Once an agent meets its gates — 30 days in the current phase, 30+ runs, success rate above the threshold — the agents admin page shows a Promote button. Clicking it advances the agent to the next trust phase.
The gates, restated
| Promotion | Gates |
|---|---|
| read_only → write_restricted | ≥30 days in phase, ≥30 runs since last phase change, success rate strictly >90%. |
| write_restricted → write_full | ≥30 days in phase, ≥30 runs since last phase change, success rate strictly >95%. |
Force promotion
If you need to promote an agent before it meets the gates — usually for a debugging or backfilling situation — there’s a force option. Using it writes an agent_trust_phase_force_promotion event to the audit log with the user, the from-phase, the to-phase, and the reason you typed in. Treat force promotion as an incident, not a shortcut.
Demotion
If an agent’s accuracy regresses, demote it back to read_only. The audit log records the demotion the same way it records a promotion. The agent will need to earn the next promotion again from scratch — the 30-day clock resets.