Bounded self-change
Alix can adjust her own settings, but only within hard limits, always logged and revertible. Anything past the line, or that costs money, becomes an approval I have to give.
Autonomy here is bounded by construction. A proposed change to her own parameters is either inside her hard-coded limits, in which case it is clamped, logged, and revertible, or it isn't, in which case it comes to me as an approval. Above all of it sits a read-only constitution and a single kill switch.