Should I let an AI agent act on my behalf?

Sometimes, and trust has little to do with it. The question is whether you have specified the boundary, because an agent without a stated boundary is abdication with a progress bar.

The distinction that matters is simple and almost nobody makes it. A system that answers gives you something to accept or reject. A system that acts has already done it. Every oversight model in common use assumes a pause for review, and agents remove the pause.

Four things to fix before granting autonomy#

1 · Reversibility. Sort the actions the agent can take into reversible, expensive to reverse, and irreversible. Grant autonomy freely in the first category, reluctantly in the second, and not at all in the third without a stop. This does more work than any accuracy estimate, because it bounds the loss rather than the probability.

2 · Blast radius. Not what the agent does, but how far the consequence travels. Sending one email is small. Sending one email to a client list is not, and the action is identical.

3 · The stop. Can you halt it mid-sequence, and does halting leave things in a safe state or a broken one? Article 14 of the EU AI Act requires exactly this for high-risk systems: intervention or interruption bringing the system to a halt in a safe state. Most consumer and internal agent deployments have not been designed for it.

4 · The reconstruction test. If this goes wrong, can you reconstruct why the agent did what it did? If the reasoning exists only inside a sequence of model calls, it has already gone, and you will be explaining an outcome you cannot account for.

Why the evidence points at the front rather than the back#

The Vaccaro meta-analysis of 106 experiments found human-AI combinations underperforming the better party alone, with losses concentrated in decision tasks, where a human judges whether a system was right, and gains in creation tasks, where the pair produces something together.

Agents make the decision task worse in the one way that matters: they perform it at machine speed, in volume, without the human present. If review after the fact was already the weakest available position, reviewing after the fact and after execution is weaker still.

Which means the human contribution has to move to where it counts: the problem, the intent, the constraints and the rejection criteria, all before anything runs. That is Human at the Start, and with agents it stops being a preference and becomes the only place the human can meaningfully be.

What is genuinely uncertain#

Most of it. There is no equivalent of the Vaccaro analysis for agentic systems, no field evidence on agent oversight failures at scale, and no established practice for what adequate autonomy limits look like. Agent capability is also moving faster than any other part of this field, so anything written now dates quickly.

Anyone offering confident guidance on agent delegation, including this page, is reasoning from adjacent evidence. The difference is whether they say so.

Agents make the argument unavoidable#

Agents are the point at which the argument this research has been making becomes unavoidable rather than advisory. When a system answers, you can compensate for a weak oversight design by being careful at the end. When a system acts, there is no end to be careful at. The decision was made when you set the boundary, or it was not made at all.

There is a second consequence, quieter and worse. Agents absorb exactly the sequences of small tasks that used to constitute learning a job: chasing the thing, checking the thing, noticing the anomaly, following it up. Those look like overhead and they are where judgement is formed. An organisation that hands them wholesale to agents has not just automated coordination, it has removed the last visible route by which anyone learned how the work actually holds together. See the missed reps.

A working rule#

• Let agents act freely on reversible, low-radius tasks. Most of the value is here and most of the anxiety is not.
• Require a human at the boundary of any irreversible or externally visible action. Not a review of the output, a decision before it runs.
• Write the limits down. Spending caps, recipient lists, systems it may touch, actions it may never take. Unwritten limits are not limits.
• Log the reasoning, not just the actions. Otherwise the reconstruction test fails at the moment you need it.
• Keep doing enough of the work yourself to notice when the agent is wrong. The capability that lets you set a good boundary is the same capability the agent is removing.

Related SuperSkills research#

On judgement with agents, AI agents and human judgement. On the stage-by-stage version, the Delegation Boundary Map. On why review fails, human in the loop is not a safeguard. On the legal duty, meaningful human oversight. On the override rule, when should I override AI.

Key sources

• Vaccaro, M., Almaatouq, A. and Malone, T. (2024). When combinations of humans and AI are useful. Nature Human Behaviour, 8.
• Bainbridge, L. (1983). Ironies of Automation. Automatica, 19(6).
• Parasuraman, R. and Riley, V. (1997). Humans and Automation: Use, Misuse, Disuse, Abuse.
• Article 14, Human Oversight, Regulation (EU) 2024/1689.

About this research#

Rahim Hirji is the author of SuperSkills (Kogan Page, 2026), keynote speaker on AI and human capability, and founder of The SuperSkills Intelligence Company. Agent-specific evidence is thin and this page reasons from adjacent findings, which it states above. Not legal advice. On a 90-day review cycle, because this is the fastest-moving question on the site.

How this research works  ·  Reviewed quarterly  ·  Found an error? Tell me and it is corrected on the page.