Portfolio Design Study — Derek Britner
Multi-Agent Workflow Orchestration for Content Operations
A system design for turning one person's intent into finished, reviewed, publish-ready content — by coordinating a team of specialized AI agents under explicit human approval gates, with a full audit trail.
Content teams don't lack ideas — they drown in the cycle between idea and published output.
One person writes, one reviews, one fixes, one packages — each step waits on the last person's calendar, inbox, and attention.
When deadlines stack up, editorial review becomes a skim. Errors, inconsistencies, and off-brand language ship because no one had time to check properly.
Work lives across documents, chats, and inboxes. Status is tribal knowledge. When something stalls, it stalls silently.
A single AI prompt producing final output with no checkpoints trades the bottleneck for a trust problem: fast, unverified, and unaccountable.
The design question behind AgentOps: how do you get the speed of automation with the accountability of a well-run editorial team? The answer is to model the system on how good teams already work — specialized roles, a coordinator, explicit handoffs, and a human who approves before anything ships — and encode that structure into the architecture itself.
One orchestrator, a team of narrow specialists, a shared message bus, and gates a human controls.
Agents don't talk to each other peer-to-peer. All coordination flows through the orchestrator, which keeps a single source of truth for what was asked, what state each task is in, and who approved what. That constraint is deliberate: it makes the system debuggable, auditable, and safe to pause at any point.
Every unit of work moves through five explicit message kinds on the bus. This small, strict vocabulary is what makes a multi-agent system operable instead of chaotic:
| Message | Meaning | Who acts on it |
|---|---|---|
| task | A unit of work is assigned, with its brief, inputs, and definition of done. | Worker agent picks it up |
| status | Progress report — started, in progress, checkpoint saved. Work is visible, never silent. | Orchestrator tracks; sponsor can inspect |
| question | The agent is blocked on a decision only a human (or the orchestrator) can make. Work pauses cleanly instead of guessing. | Orchestrator routes it; sponsor answers |
| done | Work is complete, with the artifact attached and a summary of what was produced. | Orchestrator verifies, routes to next stage or gate |
| error | Something failed — with context. Triggers retry, re-plan, or escalation rather than a silent dead end. | Orchestrator decides: retry, reassign, or escalate |
Two rules make the protocol trustworthy: agents never guess past a question — ambiguity escalates instead of being papered over — and every state change is a message, so the bus doubles as the audit log.
Click through the pipeline to see what happens at each stage — who acts, what the bus records, and where the human gates sit.
Notice the shape: agents do the high-volume work (drafting, checking, assembling), the orchestrator does the coordination work (planning, routing, verifying), and the human does only the judgment work — setting direction and approving output. That division is the entire point of the architecture.
Autonomy is granted stage by stage, never wholesale. The guardrails are architectural, not aspirational.
No artifact reaches delivery without an explicit human approval at a gate. Approval is a recorded message on the bus — who approved, what version, when.
Each run carries a budget: maximum model spend, maximum retries, and a defined set of permitted actions. Exceeding any limit halts the run and escalates — it never quietly continues.
When an agent hits ambiguity — a missing source, a conflicting instruction, a judgment call — it files a question and pauses. The cost of asking is small; the cost of a confident wrong answer is not.
Because every state change is a bus message, the complete history of any deliverable — brief, drafts, edits, QA flags, approvals — can be replayed end to end. Accountability is a byproduct of the design, not extra work.
Each worker can only do its job: the writer can't publish, the packager can't edit content, and no agent can approve its own work. Separation of duties, borrowed from classic systems design.
Any run can be halted at a checkpoint and resumed later — by a person or after an outage — without losing work or repeating completed stages.
Multi-agent systems fail in predictable ways. This design treats those failure modes as first-class engineering concerns.
error message and escalate. No infinite loops burning budget.done artifact (exists, well-formed, matches the definition of done) before advancing the pipeline, so defects surface at the stage that created them.If this system ran in production, these are the numbers that would prove — or disprove — its value.
The headline trade-off the metrics expose: a healthy system spends agent time freely to save human time, while the gate pass rate guarantees the speed never comes at the cost of trust.