Control loop
Your agent should not be its own reviewer
Let an agent explain and improve its work, but use separate evidence and authority for the decision to accept, publish, merge, or deploy it.
- agent-systems
- evals
- trust-boundary
Agents are often asked to review their own work. The pattern feels efficient: generate an answer, critique it, revise it, and stop when the same model says it is good enough.
Self-review is useful for iteration. It is weak as the final authority.
The agent shares the assumptions, blind spots, context, and incentives that produced the first answer. A second pass can catch obvious mistakes, but it does not create an independent reason to trust the result.
Keep the useful part of self-review
Let the agent inspect its draft. Ask it to find missing evidence, test edge cases, and explain uncertainty. This can improve quality before a final check and reduce avoidable review work.
Then separate the decision that has consequences:
- the coding agent may run tests, but a protected job decides whether the pull request can merge;
- the support agent may draft a refund, but a policy service decides whether the amount is permitted;
- the research agent may summarize sources, but citation checks use the source documents rather than the agent’s confidence;
- the publishing agent may prepare a post, but a person approves claims that affect reputation or legal exposure.
The goal is not to add a human to every step. It is to give the final decision an authority that is not controlled by the proposal being judged.
Match independence to the risk
Not every agent action needs the same level of separation. A private draft can use lightweight checks. A production deployment, payment, account change, or public claim needs stronger evidence and a clear handoff.
A practical scale is:
- Draft: the agent acts in a private workspace and explains its work.
- Checked: automated tests or policies inspect the result.
- Compared: the result is measured against a saved baseline or held-out examples.
- Approved: a separate service or person authorizes the consequential action.
Move up the scale as the blast radius grows. Make the level visible so users know whether they are looking at a suggestion, a checked result, or an approved action.
The design rule
The agent may help produce evidence. It may not be the only authority deciding what that evidence means.
That one rule makes agent workflows easier to debug, easier to explain, and safer to expand over time. It also lets teams change models without rebuilding the meaning of success around every new model.
Continue
Keep exploring
Turn the idea into a better agent workflow
Can the agent prove its own result?
Use four practical questions to find the gaps in an agent workflow.
Inspect the proofSee an evaluation system in practice
Read what the reconciler proves, what it does not, and where people remain in control.
Follow alongGet new builder notes
Follow practical notes and honest agent teardowns as they are published.