Ten ways AI agents fail in operations, what instructions can improve, and why ownership needs time as well as a name.
An AI agent can finish the task and still create a problem.
“Clear the backlog” becomes closing cases that needed more investigation. “Resolve the discrepancy” becomes changing a record it should have questioned. The target is met. The process suffers.
This page shows the first four failures. Subscribers get all ten, controls enforced outside the agent’s instructions, a prompt to audit your own agent’s instructions, five questions for your IT team, and Part 2 on the manager squeeze.
The Operations Briefing is free every other Friday. Unsubscribe from any issue. Privacy Policy.
Two stories stood out in my recent research: the gaps in how organisations supervise AI agents, and the growing demands on managers.
They connect through a practical question: who owns the agent, and do they have time to do it properly?
Three surveys point to a gap between confidence and oversight.
74% of surveyed enterprises reported rolling back or shutting down an AI customer-communication agent because of a governance failure. Sinch surveyed 2,527 senior decision-makers across 10 countries. This is the proportion of organisations reporting a rollback, not the proportion of agents that failed.
Two-thirds of organisations with agents reported an agent-related operational consequence in the previous year, while 96% of IT decision-makers were confident their agent inventory was complete and accurate. Guild.ai commissioned the US survey of 362 IT decision-makers from Morning Consult.
65% reported an agent acting outside its intended scope, including 29% reporting measurable business impact. EMA surveyed 202 enterprise IT and security leaders for Cequence.
Evidence note: These surveys cover different populations and reported experiences. Sinch, Guild.ai and Cequence sell relevant products. The checklist is our practical synthesis, not a ranking from one study.
The lesson is broader than “write a better prompt”.
Instructions guide behaviour. Permissions and workflow controls limit what an agent can actually do. Ownership keeps both current.
Operations professionals have an essential contribution here. You know the exceptions, the workarounds, the dependencies and the decisions that need another pair of eyes.
Here are the first four of ten practical failure risks, drawn together from the research and the realities of running a process.
The agent closes a case with missing evidence because completion is the target.
Improve the instructions: Define what a correctly resolved case requires. Make a justified escalation an acceptable outcome. Speed comes after working within policy and getting the answer right.
A standard rule gets applied to a complaint, a disputed invoice or a customer in financial difficulty.
Improve the instructions: Name the situations that require human review. Include a route for unfamiliar cases: stop, explain what does not fit, and escalate.
The agent invents a policy, date or status to fill a gap.
Improve the instructions: Name the approved sources, require a reference to the record used, and tell it what to do when evidence is missing. Then test whether it follows those rules.
The agent escalates, but the person receiving the case has to start again.
Improve the instructions: Require a short handoff: the request, checks completed, actions taken, unresolved issue and suggested next step.
Weak:
“Resolve all open cases by end of day.”
Stronger:
“Work within policy and your authorised scope. Prioritise accuracy over speed. Close a case only when the required evidence is present. If you cannot verify the answer, leave it open with a clear note and escalate. A justified escalation counts as a successful outcome.”
This gives the agent a better definition of success. Permissions, testing and approval controls still need to support it.
You have read the first four failures. The full issue adds:
It is free. The Operations Briefing lands every other Friday.
Already subscribed? Use the full-issue link in your newsletter email. Subscribe to receive the Operations Briefing by email every other Friday. Unsubscribe from any issue. Privacy Policy.
One for each half of this issue: the controls around an agent, and the time and conversations the owner needs. Coursera generally offers a free first-module preview, rather than free access to a whole course. Availability, paid access and certificate options vary; check the course page before enrolling.
Optional Google Analytics helps us understand how this website is used. It stays off unless you allow it. See our Cookie Policy and Privacy Policy.
