All insights
Practical AI28 Jul 202619 min read

Before you buy an AI agent, fix the workflow

An agent cannot rescue a process that nobody understands. Start with the hand-offs, decisions and exceptions that define the work.

Workflow redesign
Our perspective

Agentic technology earns authority only after the workflow has clear states, tested controls and an accountable route for exceptions.

7%agentic AI adoption among UK AI usersDSIT AI Adoption Research 2026
3authority levelsDraft, recommend and act
1owner per exceptionMinimum operating discipline
Key findings

01Use conventional automation for deterministic work.

02Separate drafting, recommendation and action authority.

03Expand autonomy only after measured reliability.

01

Start with the work

Agent demonstrations compress a complex process into a smooth sequence. Real operations contain incomplete inputs, policy conflicts and exceptions that require negotiation. Automating the demonstration instead of the process creates fragile systems.

Follow a real item from arrival to completion. Record states, decisions, evidence, wait time and ownership. This map reveals whether the constraint is interpretation, missing data, unclear accountability or an ordinary integration problem.

02

Use the least complex reliable tool

Fixed calculations, validated field movement and known notifications belong in deterministic software. Use AI where language, variation or interpretation creates a genuine advantage.

A combined design is usually stronger than a single general agent. Explicit rules provide stability, while AI handles bounded ambiguity.

03

Match authority to consequence

Drafting an internal summary can tolerate review. Releasing payment, changing a customer record or sending regulated advice requires explicit approval and a durable audit trail.

Define three levels: draft, recommend and act. Each level needs evidence thresholds, permissions and a route to a person.

04

Earn autonomy through evidence

Build an evaluation set from normal work, edge cases and known failures. Track task completion, corrections, time saved and exceptions. Review failures by cause rather than reporting one blended accuracy score.

The best first system is rarely the most autonomous. It is the one the team can understand, operate and improve.

Research context

What the wider evidence says

Findings are paraphrased from the linked original publications. Their scope and populations differ, so they inform the thesis rather than prove a universal outcome.

Small batches

Google DORA recommends shorter delivery batches as AI increases the velocity of change

A bounded release with fast feedback and explicit rollback is a stronger path to autonomy than a large agent rollout.

Source: Google DORA, AI Capabilities Model, 2025
Executive playbook

A controlled route from thesis to operating evidence

Each work package ends with an explicit decision and a tangible output. The sequence keeps delivery connected to operating evidence.

01

Observe real work

Decision
What actually happens between request and completion?
Work
Trace normal cases, incomplete inputs, policy conflicts, rework and informal escalation.
Output
A state, decision and exception map grounded in evidence.
02

Simplify before automating

Decision
Which steps can be removed, standardised or validated?
Work
Clarify ownership, reduce duplicate fields and establish a controlled system of record.
Output
A cleaner workflow with deterministic foundations.
03

Bound AI authority

Decision
Should the system draft, recommend or act?
Work
Classify consequences, define evidence thresholds and route approvals by risk.
Output
An authority matrix tied to tools and permissions.
04

Earn greater autonomy

Decision
Does live evidence justify more independent action?
Work
Review evaluation results, overrides, incidents and exception recovery at release gates.
Output
An explicit expand, hold, restrict or stop decision.
Decision architecture

A practical decision sequence for leadership teams

DecisionRequired evidenceControlPerformance measure
What business result should change?Baseline volume, quality, delay and costNamed operational ownerObserved change against baseline
Where may AI contribute?Task variation, judgement and failure modesBounded use-case definitionAccepted output and exception rate
Can authority expand?Evaluation, live performance and incident recordExplicit approval thresholdPerformance by risk category
Should investment continue?Adoption, total cost, realised value and riskQuarterly value reviewRealised benefit with confidence range
Delivery and operating risk

The failure modes leadership should watch before scale

Risks become manageable when the early signal, control and accountable owner are agreed before release.

RiskEarly signalPrimary controlAccountable owner
The agent automates process ambiguityPlans vary because inputs and policies are unclearWorkflow redesign and required evidenceProcess owner
Tool access exceeds task needThe agent can change records unrelated to its purposeLeast privilege and allow-listed actionsSecurity owner
Smooth demonstrations conceal exception failureManual rescue rises under real volumeEdge-case evaluation and rollback pathService owner
Human approval becomes a superficial clickReview time falls below what consequence requiresEvidence-focused review interface and samplingControl owner
Measurement system

A scorecard that connects activity to management action

Measures are useful only when their definition is stable and their movement changes a management decision.

OutcomeDefinitionLeading evidenceDecision supported
Safe task completionEligible tasks completed correctly within approved authorityPolicy and tool-use exceptionsExpand or reduce authority
Useful human reviewCorrections and material challenges per reviewReview time by risk levelImprove evidence or approval design
Exception recoveryExceptions resolved without data loss or uncontrolled actionOpen exception ageChange escalation and fallback
Net effort releasedGross time avoided less review, rescue and maintenanceManual rescue minutesSimplify or stop automation
Exhibit 1

Authority should rise more slowly than model capability

Illustrative control intensity by action consequence.

Internal draftLight review
RecommendationOwner approval
Record updatePolicy gate
External commitmentExplicit approval
Source: Quiet Gears control framework. Control intensity is illustrative and should be adjusted for each risk context.
Implementation pattern

An authority gate separates suggestion from action

01proposal = agent.plan(task, context)02risk = controls.classify(proposal)03evidence = evaluator.check(proposal)04approval = authority.route(risk, evidence)05executor.run(approval.allowedActions)
01Task queue
02Planning agent
03Evaluation service
04Authority gate
05Controlled tools
Leadership agenda

Translate the analysis into an operating decision.

  1. Map one workflow end to end
  2. Classify actions by consequence and reversibility
  3. Create tests before connecting operational tools
  4. Start with drafting or recommendation and review failures weekly