Your day-to-day job as the supervisor.
Anything at Recommend level, and every irreversible action at any level, waits in Approvals. Each row shows the capability, the situation that motivated it, and the exact parameters. Click Approve to execute it now, or Reject to discard it.
If the kill switch is on or the system is in degraded mode when you approve, execution is refused and the approval stays pending — nothing is silently lost.
On the Autonomy view you set how much freedom each capability has. The recommended path for any new capability:
PowerExecutor also promotes automatically after three consecutive clean outcomes, and demotes on any failure. You can override either way at any time with the level selector.
send_broadcast) always require an approval, even at Autonomous — by design.The PIN is the console's protection against unauthorized consequential actions. It is a shared secret defined on the server (environment variable POWEREXECUTOR_PIN in the deployment compose file) — it is not created in the UI.
What requires it: approving/rejecting actions, changing autonomy levels, saving Configuration, the kill switch, and clearing degraded mode. Reading (reports, approvals list, status) never requires it.
Where to enter it: the console's Settings → Supervisor PIN field. It is stored only in your browser and sent with each protected request as the X-Approval-PIN header.
| Symptom | Meaning |
|---|---|
| "PIN missing or wrong — set the Supervisor PIN in Settings" | The server has a PIN configured and your entry is empty or doesn't match. Ask the server admin for the value of POWEREXECUTOR_PIN, enter it in Settings, retry. |
| Actions work without any PIN | The server has no POWEREXECUTOR_PIN set (development mode). Set one before operating in production. |
On Overview, Engage the kill switch to deny every action immediately — the loop, the approval endpoints, and the scheduler all stop acting (observation continues). Disengage to resume. Use it whenever something looks wrong.
PowerExecutor trips into degraded mode automatically when an irreversible action fails, pausing all acting. Investigate the cause, then click Clear on the Overview to resume.
The server runs each enabled product once per day (configured by ENABLED_PRODUCTS and CYCLE_HOUR_UTC). You don't have to press anything — just check the report and the approvals queue. Run cycle now is for on-demand runs.
| Week | Posture |
|---|---|
| 1 | Everything at Shadow. Read every report. Confirm the reasoning is sound. |
| 2 | Promote low-risk reversible capabilities to Recommend. Approve deliberately. |
| 3+ | Promote proven capabilities to Autonomous. Keep irreversible ones on approval. |