Identity
Who is using the agent?
Define what agents can access, which tools they can use and when your team needs to approve. Build those boundaries into the loop where the work happens.
Discuss your requirementsWho is using the agent?
What responsibility does it serve?
Which data and tools may it use?
What must be authorized before execution?
What is permitted to execute?
What happened, and what was recorded?
Define the agent’s authority in relation to the user, the business role, the tool and the action. Make the boundaries explicit before execution.
Establish who is using the agent and which responsibility it serves.
Specify the information it may access, the tools it may invoke and the actions those tools may perform.
Identify decisions that require a person’s authorization, along with the conditions that pause or stop the work.
Connect the agent to the definitions, information and tools its role requires. Specify the task state it needs to retain as work progresses.
Agree business vocabulary, metric definitions and the calculation rules that approved tools must apply.
Identify the sources each agent needs. Align business definitions, validate data quality and freshness, and provide access through approved tools.
Define who maintains each source, how it is kept current, and how the agent should respond to missing or conflicting information.
Map the sources, connectors and execution capabilities required for the agent’s scope.
Define what task state must be retained, who may access it and how long it should remain available.
Describe dependencies, handoffs and the route for questions or exceptions that the agent cannot resolve within its authority.
Test the agent against the work it is expected to perform. Use execution traces and observed outcomes to investigate failures and assess changes.
Define normal cases, edge cases and expected outcomes with the teams responsible for the work.
Follow tool calls, actions, approvals, results, quality, latency, cost and failures.
Review new versions, test for regressions and establish responsibility for ongoing operation.
Guardrails define permitted behavior. Verification checks individual results. Evaluation tests whether the agent performs as expected across business scenarios.
Permissions, policies and approval boundaries define how agents work.
Business definitions, relevant data and operating rules inform each step.
Behavior is tested against business scenarios and expected outcomes.
Tool calls, actions, results, cost and failures can be traced and reviewed.
Business and technical teams bring the requirements needed to configure the Harness around real work.
Define the business role, tasks, expected outcomes, relevant information and systems.
Identify the loop, tools, context, memory, guardrails and evaluation scenarios the work requires.
Review deployment constraints, data handling, integration scope and responsibilities together.
Start with the work, the systems involved and the responsibilities you want agents to take on.