nullfte·

How it works

Where an agent stops

This figure shows where work leaves my company and where I sign it out.

Agents do the work. I set the intent and sign what goes out.

Five lanes. Outside. Human: intent (goals, priorities, limits, what counts as wrong) flows down to the outcome agents; their work rises through automatic code checks to sign-off (messages, commitments, releases, changes), which lets it out and feeds back to revise the intent. Input review, done by a person, checks what comes in from outside; it feeds the outcome agents and the records. Data the agents pull themselves, from the web and APIs, comes in without review. Agents: outcome agents, each owning one outcome, over task agents, with code checks in a thin band at the top of the lane. Knowledge: the agents read and write memory, context written without review, and records, facts own and received, written through a harness in code that allows only listed routes, logs every write and can undo it. Foundation, which all the agents are built from: skills, models, and systems and access. Changes to systems and access are proposed by the agents, signed off by a person, and only then land.OutsideHumanAgentsKnowledgeFoundationreviseintentsignedchangesbuiltfromwritereadOutsideclients, partners, authorities, the publicIntentgoals,priorities,limits, whatcounts as wrongSign-offmessages,commitments,releases,changesInput reviewprivacy,qualityCode checksOutcome agentseach owns one outcomeTask agentsMemorycontext: shared,each agent's ownwrites unreviewedRecordsfacts: ownand receivedaccounting, CRMsystem of recordHarnessroutes, log, undoSystems, accesstools, permissions,configurationchanges land aftersign-offSkillshow workis doneModelsinterchangeable
  • I act
  • Safety mechanism, in code
  • Pulled by agents (web, APIs), no review
  • Built from

How the agents ended up needing this map: It took my AI team 17 hours to reinvent middle management.

What you see

Work comes in from outside and goes back out. In the Human lane I set the intent: goals, priorities, limits and what counts as wrong. Intent flows down to the outcome agents, each of which owns one outcome, with task agents beneath them. What they produce rises through automatic code checks, which are not a person, to sign-off. I sign messages, commitments and releases before they leave. I also sign changes to systems and access: the agents propose, I sign, and only then does the change land. What I see at sign-off feeds back into the intent. Every agent reads and writes the knowledge lane, and every agent is built from the foundation of skills, models and systems.

What each control means

Where it is still open

Data the agents pull themselves, from the web and APIs, comes in without review. That is how it works today, so the figure shows it. Whether to allow only a list of sources is a separate decision, and I have not made it. Memory is unreviewed too. This is a design and a set of rules I have set, not an audit of how every agent behaves.

Accountability is not in the picture, because it does not move: a person answers for the outcome. Who does the work, who may decide, who answers for it? separates the three, and Why this boundary? explains where I draw the line.

Zoom in

Revision history

  1. · A pointer to the middle-management essay under the figure, and the subscribe box at the end.
  2. · Harness added between the agents and the records; safety mechanisms in code shown in their own colour; the records control corrected: no closed-period guard yet.
  3. · First version.