9 个问题,看四件事9 questions, four things

01

任务可变性Task Variability

步骤固定吗?输入和情况有多多变?Are the steps fixed? How much do the inputs and situations vary?

02

决策自主性Decision Autonomy

下一步靠规则能定,还是要看当前结果临场决定?计划中途要不要改?Can rules decide the next step, or must it be decided on the spot from the current result? Does the plan change mid-run?

03

反馈与工具互动Feedback & Tool Interaction

拿回的结果会不会改变下一步?任务能不能拆开、并行推进?Do the results that come back change what happens next? Can the task be split and run in parallel?

04

经济与风险Economics & Risk

量与规则覆盖决定账算不算得过来;做错的代价单独成轴,只封顶自主等级。Volume and rule coverage decide whether the economics clear; the cost of a mistake is its own axis and only caps the autonomy level.

四种模式Four patterns

确定性自动化Deterministic AutomationAI 辅助工作流AI-Assisted Workflow受限 AgentBounded Agent多 Agent 系统Multi-Agent System

判断逻辑 v2:先看要不要自主决策,再看反馈与经济;风险只封顶自主,不扣适配分。Logic v2: autonomy first, then feedback and economics. Risk caps autonomy; it never lowers fit.

测评结果 · AGENT FIT CHECK

该不该上 Agent · 示例报告(虚构案例)

案例:某制造企业售后工单的分诊与备件协调。工单以自由文本进来(文字、照片、语音转写都有),技师要先查 CRM 的设备档案与保修状态,再查库存系统看备件,缺件时改计划走调拨或外采,最后给客户回执;涉及退款承诺与保修判定,一旦对外发出不可撤销。

11 / 14

适配 11 / 14 · 风险:高 · 自主等级:审批受限

推荐模式:受限 Agent(Bounded Agent)

需要动态规划与工具调用,但活动范围、预算、权限与停止条件事先划定。

任务可变性3/4
决策自主性4/4
反馈与工具互动3/4
经济可行性1/2

为什么

决定性 · 决策自主性 4/4:下一步取决于当前结果,计划要在执行中调整,这是 Agent 存在的理由。

任务可变性 3/4:有真实分支与长尾,固定流程要留例外通道。

反馈与工具互动 3/4:返回结果会影响分支,但还没有形成反复执行的反馈回路。

经济账:有稳定的量,规则能处理一多半,剩下的长尾才是值得花推理成本的部分。

多 Agent 判断:可分解性探针未显示必须并行协作,一个受限 Agent 就够,多 Agent 只增加协调成本。

关于多 Agent:你这组答案里没有证据表明需要多 Agent 系统。

降级退路

若先不上 Agent:用 AI 辅助工作流覆盖固定部分,最需要临场判断的一段留人工。

上线前必须控制的

  • 门禁:最小权限,只给完成任务必需的系统与数据权限,凭证独立隔离,不与个人账号混用。
  • 盯梢:全程日志加成本上限加一键停,每一步调用可回放,费用到顶自动停,人工可随时接管叫停。
  • 审批点:不可逆或对外动作执行前必须过人工确认,Agent 不得直接执行。本例中,退款承诺与保修判定在发出前一律过人工。
  • 工具:可调用的工具与参数范围列成白名单,写操作逐项登记,名单外一律拒绝。
  • 平台:单任务的步数、时长与预算三项上限事先写死,超限即停并转人工。
  • 编排:什么算做完、什么情况必须停,事先写成可验证的判据,不许靠模型自报完成。

判断逻辑 v2 · 演示数据,非真实场景。

RESULT · AGENT FIT CHECK

Should This Be an Agent? · Sample report (fictional case)

The case: triage and spare-parts coordination for a manufacturer's after-sales tickets. Tickets come in as free text (text, photos, voice transcripts). A technician first checks the equipment record and warranty status in the CRM, then checks the inventory system for parts; if a part is missing, the plan changes to a transfer or an outside purchase, and the customer gets a reply at the end. Refund commitments and warranty decisions, once sent out, cannot be revoked.

11 / 14

Fit 11 / 14 · Risk: High · Autonomy level: Approval-capped

Recommended pattern: Bounded Agent

It needs dynamic planning and tool calls, inside a scope, budget, permissions, and stop conditions set in advance.

Task Variability3/4
Decision Autonomy4/4
Feedback & Tool Interaction3/4
Economic viability1/2

Why

Decisive · Decision Autonomy 4/4: the next step depends on the current result and the plan must adjust mid-run, which is the reason agents exist.

Task Variability 3/4: there are real branches and a long tail, so a fixed process needs exception paths.

Feedback & Tool Interaction 3/4: returned results affect branches, but there is no repeated feedback loop yet.

The economics: volume is steady, rules could handle most of it, and the long tail is the part worth spending inference on.

On multi-agent: the decomposability probe shows no need for parallel roles. One bounded agent is enough, and multi-agent would only add coordination cost.

On multi-agent systems: nothing in your answers is evidence that you need one.

The step-down option

If you do not build the agent yet: cover the fixed parts with an AI-assisted workflow and keep the most judgment-heavy segment human.

What must be controlled before launch

  • Access Control: least privilege. Grant only the systems and data the task needs, with credentials isolated and never mixed with personal accounts.
  • Observability: full logging, a cost ceiling, and a kill switch. Every step replayable, spend stops at the cap, and a human can halt it at any time.
  • Approval Points: irreversible or outward-facing actions must pass a human confirmation before execution; the agent never executes them directly. In this case, refund commitments and warranty decisions always pass a human before they go out.
  • Tools: callable tools and parameter ranges are allowlisted, write actions are registered one by one, and anything off the list is refused.
  • Platform: per-task caps on steps, duration, and budget are set in advance; hitting any cap stops the run and hands it to a human.
  • Orchestration: what counts as done and what must stop the run are written in advance as verifiable criteria; a model's own claim of completion is never accepted.

Logic v2 · Demo data, not a real use case.