Agent Orchestration Architecture
Design in escalating complexity
Choose the lightest design that satisfies the outcome:
- Deterministic program or promptless automation.
- One agent with bounded tools and structured output.
- One manager agent that calls specialists as bounded tools.
- Handoffs only when a specialist should own the rest of the interaction.
- Durable workflow runtime only when work survives interruptions, waits, or external callbacks.
Do not use an agent swarm as a substitute for an owned workflow.
Define the operating contract
Before implementation, record:
- outcome, success evidence, and named final-output owner;
- inputs, output schema, permitted tools, and forbidden actions;
- model and reasoning choice by decision difficulty, not task size;
- state owner, memory lifetime, tenant boundary, and source of truth;
- approval checkpoints, budgets, timeouts, stop conditions, and escalation;
- retry, idempotency, compensation, and human-handoff behavior.
Parallelize only independent work whose outputs can be reconciled without conflicting writes.
Make control explicit
- Use a manager when one agent must enforce shared policy, combine specialist work, or own the user-facing answer.
- Use a handoff when the specialist needs a focused interaction and clear transfer of responsibility.
- Pass structured task packets, not vague conversation history. Minimize context to the specialist's need.
- Delegate only a concrete, independent workstream with a defined output. Parallelism can reduce latency, but every subagent performs separate model and tool work and therefore increases usage.
- Designing a delegation architecture does not authorize spawning agents. Follow current global and native tool constraints: preserve the selected parent model/effort and apply the current global child-model and reasoning policy. Do not freeze a session-specific model or effort into this specialist. Use only supported context controls and sufficient task context; do not override native inheritance constraints for a preferred packet format.
- Give each specialist the exact sources, constraints, output schema, stopping condition, and useful result-size limit. Ask for distilled findings instead of raw logs or copied source material.
- Keep the parent thread as the canonical decision owner. Do not spawn several agents to reread the same corpus, and do not use subagents merely to avoid doing a bounded task locally.
- Use inherited authorization for routine reversible in-scope writes, drafts and configuration. Require explicit authorization for actual sends, spending, binding commitments, publication and materially irreversible actions at their real boundaries; do not reopen an already clear authorization.
- Design every loop with a maximum attempt count and a useful terminal state.
Required outputs
For a material architecture request, produce the smallest useful combination of an execution diagram, role/tool matrix, state/approval map, operating limits, and evaluation plan. Do not create every artifact for a simple routing decision. Route persistent-context design to $agent-memory-provenance; route quality and release testing to $agent-evaluation-operations; route external events to $integration-contract-reliability.
Optional specialists
For external events, integration-contract-reliability is optional. Without it, define typed inputs/outputs, authentication, idempotency, retries, duplicate handling, uncertain-effect reconciliation and the actual success boundary in the project contract.
1---2name: agent-orchestration-architecture3description: Resolve agent ownership and handoff design.4---56# Agent Orchestration Architecture78## Design in escalating complexity910Choose the lightest design that satisfies the outcome:11121. Deterministic program or promptless automation.132. One agent with bounded tools and structured output.143. One manager agent that calls specialists as bounded tools.154. Handoffs only when a specialist should own the rest of the interaction.165. Durable workflow runtime only when work survives interruptions, waits, or external callbacks.1718Do not use an agent swarm as a substitute for an owned workflow.1920## Define the operating contract2122Before implementation, record:2324- outcome, success evidence, and named final-output owner;25- inputs, output schema, permitted tools, and forbidden actions;26- model and reasoning choice by decision difficulty, not task size;27- state owner, memory lifetime, tenant boundary, and source of truth;28- approval checkpoints, budgets, timeouts, stop conditions, and escalation;29- retry, idempotency, compensation, and human-handoff behavior.3031Parallelize only independent work whose outputs can be reconciled without conflicting writes.3233## Make control explicit3435- Use a manager when one agent must enforce shared policy, combine specialist work, or own the user-facing answer.36- Use a handoff when the specialist needs a focused interaction and clear transfer of responsibility.37- Pass structured task packets, not vague conversation history. Minimize context to the specialist's need.38- Delegate only a concrete, independent workstream with a defined output. Parallelism can reduce latency, but every subagent performs separate model and tool work and therefore increases usage.39- Designing a delegation architecture does not authorize spawning agents. Follow current global and native tool constraints: preserve the selected parent model/effort and apply the current global child-model and reasoning policy. Do not freeze a session-specific model or effort into this specialist. Use only supported context controls and sufficient task context; do not override native inheritance constraints for a preferred packet format.40- Give each specialist the exact sources, constraints, output schema, stopping condition, and useful result-size limit. Ask for distilled findings instead of raw logs or copied source material.41- Keep the parent thread as the canonical decision owner. Do not spawn several agents to reread the same corpus, and do not use subagents merely to avoid doing a bounded task locally.42- Use inherited authorization for routine reversible in-scope writes, drafts and configuration. Require explicit authorization for actual sends, spending, binding commitments, publication and materially irreversible actions at their real boundaries; do not reopen an already clear authorization.43- Design every loop with a maximum attempt count and a useful terminal state.4445## Required outputs4647For a material architecture request, produce the smallest useful combination of an execution diagram, role/tool matrix, state/approval map, operating limits, and evaluation plan. Do not create every artifact for a simple routing decision. Route persistent-context design to `$agent-memory-provenance`; route quality and release testing to `$agent-evaluation-operations`; route external events to `$integration-contract-reliability`.4849## Optional specialists5051For external events, integration-contract-reliability is optional. Without it, define typed inputs/outputs, authentication, idempotency, retries, duplicate handling, uncertain-effect reconciliation and the actual success boundary in the project contract.