Research into two-party agentic delivery
Principles and methods relevant across industries; the supporting field study concerns financial services, with transferability assessed in each paper.
AAO-011 / Resilience and Exit
Executives should authorize containment and restoration as separate decisions across the buyer and provider. The mandate must establish who can stop harmful action, how acceptable service continues, and who can approve a controlled restart.
AAO-012 / Data, Technology, and Security
Vendor privacy managers should trace personal information through the stores and tools an agent uses. A processing schedule becomes operational only when both firms can locate information, apply instructions, and evidence correction or deletion where required.
AAO-005 / Commercial and Vendor Management
Provider deal leaders should price the authority and recovery obligations they accept. A defensible offer connects the service promise to buyer prerequisites, provider controls, dependencies, and the losses each party agrees to bear.
AAO-006 / Governance and Accountability
The buyer should approve a bounded grant of business authority for every outsourced agent. That grant must survive tool use, further delegation, configuration change, and revocation across both organizations.
AAO-007 / Resilience and Exit
Service managers should test emergency suspension as a sequence of observable events. A contractual stop right is usable only when the command reaches every relevant action path and the firms can establish what has stopped.
AAO-002 / Data, Technology, and Security
Outsourcing security managers should test whether untrusted supplier content can cause a trusted agent to act outside its mandate. The test must follow content through retrieval, memory, tool selection, and the final business action.
AAO-003 / Data, Technology, and Security
Executives should approve a processing activity map before delegating work to provider agents. Responsibility follows the actual purposes and decisions in the chain, while contractual labels alone cannot establish who controls personal information.
AAO-123 / Delivery and Operations
Agentic AI changes the inputs, decisions, review, exceptions, and acceptance surrounding its assigned task. Buyers and providers should map and redesign the complete delivery method, then prove its business outcome before expanding autonomy.
AAO-124 / People and Capability
Managing agentic outsourcing requires people in both firms to authorize work, challenge results, accept outcomes, disclose interventions, and recover the service. Train participating roles for those duties and test the relationship through joint rehearsal before expanding consequential authority.
AAO-125 / Economics and Value
Measure the outsourced function before and after transition on a comparable price-and-performance basis. Establish full buyer cost and captured benefits, account for the investment, and repair the delivery constraints that consume value. A cheaper agent task or released capacity alone does not establish ROI.