Skip to content
Autonomous systems

Automation, autonomous systems, and agents

The three terms describe different degrees of choice, context, and delegation; they are not interchangeable.

Objectives

  • Compare an automated rule, an autonomous system, and an agent.
  • Identify the decision that is actually delegated.
Duration
9 min
Level
Foundational

Prerequisites

  • No technical prerequisites

Concepts

Concepts

  • Deterministic automation

    A predetermined rule triggers an intended operation when specified conditions are met.

  • Autonomous system

    The system selects or adapts actions within a bounded context, under explicit objectives and policies; autonomous never means independent of every rule.

  • Software agent or AI agent

    An agent observes inputs, selects a step, and may use a tool; not every AI is an agent, and the word proves no permission, authority, or reliability.

Visual guide

Comparing delegation

  1. Identify the inputs and trigger.
  2. Name the permitted choices and tools.
  3. Check policy, permissions, and authority.
  4. Identify the consequences and expected observation.

Synthetic example

Synthetic example

A rule sorts a message; an agent then proposes an action, but cannot execute it without a separate authorization decision.

More choice does not mean more authority.

Lesson scope

This lesson provides vocabulary for describing the degree of delegation and the limits to expect.

What this lesson does not demonstrate

It does not classify or assess a real system, and it proves no capability, security property, or compliance.

Check question

Which description correctly separates an agent from its authority?

Which description correctly separates an agent from its authority?

Choose an answer to read its feedback.

Guided local activity

Put the lifecycle in order

Select the stages in the cautious order of a synthetic action lifecycle.

This sequence triggers no action and produces no evidence about a real system.

Local checklist

Delegation map

Describe a fictional scenario without giving it more authority than it has.

Do not use any real-world data, key, account, or instruction.

Sources and limitations

Sources and limitations

Source reference
codex/learning-hub-v3-autonomous-controls
Source version
learning-v3
  • Artificial Intelligence Risk Management Framework (AI RMF 1.0)NIST-AIRMF-1.0
    Publisher
    National Institute of Standards and Technology (NIST)
    Version or date
    AI RMF 1.0, 2023-01-26
    Link verified on
    2026-08-13
    Scope used
    Governance and risk-management framework for AI systems.
    Limitation
    A voluntary framework proves neither implementation nor conformity.
  • Agentic AI — Threats and MitigationsOWASP-AGENTIC-2025
    Publisher
    OWASP Agentic Security Initiative
    Version or date
    2025-02-17
    Link verified on
    2026-08-13
    Scope used
    Emerging threats related to agents and tool use.
    Limitation
    An emerging guide that is neither exhaustive nor normative.