mama — measuring and managing autonomy
Names — read this first.
mama(lowercase, in prose and code) = measuring and managing autonomy — this method and toolkit: the autonomy-governance component that makes delegated decision rights explicit, assessable, and manageable. This repository ismama's canonical home. MAMA (uppercase) = Measuring Automation & Measuring Autonomy — the broader, integrated framework (umbrella organization) that usesmamaalongside automation measurement, project/portfolio context, and business outcomes. The two names are not interchangeable, and this repository is not the MAMA umbrella home. See the integration guide.
Status: v2.0.0 — current release; method pilot / under validation (see the validation plan and limitations).
mama answers three questions for each decision domain of a unit —
a person, team, service, department, AI agent, or other sociotechnical unit:
- Design — What decision authority should this unit have, and why?
- Measure — What authority is granted, how is it exercised, and how capable and controlled is the unit?
- Manage — Based on evidence, should the grant expand, contract, be reshaped, or be revoked?
Most organizations manage autonomy implicitly — it emerges from trust,
tenure, and accidents of structure, and is therefore felt but not measured,
expanded but never designed, and revoked arbitrarily. mama makes autonomy
an explicit, designed, measurable property of the organization.
The method in one diagram
flowchart LR
A[Design<br>decision + blast radius] --> B[Grant<br>autonomy contract]
B --> C[Measure<br>ledger + telemetry]
C --> D[Manage<br>expand / contract / re-shape]
D -->|re-grant, next horizon| B
What's here
| Document | Purpose |
|---|---|
| Method handbook | The end-to-end operating guide — start here |
| Facilitator guide | How to run an assessment session so the numbers mean something |
| Training module | Self-guided ~60-minute walkthrough with exercises |
| Crosswalks | mama vs TM Forum MAMA, NIST AI RMF, ISO/IEC 42001 & 23894, OECD, OWASP GenAI, MITRE ATLAS — coverage and gaps |
| Export format | Machine-readable scorecard export for consumers (JSON Schema included) |
| Framework | Definitions, the three axes, definitive levels L1–L5 above the Submarine Line (L0), autonomy contracts |
| Maturity model | Six dimensions × level grid, scoring rules, the Autonomy Ledger |
| Assessment | The questionnaire and scoring procedure — the practical instrument |
| Governance loop | Grant → Instrument → Observe → Review, with cadence and anti-patterns |
| Positioning | Related work, lineage, open questions, BibTeX |
| Worked example | One team, scored end to end, producing a governance move |
| AI agents as units | First-pass extension: scoring agent units with the same instrument |
| Ledger format | Machine-readable Autonomy Ledger (schema 2) + health checks |
| Contract template | Autonomy contract + review agenda, ready to copy |
| v1 → v2 migration | Re-baselining guide and historical-score policy |
| MAMA integration | The mama ↔ MAMA interface: what each owns, how outputs link |
| Limitations | What the method does and does not claim |
| Validation plan | The evidence program behind the "under validation" label |
| Versioning | Ruleset/ledger versioning policy — how assessments stay comparable |
| Changelog | Every change, classified by comparability impact |
| Governance | Stewardship roles, decision rights, appeals |
Who it is for
Grantors and governance leads who delegate decision authority and need it legible; team leads and unit owners who hold it; risk, security, and AI-governance functions that must evidence control over autonomous behavior; and practitioners assessing AI agents as units. Scores are evidence inputs to human governance decisions — they never authorize a deployment by themselves.
Install
No Python needed — standalone binaries for macOS, Linux, and Windows are
attached to each GitHub Release:
download autonomy-score-<os>-<arch> and ledger-health-<os>-<arch>, mark
them executable, run.
With Python 3.9+ (installs the autonomy-score and ledger-health
commands):
pipx install measuring-autonomy # or: pip install measuring-autonomy
(The distribution keeps the name measuring-autonomy; the method is mama.)
From a clone, the zero-install form keeps working with no packaging step:
python3 tools/autonomy_score.py ... (the tools/ scripts are shims over
src/measuring_autonomy/). All tools run locally and offline; assessment and
ledger data leave your environment only if you send them somewhere.
Quick start: score a team
python3 tools/autonomy_score.py 2 4 3 3 2 2 --current 2
Scores are D1 clarity, D2 capability, D3 guardrails, D4 telemetry,
D5 transparency, D6 accountability (0–5 each: definitive levels 1–5, and
0 — the Submarine Line — for no autonomy at all). The tool applies the
weakest-link rule — min(guardrails, telemetry, accountability) — and
outputs the safe grant level and recommended move.
python3 tools/autonomy_score.py --self-test # verify the scoring rules
Track granted autonomy in a machine-readable Autonomy Ledger (schema 2
YAML, examples/ledger.yaml) and check its health:
python3 tools/ledger_health.py examples/ledger.yaml # requires PyYAML (pip install pyyaml)
Try it without a terminal
A dependency-free web version of the assessment lives in site/
(and is published to GitHub Pages when enabled — repo Settings → Pages →
Source: GitHub Actions). Open site/index.html locally, tick the items
with evidence, and print the scorecard.
Roadmap
See docs/roadmap.md — current phase, shipped releases, and what validation work remains.
Contributing
Feedback, corrections, and real-world applications are very welcome — see CONTRIBUTING.md. Use the issue templates to report framework feedback or submit a case study. Security issues: SECURITY.md. Governance and appeals: GOVERNANCE.md.
License
Metadata
Release files for measuring-autonomy 2.1.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| measuring_autonomy-2.1.0.tar.gz | 16.7 kB | With provenance | Details for measuring_autonomy-2.1.0.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| measuring_autonomy-2.1.0-py3-none-any.whl | Python 3 | none | any | Details for measuring_autonomy-2.1.0-py3-none-any.whl |
Total release size: 31.4 kB
Release files / measuring_autonomy-2.1.0.tar.gz
| Download URL | measuring_autonomy-2.1.0.tar.gz |
|---|---|
| Size | 16.7 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
d30b484a401643ed529a3ea5241e63c08d6afd6171b6e6ee6617697512932f19
|
|
BLAKE2b-256 checksum How to use checksums |
830b134aa23f7c9c3e55953b9ec13a9d5ba5eb4a143107e86c3f67562acfd647
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.16
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Nov 3, 2026.
Transparency logRelease files / measuring_autonomy-2.1.0-py3-none-any.whl
| Download URL | measuring_autonomy-2.1.0-py3-none-any.whl |
|---|---|
| Size | 14.8 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
f4aaabef0988d17d15acfa6f1355b450638ea73536f220fdc0084c9289f6146a
|
|
BLAKE2b-256 checksum How to use checksums |
4001993198b11fd8a6ec59316da9a87476a72ca69ac50b78d1510ced65e64e6e
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.16
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Nov 3, 2026.
Transparency logSecurity for measuring-autonomy 2.1.0
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
Full provenance
All 2 files in this release have been uploaded with provenance metadata.
Attestation for measuring_autonomy-2.1.0.tar.gz
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Nov 3, 2026.
Transparency logA note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.