Documentation
Plan

45 of 187 pages

AI Product Studio

Auto Pilot & Accept All

Several Studio pages generate a list of artefacts rather than a single answer. Accept All takes the click-per-item tax out of reviewing one batch. Auto Pilot goes further: it runs the generation over and over, accepting as it goes, until the agent has nothing new to add.

Accept All

Wherever an agent proposes a list, an Accept all (N) button sits alongside the per-item Accept buttons. It is available in every operating mode — accepting a batch is still a human decision, just one made about several things at once. You will find it on the Ideas Board generate panel, on all three Shape steps, on Vision outcomes, on Ask Agent replies, and on Context Library suggestions.

Auto Pilot

Auto Pilot accepts AI output with no human decision on each item. That is precisely what Supervised mode exists to prevent, so the 🛸 Auto Pilot button only appears when the studio's Operating Mode is 🤝 Semi-Autonomous or ⚡ Fully Autonomous.

Each surface runs its own pipeline:

Ideas Board — Context entries, then Risks, then Policies, then Intents, all drawn from the notes on the board. Context comes first so that the technology stack and the personas are in the Context Library before intents are cut. Each intent says which intents to implement first and why, and arrives with a Captured from the board page holding the notes it came from; Auto Pilot then drafts further pages for each intent.
Intent page — Brief, then workstreams, then one Work Package per scope under each workstream, then work items on each package.
Vision — Strategic outcomes, then measurable key results for each accepted outcome.
Context Library — Glossary, Personas, Architecture, NFRs and Threat model, grounded in the studio's vision, intents, policies and repositories.

"Take it from here" — the end-to-end journey

Open an intent from the Intent Pad and a Take it from here banner offers to run the whole thing. From a single click Auto Pilot will:

  1. Write the intent's brief, if it does not have one.
  2. Break it into workstreams on the intent.
  3. Create one Work Package per scope under each workstream, one workstream at a time.
  4. Generate work items on each package's own page, one package at a time.

In a Semi-Autonomous studio the run ends there. Every package it made is left as a draft, including one that ended with no work items: sending a package for review, and starting its readiness gate, are yours to do on each package you want to take forward. Auto Pilot sends nothing for review and archives nothing itself.

In a Fully Autonomous studio the run goes on: the reviewer agents assess each package it made, and under the owner's standing approval it approves and dispatches those that pass and starts their coding runs. A package whose gate has not passed, that a route refuses, or that the planning check still questions is left for a person and listed on the run with the reason (see Checking the Codebase Before Planning).

It never moves you. The panel shows where it is working — "the work items on work package Send the link" — with a Go to it link that opens that page at that section, so you can watch the studio fill in when you want to and carry on with something else when you do not. The panel docks to the side of the screen and follows you across every page, which means Stop is always to hand; close it mid-run and a bar at the top of the studio says Auto Pilot is running with a View progress button. The run finishes with everything it created outlined and labelled on the Work Packages board — in a Semi-Autonomous studio each one a draft, ready for you to open, check and send for review.

The journey runs on the server, so it carries on with the tab closed and several intents can run at once: see Auto Pilot on the server below, including how a stopped run is picked up again.

The request limit — how many passes a run makes before it pauses to ask, each pass making at most one AI request — is a studio setting (Trust & Autonomy, owner-only, 10 to 1,000, 100 by default).

In a Semi-Autonomous studio nothing is sent for review and nothing is dispatched. The journey ends with draft work packages: Auto Pilot starts no readiness review and records no gate verdict, and approving a Work Package and sending it to an agent stay a person's decision. Only a Fully Autonomous studio's standing approval takes that decision, and only for the packages its own runs made and every reviewer agent passed. The gate enforces both on the server rather than only in the UI.

Running without the prompt

The panel carries a Keep going without asking checkbox. Tick it and the run-budget prompt never appears — useful when you would rather not sit and wait for it. You can tick it before starting or while a run is in flight; ticking it while the prompt is showing answers it and carries on. It suppresses the question only: item caps, the empty-pass rule and the error caps still end the run, and Stop stays live throughout.

The panel

Every page uses the same panel, so it behaves identically wherever you meet it: a progress bar and headline counters, a pipeline showing each stage and its state, a live feed of items as they are accepted, and Pause and Stop controls. Pause parks the loop between passes; Stop ends it, letting the in-flight pass finish so its items are kept rather than orphaned.

Each item in the feed carries a Remove button and an ℹ️ Details toggle that expands the artefact itself — a workstream's assumptions, a slice's acceptance criteria and risks, an outcome's key results, a context entry's text. Deciding whether to keep something is a judgement about its content, so the content is never more than one click away.

When the run ends the panel becomes a review list of everything it added, with Remove on each row and Remove all beneath. Removing an item deletes it from the store it was written to — this is a genuine undo, not a display filter.

How it knows when to stop

Repeated generation against the same material is a money pump if it never terminates, so four guardrails are live at once:

An empty pass — when a stage produces nothing new, that stage is finished. This is the normal, intended ending.
Per-stage item caps — for example 10 workstreams, 5 work packages per workstream, 6 work items per package. A stage that reaches its cap shows "at limit".
Consecutive failures — two in a row abandon a stage; three across the run stop the session.
The run budget — at 50 runs (100 for the end-to-end journey, which makes many more calls) the loop parks and asks: stop, another batch, stop asking, or no limit.
"No limit" removes the prompt, not the guardrails. The item caps and the empty-pass rule still apply, and Stop stays available throughout. Every run calls your AI provider and is billed to your studio.

Why it does not repeat itself

An agent asked the same question twice will happily answer it the same way twice — which would both fill your studio with restatements and stop the loop ever terminating. Two things prevent it. Every generation sends the agent an explicit list of what already exists with an instruction not to re-propose any of it, and an empty result declared a valid answer. Then everything coming back is checked again on the client and near-duplicates are dropped, with the count shown so you know it happened.

Where the loop runs

On the Ideas Board, Vision and the Context Library, Auto Pilot runs in your browser. Closing the tab or navigating away ends the run — deliberately, so it cannot keep spending against your AI provider with nobody watching. Everything it accepted before that point is already saved.

The intent journey — Take it from here, Auto Pilot this workstream and Auto Pilot this package — runs on the server, described next.

Auto Pilot on the server

An intent's Auto Pilot is sequenced by the server, not by your browser. Send it and close the tab: the run carries on, and you come back to the intent with the work done or the run waiting for you. Several intents can run at once — one run per intent, up to three in a studio — and everyone in the studio sees each run, who started it and how far it has got.

What it may cost, before it is sent. A dialog shows the run's limits and costs:

Pauses to ask after — how many passes the run makes before it stops and asks whether to carry on. Each pass makes at most one AI request, so the run's own AI requests are at most this many. It also pauses at every $5 of AI spend. The studio's limit is set by its owner (10 to 1,000); only the owner can give one run more.
Estimated AI cost — a range worked out from your studio's own AI spend over the last 30 days, or from the model's list price when there is no history yet. It is billed to your studio's AI provider, as every agent request is.
Workbench credits — what the run is expected to use of the Workbench itself (compute, storage, requests), as an estimate. Credits are a measure of use, not money, and are included in your plan: you are not billed for them, and they are never added to the AI cost. Each run's panel shows its own, and the Activity panel the studio's total for the last 30 days.
Stop after — the last stage the run does. It is fixed once the run is on the server. In a Semi-Autonomous studio the last stage there is to choose is Work items; in a Fully Autonomous one the stages go on through Review and Readiness to approval, dispatch and the coding run. A run started by someone who is not an owner or a reviewer leaves out Value and Phases, which only they can save, and the dialog says so.

Nothing is sent until you tick that the run is billed to the studio.

Checking the codebase first, and checking the plan. When a repository is connected the dialog also has a Check the codebase first box: a run on an intent or on one workstream then starts by reading the repository for what already exists, and plans the change to what is there. When the run plans the intent (or the workstream), a second AI request checks the plan against what you asked for before anything of it is written, and the planner revises it at most twice. Planning may then take up to six AI requests, all counted in the limit above. Both are described in Checking the Codebase Before Planning.

While it runs. A bar at the top of the studio and the Activity panel list every run, with its stage, passes and AI spend; View progress opens its panel, which shows the stages, what the run has made and the Workbench credits it has used. The person who started a run, the studio's owner or a reviewer can stop it. When a run reaches its limit it waits for the person who started it to let it carry on for one more step (up to ten times) or stop it; a question left unanswered for a week stops the run. No browser needs to be open while a run goes.

Picking a run up again. If a run is stopped, or the service cuts it short, the person who started it can Resume it: it carries on from its first unfinished stage as the same run, and what it had already made is kept. A run an owner or reviewer stopped stays stopped for a contributor who started it; a run can be resumed up to ten times; and a run that stopped on a finding — the intent changed under it, or an answer failed its quality check — is a new run's job.

The review list. Remove takes a workstream off the intent or a work item off its package, and archives a work package rather than deleting it. A work package the run left with no work items stays a draft: a run archives nothing itself. A finished run's record is kept for 90 days; what it made is yours for good.

The run acts as you. Every change it makes goes through the same checks as a change you make by hand, as the person who started it, and the audit trail records that Auto Pilot made it. If that person loses access to the studio, the run stops. A workspace that requires MFA or limits sign-in by IP address cannot run Auto Pilot on the server and is told so before anything is spent; a workspace's session time limit does not cut a run short.

All AI Product Studio documentation

Build v0.3.2 · deployed 2026-10-19T23:52:31Z