“Agent” and “workflow” are often treated as competing products. They are better understood as positions on a control spectrum. A workflow follows an explicit path. An agent chooses among tools and next steps based on context. Most production systems need both: deterministic rails around a limited reasoning component.
Start with process variance
If inputs, rules and outputs are stable, use a workflow. Invoice routing, scheduled reporting and CRM synchronization usually benefit from explicit steps, retries and audit logs. If the work requires interpreting ambiguous requests, searching several sources or choosing a route that cannot be enumerated in advance, an agent may add value.
Use consequence of error as the boundary
Autonomy should shrink as the cost of a wrong action rises. Drafting an internal summary can tolerate review after generation. Sending money, changing access rights or communicating a binding decision needs deterministic checks and usually explicit approval.
A practical decision test
- Can a competent operator draw the process as a stable flowchart? Start with a workflow.
- Does the system need to select tools or plans from changing context? Add a bounded agent.
- Can every action be validated before execution? If not, keep a human approval point.
- Can you explain what happened from logs alone? If not, the design is not ready.
The production pattern
Use deterministic code for triggers, permissions, validation, state changes and retries. Use AI for classification, extraction, summarization and drafting. Give an agent only the tools and permissions required for its defined job. This reduces excessive agency and makes failures easier to contain.
Bottom line
Do not buy autonomy as a feature. Add it only where process variance creates real value. Reliability is not less advanced than agency; in operations, reliability is usually the product.
Three architecture patterns
Deterministic workflow
Use an event, a known sequence of steps and explicit branching rules. This pattern is easy to test, replay and explain. It is usually the right choice for synchronization, document routing, calculations and recurring reporting.
AI-assisted workflow
Keep the process deterministic but introduce AI inside one or two bounded steps. The model may extract fields, classify a request or draft a response. Schema validation, permissions and state changes remain conventional software.
Bounded agent
Allow the system to choose from a small toolset when the next step depends on context. Constrain the number of steps, available data, spending, destinations and actions. Require approval before material consequences.
Example: qualifying an inbound lead
A reliable design uses a workflow to receive and deduplicate the lead. AI classifies the company and summarizes public signals. A bounded agent may select which approved research tools to query. Deterministic rules calculate routing and prevent contact with excluded accounts. A sales representative approves external outreach. Calling the whole system an agent hides the controls that make it safe.
What to test
Create a test set containing normal cases, incomplete inputs, contradictory information, malicious text and unavailable tools. Measure task completion, incorrect actions, review rate and recovery behavior—not only output quality. Replay the same cases after model, prompt or tool changes.
Questions for a vendor
- Can every tool and permission be configured separately?
- How are step limits, timeouts and budgets enforced?
- Can we inspect inputs, decisions, tool calls and outputs?
- How are prompt injection and untrusted retrieved content handled?
- Can we switch models without rebuilding the workflow?
Implementation rule
Begin with the workflow you can explain. Add reasoning where fixed rules become brittle. Add tool choice only where it removes a genuine operational bottleneck. Every increase in autonomy should have an observable benefit and a corresponding control.
Have a process this applies to?
Bring us the real workflow, including the exceptions. We will help you identify the smallest useful first implementation.
Book a process scan