> ## Content Index
> Fetch the complete content index at: https://jonathancanales.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Who owns the work when an AI agent participates?
- URL: https://jonathancanales.com/en/who-owns-the-work-when-an-ai-agent-participates/
- Published: 2026-09-29T12:10:00.000Z
- Updated: 2026-10-19T01:03:19.000Z
- Description: Short answer: a person remains accountable for the result. A tool can research, draft, sort or execute bounded steps, but someone must define the outcome, review exceptions, approve consequential actions and correct mistakes.
- Author: Jonathan Canales
- Tags: AI for business, #pair-p09, #en, #Import 2026-09-29 07:49

Who owns the work when an AI agent participates?

0:00

/186

1×

[![Listen on Spotify](https://jonathancanales.com/content/images/2026/10/image-ebade917.jpg)](https://open.spotify.com/show/1RbZ5C2DI8VFR4RA6paicv?ref=jonathancanales.com)

[Read in Spanish →](https://jonathancanales.com/quien-es-responsable-del-trabajo-cuando-participa-un-agente-de-ia/)

**Short answer:** a person remains accountable for the result. A tool can research, draft, sort or execute bounded steps, but someone must define the outcome, review exceptions, approve consequential actions and correct mistakes. If no one knows who receives the complaint when it fails, you do not have a process yet; you have an experiment with a calendar.

## Separate four roles

1. **Process owner:** defines what done means, which rules apply and the risk limit.
2. **Operator or reviewer:** checks outputs, approves actions affecting others and handles exceptions.
3. **Technical team:** sets access, integrates systems, logs activity and maintains the stop control.
4. **Sponsor:** reviews cost, quality and whether the pilot should expand or stop.

One person may fill several roles at a small company. What cannot happen is everyone assuming review belongs to someone else.

![Who signs the work: responsibility is assigned in writing](https://jonathancanales.com/content/images/2026/10/53-doodle-body-ownswork-g.png)

## Write the decisions before adding an agent

In a hypothetical order follow-up, an agent could gather status and draft an update. A reviewer checks the date and recipient before sending. A price change, contractual promise or refund goes to someone with that authority. Define what happens when a system is unavailable too: stop and surface the case rather than inventing a plausible answer.

Microsoft introduced Autopilot for recurring work in its environment and Work IQ for connecting business application context with actions and approvals. Those are vendor descriptions; your company's assignment of responsibility does not come preinstalled. [Microsoft Autopilot](https://blogs.microsoft.com/blog/2026/09/25/introducing-the-new-copilot-with-home-code-and-autopilot/?ref=jonathancanales.com); [Microsoft Work IQ](https://www.microsoft.com/en-us/dynamics-365/blog/it-professional/2026/09/25/work-iq-business-and-workplace-intelligence-in-the-flow-of-work/?ref=jonathancanales.com).

I wrote a guide on how much authority to give that kind of tool: [how much authority should you give Copilot Autopilot in your business](https://jonathancanales.com/en/how-much-authority-should-you-give-copilot-autopilot-in-your-business/).

## Train the team on boundaries, not only prompts

Teach which information must not be shared, how to check an answer against its source, when to reject a draft and how to report failure. Test adversarial cases: instructions hidden in a document, an old record and excessive access. OWASP advises least privilege, explicit approval for high-impact actions and traceability. [OWASP](https://cheatsheetseries.owasp.org/cheatsheets/AI%5FAgent%5FSecurity%5FCheat%5FSheet.html?ref=jonathancanales.com). NIST calls for governing and measuring risks across use. [NIST](https://airc.nist.gov/airmf-resources/airmf/?ref=jonathancanales.com).

## A simple escalation rule

Green: internal drafts and reversible work with controls. Yellow: uncertain answers or missing data require review. Red: money, sensitive data, external commitments or irreversible changes must pause for an authorized person. These colors are a management suggestion, not an official product classification.

The security question has its own map: [who owns security when AI starts taking actions](https://jonathancanales.com/en/who-owns-security-when-ai-starts-taking-actions/).

**Next step:** name one workflow owner and write down who approves its output. Then ask the team, "If the AI is wrong at 5 p.m., whom do we call?" Silence tells you where to start.

## Sources

- [Microsoft: Copilot announcement](https://blogs.microsoft.com/blog/2026/09/25/introducing-the-new-copilot-with-home-code-and-autopilot/?ref=jonathancanales.com) (Sep 25, 2026).
- [Microsoft: Work IQ](https://www.microsoft.com/en-us/dynamics-365/blog/it-professional/2026/09/25/work-iq-business-and-workplace-intelligence-in-the-flow-of-work/?ref=jonathancanales.com) (Sep 25, 2026).
- [OWASP: AI Agent Security](https://cheatsheetseries.owasp.org/cheatsheets/AI%5FAgent%5FSecurity%5FCheat%5FSheet.html?ref=jonathancanales.com).
- [NIST: AI RMF](https://airc.nist.gov/airmf-resources/airmf/?ref=jonathancanales.com).