BLOG ·
6 MIN READ
AI Workflow Automation: What Should You Automate With AI Agents?
A research-led guide for enterprise teams evaluating production AI systems.

Drew Brooker
ML Engineer
- AI WORKFLOW AUTOMATION
- AI AGENTS FOR BUSINESS
- AGENTIC AUTOMATION
- ENTERPRISE AI AUTOMATION
AI workflow automation works best when a company chooses the right work before choosing the AI.
The highest-value target is rarely "automate a department." It is a bounded workflow with repeatable volume, identifiable inputs, accessible systems, measurable outcomes, and enough language or contextual judgment to justify model involvement.
Some steps should remain ordinary software. Some need retrieval. Some need model judgment. Some require people.
This guide gives a framework for deciding what to automate with AI agents and how much authority the system should receive.
HIGH-VOLUME, LOW-CONSEQUENCE WORK
Automation priority matrix

FIGURE 1
Volume and consequence are useful first filters.
High-volume, low-consequence work is the easiest place to expand autonomy after evaluation.
High-consequence work still benefits from AI. There, the system begins with research, recommendation, drafting, or approval-gated actions.
Start with workflow economics
A workflow becomes a stronger automation candidate when it consumes enough recurring effort to justify engineering and operation.
Measure:
- monthly case volume;
- human minutes per case;
- labor cost;
- wait time;
- rework;
- error cost;
- escalation rate;
- revenue or retention effect;
- seasonality.
A low-volume process can still matter if each case is expensive or slow.
Decompose the workflow

FIGURE 2
Different parts of one process can use different mechanisms.
| Step type | Example | Mechanism |
|---|---|---|
| Trigger | New support ticket | Event |
| Rule | Amount > $5,000 | Code |
| Knowledge | Find current policy | RAG |
| Judgment | Interpret unusual exception | Model |
| Action | Update CRM | Tool |
| Approval | Authorize refund | Human/policy |
| Verification | Confirm CRM state | Code/tool |
This decomposition is more useful than deciding whether the entire workflow is "AI-powered."
Which workflows are strong candidates?
Customer support resolution
Strong when the system can access account history, knowledge, ticketing tools, and measurable resolution outcomes.
Document operations
Examples include intake, extraction, classification, comparison, missing-field detection, and routing.
Sales operations
Examples include account research, CRM hygiene, meeting preparation, follow-up drafting, and structured qualification.
Finance operations
Examples include invoice exceptions, reconciliation research, expense-policy review, and collections preparation.
Internal knowledge work
Examples include policy research, technical support, internal Q&A, and evidence gathering.
Software operations
Examples include issue triage, code changes, test execution, incident research, and runbook assistance.
AUTHORITY SHOULD BE BOUNDED
Workflows that need caution
A workflow deserves stronger controls when errors are difficult to reverse or have material financial, legal, safety, privacy, or customer consequences.
Examples include:
- payments;
- account termination;
- contract changes;
- legal filings;
- access-control changes;
- medical decisions;
- destructive infrastructure actions.
AI can still assist these processes. Authority should be bounded.
THE AGENT CAN EXECUTE AFTER A DEFINED APPROVAL EVENT
The automation ladder

FIGURE 3
Authority can expand in stages.
Level 1: assist
The system retrieves information or summarizes a case.
Level 2: recommend
The system proposes a decision while a person remains responsible for the action.
Level 3: draft
The system prepares the action, message, or system update for approval.
Level 4: act with approval
The agent can execute after a defined approval event.
Level 5: bounded autonomy
The agent executes actions within measured limits and escalates exceptions.
The ladder gives a team a safer way to expand automation as evidence accumulates.
Suitability scorecard
Use a qualitative scorecard before building.
| Question | Weak candidate | Strong candidate |
|---|---|---|
| Volume | Rare | Frequent |
| Process knowledge | Tacit/unknown | Documented |
| Inputs | Unavailable | Accessible |
| Systems | Closed/manual | APIs/tools available |
| Outcome | Subjective | Measurable |
| Historical examples | Few | Many |
| Error reversibility | Low | High |
| Human review | Impossible | Available |
| Exceptions | Unbounded | Categorized |
| Economics | Small | Material |
MOST ACTIONS ARE READ-ONLY AND REVERSIBLE
Example: sales account research
A sales representative prepares for a meeting by opening the CRM, company website, previous emails, product usage, support history, and internal notes.
The work has several layers.
- 1Retrieve account data.
- 2Retrieve public company information.
- 3Summarize recent activity.
- 4Identify unresolved issues.
- 5Map relevant products.
- 6Draft meeting questions.
- 7Save the brief.
Most actions are read-only and reversible.
This makes the workflow a stronger early automation candidate than a workflow that directly changes contract terms.
APPROVAL RULES CAN CONTROL FINANCIAL ACTIONS
Example: invoice exception handling
Invoice work combines structured rules and contextual exceptions.
Deterministic code can validate required fields, totals, tax calculations, and identifiers.
RAG can retrieve purchasing policy.
A model can interpret unusual discrepancies.
Tools can query the ERP and vendor database.
Approval rules can control financial actions.
The resulting system is hybrid automation, with the model handling one part of the process.
EXACT RULES SHOULD REMAIN EXACT
What should remain deterministic?
Keep a step deterministic when the rule is exact and stable.
Examples:
if invoice_total > approval_limit:
require_approval()if customer_id is missing:
stop()if tool_result.status != "success":
do_not_report_completion()Models are useful where language and contextual judgment are needed. Exact rules should remain exact.
AVOID ASSUMING 100% AUTOMATION
How to calculate the opportunity
A simple labor baseline is:
Monthly labor hours = monthly cases × average human minutes / 60
Then estimate the share of work the system can remove or shorten.
Avoid assuming 100% automation.
Include:
- review time;
- escalations;
- exceptions;
- system maintenance;
- inference cost;
- retrieval cost;
- tool infrastructure;
- evaluation;
- production support.
The useful economic measure is cost per successful completed task.
Evaluation before autonomy
A workflow should have a test set before the agent receives broad authority.
For a support process, the dataset includes:
| Case | Expected outcome |
|---|---|
| Routine question | Correct answer |
| Refund eligible | Correct refund path |
| Refund above limit | Human approval |
| Missing account | Ask for information |
| Conflicting records | Escalate |
| Tool outage | Stop safely |
| Restricted account | Respect access |
| Unsupported request | Decline or route |
A COMPLETED WORKFLOW IS THE RESULT THAT COUNTS
Common automation mistakes
Automating an undefined process
If employees disagree about the correct workflow, the agent will inherit that ambiguity.
Starting with the most consequential action
Read-only and recommendation modes produce evidence with less risk.
Measuring model quality alone
A completed workflow is the result that counts.
Ignoring systems access
An agent without reliable tools remains a conversational layer over manual work.
Ignoring exceptions
The edge cases determine whether the system survives production.
FAQ
Processes with recurring volume, language or contextual judgment, accessible information, tool access, measurable outcomes, and reversible or controllable actions are strong candidates.
No. Exact rules belong in code. Agents fit the parts of a workflow where the path or decision depends on context.
Choose one bounded workflow, measure its baseline, map the steps, build an eval set, begin with read-only or recommendation behavior, and expand authority based on measured results.
AI automation can follow a fixed path. An agent receives some model-directed control over how work progresses.
Sources
- PAN ET AL.
- Characterizing Agents in Production, ICML 2026, IBM Research.
- LANGCHAIN
- State of Agent Engineering, June 2026.
- ANTHROPIC
- Building Effective Agents.
- ANTHROPIC
- Effective Context Engineering for AI Agents.
- ANTHROPIC
- Demystifying Evals for AI Agents, January 2026.
- OPENAI
- Evaluate Agent Workflows and Optimizing LLM Accuracy.
- NIST
- Artificial Intelligence Risk Management Framework: Generative Artificial Intelligence Profile, NIST AI 600-1.
- GOOGLE CLOUD
- Fine-tuning LLMs and AI Models.
Editorial note
Charts based on survey findings identify their source in the caption. Mathematical examples are labeled as illustrations. Architecture diagrams and decision frameworks are original explanatory assets created for this post.