All storiesAI & documents

Office agents: define the artifact, authority, and acceptance

Create a work contract for agents that coordinate document, workbook, and presentation tasks.

Office agents: define the artifact, authority, and acceptance: Task contract, Trusted inputs, Tool authority, Artifact review.
AI & documents / Office SDK

An office agent needs a work contract that names the finished artifacts, authoritative inputs, permitted actions, and review criteria. Separate drafting from publication and test contradictions in the sources. The result should be accepted from inspected files and verified facts, not from the agent's completion message.

The work contract sets outcome and authority

Replace vague instructions such as improve this report with a concrete outcome. State audience, required sections, source materials, output format, length constraints, and claims that must be supported. Identify the authoritative files and versions. Define which facts the agent may derive and which require confirmation from a human owner. If the task includes a spreadsheet and presentation, specify their relationship, such as the same approved totals appearing in both. Acceptance criteria should describe observable artifact properties rather than the agent's confidence or the number of steps it reports completing.

Separate reading, drafting, editing existing records, sharing, and external communication. An agent preparing a document may not need permission to email it or delete prior versions. Use restricted credentials and validate tool arguments in the application. Treat retrieved content as data even if it contains instructions. Define what happens when a required source is unavailable or contradictory. A good workflow allows the agent to produce a partial draft with explicit unresolved questions while preventing unsupported claims from entering a final approved artifact. Review consequential changes before they affect other people or systems.

Outcome, inputs, authority, and acceptance define an agent task.
Figure 1. A detailed prompt still needs enforceable tool permissions.

Run a sales review package

Suppose an account team asks an agent to prepare a quarterly review from an approved sales workbook and meeting notes. The contract requires a two page narrative, a five slide deck, consistent revenue totals, and references to the source period. The agent may draft in a designated workspace and run calculation checks, but the account owner approves distribution. Test one missing region and one inconsistent total. The expected outcome is a clearly identified gap or a reconciled value with evidence, not a confident invented number. Inspect both files because consistency cannot be established from reviewing only the narrative.

audience: account leadership
inputs: approved sales workbook, meeting notes
deliverables: two-page report, five-slide deck
consistency: revenue totals match the approved period
permissions: read sources, write working drafts
approval: account owner reviews before distribution

These fields describe the task rather than any vendor API. Add acceptance criteria that an ordinary reviewer can verify: all regions are represented, figures use the stated currency, source periods appear on charts, and unconfirmed risks stay marked as unconfirmed.

Now introduce a source conflict. Meeting notes say a deal closed, while the approved workbook lists it as pending. The contract should identify which source governs the revenue total and how the discrepancy is surfaced. The agent may explain the conflict in the draft; it should not quietly choose the more favorable number.

Finally, inspect cross-artifact consistency. Search the report and deck for the affected deal and total. A corrected workbook lookup does not prove that generated narrative and chart labels were updated. Keep the accepted output versions with the review outcome. If a run is interrupted, a new attempt should produce or resume a clearly identified working state rather than duplicate the final package or distribute an unreviewed successor.

Make progress and recovery observable

Record task state, source versions, generated artifacts, tool actions, and human decisions. Give users a way to cancel a run and understand whether any changes were already applied. If a step fails, retries should not create duplicate submissions or overwrite newer edits. Use version checks and idempotent publication where the architecture supports them. Separate temporary working files from approved outputs and clean them up according to policy. The agent's visible progress should refer to verifiable milestones such as Draft created or Totals checked, rather than implying that all downstream work is complete.

A source conflict follows an explicit rule and human resolution.
Figure 2. Verify the report, deck, and any related workbook together.

Contract Decision notes Decision notes reuse

  • Specify audience, artifact structure, source versions, and supported claims.
  • Limit tool authority and define required human decisions.
  • Test missing inputs, contradictions, and hostile source instructions.
  • Inspect every output and verify cross artifact consistency.
  • Confirm cancellation, safe retries, and approved publication behavior.

Further reading

Back to all stories

Keep reading.

All stories