[tolbish]

Perhaps I'm missing something, but that first dimension seems far from obvious. To continue my Iron Dome example, isn't the system making decisions on its own when intercepting anything it classifies as an incoming ballistic threats?

[eternalban]

These are obvious dimensions that need to be considered. Of course there can be discussion as to boundaries drawn in that (here 2-d) space as to 'acceptable' and 'unacceptable'. There may be other dimensions as well, such as 'decision making input sources', etc.

As to your specific example, while system x may have 'full agency (autonomous, willful)', if it is purely 'defensive' in nature, it may indeed fall within acceptable zone.

[tolbish]

And as for completely offensive weapons controlled by humans?

Your metric seems arbitrary. Why (only) two dimensions?