---
description: Tier 1/2/3 decision authority — when to act vs ask (policy/tiers.yaml)
alwaysApply: true
---

# Decision authority tiers

Machine-readable source: `policy/tiers.yaml`. Standing Decisions: `{{docs.standing_decisions_path}}`.

## Tier 1 — just do it (no per-time ask)

- Feature-branch commits (docs **or** code) — SD-1
- `git push` to feature branch, open feature-branch PR — SD-17
- Run tests; update `.gitignore` / `.museignore`
- Governance sync doc updates in the closing commit — SD-17

**Never** Tier 1 on `{{vcs.git.main_branch}}`, staging push, or merge.

## Tier 2 — recommend, confirm once, record

- Persistence shape, adapter contracts, schema-version choices
- Record the decision in `{{docs.standing_decisions_path}}` (append-only ADR log)

## Tier 3 — stop for operator authorization

- Merge to `{{vcs.git.main_branch}}` (Muse or GitHub)
- `muse push {{vcs.muse.staging_remote}}` when applicable
- Live capability / posture gate flips
- Real payments, secrets, data deletion, cross-repo merges

## VCS regime: {{vcs.regime}}

| Regime | Extra hard stop |
| --- | --- |
| `muse+git-mirror` | Muse `{{vcs.git.main_branch}}` before GitHub; mirror via `{{vcs.git.mirror_branch}}` only (SD-14) |
| `muse-only` | Never run `git` / `gh` in this repo |
| `git-only` | Never `git push {{vcs.git.remote}} {{vcs.git.main_branch}}` without Tier 3 |

A **dirty tree at session end is a failure**, not a safe default.