Skip to content
AW FRONTIER R&D LAB

We run a multi-agent organization on real work.

Here is what broke, the mechanisms we use, and how to check your own system for each.

Our private multi-agent organization does research, software delivery, content operations and deploys under one accountable owner.

Start with your last release: can you prove that the version serving users is the version you approved?

What a successful demo still leaves to check

A successful run alone does not settle these operating questions:

  1. Who owns the result after the builder leaves?
  2. What evidence survives the next handoff or interruption?
  3. Who can stop, approve or reverse a consequential action?

The mechanisms to check

These are lessons from our operation, not findings about every organization. Practice means we use it in selected internal workflows; hypothesis means a rule we are testing; plan means intended work, not an implemented control.

practice

Guarded deploy

Reusable pattern
Use one release path. After smoke tests, match the artifact at the production pointer to the approved artifact. Repeat the identity check after a stability watch.
Failure it targets
Silent stale or partial promotion: a passing test on one version while another version serves users.
How to check yours
Can you print the production artifact ID and match it to what you approved?
When a lighter approach may suffice
Single-user tools that never reach production.
practice

Receipts as artifacts

Reusable pattern
Keep a release record with its staging reference, validations run, approver and rollback path.
Failure it targets
An unattributable change, or rollback reconstructed from memory.
How to check yours
Take your last release. Can you find all four fields in under a minute?
When a lighter approach may suffice
Disposable artifacts with no continuing users or recovery obligation.
practice

Immutable releases, pointer rollback

Reusable pattern
Keep approved releases unchanged. Promote or roll back by moving a pointer, and bind review records to the version inspected.
Failure it targets
Approving one version and shipping another, or losing the meaning of a review after an edit.
How to check yours
Could two reviewers disagree about which version they saw?
When a lighter approach may suffice
Work with no reviewer. Production recovery can still require immutable versions.
practice

Owner-gate escalation classes

Reusable pattern
List decisions reserved for the accountable human: spend, a new class of public action, credentials, legal commitments and one-way doors. Resolve other decisions at the lowest competent owner.
Failure it targets
Routine decisions bottlenecking on the owner, or delegated work silently acquiring more authority.
How to check yours
List your last ten escalations. Which class did each fit?
When a lighter approach may suffice
With one agent and one operator, direct approval may replace a separate escalation scheme. Reserved decisions still need approval.
practice

Selective independent review

Reusable pattern
Use independent review when it can change a consequential decision. Choose another model family when its perspective adds value, verify material claims against sources, and keep acceptance with the accountable owner.
Failure it targets
A shared blind spot passing through self-review without a challenge.
How to check yours
Can one model's failure mode pass unopposed? Different families can still agree on an error; retain direct tests and source checks.
When a lighter approach may suffice
Low-stakes, reversible output where independent review costs more than recovery.
hypothesis

A wait-for graph before an orchestrator

Reusable pattern
Map who waits on whom. Look for cycles and work converging on one reviewer. Use a graph where the structure is predictable and an agent loop where it is not.
Failure it targets
Adding coordination machinery around a deadlock instead of removing the blocking dependency.
How to check yours
Draw the dependency edges. Is there a cycle? Does every path depend on the same unavailable decision?
When a lighter approach may suffice
Fewer than a handful of actors with dependencies you can inspect directly.

What we got wrong

In our operation, building the machinery became easier than testing whether the work mattered.

Cathedral: frameworks before validation

We formalized a method before checking whether its output was useful.

Detection test: remove the framework from your next task. If the useful outcome and required checks survive, what failure does the framework prevent?

Gold-Plate: infrastructure before users

We prepared infrastructure before putting the smallest usable result in front of a user.

Detection test: name the user behavior your next infrastructure change lets you observe. If you cannot, test the workflow first.

What inspectable proof looks like

A receipt must identify the exact release and its recovery path. The shape below is a template, not a completed release record.

Approved artifact ID
Example: release-A
Staging reference
Example: candidate-A
Validations run
Example: smoke checks; artifact identity; stability recheck
Approver
Example: accountable release owner
Rollback path
Example: move the production pointer to release-B

Lessons log

Recorded . Retrospective lessons from our operation; the date records this synthesis, not when each event occurred.

  • Framework before use. A method could be documented before its output had met a user. Rule: test a framework against the result or operating control it is meant to support before expanding it.
  • Infrastructure before feedback. Preparation displaced the next user check. Rule: name the behavior an infrastructure change will let you observe.
  • A test needs an identity. A passing functional smoke check does not by itself identify the artifact serving users. Rule: compare the immutable release ID and its sealed manifest with the production pointer.

Separate the review responsibilities

For consequential output, assign production, challenge and source checks as the decision requires.

  1. Producer

    Creates the artifact.

  2. Reviewer

    Adds an independent challenge when warranted.

  3. Claims checker

    Verifies material claims against sources.

The accountable human retains reserved decisions. Model disagreement does not replace direct tests.

Evidence in the open

Read the engineering articles and named cases alongside the relevant mechanism. Each describes its own system and constraints; these links do not establish a benchmark for our organization.

Public vocabulary for these mechanisms

Start with a failed release, lost handoff or unresolved decision. Follow its check below; open the Arizen essay for the underlying concept.

Where this becomes an engagement

Bring the failed handoff, release record or prototype that depends on its builder. Choose the decision your team needs to make next.

Production AI Readiness Review

Review one live or near-live AI path: its handoffs, acceptance evidence and recovery assumptions. Receive findings, known gaps and next-step options.

Discuss a review →

Agentic Workflow Design

Your prototype works only with its builder present. Define task boundaries, persistent context, review responsibilities and an explicit done-state.

Discuss workflow design →

Governance Playbook

Your agents cross approval boundaries. Document reserved decisions, escalation classes and review ownership before expanding their authority.

Read governance advisory →

Enterprise Agentic Advisory

You are comparing vendors or initiatives. Examine acceptance evidence, production ownership and the decisions leadership needs to defend.

Read enterprise advisory →

Start with a decision tool

Next step

Put your agent system's next decision under review

Tell us about your system, the decision ahead, and the constraints. We will review the context and recommend the next step.

What happens next

  1. 1. Context We review the situation and constraints.
  2. 2. Fit We recommend an appropriate next step.
  3. 3. Scope If relevant, we discuss scope.

Direct contact with a principal engineer.