Trust is earned per error signature
Every repo starts at T0 Observe with no permissions. Autonomy graduates only against evidence — ≥20 attempts, ≥90% approval, zero reverts — and one revert demotes it a tier.
Competitors ship one global on/off switch, because per-signature graduation needs outcome history they never stored.