuration Agent, Lifecycle Agent

Global · EU

Application Management Escalation Rule

active

IT6-POL-202 · escalation · vv2.9

Escalation is mandatory when confidence falls below the floor, when two options sit inside the confidence band, or when a break condition on a ratified position fires.

Approved by Director, Application Services · in force 2025-03-31 · reviewed 2026-05-29

Binds Release Coordination Agent, Vendor Escalation Agent, Configuration Agent, Lifecycle Agent

EU · UK

Application Management Autonomy Ceiling

active

IT6-POL-203 · ceiling · vv2.4

The ceiling for this lane is 84 on the platform scale.

Approved by Director, Application Services · in force 2026-06-14 · reviewed 2026-08-03

Binds Release Coordination Agent, Vendor Escalation Agent, Configuration Agent, Lifecycle Agent

US · Canada

Systems this procedure touches

2 named · 0 connected

System attribution is a rule, not a reading.

SystemVendorDomainCriticalityStepsConnection
IT Service ManagementServiceNow ITSMitsmhigh4modeled
Configuration Management DatabaseServiceNow CMDBitsmhigh2modeled

0 of the 2 systems on this procedure is connected to the platform, and none of the twenty-six in the estate register is. 1 of them are marked as taking a write back, which is a property of the system, not a live path from here.

How it performs

End to end

11.6 hrs

Summed from the time each step sits, standard 20.0 hrs — running at 58% of the standard.

Touchless

86%

Agent share

83%

A week

6,818

In flight

112

Effort a week

258 human minutes · 438 agent minutes

Volume multiplied by the time on each step.

Assurance over this procedure

4 governance gates sit above it

The twenty-four controls and eighteen exception classes in this platform are held at estate level …

GateWhat trips itWho releases itClockWaivable

Privileged access grant

approval

Any administrative, root or elevated entitlementIdentity governance and system owner4 business hoursNo

Firewall or network boundary change

approval

Any rule affecting segmentation, ingress or egressNetwork security lead1 business dayNo

Production database or destructive action

approval

Any data-affecting operation in production, including bulk deletionData owner and CIO delegate1 business dayNo

Major incident command

escalation

Any severity-one incident or suspected compromiseIncident commander15 minutesNo

What this document is and is not

These procedures describe the modeled estate.

Actions

What is waiting on a person

What one procedure document gives you, and what to check before you treat it as the standard.

Operations

What this desk is allowed to start

A surface that only reports is not operable.

Trigger and bound

A procedure document prints purpose, scope, entry and exit, the numbered steps with the actor on each, the roles and their RACI position, the swimlane, the decision points and escalation, the handoffs, the governing rules with version and approver, the systems by rule and the timings.

Live observability

What the record shows right now

The whole library, by lane, so a single document can be read against the estate it came from.

Current distribution

2,748 steps

Agent, inside the function1,38951%
Agent, on the shared spine85131%
Person deciding at a gate50818%

Is policy and strategy coming to fruition

Whether the written intent is holding here

Half. The document is complete and every actor on it is measured

Not holding on the record

A procedure here carries a version, an approver, an in-force date and a last-review date.