Scope cannot drift
DAVE executes the exact plan you approved. A later chat or changed Jira description cannot silently rewrite work that is already running.
03 / CONTROL
Run 24/7.
Never outside
the lines.
DAVE can plan, schedule, build, retry and verify around the clock. It cannot approve its own scope, borrow another person’s identity or ship blindly to production.
Request early access AUTONOMY INSIDE THE BOUNDARY / HUMANS OWN THE BOUNDARYTHE NON-NEGOTIABLESControl lives in the system, not in the prompt
Every transition is legal
Before a task advances, the system checks its current state, owner, authority and the approved plan it belongs to.
Identity cannot drift
Work stays bound to its owner and machine. If that runner is offline, DAVE waits safely instead of borrowing somebody else’s credentials.
Agents cannot mark themselves done
Required tests, acceptance evidence, review and CI must pass before an implementation can advance to staging.
RECOVERY IS A FEATUREAlways-on only works when failure is survivable
A failed run
should pause work.
Not erase progress.
Snapshot progress → stop the stale run → resume from durable state
Reject work from the old execution instead of corrupting the current state
Keep its work waiting safely → resume when the same owner returns
Separate code failure from infrastructure noise before assigning rework
Match the target and merge SHA before declaring Ready for QA
Elect one coordinator → continue from durable queues
ALWAYS-ON / NEVER OUT OF BOUNDS