Portfolio Design Study — Derek Britner

AgentOps

Multi-Agent Workflow Orchestration for Content Operations

A system design for turning one person's intent into finished, reviewed, publish-ready content — by coordinating a team of specialized AI agents under explicit human approval gates, with a full audit trail.

AI Agent Architecture Workflow Orchestration Human-in-the-Loop Design Integration Patterns Cost & Reliability Engineering

01The Problem

Content teams don't lack ideas — they drown in the cycle between idea and published output.

Drafting is serial and slow

One person writes, one reviews, one fixes, one packages — each step waits on the last person's calendar, inbox, and attention.

Review quality collapses under volume

When deadlines stack up, editorial review becomes a skim. Errors, inconsistencies, and off-brand language ship because no one had time to check properly.

Nobody can answer "where is it?"

Work lives across documents, chats, and inboxes. Status is tribal knowledge. When something stalls, it stalls silently.

Naive automation makes it worse

A single AI prompt producing final output with no checkpoints trades the bottleneck for a trust problem: fast, unverified, and unaccountable.

The design question behind AgentOps: how do you get the speed of automation with the accountability of a well-run editorial team? The answer is to model the system on how good teams already work — specialized roles, a coordinator, explicit handoffs, and a human who approves before anything ships — and encode that structure into the architecture itself.

02System Design

One orchestrator, a team of narrow specialists, a shared message bus, and gates a human controls.

👤 Human SponsorSets the brief, answers questions, approves at gates
↕
🧭 OrchestratorPlans the work, assigns tasks, routes questions, enforces gates, compiles delivery
↓  tasks via message bus  ↓
✍️ Writer AgentDrafts from brief + source material
🖊️ Editor AgentStructure, clarity, consistency pass
🔍 QA AgentFact/format/style checks, flags issues
📦 Packager AgentAssembles final deliverable + metadata
↕
🚌 Shared Message BusEvery task, status update, question, and result is a message any authorized participant can inspect
↓
🚦 Approval GatesNothing advances to delivery without explicit human sign-off
📬 DeliveryPublished package + complete audit log

Why an orchestrator, not a free-for-all

Agents don't talk to each other peer-to-peer. All coordination flows through the orchestrator, which keeps a single source of truth for what was asked, what state each task is in, and who approved what. That constraint is deliberate: it makes the system debuggable, auditable, and safe to pause at any point.

The message protocol

Every unit of work moves through five explicit message kinds on the bus. This small, strict vocabulary is what makes a multi-agent system operable instead of chaotic:

MessageMeaningWho acts on it
taskA unit of work is assigned, with its brief, inputs, and definition of done.Worker agent picks it up
statusProgress report — started, in progress, checkpoint saved. Work is visible, never silent.Orchestrator tracks; sponsor can inspect
questionThe agent is blocked on a decision only a human (or the orchestrator) can make. Work pauses cleanly instead of guessing.Orchestrator routes it; sponsor answers
doneWork is complete, with the artifact attached and a summary of what was produced.Orchestrator verifies, routes to next stage or gate
errorSomething failed — with context. Triggers retry, re-plan, or escalation rather than a silent dead end.Orchestrator decides: retry, reassign, or escalate

Two rules make the protocol trustworthy: agents never guess past a question — ambiguity escalates instead of being papered over — and every state change is a message, so the bus doubles as the audit log.

03Worked Example: A Course Module, Brief to Published Package

Click through the pipeline to see what happens at each stage — who acts, what the bus records, and where the human gates sit.

Notice the shape: agents do the high-volume work (drafting, checking, assembling), the orchestrator does the coordination work (planning, routing, verifying), and the human does only the judgment work — setting direction and approving output. That division is the entire point of the architecture.

04Human-in-the-Loop & Guardrails

Autonomy is granted stage by stage, never wholesale. The guardrails are architectural, not aspirational.

🚦 Approval before anything ships

No artifact reaches delivery without an explicit human approval at a gate. Approval is a recorded message on the bus — who approved, what version, when.

💲 Spend & action limits

Each run carries a budget: maximum model spend, maximum retries, and a defined set of permitted actions. Exceeding any limit halts the run and escalates — it never quietly continues.

❓ Escalation over guessing

When an agent hits ambiguity — a missing source, a conflicting instruction, a judgment call — it files a question and pauses. The cost of asking is small; the cost of a confident wrong answer is not.

📜 Full audit log

Because every state change is a bus message, the complete history of any deliverable — brief, drafts, edits, QA flags, approvals — can be replayed end to end. Accountability is a byproduct of the design, not extra work.

🔒 Least-privilege agents

Each worker can only do its job: the writer can't publish, the packager can't edit content, and no agent can approve its own work. Separation of duties, borrowed from classic systems design.

⏸️ Pause & resume anywhere

Any run can be halted at a checkpoint and resumed later — by a person or after an outage — without losing work or repeating completed stages.

05Cost & Reliability Engineering

Multi-agent systems fail in predictable ways. This design treats those failure modes as first-class engineering concerns.

Design principle: reliability in agent systems doesn't come from hoping the model behaves — it comes from pacing, chunking, checkpointing, and verifying, the same disciplines that make any distributed system dependable.

06Metrics That Matter

If this system ran in production, these are the numbers that would prove — or disprove — its value.

Cycle timeBrief → approved package, vs. the manual baseline
Gate pass rate% of packages approved at first human review — the core quality signal
Escalation rateQuestions per run — too few suggests guessing; too many suggests bad briefs
Cost per deliverableTotal model + infrastructure spend per published package
Retry / failure rateErrors per stage — where the pipeline is fragile, in numbers
Human minutesSponsor time per deliverable — the resource the system exists to protect

The headline trade-off the metrics expose: a healthy system spends agent time freely to save human time, while the gate pass rate guarantees the speed never comes at the cost of trust.