7 minute read

Many people still think of an AI agent as a magic wand, or the genie in a lamp.

State the wish clearly enough, and the desired result should appear.

Sometimes it does. That is part of what makes the idea so seductive. A few lucky outcomes can make it seem as if the agent understood the business, the context, and the intention behind the request.

Usually, it understood less than we think.

In business, the most dangerous AI output is rarely obvious nonsense. It is something polished and plausible that leaves out one important thing.

The document is well organized. The logic flows. The recommendations sound specific. Yet a critical constraint is missing. An exception was ignored. A conclusion rests on an assumption nobody approved. The proposal looks complete until someone tries to use it in the actual workflow.

An obviously bad answer is easy to reject. A plausible but incomplete answer is much harder to catch.

Its surface quality hides its weakness. The problem often appears only when someone follows the work into the details. By then, the output may already have shaped a decision, reached a customer, or become the foundation for more work.

Working with an agent this way can feel like working with a convincing liar. Not because the agent intends to deceive, but because it can sound certain without carrying any of the consequences.

The cleanup is not the agent’s responsibility. Accountability is not the agent’s responsibility. Both remain with the person and the organization that delegated the work.

This is why the biggest bottleneck in AX is not AI performance. It is people, organizations, and the agreements between them.

Work needs enough certainty

Work becomes manageable when there is some relationship between action and outcome.

We should be able to say what result we expect, what has to happen to reach it, and how we will know whether the work succeeded. We cannot guarantee every outcome, but we should be able to detect failure and decide what happens next.

Certainty does not mean producing the same result every time. It means knowing where and why the result went off course when it does.

A workflow creates this kind of certainty.

It defines what enters the process, who or what handles it, what happens next, and what condition moves the work forward. As the work repeats, the workflow gains rules for judgment, exceptions, and recovery. Eventually, it may become a formal manual.

But before a workflow is a document, it is an agreement about how work should happen.

Delegation is an agreement

When I do the work myself, I can rely on context in my own head. I know what I meant, which details matter, what quality I expect, and which shortcuts are acceptable.

The moment I delegate, that private context becomes a liability.

The other person needs to know the expected result and what counts as complete. They need to know what they can decide alone, when they should check in, and what they must never do without approval.

Without that agreement, the person delegating thinks, “I assumed this was obvious.” The person doing the work thinks, “I did what I was asked to do.”

Both may be reasonable. The result can still be wrong.

Strong people often hide this weakness in an organization. They read the room, search for missing context, remember previous decisions, and ask questions before a mistake becomes expensive. A company with weak workflows can survive for a while if a few unusually capable people keep filling the gaps.

That does not scale.

Quality changes whenever the person changes. Review points multiply as the workload grows. A few people’s memory and judgment slowly become the operating system of the company.

When one of them leaves, everyone discovers how little of the work was actually understood by the organization.

AI scales the gap

Delegation becomes less forgiving when the recipient is an AI agent.

An agent can move faster than a person, repeat a process without fatigue, and operate across several systems in seconds. But it does not naturally absorb the unwritten context of an organization. Its world is made of the instructions, data, tools, and recorded history it can access.

A person may pause when a request feels wrong. They may remember that this customer is an exception, notice that a number looks strange, or recognize that the request conflicts with an earlier decision.

An AI agent may pursue a badly defined goal with impressive discipline.

A weak agent often fails early and visibly. A capable agent can take the wrong objective much farther. It can update records, send messages, create documents, and trigger the next step before anyone notices that the first assumption was wrong.

Capability increases both leverage and blast radius.

AI does not repair a missing agreement. It executes inside the gaps that the organization failed to close.

The workflow becomes code

This is why a detailed prompt is not enough. A prompt describes the request. A workflow defines the structure in which the request can be executed safely.

What information can the agent trust? What result must it produce? How is completion verified? Which tools can it use? What requires approval? When should it retry, stop, or hand the task back to a person?

The agent should not be considered finished because it says, “Done.” The workflow should require an artifact, a state change, or evidence that another system can verify.

A manual written for people can leave room for interpretation. People bring common sense, social context, and responsibility into the process. They can work around gaps that the document never mentions.

An agent workflow is different. It determines what the agent can see, what it can do, which paths it can take, and where it must stop.

The workflow starts to behave like code.

If the workflow is vague, the agent is unstable. It may produce a plausible but wrong result, repeat the same action, or cross a boundary nobody thought to make explicit.

The goal is not to eliminate every exception. No organization can do that. The goal is to make exceptions visible, preserve enough evidence to understand what happened, and give the process a safe way to stop or recover.

A good workflow does not remove judgment. It decides where judgment belongs and who is responsible for it.

AX is an organizational redesign

AX is often presented as a technology project. Buy the tools, connect the data, deploy agents, and measure productivity.

The technology may be the fastest part.

The slow part is getting people to describe how work actually happens. Teams disagree about ownership. Managers use different quality standards. Important decisions live in private messages. Exceptions have become habits. Some processes survive precisely because nobody has forced the organization to make them explicit.

AI does not remove these disagreements. It forces them into the open.

Before an agent can act, the organization has to decide which data is authoritative, who owns the outcome, what level of risk is acceptable, and when a person must intervene. These are not model questions. They are management questions.

This is also why AX demos are much easier than AX operations. A demo has clean inputs and a clear goal. A real organization has missing data, conflicting instructions, hidden exceptions, and several people who believe they own the same decision.

The model may be ready. The organization is not.

Start with agreement

First, make the work visible. Then agree on the expected outcome, the source of truth, and the boundaries of responsibility. Turn that agreement into a workflow. Only then should AI take over parts of the execution.

As the workflow runs, collect failures and exceptions. Improve the agreement. Expand the agent’s authority only when the organization can observe the result and recover from mistakes.

This may look slower than deploying an agent first. It is faster than automating confusion and cleaning it up later.

The organizations that succeed with AX will not necessarily be the ones with the most agents. They will be the ones that can explain their own work, turn that explanation into a shared operating structure, and keep improving it.

AI can accelerate a process. It cannot create organizational agreement where none exists, and it cannot take responsibility for the result.

The agent can act. The organization still has to know what good looks like, and own what happens when it is wrong.