Skip to main content

mama — measuring and managing autonomy

Names — read this first. mama (lowercase, in prose and code) = measuring and managing autonomy — this method and toolkit: the autonomy-governance component that makes delegated decision rights explicit, assessable, and manageable. This repository is mama's canonical home. MAMA (uppercase) = Measuring Automation & Measuring Autonomy — the broader, integrated framework (umbrella organization) that uses mama alongside automation measurement, project/portfolio context, and business outcomes. The two names are not interchangeable, and this repository is not the MAMA umbrella home. See the integration guide.

Status: v2.0.0 — current release; method pilot / under validation (see the validation plan and limitations).

mama answers three questions for each decision domain of a unit — a person, team, service, department, AI agent, or other sociotechnical unit:

  1. Design — What decision authority should this unit have, and why?
  2. Measure — What authority is granted, how is it exercised, and how capable and controlled is the unit?
  3. Manage — Based on evidence, should the grant expand, contract, be reshaped, or be revoked?

Most organizations manage autonomy implicitly — it emerges from trust, tenure, and accidents of structure, and is therefore felt but not measured, expanded but never designed, and revoked arbitrarily. mama makes autonomy an explicit, designed, measurable property of the organization.

The method in one diagram

flowchart LR
    A[Design<br>decision + blast radius] --> B[Grant<br>autonomy contract]
    B --> C[Measure<br>ledger + telemetry]
    C --> D[Manage<br>expand / contract / re-shape]
    D -->|re-grant, next horizon| B

What's here

Document Purpose
Method handbook The end-to-end operating guide — start here
Facilitator guide How to run an assessment session so the numbers mean something
Training module Self-guided ~60-minute walkthrough with exercises
Crosswalks mama vs TM Forum MAMA, NIST AI RMF, ISO/IEC 42001 & 23894, OECD, OWASP GenAI, MITRE ATLAS — coverage and gaps
Export format Machine-readable scorecard export for consumers (JSON Schema included)
Framework Definitions, the three axes, definitive levels L1–L5 above the Submarine Line (L0), autonomy contracts
Maturity model Six dimensions × level grid, scoring rules, the Autonomy Ledger
Assessment The questionnaire and scoring procedure — the practical instrument
Governance loop Grant → Instrument → Observe → Review, with cadence and anti-patterns
Positioning Related work, lineage, open questions, BibTeX
Worked example One team, scored end to end, producing a governance move
AI agents as units First-pass extension: scoring agent units with the same instrument
Ledger format Machine-readable Autonomy Ledger (schema 2) + health checks
Contract template Autonomy contract + review agenda, ready to copy
v1 → v2 migration Re-baselining guide and historical-score policy
MAMA integration The mama ↔ MAMA interface: what each owns, how outputs link
Limitations What the method does and does not claim
Validation plan The evidence program behind the "under validation" label
Versioning Ruleset/ledger versioning policy — how assessments stay comparable
Changelog Every change, classified by comparability impact
Governance Stewardship roles, decision rights, appeals

Who it is for

Grantors and governance leads who delegate decision authority and need it legible; team leads and unit owners who hold it; risk, security, and AI-governance functions that must evidence control over autonomous behavior; and practitioners assessing AI agents as units. Scores are evidence inputs to human governance decisions — they never authorize a deployment by themselves.

Install

No Python needed — standalone binaries for macOS, Linux, and Windows are attached to each GitHub Release: download autonomy-score-<os>-<arch> and ledger-health-<os>-<arch>, mark them executable, run.

With Python 3.9+ (installs the autonomy-score and ledger-health commands):

pipx install measuring-autonomy    # or: pip install measuring-autonomy

(The distribution keeps the name measuring-autonomy; the method is mama.)

From a clone, the zero-install form keeps working with no packaging step: python3 tools/autonomy_score.py ... (the tools/ scripts are shims over src/measuring_autonomy/). All tools run locally and offline; assessment and ledger data leave your environment only if you send them somewhere.

Quick start: score a team

python3 tools/autonomy_score.py 2 4 3 3 2 2 --current 2

Scores are D1 clarity, D2 capability, D3 guardrails, D4 telemetry, D5 transparency, D6 accountability (0–5 each: definitive levels 1–5, and 0 — the Submarine Line — for no autonomy at all). The tool applies the weakest-link rule — min(guardrails, telemetry, accountability) — and outputs the safe grant level and recommended move.

python3 tools/autonomy_score.py --self-test   # verify the scoring rules

Track granted autonomy in a machine-readable Autonomy Ledger (schema 2 YAML, examples/ledger.yaml) and check its health:

python3 tools/ledger_health.py examples/ledger.yaml   # requires PyYAML (pip install pyyaml)

Try it without a terminal

A dependency-free web version of the assessment lives in site/ (and is published to GitHub Pages when enabled — repo Settings → Pages → Source: GitHub Actions). Open site/index.html locally, tick the items with evidence, and print the scorecard.

Roadmap

See docs/roadmap.md — current phase, shipped releases, and what validation work remains.

Contributing

Feedback, corrections, and real-world applications are very welcome — see CONTRIBUTING.md. Use the issue templates to report framework feedback or submit a case study. Security issues: SECURITY.md. Governance and appeals: GOVERNANCE.md.

License

MIT

Metadata

Release files for measuring-autonomy 2.1.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for measuring-autonomy 2.1.0
File Size Uploaded Provenance Actions
measuring_autonomy-2.1.0.tar.gz 16.7 kB With provenance Details for measuring_autonomy-2.1.0.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for measuring-autonomy 2.1.0
File Interpreter ABI Platform Actions
measuring_autonomy-2.1.0-py3-none-any.whl Python 3 none any Details for measuring_autonomy-2.1.0-py3-none-any.whl

Total release size: 31.4 kB

Release files / measuring_autonomy-2.1.0.tar.gz

Download URL measuring_autonomy-2.1.0.tar.gz
Size 16.7 kB
Tags Source
SHA-256 checksum
How to use checksums
d30b484a401643ed529a3ea5241e63c08d6afd6171b6e6ee6617697512932f19
BLAKE2b-256 checksum
How to use checksums
830b134aa23f7c9c3e55953b9ec13a9d5ba5eb4a143107e86c3f67562acfd647
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.16

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Nov 3, 2026.

Transparency log

Release files / measuring_autonomy-2.1.0-py3-none-any.whl

Download URL measuring_autonomy-2.1.0-py3-none-any.whl
Size 14.8 kB
Tags Python 3
SHA-256 checksum
How to use checksums
f4aaabef0988d17d15acfa6f1355b450638ea73536f220fdc0084c9289f6146a
BLAKE2b-256 checksum
How to use checksums
4001993198b11fd8a6ec59316da9a87476a72ca69ac50b78d1510ced65e64e6e
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.16

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Nov 3, 2026.

Transparency log

Security for measuring-autonomy 2.1.0

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Full provenance

All 2 files in this release have been uploaded with provenance metadata.

Select from 2 files

Attestation for measuring_autonomy-2.1.0.tar.gz

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Nov 3, 2026.

Transparency log

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page