Task 49 — Human-in-the-loop эскалация

Phase: 4 Initiative: 24 Status: done Owner: — Slug: human-escalation

Goal

Mesh эскалирует неоднозначные, low-confidence, policy-sensitive, разрушительные или budget-exceeding операции с кратким action plan и контекстом для подтверждения человеком. Гейты выполнения обеспечиваются кодом, а не только промптами.

Acceptance criteria

• EscalationConfig added to MeshConfig
• IEscalationService + EscalationService implementation
• EscalationContext + EscalationResult models with escalation type, severity, action plan
• Escalation triggers in IntentRouter (trust admission denial → escalate)
• Escalation triggers in AgentCore (low-confidence responses, guardrail failures, verification blocks)
• Escalation priority levels: Low / Medium / High / Critical
• Batch-approve API endpoint (POST /api/escalations/batch-approve)
• Escalation status API endpoints (list, get, approve, deny)
• EscalationPanel.astro component in hercules-web with batch approve
• DI registration in MeshServiceExtensions
• Unit tests for EscalationService
• dotnet build + dotnet test pass

Sub-tasks

• Add EscalationConfig to AppConfig.cs (nested in MeshConfig)
• Create EscalationContext.cs and EscalationResult.cs models in Mesh/Escalation/
• Create IEscalationService.cs and EscalationService.cs
• Add escalations table to SqliteSessionStore schema + persistence methods
• Wire EscalationService in MeshServiceExtensions DI
• Add IEscalationService field + escalation call in IntentRouter (trust denial → escalate)
• Add escalation triggers in AgentCore (guardrail failures, low-confidence, verification blocks)
• Create EscalationController.cs with list/get/approve/deny + batch-approve endpoints
• Wire EscalationController in Hercules.WebApi/Program.cs
• Create EscalationPanel.astro in hercules-web with batch approve UI
• Add EscalationPanel to mesh page (memmesh.astro)
• Write unit tests for EscalationService (6 tests)
• dotnet build src/agent/Hercules.csproj — 0 errors
• dotnet test --filter "FullyQualifiedName~Escalation" — 6/6 pass

Validation

dotnet build src/agent/Hercules.csproj              → 0 errors (19 pre-existing warnings)
dotnet test --filter "FullyQualifiedName~Escalation" → 6/6 pass
dotnet test tests/Hercules.Agent.Tests/            → 1314/1322 pass
                                                    (8 pre-existing failures:
                                                     OtelServiceTests ×5, NumericValidatorTests ×2,
                                                     BudgetGuardTests ×1)

Implementation notes

• EscalationConfig nested in MeshConfig.Escalation (default: disabled for backward-compatibility)
• EscalationService mirrors ApprovalService pattern: in-memory ConcurrentDictionary cache + SQLite persistence
• Escalation types: LowConfidence, BudgetExceeded, PolicyDenial, AmbiguousIntent, DestructiveOperation, DelegationTrustLow, HighCostOperation
• Three escalation triggers: (1) guardrail hard-cap pre-check, (2) verification pipeline blocks, (3) low-confidence LLM responses
• Trust admission denials in IntentRouter escalate delegation attempts to mesh operators
• Critical escalations log at Warning level (future: pager integration)

Scope / Likely files

src/agent/Mesh/Escalation/, src/hercules-web/src/components/EscalationPanel.astro

Dependencies

• блокирует / опирается на: task_010 — approval-gates
• блокирует / опирается на: task_040 — trust-admission

Risks / Rollback

Operator fatigue; агрегация эскалаций + приоритезация + удобный batch-approve.

Links

• Backlog: ../backlog.md
• Roadmap (EN): ../../ROADMAP-EN.md
• Roadmap (RU): ../../ROADMAP-RU.md