An operating manual / Nate Hamilton

Delegating Real Work to AI Agents and Verifying It

How to hand an AI agent a real job and check whether it did it.

I start with the job, the boundary, and the check. This is the part you can try: write the contract, hand over the work, and inspect what comes back. For the operating model, read the guide; for the mechanics of buses, heartbeats, and gates, read AI Agent Operations.

For the code that enforces an agent’s authority, use The 16 Architectural Boundaries for AI Systems: the technical reference on runtime isolation, typed contracts, tools, and shared processing.

Last updated

01 / Delegation

What should you delegate to an AI agent first?

Start with one recurring job that has clear limits and a result you can check. Write the charter, which defines the job and its limits, along with the check for accepting the work and when it must stop or ask for a decision, before handing it over. Expand scope only after the evidence shows the loop works.

I want the first delegation to teach me whether the agent can carry a job through and whether I can judge the result. A vague instruction to “improve things” gives neither of us a useful boundary. Pick existing work with known inputs and a result you can point to.

This is the principle behind the trust curve: verified performance earns a wider scope of action.

  1. Choose what to check. For example, ask for a review of a defined set of published pages against a checklist you supply. Use this as a starting exercise. It does not describe a past run.
  2. Define what comes back. Require the page, the observed issue, the evidence, and a proposed correction for each finding. A review with no findings must still say what was checked.
  3. Set limits on what it may do. For this first exercise, authorize inspection and proposed changes. Require a decision before changing the published pages. If inputs are missing or the criteria are unclear, require the agent to ask for a decision.
  4. Inspect before expanding. Compare the receipt with the checklist, resolve disputed findings, and correct the charter where it left room for guessing. Only then consider authorizing the next kind of work.

For the review stages, see the trust curve.

02 / Delegation

How do you write an AI agent's charter (its job description)?

The charter is the contract: it says what the agent owns, what it may decide, and when it must ask for a decision. It also defines the evidence required to close a job, the schedule, and permission to log a reasoned refusal. Write it so the agent and the reviewer can reach the same conclusion about what counts as done.

The guide’s short charter is the starting point. I would fill in the version below before a recurring job runs. Replace every bracket with a decision; a limit left blank is still a decision someone will have to make while doing the work.

Read it back as the reviewer: could you reject a plausible but incomplete result using this contract? If not, tighten the acceptance check. I need the boundary clear before the agent encounters it.

03 / Delegation

How do you check an agent's work without redoing it yourself?

Check the agreed outcome rather than repeating every step the agent took. Write acceptance criteria before the work runs, match each receipt to its claim, and get an independent verdict. Reproduce disputed findings: a second agent can be wrong, and a success message does not prove the underlying action worked.

  1. Write the claim and its check together. If the claim is “the change was saved,” the check is save → reload → inspect the saved state. A message saying “saved” does not answer that question.
  2. Ask for a receipt per criterion. Require the actual result, how it was inspected, and where the evidence is. Missing evidence stays unchecked; waiving every check cannot produce a pass.
  3. Give the reviewer authority to hold the release. In my model, a different model family challenges the builder’s production-ready claim. Give it the original criteria and authority to hold the release.
  4. Resolve disagreements by repeating the check. Re-run the disputed check against the relevant result. Record false findings as well as real defects, and require evidence before clearing either.

I don't let my own AI say a high-stakes release is done. A rival AI signs off first records a held release and findings the reviewer got wrong. A green checkmark that isn't the AI's own word: building a quality check with teeth shows why the checker itself needs scrutiny and why missing evidence must remain visible. Verification still takes work; I focus that work on the outcome and the disputed claims.

Source note: these AI Guide examples are my published operating accounts. The underlying evidence records do not currently have public artifact links. The templates here translate that model into instructions to try; they are not a guarantee of reliable execution or a substitute for inspecting your own live result.

04 / Delegation

How do you stop an agent from doing low-value work?

Give the agent a stop-list and define what fresh evidence makes a recurring job worth repeating. Require a logged reason for taking no action, including whether the inputs were current. A justified refusal counts as doing the job; another scheduled wake-up does not make another output valuable.

I do not want the schedule to become a publishing quota. Put near-identical output and maintenance with no new signal on the stop-list. Name the trigger that would justify action: a changed source, a newly observed problem, or another specific change relevant to the job. Check that the inputs are current before treating missing signal as evidence that nothing needs doing.

The smartest thing my night-shift agent did all month was refuse to publish records refusals of repetitive work and a missing signal traced to stale inputs. Review these records alongside shipped work. A refusal needs a defensible reason; an empty status gives me nothing to inspect.

05 / Delegation

How do you go from one agent to many?

Add agents when a separate area of work needs an owner, and give each owner a charter before handing over work. Coordinate handoffs on a shared message log, keep the built-right and will-it-earn judgments with independent owners, and check separately that a message is stored and that someone saw it. A notifier failure should delay attention without losing the work record.

  1. Name the next area of work. Write what the new owner takes over, where its authority ends, and who receives its result. Resolve overlapping ownership before work starts.
  2. Write the handoff. Put the requested decision and evidence on the shared bus. The next owner should be able to inspect the request without asking me to reconstruct the conversation.
  3. Keep the judgments independent. Give engineering and commercial owners their own vetoes. Ask whether the work is worth building before execution; a technical pass cannot settle whether it will earn.
  4. Check storage and attention separately. Confirm the handoff stays stored, then confirm the recipient saw it. Keep a way to recover by reading the log directly. Distinguish an unseen request from a considered pass.

We gave two different agents the power to block a release — on purpose. explains why neither owner can call a product done alone. Under my operating rule, it must also be in-market and earning. The shared messaging system went dark for 72 minutes. We lost nothing, but the requests waiting on me looked ignored. records recovery from a surviving log. That recovery depends on the durable store remaining intact.

Use the operations hub for the bus and recovery mechanics, and the guide for the human’s responsibility. Adding owners does not remove mine.

06 / Quick answers

Frequently asked questions

What makes a good first delegation?

A bounded, recurring job with an observable result and a clear stop condition. I would start with a defined review of existing work: give the agent the inputs, ask for evidence-backed findings, and decide in advance what would make the review acceptable. Expand only after you can inspect the result and trust the loop.

How detailed should an agent charter be?

Detailed enough that the agent and reviewer agree on ownership, authority, escalation, and done. Include the inputs, cadence, acceptance check, required evidence, and permission to log a reasoned refusal. If a decision boundary is ambiguous, clarify it before the next run.

How do I trust an agent's output?

Match each claim to evidence from the actual result and get an independent verdict. For a save, reload and inspect the saved state. Keep missing checks visible, reproduce disputed findings, and remember that the reviewer can be wrong too.

When should I add another agent?

When a distinct domain needs an owner and the existing delegation loop produces inspectable results. Write the new charter and handoff before adding the agent. Keep engineering and commercial judgments independent; adding execution capacity does not establish that the work is worth doing.

Can taking no action count as completing the job?

Yes, when inspection shows no justified action within the charter and the agent logs its reason. The record should say what it checked, whether the inputs were current, and what fresh evidence would change the decision. Silence is not a reasoned refusal.

Browse AI Guides