Which actions does Heidi run automatically versus ask first?
It depends on the agent's earned tier and the action's blast radius. New agents suggest, proven agents act with undo, and high-blast-radius classes like outbound messages always draft first regardless of trust.
Autonomy in Heidi is two-dimensional: how proven the agent is, and how reversible the action is. Irreversible things, like messages a human will read, are gated by class, not by track record.
Whatever the tier, everything lands in the Ledger with a receipt. Automatic never means invisible.