Operating Principle
Systems That Hold Up
Reliable AI is a property of the surrounding system, not the model alone.
A polished demonstration can hide the conditions required for dependable work. Real organizations have incomplete information, changing processes, uneven adoption, legacy systems, sensitive data, and decisions with consequences. AI has to operate inside those conditions. The surrounding workflow determines whether capability becomes durable value or recurring risk.
See the whole system
Treat the model as one component
An AI workflow includes the information supplied to the model, the instructions that frame the work, the tools and systems it can reach, the permissions attached to those connections, the people responsible for review, and the feedback used to improve performance.
A stronger model may improve part of this chain without fixing missing data, contradictory policies, unreliable integrations, unclear ownership, or an approval process that cannot absorb the output. Reliability comes from designing the complete path from intention to consequence.
Build on solid ground
Improve the information and process first
AI can organize and transform available context, but it cannot make fragmented organizational knowledge authoritative. Teams need to know which sources are current, how conflicts are resolved, what information is sensitive, and who owns important updates.
The process needs similar clarity. Define the inputs, expected outputs, decision points, exceptions, and handoffs. Automating an inconsistent process usually reproduces its ambiguity at greater speed. Making the workflow explicit often creates value before any AI is deployed.
Operate, observe, improve
Design evaluation and feedback into operation
Test expected cases, difficult edge cases, missing information, conflicting instructions, tool failures, and escalation paths before relying on the system. Evaluation should measure whether the workflow accomplishes its purpose, not merely whether the output sounds good.
Once deployed, monitor errors, overrides, unexpected behavior, changing source information, and the time people spend reviewing the work. Feed those observations back into the process, instructions, permissions, and tests. Reliability is maintained through operation; it is not established once at launch.
- Is the goal and success measure explicit?
- Are the information sources current and owned?
- Are permissions limited to what the work requires?
- Does a named person own exceptions and consequences?
- Are evaluation, monitoring, escalation, and rollback defined?
Practical questions
Frequently asked questions
What permissions should an AI agent receive?
Give an agent only the information and actions required for its specific task. Separate reading from writing, drafting from publishing, recommendations from approvals, and reversible actions from consequential ones. Limited authority cannot prevent every failure, but it reduces potential harm when the system misunderstands instructions, encounters malicious content, or behaves unexpectedly.
Who should own an AI workflow after it is launched?
A named person or team should own its acceptable behavior, information sources, evaluation, exceptions, approvals, and performance review. That owner should also have the authority to change, pause, or stop the workflow. Ownership must continue after launch because the underlying information, processes, tools, and risks will change over time.
Evidence base
Evidence and further reading
Anthropic · 2024
Building Effective Agents
Official engineering guidance emphasizing simple architectures, clear workflows, and well-designed tools.
OpenAI · 2026
A Practical Guide to Building Agents
Official guidance on instructions, tools, guardrails, failure thresholds, and escalation to people.
NIST · 2024
Artificial Intelligence Risk Management Framework: Generative AI Profile
A cross-sector framework for governing, mapping, measuring, and managing risks from generative AI.
Liu and coauthors · 2024
Lost in the Middle: How Language Models Use Long Contexts
Evidence that longer context does not guarantee reliable use of all relevant information.
Brynjolfsson, Rock, and Syverson · 2021
The Productivity J-Curve
Research on why complementary investments in processes, business models, and human capital delay realized productivity gains.
Uren and coauthors · 2023
Technology Readiness and the Organizational Journey Towards AI Adoption
Research arguing that people, process, and data readiness matter alongside technology readiness.
NIST NCCoE · 2026
Identity and Authority of Software Agents
Guidance on identifying, authorizing, auditing, and constraining software agents.
OWASP · 2025
LLM01:2025 Prompt Injection
Security guidance on how prompt injection can alter behavior, enable unauthorized access, and influence decisions.